@open-mercato/core 0.8.1-develop.7297.1.67605e74f9 → 0.9.0

package/dist/modules/staff/api/timesheets/time-entries/copy-day/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/staff/api/timesheets/time-entries/copy-day/route.ts"],
-  "sourcesContent": ["/**\n * US-D6 \u2014 \"Kopiuj wczorajszy dzie\u0144\" (screen 1, note 5).\n *\n * The note is the design constraint: the button \"duplicates the previous working\n * day's entries **as versions to correct**\". So this endpoint is not a silent\n * commit \u2014 it answers with the entries it created, in full, so the caller can put\n * them straight in front of the user for review and adjustment rather than\n * reporting a count and leaving them to hunt for what landed.\n *\n * What \"the previous working day\" means is the CALLER's business. Weekends,\n * holidays and four-day weeks are calendar questions this module has no data for,\n * and a server-side weekend rule would be wrong for every tenant that does not\n * work Monday-to-Friday. The endpoint therefore takes two explicit days.\n *\n * Three decisions worth their reasoning:\n *\n *  1. **A locked SOURCE is skipped and reported, not fatal.** The lock protects\n *     the numbers a closed report has already billed (D-7), and a copy never\n *     writes to its source \u2014 the target day is a fresh, unlocked draft. This is\n *     what makes it different from the grid bulk save, where the rows being\n *     WRITTEN are the locked ones and the whole batch must fail. Here the caller\n *     did not hand-pick rows: they asked for a day. Failing the whole day because\n *     one of its entries sits in a closed report would break the button for\n *     exactly the people who report most regularly. Every skipped source comes\n *     back in `skipped[]` carrying the shared `time_entry_locked` code and the\n *     report that froze it, so the UI can say what was left behind.\n *  2. **Idempotency: a non-empty target day is refused.** A day of entries has no\n *     natural key to deduplicate on \u2014 two identical 30-minute stand-ups on one day\n *     are legitimate data \u2014 so a second call cannot tell a re-run from a genuine\n *     repeat, and would silently double the day into something the user cannot\n *     untangle from the grid. So the default is to refuse with `409\n *     copy_day_target_not_empty`, naming what is already there. `allowDuplicates:\n *     true` is the deliberate opt-in for the real case the refusal would\n *     otherwise block: the user already logged something today and still wants\n *     yesterday's set on top. Refusing is also what makes a partially completed\n *     run visible instead of compounding it.\n *  3. **The copy itself is the existing duplicate command, once per source.** It\n *     already resolves the source, runs the lock gate and delegates the write to\n *     the create command, so every copy inherits ownership, project access, the\n *     billable and currency defaults, rounding (D-7), tags and audit unchanged.\n *     The loop is NOT wrapped in a route-level transaction: the command bus forks\n *     its own EntityManager per command, so an outer `em.transactional` would\n *     enclose nothing and the atomicity would be a fiction. Each copy is atomic in\n *     itself; a copy that fails is reported in `skipped[]` and the rest still\n *     land, which is the behaviour a day of drafts wants.\n */\n\nimport { NextResponse } from 'next/server'\nimport { resolveFeatureAccess } from '../../../../lib/time-tracking/featureAccess'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError, forbidden, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { emitStaffEvent } from '../../../../events'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { ModuleConfigService } from '@open-mercato/core/modules/configs/lib/module-config-service'\nimport { StaffTimeEntry, StaffTimeEntryTag } from '../../../../data/entities'\nimport { staffTimeEntryCommandIds, TIME_ENTRY_LOCKED_CODE } from '../../../../commands/timesheets-entries'\nimport { resolveProjectAccess, type ProjectAccess } from '../../../../lib/time-tracking/access'\nimport { readTimeTrackingSettings } from '../../../../lib/time-tracking/settings'\nimport { STAFF_TIME_TRACKING_RESOURCE_KINDS } from '../../../guards'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-entries/copy-day' })\n\nconst MANAGE_OWN_FEATURE = 'staff.timesheets.manage_own'\nconst MANAGE_ALL_FEATURE = 'staff.timesheets.manage_all'\nconst RESOURCE_KIND = STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry\n\n/** The 409 a second \"copy yesterday\" click gets, rather than a doubled day. */\nexport const COPY_DAY_TARGET_NOT_EMPTY_CODE = 'copy_day_target_not_empty'\n\n/** Reason codes on `skipped[]`. The locked one is the shared code, not a second spelling of it. */\nconst COPY_FAILED_REASON = 'copy_failed'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: [MANAGE_OWN_FEATURE] },\n}\n\nconst copyDayRequestSchema = z.object({\n  fromDate: z.coerce.date(),\n  toDate: z.coerce.date(),\n  /** Only a `staff.timesheets.manage_all` holder may copy somebody else's day. */\n  staffMemberId: z.string().uuid().optional(),\n  allowDuplicates: z.boolean().optional().default(false),\n})\n\nconst copiedEntrySchema = z.object({\n  id: z.string().uuid(),\n  sourceId: z.string().uuid(),\n  date: z.string(),\n  durationMinutes: z.number(),\n  roundedMinutes: z.number().nullable(),\n  timeProjectId: z.string().uuid().nullable(),\n  taskId: z.string().uuid().nullable(),\n  isBillable: z.boolean(),\n  description: z.string().nullable(),\n  tagIds: z.array(z.string().uuid()),\n})\n\nconst skippedEntrySchema = z.object({\n  id: z.string().uuid(),\n  reason: z.string(),\n  lockedReportId: z.string().uuid().nullable(),\n  error: z.string().nullable(),\n})\n\nconst copyDayResponseSchema = z.object({\n  ok: z.literal(true),\n  fromDate: z.string(),\n  toDate: z.string(),\n  staffMemberId: z.string().uuid(),\n  copied: z.number(),\n  created: z.array(copiedEntrySchema),\n  skipped: z.array(skippedEntrySchema),\n})\n\nconst targetNotEmptySchema = z.object({\n  code: z.literal(COPY_DAY_TARGET_NOT_EMPTY_CODE),\n  error: z.string(),\n  toDate: z.string(),\n  existingEntryCount: z.number(),\n  existingEntryIds: z.array(z.string().uuid()),\n})\n\ntype ContainerLike = { resolve: (name: string) => unknown }\n\ntype SkippedSource = {\n  id: string\n  reason: string\n  lockedReportId: string | null\n  error: string | null\n}\n\n/**\n * A day is addressed by its calendar day, never by a timestamp (D-8), so both the\n * request echo and the copied rows collapse to `YYYY-MM-DD`.