@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/customers/api/interactions/[id]/visibility/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/customers/api/interactions/%5Bid%5D/visibility/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport {\n  validateCrudMutationGuard,\n  runCrudMutationGuardAfterSuccess,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CustomerInteraction } from '../../../../data/entities'\nimport type { InteractionUpdateInput } from '../../../../data/validators'\nimport { resolveAuthActorId } from '../../../../lib/interactionRequestContext'\nimport { emitCustomersEvent } from '../../../../events'\n\nexport const metadata = {\n  path: '/customers/interactions/[id]/visibility',\n  PATCH: {\n    requireAuth: true,\n    requireFeatures: ['customers.email.compose'],\n  },\n}\n\nconst bodySchema = z.object({ visibility: z.enum(['private', 'shared']) }).strict()\n\ntype RouteContext = { params: Promise<{ id: string }> | { id: string } }\n\nexport async function PATCH(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid interaction id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    body = bodySchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const userId = resolveAuthActorId(auth)\n\n  // Load the interaction by its tenant-unique id (not a hand-rolled selected\n  // org) so this keeps working under the \"All organizations\" scope. The record's\n  // own organization then becomes the concrete org the guard, command, and audit\n  // event are attributed to.\n  const interaction = (await findOneWithDecryption(\n    em,\n    CustomerInteraction,\n    {\n      id,\n      tenantId: auth.tenantId,\n      deletedAt: null,\n      interactionType: 'email',\n    } as any,\n    undefined,\n    { tenantId: auth.tenantId as string, organizationId: scope?.selectedId ?? (auth as { orgId?: string | null }).orgId ?? null },\n  )) as { id: string; organizationId?: string | null; authorUserId?: string | null; visibility?: string | null } | null\n\n  if (!interaction) {\n    return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n  }\n\n  // Personal mailbox privacy (v1: strict owner-only): ONLY the author may flip\n  // their own email's visibility \u2014 no admin bypass. Return 404 (not 403) for\n  // everyone else so we don't leak the row's existence \u2014 this also covers\n  // non-authors who cannot see a private email in the first place. This owner\n  // check is stricter than any org gate, so no separate org read guard is needed.\n  const isAuthor = !!interaction.authorUserId && interaction.authorUserId === auth.sub\n  if (!isAuthor) {\n    return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n  }\n\n  const organizationId = interaction.organizationId ?? null\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId,\n    userId,\n    resourceKind: 'customers.interaction',\n    resourceId: id,\n    operation: 'custom',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  // No-op: visibility is already at the requested value.\n  if (interaction.visibility === body.visibility) {\n    return NextResponse.json({ ok: true, changed: false })\n  }\n\n  const previousVisibility = (interaction.visibility ?? 'private') as 'private' | 'shared'\n\n  // Route the write through the interactions update command so the change runs\n  // the full mutation pipeline \u2014 query-index refresh, audit log and undo \u2014\n  // instead of a raw em.flush() that would leave the indexed `entity_indexes`\n  // doc stale. Authorization (author-only, v1) was already enforced above; the\n  // command only owns persistence and side effects.\n  const commandBus = container.resolve('commandBus') as CommandBus\n  await commandBus.execute<InteractionUpdateInput, { interactionId: string }>(\n    'customers.interactions.update',\n    {\n      input: { id, visibility: body.visibility },\n      ctx: {\n        container,\n        auth: auth as never,\n        organizationScope: null,\n        selectedOrganizationId: organizationId,\n        organizationIds: organizationId ? [organizationId] : null,\n      },\n    },\n  )\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId,\n      organizationId,\n      userId,\n      resourceKind: 'customers.interaction',\n      resourceId: id,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  // Emit audit event best-effort \u2014 failure must NOT roll back the DB flush.\n  try {\n    await emitCustomersEvent('customers.email.visibility_changed', {\n      interactionId: interaction.id,\n      previousVisibility,\n      nextVisibility: body.visibility,\n      authorUserId: interaction.authorUserId ?? null,\n      actorUserId: auth.sub,\n      // v1: strict owner-only \u2014 only the author reaches this point, so a\n      // visibility change is never an admin bypass.\n      adminBypass: false,\n      tenantId: auth.tenantId,\n      organizationId,\n    })\n  } catch {\n    /* swallow \u2014 audit emission must not block the response */\n  }\n\n  return NextResponse.json({ ok: true, changed: true })\n}\n\nexport const openApi = {\n  tags: ['Customers', 'Email'],\n  methods: {\n    PATCH: {\n      summary: 'Flip an email interaction visibility (private \u2194 shared)',\n      tags: ['Customers', 'Email'],\n      responses: [\n        { status: 200, description: 'Updated' },\n        { status: 400, description: 'Invalid id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Email not found or not visible to caller' },\n        { status: 422, description: 'Invalid body' },\n      ],\n    },\n  },\n}\n\nexport default PATCH\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAE7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC,SAAS,0BAA0B;AACnC,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,OAAO;AAAA,IACL,aAAa;AAAA,IACb,iBAAiB,CAAC,yBAAyB;AAAA,EAC7C;AACF;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO;AAIlF,eAAsB,MAAM,KAAc,SAA0C;AAClF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EACvD,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,SAAS,mBAAmB,IAAI;AAMtC,QAAM,cAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,MACX,iBAAiB;AAAA,IACnB;AAAA,IACA;AAAA,IACA,EAAE,UAAU,KAAK,UAAoB,gBAAgB,OAAO,cAAe,KAAmC,SAAS,KAAK;AAAA,EAC9H;AAEA,MAAI,CAAC,aAAa;AAChB,WAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxE;AAOA,QAAM,WAAW,CAAC,CAAC,YAAY,gBAAgB,YAAY,iBAAiB,KAAK;AACjF,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxE;AAEA,QAAM,iBAAiB,YAAY,kBAAkB;AAErD,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,EACtB,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAGA,MAAI,YAAY,eAAe,KAAK,YAAY;AAC9C,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,CAAC;AAAA,EACvD;AAEA,QAAM,qBAAsB,YAAY,cAAc;AAOtD,QAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,QAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,MACE,OAAO,EAAE,IAAI,YAAY,KAAK,WAAW;AAAA,MACzC,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB,iBAAiB,CAAC,cAAc,IAAI;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AAEA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAGA,MAAI;AACF,UAAM,mBAAmB,sCAAsC;AAAA,MAC7D,eAAe,YAAY;AAAA,MAC3B;AAAA,MACA,gBAAgB,KAAK;AAAA,MACrB,cAAc,YAAY,gBAAgB;AAAA,MAC1C,aAAa,KAAK;AAAA;AAAA;AAAA,MAGlB,aAAa;AAAA,MACb,UAAU,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,KAAK,CAAC;AACtD;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,aAAa,OAAO;AAAA,EAC3B,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM,CAAC,aAAa,OAAO;AAAA,MAC3B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,UAAU;AAAA,QACtC,EAAE,QAAQ,KAAK,aAAa,aAAa;AAAA,QACzC,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport {\n  validateCrudMutationGuard,\n  runCrudMutationGuardAfterSuccess,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CustomerInteraction } from '../../../../data/entities'\nimport type { InteractionUpdateInput } from '../../../../data/validators'\nimport { resolveAuthActorId } from '../../../../lib/interactionRequestContext'\nimport { emitCustomersEvent } from '../../../../events'\n\nexport const metadata = {\n  path: '/customers/interactions/[id]/visibility',\n  PATCH: {\n    requireAuth: true,\n    requireFeatures: ['customers.email.compose'],\n  },\n}\n\nconst bodySchema = z.object({ visibility: z.enum(['private', 'shared']) }).strict()\n\ntype RouteContext = { params: Promise<{ id: string }> | { id: string } }\n\nexport async function PATCH(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid interaction id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    body = bodySchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const userId = resolveAuthActorId(auth)\n\n  // Load the interaction by its tenant-unique id (not a hand-rolled selected\n  // org) so this keeps working under the \"All organizations\" scope. The record's\n  // own organization then becomes the concrete org the guard, command, and audit\n  // event are attributed to.\n  const interaction = (await findOneWithDecryption(\n    em,\n    CustomerInteraction,\n    {\n      id,\n      tenantId: auth.tenantId,\n      deletedAt: null,\n      interactionType: 'email',\n    } as any,\n    undefined,\n    { tenantId: auth.tenantId as string, organizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null },\n  )) as { id: string; organizationId?: string | null; authorUserId?: string | null; visibility?: string | null } | null\n\n  if (!interaction) {\n    return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n  }\n\n  // Personal mailbox privacy (v1: strict owner-only): ONLY the author may flip\n  // their own email's visibility \u2014 no admin bypass. Return 404 (not 403) for\n  // everyone else so we don't leak the row's existence \u2014 this also covers\n  // non-authors who cannot see a private email in the first place. This owner\n  // check is stricter than any org gate, so no separate org read guard is needed.