@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/staff/api/timesheets/time-entries/[id]/segments/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/staff/api/timesheets/time-entries/%5Bid%5D/segments/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { LockMode } from '@mikro-orm/core'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeEntry, StaffTimeEntrySegment } from '../../../../../data/entities'\nimport { staffTimeEntrySegmentCreateSchema } from '../../../../../data/validators'\nimport { getStaffMemberByUserId } from '../../../../../lib/staffMemberResolver'\nimport {\n  STAFF_TIME_TRACKING_RESOURCE_KINDS,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../../guards'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { emitStaffEvent } from '../../../../../events'\nimport { runTimesheetInterceptors } from '../../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff')\n\nfunction extractEntryIdFromUrl(request?: Request): string | null {\n  if (!request?.url) return null\n  try {\n    const url = new URL(request.url)\n    const match = url.pathname.match(/\\/time-entries\\/([^/]+)\\/segments/)\n    return match?.[1] ?? null\n  } catch {\n    return null\n  }\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, { error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.') })\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const entryId = extractEntryIdFromUrl(req)\n    if (!entryId) {\n      throw new CrudHttpError(400, { error: translate('staff.timesheets.errors.missingEntryId', 'Missing entry ID.') })\n    }\n\n    const entry = await findOneWithDecryption(\n      em,\n      StaffTimeEntry,\n      { id: entryId, tenantId, organizationId, deletedAt: null },\n      {},\n      scopeCtx,\n    )\n    if (!entry) {\n      throw new CrudHttpError(404, { error: translate('staff.timesheets.errors.entryNotFound', 'Time entry not found.') })\n    }\n\n    const staffMember = await getStaffMemberByUserId(em, auth.sub, tenantId, organizationId)\n    if (!staffMember || entry.staffMemberId !== staffMember.id) {\n      throw new CrudHttpError(403, { error: translate('staff.timesheets.errors.notOwner', 'You can only manage your own time entries.') })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const input = parseScopedCommandInput(\n      staffTimeEntrySegmentCreateSchema,\n      { ...session.body, timeEntryId: entryId },\n      {\n        container,\n        auth,\n        organizationScope: scope,\n        selectedOrganizationId: organizationId,\n        organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n        request: req,\n      },\n      translate,\n    )\n\n    const guardResult = await runStaffMutationGuards(\n      container,\n      {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntrySegment,\n        resourceId: entry.id,\n        operation: 'create',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        mutationPayload: input as unknown as Record<string, unknown>,\n      },\n    )\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    // Create the segment inside a single transaction with a PESSIMISTIC_WRITE\n    // lock on the parent time entry row, so segment writes serialize against\n    // concurrent timer-stop / segment mutations that recompute the entry from a\n    // shared snapshot (issue #2416).\n    const segment = await em.transactional(async (trx) => {\n      const lockedEntry = await findOneWithDecryption(\n        trx,\n        StaffTimeEntry,\n        { id: entryId, tenantId, organizationId, deletedAt: null },\n        { lockMode: LockMode.PESSIMISTIC_WRITE },\n        scopeCtx,\n      )\n      if (!lockedEntry) {\n        throw new CrudHttpError(404, { error: translate('staff.timesheets.errors.entryNotFound', 'Time entry not found.') })\n      }\n\n      const segmentData = {\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n        timeEntryId: input.timeEntryId,\n        startedAt: input.startedAt,\n        endedAt: input.endedAt ?? null,\n        segmentType: input.segmentType,\n      }\n      const created = trx.create(StaffTimeEntrySegment, segmentData as never)\n\n      await trx.flush()\n      return created\n    })\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntrySegment,\n        resourceId: segment.id,\n        operation: 'create',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    void emitStaffEvent('staff.timesheets.time_entry_segment.created', {\n      id: segment.id,\n      timeEntryId: segment.timeEntryId,\n      tenantId,\n      organizationId,\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit time_entry_segment.created failed', { err })\n    })\n\n    return session.respond(201, {\n      id: segment.id,\n      timeEntryId: segment.timeEntryId,\n      startedAt: segment.startedAt,\n      endedAt: segment.endedAt ?? null,\n      segmentType: segment.segmentType,\n      createdAt: segment.createdAt,\n    })\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.segments.create failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.segmentCreate', 'Failed to create time entry segment.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Add a segment to a time entry',\n  methods: {\n    POST: {\n      summary: 'Add a segment to a time entry',\n      description: 'Creates a new work or break segment for the specified time entry.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeEntrySegmentCreateSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Segment created',\n          schema: z.object({\n            id: z.string().uuid(),\n            timeEntryId: z.string().uuid(),\n            startedAt: z.string(),\n            endedAt: z.string().nullable(),\n            segmentType: z.enum(['work', 'break']),\n            createdAt: z.string(),\n          }),\n        },\n        { status: 404, description: 'Time entry not found', schema: z.object({ error: z.string() }) },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AACxC,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAE7B,SAAS,gBAAgB;AAEzB,SAAS,gBAAgB,6BAA6B;AACtD,SAAS,yCAAyC;AAClD,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAC/B,SAAS,gCAAgC;AAEzC,MAAM,SAAS,aAAa,OAAO;AAEnC,SAAS,sBAAsB,SAAkC;AAC/D,MAAI,CAAC,SAAS,IAAK,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,IAAI,SAAS,MAAM,mCAAmC;AACpE,WAAO,QAAQ,CAAC,KAAK;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAEzG,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,uCAAuC,EAAE,CAAC;AAAA,IACzH;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,UAAU,sBAAsB,GAAG;AACzC,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,mBAAmB,EAAE,CAAC;AAAA,IAClH;AAEA,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,SAAS,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACzD,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,uBAAuB,EAAE,CAAC;AAAA,IACrH;AAEA,UAAM,cAAc,MAAM,uBAAuB,IAAI,KAAK,KAAK,UAAU,cAAc;AACvF,QAAI,CAAC,eAAe,MAAM,kBAAkB,YAAY,IAAI;AAC1D,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,oCAAoC,4CAA4C,EAAE,CAAC;AAAA,IACrI;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,MAC/D,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA,EAAE,GAAG,QAAQ,MAAM,aAAa,QAAQ;AAAA,MACxC;AAAA,QACE;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,QAClE,SAAS;AAAA,MACX;AAAA,MACA;AAAA,IACF;AAEA,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,iBAAiB;AAAA,MACnB;AAAA,IACF;AACA,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAMA,UAAM,UAAU,MAAM,GAAG,cAAc,OAAO,QAAQ;AACpD,YAAM,cAAc,MAAM;AAAA,QACxB;AAAA,QACA;AAAA,QACA,EAAE,IAAI,SAAS,UAAU,gBAAgB,WAAW,KAAK;AAAA,QACzD,EAAE,UAAU,SAAS,kBAAkB;AAAA,QACvC;AAAA,MACF;AACA,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,uBAAuB,EAAE,CAAC;AAAA,MACrH;AAEA,YAAM,cAAc;AAAA,QAClB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,aAAa,MAAM;AAAA,QACnB,WAAW,MAAM;AAAA,QACjB,SAAS,MAAM,WAAW;AAAA,QAC1B,aAAa,MAAM;AAAA,MACrB;AACA,YAAM,UAAU,IAAI,OAAO,uBAAuB,WAAoB;AAEtE,YAAM,IAAI,MAAM;AAChB,aAAO;AAAA,IACT,CAAC;AAED,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY,QAAQ;AAAA,QACpB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,SAAK,eAAe,+CAA+C;AAAA,MACjE,IAAI,QAAQ;AAAA,MACZ,aAAa,QAAQ;AAAA,MACrB;AAAA,MACA;AAAA,IACF,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,2DAA2D,EAAE,IAAI,CAAC;AAAA,IACjF,CAAC;AAED,WAAO,QAAQ,QAAQ,KAAK;AAAA,MAC1B,IAAI,QAAQ;AAAA,MACZ,aAAa,QAAQ;AAAA,MACrB,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ,WAAW;AAAA,MAC5B,aAAa,QAAQ;AAAA,MACrB,WAAW,QAAQ;AAAA,IACrB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,wDAAwD,EAAE,IAAI,CAAC;AAC5E,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yCAAyC,sCAAsC,EAAE;AAAA,MACpG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,YACpB,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,YAC7B,WAAW,EAAE,OAAO;AAAA,YACpB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,YAC7B,aAAa,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC;AAAA,YACrC,WAAW,EAAE,OAAO;AAAA,UACtB,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAC5F,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { LockMode } from '@mikro-orm/core'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeEntry, StaffTimeEntrySegment } from '../../../../../data/entities'\nimport { staffTimeEntrySegmentCreateSchema } from '../../../../../data/validators'\nimport { getStaffMemberByUserId } from '../../../../../lib/staffMemberResolver'\nimport {\n  STAFF_TIME_TRACKING_RESOURCE_KINDS,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../../guards'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { emitStaffEvent } from '../../../../../events'\nimport { runTimesheetInterceptors } from '../../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff')\n\nfunction extractEntryIdFromUrl(request?: Request): string | null {\n  if (!request?.url) return null\n  try {\n    const url = new URL(request.url)\n    const match = url.pathname.match(/\\/time-entries\\/([^/]+)\\/segments/)\n    return match?.[1] ?? null\n  } catch {\n    return null\n  }\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, { error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.') })\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const entryId = extractEntryIdFromUrl(req)\n    if (!entryId) {\n      throw new CrudHttpError(400, { error: translate('staff.timesheets.errors.missingEntryId', 'Missing entry ID.') })\n    }\n\n    const entry = await findOneWithDecryption(\n      em,\n      StaffTimeEntry,\n      { id: entryId, tenantId, organizationId, deletedAt: null },\n      {},\n      scopeCtx,\n    )\n    if (!entry) {\n      throw new CrudHttpError(404, { error: translate('staff.timesheets.errors.entryNotFound', 'Time entry not found.') })\n    }\n\n    const staffMember = await getStaffMemberByUserId(em, auth.sub, tenantId, organizationId)\n    if (!staffMember || entry.staffMemberId !== staffMember.id) {\n      throw new CrudHttpError(403, { error: translate('staff.timesheets.errors.notOwner', 'You can only manage your own time entries.') })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const input = parseScopedCommandInput(\n      staffTimeEntrySegmentCreateSchema,\n      { ...session.body, timeEntryId: entryId },\n      {\n        container,\n        auth,\n        organizationScope: scope,\n        selectedOrganizationId: organizationId,\n        organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n        request: req,\n      },\n      translate,\n    )\n\n    const guardResult = await runStaffMutationGuards(\n      container,\n      {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntrySegment,\n        resourceId: entry.id,\n        operation: 'create',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        mutationPayload: input as unknown as Record<string, unknown>,\n      },\n    )\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    // Create the segment inside a single transaction with a PESSIMISTIC_WRITE\n    // lock on the parent time entry row, so segment writes serialize against\n    // concurrent timer-stop / segment mutations that recompute the entry from a\n    // shared snapshot (issue #2416).\n    const segment = await em.transactional(async (trx) => {\n      const lockedEntry = await findOneWithDecryption(\n        trx,\n        StaffTimeEntry,\n        { id: entryId, tenantId, organizationId, deletedAt: null },\n        { lockMode: LockMode.PESSIMISTIC_WRITE },\n        scopeCtx,\n      )\n      if (!lockedEntry) {\n        throw new CrudHttpError(404, { error: translate('staff.timesheets.errors.entryNotFound', 'Time entry not found.') })\n      }\n\n      const segmentData = {\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n        timeEntryId: input.timeEntryId,\n        startedAt: input.startedAt,\n        endedAt: input.endedAt ?? null,\n        segmentType: input.segmentType,\n      }\n      const created = trx.create(StaffTimeEntrySegment, segmentData as never)\n\n      await trx.flush()\n      return created\n    })\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntrySegment,\n        resourceId: segment.id,\n        operation: 'create',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    void emitStaffEvent('staff.timesheets.time_entry_segment.created', {\n      id: segment.id,\n      timeEntryId: segment.timeEntryId,\n      tenantId,\n      organizationId,\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit time_entry_segment.created failed', { err })\n    })\n\n    return session.respond(201, {\n      id: segment.id,\n      timeEntryId: segment.timeEntryId,\n      startedAt: segment.startedAt,\n      endedAt: segment.endedAt ?? null,\n      segmentType: segment.segmentType,\n      createdAt: segment.createdAt,\n    })\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.segments.create failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.segmentCreate', 'Failed to create time entry segment.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Add a segment to a time entry',\n  methods: {\n    POST: {\n      summary: 'Add a segment to a time entry',\n      description: 'Creates a new work or break segment for the specified time entry.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeEntrySegmentCreateSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Segment created',\n          schema: z.object({\n            id: z.string().uuid(),\n            timeEntryId: z.string().uuid(),\n            startedAt: z.string(),\n            endedAt: z.string().nullable(),\n            segmentType: z.enum(['work', 'break']),\n            createdAt: z.string(),\n          }),\n        },\n        { status: 404, description: 'Time entry not found', schema: z.object({ error: z.string() }) },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AACxC,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAE7B,SAAS,gBAAgB;AAEzB,SAAS,gBAAgB,6BAA6B;AACtD,SAAS,yCAAyC;AAClD,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAC/B,SAAS,gCAAgC;AAEzC,MAAM,SAAS,aAAa,OAAO;AAEnC,SAAS,sBAAsB,SAAkC;AAC/D,MAAI,CAAC,SAAS,IAAK,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,IAAI,SAAS,MAAM,mCAAmC;AACpE,WAAO,QAAQ,CAAC,KAAK;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAEzG,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,uCAAuC,EAAE,CAAC;AAAA,IACzH;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,UAAU,sBAAsB,GAAG;AACzC,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,mBAAmB,EAAE,CAAC;AAAA,IAClH;AAEA,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,SAAS,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACzD,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,uBAAuB,EAAE,CAAC;AAAA,IACrH;AAEA,UAAM,cAAc,MAAM,uBAAuB,IAAI,KAAK,KAAK,UAAU,cAAc;AACvF,QAAI,CAAC,eAAe,MAAM,kBAAkB,YAAY,IAAI;AAC1D,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,oCAAoC,4CAA4C,EAAE,CAAC;AAAA,IACrI;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,MAC/D,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA,EAAE,GAAG,QAAQ,MAAM,aAAa,QAAQ;AAAA,MACxC;AAAA,QACE;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,QAClE,SAAS;AAAA,MACX;AAAA,MACA;AAAA,IACF;AAEA,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,iBAAiB;AAAA,MACnB;AAAA,IACF;AACA,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAMA,UAAM,UAAU,MAAM,GAAG,cAAc,OAAO,QAAQ;AACpD,YAAM,cAAc,MAAM;AAAA,QACxB;AAAA,QACA;AAAA,QACA,EAAE,IAAI,SAAS,UAAU,gBAAgB,WAAW,KAAK;AAAA,QACzD,EAAE,UAAU,SAAS,kBAAkB;AAAA,QACvC;AAAA,MACF;AACA,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,uBAAuB,EAAE,CAAC;AAAA,MACrH;AAEA,YAAM,cAAc;AAAA,QAClB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,aAAa,MAAM;AAAA,QACnB,WAAW,MAAM;AAAA,QACjB,SAAS,MAAM,WAAW;AAAA,QAC1B,aAAa,MAAM;AAAA,MACrB;AACA,YAAM,UAAU,IAAI,OAAO,uBAAuB,WAAoB;AAEtE,YAAM,IAAI,MAAM;AAChB,aAAO;AAAA,IACT,CAAC;AAED,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY,QAAQ;AAAA,QACpB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,SAAK,eAAe,+CAA+C;AAAA,MACjE,IAAI,QAAQ;AAAA,MACZ,aAAa,QAAQ;AAAA,MACrB;AAAA,MACA;AAAA,IACF,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,2DAA2D,EAAE,IAAI,CAAC;AAAA,IACjF,CAAC;AAED,WAAO,QAAQ,QAAQ,KAAK;AAAA,MAC1B,IAAI,QAAQ;AAAA,MACZ,aAAa,QAAQ;AAAA,MACrB,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ,WAAW;AAAA,MAC5B,aAAa,QAAQ;AAAA,MACrB,WAAW,QAAQ;AAAA,IACrB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,wDAAwD,EAAE,IAAI,CAAC;AAC5E,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yCAAyC,sCAAsC,EAAE;AAAA,MACpG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,YACpB,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,YAC7B,WAAW,EAAE,OAAO;AAAA,YACpB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,YAC7B,aAAa,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC;AAAA,YACrC,WAAW,EAAE,OAAO;AAAA,UACtB,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAC5F,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/timesheets/time-entries/[id]/timer-start/route.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