\n */\nfunction dayKey(value: Date | string | null | undefined): string {\n  if (!value) return ''\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? String(value) : date.toISOString().slice(0, 10)\n}\n\nasync function resolveAssignmentGraceDays(container: ContainerLike, tenantId: string): Promise<number | null> {\n  try {\n    const configService = container.resolve('moduleConfigService') as ModuleConfigService\n    const settings = await readTimeTrackingSettings(configService, { tenantId })\n    return settings.access.assignmentGraceDays\n  } catch {\n    // Fail safe to the documented default rather than widening the window.\n    return null\n  }\n}\n\nasync function loadProjectAccess(\n  container: ContainerLike,\n  userId: string | null,\n  tenantId: string,\n  organizationId: string,\n  grantedFeatures: readonly string[],\n): Promise<ProjectAccess> {\n  const em = container.resolve('em') as EntityManager\n  return resolveProjectAccess({\n    em: em.fork(),\n    userId,\n    tenantId,\n    organizationId,\n    userFeatures: grantedFeatures,\n    assignmentGraceDays: await resolveAssignmentGraceDays(container, tenantId),\n  })\n}\n\n/**\n * The per-row form of the list route's `$or` intersection: an entry on a project\n * is visible to the members of that project, and a project-less entry is visible\n * only to the member who logged it. A manager copying somebody else's day still\n * only copies the part of it their own project access covers.\n */\nfunction isTimeEntryVisible(\n  entry: { staffMemberId: string; timeProjectId?: string | null },\n  access: ProjectAccess,\n): boolean {\n  if (access.canManageAll) return true\n  const projectId = entry.timeProjectId ?? null\n  if (projectId) return access.projectIds.includes(projectId)\n  return access.staffMemberId !== null && access.staffMemberId === entry.staffMemberId\n}\n\nasync function loadTagIdsByEntry(\n  em: EntityManager,\n  entryIds: string[],\n  tenantId: string,\n  organizationId: string,\n): Promise<Map<string, string[]>> {\n  const byEntryId = new Map<string, string[]>()\n  if (entryIds.length === 0) return byEntryId\n  const assignments = await em.find(StaffTimeEntryTag, {\n    timeEntryId: { $in: entryIds },\n    tenantId,\n    organizationId,\n  })\n  for (const assignment of assignments) {\n    const list = byEntryId.get(assignment.timeEntryId) ?? []\n    list.push(assignment.tagId)\n    byEntryId.set(assignment.timeEntryId, list)\n  }\n  return byEntryId\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const actorId = auth.sub ?? ''\n    // Both decisions come from the module's single RBAC authority, which asks the\n    // service and fails closed on every path. The nullable grant array they were\n    // matched against could not say whether an empty answer meant \"no grants\" or\n    // \"could not ask\", and `grantedFeatures ? \u2026 : false` silently answered the\n    // second as the first.\n    const manageOwn = await resolveFeatureAccess(container, actorId, [MANAGE_OWN_FEATURE], { tenantId, organizationId })\n    if (!manageOwn.allowed) {\n      throw forbidden(translate('staff.errors.forbidden', 'Forbidden'))\n    }\n    const grantedFeatures = manageOwn.grantedFeatures\n    const hasManageAll = (\n      await resolveFeatureAccess(container, actorId, [MANAGE_ALL_FEATURE], { tenantId, organizationId })\n    ).allowed\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: actorId, tenantId, organizationId, userFeatures: grantedFeatures },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = copyDayRequestSchema.parse(session.body)\n    const fromDay = dayKey(parsed.fromDate)\n    const toDay = dayKey(parsed.toDate)\n    if (fromDay === toDay) {\n      // Copying a day onto itself is always a mistake, never intent, and\n      // `allowDuplicates` would turn it into a silent doubling.\n      throw new CrudHttpError(400, {\n        error: translate(\n          'staff.timesheets.errors.copyDaySameDate',\n          'The source and target day must be different.',\n        ),\n      })\n    }\n\n    const access = await loadProjectAccess(container, actorId || null, tenantId, organizationId, grantedFeatures)\n    // Ownership: the copies are attributed by the create command, which silently\n    // files them under the caller unless they hold `staff.timesheets.manage_all`.\n    // Refusing here rather than letting that happen keeps a projects-manager from\n    // asking for a colleague's day and quietly receiving it under their own name.\n    if (parsed.staffMemberId && parsed.staffMemberId !