\n  const isAuthor = !!interaction.authorUserId && interaction.authorUserId === auth.sub\n  if (!isAuthor) {\n    return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n  }\n\n  const organizationId = interaction.organizationId ?? null\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId,\n    userId,\n    resourceKind: 'customers.interaction',\n    resourceId: id,\n    operation: 'custom',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  // No-op: visibility is already at the requested value.\n  if (interaction.visibility === body.visibility) {\n    return NextResponse.json({ ok: true, changed: false })\n  }\n\n  const previousVisibility = (interaction.visibility ?? 'private') as 'private' | 'shared'\n\n  // Route the write through the interactions update command so the change runs\n  // the full mutation pipeline \u2014 query-index refresh, audit log and undo \u2014\n  // instead of a raw em.flush() that would leave the indexed `entity_indexes`\n  // doc stale. Authorization (author-only, v1) was already enforced above; the\n  // command only owns persistence and side effects.\n  const commandBus = container.resolve('commandBus') as CommandBus\n  await commandBus.execute<InteractionUpdateInput, { interactionId: string }>(\n    'customers.interactions.update',\n    {\n      input: { id, visibility: body.visibility },\n      ctx: {\n        container,\n        auth: auth as never,\n        organizationScope: null,\n        selectedOrganizationId: organizationId,\n        organizationIds: organizationId ? [organizationId] : null,\n      },\n    },\n  )\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId,\n      organizationId,\n      userId,\n      resourceKind: 'customers.interaction',\n      resourceId: id,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  // Emit audit event best-effort \u2014 failure must NOT roll back the DB flush.\n  try {\n    await emitCustomersEvent('customers.email.visibility_changed', {\n      interactionId: interaction.id,\n      previousVisibility,\n      nextVisibility: body.visibility,\n      authorUserId: interaction.authorUserId ?? null,\n      actorUserId: auth.sub,\n      // v1: strict owner-only \u2014 only the author reaches this point, so a\n      // visibility change is never an admin bypass.\n      adminBypass: false,\n      tenantId: auth.tenantId,\n      organizationId,\n    })\n  } catch {\n    /* swallow \u2014 audit emission must not block the response */\n  }\n\n  return NextResponse.json({ ok: true, changed: true })\n}\n\nexport const openApi = {\n  tags: ['Customers', 'Email'],\n  methods: {\n    PATCH: {\n      summary: 'Flip an email interaction visibility (private \u2194 shared)',\n      tags: ['Customers', 'Email'],\n      responses: [\n        { status: 200, description: 'Updated' },\n        { status: 400, description: 'Invalid id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Email not found or not visible to caller' },\n        { status: 422, description: 'Invalid body' },\n      ],\n    },\n  },\n}\n\nexport default PATCH\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAE7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,2BAA2B;AAEpC,SAAS,0BAA0B;AACnC,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,OAAO;AAAA,IACL,aAAa;AAAA,IACb,iBAAiB,CAAC,yBAAyB;AAAA,EAC7C;AACF;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO;AAIlF,eAAsB,MAAM,KAAc,SAA0C;AAClF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EACvD,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,SAAS,mBAAmB,IAAI;AAMtC,QAAM,cAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,MACX,iBAAiB;AAAA,IACnB;AAAA,IACA;AAAA,IACA,EAAE,UAAU,KAAK,UAAoB,gBAAgB,kCAAkC,OAAO,IAAI,KAAK,KAAK;AAAA,EAC9G;AAEA,MAAI,CAAC,aAAa;AAChB,WAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxE;AAOA,QAAM,WAAW,CAAC,CAAC,YAAY,gBAAgB,YAAY,iBAAiB,KAAK;AACjF,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxE;AAEA,QAAM,iBAAiB,YAAY,kBAAkB;AAErD,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,EACtB,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAGA,MAAI,YAAY,eAAe,KAAK,YAAY;AAC9C,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,CAAC;AAAA,EACvD;AAEA,QAAM,qBAAsB,YAAY,cAAc;AAOtD,QAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,QAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,MACE,OAAO,EAAE,IAAI,YAAY,KAAK,WAAW;AAAA,MACzC,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB,iBAAiB,CAAC,cAAc,IAAI;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AAEA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAGA,MAAI;AACF,UAAM,mBAAmB,sCAAsC;AAAA,MAC7D,eAAe,YAAY;AAAA,MAC3B;AAAA,MACA,gBAAgB,KAAK;AAAA,MACrB,cAAc,YAAY,gBAAgB;AAAA,MAC1C,aAAa,KAAK;AAAA;AAAA;AAAA,MAGlB,aAAa;AAAA,MACb,UAAU,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,KAAK,CAAC;AACtD;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,aAAa,OAAO;AAAA,EAC3B,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM,CAAC,aAAa,OAAO;AAAA,MAC3B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,UAAU;AAAA,QACtC,EAAE,QAAQ,KAAK,aAAa,aAAa;AAAA,QACzC,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/customers/api/interactions/cancel/route.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { interactionCancelSchema } from "../../../data/validators.js";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
@@ -32,7 +33,7 @@ async function POST(req) {
       container,
       auth,
       organizationScope: scope,
-      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+      selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,
       organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
       request: req
     };

package/dist/modules/customers/api/interactions/cancel/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customers/api/interactions/cancel/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'\nimport { interactionCancelSchema, type InteractionCancelInput } from '../../../data/validators'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { resolveAuthActorId } from '../../../lib/interactionRequestContext'\nimport { withOperationMetadata } from '../../../lib/operationMetadata'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\n\nconst logger = createLogger('customers')\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['customers.interactions.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n    }\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n\n    const body = await readJsonSafe<Record<string, unknown>>(req, {})\n    const parsed = interactionCancelSchema.parse(body)\n    const guardUserId = resolveAuthActorId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: ctx.selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.interaction',\n      resourceId: parsed.id,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { logEntry } = await commandBus.execute<InteractionCancelInput, { interactionId: string }>(\n      'customers.interactions.cancel',\n      { input: parsed, ctx },\n    )\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: ctx.selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.interaction',\n        resourceId: parsed.id,\n        operation: 'custom',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return withOperationMetadata(\n      NextResponse.json({ ok: true }),\n      logEntry,\n      { resourceKind: 'customers.interaction', resourceId: parsed.id },\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 })\n    }\n    logger.error('customers.interactions.cancel failed', { err })\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n\nconst okResponseSchema = z.object({ ok: z.boolean() })\nconst errorSchema = z.object({ error: z.string() })\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  summary: 'Cancel an interaction',\n  methods: {\n    POST: {\n      summary: 'Cancel an interaction',\n      description: 'Marks an interaction as canceled.',\n      requestBody: { contentType: 'application/json', schema: interactionCancelSchema },\n      responses: [\n        { status: 200, description: 'Interaction canceled', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Validation failed', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 404, description: 'Interaction not found', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,+BAA4D;AACrE,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AAEpC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AAEnD,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAChF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,IACpG;AACA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,MAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAEA,UAAM,OAAO,MAAM,aAAsC,KAAK,CAAC,CAAC;AAChE,UAAM,SAAS,wBAAwB,MAAM,IAAI;AACjD,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB,IAAI;AAAA,MACpB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,MACpC;AAAA,MACA,EAAE,OAAO,QAAQ,IAAI;AAAA,IACvB;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB,IAAI;AAAA,QACpB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,MAC9B;AAAA,MACA,EAAE,cAAc,yBAAyB,YAAY,OAAO,GAAG;AAAA,IACjE;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AACA,WAAO,MAAM,wCAAwC,EAAE,IAAI,CAAC;AAC5D,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAEA,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACrD,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAE3C,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,aAAa,oBAAoB,QAAQ,wBAAwB;AAAA,MAChF,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,iBAAiB;AAAA,MAC/E;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,YAAY;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,YAAY;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'\nimport { interactionCancelSchema, type InteractionCancelInput } from '../../../data/validators'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { resolveAuthActorId } from '../../../lib/interactionRequestContext'\nimport { withOperationMetadata } from '../../../lib/operationMetadata'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\n\nconst logger = createLogger('customers')\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['customers.interactions.