@@ -41,7 +42,7 @@ async function POST(req) {
     if (!auth) throw new CrudHttpError(401, { error: translate("staff.errors.unauthorized", "Unauthorized") });
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
     const tenantId = scope?.tenantId ?? auth.tenantId ?? null;
-    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null;
     if (!tenantId || !organizationId) {
       throw new CrudHttpError(400, { error: translate("staff.errors.missingScope", "Missing tenant or organization scope.") });
     }

package/dist/modules/staff/api/timesheets/time-entries/[id]/timer-start/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/staff/api/timesheets/time-entries/%5Bid%5D/timer-start/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { LockMode } from '@mikro-orm/core'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeEntry, StaffTimeEntrySegment } from '../../../../../data/entities'\nimport { assertTimeEntryUnlocked } from '../../../../../commands/timesheets-entries'\nimport { getStaffMemberByUserId } from '../../../../../lib/staffMemberResolver'\nimport {\n  STAFF_TIME_TRACKING_RESOURCE_KINDS,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../../guards'\nimport { emitStaffEvent } from '../../../../../events'\nimport { invalidateStaffTimeEntryCache } from '../../../../../lib/timesheets/timeEntryCacheInvalidation'\nimport { runTimesheetInterceptors } from '../../../_shared/withTimesheetInterceptors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\nfunction extractEntryIdFromUrl(request?: Request): string | null {\n  if (!request?.url) return null\n  try {\n    const url = new URL(request.url)\n    const match = url.pathname.match(/\\/time-entries\\/([^/]+)\\/timer-start/)\n    return match?.[1] ?? null\n  } catch {\n    return null\n  }\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, { error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.') })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const entryId = extractEntryIdFromUrl(req)\n    if (!entryId) {\n      throw new CrudHttpError(400, { error: translate('staff.timesheets.errors.missingEntryId', 'Missing entry ID.') })\n    }\n\n    const entry = await findOneWithDecryption(\n      em,\n      StaffTimeEntry,\n      { id: entryId, tenantId, organizationId, deletedAt: null },\n      {},\n      scopeCtx,\n    )\n    if (!entry) {\n      throw new CrudHttpError(404, { error: translate('staff.timesheets.errors.entryNotFound', 'Time entry not found.') })\n    }\n\n    const staffMember = await getStaffMemberByUserId(em, auth.sub, tenantId, organizationId)\n    if (!staffMember || entry.staffMemberId !== staffMember.id) {\n      throw new CrudHttpError(403, { error: translate('staff.timesheets.errors.notOwner', 'You can only manage your own time entries.') })\n    }\n\n    // Running a timer on a frozen entry is only ever the first half of changing\n    // its duration, so it is refused at the same gate the entries command uses.\n    assertTimeEntryUnlocked(entry, translate)\n\n    if (entry.startedAt) {\n      return NextResponse.json(\n        { error: translate('staff.timesheets.errors.timerAlreadyStarted', 'Timer is already started for this entry.') },\n        { status: 409 },\n      )\n    }\n\n    const guardResult = await runStaffMutationGuards(\n      container,\n      {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: entry.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      },\n    )\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    // Start the timer inside a single transaction with a PESSIMISTIC_WRITE lock\n    // on the time entry row, re-checking startedAt under the lock so two\n    // concurrent timer-start calls on the same entry cannot both create an\n    // initial work segment (issue #2416).\n    const now = await em.transactional(async (trx) => {\n      const lockedEntry = await findOneWithDecryption(\n        trx,\n        StaffTimeEntry,\n        { id: entryId, tenantId, organizationId, deletedAt: null },\n        { lockMode: LockMode.PESSIMISTIC_WRITE },\n        scopeCtx,\n      )\n      if (!lockedEntry) {\n        throw new CrudHttpError(404, { error: translate('staff.timesheets.errors.entryNotFound', 'Time entry not found.') })\n      }\n      // Re-checked under the row lock: a report close committed between the\n      // pre-flight read and this transaction would otherwise slip through.\n      assertTimeEntryUnlocked(lockedEntry, translate)\n      if (lockedEntry.startedAt) {\n        throw new CrudHttpError(409, {\n          error: translate('staff.timesheets.errors.timerAlreadyStarted', 'Timer is already started for this entry.'),\n        })\n      }\n\n      // Single-active-timer invariant (issue #2855): reject the start when the\n      // staff member already has another running entry (started_at set,\n      // ended_at null). Without this guard a second surface (dashboard widget,\n      // another tab) could create and start a parallel timer, leaving two\n      // concurrent running entries and the \"stopped timer comes back running\"\n      // symptom reported in #2456.\n      const otherRunningEntry = await findOneWithDecryption(\n        trx,\n        StaffTimeEntry,\n        {\n          tenantId,\n          organizationId,\n          staffMemberId: lockedEntry.staffMemberId,\n          id: { $ne: lockedEntry.id },\n          startedAt: { $ne: null },\n          endedAt: null,\n          deletedAt: null,\n        },\n        {},\n        scopeCtx,\n      )\n      if (otherRunningEntry) {\n        throw new CrudHttpError(409, {\n          error: translate(\n            'staff.timesheets.errors.timerAlreadyRunning',\n            'Another timer is already running. Stop it before starting a new one.',\n          ),\n        })\n      }\n\n      const startedAt = new Date()\n      lockedEntry.startedAt = startedAt\n      lockedEntry.source = 'timer'\n\n      const segmentData = {\n        tenantId,\n        organizationId,\n        timeEntryId: lockedEntry.id,\n        startedAt,\n        segmentType: 'work' as const,\n      }\n      trx.create(StaffTimeEntrySegment, segmentData as never)\n\n      await trx.flush()\n      return startedAt\n    })\n\n    await invalidateStaffTimeEntryCache(\n      container,\n      { id: entry.id, organizationId: entry.organizationId, tenantId: entry.tenantId },\n      tenantId,\n      'timer_started',\n    )\n\n    void emitStaffEvent('staff.timesheets.time_entry.timer_started', {\n      id: entry.id,\n      staffMemberId: entry.staffMemberId,\n      tenantId: entry.tenantId,\n      organizationId: entry.organizationId,\n      startedAt: now.toISOString(),\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit timer_started failed', { err })\n    })\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: entry.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    return session.respond(200, { ok: true })\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.timer-start failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.timerStart', 'Failed to start timer.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Start timer for a time entry',\n  methods: {\n    POST: {\n      summary: 'Start timer for a time entry',\n      description: 'Starts the timer on a time entry by setting startedAt and creating an initial work segment.',\n      responses: [\n        { status: 200, description: 'Timer started', schema: z.object({ ok: z.literal(true) }) },\n        { status: 404, description: 'Time entry not found', schema: z.object({ error: z.string() }) },\n        {\n          status: 409,\n          description:\n            'Timer already started, another timer is already running for this staff member, or the entry is locked in a closed report (code time_entry_locked)',\n          schema: z.object({ error: z.string(), code: z.string().optional(), lockedReportId: z.string().uuid().nullable().optional() }),\n        },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AAEtC,SAAS,gBAAgB;AAEzB,SAAS,gBAAgB,6BAA6B;AACtD,SAAS,+BAA+B;AACxC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAEnC,SAAS,sBAAsB,SAAkC;AAC/D,MAAI,CAAC,SAAS,IAAK,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,IAAI,SAAS,MAAM,sCAAsC;AACvE,WAAO,QAAQ,CAAC,KAAK;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAEzG,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,uCAAuC,EAAE,CAAC;AAAA,IACzH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,IACjE,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,UAAU,sBAAsB,GAAG;AACzC,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,mBAAmB,EAAE,CAAC;AAAA,IAClH;AAEA,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,SAAS,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACzD,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,uBAAuB,EAAE,CAAC;AAAA,IACrH;AAEA,UAAM,cAAc,MAAM,uBAAuB,IAAI,KAAK,KAAK,UAAU,cAAc;AACvF,QAAI,CAAC,eAAe,MAAM,kBAAkB,YAAY,IAAI;AAC1D,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,oCAAoC,4CAA4C,EAAE,CAAC;AAAA,IACrI;AAIA,4BAAwB,OAAO,SAAS;AAExC,QAAI,MAAM,WAAW;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,+CAA+C,0CAA0C,EAAE;AAAA,QAC9G,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB;AAAA,IACF;AACA,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAMA,UAAM,MAAM,MAAM,GAAG,cAAc,OAAO,QAAQ;AAChD,YAAM,cAAc,MAAM;AAAA,QACxB;AAAA,QACA;AAAA,QACA,EAAE,IAAI,SAAS,UAAU,gBAAgB,WAAW,KAAK;AAAA,QACzD,EAAE,UAAU,SAAS,kBAAkB;AAAA,QACvC;AAAA,MACF;AACA,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,uBAAuB,EAAE,CAAC;AAAA,MACrH;AAGA,8BAAwB,aAAa,SAAS;AAC9C,UAAI,YAAY,WAAW;AACzB,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO,UAAU,+CAA+C,0CAA0C;AAAA,QAC5G,CAAC;AAAA,MACH;AAQA,YAAM,oBAAoB,MAAM;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,eAAe,YAAY;AAAA,UAC3B,IAAI,EAAE,KAAK,YAAY,GAAG;AAAA,UAC1B,WAAW,EAAE,KAAK,KAAK;AAAA,UACvB,SAAS;AAAA,UACT,WAAW;AAAA,QACb;AAAA,QACA,CAAC;AAAA,QACD;AAAA,MACF;AACA,UAAI,mBAAmB;AACrB,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AAEA,YAAM,YAAY,oBAAI,KAAK;AAC3B,kBAAY,YAAY;AACxB,kBAAY,SAAS;AAErB,YAAM,cAAc;AAAA,QAClB;AAAA,QACA;AAAA,QACA,aAAa,YAAY;AAAA,QACzB;AAAA,QACA,aAAa;AAAA,MACf;AACA,UAAI,OAAO,uBAAuB,WAAoB;AAEtD,YAAM,IAAI,MAAM;AAChB,aAAO;AAAA,IACT,CAAC;AAED,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,IAAI,MAAM,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,MAC/E;AAAA,MACA;AAAA,IACF;AAEA,SAAK,eAAe,6CAA6C;AAAA,MAC/D,IAAI,MAAM;AAAA,MACV,eAAe,MAAM;AAAA,MACrB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,WAAW,IAAI,YAAY;AAAA,IAC7B,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,8CAA8C,EAAE,IAAI,CAAC;AAAA,IACpE,CAAC;AAED,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EAC1C,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,oDAAoD,EAAE,IAAI,CAAC;AACxE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,sCAAsC,wBAAwB,EAAE;AAAA,MACnF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAC5F;AAAA,UACE,QAAQ;AAAA,UACR,aACE;AAAA,UACF,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,GAAG,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAAA,QAC9H;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { LockMode } from '@mikro-orm/core'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeEntry, StaffTimeEntrySegment } from '../../../../../data/entities'\nimport { assertTimeEntryUnlocked } from '../../../../../commands/timesheets-entries'\nimport { getStaffMemberByUserId } from '../../../../../lib/staffMemberResolver'\nimport {\n  STAFF_TIME_TRACKING_RESOURCE_KINDS,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../../guards'\nimport { emitStaffEvent } from '../../../../../events'\nimport { invalidateStaffTimeEntryCache } from '../../../../../lib/timesheets/timeEntryCacheInvalidation'\nimport { runTimesheetInterceptors } from '../../../_shared/withTimesheetInterceptors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\nfunction extractEntryIdFromUrl(request?: Request): string | null {\n  if (!request?.url) return null\n  try {\n    const url = new URL(request.url)\n    const match = url.pathname.match(/\\/time-entries\\/([^/]+)\\/timer-start/)\n    return match?.[1] ?? null\n  } catch {\n    return null\n  }\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, { error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.') })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const entryId = extractEntryIdFromUrl(req)\n    if (!entryId) {\n      throw new CrudHttpError(400, { error: translate('staff.timesheets.errors.missingEntryId', 'Missing entry ID.') })\n    }\n\n    const entry = await findOneWithDecryption(\n      em,\n      StaffTimeEntry,\n      { id: entryId, tenantId, organizationId, deletedAt: null },\n      {},\n      scopeCtx,\n    )\n    if (!entry) {\n      throw new CrudHttpError(404, { error: translate('staff.timesheets.errors.entryNotFound', 'Time entry not found.') })\n    }\n\n    const staffMember = await getStaffMemberByUserId(em, auth.sub, tenantId, organizationId)\n    if (!staffMember || entry.staffMemberId !== staffMember.id) {\n      throw new CrudHttpError(403, { error: translate('staff.timesheets.errors.notOwner', 'You can only manage your own time entries.') })\n    }\n\n    // Running a timer on a frozen entry is only ever the first half of changing\n    // its duration, so it is refused at the same gate the entries command uses.\n    assertTimeEntryUnlocked(entry, translate)\n\n    if (entry.startedAt) {\n      return NextResponse.json(\n        { error: translate('staff.timesheets.errors.timerAlreadyStarted', 'Timer is already started for this entry.') },\n        { status: 409 },\n      )\n    }\n\n    const guardResult = await runStaffMutationGuards(\n      container,\n      {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: entry.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      },\n    )\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    // Start the timer inside a single transaction with a PESSIMISTIC_WRITE lock\n    // on the time entry row, re-checking startedAt under the lock so two\n    // concurrent timer-start calls on the same entry cannot both create an\n    // initial work segment (issue #2416).\n    const now = await em.transactional(async (trx) => {\n      const lockedEntry = await findOneWithDecryption(\n        trx,\n        StaffTimeEntry,\n        { id: entryId, tenantId, organizationId, deletedAt: null },\n        { lockMode: LockMode.PESSIMISTIC_WRITE },\n        scopeCtx,\n      )\n      if (!lockedEntry) {\n        throw new CrudHttpError(404, { error: translate('staff.timesheets.errors.entryNotFound', 'Time entry not found.') })\n      }\n      // Re-checked under the row lock: a report close committed between the\n      // pre-flight read and this transaction would otherwise slip through.