== access.staffMemberId && !hasManageAll) {\n      throw forbidden(\n        translate('staff.timesheets.errors.notOwner', 'You can only manage your own time entries.'),\n      )\n    }\n    const staffMemberId = parsed.staffMemberId ?? access.staffMemberId\n    if (!staffMemberId) {\n      throw new CrudHttpError(403, {\n        error: translate('staff.timesheets.errors.noStaffMember', 'No staff member linked to your account.'),\n      })\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const sources = (\n      await findWithDecryption(\n        em,\n        StaffTimeEntry,\n        { tenantId, organizationId, staffMemberId, date: parsed.fromDate, deletedAt: null },\n        {},\n        scopeCtx,\n      )\n    ).filter((entry) => isTimeEntryVisible(entry, access))\n\n    if (sources.length === 0) {\n      return session.respond(200, {\n        ok: true,\n        fromDate: fromDay,\n        toDate: toDay,\n        staffMemberId,\n        copied: 0,\n        created: [],\n        skipped: [],\n      })\n    }\n\n    if (!parsed.allowDuplicates) {\n      const existing = await em.find(\n        StaffTimeEntry,\n        { tenantId, organizationId, staffMemberId, date: parsed.toDate, deletedAt: null },\n        { fields: ['id'] },\n      )\n      if (existing.length > 0) {\n        throw new CrudHttpError(409, {\n          code: COPY_DAY_TARGET_NOT_EMPTY_CODE,\n          error: translate(\n            'staff.timesheets.errors.copyDayTargetNotEmpty',\n            'The target day already has time entries. Review them first, or confirm to add these copies anyway.',\n          ),\n          toDate: toDay,\n          existingEntryCount: existing.length,\n          existingEntryIds: existing.map((entry) => entry.id),\n        })\n      }\n    }\n\n    const guardResult = await runRouteMutationGuards({\n      container,\n      req,\n      auth: {\n        userId: actorId,\n        tenantId,\n        organizationId,\n        userFeatures: grantedFeatures,\n      },\n      input: {\n        resourceKind: RESOURCE_KIND,\n        resourceId: staffMemberId,\n        operation: 'create',\n        mutationPayload: parsed,\n      },\n    })\n    if (!guardResult.ok) return guardResult.response\n\n    const skipped: SkippedSource[] = []\n    const copyable: StaffTimeEntry[] = []\n    for (const entry of sources) {\n      if (entry.lockedReportId) {\n        skipped.push({\n          id: entry.id,\n          reason: TIME_ENTRY_LOCKED_CODE,\n          lockedReportId: entry.lockedReportId,\n          error: null,\n        })\n        continue\n      }\n      copyable.push(entry)\n    }\n\n    // Tags are read here rather than inside the command: the command writes tags\n    // only through the tag commands and never touches `staff_time_entry_tags`, so\n    // \u2014 exactly as with the single-entry duplicate, where the client supplies the\n    // `tags[]` it already holds \u2014 the caller of the command supplies them.\n    const tagIdsByEntry = await loadTagIdsByEntry(em, copyable.map((entry) => entry.id), tenantId, organizationId)\n\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n\n    const copiedIdBySource = new Map<string, string>()\n    for (const entry of copyable) {\n      try {\n        const { result } = await commandBus.execute<unknown, { timeEntryId: string }>(\n          staffTimeEntryCommandIds.duplicate,\n          {\n            input: {\n              id: entry.id,\n              date: parsed.toDate,\n              tagIds: tagIdsByEntry.get(entry.id) ?? [],\n            },\n            ctx,\n          },\n        )\n        if (result?.timeEntryId) copiedIdBySource.set(entry.id, result.timeEntryId)\n      } catch (err) {\n        // A source can stop being copyable between the read and the write \u2014 its\n        // project soft-deleted, say. The day is a set of drafts, so one source\n        // that cannot be copied is reported beside the locked ones instead of\n        // discarding the copies that already landed.\n        //\n        // A command interceptor that refuses one source with an explicit status is\n        // that same per-source refusal, so it is reported here rather than in the\n        // route-level catch: this is the clause the rejection actually reaches, and\n        // aborting the day from it would strand the copies already committed. The\n        // batch contract carries no per-item status, so the interceptor's message\n        // travels on the skipped row instead of degrading to `null`.\n        const interceptorRejection = getCommandInterceptorHttpRejection(err)\n        const skippedError = interceptorRejection\n          ? String(interceptorRejection.body.error ?? '') || null\n          : isCrudHttpError(err)\n            ? String((err.body as { error?: unknown })?.error ?? '') || null\n            : null\n        logger.warn('staff.timesheets.time-entries.copy-day source copy failed', { err, sourceId: entry.id })\n        skipped.push({\n          id: entry.id,\n          reason: COPY_FAILED_REASON,\n          lockedReportId: null,\n          error: skippedError,\n        })\n      }\n    }\n\n    await guardResult.runAfterSuccess()\n\n    for (const [sourceId, createdId] of copiedIdBySource) {\n      void emitStaffEvent('staff.timesheets.time_entry.copied', {\n        id: createdId,\n        sourceId,\n        tenantId,\n        organizationId,\n        staffMemberId,\n        date: toDay,\n      }, { persistent: true }).catch((err) => {\n        logger.error('staff.timesheets emit time_entry.copied failed', { err, sourceId })\n      })\n    }\n\n    // Screen 1 note 5: these are drafts to correct, so the response carries the\n    // rows themselves rather than a count the UI would have to go and re-fetch.