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n    }\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n\n    const body = await readJsonSafe<Record<string, unknown>>(req, {})\n    const parsed = interactionCancelSchema.parse(body)\n    const guardUserId = resolveAuthActorId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: ctx.selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.interaction',\n      resourceId: parsed.id,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { logEntry } = await commandBus.execute<InteractionCancelInput, { interactionId: string }>(\n      'customers.interactions.cancel',\n      { input: parsed, ctx },\n    )\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: ctx.selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.interaction',\n        resourceId: parsed.id,\n        operation: 'custom',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return withOperationMetadata(\n      NextResponse.json({ ok: true }),\n      logEntry,\n      { resourceKind: 'customers.interaction', resourceId: parsed.id },\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 })\n    }\n    logger.error('customers.interactions.cancel failed', { err })\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n\nconst okResponseSchema = z.object({ ok: z.boolean() })\nconst errorSchema = z.object({ error: z.string() })\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  summary: 'Cancel an interaction',\n  methods: {\n    POST: {\n      summary: 'Cancel an interaction',\n      description: 'Marks an interaction as canceled.',\n      requestBody: { contentType: 'application/json', schema: interactionCancelSchema },\n      responses: [\n        { status: 200, description: 'Interaction canceled', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Validation failed', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 404, description: 'Interaction not found', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAElD,SAAS,+BAA4D;AACrE,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AAEpC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AAEnD,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAChF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,IACpG;AACA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,kCAAkC,OAAO,IAAI,KAAK;AAAA,MAC1E,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAEA,UAAM,OAAO,MAAM,aAAsC,KAAK,CAAC,CAAC;AAChE,UAAM,SAAS,wBAAwB,MAAM,IAAI;AACjD,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB,IAAI;AAAA,MACpB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,MACpC;AAAA,MACA,EAAE,OAAO,QAAQ,IAAI;AAAA,IACvB;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB,IAAI;AAAA,QACpB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,MAC9B;AAAA,MACA,EAAE,cAAc,yBAAyB,YAAY,OAAO,GAAG;AAAA,IACjE;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AACA,WAAO,MAAM,wCAAwC,EAAE,IAAI,CAAC;AAC5D,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAEA,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACrD,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAE3C,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,aAAa,oBAAoB,QAAQ,wBAAwB;AAAA,MAChF,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,iBAAiB;AAAA,MAC/E;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,YAAY;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,YAAY;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/customers/api/interactions/complete/route.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { interactionCompleteSchema } from "../../../data/validators.js";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
@@ -32,7 +33,7 @@ async function POST(req) {
       container,
       auth,
       organizationScope: scope,
-      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+      selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,
       organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
       request: req
     };

package/dist/modules/customers/api/interactions/complete/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customers/api/interactions/complete/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'\nimport { interactionCompleteSchema, type InteractionCompleteInput } from '../../../data/validators'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { resolveAuthActorId } from '../../../lib/interactionRequestContext'\nimport { withOperationMetadata } from '../../../lib/operationMetadata'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\n\nconst logger = createLogger('customers')\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['customers.interactions.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n    }\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n\n    const body = await readJsonSafe<Record<string, unknown>>(req, {})\n    const parsed = interactionCompleteSchema.parse(body)\n    const guardUserId = resolveAuthActorId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: ctx.selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.interaction',\n      resourceId: parsed.id,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { logEntry } = await commandBus.execute<InteractionCompleteInput, { interactionId: string }>(\n      'customers.interactions.complete',\n      { input: parsed, ctx },\n    )\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: ctx.selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.interaction',\n        resourceId: parsed.id,\n        operation: 'custom',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return withOperationMetadata(\n      NextResponse.json({ ok: true }),\n      logEntry,\n      { resourceKind: 'customers.interaction', resourceId: parsed.id },\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 })\n    }\n    logger.error('customers.interactions.complete failed', { err })\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n\nconst okResponseSchema = z.object({ ok: z.boolean() })\nconst errorSchema = z.object({ error: z.string() })\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  summary: 'Complete an interaction',\n  methods: {\n    POST: {\n      summary: 'Complete an interaction',\n      description: 'Marks an interaction as done and sets occurredAt to current time (or a provided timestamp).',\n      requestBody: { contentType: 'application/json', schema: interactionCompleteSchema },\n      responses: [\n        { status: 200, description: 'Interaction completed', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Validation failed', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 404, description: 'Interaction not found', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,iCAAgE;AACzE,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AAEpC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AAEnD,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAChF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,IACpG;AACA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,MAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAEA,UAAM,OAAO,MAAM,aAAsC,KAAK,CAAC,CAAC;AAChE,UAAM,SAAS,0BAA0B,MAAM,IAAI;AACnD,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB,IAAI;AAAA,MACpB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,MACpC;AAAA,MACA,EAAE,OAAO,QAAQ,IAAI;AAAA,IACvB;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB,IAAI;AAAA,QACpB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,MAC9B;AAAA,MACA,EAAE,cAAc,yBAAyB,YAAY,OAAO,GAAG;AAAA,IACjE;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AACA,WAAO,MAAM,0CAA0C,EAAE,IAAI,CAAC;AAC9D,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAEA,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACrD,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAE3C,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,aAAa,oBAAoB,QAAQ,0BAA0B;AAAA,MAClF,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,iBAAiB;AAAA,MAChF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,YAAY;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,YAAY;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'\nimport { interactionCompleteSchema, type InteractionCompleteInput } from '../../../data/validators'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { resolveAuthActorId } from '../../../lib/interactionRequestContext'\nimport { withOperationMetadata } from '../../../lib/operationMetadata'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\n\nconst logger = createLogger('customers')\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['customers.interactions.