\n      assertTimeEntryUnlocked(lockedEntry, translate)\n      if (lockedEntry.startedAt) {\n        throw new CrudHttpError(409, {\n          error: translate('staff.timesheets.errors.timerAlreadyStarted', 'Timer is already started for this entry.'),\n        })\n      }\n\n      // Single-active-timer invariant (issue #2855): reject the start when the\n      // staff member already has another running entry (started_at set,\n      // ended_at null). Without this guard a second surface (dashboard widget,\n      // another tab) could create and start a parallel timer, leaving two\n      // concurrent running entries and the \"stopped timer comes back running\"\n      // symptom reported in #2456.\n      const otherRunningEntry = await findOneWithDecryption(\n        trx,\n        StaffTimeEntry,\n        {\n          tenantId,\n          organizationId,\n          staffMemberId: lockedEntry.staffMemberId,\n          id: { $ne: lockedEntry.id },\n          startedAt: { $ne: null },\n          endedAt: null,\n          deletedAt: null,\n        },\n        {},\n        scopeCtx,\n      )\n      if (otherRunningEntry) {\n        throw new CrudHttpError(409, {\n          error: translate(\n            'staff.timesheets.errors.timerAlreadyRunning',\n            'Another timer is already running. Stop it before starting a new one.',\n          ),\n        })\n      }\n\n      const startedAt = new Date()\n      lockedEntry.startedAt = startedAt\n      lockedEntry.source = 'timer'\n\n      const segmentData = {\n        tenantId,\n        organizationId,\n        timeEntryId: lockedEntry.id,\n        startedAt,\n        segmentType: 'work' as const,\n      }\n      trx.create(StaffTimeEntrySegment, segmentData as never)\n\n      await trx.flush()\n      return startedAt\n    })\n\n    await invalidateStaffTimeEntryCache(\n      container,\n      { id: entry.id, organizationId: entry.organizationId, tenantId: entry.tenantId },\n      tenantId,\n      'timer_started',\n    )\n\n    void emitStaffEvent('staff.timesheets.time_entry.timer_started', {\n      id: entry.id,\n      staffMemberId: entry.staffMemberId,\n      tenantId: entry.tenantId,\n      organizationId: entry.organizationId,\n      startedAt: now.toISOString(),\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit timer_started failed', { err })\n    })\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: entry.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    return session.respond(200, { ok: true })\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.timer-start failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.timerStart', 'Failed to start timer.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Start timer for a time entry',\n  methods: {\n    POST: {\n      summary: 'Start timer for a time entry',\n      description: 'Starts the timer on a time entry by setting startedAt and creating an initial work segment.',\n      responses: [\n        { status: 200, description: 'Timer started', schema: z.object({ ok: z.literal(true) }) },\n        { status: 404, description: 'Time entry not found', schema: z.object({ error: z.string() }) },\n        {\n          status: 409,\n          description:\n            'Timer already started, another timer is already running for this staff member, or the entry is locked in a closed report (code time_entry_locked)',\n          schema: z.object({ error: z.string(), code: z.string().optional(), lockedReportId: z.string().uuid().nullable().optional() }),\n        },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AAEtC,SAAS,gBAAgB;AAEzB,SAAS,gBAAgB,6BAA6B;AACtD,SAAS,+BAA+B;AACxC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAEnC,SAAS,sBAAsB,SAAkC;AAC/D,MAAI,CAAC,SAAS,IAAK,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,IAAI,SAAS,MAAM,sCAAsC;AACvE,WAAO,QAAQ,CAAC,KAAK;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAEzG,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,uCAAuC,EAAE,CAAC;AAAA,IACzH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,IACjE,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,UAAU,sBAAsB,GAAG;AACzC,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,mBAAmB,EAAE,CAAC;AAAA,IAClH;AAEA,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,SAAS,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACzD,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,uBAAuB,EAAE,CAAC;AAAA,IACrH;AAEA,UAAM,cAAc,MAAM,uBAAuB,IAAI,KAAK,KAAK,UAAU,cAAc;AACvF,QAAI,CAAC,eAAe,MAAM,kBAAkB,YAAY,IAAI;AAC1D,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,oCAAoC,4CAA4C,EAAE,CAAC;AAAA,IACrI;AAIA,4BAAwB,OAAO,SAAS;AAExC,QAAI,MAAM,WAAW;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,+CAA+C,0CAA0C,EAAE;AAAA,QAC9G,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB;AAAA,IACF;AACA,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAMA,UAAM,MAAM,MAAM,GAAG,cAAc,OAAO,QAAQ;AAChD,YAAM,cAAc,MAAM;AAAA,QACxB;AAAA,QACA;AAAA,QACA,EAAE,IAAI,SAAS,UAAU,gBAAgB,WAAW,KAAK;AAAA,QACzD,EAAE,UAAU,SAAS,kBAAkB;AAAA,QACvC;AAAA,MACF;AACA,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,uBAAuB,EAAE,CAAC;AAAA,MACrH;AAGA,8BAAwB,aAAa,SAAS;AAC9C,UAAI,YAAY,WAAW;AACzB,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO,UAAU,+CAA+C,0CAA0C;AAAA,QAC5G,CAAC;AAAA,MACH;AAQA,YAAM,oBAAoB,MAAM;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,eAAe,YAAY;AAAA,UAC3B,IAAI,EAAE,KAAK,YAAY,GAAG;AAAA,UAC1B,WAAW,EAAE,KAAK,KAAK;AAAA,UACvB,SAAS;AAAA,UACT,WAAW;AAAA,QACb;AAAA,QACA,CAAC;AAAA,QACD;AAAA,MACF;AACA,UAAI,mBAAmB;AACrB,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AAEA,YAAM,YAAY,oBAAI,KAAK;AAC3B,kBAAY,YAAY;AACxB,kBAAY,SAAS;AAErB,YAAM,cAAc;AAAA,QAClB;AAAA,QACA;AAAA,QACA,aAAa,YAAY;AAAA,QACzB;AAAA,QACA,aAAa;AAAA,MACf;AACA,UAAI,OAAO,uBAAuB,WAAoB;AAEtD,YAAM,IAAI,MAAM;AAChB,aAAO;AAAA,IACT,CAAC;AAED,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,IAAI,MAAM,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,MAC/E;AAAA,MACA;AAAA,IACF;AAEA,SAAK,eAAe,6CAA6C;AAAA,MAC/D,IAAI,MAAM;AAAA,MACV,eAAe,MAAM;AAAA,MACrB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,WAAW,IAAI,YAAY;AAAA,IAC7B,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,8CAA8C,EAAE,IAAI,CAAC;AAAA,IACpE,CAAC;AAED,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EAC1C,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,oDAAoD,EAAE,IAAI,CAAC;AACxE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,sCAAsC,wBAAwB,EAAE;AAAA,MACnF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAC5F;AAAA,UACE,QAAQ;AAAA,UACR,aACE;AAAA,UACF,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,GAAG,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAAA,QAC9H;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/timesheets/time-entries/[id]/timer-stop/route.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
@@ -41,7 +42,7 @@ async function POST(req) {
     if (!auth) throw new CrudHttpError(401, { error: translate("staff.errors.unauthorized", "Unauthorized") });
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
     const tenantId = scope?.tenantId ?? auth.tenantId ?? null;
-    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null;
     if (!tenantId || !organizationId) {
       throw new CrudHttpError(400, { error: translate("staff.errors.missingScope", "Missing tenant or organization scope.") });
     }

package/dist/modules/staff/api/timesheets/time-entries/[id]/timer-stop/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/staff/api/timesheets/time-entries/%5Bid%5D/timer-stop/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { LockMode } from '@mikro-orm/core'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeEntry, StaffTimeEntrySegment } from '../../../../../data/entities'\nimport { assertTimeEntryUnlocked, resolveRoundedMinutes } from '../../../../../commands/timesheets-entries'\nimport { getStaffMemberByUserId } from '../../../../../lib/staffMemberResolver'\nimport {\n  STAFF_TIME_TRACKING_RESOURCE_KINDS,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../../guards'\nimport { emitStaffEvent } from '../../../../../events'\nimport { invalidateStaffTimeEntryCache } from '../../../../../lib/timesheets/timeEntryCacheInvalidation'\nimport { runTimesheetInterceptors } from '../../../_shared/withTimesheetInterceptors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\nfunction extractEntryIdFromUrl(request?: Request): string | null {\n  if (!request?.url) return null\n  try {\n    const url = new URL(request.url)\n    const match = url.pathname.match(/\\/time-entries\\/([^/]+)\\/timer-stop/)\n    return match?.[1] ?? null\n  } catch {\n    return null\n  }\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, { error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.') })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const entryId = extractEntryIdFromUrl(req)\n    if (!entryId) {\n      throw new CrudHttpError(400, { error: translate('staff.timesheets.errors.missingEntryId', 'Missing entry ID.') })\n    }\n\n    const entry = await findOneWithDecryption(\n      em,\n      StaffTimeEntry,\n      { id: entryId, tenantId, organizationId, deletedAt: null },\n      {},\n      scopeCtx,\n    )\n    if (!entry) {\n      throw new CrudHttpError(404, { error: translate('staff.timesheets.errors.entryNotFound', 'Time entry not found.') })\n    }\n\n    const staffMember = await getStaffMemberByUserId(em, auth.sub, tenantId, organizationId)\n    if (!staffMember || entry.staffMemberId !== staffMember.id) {\n      throw new CrudHttpError(403, { error: translate('staff.timesheets.errors.notOwner', 'You can only manage your own time entries.') })\n    }\n\n    // Stopping a timer rewrites `duration_minutes`, which is exactly what a\n    // closed report froze \u2014 same gate as the entries command.\n    assertTimeEntryUnlocked(entry, translate)\n\n    const guardResult = await runStaffMutationGuards(\n      container,\n      {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: entry.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      },\n    )\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    // Recompute and persist the timer state inside a single transaction with a\n    // PESSIMISTIC_WRITE lock on the time entry row, so concurrent timer-stop /\n    // segment writes on the same entry serialize instead of racing on a shared\n    // in-memory snapshot (issue #2416).\n    const { now, durationMinutes } = await em.transactional(async (trx) => {\n      const lockedEntry = await findOneWithDecryption(\n        trx,\n        StaffTimeEntry,\n        { id: entryId, tenantId, organizationId, deletedAt: null },\n        { lockMode: LockMode.PESSIMISTIC_WRITE },\n        scopeCtx,\n      )\n      if (!lockedEntry) {\n        throw new CrudHttpError(404, { error: translate('staff.timesheets.errors.entryNotFound', 'Time entry not found.') })\n      }\n      // Re-checked under the row lock: a report close committed between the\n      // pre-flight read and this transaction would otherwise slip through.\n      assertTimeEntryUnlocked(lockedEntry, translate)\n\n      const segments = await findWithDecryption(\n        trx,\n        StaffTimeEntrySegment,\n        { timeEntryId: lockedEntry.id, tenantId, organizationId, deletedAt: null },\n        {},\n        scopeCtx,\n      )\n\n      const activeSegment = segments.find((segment) => !segment.endedAt)\n      if (!activeSegment) {\n        throw new CrudHttpError(409, {\n          error: translate('staff.timesheets.errors.noActiveSegment', 'No active timer segment found for this entry.'),\n        })\n      }\n\n      const stoppedAt = new Date()\n      activeSegment.endedAt = stoppedAt\n      lockedEntry.endedAt = stoppedAt\n\n      const allSegments = segments.map((segment) => {\n        if (segment.id === activeSegment.id) {\n          return { ...segment, endedAt: stoppedAt }\n        }\n        return segment\n      })\n\n      const totalWorkMinutes = allSegments\n        .filter((segment) => segment.segmentType === 'work' && segment.startedAt && segment.endedAt)\n        .reduce((sum, segment) => {\n          const startMs = new Date(segment.startedAt).getTime()\n          const endMs = new Date(segment.endedAt!).getTime()\n          return sum + (endMs - startMs)\n        }, 0)\n\n      const computedMinutes = Math.round(totalWorkMinutes / 60000)\n      lockedEntry.durationMinutes = computedMinutes\n      // This route writes a duration outside the entries command, and D-7 makes\n      // `rounded_minutes` the only input to cost \u2014 so it is restated here with the\n      // same tenant rule the command applies, not left stale from the zero-minute\n      // value the timer was created with.\n      lockedEntry.roundedMinutes = await resolveRoundedMinutes(\n        container,\n        tenantId,\n        computedMinutes,\n        organizationId,\n      )\n\n      await trx.flush()\n      return { now: stoppedAt, durationMinutes: computedMinutes }\n    })\n\n    await invalidateStaffTimeEntryCache(\n      container,\n      { id: entry.id, organizationId: entry.organizationId, tenantId: entry.tenantId },\n      tenantId,\n      'timer_stopped',\n    )\n\n    void emitStaffEvent('staff.timesheets.time_entry.timer_stopped', {\n      id: entry.id,\n      staffMemberId: entry.staffMemberId,\n      tenantId: entry.tenantId,\n      organizationId: entry.organizationId,\n      stoppedAt: now.toISOString(),\n      durationMinutes,\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit timer_stopped failed', { err })\n    })\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: entry.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    return session.respond(200, { ok: true, durationMinutes })\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.timer-stop failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.timerStop', 'Failed to stop timer.