\n    const createdIds = Array.from(copiedIdBySource.values())\n    const createdRows = createdIds.length\n      ? await findWithDecryption(\n          em.fork(),\n          StaffTimeEntry,\n          { id: { $in: createdIds }, tenantId, organizationId, deletedAt: null },\n          {},\n          scopeCtx,\n        )\n      : []\n    const createdRowById = new Map(createdRows.map((row) => [row.id, row]))\n\n    const created = Array.from(copiedIdBySource.entries()).flatMap(([sourceId, createdId]) => {\n      const row = createdRowById.get(createdId)\n      if (!row) return []\n      return [\n        {\n          id: row.id,\n          sourceId,\n          date: dayKey(row.date),\n          durationMinutes: row.durationMinutes,\n          roundedMinutes: row.roundedMinutes ?? null,\n          timeProjectId: row.timeProjectId ?? null,\n          taskId: row.taskId ?? null,\n          isBillable: row.isBillable,\n          description: row.notes ?? null,\n          tagIds: tagIdsByEntry.get(sourceId) ?? [],\n        },\n      ]\n    })\n\n    return session.respond(200, {\n      ok: true,\n      fromDate: fromDay,\n      toDate: toDay,\n      staffMemberId,\n      copied: created.length,\n      created,\n      skipped,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-entries.copy-day failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Copy a day of time entries',\n  methods: {\n    POST: {\n      summary: 'Copy a day of time entries',\n      description:\n        'US-D6, screen 1 note 5. Copies every unlocked time entry the caller owns on `fromDate` onto `toDate` as editable drafts, and returns the created rows so they can be reviewed and corrected. Which day is \"the previous working day\" is the caller decision \u2014 this endpoint takes explicit dates and applies no weekend or holiday rule. A source entry locked into a closed report is skipped and reported in `skipped[]` with the shared `time_entry_locked` code (nothing is written to it, so the batch is not failed). The request is refused with 409 `copy_day_target_not_empty` when the target day already holds entries, so a repeated call cannot silently double a day; pass `allowDuplicates: true` to add the copies anyway. `staffMemberId` targets another member and requires `staff.timesheets.manage_all`. Every copy is written through the duplicate command and therefore through the create command, so ownership, project access, the billable and currency defaults and the tenant rounding rule apply to it exactly as they do to a hand-made entry.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: copyDayRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Copies created, with the skipped sources reported', schema: copyDayResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid body, missing scope, or fromDate equal to toDate' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.manage_own, no linked staff member, or another member day without staff.timesheets.manage_all' },\n        {\n          status: 409,\n          description: 'The target day already has entries; nothing was copied',\n          schema: targetNotEmptySchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AA+CA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,eAAe,WAAW,uBAAuB;AAC1D,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAE/B,SAAS,0CAA0C;AAGnD,SAAS,gBAAgB,yBAAyB;AAClD,SAAS,0BAA0B,8BAA8B;AACjE,SAAS,4BAAgD;AACzD,SAAS,gCAAgC;AACzC,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AAEzC,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,uCAAuC,CAAC;AAEhG,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAC3B,MAAM,gBAAgB,mCAAmC;AAGlD,MAAM,iCAAiC;AAG9C,MAAM,qBAAqB;AAEpB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,UAAU,EAAE,OAAO,KAAK;AAAA,EACxB,QAAQ,EAAE,OAAO,KAAK;AAAA;AAAA,EAEtB,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AACvD,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,MAAM,EAAE,OAAO;AAAA,EACf,iBAAiB,EAAE,OAAO;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,YAAY,EAAE,QAAQ;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AACnC,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO;AAAA,EACjB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,UAAU,EAAE,OAAO;AAAA,EACnB,QAAQ,EAAE,OAAO;AAAA,EACjB,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,QAAQ,EAAE,OAAO;AAAA,EACjB,SAAS,EAAE,MAAM,iBAAiB;AAAA,EAClC,SAAS,EAAE,MAAM,kBAAkB;AACrC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,8BAA8B;AAAA,EAC9C,OAAO,EAAE,OAAO;AAAA,EAChB,QAAQ,EAAE,OAAO;AAAA,EACjB,oBAAoB,EAAE,OAAO;AAAA,EAC7B,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAC7C,CAAC;AAeD,SAAS,OAAO,OAAiD;AAC/D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AACtF;AAEA,eAAe,2BAA2B,WAA0B,UAA0C;AAC5G,MAAI;AACF,UAAM,gBAAgB,UAAU,QAAQ,qBAAqB;AAC7D,UAAM,WAAW,MAAM,yBAAyB,eAAe,EAAE,SAAS,CAAC;AAC3E,WAAO,SAAS,OAAO;AAAA,EACzB,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBACb,WACA,QACA,UACA,gBACA,iBACwB;AACxB,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO,qBAAqB;AAAA,IAC1B,IAAI,GAAG,KAAK;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,qBAAqB,MAAM,2BAA2B,WAAW,QAAQ;AAAA,EAC3E,CAAC;AACH;AAQA,SAAS,mBACP,OACA,QACS;AACT,MAAI,OAAO,aAAc,QAAO;AAChC,QAAM,YAAY,MAAM,iBAAiB;AACzC,MAAI,UAAW,QAAO,OAAO,WAAW,SAAS,SAAS;AAC1D,SAAO,OAAO,kBAAkB,QAAQ,OAAO,kBAAkB,MAAM;AACzE;AAEA,eAAe,kBACb,IACA,UACA,UACA,gBACgC;AAChC,QAAM,YAAY,oBAAI,IAAsB;AAC5C,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,cAAc,MAAM,GAAG,KAAK,mBAAmB;AAAA,IACnD,aAAa,EAAE,KAAK,SAAS;AAAA,IAC7B;AAAA,IACA;AAAA,EACF,CAAC;AACD,aAAW,cAAc,aAAa;AACpC,UAAM,OAAO,UAAU,IAAI,WAAW,WAAW,KAAK,CAAC;AACvD,SAAK,KAAK,WAAW,KAAK;AAC1B,cAAU,IAAI,WAAW,aAAa,IAAI;AAAA,EAC5C;AACA,SAAO;AACT;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,KAAK,OAAO;AAM5B,UAAM,YAAY,MAAM,qBAAqB,WAAW,SAAS,CAAC,kBAAkB,GAAG,EAAE,UAAU,eAAe,CAAC;AACnH,QAAI,CAAC,UAAU,SAAS;AACtB,YAAM,UAAU,UAAU,0BAA0B,WAAW,CAAC;AAAA,IAClE;AACA,UAAM,kBAAkB,UAAU;AAClC,UAAM,gBACJ,MAAM,qBAAqB,WAAW,SAAS,CAAC,kBAAkB,GAAG,EAAE,UAAU,eAAe,CAAC,GACjG;AAEF,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,SAAS,UAAU,gBAAgB,cAAc,gBAAgB;AAAA,MAC7F,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,qBAAqB,MAAM,QAAQ,IAAI;AACtD,UAAM,UAAU,OAAO,OAAO,QAAQ;AACtC,UAAM,QAAQ,OAAO,OAAO,MAAM;AAClC,QAAI,YAAY,OAAO;AAGrB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,MAAM,kBAAkB,WAAW,WAAW,MAAM,UAAU,gBAAgB,eAAe;AAK5G,QAAI,OAAO,iBAAiB,OAAO,kBAAkB,OAAO,iBAAiB,CAAC,cAAc;AAC1F,YAAM;AAAA,QACJ,UAAU,oCAAoC,4CAA4C;AAAA,MAC5F;AAAA,IACF;AACA,UAAM,gBAAgB,OAAO,iBAAiB,OAAO;AACrD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,yCAAyC