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })\n    }\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n\n    const body = await readJsonSafe<Record<string, unknown>>(req, {})\n    const parsed = interactionCompleteSchema.parse(body)\n    const guardUserId = resolveAuthActorId(auth)\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: ctx.selectedOrganizationId,\n      userId: guardUserId,\n      resourceKind: 'customers.interaction',\n      resourceId: parsed.id,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { logEntry } = await commandBus.execute<InteractionCompleteInput, { interactionId: string }>(\n      'customers.interactions.complete',\n      { input: parsed, ctx },\n    )\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: ctx.selectedOrganizationId,\n        userId: guardUserId,\n        resourceKind: 'customers.interaction',\n        resourceId: parsed.id,\n        operation: 'custom',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return withOperationMetadata(\n      NextResponse.json({ ok: true }),\n      logEntry,\n      { resourceKind: 'customers.interaction', resourceId: parsed.id },\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 })\n    }\n    logger.error('customers.interactions.complete failed', { err })\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n\nconst okResponseSchema = z.object({ ok: z.boolean() })\nconst errorSchema = z.object({ error: z.string() })\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  summary: 'Complete an interaction',\n  methods: {\n    POST: {\n      summary: 'Complete an interaction',\n      description: 'Marks an interaction as done and sets occurredAt to current time (or a provided timestamp).',\n      requestBody: { contentType: 'application/json', schema: interactionCompleteSchema },\n      responses: [\n        { status: 200, description: 'Interaction completed', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Validation failed', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 404, description: 'Interaction not found', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAElD,SAAS,iCAAgE;AACzE,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AAEpC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AAEnD,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,+BAA+B,EAAE;AAChF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,iCAAiC,cAAc,EAAE,CAAC;AAAA,IACpG;AACA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,kCAAkC,OAAO,IAAI,KAAK;AAAA,MAC1E,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAEA,UAAM,OAAO,MAAM,aAAsC,KAAK,CAAC,CAAC;AAChE,UAAM,SAAS,0BAA0B,MAAM,IAAI;AACnD,UAAM,cAAc,mBAAmB,IAAI;AAC3C,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,KAAK;AAAA,MACf,gBAAgB,IAAI;AAAA,MACpB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,MACpC;AAAA,MACA,EAAE,OAAO,QAAQ,IAAI;AAAA,IACvB;AACA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB,IAAI;AAAA,QACpB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,MAC9B;AAAA,MACA,EAAE,cAAc,yBAAyB,YAAY,OAAO,GAAG;AAAA,IACjE;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AACA,WAAO,MAAM,0CAA0C,EAAE,IAAI,CAAC;AAC9D,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAEA,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACrD,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAE3C,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,aAAa,oBAAoB,QAAQ,0BAA0B;AAAA,MAClF,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,iBAAiB;AAAA,MAChF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,YAAY;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,YAAY;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/customers/api/interactions/conflicts/route.js

@@ -5,6 +5,7 @@ import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/er
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { CustomerInteraction } from "../../../data/entities.js";
@@ -66,7 +67,7 @@ async function GET(req) {
       });
     }
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
-    const organizationIds = Array.isArray(scope?.filterIds) && scope.filterIds.length > 0 ? scope.filterIds : auth.orgId ? [auth.orgId] : [];
+    const { organizationIds, rbacOrganizationId } = resolveOrganizationScopeFilter(scope, auth);
     const offsetMinutes = query.timezoneOffsetMinutes ?? 0;
     const offsetSign = offsetMinutes >= 0 ? "+" : "-";
     const absMinutes = Math.abs(offsetMinutes);
@@ -78,13 +79,16 @@ async function GET(req) {
     if (Number.isNaN(windowStart.getTime()) || Number.isNaN(windowEnd.getTime())) {
       throw new CrudHttpError(400, { error: translate("customers.errors.invalid_date_time", "Invalid date/time") });
     }
+    if (organizationIds?.length === 0) {
+      return NextResponse.json({ ok: true, result: { hasConflicts: false, conflicts: [] } });
+    }
     const checkUserId = query.userId ?? auth.userId;
     const em = container.resolve("em").fork();
     const kysely = em.getKysely();
     let baseQuery = kysely.selectFrom("customer_interactions").select(["id", "scheduled_at", "duration_minutes", "interaction_type"]).where("tenant_id", "=", auth.tenantId).where("status", "not in", [...TERMINAL_INTERACTION_STATUS_LIST]).where("scheduled_at", "is not", null).where("deleted_at", "is", null);
-    if (organizationIds.length === 1) {
+    if (organizationIds?.length === 1) {
       baseQuery = baseQuery.where("organization_id", "=", organizationIds[0]);
-    } else if (organizationIds.length > 1) {
+    } else if (organizationIds && organizationIds.length > 1) {
       baseQuery = baseQuery.where("organization_id", "in", organizationIds);
     }
     if (checkUserId) {
@@ -107,7 +111,7 @@ async function GET(req) {
     const rows = await baseQuery.orderBy("scheduled_at", "asc").limit(10).execute();
     const decryptionScope = {
       tenantId: auth.tenantId ?? null,
-      organizationId: auth.orgId ?? null
+      organizationId: rbacOrganizationId
     };
     const conflictIds = rows.map((row) => row.id);
     const interactionFilter = {
@@ -115,9 +119,9 @@ async function GET(req) {
       tenantId: auth.tenantId,
       deletedAt: null
     };
-    if (organizationIds.length === 1) {
+    if (organizationIds?.length === 1) {
       interactionFilter.organizationId = organizationIds[0];
-    } else if (organizationIds.length > 1) {
+    } else if (organizationIds && organizationIds.length > 1) {
       interactionFilter.organizationId = { $in: organizationIds };
     }
     const decryptedInteractions = conflictIds.length > 0 ? await findWithDecryption(

package/dist/modules/customers/api/interactions/conflicts/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customers/api/interactions/conflicts/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql } from 'kysely'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { CustomerInteraction } from '../../../data/entities'\nimport { TERMINAL_INTERACTION_STATUS_LIST } from '../../../lib/interactionStatus'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst querySchema = z.object({\n  date: z.string().regex(/^\\d{4}-\\d{2}-\\d{2}$/),\n  startTime: z.string().regex(/^\\d{2}:\\d{2}$/),\n  duration: z.coerce.number().int().min(1).max(1440),\n  excludeId: z.string().uuid().optional(),\n  userId: z.string().uuid().optional(),\n  timezoneOffsetMinutes: z.coerce.number().int().min(-900).max(900).optional(),\n})\n\nconst conflictItemSchema = z.object({\n  id: z.string(),\n  title: z.string().nullable(),\n  startTime: z.string(),\n  endTime: z.string(),\n  type: z.string(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  result: z.object({\n    hasConflicts: z.boolean(),\n    conflicts: z.array(conflictItemSchema),\n  }),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.interactions.view'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'Detect scheduling conflicts',\n      description: 'Checks for overlapping planned interactions within the requested time window.',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Conflict detection result',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n\nexport async function GET(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const queryUrl = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(queryUrl.searchParams))\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, {\n        error: translate('customers.errors.unauthorized', 'Unauthorized'),\n      })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const organizationIds = Array.isArray(scope?.filterIds) && scope.filterIds.length > 0\n      ? scope.filterIds\n      : auth.orgId\n        ? [auth.orgId]\n        : []\n\n    const offsetMinutes = query.timezoneOffsetMinutes ?? 0\n    const offsetSign = offsetMinutes >= 0 ? '+' : '-'\n    const absMinutes = Math.abs(offsetMinutes)\n    const offsetHours = String(Math.floor(absMinutes / 60)).padStart(2, '0')\n    const offsetMins = String(absMinutes % 60).padStart(2, '0')\n    const offsetSuffix = `${offsetSign}${offsetHours}:${offsetMins}`\n    const windowStart = new Date(`${query.date}T${query.startTime}:00${offsetSuffix}`)\n    const windowEnd = new Date(windowStart.getTime() + query.duration * 60_000)\n\n    if (Number.isNaN(windowStart.getTime()) || Number.isNaN(windowEnd.getTime())) {\n      throw new CrudHttpError(400, { error: translate('customers.errors.invalid_date_time', 'Invalid date/time') })\n    }\n\n    const checkUserId = query.userId ?? auth.userId\n    const em = (container.resolve('em') as EntityManager).fork()\n    const kysely = em.getKysely<any>()\n\n    let baseQuery = (kysely as any)\n      .selectFrom('customer_interactions')\n      .select(['id', 'scheduled_at', 'duration_minutes', 'interaction_type'])\n      .where('tenant_id', '=', auth.tenantId)\n      .where('status', 'not in', [...TERMINAL_INTERACTION_STATUS_LIST])\n      .where('scheduled_at', 'is not', null)\n      .where('deleted_at', 'is', null)\n\n    if (organizationIds.length === 1) {\n      baseQuery = baseQuery.where('organization_id', '=', organizationIds[0])\n    } else if (organizationIds.length > 1) {\n      baseQuery = baseQuery.where('organization_id', 'in', organizationIds)\n    }\n\n    if (checkUserId) {\n      baseQuery = baseQuery.where((eb: any) =>\n        eb.or([\n          eb('author_user_id', '=', checkUserId),\n          eb('owner_user_id', '=', checkUserId),\n        ])\n      )\n    }\n\n    if (query.excludeId) {\n      baseQuery = baseQuery.where('id', '!