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Stop timer for a time entry',\n  methods: {\n    POST: {\n      summary: 'Stop timer for a time entry',\n      description: 'Stops the active timer segment, recalculates total work duration in minutes, and updates the time entry.',\n      responses: [\n        {\n          status: 200,\n          description: 'Timer stopped',\n          schema: z.object({ ok: z.literal(true), durationMinutes: z.number() }),\n        },\n        { status: 404, description: 'Time entry not found', schema: z.object({ error: z.string() }) },\n        {\n          status: 409,\n          description: 'No active timer segment, or the entry is locked in a closed report (code time_entry_locked)',\n          schema: z.object({ error: z.string(), code: z.string().optional(), lockedReportId: z.string().uuid().nullable().optional() }),\n        },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAE1D,SAAS,gBAAgB;AAEzB,SAAS,gBAAgB,6BAA6B;AACtD,SAAS,yBAAyB,6BAA6B;AAC/D,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAEnC,SAAS,sBAAsB,SAAkC;AAC/D,MAAI,CAAC,SAAS,IAAK,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,IAAI,SAAS,MAAM,qCAAqC;AACtE,WAAO,QAAQ,CAAC,KAAK;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAEzG,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,uCAAuC,EAAE,CAAC;AAAA,IACzH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,IACjE,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,UAAU,sBAAsB,GAAG;AACzC,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,mBAAmB,EAAE,CAAC;AAAA,IAClH;AAEA,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,SAAS,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACzD,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,uBAAuB,EAAE,CAAC;AAAA,IACrH;AAEA,UAAM,cAAc,MAAM,uBAAuB,IAAI,KAAK,KAAK,UAAU,cAAc;AACvF,QAAI,CAAC,eAAe,MAAM,kBAAkB,YAAY,IAAI;AAC1D,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,oCAAoC,4CAA4C,EAAE,CAAC;AAAA,IACrI;AAIA,4BAAwB,OAAO,SAAS;AAExC,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB;AAAA,IACF;AACA,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAMA,UAAM,EAAE,KAAK,gBAAgB,IAAI,MAAM,GAAG,cAAc,OAAO,QAAQ;AACrE,YAAM,cAAc,MAAM;AAAA,QACxB;AAAA,QACA;AAAA,QACA,EAAE,IAAI,SAAS,UAAU,gBAAgB,WAAW,KAAK;AAAA,QACzD,EAAE,UAAU,SAAS,kBAAkB;AAAA,QACvC;AAAA,MACF;AACA,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,uBAAuB,EAAE,CAAC;AAAA,MACrH;AAGA,8BAAwB,aAAa,SAAS;AAE9C,YAAM,WAAW,MAAM;AAAA,QACrB;AAAA,QACA;AAAA,QACA,EAAE,aAAa,YAAY,IAAI,UAAU,gBAAgB,WAAW,KAAK;AAAA,QACzE,CAAC;AAAA,QACD;AAAA,MACF;AAEA,YAAM,gBAAgB,SAAS,KAAK,CAAC,YAAY,CAAC,QAAQ,OAAO;AACjE,UAAI,CAAC,eAAe;AAClB,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO,UAAU,2CAA2C,+CAA+C;AAAA,QAC7G,CAAC;AAAA,MACH;AAEA,YAAM,YAAY,oBAAI,KAAK;AAC3B,oBAAc,UAAU;AACxB,kBAAY,UAAU;AAEtB,YAAM,cAAc,SAAS,IAAI,CAAC,YAAY;AAC5C,YAAI,QAAQ,OAAO,cAAc,IAAI;AACnC,iBAAO,EAAE,GAAG,SAAS,SAAS,UAAU;AAAA,QAC1C;AACA,eAAO;AAAA,MACT,CAAC;AAED,YAAM,mBAAmB,YACtB,OAAO,CAAC,YAAY,QAAQ,gBAAgB,UAAU,QAAQ,aAAa,QAAQ,OAAO,EAC1F,OAAO,CAAC,KAAK,YAAY;AACxB,cAAM,UAAU,IAAI,KAAK,QAAQ,SAAS,EAAE,QAAQ;AACpD,cAAM,QAAQ,IAAI,KAAK,QAAQ,OAAQ,EAAE,QAAQ;AACjD,eAAO,OAAO,QAAQ;AAAA,MACxB,GAAG,CAAC;AAEN,YAAM,kBAAkB,KAAK,MAAM,mBAAmB,GAAK;AAC3D,kBAAY,kBAAkB;AAK9B,kBAAY,iBAAiB,MAAM;AAAA,QACjC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM,IAAI,MAAM;AAChB,aAAO,EAAE,KAAK,WAAW,iBAAiB,gBAAgB;AAAA,IAC5D,CAAC;AAED,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,IAAI,MAAM,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,MAC/E;AAAA,MACA;AAAA,IACF;AAEA,SAAK,eAAe,6CAA6C;AAAA,MAC/D,IAAI,MAAM;AAAA,MACV,eAAe,MAAM;AAAA,MACrB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,WAAW,IAAI,YAAY;AAAA,MAC3B;AAAA,IACF,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,8CAA8C,EAAE,IAAI,CAAC;AAAA,IACpE,CAAC;AAED,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,MAAM,gBAAgB,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,mDAAmD,EAAE,IAAI,CAAC;AACvE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,qCAAqC,uBAAuB,EAAE;AAAA,MACjF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,iBAAiB,EAAE,OAAO,EAAE,CAAC;AAAA,QACvE;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAC5F;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,GAAG,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAAA,QAC9H;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { LockMode } from '@mikro-orm/core'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeEntry, StaffTimeEntrySegment } from '../../../../../data/entities'\nimport { assertTimeEntryUnlocked, resolveRoundedMinutes } from '../../../../../commands/timesheets-entries'\nimport { getStaffMemberByUserId } from '../../../../../lib/staffMemberResolver'\nimport {\n  STAFF_TIME_TRACKING_RESOURCE_KINDS,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../../guards'\nimport { emitStaffEvent } from '../../../../../events'\nimport { invalidateStaffTimeEntryCache } from '../../../../../lib/timesheets/timeEntryCacheInvalidation'\nimport { runTimesheetInterceptors } from '../../../_shared/withTimesheetInterceptors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\nfunction extractEntryIdFromUrl(request?: Request): string | null {\n  if (!request?.url) return null\n  try {\n    const url = new URL(request.url)\n    const match = url.pathname.match(/\\/time-entries\\/([^/]+)\\/timer-stop/)\n    return match?.[1] ?? null\n  } catch {\n    return null\n  }\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, { error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.') })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const entryId = extractEntryIdFromUrl(req)\n    if (!entryId) {\n      throw new CrudHttpError(400, { error: translate('staff.timesheets.errors.missingEntryId', 'Missing entry ID.') })\n    }\n\n    const entry = await findOneWithDecryption(\n      em,\n      StaffTimeEntry,\n      { id: entryId, tenantId, organizationId, deletedAt: null },\n      {},\n      scopeCtx,\n    )\n    if (!entry) {\n      throw new CrudHttpError(404, { error: translate('staff.timesheets.errors.entryNotFound', 'Time entry not found.') })\n    }\n\n    const staffMember = await getStaffMemberByUserId(em, auth.sub, tenantId, organizationId)\n    if (!staffMember || entry.staffMemberId !== staffMember.id) {\n      throw new CrudHttpError(403, { error: translate('staff.timesheets.errors.notOwner', 'You can only manage your own time entries.') })\n    }\n\n    // Stopping a timer rewrites `duration_minutes`, which is exactly what a\n    // closed report froze \u2014 same gate as the entries command.\n    assertTimeEntryUnlocked(entry, translate)\n\n    const guardResult = await runStaffMutationGuards(\n      container,\n      {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: entry.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      },\n    )\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    // Recompute and persist the timer state inside a single transaction with a\n    // PESSIMISTIC_WRITE lock on the time entry row, so concurrent timer-stop /\n    // segment writes on the same entry serialize instead of racing on a shared\n    // in-memory snapshot (issue #2416).\n    const { now, durationMinutes } = await em.transactional(async (trx) => {\n      const lockedEntry = await findOneWithDecryption(\n        trx,\n        StaffTimeEntry,\n        { id: entryId, tenantId, organizationId, deletedAt: null },\n        { lockMode: LockMode.PESSIMISTIC_WRITE },\n        scopeCtx,\n      )\n      if (!lockedEntry) {\n        throw new CrudHttpError(404, { error: translate('staff.timesheets.errors.entryNotFound', 'Time entry not found.') })\n      }\n      // Re-checked under the row lock: a report close committed between the\n      // pre-flight read and this transaction would otherwise slip through.\n      assertTimeEntryUnlocked(lockedEntry, translate)\n\n      const segments = await findWithDecryption(\n        trx,\n        StaffTimeEntrySegment,\n        { timeEntryId: lockedEntry.id, tenantId, organizationId, deletedAt: null },\n        {},\n        scopeCtx,\n      )\n\n      const activeSegment = segments.find((segment) => !segment.endedAt)\n      if (!activeSegment) {\n        throw new CrudHttpError(409, {\n          error: translate('staff.timesheets.errors.noActiveSegment', 'No active timer segment found for this entry.'),\n        })\n      }\n\n      const stoppedAt = new Date()\n      activeSegment.endedAt = stoppedAt\n      lockedEntry.endedAt = stoppedAt\n\n      const allSegments = segments.map((segment) => {\n        if (segment.id === activeSegment.id) {\n          return { ...segment, endedAt: stoppedAt }\n        }\n        return segment\n      })\n\n      const totalWorkMinutes = allSegments\n        .filter((segment) => segment.segmentType === 'work' && segment.startedAt && segment.endedAt)\n        .reduce((sum, segment) => {\n          const startMs = new Date(segment.startedAt).getTime()\n          const endMs = new Date(segment.endedAt!).getTime()\n          return sum + (endMs - startMs)\n        }, 0)\n\n      const computedMinutes = Math.round(totalWorkMinutes / 60000)\n      lockedEntry.durationMinutes = computedMinutes\n      // This route writes a duration outside the entries command, and D-7 makes\n      // `rounded_minutes` the only input to cost \u2014 so it is restated here with the\n      // same tenant rule the command applies, not left stale from the zero-minute\n      // value the timer was created with.\n      lockedEntry.roundedMinutes = await resolveRoundedMinutes(\n        container,\n        tenantId,\n        computedMinutes,\n        organizationId,\n      )\n\n      await trx.flush()\n      return { now: stoppedAt, durationMinutes: computedMinutes }\n    })\n\n    await invalidateStaffTimeEntryCache(\n      container,\n      { id: entry.id, organizationId: entry.organizationId, tenantId: entry.tenantId },\n      tenantId,\n      'timer_stopped',\n    )\n\n    void emitStaffEvent('staff.timesheets.time_entry.timer_stopped', {\n      id: entry.id,\n      staffMemberId: entry.staffMemberId,\n      tenantId: entry.tenantId,\n      organizationId: entry.organizationId,\n      stoppedAt: now.toISOString(),\n      durationMinutes,\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit timer_stopped failed', { err })\n    })\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: entry.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    return session.respond(200, { ok: true, durationMinutes })\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.timer-stop failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.timerStop', 'Failed to stop timer.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Stop timer for a time entry',\n  methods: {\n    POST: {\n      summary: 'Stop timer for a time entry',\n      description: 'Stops the active timer segment, recalculates total work duration in minutes, and updates the time entry.',\n      responses: [\n        {\n          status: 200,\n          description: 'Timer stopped',\n          schema: z.object({ ok: z.literal(true), durationMinutes: z.number() }),\n        },\n        { status: 404, description: 'Time entry not found', schema: z.object({ error: z.string() }) },\n        {\n          status: 409,\n          description: 'No active timer segment, or the entry is locked in a closed report (code time_entry_locked)',\n          schema: z.object({ error: z.string(), code: z.string().optional(), lockedReportId: z.string().uuid().nullable().optional() }),\n        },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAE1D,SAAS,gBAAgB;AAEzB,SAAS,gBAAgB,6BAA6B;AACtD,SAAS,yBAAyB,6BAA6B;AAC/D,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAEnC,SAAS,sBAAsB,SAAkC;AAC/D,MAAI,CAAC,SAAS,IAAK,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,IAAI,SAAS,MAAM,qCAAqC;AACtE,WAAO,QAAQ,CAAC,KAAK;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAEzG,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,uCAAuC,EAAE,CAAC;AAAA,IACzH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,IACjE,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,UAAU,sBAAsB,GAAG;AACzC,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,0CAA0C,mBAAmB,EAAE,CAAC;AAAA,IAClH;AAEA,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,SAAS,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACzD,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,uBAAuB,EAAE,CAAC;AAAA,IACrH;AAEA,UAAM,cAAc,MAAM,uBAAuB,IAAI,KAAK,KAAK,UAAU,cAAc;AACvF,QAAI,CAAC,eAAe,MAAM,kBAAkB,YAAY,IAAI;AAC1D,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,oCAAoC,4CAA4C,EAAE,CAAC;AAAA,IACrI;AAIA,4BAAwB,OAAO,SAAS;AAExC,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB;AAAA,IACF;AACA,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAMA,UAAM,EAAE,KAAK,gBAAgB,IAAI,MAAM,GAAG,cAAc,OAAO,QAAQ;AACrE,YAAM,cAAc,MAAM;AAAA,QACxB;AAAA,QACA;AAAA,QACA,EAAE,IAAI,SAAS,UAAU,gBAAgB,WAAW,KAAK;AAAA,QACzD,EAAE,UAAU,SAAS,kBAAkB;AAAA,QACvC;AAAA,MACF;AACA,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,uBAAuB,EAAE,CAAC;AAAA,MACrH;AAGA,8BAAwB,aAAa,SAAS;AAE9C,YAAM,WAAW,MAAM;AAAA,QACrB;AAAA,QACA;AAAA,QACA,EAAE,aAAa,YAAY,IAAI,UAAU,gBAAgB,WAAW,KAAK;AAAA,QACzE,CAAC;AAAA,QACD;AAAA,MACF;AAEA,YAAM,gBAAgB,SAAS,KAAK,CAAC,YAAY,CAAC,QAAQ,OAAO;AACjE,UAAI,CAAC,eAAe;AAClB,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO,UAAU,2CAA2C,+CAA+C;AAAA,QAC7G,CAAC;AAAA,MACH;AAEA,YAAM,YAAY,oBAAI,KAAK;AAC3B,oBAAc,UAAU;AACxB,kBAAY,UAAU;AAEtB,YAAM,cAAc,SAAS,IAAI,CAAC,YAAY;AAC5C,YAAI,QAAQ,OAAO,cAAc,IAAI;AACnC,iBAAO,EAAE,GAAG,SAAS,SAAS,UAAU;AAAA,QAC1C;AACA,eAAO;AAAA,MACT,CAAC;AAED,YAAM,mBAAmB,YACtB,OAAO,CAAC,YAAY,QAAQ,gBAAgB,UAAU,QAAQ,aAAa,QAAQ,OAAO,EAC1F,OAAO,CAAC,KAAK,YAAY;AACxB,cAAM,UAAU,IAAI,KAAK,QAAQ,SAAS,EAAE,QAAQ;AACpD,cAAM,QAAQ,IAAI,KAAK,QAAQ,OAAQ,EAAE,QAAQ;AACjD,eAAO,OAAO,QAAQ;AAAA,MACxB,GAAG,CAAC;AAEN,YAAM,kBAAkB,KAAK,MAAM,mBAAmB,GAAK;AAC3D,kBAAY,kBAAkB;AAK9B,kBAAY,iBAAiB,MAAM;AAAA,QACjC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM,IAAI,MAAM;AAChB,aAAO,EAAE,KAAK,WAAW,iBAAiB,gBAAgB;AAAA,IAC5D,CAAC;AAED,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,IAAI,MAAM,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,MAC/E;AAAA,MACA;AAAA,IACF;AAEA,SAAK,eAAe,6CAA6C;AAAA,MAC/D,IAAI,MAAM;AAAA,MACV,eAAe,MAAM;AAAA,MACrB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,WAAW,IAAI,YAAY;AAAA,MAC3B;AAAA,IACF,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,8CAA8C,EAAE,IAAI,CAAC;AAAA,IACpE,CAAC;AAED,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY,MAAM;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,MAAM,gBAAgB,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,mDAAmD,EAAE,IAAI,CAAC;AACvE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,qCAAqC,uBAAuB,EAAE;AAAA,MACjF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,iBAAiB,EAAE,OAAO,EAAE,CAAC;AAAA,QACvE;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAC5F;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,GAAG,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAAA,QAC9H;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/timesheets/time-entries/bulk/route.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
@@ -54,7 +55,7 @@ async function POST(req) {
     if (!auth) throw new CrudHttpError(401, { error: translate("staff.errors.unauthorized", "Unauthorized") });
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
     const tenantId = scope?.tenantId ?? auth.tenantId ?? null;
-    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null;
     if (!tenantId || !organizationId) {
       throw new CrudHttpError(400, { error: translate("staff.errors.missingScope", "Missing tenant or organization scope.") });
     }

package/dist/modules/staff/api/timesheets/time-entries/bulk/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/staff/api/timesheets/time-entries/bulk/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { emitCrudSideEffects, flushCrudSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeEntry, StaffTeamMember, StaffTimeProject, StaffTimeTask } from '../../../../data/entities'\nimport {\n  staffTimeEntryBulkSaveSchema,\n  type StaffTimeEntryBulkSaveInput,\n} from '../../../../data/validators'\nimport {\n  buildTimeEntryLockedError,\n  rebaseTimeEntryIntervalToDate,\n  reconcileTimeEntryInterval,\n  resolveTimeEntryBillable,\n  resolveTimeEntryNotesInput,\n  resolveTimeEntryProjectId,\n  resolveTimeEntrySettings,\n  roundedMinutesFor,\n  timeEntryTaskMatchesProject,\n  toStoredTimeEntryRateOverride,\n  type LockedTimeEntryRef,\n} from '../../../../commands/timesheets-entries'\nimport { staffTimeEntryCrudEvents } from '../../../../lib/crud'\nimport { emitStaffEvent } from '../../../../events'\nimport { invalidateStaffTimeEntryCache } from '../../../../lib/timesheets/timeEntryCacheInvalidation'\nimport {\n  STAFF_TIME_TRACKING_RESOURCE_KINDS,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../guards'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\n/**\n * A grid cell is addressed by the day the work started, never by the timestamp,\n * so both sides of the comparison collapse to `YYYY-MM-DD` (D-8).\n */\nfunction cellDateKey(value: Date | string | null | undefined): string {\n  if (!value) return ''\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? String(value) : date.toISOString().slice(0, 10)\n}\n\ntype BulkRowError = { path: string; message: string; value?: unknown }\n\n/**\n * The batch answers with a per-row error list rather than a thrown 422: one grid\n * save spans a week of cells, so the client needs to know WHICH row it must fix.\n * The single-entry command raises the same refusals as `CrudHttpError` field\n * errors \u2014 same rule, different reporting shape.\n */\nfunction bulkValidationError(errors: BulkRowError[]): NextResponse {\n  return NextResponse.json({ ok: false, errors }, { status: 422 })\n}\n\n/**\n * A row as the write loop needs it: the payload plus the two things that must be\n * settled before the lock gate can address a cell \u2014 the task it names (validated\n * in scope) and the project the entry actually lands on, which a task-only row\n * inherits from its task exactly as the single-entry path does.\n */\ntype BulkEntryInput = StaffTimeEntryBulkSaveInput['entries'][number]\n\ntype ResolvedBulkRow = {\n  entry: BulkEntryInput\n  task: { id: string; timeProjectId: string } | null\n  timeProjectId: string\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, { error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.') })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = staffTimeEntryBulkSaveSchema.safeParse(session.body)\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((issue) => ({\n        path: issue.path.join('.'),\n        message: issue.message,\n      }))\n      return NextResponse.json({ ok: false, errors }, { status: 422 })\n    }\n\n    const { entries } = parsed.data\n\n    // Tags are REFUSED here rather than accepted and dropped.