,yCAAyC;AAAA,MACrG,CAAC;AAAA,IACH;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,WACJ,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,EAAE,UAAU,gBAAgB,eAAe,MAAM,OAAO,UAAU,WAAW,KAAK;AAAA,MAClF,CAAC;AAAA,MACD;AAAA,IACF,GACA,OAAO,CAAC,UAAU,mBAAmB,OAAO,MAAM,CAAC;AAErD,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO,QAAQ,QAAQ,KAAK;AAAA,QAC1B,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,QAAQ;AAAA,QACR;AAAA,QACA,QAAQ;AAAA,QACR,SAAS,CAAC;AAAA,QACV,SAAS,CAAC;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,OAAO,iBAAiB;AAC3B,YAAM,WAAW,MAAM,GAAG;AAAA,QACxB;AAAA,QACA,EAAE,UAAU,gBAAgB,eAAe,MAAM,OAAO,QAAQ,WAAW,KAAK;AAAA,QAChF,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,MACnB;AACA,UAAI,SAAS,SAAS,GAAG;AACvB,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,MAAM;AAAA,UACN,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,UACA,QAAQ;AAAA,UACR,oBAAoB,SAAS;AAAA,UAC7B,kBAAkB,SAAS,IAAI,CAAC,UAAU,MAAM,EAAE;AAAA,QACpD,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,cAAc,MAAM,uBAAuB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,cAAc;AAAA,MAChB;AAAA,MACA,OAAO;AAAA,QACL,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,GAAI,QAAO,YAAY;AAExC,UAAM,UAA2B,CAAC;AAClC,UAAM,WAA6B,CAAC;AACpC,eAAW,SAAS,SAAS;AAC3B,UAAI,MAAM,gBAAgB;AACxB,gBAAQ,KAAK;AAAA,UACX,IAAI,MAAM;AAAA,UACV,QAAQ;AAAA,UACR,gBAAgB,MAAM;AAAA,UACtB,OAAO;AAAA,QACT,CAAC;AACD;AAAA,MACF;AACA,eAAS,KAAK,KAAK;AAAA,IACrB;AAMA,UAAM,gBAAgB,MAAM,kBAAkB,IAAI,SAAS,IAAI,CAAC,UAAU,MAAM,EAAE,GAAG,UAAU,cAAc;AAE7G,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,MAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AAEjD,UAAM,mBAAmB,oBAAI,IAAoB;AACjD,eAAW,SAAS,UAAU;AAC5B,UAAI;AACF,cAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,UAClC,yBAAyB;AAAA,UACzB;AAAA,YACE,OAAO;AAAA,cACL,IAAI,MAAM;AAAA,cACV,MAAM,OAAO;AAAA,cACb,QAAQ,cAAc,IAAI,MAAM,EAAE,KAAK,CAAC;AAAA,YAC1C;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,YAAI,QAAQ,YAAa,kBAAiB,IAAI,MAAM,IAAI,OAAO,WAAW;AAAA,MAC5E,SAAS,KAAK;AAYZ,cAAM,uBAAuB,mCAAmC,GAAG;AACnE,cAAM,eAAe,uBACjB,OAAO,qBAAqB,KAAK,SAAS,EAAE,KAAK,OACjD,gBAAgB,GAAG,IACjB,OAAQ,IAAI,MAA8B,SAAS,EAAE,KAAK,OAC1D;AACN,eAAO,KAAK,6DAA6D,EAAE,KAAK,UAAU,MAAM,GAAG,CAAC;AACpG,gBAAQ,KAAK;AAAA,UACX,IAAI,MAAM;AAAA,UACV,QAAQ;AAAA,UACR,gBAAgB;AAAA,UAChB,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,YAAY,gBAAgB;AAElC,eAAW,CAAC,UAAU,SAAS,KAAK,kBAAkB;AACpD,WAAK,eAAe,sCAAsC;AAAA,QACxD,IAAI;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM;AAAA,MACR,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,eAAO,MAAM,kDAAkD,EAAE,KAAK,SAAS,CAAC;AAAA,MAClF,CAAC;AAAA,IACH;AAIA,UAAM,aAAa,MAAM,KAAK,iBAAiB,OAAO,CAAC;AACvD,UAAM,cAAc,WAAW,SAC3B,MAAM;AAAA,MACJ,GAAG,KAAK;AAAA,MACR;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACrE,CAAC;AAAA,MACD;AAAA,IACF,IACA,CAAC;AACL,UAAM,iBAAiB,IAAI,IAAI,YAAY,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AAEtE,UAAM,UAAU,MAAM,KAAK,iBAAiB,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,UAAU,SAAS,MAAM;AACxF,YAAM,MAAM,eAAe,IAAI,SAAS;AACxC,UAAI,CAAC,IAAK,QAAO,CAAC;AAClB,aAAO;AAAA,QACL;AAAA,UACE,IAAI,IAAI;AAAA,UACR;AAAA,UACA,MAAM,OAAO,IAAI,IAAI;AAAA,UACrB,iBAAiB,IAAI;AAAA,UACrB,gBAAgB,IAAI,kBAAkB;AAAA,UACtC,eAAe,IAAI,iBAAiB;AAAA,UACpC,QAAQ,IAAI,UAAU;AAAA,UACtB,YAAY,IAAI;AAAA,UAChB,aAAa,IAAI,SAAS;AAAA,UAC1B,QAAQ,cAAc,IAAI,QAAQ,KAAK,CAAC;AAAA,QAC1C;AAAA,MACF;AAAA,IACF,CAAC;AAED,WAAO,QAAQ,QAAQ,KAAK;AAAA,MAC1B,IAAI;AAAA,MACJ,UAAU;AAAA,MACV,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,iDAAiD,EAAE,IAAI,CAAC;AACrE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qDAAqD,QAAQ,sBAAsB;AAAA,MACjH;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,2DAA2D;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,yHAAyH;AAAA,QACrJ;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * US-D6 \u2014 \"Kopiuj wczorajszy dzie\u0144\" (screen 1, note 5).\n *\n * The note is the design constraint: the button \"duplicates the previous working\n * day's entries **as versions to correct**\". So this endpoint is not a silent\n * commit \u2014 it answers with the entries it created, in full, so the caller can put\n * them straight in front of the user for review and adjustment rather than\n * reporting a count and leaving them to hunt for what landed.\n *\n * What \"the previous working day\" means is the CALLER's business. Weekends,\n * holidays and four-day weeks are calendar questions this module has no data for,\n * and a server-side weekend rule would be wrong for every tenant that does not\n * work Monday-to-Friday. The endpoint therefore takes two explicit days.\n *\n * Three decisions worth their reasoning:\n *\n *  1. **A locked SOURCE is skipped and reported, not fatal.** The lock protects\n *     the numbers a closed report has already billed (D-7), and a copy never\n *     writes to its source \u2014 the target day is a fresh, unlocked draft. This is\n *     what makes it different from the grid bulk save, where the rows being\n *     WRITTEN are the locked ones and the whole batch must fail. Here the caller\n *     did not hand-pick rows: they asked for a day. Failing the whole day because\n *     one of its entries sits in a closed report would break the button for\n *     exactly the people who report most regularly. Every skipped source comes\n *     back in `skipped[]` carrying the shared `time_entry_locked` code and the\n *     report that froze it, so the UI can say what was left behind.\n *  2. **Idempotency: a non-empty target day is refused.** A day of entries has no\n *     natural key to deduplicate on \u2014 two identical 30-minute stand-ups on one day\n *     are legitimate data \u2014 so a second call cannot tell a re-run from a genuine\n *     repeat, and would silently double the day into something the user cannot\n *     untangle from the grid. So the default is to refuse with `409\n *     copy_day_target_not_empty`, naming what is already there. `allowDuplicates:\n *     true` is the deliberate opt-in for the real case the refusal would\n *     otherwise block: the user already logged something today and still wants\n *     yesterday's set on top. Refusing is also what makes a partially completed\n *     run visible instead of compounding it.