=', query.excludeId)\n    }\n\n    // Overlap condition: existing.start < windowEnd AND existing.end > windowStart\n    // end = scheduled_at + duration_minutes (default 30 if null)\n    baseQuery = baseQuery.where((eb: any) =>\n      eb.and([\n        eb('scheduled_at', '<', windowEnd.toISOString()),\n        eb(sql`(scheduled_at + make_interval(mins => COALESCE(duration_minutes, 30)))`, '>', windowStart.toISOString()),\n      ])\n    )\n\n    // Raw SELECT: reads only unencrypted columns (id, scheduled_at, duration_minutes, interaction_type); title is excluded to avoid ciphertext leakage and is resolved below via findWithDecryption.\n    const rows = await baseQuery\n      .orderBy('scheduled_at', 'asc')\n      .limit(10)\n      .execute() as Array<{\n        id: string\n        scheduled_at: string | Date\n        duration_minutes: number | null\n        interaction_type: string\n      }>\n\n    const decryptionScope = {\n      tenantId: auth.tenantId ?? null,\n      organizationId: auth.orgId ?? null,\n    }\n    const conflictIds = rows.map((row) => row.id)\n    const interactionFilter: Record<string, unknown> = {\n      id: { $in: conflictIds },\n      tenantId: auth.tenantId,\n      deletedAt: null,\n    }\n    if (organizationIds.length === 1) {\n      interactionFilter.organizationId = organizationIds[0]\n    } else if (organizationIds.length > 1) {\n      interactionFilter.organizationId = { $in: organizationIds }\n    }\n    const decryptedInteractions = conflictIds.length > 0\n      ? await findWithDecryption(\n          em,\n          CustomerInteraction,\n          interactionFilter as any,\n          undefined,\n          decryptionScope,\n        )\n      : []\n    const titleById = new Map<string, string | null>()\n    for (const record of decryptedInteractions) {\n      titleById.set((record as any).id, ((record as any).title ?? null) as string | null)\n    }\n\n    const conflicts = rows.map((row) => {\n      const start = new Date(row.scheduled_at)\n      const durationMin = row.duration_minutes ?? 30\n      const end = new Date(start.getTime() + durationMin * 60_000)\n      return {\n        id: row.id,\n        title: titleById.has(row.id) ? titleById.get(row.id) ?? null : null,\n        startTime: start.toLocaleTimeString('en-US', { hour: '2-digit', minute: '2-digit', hour12: false }),\n        endTime: end.toLocaleTimeString('en-US', { hour: '2-digit', minute: '2-digit', hour12: false }),\n        type: row.interaction_type,\n      }\n    })\n\n    return NextResponse.json({\n      ok: true,\n      result: { hasConflicts: conflicts.length > 0, conflicts },\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('GET failed', { component: 'interactions/conflicts', err })\n    return NextResponse.json({ error: translate('customers.errors.internal', 'Internal server error') }, { status: 500 })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,WAAW;AACpB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AAEnC,SAAS,2BAA2B;AACpC,SAAS,wCAAwC;AACjD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,EAAE,MAAM,qBAAqB;AAAA,EAC5C,WAAW,EAAE,OAAO,EAAE,MAAM,eAAe;AAAA,EAC3C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EACjD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,uBAAuB,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE,SAAS;AAC7E,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO;AAAA,EACb,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,WAAW,EAAE,OAAO;AAAA,EACpB,SAAS,EAAE,OAAO;AAAA,EAClB,MAAM,EAAE,OAAO;AACjB,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EAAE,OAAO;AAAA,IACf,cAAc,EAAE,QAAQ;AAAA,IACxB,WAAW,EAAE,MAAM,kBAAkB;AAAA,EACvC,CAAC;AACH,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,WAAW,IAAI,IAAI,IAAI,GAAG;AAChC,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,SAAS,YAAY,CAAC;AACzE,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AAEzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,iCAAiC,cAAc;AAAA,MAClE,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,kBAAkB,MAAM,QAAQ,OAAO,SAAS,KAAK,MAAM,UAAU,SAAS,IAChF,MAAM,YACN,KAAK,QACH,CAAC,KAAK,KAAK,IACX,CAAC;AAEP,UAAM,gBAAgB,MAAM,yBAAyB;AACrD,UAAM,aAAa,iBAAiB,IAAI,MAAM;AAC9C,UAAM,aAAa,KAAK,IAAI,aAAa;AACzC,UAAM,cAAc,OAAO,KAAK,MAAM,aAAa,EAAE,CAAC,EAAE,SAAS,GAAG,GAAG;AACvE,UAAM,aAAa,OAAO,aAAa,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1D,UAAM,eAAe,GAAG,UAAU,GAAG,WAAW,IAAI,UAAU;AAC9D,UAAM,cAAc,oBAAI,KAAK,GAAG,MAAM,IAAI,IAAI,MAAM,SAAS,MAAM,YAAY,EAAE;AACjF,UAAM,YAAY,IAAI,KAAK,YAAY,QAAQ,IAAI,MAAM,WAAW,GAAM;AAE1E,QAAI,OAAO,MAAM,YAAY,QAAQ,CAAC,KAAK,OAAO,MAAM,UAAU,QAAQ,CAAC,GAAG;AAC5E,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,sCAAsC,mBAAmB,EAAE,CAAC;AAAA,IAC9G;AAEA,UAAM,cAAc,MAAM,UAAU,KAAK;AACzC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,GAAG,UAAe;AAEjC,QAAI,YAAa,OACd,WAAW,uBAAuB,EAClC,OAAO,CAAC,MAAM,gBAAgB,oBAAoB,kBAAkB,CAAC,EACrE,MAAM,aAAa,KAAK,KAAK,QAAQ,EACrC,MAAM,UAAU,UAAU,CAAC,GAAG,gCAAgC,CAAC,EAC/D,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,cAAc,MAAM,IAAI;AAEjC,QAAI,gBAAgB,WAAW,GAAG;AAChC,kBAAY,UAAU,MAAM,mBAAmB,KAAK,gBAAgB,CAAC,CAAC;AAAA,IACxE,WAAW,gBAAgB,SAAS,GAAG;AACrC,kBAAY,UAAU,MAAM,mBAAmB,MAAM,eAAe;AAAA,IACtE;AAEA,QAAI,aAAa;AACf,kBAAY,UAAU;AAAA,QAAM,CAAC,OAC3B,GAAG,GAAG;AAAA,UACJ,GAAG,kBAAkB,KAAK,WAAW;AAAA,UACrC,GAAG,iBAAiB,KAAK,WAAW;AAAA,QACtC,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,MAAM,WAAW;AACnB,kBAAY,UAAU,MAAM,MAAM,MAAM,MAAM,SAAS;AAAA,IACzD;AAIA,gBAAY,UAAU;AAAA,MAAM,CAAC,OAC3B,GAAG,IAAI;AAAA,QACL,GAAG,gBAAgB,KAAK,UAAU,YAAY,CAAC;AAAA,QAC/C,GAAG,6EAA6E,KAAK,YAAY,YAAY,CAAC;AAAA,MAChH,CAAC;AAAA,IACH;AAGA,UAAM,OAAO,MAAM,UAChB,QAAQ,gBAAgB,KAAK,EAC7B,MAAM,EAAE,EACR,QAAQ;AAOX,UAAM,kBAAkB;AAAA,MACtB,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,IAChC;AACA,UAAM,cAAc,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE;AAC5C,UAAM,oBAA6C;AAAA,MACjD,IAAI,EAAE,KAAK,YAAY;AAAA,MACvB,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACb;AACA,QAAI,gBAAgB,WAAW,GAAG;AAChC,wBAAkB,iBAAiB,gBAAgB,CAAC;AAAA,IACtD,WAAW,gBAAgB,SAAS,GAAG;AACrC,wBAAkB,iBAAiB,EAAE,KAAK,gBAAgB;AAAA,IAC5D;AACA,UAAM,wBAAwB,YAAY,SAAS,IAC/C,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IACA,CAAC;AACL,UAAM,YAAY,oBAAI,IAA2B;AACjD,eAAW,UAAU,uBAAuB;AAC1C,gBAAU,IAAK,OAAe,IAAM,OAAe,SAAS,IAAsB;AAAA,IACpF;AAEA,UAAM,YAAY,KAAK,IAAI,CAAC,QAAQ;AAClC,YAAM,QAAQ,IAAI,KAAK,IAAI,YAAY;AACvC,YAAM,cAAc,IAAI,oBAAoB;AAC5C,YAAM,MAAM,IAAI,KAAK,MAAM,QAAQ,IAAI,cAAc,GAAM;AAC3D,aAAO;AAAA,QACL,IAAI,IAAI;AAAA,QACR,OAAO,UAAU,IAAI,IAAI,EAAE,IAAI,UAAU,IAAI,IAAI,EAAE,KAAK,OAAO;AAAA,QAC/D,WAAW,MAAM,mBAAmB,SAAS,EAAE,MAAM,WAAW,QAAQ,WAAW,QAAQ,MAAM,CAAC;AAAA,QAClG,SAAS,IAAI,mBAAmB,SAAS,EAAE,MAAM,WAAW,QAAQ,WAAW,QAAQ,MAAM,CAAC;AAAA,QAC9F,MAAM,IAAI;AAAA,MACZ;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,QAAQ,EAAE,cAAc,UAAU,SAAS,GAAG,UAAU;AAAA,IAC1D,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,cAAc,EAAE,WAAW,0BAA0B,IAAI,CAAC;AACvE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql } from 'kysely'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { CustomerInteraction } from '../../../data/entities'\nimport { TERMINAL_INTERACTION_STATUS_LIST } from '../../../lib/interactionStatus'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst querySchema = z.object({\n  date: z.string().regex(/^\\d{4}-\\d{2}-\\d{2}$/),\n  startTime: z.string().regex(/^\\d{2}:\\d{2}$/),\n  duration: z.coerce.number().int().min(1).max(1440),\n  excludeId: z.string().uuid().optional(),\n  userId: z.string().uuid().optional(),\n  timezoneOffsetMinutes: z.coerce.number().int().min(-900).max(900).optional(),\n})\n\nconst conflictItemSchema = z.object({\n  id: z.string(),\n  title: z.string().nullable(),\n  startTime: z.string(),\n  endTime: z.string(),\n  type: z.string(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  result: z.object({\n    hasConflicts: z.boolean(),\n    conflicts: z.array(conflictItemSchema),\n  }),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.interactions.view'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'Detect scheduling conflicts',\n      description: 'Checks for overlapping planned interactions within the requested time window.',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Conflict detection result',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n\nexport async function GET(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const queryUrl = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(queryUrl.searchParams))\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, {\n        error: translate('customers.errors.unauthorized', 'Unauthorized'),\n      })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const { organizationIds, rbacOrganizationId } = resolveOrganizationScopeFilter(scope, auth)\n\n    const offsetMinutes = query.timezoneOffsetMinutes ?? 0\n    const offsetSign = offsetMinutes >= 0 ? '+' : '-'\n    const absMinutes = Math.abs(offsetMinutes)\n    const offsetHours = String(Math.floor(absMinutes / 60)).padStart(2, '0')\n    const offsetMins = String(absMinutes % 60).padStart(2, '0')\n    const offsetSuffix = `${offsetSign}${offsetHours}:${offsetMins}`\n    const windowStart = new Date(`${query.date}T${query.startTime}:00${offsetSuffix}`)\n    const windowEnd = new Date(windowStart.getTime() + query.duration * 60_000)\n\n    if (Number.isNaN(windowStart.getTime()) || Number.isNaN(windowEnd.getTime())) {\n      throw new CrudHttpError(400, { error: translate('customers.errors.invalid_date_time', 'Invalid date/time') })\n    }\n    if (organizationIds?.length === 0) {\n      return NextResponse.json({ ok: true, result: { hasConflicts: false, conflicts: [] } })\n    }\n\n    const checkUserId = query.userId ?? auth.userId\n    const em = (container.resolve('em') as EntityManager).fork()\n    const kysely = em.getKysely<any>()\n\n    let baseQuery = (kysely as any)\n      .selectFrom('customer_interactions')\n      .select(['id', 'scheduled_at', 'duration_minutes', 'interaction_type'])\n      .where('tenant_id', '=', auth.tenantId)\n      .where('status', 'not in', [...TERMINAL_INTERACTION_STATUS_LIST])\n      .where('scheduled_at', 'is not', null)\n      .where('deleted_at', 'is', null)\n\n    if (organizationIds?.length === 1) {\n      baseQuery = baseQuery.where('organization_id', '=', organizationIds[0])\n    } else if (organizationIds && organizationIds.length > 1) {\n      baseQuery = baseQuery.where('organization_id', 'in', organizationIds)\n    }\n\n    if (checkUserId) {\n      baseQuery = baseQuery.where((eb: any) =>\n        eb.or([\n          eb('author_user_id', '=', checkUserId),\n          eb('owner_user_id', '=', checkUserId),\n        ])\n      )\n    }\n\n    if (query.excludeId) {\n      baseQuery = baseQuery.where('id', '!