\n    //\n    // The single-entry path assigns tags by dispatching the tag commands, which\n    // fork their own EntityManager so they can carry their own audit entry, undo\n    // and lock check. Inside this route's `em.transactional` that fork would not\n    // see the rows the transaction has not committed yet, and dispatching AFTER\n    // the commit would answer `{ ok: true, created: n }` for a batch whose tags\n    // silently failed \u2014 a response carrying only counts cannot say which cell\n    // lost them, which is the very silent-success class this route is being\n    // fixed for. So the row is rejected and the user is pointed at the entry\n    // dialog, which writes tags through the commands with all of their\n    // guarantees intact.\n    const taggedRows = entries.filter((entry) => entry.tagIds !== undefined)\n    if (taggedRows.length > 0) {\n      const message = translate(\n        'staff.timesheets.errors.bulkTagsUnsupported',\n        'Tags cannot be changed from the timesheet grid. Open the time entry to edit its tags.',\n      )\n      return bulkValidationError(taggedRows.map(() => ({ path: 'entries[].tagIds', message })))\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const staffMember = await findOneWithDecryption(\n      em,\n      StaffTeamMember,\n      { userId: auth.sub, tenantId, organizationId, deletedAt: null },\n      {},\n      scopeCtx,\n    )\n    if (!staffMember) {\n      throw new CrudHttpError(403, { error: translate('staff.timesheets.errors.noStaffMember', 'No staff member linked to your account.') })\n    }\n    const staffMemberId = staffMember.id\n\n    // Validate that all referenced taskIds exist and are in-scope, in one query\n    // for the whole batch. Same rule the single-entry path applies through\n    // `requireTaskInScope`: a dangling task reference is refused rather than\n    // stored, because the task rollups aggregate entries by `task_id` and a stale\n    // or foreign UUID would silently move hours onto another project's card.\n    const referencedTaskIds = [\n      ...new Set(\n        entries\n          .map((entry) => entry.taskId)\n          .filter((id): id is string => typeof id === 'string' && id.length > 0),\n      ),\n    ]\n    const tasksById = new Map<string, { id: string; timeProjectId: string }>()\n    if (referencedTaskIds.length > 0) {\n      const validTasks = await em.find(StaffTimeTask, {\n        id: { $in: referencedTaskIds },\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }, { fields: ['id', 'timeProjectId'] })\n      for (const task of validTasks) tasksById.set(task.id, { id: task.id, timeProjectId: task.timeProjectId })\n      const invalidTaskIds = referencedTaskIds.filter((id) => !tasksById.has(id))\n      if (invalidTaskIds.length > 0) {\n        const message = translate('staff.timesheets.errors.taskNotFound', 'Task not found or not accessible.')\n        return bulkValidationError(\n          invalidTaskIds.map((id) => ({ path: 'entries[].taskId', message, value: id })),\n        )\n      }\n    }\n\n    // Every row is pinned to the project it will actually land on BEFORE the lock\n    // gate runs, because the gate addresses a cell by (project, date) \u2014 a task row\n    // that inherited its project must be checked against that inherited cell, not\n    // against a blank one.\n    const resolvedRows: ResolvedBulkRow[] = []\n    const missingProjectErrors: BulkRowError[] = []\n    const taskProjectMismatchErrors: BulkRowError[] = []\n    for (const entry of entries) {\n      const task = entry.taskId ? tasksById.get(entry.taskId) ?? null : null\n      const timeProjectId = resolveTimeEntryProjectId(entry.timeProjectId, task)\n      if (!timeProjectId) {\n        missingProjectErrors.push({\n          path: 'entries[].timeProjectId',\n          message: translate('staff.timesheets.errors.projectRequired', 'Time project id is required.'),\n        })\n        continue\n      }\n      if (!timeEntryTaskMatchesProject(task, timeProjectId)) {\n        taskProjectMismatchErrors.push({\n          path: 'entries[].taskId',\n          message: translate('staff.timesheets.errors.taskNotFound', 'Task not found or not accessible.'),\n          value: entry.taskId,\n        })\n        continue\n      }\n      resolvedRows.push({ entry, task, timeProjectId })\n    }\n    if (missingProjectErrors.length > 0 || taskProjectMismatchErrors.length > 0) {\n      return bulkValidationError([...missingProjectErrors, ...taskProjectMismatchErrors])\n    }\n\n    // Validate that all referenced timeProjectIds exist and are in-scope. The\n    // project rows are kept, not just their ids: a created entry snapshots the\n    // project's currency and inherits its billable default (D-3), so one query\n    // serves validation and both defaults.\n    const referencedProjectIds = [...new Set(resolvedRows.map((row) => row.timeProjectId))]\n    const projectsById = new Map<string, { currencyCode?: string | null; billableByDefault?: boolean | null }>()\n    if (referencedProjectIds.length > 0) {\n      const validProjects = await em.find(StaffTimeProject, {\n        id: { $in: referencedProjectIds },\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }, { fields: ['id', 'currencyCode', 'billableByDefault'] })\n      for (const project of validProjects) {\n        projectsById.set(project.id, {\n          currencyCode: project.currencyCode ?? null,\n          billableByDefault: project.billableByDefault ?? null,\n        })\n      }\n      const invalidIds = referencedProjectIds.filter((id) => !projectsById.has(id))\n      if (invalidIds.length > 0) {\n        const message = translate(\n          'staff.timesheets.errors.projectNotFound',\n          'Time project not found or not accessible.',\n        )\n        return bulkValidationError(\n          invalidIds.map((id) => ({ path: 'entries[].timeProjectId', message, value: id })),\n        )\n      }\n    }\n\n    const guardInput = {\n      tenantId,\n      organizationId,\n      userId: auth.sub ?? '',\n      resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n      resourceId: staffMemberId,\n      operation: 'update' as const,\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as unknown as Record<string, unknown>,\n    }\n    const guardResult = await runStaffMutationGuards(container, guardInput)\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const existingIds = resolvedRows\n      .map((row) => row.entry.id)\n      .filter((id): id is string => typeof id === 'string' && id.length > 0)\n\n    // Validate referenced entry IDs upfront: a stale or foreign UUID would\n    // otherwise fall through to the create branch in the loop below and insert\n    // a duplicate row with that ID-less new identity. Reject as 422 instead.\n    if (existingIds.length > 0) {\n      const resolvedExisting = await em.find(\n        StaffTimeEntry,\n        { id: { $in: existingIds }, tenantId, organizationId, staffMemberId, deletedAt: null },\n        { fields: ['id'] },\n      )\n      const resolvedIdSet = new Set(resolvedExisting.map((entry) => entry.id))\n      const invalidIds = existingIds.filter((id) => !resolvedIdSet.has(id))\n      if (invalidIds.length > 0) {\n        return NextResponse.json(\n          {\n            ok: false,\n            errors: invalidIds.map((id) => ({\n              path: 'entries[].id',\n              message: translate(\n                'staff.timesheets.errors.entryNotFound',\n                'Time entry not found, deleted, or not owned by you.',\n              ),\n              value: id,\n            })),\n          },\n          { status: 422 },\n        )\n      }\n    }\n\n    // --- Lock gate (risk R3) -------------------------------------------------\n    //\n    // This is the endpoint the lock is most likely to leak through, because the\n    // grid addresses a cell by (project, date) and only carries an id when the\n    // client happened to have one loaded. So both shapes are checked:\n    //\n    //  * a row naming an id that resolves to a frozen entry, and\n    //  * an id-less row landing on a (project, date) cell a frozen entry already\n    //    occupies \u2014 the grid renders one summed value per cell, so creating a\n    //    second row there silently restates hours a closed report has billed.\n    //\n    // The batch fails WHOLESALE, before the transaction opens. A grid save is one\n    // user gesture spanning a week of cells and the response carries only counts,\n    // so applying the unlocked rows would leave the client unable to tell which\n    // cells landed \u2014 and the route already rejects the whole payload for an\n    // unknown project or a stale entry id, so a partial 409 would be the odd one\n    // out. The 409 names every offending id and the reports that froze them, so\n    // the grid can mark exactly those cells read-only and the user retries the\n    // rest after reloading (which is also what makes the lock badge appear).\n    //\n    // The cell is addressed by the RESOLVED project, so a task row that inherited\n    // its project is checked against the cell it will really occupy.\n    const idlessRows = resolvedRows.filter((row) => !row.entry.id)\n    const idlessCells = idlessRows.map((row) => `${cellDateKey(row.entry.date)}|${row.timeProjectId}`)\n    const lockConditions: Record<string, unknown>[] = []\n    if (existingIds.length > 0) lockConditions.push({ id: { $in: existingIds } })\n    if (idlessCells.length > 0) {\n      lockConditions.push({\n        date: { $in: idlessRows.map((row) => row.entry.date) },\n        timeProjectId: { $in: [...new Set(idlessRows.map((row) => row.timeProjectId))] },\n      })\n    }\n    if (lockConditions.length > 0) {\n      const existingIdSet = new Set(existingIds)\n      const idlessCellSet = new Set(idlessCells)\n      const lockedCandidates = await em.find(\n        StaffTimeEntry,\n        {\n          tenantId,\n          organizationId,\n          staffMemberId,\n          deletedAt: null,\n          lockedReportId: { $ne: null },\n          $or: lockConditions,\n        },\n        { fields: ['id', 'lockedReportId', 'date', 'timeProjectId'] },\n      )\n      // The (date \u00D7 project) condition above is a cross product, so it can match a\n      // locked entry on a cell the payload never touches \u2014 narrowed here.\n      const blocked: LockedTimeEntryRef[] = lockedCandidates.filter(\n        (row) =>\n          existingIdSet.has(row.id) ||\n          idlessCellSet.has(`${cellDateKey(row.date)}|${row.timeProjectId ?? ''}`),\n      )\n      if (blocked.length > 0) {\n        throw buildTimeEntryLockedError(\n          blocked.map((row) => ({ id: row.id, lockedReportId: row.lockedReportId })),\n          translate,\n        )\n      }\n    }\n\n    type PendingChange = {\n      action: 'created' | 'updated' | 'deleted'\n      entity: StaffTimeEntry\n    }\n\n    // D-7 makes `rounded_minutes` the only input to cost, and this route writes\n    // durations outside the entries command \u2014 so every row it touches is rounded\n    // with the same tenant rule the command uses. The settings read is hoisted out\n    // of the loop because it is tenant-scoped and identical for every row; the\n    // billable default a created row falls back to comes from the same snapshot.\n    const settings = await resolveTimeEntrySettings(container, tenantId)\n\n    const { counts, pendingChanges } = await em.transactional(async (trx) => {\n      let created = 0\n      let updated = 0\n      let deleted = 0\n      const changes: PendingChange[] = []\n\n      const existingEntries = existingIds.length > 0\n        ? await findWithDecryption(\n            trx,\n            StaffTimeEntry,\n            { id: { $in: existingIds }, tenantId, organizationId, staffMemberId, deletedAt: null },\n            {},\n            scopeCtx,\n          )\n        : []\n\n      const existingMap = new Map(existingEntries.map((entry) => [entry.id, entry]))\n\n      for (const { entry, task, timeProjectId } of resolvedRows) {\n        const project = projectsById.get(timeProjectId) ?? null\n        // Both branches read the five fields the schema has always accepted\n        // through the SAME helpers the single-entry command uses, so a grid write\n        // and a dialog write cannot settle them differently (#silent-no-op).\n        const notes = resolveTimeEntryNotesInput(entry)\n        if (entry.id && existingMap.has(entry.id)) {\n          const existing = existingMap.get(entry.id)!\n          if (entry.durationMinutes === 0) {\n            existing.deletedAt = new Date()\n            deleted++\n            changes.push({ action: 'deleted', entity: existing })\n          } else {\n            // T4.10(a). A grid cell carries a duration and nothing else, so writing\n            // it straight onto an entry that has clocks would store a two-hour\n            // duration against a 09:00\u201310:00 span \u2014 exactly the contradiction the\n            // single-entry path already refuses to store. The same reconciliation\n            // is called here rather than re-derived: only-a-duration means\n            // `started_at` anchors and `ended_at` shifts to match, a clock that\n            // does not exist is never manufactured (so a cell whose entry has no\n            // clocks keeps having none, and a running timer is not stopped), and a\n            // re-dated row takes its clocks with it.\n            const interval = reconcileTimeEntryInterval({\n              stored: rebaseTimeEntryIntervalToDate({\n                stored: {\n                  startedAt: existing.startedAt ?? null,\n                  endedAt: existing.endedAt ?? null,\n                  durationMinutes: existing.durationMinutes,\n                },\n                fromDate: existing.date,\n                toDate: entry.date,\n              }),\n              startedAt: undefined,\n              endedAt: undefined,\n              durationMinutes: entry.durationMinutes,\n            })\n            const projectChanged = timeProjectId !== (existing.timeProjectId ?? null)\n            existing.date = entry.date\n            existing.timeProjectId = timeProjectId\n            // Snapshotted, never joined at read time, so a later project currency\n            // change cannot re-denominate money already reported (D-3) \u2014 and only\n            // restated when the entry actually moves between projects, exactly as\n            // the single-entry update command does it.\n            if (projectChanged) existing.rateCurrencyCode = project?.currencyCode ?? null\n            existing.startedAt = interval.startedAt\n            existing.endedAt = interval.endedAt\n            existing.durationMinutes = interval.durationMinutes\n            // D-7 keeps `rounded_minutes` the only input to cost, so it is restated\n            // from the effective duration the reconciliation settled on.\n            existing.roundedMinutes = roundedMinutesFor(interval.durationMinutes, settings, {\n              tenantId,\n              organizationId,\n            })\n            if (entry.taskId !== undefined) existing.taskId = task?.id ?? null\n            if (entry.isBillable !== undefined) existing.isBillable = entry.isBillable\n            if (entry.rateOverrideAmount !== undefined) {\n              existing.rateOverrideAmount = toStoredTimeEntryRateOverride(entry.rateOverrideAmount)\n            }\n            if (notes !