\n *  3. **The copy itself is the existing duplicate command, once per source.** It\n *     already resolves the source, runs the lock gate and delegates the write to\n *     the create command, so every copy inherits ownership, project access, the\n *     billable and currency defaults, rounding (D-7), tags and audit unchanged.\n *     The loop is NOT wrapped in a route-level transaction: the command bus forks\n *     its own EntityManager per command, so an outer `em.transactional` would\n *     enclose nothing and the atomicity would be a fiction. Each copy is atomic in\n *     itself; a copy that fails is reported in `skipped[]` and the rest still\n *     land, which is the behaviour a day of drafts wants.\n */\n\nimport { NextResponse } from 'next/server'\nimport { resolveFeatureAccess } from '../../../../lib/time-tracking/featureAccess'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CrudHttpError, forbidden, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { emitStaffEvent } from '../../../../events'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { ModuleConfigService } from '@open-mercato/core/modules/configs/lib/module-config-service'\nimport { StaffTimeEntry, StaffTimeEntryTag } from '../../../../data/entities'\nimport { staffTimeEntryCommandIds, TIME_ENTRY_LOCKED_CODE } from '../../../../commands/timesheets-entries'\nimport { resolveProjectAccess, type ProjectAccess } from '../../../../lib/time-tracking/access'\nimport { readTimeTrackingSettings } from '../../../../lib/time-tracking/settings'\nimport { STAFF_TIME_TRACKING_RESOURCE_KINDS } from '../../../guards'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-entries/copy-day' })\n\nconst MANAGE_OWN_FEATURE = 'staff.timesheets.manage_own'\nconst MANAGE_ALL_FEATURE = 'staff.timesheets.manage_all'\nconst RESOURCE_KIND = STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry\n\n/** The 409 a second \"copy yesterday\" click gets, rather than a doubled day. */\nexport const COPY_DAY_TARGET_NOT_EMPTY_CODE = 'copy_day_target_not_empty'\n\n/** Reason codes on `skipped[]`. The locked one is the shared code, not a second spelling of it. */\nconst COPY_FAILED_REASON = 'copy_failed'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: [MANAGE_OWN_FEATURE] },\n}\n\nconst copyDayRequestSchema = z.object({\n  fromDate: z.coerce.date(),\n  toDate: z.coerce.date(),\n  /** Only a `staff.timesheets.manage_all` holder may copy somebody else's day. */\n  staffMemberId: z.string().uuid().optional(),\n  allowDuplicates: z.boolean().optional().default(false),\n})\n\nconst copiedEntrySchema = z.object({\n  id: z.string().uuid(),\n  sourceId: z.string().uuid(),\n  date: z.string(),\n  durationMinutes: z.number(),\n  roundedMinutes: z.number().nullable(),\n  timeProjectId: z.string().uuid().nullable(),\n  taskId: z.string().uuid().nullable(),\n  isBillable: z.boolean(),\n  description: z.string().nullable(),\n  tagIds: z.array(z.string().uuid()),\n})\n\nconst skippedEntrySchema = z.object({\n  id: z.string().uuid(),\n  reason: z.string(),\n  lockedReportId: z.string().uuid().nullable(),\n  error: z.string().nullable(),\n})\n\nconst copyDayResponseSchema = z.object({\n  ok: z.literal(true),\n  fromDate: z.string(),\n  toDate: z.string(),\n  staffMemberId: z.string().uuid(),\n  copied: z.number(),\n  created: z.array(copiedEntrySchema),\n  skipped: z.array(skippedEntrySchema),\n})\n\nconst targetNotEmptySchema = z.object({\n  code: z.literal(COPY_DAY_TARGET_NOT_EMPTY_CODE),\n  error: z.string(),\n  toDate: z.string(),\n  existingEntryCount: z.number(),\n  existingEntryIds: z.array(z.string().uuid()),\n})\n\ntype ContainerLike = { resolve: (name: string) => unknown }\n\ntype SkippedSource = {\n  id: string\n  reason: string\n  lockedReportId: string | null\n  error: string | null\n}\n\n/**\n * A day is addressed by its calendar day, never by a timestamp (D-8), so both the\n * request echo and the copied rows collapse to `YYYY-MM-DD`.\n */\nfunction dayKey(value: Date | string | null | undefined): string {\n  if (!value) return ''\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? String(value) : date.toISOString().slice(0, 10)\n}\n\nasync function resolveAssignmentGraceDays(container: ContainerLike, tenantId: string): Promise<number | null> {\n  try {\n    const configService = container.resolve('moduleConfigService') as ModuleConfigService\n    const settings = await readTimeTrackingSettings(configService, { tenantId })\n    return settings.access.assignmentGraceDays\n  } catch {\n    // Fail safe to the documented default rather than widening the window.\n    return null\n  }\n}\n\nasync function loadProjectAccess(\n  container: ContainerLike,\n  userId: string | null,\n  tenantId: string,\n  organizationId: string,\n  grantedFeatures: readonly string[],\n): Promise<ProjectAccess> {\n  const em = container.resolve('em') as EntityManager\n  return resolveProjectAccess({\n    em: em.fork(),\n    userId,\n    tenantId,\n    organizationId,\n    userFeatures: grantedFeatures,\n    assignmentGraceDays: await resolveAssignmentGraceDays(container, tenantId),\n  })\n}\n\n/**\n * The per-row form of the list route's `$or` intersection: an entry on a project\n * is visible to the members of that project, and a project-less entry is visible\n * only to the member who logged it. A manager copying somebody else's day still\n * only copies the part of it their own project access covers.