=', query.excludeId)\n    }\n\n    // Overlap condition: existing.start < windowEnd AND existing.end > windowStart\n    // end = scheduled_at + duration_minutes (default 30 if null)\n    baseQuery = baseQuery.where((eb: any) =>\n      eb.and([\n        eb('scheduled_at', '<', windowEnd.toISOString()),\n        eb(sql`(scheduled_at + make_interval(mins => COALESCE(duration_minutes, 30)))`, '>', windowStart.toISOString()),\n      ])\n    )\n\n    // Raw SELECT: reads only unencrypted columns (id, scheduled_at, duration_minutes, interaction_type); title is excluded to avoid ciphertext leakage and is resolved below via findWithDecryption.\n    const rows = await baseQuery\n      .orderBy('scheduled_at', 'asc')\n      .limit(10)\n      .execute() as Array<{\n        id: string\n        scheduled_at: string | Date\n        duration_minutes: number | null\n        interaction_type: string\n      }>\n\n    const decryptionScope = {\n      tenantId: auth.tenantId ?? null,\n      organizationId: rbacOrganizationId,\n    }\n    const conflictIds = rows.map((row) => row.id)\n    const interactionFilter: Record<string, unknown> = {\n      id: { $in: conflictIds },\n      tenantId: auth.tenantId,\n      deletedAt: null,\n    }\n    if (organizationIds?.length === 1) {\n      interactionFilter.organizationId = organizationIds[0]\n    } else if (organizationIds && organizationIds.length > 1) {\n      interactionFilter.organizationId = { $in: organizationIds }\n    }\n    const decryptedInteractions = conflictIds.length > 0\n      ? await findWithDecryption(\n          em,\n          CustomerInteraction,\n          interactionFilter as any,\n          undefined,\n          decryptionScope,\n        )\n      : []\n    const titleById = new Map<string, string | null>()\n    for (const record of decryptedInteractions) {\n      titleById.set((record as any).id, ((record as any).title ?? null) as string | null)\n    }\n\n    const conflicts = rows.map((row) => {\n      const start = new Date(row.scheduled_at)\n      const durationMin = row.duration_minutes ?? 30\n      const end = new Date(start.getTime() + durationMin * 60_000)\n      return {\n        id: row.id,\n        title: titleById.has(row.id) ? titleById.get(row.id) ?? null : null,\n        startTime: start.toLocaleTimeString('en-US', { hour: '2-digit', minute: '2-digit', hour12: false }),\n        endTime: end.toLocaleTimeString('en-US', { hour: '2-digit', minute: '2-digit', hour12: false }),\n        type: row.interaction_type,\n      }\n    })\n\n    return NextResponse.json({\n      ok: true,\n      result: { hasConflicts: conflicts.length > 0, conflicts },\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('GET failed', { component: 'interactions/conflicts', err })\n    return NextResponse.json({ error: translate('customers.errors.internal', 'Internal server error') }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,WAAW;AACpB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AAEnC,SAAS,2BAA2B;AACpC,SAAS,wCAAwC;AACjD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,EAAE,MAAM,qBAAqB;AAAA,EAC5C,WAAW,EAAE,OAAO,EAAE,MAAM,eAAe;AAAA,EAC3C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EACjD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,uBAAuB,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE,SAAS;AAC7E,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO;AAAA,EACb,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,WAAW,EAAE,OAAO;AAAA,EACpB,SAAS,EAAE,OAAO;AAAA,EAClB,MAAM,EAAE,OAAO;AACjB,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EAAE,OAAO;AAAA,IACf,cAAc,EAAE,QAAQ;AAAA,IACxB,WAAW,EAAE,MAAM,kBAAkB;AAAA,EACvC,CAAC;AACH,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,WAAW,IAAI,IAAI,IAAI,GAAG;AAChC,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,SAAS,YAAY,CAAC;AACzE,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AAEzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,iCAAiC,cAAc;AAAA,MAClE,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,EAAE,iBAAiB,mBAAmB,IAAI,+BAA+B,OAAO,IAAI;AAE1F,UAAM,gBAAgB,MAAM,yBAAyB;AACrD,UAAM,aAAa,iBAAiB,IAAI,MAAM;AAC9C,UAAM,aAAa,KAAK,IAAI,aAAa;AACzC,UAAM,cAAc,OAAO,KAAK,MAAM,aAAa,EAAE,CAAC,EAAE,SAAS,GAAG,GAAG;AACvE,UAAM,aAAa,OAAO,aAAa,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1D,UAAM,eAAe,GAAG,UAAU,GAAG,WAAW,IAAI,UAAU;AAC9D,UAAM,cAAc,oBAAI,KAAK,GAAG,MAAM,IAAI,IAAI,MAAM,SAAS,MAAM,YAAY,EAAE;AACjF,UAAM,YAAY,IAAI,KAAK,YAAY,QAAQ,IAAI,MAAM,WAAW,GAAM;AAE1E,QAAI,OAAO,MAAM,YAAY,QAAQ,CAAC,KAAK,OAAO,MAAM,UAAU,QAAQ,CAAC,GAAG;AAC5E,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,sCAAsC,mBAAmB,EAAE,CAAC;AAAA,IAC9G;AACA,QAAI,iBAAiB,WAAW,GAAG;AACjC,aAAO,aAAa,KAAK,EAAE,IAAI,MAAM,QAAQ,EAAE,cAAc,OAAO,WAAW,CAAC,EAAE,EAAE,CAAC;AAAA,IACvF;AAEA,UAAM,cAAc,MAAM,UAAU,KAAK;AACzC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,GAAG,UAAe;AAEjC,QAAI,YAAa,OACd,WAAW,uBAAuB,EAClC,OAAO,CAAC,MAAM,gBAAgB,oBAAoB,kBAAkB,CAAC,EACrE,MAAM,aAAa,KAAK,KAAK,QAAQ,EACrC,MAAM,UAAU,UAAU,CAAC,GAAG,gCAAgC,CAAC,EAC/D,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,cAAc,MAAM,IAAI;AAEjC,QAAI,iBAAiB,WAAW,GAAG;AACjC,kBAAY,UAAU,MAAM,mBAAmB,KAAK,gBAAgB,CAAC,CAAC;AAAA,IACxE,WAAW,mBAAmB,gBAAgB,SAAS,GAAG;AACxD,kBAAY,UAAU,MAAM,mBAAmB,MAAM,eAAe;AAAA,IACtE;AAEA,QAAI,aAAa;AACf,kBAAY,UAAU;AAAA,QAAM,CAAC,OAC3B,GAAG,GAAG;AAAA,UACJ,GAAG,kBAAkB,KAAK,WAAW;AAAA,UACrC,GAAG,iBAAiB,KAAK,WAAW;AAAA,QACtC,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,MAAM,WAAW;AACnB,kBAAY,UAAU,MAAM,MAAM,MAAM,MAAM,SAAS;AAAA,IACzD;AAIA,gBAAY,UAAU;AAAA,MAAM,CAAC,OAC3B,GAAG,IAAI;AAAA,QACL,GAAG,gBAAgB,KAAK,UAAU,YAAY,CAAC;AAAA,QAC/C,GAAG,6EAA6E,KAAK,YAAY,YAAY,CAAC;AAAA,MAChH,CAAC;AAAA,IACH;AAGA,UAAM,OAAO,MAAM,UAChB,QAAQ,gBAAgB,KAAK,EAC7B,MAAM,EAAE,EACR,QAAQ;AAOX,UAAM,kBAAkB;AAAA,MACtB,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB;AAAA,IAClB;AACA,UAAM,cAAc,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE;AAC5C,UAAM,oBAA6C;AAAA,MACjD,IAAI,EAAE,KAAK,YAAY;AAAA,MACvB,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACb;AACA,QAAI,iBAAiB,WAAW,GAAG;AACjC,wBAAkB,iBAAiB,gBAAgB,CAAC;AAAA,IACtD,WAAW,mBAAmB,gBAAgB,SAAS,GAAG;AACxD,wBAAkB,iBAAiB,EAAE,KAAK,gBAAgB;AAAA,IAC5D;AACA,UAAM,wBAAwB,YAAY,SAAS,IAC/C,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IACA,CAAC;AACL,UAAM,YAAY,oBAAI,IAA2B;AACjD,eAAW,UAAU,uBAAuB;AAC1C,gBAAU,IAAK,OAAe,IAAM,OAAe,SAAS,IAAsB;AAAA,IACpF;AAEA,UAAM,YAAY,KAAK,IAAI,CAAC,QAAQ;AAClC,YAAM,QAAQ,IAAI,KAAK,IAAI,YAAY;AACvC,YAAM,cAAc,IAAI,oBAAoB;AAC5C,YAAM,MAAM,IAAI,KAAK,MAAM,QAAQ,IAAI,cAAc,GAAM;AAC3D,aAAO;AAAA,QACL,IAAI,IAAI;AAAA,QACR,OAAO,UAAU,IAAI,IAAI,EAAE,IAAI,UAAU,IAAI,IAAI,EAAE,KAAK,OAAO;AAAA,QAC/D,WAAW,MAAM,mBAAmB,SAAS,EAAE,MAAM,WAAW,QAAQ,WAAW,QAAQ,MAAM,CAAC;AAAA,QAClG,SAAS,IAAI,mBAAmB,SAAS,EAAE,MAAM,WAAW,QAAQ,WAAW,QAAQ,MAAM,CAAC;AAAA,QAC9F,MAAM,IAAI;AAAA,MACZ;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,QAAQ,EAAE,cAAc,UAAU,SAAS,GAAG,UAAU;AAAA,IAC1D,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,cAAc,EAAE,WAAW,0BAA0B,IAAI,CAAC;AACvE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AACF;",
   "names": []
 }

package/dist/modules/customers/api/interactions/counts/route.js

@@ -5,8 +5,10 @@ import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/er
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { applyEmailVisibilityFilter } from "../../../lib/visibilityFilter.js";
+import { listGrantsForViewer, listSharedChannelIds } from "../../../lib/conversationShares.js";
 import { TERMINAL_INTERACTION_STATUS_LIST } from "../../../lib/interactionStatus.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("customers");
@@ -60,13 +62,19 @@ async function GET(req) {
       });
     }
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
-    const organizationIds = Array.isArray(scope?.filterIds) && scope.filterIds.length > 0 ? scope.filterIds : auth.orgId ? [auth.orgId] : [];
+    const { organizationIds } = resolveOrganizationScopeFilter(scope, auth);
+    if (organizationIds?.length === 0) {
+      return NextResponse.json({
+        ok: true,
+        result: { call: 0, email: 0, meeting: 0, note: 0, task: 0, total: 0 }
+      });
+    }
     const em = container.resolve("em").fork();
     const kysely = em.getKysely();
     let baseQuery = kysely.selectFrom("customer_interactions").where("entity_id", "=", query.entityId).where("tenant_id", "=", auth.tenantId).where("deleted_at", "is", null);
-    if (organizationIds.length === 1) {
+    if (organizationIds?.length === 1) {
       baseQuery = baseQuery.where("organization_id", "=", organizationIds[0]);
-    } else if (organizationIds.length > 1) {
+    } else if (organizationIds && organizationIds.length > 1) {
       baseQuery = baseQuery.where("organization_id", "in", organizationIds);
     }
     if (query.status === "open" || query.status === "planned") {
@@ -75,9 +83,21 @@ async function GET(req) {
       baseQuery = baseQuery.where("status", "=", query.status);
     }
     const viewerUserId = auth.isApiKey ? null : auth.sub ?? null;
+    const emailShareScope = {
+      tenantId: auth.tenantId,
+      // Grants are org-scoped; with a multi-org scope fall back to tenant-wide
+      // (the predicate still matches on person + owner, never on org alone).