== undefined) existing.notes = notes\n            existing.updatedAt = new Date()\n            updated++\n            changes.push({ action: 'updated', entity: existing })\n          }\n        } else {\n          const now = new Date()\n          const newEntry = trx.create(StaffTimeEntry, {\n            tenantId,\n            organizationId,\n            staffMemberId,\n            date: entry.date,\n            timeProjectId,\n            taskId: task?.id ?? null,\n            durationMinutes: entry.durationMinutes,\n            roundedMinutes: roundedMinutesFor(entry.durationMinutes, settings, {\n              tenantId,\n              organizationId,\n            }),\n            notes: notes ?? null,\n            isBillable: resolveTimeEntryBillable({\n              requested: entry.isBillable,\n              project,\n              settings,\n              scope: { tenantId, organizationId },\n            }),\n            rateOverrideAmount: toStoredTimeEntryRateOverride(entry.rateOverrideAmount),\n            rateCurrencyCode: project?.currencyCode ?? null,\n            source: 'manual',\n            createdAt: now,\n            updatedAt: now,\n          })\n          created++\n          changes.push({ action: 'created', entity: newEntry })\n        }\n      }\n\n      await trx.flush()\n      return { counts: { created, updated, deleted }, pendingChanges: changes }\n    })\n\n    const dataEngine = container.resolve<DataEngine>('dataEngine')\n    for (const change of pendingChanges) {\n      await emitCrudSideEffects({\n        dataEngine,\n        action: change.action,\n        entity: change.entity,\n        identifiers: {\n          id: change.entity.id,\n          organizationId: change.entity.organizationId,\n          tenantId: change.entity.tenantId,\n        },\n        events: staffTimeEntryCrudEvents,\n      })\n    }\n    await flushCrudSideEffects(dataEngine)\n\n    const invalidatedRecordIds = new Set<string>()\n    for (const change of pendingChanges) {\n      if (invalidatedRecordIds.has(change.entity.id)) continue\n      invalidatedRecordIds.add(change.entity.id)\n      await invalidateStaffTimeEntryCache(\n        container,\n        {\n          id: change.entity.id,\n          organizationId: change.entity.organizationId,\n          tenantId: change.entity.tenantId,\n        },\n        tenantId,\n        `bulk:${change.action}`,\n      )\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: staffMemberId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    // One batch-level event beside the per-row CRUD events already flushed above.\n    // It carries no `id`, so the entry-scoped subscribers that key off one record\n    // skip it and only the batch-aware ones (payroll exports, audit mirrors) react.\n    void emitStaffEvent('staff.timesheets.time_entry.bulk_updated', {\n      tenantId,\n      organizationId,\n      staffMemberId,\n      ...counts,\n      entryIds: pendingChanges.map((change) => change.entity.id),\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit time_entry.bulk_updated failed', { err })\n    })\n\n    return session.respond(200, { ok: true, ...counts })\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.bulk failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.bulkSave', 'Failed to bulk save time entries.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Bulk save time entries',\n  methods: {\n    POST: {\n      summary: 'Bulk save time entries',\n      description:\n        'Creates, updates, or soft-deletes multiple time entries in a single request. Entries with durationMinutes=0 and an existing id are soft-deleted. A row may name a taskId and let timeProjectId follow from it; task, description/notes precedence, isBillable defaulting, the rate override and the project currency snapshot follow the single-entry path exactly. tagIds is rejected with 422 \u2014 tags are edited from the time entry itself so their audit trail and undo stay intact. The whole batch is rejected with 409 time_entry_locked when any row targets \u2014 by id, or by landing on its (project, date) cell \u2014 an entry frozen in a closed report.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeEntryBulkSaveSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Bulk save completed',\n          schema: z.object({\n            ok: z.literal(true),\n            created: z.number(),\n            updated: z.number(),\n            deleted: z.number(),\n          }),\n        },\n        {\n          status: 422,\n          description: 'Validation error',\n          schema: z.object({\n            ok: z.literal(false),\n            errors: z.array(z.object({ path: z.string(), message: z.string() })),\n          }),\n        },\n        {\n          status: 409,\n          description: 'One or more rows target a time entry locked in a closed report; nothing was saved',\n          schema: z.object({\n            code: z.literal('time_entry_locked'),\n            error: z.string(),\n            lockedReportId: z.string().uuid().nullable(),\n            lockedEntryIds: z.array(z.string().uuid()),\n            lockedReportIds: z.array(z.string().uuid()),\n          }),\n        },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB,4BAA4B;AAI1D,SAAS,gBAAgB,iBAAiB,kBAAkB,qBAAqB;AACjF;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAMnC,SAAS,YAAY,OAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AACtF;AAUA,SAAS,oBAAoB,QAAsC;AACjE,SAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AACjE;AAgBO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAEzG,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,uCAAuC,EAAE,CAAC;AAAA,IACzH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,MAC/D,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,6BAA6B,UAAU,QAAQ,IAAI;AAClE,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,WAAW;AAAA,QACjD,MAAM,MAAM,KAAK,KAAK,GAAG;AAAA,QACzB,SAAS,MAAM;AAAA,MACjB,EAAE;AACF,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjE;AAEA,UAAM,EAAE,QAAQ,IAAI,OAAO;AAc3B,UAAM,aAAa,QAAQ,OAAO,CAAC,UAAU,MAAM,WAAW,MAAS;AACvE,QAAI,WAAW,SAAS,GAAG;AACzB,YAAM,UAAU;AAAA,QACd;AAAA,QACA;AAAA,MACF;AACA,aAAO,oBAAoB,WAAW,IAAI,OAAO,EAAE,MAAM,oBAAoB,QAAQ,EAAE,CAAC;AAAA,IAC1F;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,KAAK,KAAK,UAAU,gBAAgB,WAAW,KAAK;AAAA,MAC9D,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,yCAAyC,EAAE,CAAC;AAAA,IACvI;AACA,UAAM,gBAAgB,YAAY;AAOlC,UAAM,oBAAoB;AAAA,MACxB,GAAG,IAAI;AAAA,QACL,QACG,IAAI,CAAC,UAAU,MAAM,MAAM,EAC3B,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,MACzE;AAAA,IACF;AACA,UAAM,YAAY,oBAAI,IAAmD;AACzE,QAAI,kBAAkB,SAAS,GAAG;AAChC,YAAM,aAAa,MAAM,GAAG,KAAK,eAAe;AAAA,QAC9C,IAAI,EAAE,KAAK,kBAAkB;AAAA,QAC7B;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,GAAG,EAAE,QAAQ,CAAC,MAAM,eAAe,EAAE,CAAC;AACtC,iBAAW,QAAQ,WAAY,WAAU,IAAI,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,eAAe,KAAK,cAAc,CAAC;AACxG,YAAM,iBAAiB,kBAAkB,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;AAC1E,UAAI,eAAe,SAAS,GAAG;AAC7B,cAAM,UAAU,UAAU,wCAAwC,mCAAmC;AACrG,eAAO;AAAA,UACL,eAAe,IAAI,CAAC,QAAQ,EAAE,MAAM,oBAAoB,SAAS,OAAO,GAAG,EAAE;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAMA,UAAM,eAAkC,CAAC;AACzC,UAAM,uBAAuC,CAAC;AAC9C,UAAM,4BAA4C,CAAC;AACnD,eAAW,SAAS,SAAS;AAC3B,YAAM,OAAO,MAAM,SAAS,UAAU,IAAI,MAAM,MAAM,KAAK,OAAO;AAClE,YAAM,gBAAgB,0BAA0B,MAAM,eAAe,IAAI;AACzE,UAAI,CAAC,eAAe;AAClB,6BAAqB,KAAK;AAAA,UACxB,MAAM;AAAA,UACN,SAAS,UAAU,2CAA2C,8BAA8B;AAAA,QAC9F,CAAC;AACD;AAAA,MACF;AACA,UAAI,CAAC,4BAA4B,MAAM,aAAa,GAAG;AACrD,kCAA0B,KAAK;AAAA,UAC7B,MAAM;AAAA,UACN,SAAS,UAAU,wCAAwC,mCAAmC;AAAA,UAC9F,OAAO,MAAM;AAAA,QACf,CAAC;AACD;AAAA,MACF;AACA,mBAAa,KAAK,EAAE,OAAO,MAAM,cAAc,CAAC;AAAA,IAClD;AACA,QAAI,qBAAqB,SAAS,KAAK,0BAA0B,SAAS,GAAG;AAC3E,aAAO,oBAAoB,CAAC,GAAG,sBAAsB,GAAG,yBAAyB,CAAC;AAAA,IACpF;AAMA,UAAM,uBAAuB,CAAC,GAAG,IAAI,IAAI,aAAa,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC;AACtF,UAAM,eAAe,oBAAI,IAAkF;AAC3G,QAAI,qBAAqB,SAAS,GAAG;AACnC,YAAM,gBAAgB,MAAM,GAAG,KAAK,kBAAkB;AAAA,QACpD,IAAI,EAAE,KAAK,qBAAqB;AAAA,QAChC;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,GAAG,EAAE,QAAQ,CAAC,MAAM,gBAAgB,mBAAmB,EAAE,CAAC;AAC1D,iBAAW,WAAW,eAAe;AACnC,qBAAa,IAAI,QAAQ,IAAI;AAAA,UAC3B,cAAc,QAAQ,gBAAgB;AAAA,UACtC,mBAAmB,QAAQ,qBAAqB;AAAA,QAClD,CAAC;AAAA,MACH;AACA,YAAM,aAAa,qBAAqB,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;AAC5E,UAAI,WAAW,SAAS,GAAG;AACzB,cAAM,UAAU;AAAA,UACd;AAAA,UACA;AAAA,QACF;AACA,eAAO;AAAA,UACL,WAAW,IAAI,CAAC,QAAQ,EAAE,MAAM,2BAA2B,SAAS,OAAO,GAAG,EAAE;AAAA,QAClF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc,mCAAmC;AAAA,MACjD,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AACA,UAAM,cAAc,MAAM,uBAAuB,WAAW,UAAU;AACtE,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,cAAc,aACjB,IAAI,CAAC,QAAQ,IAAI,MAAM,EAAE,EACzB,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAKvE,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAM,mBAAmB,MAAM,GAAG;AAAA,QAChC;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,YAAY,GAAG,UAAU,gBAAgB,eAAe,WAAW,KAAK;AAAA,QACrF,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,MACnB;AACA,YAAM,gBAAgB,IAAI,IAAI,iBAAiB,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC;AACvE,YAAM,aAAa,YAAY,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;AACpE,UAAI,WAAW,SAAS,GAAG;AACzB,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,IAAI;AAAA,YACJ,QAAQ,WAAW,IAAI,CAAC,QAAQ;AAAA,cAC9B,MAAM;AAAA,cACN,SAAS;AAAA,gBACP;AAAA,gBACA;AAAA,cACF;AAAA,cACA,OAAO;AAAA,YACT,EAAE;AAAA,UACJ;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAwBA,UAAM,aAAa,aAAa,OAAO,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE;AAC7D,UAAM,cAAc,WAAW,IAAI,CAAC,QAAQ,GAAG,YAAY,IAAI,MAAM,IAAI,CAAC,IAAI,IAAI,aAAa,EAAE;AACjG,UAAM,iBAA4C,CAAC;AACnD,QAAI,YAAY,SAAS,EAAG,gBAAe,KAAK,EAAE,IAAI,EAAE,KAAK,YAAY,EAAE,CAAC;AAC5E,QAAI,YAAY,SAAS,GAAG;AAC1B,qBAAe,KAAK;AAAA,QAClB,MAAM,EAAE,KAAK,WAAW,IAAI,CAAC,QAAQ,IAAI,MAAM,IAAI,EAAE;AAAA,QACrD,eAAe,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,WAAW,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC,EAAE;AAAA,MACjF,CAAC;AAAA,IACH;AACA,QAAI,eAAe,SAAS,GAAG;AAC7B,YAAM,gBAAgB,IAAI,IAAI,WAAW;AACzC,YAAM,gBAAgB,IAAI,IAAI,WAAW;AACzC,YAAM,mBAAmB,MAAM,GAAG;AAAA,QAChC;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA,WAAW;AAAA,UACX,gBAAgB,EAAE,KAAK,KAAK;AAAA,UAC5B,KAAK;AAAA,QACP;AAAA,QACA,EAAE,QAAQ,CAAC,MAAM,kBAAkB,QAAQ,eAAe,EAAE;AAAA,MAC9D;AAGA,YAAM,UAAgC,iBAAiB;AAAA,QACrD,CAAC,QACC,cAAc,IAAI,IAAI,EAAE,KACxB,cAAc,IAAI,GAAG,YAAY,IAAI,IAAI,CAAC,IAAI,IAAI,iBAAiB,EAAE,EAAE;AAAA,MAC3E;AACA,UAAI,QAAQ,SAAS,GAAG;AACtB,cAAM;AAAA,UACJ,QAAQ,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,gBAAgB,IAAI,eAAe,EAAE;AAAA,UACzE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAYA,UAAM,WAAW,MAAM,yBAAyB,WAAW,QAAQ;AAEnE,UAAM,EAAE,QAAQ,eAAe,IAAI,MAAM,GAAG,cAAc,OAAO,QAAQ;AACvE,UAAI,UAAU;AACd,UAAI,UAAU;AACd,UAAI,UAAU;AACd,YAAM,UAA2B,CAAC;AAElC,YAAM,kBAAkB,YAAY,SAAS,IACzC,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,YAAY,GAAG,UAAU,gBAAgB,eAAe,WAAW,KAAK;AAAA,QACrF,CAAC;AAAA,QACD;AAAA,MACF,IACA,CAAC;AAEL,YAAM,cAAc,IAAI,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;AAE7E,iBAAW,EAAE,OAAO,MAAM,cAAc,KAAK,cAAc;AACzD,cAAM,UAAU,aAAa,IAAI,aAAa,KAAK;AAInD,cAAM,QAAQ,2BAA2B,KAAK;AAC9C,YAAI,MAAM,MAAM,YAAY,IAAI,MAAM,EAAE,GAAG;AACzC,gBAAM,WAAW,YAAY,IAAI,MAAM,EAAE;AACzC,cAAI,MAAM,oBAAoB,GAAG;AAC/B,qBAAS,YAAY,oBAAI,KAAK;AAC9B;AACA,oBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,UACtD,OAAO;AAUL,kBAAM,WAAW,2BAA2B;AAAA,cAC1C,QAAQ,8BAA8B;AAAA,gBACpC,QAAQ;AAAA,kBACN,WAAW,SAAS,aAAa;AAAA,kBACjC,SAAS,SAAS,WAAW;AAAA,kBAC7B,iBAAiB,SAAS;AAAA,gBAC5B;AAAA,gBACA,UAAU,SAAS;AAAA,gBACnB,QAAQ,MAAM;AAAA,cAChB,CAAC;AAAA,cACD,WAAW;AAAA,cACX,SAAS;AAAA,cACT,iBAAiB,MAAM;AAAA,YACzB,CAAC;AACD,kBAAM,iBAAiB,mBAAmB,SAAS,iBAAiB;AACpE,qBAAS,OAAO,MAAM;AACtB,qBAAS,gBAAgB;AAKzB,gBAAI,eAAgB,UAAS,mBAAmB,SAAS,gBAAgB;AACzE,qBAAS,YAAY,SAAS;AAC9B,qBAAS,UAAU,SAAS;AAC5B,qBAAS,kBAAkB,SAAS;AAGpC,qBAAS,iBAAiB,kBAAkB,SAAS,iBAAiB,UAAU;AAAA,cAC9E;AAAA,cACA;AAAA,YACF,CAAC;AACD,gBAAI,MAAM,WAAW,OAAW,UAAS,SAAS,MAAM,MAAM;AAC9D,gBAAI,MAAM,eAAe,OAAW,UAAS,aAAa,MAAM;AAChE,gBAAI,MAAM,uBAAuB,QAAW;AAC1C,uBAAS,qBAAqB,8BAA8B,MAAM,kBAAkB;AAAA,YACtF;AACA,gBAAI,UAAU,OAAW,UAAS,QAAQ;AAC1C,qBAAS,YAAY,oBAAI,KAAK;AAC9B;AACA,oBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,UACtD;AAAA,QACF,OAAO;AACL,gBAAM,MAAM,oBAAI,KAAK;AACrB,gBAAM,WAAW,IAAI,OAAO,gBAAgB;AAAA,YAC1C;AAAA,YACA;AAAA,YACA;AAAA,YACA,MAAM,MAAM;AAAA,YACZ;AAAA,YACA,QAAQ,MAAM,MAAM;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB,gBAAgB,kBAAkB,MAAM,iBAAiB,UAAU;AAAA,cACjE;AAAA,cACA;AAAA,YACF,CAAC;AAAA,YACD,OAAO,SAAS;AAAA,YAChB,YAAY,yBAAyB;AAAA,cACnC,WAAW,MAAM;AAAA,cACjB;AAAA,cACA;AAAA,cACA,OAAO,EAAE,UAAU,eAAe;AAAA,YACpC,CAAC;AAAA,YACD,oBAAoB,8BAA8B,MAAM,kBAAkB;AAAA,YAC1E,kBAAkB,SAAS,gBAAgB;AAAA,YAC3C,QAAQ;AAAA,YACR,WAAW;AAAA,YACX,WAAW;AAAA,UACb,CAAC;AACD;AACA,kBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,QACtD;AAAA,MACF;AAEA,YAAM,IAAI,MAAM;AAChB,aAAO,EAAE,QAAQ,EAAE,SAAS,SAAS,QAAQ,GAAG,gBAAgB,QAAQ;AAAA,IAC1E,CAAC;AAED,UAAM,aAAa,UAAU,QAAoB,YAAY;AAC7D,eAAW,UAAU,gBAAgB;AACnC,YAAM,oBAAoB;AAAA,QACxB;AAAA,QACA,QAAQ,OAAO;AAAA,QACf,QAAQ,OAAO;AAAA,QACf,aAAa;AAAA,UACX,IAAI,OAAO,OAAO;AAAA,UAClB,gBAAgB,OAAO,OAAO;AAAA,UAC9B,UAAU,OAAO,OAAO;AAAA,QAC1B;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,UAAM,qBAAqB,UAAU;AAErC,UAAM,uBAAuB,oBAAI,IAAY;AAC7C,eAAW,UAAU,gBAAgB;AACnC,UAAI,qBAAqB,IAAI,OAAO,OAAO,EAAE,EAAG;AAChD,2BAAqB,IAAI,OAAO,OAAO,EAAE;AACzC,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,IAAI,OAAO,OAAO;AAAA,UAClB,gBAAgB,OAAO,OAAO;AAAA,UAC9B,UAAU,OAAO,OAAO;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,QAAQ,OAAO,MAAM;AAAA,MACvB;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAKA,SAAK,eAAe,4CAA4C;AAAA,MAC9D;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH,UAAU,eAAe,IAAI,CAAC,WAAW,OAAO,OAAO,EAAE;AAAA,IAC3D,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,wDAAwD,EAAE,IAAI,CAAC;AAAA,IAC9E,CAAC;AAED,WAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,MAAM,GAAG,OAAO,CAAC;AAAA,EACrD,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,6CAA6C,EAAE,IAAI,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,oCAAoC,mCAAmC,EAAE;AAAA,MAC5F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,IAAI;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,KAAK;AAAA,YACnB,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;AAAA,UACrE,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,QAAQ,mBAAmB;AAAA,YACnC,OAAO,EAAE,OAAO;AAAA,YAChB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,YAC3C,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,YACzC,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,UAC5C,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { emitCrudSideEffects, flushCrudSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { StaffTimeEntry, StaffTeamMember, StaffTimeProject, StaffTimeTask } from '../../../../data/entities'\nimport {\n  staffTimeEntryBulkSaveSchema,\n  type StaffTimeEntryBulkSaveInput,\n} from '../../../../data/validators'\nimport {\n  buildTimeEntryLockedError,\n  rebaseTimeEntryIntervalToDate,\n  reconcileTimeEntryInterval,\n  resolveTimeEntryBillable,\n  resolveTimeEntryNotesInput,\n  resolveTimeEntryProjectId,\n  resolveTimeEntrySettings,\n  roundedMinutesFor,\n  timeEntryTaskMatchesProject,\n  toStoredTimeEntryRateOverride,\n  type LockedTimeEntryRef,\n} from '../../../../commands/timesheets-entries'\nimport { staffTimeEntryCrudEvents } from '../../../../lib/crud'\nimport { emitStaffEvent } from '../../../../events'\nimport { invalidateStaffTimeEntryCache } from '../../../../lib/timesheets/timeEntryCacheInvalidation'\nimport {\n  STAFF_TIME_TRACKING_RESOURCE_KINDS,\n  runStaffMutationGuardAfterSuccess,\n  runStaffMutationGuards,\n} from '../../../guards'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('staff')\n\n/**\n * A grid cell is addressed by the day the work started, never by the timestamp,\n * so both sides of the comparison collapse to `YYYY-MM-DD` (D-8).\n */\nfunction cellDateKey(value: Date | string | null | undefined): string {\n  if (!value) return ''\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? String(value) : date.toISOString().slice(0, 10)\n}\n\ntype BulkRowError = { path: string; message: string; value?: unknown }\n\n/**\n * The batch answers with a per-row error list rather than a thrown 422: one grid\n * save spans a week of cells, so the client needs to know WHICH row it must fix.\n * The single-entry command raises the same refusals as `CrudHttpError` field\n * errors \u2014 same rule, different reporting shape.\n */\nfunction bulkValidationError(errors: BulkRowError[]): NextResponse {\n  return NextResponse.json({ ok: false, errors }, { status: 422 })\n}\n\n/**\n * A row as the write loop needs it: the payload plus the two things that must be\n * settled before the lock gate can address a cell \u2014 the task it names (validated\n * in scope) and the project the entry actually lands on, which a task-only row\n * inherits from its task exactly as the single-entry path does.