\n */\nfunction isTimeEntryVisible(\n  entry: { staffMemberId: string; timeProjectId?: string | null },\n  access: ProjectAccess,\n): boolean {\n  if (access.canManageAll) return true\n  const projectId = entry.timeProjectId ?? null\n  if (projectId) return access.projectIds.includes(projectId)\n  return access.staffMemberId !== null && access.staffMemberId === entry.staffMemberId\n}\n\nasync function loadTagIdsByEntry(\n  em: EntityManager,\n  entryIds: string[],\n  tenantId: string,\n  organizationId: string,\n): Promise<Map<string, string[]>> {\n  const byEntryId = new Map<string, string[]>()\n  if (entryIds.length === 0) return byEntryId\n  const assignments = await em.find(StaffTimeEntryTag, {\n    timeEntryId: { $in: entryIds },\n    tenantId,\n    organizationId,\n  })\n  for (const assignment of assignments) {\n    const list = byEntryId.get(assignment.timeEntryId) ?? []\n    list.push(assignment.tagId)\n    byEntryId.set(assignment.timeEntryId, list)\n  }\n  return byEntryId\n}\n\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const actorId = auth.sub ?? ''\n    // Both decisions come from the module's single RBAC authority, which asks the\n    // service and fails closed on every path. The nullable grant array they were\n    // matched against could not say whether an empty answer meant \"no grants\" or\n    // \"could not ask\", and `grantedFeatures ? \u2026 : false` silently answered the\n    // second as the first.\n    const manageOwn = await resolveFeatureAccess(container, actorId, [MANAGE_OWN_FEATURE], { tenantId, organizationId })\n    if (!manageOwn.allowed) {\n      throw forbidden(translate('staff.errors.forbidden', 'Forbidden'))\n    }\n    const grantedFeatures = manageOwn.grantedFeatures\n    const hasManageAll = (\n      await resolveFeatureAccess(container, actorId, [MANAGE_ALL_FEATURE], { tenantId, organizationId })\n    ).allowed\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: actorId, tenantId, organizationId, userFeatures: grantedFeatures },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = copyDayRequestSchema.parse(session.body)\n    const fromDay = dayKey(parsed.fromDate)\n    const toDay = dayKey(parsed.toDate)\n    if (fromDay === toDay) {\n      // Copying a day onto itself is always a mistake, never intent, and\n      // `allowDuplicates` would turn it into a silent doubling.\n      throw new CrudHttpError(400, {\n        error: translate(\n          'staff.timesheets.errors.copyDaySameDate',\n          'The source and target day must be different.',\n        ),\n      })\n    }\n\n    const access = await loadProjectAccess(container, actorId || null, tenantId, organizationId, grantedFeatures)\n    // Ownership: the copies are attributed by the create command, which silently\n    // files them under the caller unless they hold `staff.timesheets.manage_all`.\n    // Refusing here rather than letting that happen keeps a projects-manager from\n    // asking for a colleague's day and quietly receiving it under their own name.\n    if (parsed.staffMemberId && parsed.staffMemberId !== access.staffMemberId && !hasManageAll) {\n      throw forbidden(\n        translate('staff.timesheets.errors.notOwner', 'You can only manage your own time entries.'),\n      )\n    }\n    const staffMemberId = parsed.staffMemberId ?? access.staffMemberId\n    if (!staffMemberId) {\n      throw new CrudHttpError(403, {\n        error: translate('staff.timesheets.errors.noStaffMember', 'No staff member linked to your account.'),\n      })\n    }\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const scopeCtx = { tenantId, organizationId }\n\n    const sources = (\n      await findWithDecryption(\n        em,\n        StaffTimeEntry,\n        { tenantId, organizationId, staffMemberId, date: parsed.fromDate, deletedAt: null },\n        {},\n        scopeCtx,\n      )\n    ).filter((entry) => isTimeEntryVisible(entry, access))\n\n    if (sources.length === 0) {\n      return session.respond(200, {\n        ok: true,\n        fromDate: fromDay,\n        toDate: toDay,\n        staffMemberId,\n        copied: 0,\n        created: [],\n        skipped: [],\n      })\n    }\n\n    if (!parsed.allowDuplicates) {\n      const existing = await em.find(\n        StaffTimeEntry,\n        { tenantId, organizationId, staffMemberId, date: parsed.toDate, deletedAt: null },\n        { fields: ['id'] },\n      )\n      if (existing.length > 0) {\n        throw new CrudHttpError(409, {\n          code: COPY_DAY_TARGET_NOT_EMPTY_CODE,\n          error: translate(\n            'staff.timesheets.errors.copyDayTargetNotEmpty',\n            'The target day already has time entries. Review them first, or confirm to add these copies anyway.',\n          ),\n          toDate: toDay,\n          existingEntryCount: existing.length,\n          existingEntryIds: existing.map((entry) => entry.id),\n        })\n      }\n    }\n\n    const guardResult = await runRouteMutationGuards({\n      container,\n      req,\n      auth: {\n        userId: actorId,\n        tenantId,\n        organizationId,\n        userFeatures: grantedFeatures,\n      },\n      input: {\n        resourceKind: RESOURCE_KIND,\n        resourceId: staffMemberId,\n        operation: 'create',\n        mutationPayload: parsed,\n      },\n    })\n    if (!guardResult.ok) return guardResult.response\n\n    const skipped: SkippedSource[] = []\n    const copyable: StaffTimeEntry[] = []\n    for (const entry of sources) {\n      if (entry.lockedReportId) {\n        skipped.push({\n          id: entry.id,\n          reason: TIME_ENTRY_LOCKED_CODE,\n          lockedReportId: entry.lockedReportId,\n          error: null,\n        })\n        continue\n      }\n      copyable.push(entry)\n    }\n\n    // Tags are read here rather than inside the command: the command writes tags\n    // only through the tag commands and never touches `staff_time_entry_tags`, so\n    // \u2014 exactly as with the single-entry duplicate, where the client supplies the\n    // `tags[]` it already holds \u2014 the caller of the command supplies them.