+      organizationId: organizationIds?.length === 1 ? organizationIds[0] : null
+    };
+    const [emailShareGrants, emailSharedChannelIds] = await Promise.all([
+      listGrantsForViewer(em, emailShareScope, viewerUserId),
+      listSharedChannelIds(em, emailShareScope, viewerUserId)
+    ]);
     baseQuery = applyEmailVisibilityFilter(baseQuery, {
       currentUserId: viewerUserId,
-      userFeatures: void 0
+      userFeatures: void 0,
+      sharedConversations: emailShareGrants,
+      sharedChannelIds: emailSharedChannelIds
     });
     const rows = await baseQuery.select(["interaction_type", sql`count(*)`.as("count")]).groupBy("interaction_type").execute();
     const counts = { call: 0, email: 0, meeting: 0, note: 0, task: 0 };

package/dist/modules/customers/api/interactions/counts/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customers/api/interactions/counts/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql } from 'kysely'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { applyEmailVisibilityFilter } from '../../../lib/visibilityFilter'\nimport { TERMINAL_INTERACTION_STATUS_LIST } from '../../../lib/interactionStatus'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst querySchema = z.object({\n  entityId: z.string().uuid(),\n  // `open` counts every non-terminal status (planned/in_progress/waiting + any custom status);\n  // `planned` is kept as the BC alias for callers that used it to mean \"open\".\n  status: z.enum(['done', 'planned', 'open']).optional(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  result: z.object({\n    call: z.number(),\n    email: z.number(),\n    meeting: z.number(),\n    note: z.number(),\n    task: z.number(),\n    total: z.number(),\n  }),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.interactions.view'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'Get interaction counts by type',\n      description: 'Returns per-type interaction counts scoped to an entity.',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Counts by interaction type',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const queryUrl = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(queryUrl.searchParams))\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, {\n        error: translate('customers.errors.unauthorized', 'Unauthorized'),\n      })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const organizationIds = Array.isArray(scope?.filterIds) && scope.filterIds.length > 0\n      ? scope.filterIds\n      : auth.orgId\n        ? [auth.orgId]\n        : []\n    const em = (container.resolve('em') as EntityManager).fork()\n    const kysely = em.getKysely<any>()\n\n    let baseQuery = (kysely as any)\n      .selectFrom('customer_interactions')\n      .where('entity_id', '=', query.entityId)\n      .where('tenant_id', '=', auth.tenantId)\n      .where('deleted_at', 'is', null)\n\n    if (organizationIds.length === 1) {\n      baseQuery = baseQuery.where('organization_id', '=', organizationIds[0])\n    } else if (organizationIds.length > 1) {\n      baseQuery = baseQuery.where('organization_id', 'in', organizationIds)\n    }\n\n    if (query.status === 'open' || query.status === 'planned') {\n      baseQuery = baseQuery.where('status', 'not in', [...TERMINAL_INTERACTION_STATUS_LIST])\n    } else if (query.status) {\n      baseQuery = baseQuery.where('status', '=', query.status)\n    }\n\n    // Per-user email privacy: exclude other users' private emails from the\n    // per-type counts so the `email` total matches the visibility-filtered list.\n    // v1 strict owner-only \u2014 no admin bypass (the filter ignores caller features).\n    const viewerUserId = auth.isApiKey ? null : auth.sub ?? null\n    baseQuery = applyEmailVisibilityFilter(baseQuery, {\n      currentUserId: viewerUserId,\n      userFeatures: undefined,\n    })\n\n    // Raw SELECT: reads only unencrypted columns (id, interaction_type); title/notes are excluded to avoid ciphertext leakage.\n    const rows = await baseQuery\n      .select(['interaction_type', sql<string>`count(*)`.as('count')])\n      .groupBy('interaction_type')\n      .execute() as Array<{ interaction_type: string; count: string | number }>\n\n    const counts: Record<string, number> = { call: 0, email: 0, meeting: 0, note: 0, task: 0 }\n    let total = 0\n    for (const row of rows) {\n      const count = typeof row.count === 'string' ? parseInt(row.count, 10) : row.count\n      const type = row.interaction_type\n      if (type in counts) {\n        counts[type] = count\n      }\n      total += count\n    }\n\n    return NextResponse.json({ ok: true, result: { ...counts, total } })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('GET failed', { component: 'interactions/counts', err })\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,WAAW;AACpB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC,SAAS,kCAAkC;AAC3C,SAAS,wCAAwC;AACjD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA;AAAA;AAAA,EAG1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,WAAW,MAAM,CAAC,EAAE,SAAS;AACvD,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EAAE,OAAO;AAAA,IACf,MAAM,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,OAAO;AAAA,IAChB,SAAS,EAAE,OAAO;AAAA,IAClB,MAAM,EAAE,OAAO;AAAA,IACf,MAAM,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,OAAO;AAAA,EAClB,CAAC;AACH,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,WAAW,IAAI,IAAI,IAAI,GAAG;AAChC,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,SAAS,YAAY,CAAC;AACzE,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,iCAAiC,cAAc;AAAA,MAClE,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,kBAAkB,MAAM,QAAQ,OAAO,SAAS,KAAK,MAAM,UAAU,SAAS,IAChF,MAAM,YACN,KAAK,QACH,CAAC,KAAK,KAAK,IACX,CAAC;AACP,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,GAAG,UAAe;AAEjC,QAAI,YAAa,OACd,WAAW,uBAAuB,EAClC,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,aAAa,KAAK,KAAK,QAAQ,EACrC,MAAM,cAAc,MAAM,IAAI;AAEjC,QAAI,gBAAgB,WAAW,GAAG;AAChC,kBAAY,UAAU,MAAM,mBAAmB,KAAK,gBAAgB,CAAC,CAAC;AAAA,IACxE,WAAW,gBAAgB,SAAS,GAAG;AACrC,kBAAY,UAAU,MAAM,mBAAmB,MAAM,eAAe;AAAA,IACtE;AAEA,QAAI,MAAM,WAAW,UAAU,MAAM,WAAW,WAAW;AACzD,kBAAY,UAAU,MAAM,UAAU,UAAU,CAAC,GAAG,gCAAgC,CAAC;AAAA,IACvF,WAAW,MAAM,QAAQ;AACvB,kBAAY,UAAU,MAAM,UAAU,KAAK,MAAM,MAAM;AAAA,IACzD;AAKA,UAAM,eAAe,KAAK,WAAW,OAAO,KAAK,OAAO;AACxD,gBAAY,2BAA2B,WAAW;AAAA,MAChD,eAAe;AAAA,MACf,cAAc;AAAA,IAChB,CAAC;AAGD,UAAM,OAAO,MAAM,UAChB,OAAO,CAAC,oBAAoB,cAAsB,GAAG,OAAO,CAAC,CAAC,EAC9D,QAAQ,kBAAkB,EAC1B,QAAQ;AAEX,UAAM,SAAiC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE;AACzF,QAAI,QAAQ;AACZ,eAAW,OAAO,MAAM;AACtB,YAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,SAAS,IAAI,OAAO,EAAE,IAAI,IAAI;AAC5E,YAAM,OAAO,IAAI;AACjB,UAAI,QAAQ,QAAQ;AAClB,eAAO,IAAI,IAAI;AAAA,MACjB;AACA,eAAS;AAAA,IACX;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,QAAQ,EAAE,GAAG,QAAQ,MAAM,EAAE,CAAC;AAAA,EACrE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,cAAc,EAAE,WAAW,uBAAuB,IAAI,CAAC;AACpE,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql } from 'kysely'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { applyEmailVisibilityFilter } from '../../../lib/visibilityFilter'\nimport { listGrantsForViewer, listSharedChannelIds } from '../../../lib/conversationShares'\nimport { TERMINAL_INTERACTION_STATUS_LIST } from '../../../lib/interactionStatus'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customers')\n\nconst querySchema = z.object({\n  entityId: z.string().uuid(),\n  // `open` counts every non-terminal status (planned/in_progress/waiting + any custom status);\n  // `planned` is kept as the BC alias for callers that used it to mean \"open\".\n  status: z.enum(['done', 'planned', 'open']).optional(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  result: z.object({\n    call: z.number(),\n    email: z.number(),\n    meeting: z.number(),\n    note: z.number(),\n    task: z.number(),\n    total: z.number(),\n  }),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['customers.interactions.view'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Customers',\n  methods: {\n    GET: {\n      summary: 'Get interaction counts by type',\n      description: 'Returns per-type interaction counts scoped to an entity.',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Counts by interaction type',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const queryUrl = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(queryUrl.searchParams))\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n\n    if (!auth || !auth.tenantId) {\n      throw new CrudHttpError(401, {\n        error: translate('customers.errors.unauthorized', 'Unauthorized'),\n      })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const { organizationIds } = resolveOrganizationScopeFilter(scope, auth)\n    if (organizationIds?.length === 0) {\n      return NextResponse.json({\n        ok: true,\n        result: { call: 0, email: 0, meeting: 0, note: 0, task: 0, total: 0 },\n      })\n    }\n    const em = (container.resolve('em') as EntityManager).fork()\n    const kysely = em.getKysely<any>()\n\n    let baseQuery = (kysely as any)\n      .selectFrom('customer_interactions')\n      .where('entity_id', '=', query.entityId)\n      .where('tenant_id', '=', auth.tenantId)\n      .where('deleted_at', 'is', null)\n\n    if (organizationIds?.length === 1) {\n      baseQuery = baseQuery.where('organization_id', '=', organizationIds[0])\n    } else if (organizationIds && organizationIds.length > 1) {\n      baseQuery = baseQuery.where('organization_id', 'in', organizationIds)\n    }\n\n    if (query.status === 'open' || query.status === 'planned') {\n      baseQuery = baseQuery.where('status', 'not in', [...TERMINAL_INTERACTION_STATUS_LIST])\n    } else if (query.status) {\n      baseQuery = baseQuery.where('status', '=', query.status)\n    }\n\n    // Per-user email privacy: exclude other users' private emails from the\n    // per-type counts so the `email` total matches the visibility-filtered list.