\n */\ntype BulkEntryInput = StaffTimeEntryBulkSaveInput['entries'][number]\n\ntype ResolvedBulkRow = {\n  entry: BulkEntryInput\n  task: { id: string; timeProjectId: string } | null\n  timeProjectId: string\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, { error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.') })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = staffTimeEntryBulkSaveSchema.safeParse(session.body)\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((issue) => ({\n        path: issue.path.join('.'),\n        message: issue.message,\n      }))\n      return NextResponse.json({ ok: false, errors }, { status: 422 })\n    }\n\n    const { entries } = parsed.data\n\n    // Tags are REFUSED here rather than accepted and dropped.\n    //\n    // The single-entry path assigns tags by dispatching the tag commands, which\n    // fork their own EntityManager so they can carry their own audit entry, undo\n    // and lock check. Inside this route's `em.transactional` that fork would not\n    // see the rows the transaction has not committed yet, and dispatching AFTER\n    // the commit would answer `{ ok: true, created: n }` for a batch whose tags\n    // silently failed \u2014 a response carrying only counts cannot say which cell\n    // lost them, which is the very silent-success class this route is being\n    // fixed for. So the row is rejected and the user is pointed at the entry\n    // dialog, which writes tags through the commands with all of their\n    // guarantees intact.\n    const taggedRows = entries.filter((entry) => entry.tagIds !== undefined)\n    if (taggedRows.length > 0) {\n      const message = translate(\n        'staff.timesheets.errors.bulkTagsUnsupported',\n        'Tags cannot be changed from the timesheet grid. Open the time entry to edit its tags.',\n      )\n      return bulkValidationError(taggedRows.map(() => ({ path: 'entries[].tagIds', message })))\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const staffMember = await findOneWithDecryption(\n      em,\n      StaffTeamMember,\n      { userId: auth.sub, tenantId, organizationId, deletedAt: null },\n      {},\n      scopeCtx,\n    )\n    if (!staffMember) {\n      throw new CrudHttpError(403, { error: translate('staff.timesheets.errors.noStaffMember', 'No staff member linked to your account.') })\n    }\n    const staffMemberId = staffMember.id\n\n    // Validate that all referenced taskIds exist and are in-scope, in one query\n    // for the whole batch. Same rule the single-entry path applies through\n    // `requireTaskInScope`: a dangling task reference is refused rather than\n    // stored, because the task rollups aggregate entries by `task_id` and a stale\n    // or foreign UUID would silently move hours onto another project's card.\n    const referencedTaskIds = [\n      ...new Set(\n        entries\n          .map((entry) => entry.taskId)\n          .filter((id): id is string => typeof id === 'string' && id.length > 0),\n      ),\n    ]\n    const tasksById = new Map<string, { id: string; timeProjectId: string }>()\n    if (referencedTaskIds.length > 0) {\n      const validTasks = await em.find(StaffTimeTask, {\n        id: { $in: referencedTaskIds },\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }, { fields: ['id', 'timeProjectId'] })\n      for (const task of validTasks) tasksById.set(task.id, { id: task.id, timeProjectId: task.timeProjectId })\n      const invalidTaskIds = referencedTaskIds.filter((id) => !tasksById.has(id))\n      if (invalidTaskIds.length > 0) {\n        const message = translate('staff.timesheets.errors.taskNotFound', 'Task not found or not accessible.')\n        return bulkValidationError(\n          invalidTaskIds.map((id) => ({ path: 'entries[].taskId', message, value: id })),\n        )\n      }\n    }\n\n    // Every row is pinned to the project it will actually land on BEFORE the lock\n    // gate runs, because the gate addresses a cell by (project, date) \u2014 a task row\n    // that inherited its project must be checked against that inherited cell, not\n    // against a blank one.\n    const resolvedRows: ResolvedBulkRow[] = []\n    const missingProjectErrors: BulkRowError[] = []\n    const taskProjectMismatchErrors: BulkRowError[] = []\n    for (const entry of entries) {\n      const task = entry.taskId ? tasksById.get(entry.taskId) ?? null : null\n      const timeProjectId = resolveTimeEntryProjectId(entry.timeProjectId, task)\n      if (!timeProjectId) {\n        missingProjectErrors.push({\n          path: 'entries[].timeProjectId',\n          message: translate('staff.timesheets.errors.projectRequired', 'Time project id is required.'),\n        })\n        continue\n      }\n      if (!timeEntryTaskMatchesProject(task, timeProjectId)) {\n        taskProjectMismatchErrors.push({\n          path: 'entries[].taskId',\n          message: translate('staff.timesheets.errors.taskNotFound', 'Task not found or not accessible.'),\n          value: entry.taskId,\n        })\n        continue\n      }\n      resolvedRows.push({ entry, task, timeProjectId })\n    }\n    if (missingProjectErrors.length > 0 || taskProjectMismatchErrors.length > 0) {\n      return bulkValidationError([...missingProjectErrors, ...taskProjectMismatchErrors])\n    }\n\n    // Validate that all referenced timeProjectIds exist and are in-scope. The\n    // project rows are kept, not just their ids: a created entry snapshots the\n    // project's currency and inherits its billable default (D-3), so one query\n    // serves validation and both defaults.\n    const referencedProjectIds = [...new Set(resolvedRows.map((row) => row.timeProjectId))]\n    const projectsById = new Map<string, { currencyCode?: string | null; billableByDefault?: boolean | null }>()\n    if (referencedProjectIds.length > 0) {\n      const validProjects = await em.find(StaffTimeProject, {\n        id: { $in: referencedProjectIds },\n        tenantId,\n        organizationId,\n        deletedAt: null,\n      }, { fields: ['id', 'currencyCode', 'billableByDefault'] })\n      for (const project of validProjects) {\n        projectsById.set(project.id, {\n          currencyCode: project.currencyCode ?? null,\n          billableByDefault: project.billableByDefault ?? null,\n        })\n      }\n      const invalidIds = referencedProjectIds.filter((id) => !projectsById.has(id))\n      if (invalidIds.length > 0) {\n        const message = translate(\n          'staff.timesheets.errors.projectNotFound',\n          'Time project not found or not accessible.',\n        )\n        return bulkValidationError(\n          invalidIds.map((id) => ({ path: 'entries[].timeProjectId', message, value: id })),\n        )\n      }\n    }\n\n    const guardInput = {\n      tenantId,\n      organizationId,\n      userId: auth.sub ?? '',\n      resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n      resourceId: staffMemberId,\n      operation: 'update' as const,\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as unknown as Record<string, unknown>,\n    }\n    const guardResult = await runStaffMutationGuards(container, guardInput)\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const existingIds = resolvedRows\n      .map((row) => row.entry.id)\n      .filter((id): id is string => typeof id === 'string' && id.length > 0)\n\n    // Validate referenced entry IDs upfront: a stale or foreign UUID would\n    // otherwise fall through to the create branch in the loop below and insert\n    // a duplicate row with that ID-less new identity. Reject as 422 instead.\n    if (existingIds.length > 0) {\n      const resolvedExisting = await em.find(\n        StaffTimeEntry,\n        { id: { $in: existingIds }, tenantId, organizationId, staffMemberId, deletedAt: null },\n        { fields: ['id'] },\n      )\n      const resolvedIdSet = new Set(resolvedExisting.map((entry) => entry.id))\n      const invalidIds = existingIds.filter((id) => !resolvedIdSet.has(id))\n      if (invalidIds.length > 0) {\n        return NextResponse.json(\n          {\n            ok: false,\n            errors: invalidIds.map((id) => ({\n              path: 'entries[].id',\n              message: translate(\n                'staff.timesheets.errors.entryNotFound',\n                'Time entry not found, deleted, or not owned by you.',\n              ),\n              value: id,\n            })),\n          },\n          { status: 422 },\n        )\n      }\n    }\n\n    // --- Lock gate (risk R3) -------------------------------------------------\n    //\n    // This is the endpoint the lock is most likely to leak through, because the\n    // grid addresses a cell by (project, date) and only carries an id when the\n    // client happened to have one loaded. So both shapes are checked:\n    //\n    //  * a row naming an id that resolves to a frozen entry, and\n    //  * an id-less row landing on a (project, date) cell a frozen entry already\n    //    occupies \u2014 the grid renders one summed value per cell, so creating a\n    //    second row there silently restates hours a closed report has billed.\n    //\n    // The batch fails WHOLESALE, before the transaction opens. A grid save is one\n    // user gesture spanning a week of cells and the response carries only counts,\n    // so applying the unlocked rows would leave the client unable to tell which\n    // cells landed \u2014 and the route already rejects the whole payload for an\n    // unknown project or a stale entry id, so a partial 409 would be the odd one\n    // out. The 409 names every offending id and the reports that froze them, so\n    // the grid can mark exactly those cells read-only and the user retries the\n    // rest after reloading (which is also what makes the lock badge appear).\n    //\n    // The cell is addressed by the RESOLVED project, so a task row that inherited\n    // its project is checked against the cell it will really occupy.\n    const idlessRows = resolvedRows.filter((row) => !row.entry.id)\n    const idlessCells = idlessRows.map((row) => `${cellDateKey(row.entry.date)}|${row.timeProjectId}`)\n    const lockConditions: Record<string, unknown>[] = []\n    if (existingIds.length > 0) lockConditions.push({ id: { $in: existingIds } })\n    if (idlessCells.length > 0) {\n      lockConditions.push({\n        date: { $in: idlessRows.map((row) => row.entry.date) },\n        timeProjectId: { $in: [...new Set(idlessRows.map((row) => row.timeProjectId))] },\n      })\n    }\n    if (lockConditions.length > 0) {\n      const existingIdSet = new Set(existingIds)\n      const idlessCellSet = new Set(idlessCells)\n      const lockedCandidates = await em.find(\n        StaffTimeEntry,\n        {\n          tenantId,\n          organizationId,\n          staffMemberId,\n          deletedAt: null,\n          lockedReportId: { $ne: null },\n          $or: lockConditions,\n        },\n        { fields: ['id', 'lockedReportId', 'date', 'timeProjectId'] },\n      )\n      // The (date \u00D7 project) condition above is a cross product, so it can match a\n      // locked entry on a cell the payload never touches \u2014 narrowed here.\n      const blocked: LockedTimeEntryRef[] = lockedCandidates.filter(\n        (row) =>\n          existingIdSet.has(row.id) ||\n          idlessCellSet.has(`${cellDateKey(row.date)}|${row.timeProjectId ?? ''}`),\n      )\n      if (blocked.length > 0) {\n        throw buildTimeEntryLockedError(\n          blocked.map((row) => ({ id: row.id, lockedReportId: row.lockedReportId })),\n          translate,\n        )\n      }\n    }\n\n    type PendingChange = {\n      action: 'created' | 'updated' | 'deleted'\n      entity: StaffTimeEntry\n    }\n\n    // D-7 makes `rounded_minutes` the only input to cost, and this route writes\n    // durations outside the entries command \u2014 so every row it touches is rounded\n    // with the same tenant rule the command uses. The settings read is hoisted out\n    // of the loop because it is tenant-scoped and identical for every row; the\n    // billable default a created row falls back to comes from the same snapshot.\n    const settings = await resolveTimeEntrySettings(container, tenantId)\n\n    const { counts, pendingChanges } = await em.transactional(async (trx) => {\n      let created = 0\n      let updated = 0\n      let deleted = 0\n      const changes: PendingChange[] = []\n\n      const existingEntries = existingIds.length > 0\n        ? await findWithDecryption(\n            trx,\n            StaffTimeEntry,\n            { id: { $in: existingIds }, tenantId, organizationId, staffMemberId, deletedAt: null },\n            {},\n            scopeCtx,\n          )\n        : []\n\n      const existingMap = new Map(existingEntries.map((entry) => [entry.id, entry]))\n\n      for (const { entry, task, timeProjectId } of resolvedRows) {\n        const project = projectsById.get(timeProjectId) ?? null\n        // Both branches read the five fields the schema has always accepted\n        // through the SAME helpers the single-entry command uses, so a grid write\n        // and a dialog write cannot settle them differently (#silent-no-op).\n        const notes = resolveTimeEntryNotesInput(entry)\n        if (entry.id && existingMap.has(entry.id)) {\n          const existing = existingMap.get(entry.id)!\n          if (entry.durationMinutes === 0) {\n            existing.deletedAt = new Date()\n            deleted++\n            changes.push({ action: 'deleted', entity: existing })\n          } else {\n            // T4.10(a). A grid cell carries a duration and nothing else, so writing\n            // it straight onto an entry that has clocks would store a two-hour\n            // duration against a 09:00\u201310:00 span \u2014 exactly the contradiction the\n            // single-entry path already refuses to store. The same reconciliation\n            // is called here rather than re-derived: only-a-duration means\n            // `started_at` anchors and `ended_at` shifts to match, a clock that\n            // does not exist is never manufactured (so a cell whose entry has no\n            // clocks keeps having none, and a running timer is not stopped), and a\n            // re-dated row takes its clocks with it.\n            const interval = reconcileTimeEntryInterval({\n              stored: rebaseTimeEntryIntervalToDate({\n                stored: {\n                  startedAt: existing.startedAt ?? null,\n                  endedAt: existing.endedAt ?? null,\n                  durationMinutes: existing.durationMinutes,\n                },\n                fromDate: existing.date,\n                toDate: entry.date,\n              }),\n              startedAt: undefined,\n              endedAt: undefined,\n              durationMinutes: entry.durationMinutes,\n            })\n            const projectChanged = timeProjectId !== (existing.timeProjectId ?? null)\n            existing.date = entry.date\n            existing.timeProjectId = timeProjectId\n            // Snapshotted, never joined at read time, so a later project currency\n            // change cannot re-denominate money already reported (D-3) \u2014 and only\n            // restated when the entry actually moves between projects, exactly as\n            // the single-entry update command does it.\n            if (projectChanged) existing.rateCurrencyCode = project?.currencyCode ?? null\n            existing.startedAt = interval.startedAt\n            existing.endedAt = interval.endedAt\n            existing.durationMinutes = interval.durationMinutes\n            // D-7 keeps `rounded_minutes` the only input to cost, so it is restated\n            // from the effective duration the reconciliation settled on.\n            existing.roundedMinutes = roundedMinutesFor(interval.durationMinutes, settings, {\n              tenantId,\n              organizationId,\n            })\n            if (entry.taskId !== undefined) existing.taskId = task?.id ?? null\n            if (entry.isBillable !== undefined) existing.isBillable = entry.isBillable\n            if (entry.rateOverrideAmount !