\n    // v1 strict owner-only \u2014 no admin bypass (the filter ignores caller features).\n    const viewerUserId = auth.isApiKey ? null : auth.sub ?? null\n    // Conversation shares must widen the counts too, or the `email` total would\n    // disagree with the visibility-filtered list it labels.\n    const emailShareScope = {\n      tenantId: auth.tenantId as string,\n      // Grants are org-scoped; with a multi-org scope fall back to tenant-wide\n      // (the predicate still matches on person + owner, never on org alone).\n      organizationId: organizationIds?.length === 1 ? organizationIds[0] : null,\n    }\n    const [emailShareGrants, emailSharedChannelIds] = await Promise.all([\n      listGrantsForViewer(em, emailShareScope, viewerUserId),\n      listSharedChannelIds(em, emailShareScope, viewerUserId),\n    ])\n    baseQuery = applyEmailVisibilityFilter(baseQuery, {\n      currentUserId: viewerUserId,\n      userFeatures: undefined,\n      sharedConversations: emailShareGrants,\n      sharedChannelIds: emailSharedChannelIds,\n    })\n\n    // Raw SELECT: reads only unencrypted columns (id, interaction_type); title/notes are excluded to avoid ciphertext leakage.\n    const rows = await baseQuery\n      .select(['interaction_type', sql<string>`count(*)`.as('count')])\n      .groupBy('interaction_type')\n      .execute() as Array<{ interaction_type: string; count: string | number }>\n\n    const counts: Record<string, number> = { call: 0, email: 0, meeting: 0, note: 0, task: 0 }\n    let total = 0\n    for (const row of rows) {\n      const count = typeof row.count === 'string' ? parseInt(row.count, 10) : row.count\n      const type = row.interaction_type\n      if (type in counts) {\n        counts[type] = count\n      }\n      total += count\n    }\n\n    return NextResponse.json({ ok: true, result: { ...counts, total } })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('GET failed', { component: 'interactions/counts', err })\n    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,WAAW;AACpB,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,2BAA2B;AAEpC,SAAS,kCAAkC;AAC3C,SAAS,qBAAqB,4BAA4B;AAC1D,SAAS,wCAAwC;AACjD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA;AAAA;AAAA,EAG1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,WAAW,MAAM,CAAC,EAAE,SAAS;AACvD,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EAAE,OAAO;AAAA,IACf,MAAM,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,OAAO;AAAA,IAChB,SAAS,EAAE,OAAO;AAAA,IAClB,MAAM,EAAE,OAAO;AAAA,IACf,MAAM,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,OAAO;AAAA,EAClB,CAAC;AACH,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,WAAW,IAAI,IAAI,IAAI,GAAG;AAChC,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,SAAS,YAAY,CAAC;AACzE,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,iCAAiC,cAAc;AAAA,MAClE,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,EAAE,gBAAgB,IAAI,+BAA+B,OAAO,IAAI;AACtE,QAAI,iBAAiB,WAAW,GAAG;AACjC,aAAO,aAAa,KAAK;AAAA,QACvB,IAAI;AAAA,QACJ,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE;AAAA,MACtE,CAAC;AAAA,IACH;AACA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,GAAG,UAAe;AAEjC,QAAI,YAAa,OACd,WAAW,uBAAuB,EAClC,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,aAAa,KAAK,KAAK,QAAQ,EACrC,MAAM,cAAc,MAAM,IAAI;AAEjC,QAAI,iBAAiB,WAAW,GAAG;AACjC,kBAAY,UAAU,MAAM,mBAAmB,KAAK,gBAAgB,CAAC,CAAC;AAAA,IACxE,WAAW,mBAAmB,gBAAgB,SAAS,GAAG;AACxD,kBAAY,UAAU,MAAM,mBAAmB,MAAM,eAAe;AAAA,IACtE;AAEA,QAAI,MAAM,WAAW,UAAU,MAAM,WAAW,WAAW;AACzD,kBAAY,UAAU,MAAM,UAAU,UAAU,CAAC,GAAG,gCAAgC,CAAC;AAAA,IACvF,WAAW,MAAM,QAAQ;AACvB,kBAAY,UAAU,MAAM,UAAU,KAAK,MAAM,MAAM;AAAA,IACzD;AAKA,UAAM,eAAe,KAAK,WAAW,OAAO,KAAK,OAAO;AAGxD,UAAM,kBAAkB;AAAA,MACtB,UAAU,KAAK;AAAA;AAAA;AAAA,MAGf,gBAAgB,iBAAiB,WAAW,IAAI,gBAAgB,CAAC,IAAI;AAAA,IACvE;AACA,UAAM,CAAC,kBAAkB,qBAAqB,IAAI,MAAM,QAAQ,IAAI;AAAA,MAClE,oBAAoB,IAAI,iBAAiB,YAAY;AAAA,MACrD,qBAAqB,IAAI,iBAAiB,YAAY;AAAA,IACxD,CAAC;AACD,gBAAY,2BAA2B,WAAW;AAAA,MAChD,eAAe;AAAA,MACf,cAAc;AAAA,MACd,qBAAqB;AAAA,MACrB,kBAAkB;AAAA,IACpB,CAAC;AAGD,UAAM,OAAO,MAAM,UAChB,OAAO,CAAC,oBAAoB,cAAsB,GAAG,OAAO,CAAC,CAAC,EAC9D,QAAQ,kBAAkB,EAC1B,QAAQ;AAEX,UAAM,SAAiC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE;AACzF,QAAI,QAAQ;AACZ,eAAW,OAAO,MAAM;AACtB,YAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,SAAS,IAAI,OAAO,EAAE,IAAI,IAAI;AAC5E,YAAM,OAAO,IAAI;AACjB,UAAI,QAAQ,QAAQ;AAClB,eAAO,IAAI,IAAI;AAAA,MACjB;AACA,eAAS;AAAA,IACX;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,QAAQ,EAAE,GAAG,QAAQ,MAAM,EAAE,CAAC;AAAA,EACrE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,cAAc,EAAE,WAAW,uBAAuB,IAAI,CAAC;AACpE,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;",
   "names": []
 }

package/dist/modules/customers/api/interactions/route.js

@@ -13,6 +13,7 @@ import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { CustomerDeal, CustomerInteraction } from "../../data/entities.js";
 import { User } from "@open-mercato/core/modules/auth/data/entities";
@@ -24,6 +25,7 @@ import {
 } from "../openapi.js";
 import { CUSTOMER_INTERACTION_ENTITY_ID } from "../../lib/interactionCompatibility.js";
 import { applyEmailVisibilityFilter } from "../../lib/visibilityFilter.js";
+import { listGrantsForViewer, listSharedChannelIds } from "../../lib/conversationShares.js";
 import { resolveEncryptedSortPage } from "./encryptedSortPage.js";
 import { applyDecryptedFields } from "./decryptedFields.js";
 import { resolveCanonicalActivityTargetId } from "../../lib/legacyActivityBridge.js";
@@ -232,6 +234,10 @@ const INTERACTION_LIST_COLUMNS = [
   "participants",
   "reminder_minutes",
   "visibility",
+  // Required by `interactionEmailCardEnricher`: without `channel_id` the
+  // shared-team-mailbox arm of `isEmailHiddenFrom` can never match, so a teammate
+  // silently loses the email-card actions on a mailbox they may legitimately read.
+  "channel_id",
   "linked_entities",
   "guest_permissions",
   "pinned",
@@ -242,7 +248,7 @@ const INTERACTION_LIST_COLUMNS = [
 ];
 function applyInteractionListFilters(baseQuery, params) {
   let q = baseQuery.where("deleted_at", "is", null).where("tenant_id", "=", params.tenantId);
-  if (params.organizationIds.length > 0) q = q.where("organization_id", "in", params.organizationIds);
+  if (params.organizationIds !== void 0) q = q.where("organization_id", "in", params.organizationIds);
   const { query } = params;
   if (query.entityId) q = q.where("entity_id", "=", query.entityId);
   if (query.dealId) q = q.where("deal_id", "=", query.dealId);
@@ -314,10 +320,7 @@ async function GET(req) {
       });
     }
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
-    const organizationIds = Array.isArray(scope?.filterIds) && scope.filterIds.length > 0 ? scope.filterIds : auth.orgId ? [auth.orgId] : [];
-    const selectedOrganizationId = scope?.selectedId ?? auth.orgId ?? organizationIds[0] ?? null;
-    const em = container.resolve("em").fork();
-    const db = em.getKysely();
+    const { organizationIds, rbacOrganizationId: selectedOrganizationId } = resolveOrganizationScopeFilter(scope, auth);
     const requestedSortField = query.sortField ?? "scheduledAt";
     const sortConfig = interactionSortConfig[requestedSortField];
     const sortDir = query.sortDir ?? sortConfig.defaultDir;
@@ -328,7 +331,20 @@ async function GET(req) {
         error: translate("customers.interactions.cursor.invalid", "Invalid cursor")
       });
     }
+    if (organizationIds?.length === 0) {
+      return NextResponse.json({ items: [] });
+    }
+    const em = container.resolve("em").fork();
+    const db = em.getKysely();
     const viewerUserId = auth.isApiKey ? null : auth.sub ?? null;
+    const emailShareScope = {
+      tenantId: auth.tenantId,
+      organizationId: selectedOrganizationId
+    };
+    const [emailShareGrants, emailSharedChannelIds] = await Promise.all([
+      listGrantsForViewer(em, emailShareScope, viewerUserId),
+      listSharedChannelIds(em, emailShareScope, viewerUserId)
+    ]);
     const encryptionService = resolveTenantEncryptionService(em);
     const [callerUserFeatures, encryptedSortFields] = await Promise.all([
       viewerUserId ? resolveUserFeatures(container, viewerUserId, auth.tenantId ?? null, selectedOrganizationId) : Promise.resolve(void 0),
@@ -350,7 +366,9 @@ async function GET(req) {
       );
       candidateQuery = applyEmailVisibilityFilter(candidateQuery, {
         currentUserId: viewerUserId,
-        userFeatures: callerUserFeatures
+        userFeatures: callerUserFeatures,
+        sharedConversations: emailShareGrants,
+        sharedChannelIds: emailSharedChannelIds
       });
       const cap = resolveEncryptedSortMaxRows();
       if (cap !== null) {
@@ -393,7 +411,9 @@ async function GET(req) {
         );
         pageQuery = applyEmailVisibilityFilter(pageQuery, {
           currentUserId: viewerUserId,
-          userFeatures: callerUserFeatures
+          userFeatures: callerUserFeatures,
+          sharedConversations: emailShareGrants,
+          sharedChannelIds: emailSharedChannelIds
         });
         pageQuery = pageQuery.where("id", "in", pageIds);
         const rawPageRows = await pageQuery.execute();
@@ -419,7 +439,9 @@ async function GET(req) {
       }
       rowsQuery = applyEmailVisibilityFilter(rowsQuery, {
         currentUserId: viewerUserId,
-        userFeatures: callerUserFeatures
+        userFeatures: callerUserFeatures,
+        sharedConversations: emailShareGrants,
+        sharedChannelIds: emailSharedChannelIds
       });
       rowsQuery = rowsQuery.orderBy(sql`${sql.raw(sortSql)} ${sql.raw(sortDir)}`).orderBy("id", sortDir);
       const rows = await rowsQuery.execute();
@@ -505,6 +527,7 @@ async function GET(req) {
       participants: row.participants ?? null,
       reminderMinutes: row.reminder_minutes ?? null,
       visibility: row.visibility ?? null,
+      channelId: row.channel_id ?? null,
       linkedEntities: row.linked_entities ?? null,
       guestPermissions: row.guest_permissions ?? null,
       pinned: row.pinned ?? false,