== undefined) {\n              existing.rateOverrideAmount = toStoredTimeEntryRateOverride(entry.rateOverrideAmount)\n            }\n            if (notes !== undefined) existing.notes = notes\n            existing.updatedAt = new Date()\n            updated++\n            changes.push({ action: 'updated', entity: existing })\n          }\n        } else {\n          const now = new Date()\n          const newEntry = trx.create(StaffTimeEntry, {\n            tenantId,\n            organizationId,\n            staffMemberId,\n            date: entry.date,\n            timeProjectId,\n            taskId: task?.id ?? null,\n            durationMinutes: entry.durationMinutes,\n            roundedMinutes: roundedMinutesFor(entry.durationMinutes, settings, {\n              tenantId,\n              organizationId,\n            }),\n            notes: notes ?? null,\n            isBillable: resolveTimeEntryBillable({\n              requested: entry.isBillable,\n              project,\n              settings,\n              scope: { tenantId, organizationId },\n            }),\n            rateOverrideAmount: toStoredTimeEntryRateOverride(entry.rateOverrideAmount),\n            rateCurrencyCode: project?.currencyCode ?? null,\n            source: 'manual',\n            createdAt: now,\n            updatedAt: now,\n          })\n          created++\n          changes.push({ action: 'created', entity: newEntry })\n        }\n      }\n\n      await trx.flush()\n      return { counts: { created, updated, deleted }, pendingChanges: changes }\n    })\n\n    const dataEngine = container.resolve<DataEngine>('dataEngine')\n    for (const change of pendingChanges) {\n      await emitCrudSideEffects({\n        dataEngine,\n        action: change.action,\n        entity: change.entity,\n        identifiers: {\n          id: change.entity.id,\n          organizationId: change.entity.organizationId,\n          tenantId: change.entity.tenantId,\n        },\n        events: staffTimeEntryCrudEvents,\n      })\n    }\n    await flushCrudSideEffects(dataEngine)\n\n    const invalidatedRecordIds = new Set<string>()\n    for (const change of pendingChanges) {\n      if (invalidatedRecordIds.has(change.entity.id)) continue\n      invalidatedRecordIds.add(change.entity.id)\n      await invalidateStaffTimeEntryCache(\n        container,\n        {\n          id: change.entity.id,\n          organizationId: change.entity.organizationId,\n          tenantId: change.entity.tenantId,\n        },\n        tenantId,\n        `bulk:${change.action}`,\n      )\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      await runStaffMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n        tenantId,\n        organizationId,\n        userId: auth.sub ?? '',\n        resourceKind: STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n        resourceId: staffMemberId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n      })\n    }\n\n    // One batch-level event beside the per-row CRUD events already flushed above.\n    // It carries no `id`, so the entry-scoped subscribers that key off one record\n    // skip it and only the batch-aware ones (payroll exports, audit mirrors) react.\n    void emitStaffEvent('staff.timesheets.time_entry.bulk_updated', {\n      tenantId,\n      organizationId,\n      staffMemberId,\n      ...counts,\n      entryIds: pendingChanges.map((change) => change.entity.id),\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit time_entry.bulk_updated failed', { err })\n    })\n\n    return session.respond(200, { ok: true, ...counts })\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.bulk failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.bulkSave', 'Failed to bulk save time entries.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Bulk save time entries',\n  methods: {\n    POST: {\n      summary: 'Bulk save time entries',\n      description:\n        'Creates, updates, or soft-deletes multiple time entries in a single request. Entries with durationMinutes=0 and an existing id are soft-deleted. A row may name a taskId and let timeProjectId follow from it; task, description/notes precedence, isBillable defaulting, the rate override and the project currency snapshot follow the single-entry path exactly. tagIds is rejected with 422 \u2014 tags are edited from the time entry itself so their audit trail and undo stay intact. The whole batch is rejected with 409 time_entry_locked when any row targets \u2014 by id, or by landing on its (project, date) cell \u2014 an entry frozen in a closed report.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeEntryBulkSaveSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Bulk save completed',\n          schema: z.object({\n            ok: z.literal(true),\n            created: z.number(),\n            updated: z.number(),\n            deleted: z.number(),\n          }),\n        },\n        {\n          status: 422,\n          description: 'Validation error',\n          schema: z.object({\n            ok: z.literal(false),\n            errors: z.array(z.object({ path: z.string(), message: z.string() })),\n          }),\n        },\n        {\n          status: 409,\n          description: 'One or more rows target a time entry locked in a closed report; nothing was saved',\n          schema: z.object({\n            code: z.literal('time_entry_locked'),\n            error: z.string(),\n            lockedReportId: z.string().uuid().nullable(),\n            lockedEntryIds: z.array(z.string().uuid()),\n            lockedReportIds: z.array(z.string().uuid()),\n          }),\n        },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB,4BAA4B;AAI1D,SAAS,gBAAgB,iBAAiB,kBAAkB,qBAAqB;AACjF;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAMnC,SAAS,YAAY,OAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AACtF;AAUA,SAAS,oBAAoB,QAAsC;AACjE,SAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AACjE;AAgBO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAEzG,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,uCAAuC,EAAE,CAAC;AAAA,IACzH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,MAC/D,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,6BAA6B,UAAU,QAAQ,IAAI;AAClE,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,WAAW;AAAA,QACjD,MAAM,MAAM,KAAK,KAAK,GAAG;AAAA,QACzB,SAAS,MAAM;AAAA,MACjB,EAAE;AACF,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjE;AAEA,UAAM,EAAE,QAAQ,IAAI,OAAO;AAc3B,UAAM,aAAa,QAAQ,OAAO,CAAC,UAAU,MAAM,WAAW,MAAS;AACvE,QAAI,WAAW,SAAS,GAAG;AACzB,YAAM,UAAU;AAAA,QACd;AAAA,QACA;AAAA,MACF;AACA,aAAO,oBAAoB,WAAW,IAAI,OAAO,EAAE,MAAM,oBAAoB,QAAQ,EAAE,CAAC;AAAA,IAC1F;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,KAAK,KAAK,UAAU,gBAAgB,WAAW,KAAK;AAAA,MAC9D,CAAC;AAAA,MACD;AAAA,IACF;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,yCAAyC,yCAAyC,EAAE,CAAC;AAAA,IACvI;AACA,UAAM,gBAAgB,YAAY;AAOlC,UAAM,oBAAoB;AAAA,MACxB,GAAG,IAAI;AAAA,QACL,QACG,IAAI,CAAC,UAAU,MAAM,MAAM,EAC3B,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,MACzE;AAAA,IACF;AACA,UAAM,YAAY,oBAAI,IAAmD;AACzE,QAAI,kBAAkB,SAAS,GAAG;AAChC,YAAM,aAAa,MAAM,GAAG,KAAK,eAAe;AAAA,QAC9C,IAAI,EAAE,KAAK,kBAAkB;AAAA,QAC7B;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,GAAG,EAAE,QAAQ,CAAC,MAAM,eAAe,EAAE,CAAC;AACtC,iBAAW,QAAQ,WAAY,WAAU,IAAI,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,eAAe,KAAK,cAAc,CAAC;AACxG,YAAM,iBAAiB,kBAAkB,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;AAC1E,UAAI,eAAe,SAAS,GAAG;AAC7B,cAAM,UAAU,UAAU,wCAAwC,mCAAmC;AACrG,eAAO;AAAA,UACL,eAAe,IAAI,CAAC,QAAQ,EAAE,MAAM,oBAAoB,SAAS,OAAO,GAAG,EAAE;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAMA,UAAM,eAAkC,CAAC;AACzC,UAAM,uBAAuC,CAAC;AAC9C,UAAM,4BAA4C,CAAC;AACnD,eAAW,SAAS,SAAS;AAC3B,YAAM,OAAO,MAAM,SAAS,UAAU,IAAI,MAAM,MAAM,KAAK,OAAO;AAClE,YAAM,gBAAgB,0BAA0B,MAAM,eAAe,IAAI;AACzE,UAAI,CAAC,eAAe;AAClB,6BAAqB,KAAK;AAAA,UACxB,MAAM;AAAA,UACN,SAAS,UAAU,2CAA2C,8BAA8B;AAAA,QAC9F,CAAC;AACD;AAAA,MACF;AACA,UAAI,CAAC,4BAA4B,MAAM,aAAa,GAAG;AACrD,kCAA0B,KAAK;AAAA,UAC7B,MAAM;AAAA,UACN,SAAS,UAAU,wCAAwC,mCAAmC;AAAA,UAC9F,OAAO,MAAM;AAAA,QACf,CAAC;AACD;AAAA,MACF;AACA,mBAAa,KAAK,EAAE,OAAO,MAAM,cAAc,CAAC;AAAA,IAClD;AACA,QAAI,qBAAqB,SAAS,KAAK,0BAA0B,SAAS,GAAG;AAC3E,aAAO,oBAAoB,CAAC,GAAG,sBAAsB,GAAG,yBAAyB,CAAC;AAAA,IACpF;AAMA,UAAM,uBAAuB,CAAC,GAAG,IAAI,IAAI,aAAa,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC;AACtF,UAAM,eAAe,oBAAI,IAAkF;AAC3G,QAAI,qBAAqB,SAAS,GAAG;AACnC,YAAM,gBAAgB,MAAM,GAAG,KAAK,kBAAkB;AAAA,QACpD,IAAI,EAAE,KAAK,qBAAqB;AAAA,QAChC;AAAA,QACA;AAAA,QACA,WAAW;AAAA,MACb,GAAG,EAAE,QAAQ,CAAC,MAAM,gBAAgB,mBAAmB,EAAE,CAAC;AAC1D,iBAAW,WAAW,eAAe;AACnC,qBAAa,IAAI,QAAQ,IAAI;AAAA,UAC3B,cAAc,QAAQ,gBAAgB;AAAA,UACtC,mBAAmB,QAAQ,qBAAqB;AAAA,QAClD,CAAC;AAAA,MACH;AACA,YAAM,aAAa,qBAAqB,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;AAC5E,UAAI,WAAW,SAAS,GAAG;AACzB,cAAM,UAAU;AAAA,UACd;AAAA,UACA;AAAA,QACF;AACA,eAAO;AAAA,UACL,WAAW,IAAI,CAAC,QAAQ,EAAE,MAAM,2BAA2B,SAAS,OAAO,GAAG,EAAE;AAAA,QAClF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc,mCAAmC;AAAA,MACjD,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AACA,UAAM,cAAc,MAAM,uBAAuB,WAAW,UAAU;AACtE,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,cAAc,aACjB,IAAI,CAAC,QAAQ,IAAI,MAAM,EAAE,EACzB,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAKvE,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAM,mBAAmB,MAAM,GAAG;AAAA,QAChC;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,YAAY,GAAG,UAAU,gBAAgB,eAAe,WAAW,KAAK;AAAA,QACrF,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,MACnB;AACA,YAAM,gBAAgB,IAAI,IAAI,iBAAiB,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC;AACvE,YAAM,aAAa,YAAY,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;AACpE,UAAI,WAAW,SAAS,GAAG;AACzB,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,IAAI;AAAA,YACJ,QAAQ,WAAW,IAAI,CAAC,QAAQ;AAAA,cAC9B,MAAM;AAAA,cACN,SAAS;AAAA,gBACP;AAAA,gBACA;AAAA,cACF;AAAA,cACA,OAAO;AAAA,YACT,EAAE;AAAA,UACJ;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAwBA,UAAM,aAAa,aAAa,OAAO,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE;AAC7D,UAAM,cAAc,WAAW,IAAI,CAAC,QAAQ,GAAG,YAAY,IAAI,MAAM,IAAI,CAAC,IAAI,IAAI,aAAa,EAAE;AACjG,UAAM,iBAA4C,CAAC;AACnD,QAAI,YAAY,SAAS,EAAG,gBAAe,KAAK,EAAE,IAAI,EAAE,KAAK,YAAY,EAAE,CAAC;AAC5E,QAAI,YAAY,SAAS,GAAG;AAC1B,qBAAe,KAAK;AAAA,QAClB,MAAM,EAAE,KAAK,WAAW,IAAI,CAAC,QAAQ,IAAI,MAAM,IAAI,EAAE;AAAA,QACrD,eAAe,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,WAAW,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC,EAAE;AAAA,MACjF,CAAC;AAAA,IACH;AACA,QAAI,eAAe,SAAS,GAAG;AAC7B,YAAM,gBAAgB,IAAI,IAAI,WAAW;AACzC,YAAM,gBAAgB,IAAI,IAAI,WAAW;AACzC,YAAM,mBAAmB,MAAM,GAAG;AAAA,QAChC;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA,WAAW;AAAA,UACX,gBAAgB,EAAE,KAAK,KAAK;AAAA,UAC5B,KAAK;AAAA,QACP;AAAA,QACA,EAAE,QAAQ,CAAC,MAAM,kBAAkB,QAAQ,eAAe,EAAE;AAAA,MAC9D;AAGA,YAAM,UAAgC,iBAAiB;AAAA,QACrD,CAAC,QACC,cAAc,IAAI,IAAI,EAAE,KACxB,cAAc,IAAI,GAAG,YAAY,IAAI,IAAI,CAAC,IAAI,IAAI,iBAAiB,EAAE,EAAE;AAAA,MAC3E;AACA,UAAI,QAAQ,SAAS,GAAG;AACtB,cAAM;AAAA,UACJ,QAAQ,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,gBAAgB,IAAI,eAAe,EAAE;AAAA,UACzE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAYA,UAAM,WAAW,MAAM,yBAAyB,WAAW,QAAQ;AAEnE,UAAM,EAAE,QAAQ,eAAe,IAAI,MAAM,GAAG,cAAc,OAAO,QAAQ;AACvE,UAAI,UAAU;AACd,UAAI,UAAU;AACd,UAAI,UAAU;AACd,YAAM,UAA2B,CAAC;AAElC,YAAM,kBAAkB,YAAY,SAAS,IACzC,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,YAAY,GAAG,UAAU,gBAAgB,eAAe,WAAW,KAAK;AAAA,QACrF,CAAC;AAAA,QACD;AAAA,MACF,IACA,CAAC;AAEL,YAAM,cAAc,IAAI,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;AAE7E,iBAAW,EAAE,OAAO,MAAM,cAAc,KAAK,cAAc;AACzD,cAAM,UAAU,aAAa,IAAI,aAAa,KAAK;AAInD,cAAM,QAAQ,2BAA2B,KAAK;AAC9C,YAAI,MAAM,MAAM,YAAY,IAAI,MAAM,EAAE,GAAG;AACzC,gBAAM,WAAW,YAAY,IAAI,MAAM,EAAE;AACzC,cAAI,MAAM,oBAAoB,GAAG;AAC/B,qBAAS,YAAY,oBAAI,KAAK;AAC9B;AACA,oBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,UACtD,OAAO;AAUL,kBAAM,WAAW,2BAA2B;AAAA,cAC1C,QAAQ,8BAA8B;AAAA,gBACpC,QAAQ;AAAA,kBACN,WAAW,SAAS,aAAa;AAAA,kBACjC,SAAS,SAAS,WAAW;AAAA,kBAC7B,iBAAiB,SAAS;AAAA,gBAC5B;AAAA,gBACA,UAAU,SAAS;AAAA,gBACnB,QAAQ,MAAM;AAAA,cAChB,CAAC;AAAA,cACD,WAAW;AAAA,cACX,SAAS;AAAA,cACT,iBAAiB,MAAM;AAAA,YACzB,CAAC;AACD,kBAAM,iBAAiB,mBAAmB,SAAS,iBAAiB;AACpE,qBAAS,OAAO,MAAM;AACtB,qBAAS,gBAAgB;AAKzB,gBAAI,eAAgB,UAAS,mBAAmB,SAAS,gBAAgB;AACzE,qBAAS,YAAY,SAAS;AAC9B,qBAAS,UAAU,SAAS;AAC5B,qBAAS,kBAAkB,SAAS;AAGpC,qBAAS,iBAAiB,kBAAkB,SAAS,iBAAiB,UAAU;AAAA,cAC9E;AAAA,cACA;AAAA,YACF,CAAC;AACD,gBAAI,MAAM,WAAW,OAAW,UAAS,SAAS,MAAM,MAAM;AAC9D,gBAAI,MAAM,eAAe,OAAW,UAAS,aAAa,MAAM;AAChE,gBAAI,MAAM,uBAAuB,QAAW;AAC1C,uBAAS,qBAAqB,8BAA8B,MAAM,kBAAkB;AAAA,YACtF;AACA,gBAAI,UAAU,OAAW,UAAS,QAAQ;AAC1C,qBAAS,YAAY,oBAAI,KAAK;AAC9B;AACA,oBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,UACtD;AAAA,QACF,OAAO;AACL,gBAAM,MAAM,oBAAI,KAAK;AACrB,gBAAM,WAAW,IAAI,OAAO,gBAAgB;AAAA,YAC1C;AAAA,YACA;AAAA,YACA;AAAA,YACA,MAAM,MAAM;AAAA,YACZ;AAAA,YACA,QAAQ,MAAM,MAAM;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB,gBAAgB,kBAAkB,MAAM,iBAAiB,UAAU;AAAA,cACjE;AAAA,cACA;AAAA,YACF,CAAC;AAAA,YACD,OAAO,SAAS;AAAA,YAChB,YAAY,yBAAyB;AAAA,cACnC,WAAW,MAAM;AAAA,cACjB;AAAA,cACA;AAAA,cACA,OAAO,EAAE,UAAU,eAAe;AAAA,YACpC,CAAC;AAAA,YACD,oBAAoB,8BAA8B,MAAM,kBAAkB;AAAA,YAC1E,kBAAkB,SAAS,gBAAgB;AAAA,YAC3C,QAAQ;AAAA,YACR,WAAW;AAAA,YACX,WAAW;AAAA,UACb,CAAC;AACD;AACA,kBAAQ,KAAK,EAAE,QAAQ,WAAW,QAAQ,SAAS,CAAC;AAAA,QACtD;AAAA,MACF;AAEA,YAAM,IAAI,MAAM;AAChB,aAAO,EAAE,QAAQ,EAAE,SAAS,SAAS,QAAQ,GAAG,gBAAgB,QAAQ;AAAA,IAC1E,CAAC;AAED,UAAM,aAAa,UAAU,QAAoB,YAAY;AAC7D,eAAW,UAAU,gBAAgB;AACnC,YAAM,oBAAoB;AAAA,QACxB;AAAA,QACA,QAAQ,OAAO;AAAA,QACf,QAAQ,OAAO;AAAA,QACf,aAAa;AAAA,UACX,IAAI,OAAO,OAAO;AAAA,UAClB,gBAAgB,OAAO,OAAO;AAAA,UAC9B,UAAU,OAAO,OAAO;AAAA,QAC1B;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,UAAM,qBAAqB,UAAU;AAErC,UAAM,uBAAuB,oBAAI,IAAY;AAC7C,eAAW,UAAU,gBAAgB;AACnC,UAAI,qBAAqB,IAAI,OAAO,OAAO,EAAE,EAAG;AAChD,2BAAqB,IAAI,OAAO,OAAO,EAAE;AACzC,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,IAAI,OAAO,OAAO;AAAA,UAClB,gBAAgB,OAAO,OAAO;AAAA,UAC9B,UAAU,OAAO,OAAO;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,QAAQ,OAAO,MAAM;AAAA,MACvB;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,YAAM,kCAAkC,YAAY,uBAAuB;AAAA,QACzE;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc,mCAAmC;AAAA,QACjD,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAKA,SAAK,eAAe,4CAA4C;AAAA,MAC9D;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH,UAAU,eAAe,IAAI,CAAC,WAAW,OAAO,OAAO,EAAE;AAAA,IAC3D,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,wDAAwD,EAAE,IAAI,CAAC;AAAA,IAC9E,CAAC;AAED,WAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,MAAM,GAAG,OAAO,CAAC;AAAA,EACrD,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,6CAA6C,EAAE,IAAI,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,oCAAoC,mCAAmC,EAAE;AAAA,MAC5F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,IAAI;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,YAClB,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,KAAK;AAAA,YACnB,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;AAAA,UACrE,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,QAAQ,mBAAmB;AAAA,YACnC,OAAO,EAAE,OAAO;AAAA,YAChB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,YAC3C,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,YACzC,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,UAC5C,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/timesheets/time-entries/copy-day/route.js

@@ -4,6 +4,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CrudHttpError, forbidden, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
@@ -124,7 +125,7 @@ async function POST(req) {
     }
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
     const tenantId = scope?.tenantId ?? auth.tenantId ?? null;
-    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null;
     if (!tenantId || !organizationId) {
       throw new CrudHttpError(400, {
         error: translate("staff.errors.missingScope", "Missing tenant or organization scope.")
@@ -243,7 +244,7 @@ async function POST(req) {
       container,
       auth,
       organizationScope: scope,
-      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+      selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,
       organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
       request: req
     };