\n    const tagIdsByEntry = await loadTagIdsByEntry(em, copyable.map((entry) => entry.id), tenantId, organizationId)\n\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n\n    const copiedIdBySource = new Map<string, string>()\n    for (const entry of copyable) {\n      try {\n        const { result } = await commandBus.execute<unknown, { timeEntryId: string }>(\n          staffTimeEntryCommandIds.duplicate,\n          {\n            input: {\n              id: entry.id,\n              date: parsed.toDate,\n              tagIds: tagIdsByEntry.get(entry.id) ?? [],\n            },\n            ctx,\n          },\n        )\n        if (result?.timeEntryId) copiedIdBySource.set(entry.id, result.timeEntryId)\n      } catch (err) {\n        // A source can stop being copyable between the read and the write \u2014 its\n        // project soft-deleted, say. The day is a set of drafts, so one source\n        // that cannot be copied is reported beside the locked ones instead of\n        // discarding the copies that already landed.\n        //\n        // A command interceptor that refuses one source with an explicit status is\n        // that same per-source refusal, so it is reported here rather than in the\n        // route-level catch: this is the clause the rejection actually reaches, and\n        // aborting the day from it would strand the copies already committed. The\n        // batch contract carries no per-item status, so the interceptor's message\n        // travels on the skipped row instead of degrading to `null`.\n        const interceptorRejection = getCommandInterceptorHttpRejection(err)\n        const skippedError = interceptorRejection\n          ? String(interceptorRejection.body.error ?? '') || null\n          : isCrudHttpError(err)\n            ? String((err.body as { error?: unknown })?.error ?? '') || null\n            : null\n        logger.warn('staff.timesheets.time-entries.copy-day source copy failed', { err, sourceId: entry.id })\n        skipped.push({\n          id: entry.id,\n          reason: COPY_FAILED_REASON,\n          lockedReportId: null,\n          error: skippedError,\n        })\n      }\n    }\n\n    await guardResult.runAfterSuccess()\n\n    for (const [sourceId, createdId] of copiedIdBySource) {\n      void emitStaffEvent('staff.timesheets.time_entry.copied', {\n        id: createdId,\n        sourceId,\n        tenantId,\n        organizationId,\n        staffMemberId,\n        date: toDay,\n      }, { persistent: true }).catch((err) => {\n        logger.error('staff.timesheets emit time_entry.copied failed', { err, sourceId })\n      })\n    }\n\n    // Screen 1 note 5: these are drafts to correct, so the response carries the\n    // rows themselves rather than a count the UI would have to go and re-fetch.\n    const createdIds = Array.from(copiedIdBySource.values())\n    const createdRows = createdIds.length\n      ? await findWithDecryption(\n          em.fork(),\n          StaffTimeEntry,\n          { id: { $in: createdIds }, tenantId, organizationId, deletedAt: null },\n          {},\n          scopeCtx,\n        )\n      : []\n    const createdRowById = new Map(createdRows.map((row) => [row.id, row]))\n\n    const created = Array.from(copiedIdBySource.entries()).flatMap(([sourceId, createdId]) => {\n      const row = createdRowById.get(createdId)\n      if (!row) return []\n      return [\n        {\n          id: row.id,\n          sourceId,\n          date: dayKey(row.date),\n          durationMinutes: row.durationMinutes,\n          roundedMinutes: row.roundedMinutes ?? null,\n          timeProjectId: row.timeProjectId ?? null,\n          taskId: row.taskId ?? null,\n          isBillable: row.isBillable,\n          description: row.notes ?? null,\n          tagIds: tagIdsByEntry.get(sourceId) ?? [],\n        },\n      ]\n    })\n\n    return session.respond(200, {\n      ok: true,\n      fromDate: fromDay,\n      toDate: toDay,\n      staffMemberId,\n      copied: created.length,\n      created,\n      skipped,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-entries.copy-day failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Copy a day of time entries',\n  methods: {\n    POST: {\n      summary: 'Copy a day of time entries',\n      description:\n        'US-D6, screen 1 note 5. Copies every unlocked time entry the caller owns on `fromDate` onto `toDate` as editable drafts, and returns the created rows so they can be reviewed and corrected. Which day is \"the previous working day\" is the caller decision \u2014 this endpoint takes explicit dates and applies no weekend or holiday rule. A source entry locked into a closed report is skipped and reported in `skipped[]` with the shared `time_entry_locked` code (nothing is written to it, so the batch is not failed). The request is refused with 409 `copy_day_target_not_empty` when the target day already holds entries, so a repeated call cannot silently double a day; pass `allowDuplicates: true` to add the copies anyway. `staffMemberId` targets another member and requires `staff.timesheets.manage_all`. Every copy is written through the duplicate command and therefore through the create command, so ownership, project access, the billable and currency defaults and the tenant rounding rule apply to it exactly as they do to a hand-made entry.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: copyDayRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Copies created, with the skipped sources reported', schema: copyDayResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid body, missing scope, or fromDate equal to toDate' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.manage_own, no linked staff member, or another member day without staff.timesheets.manage_all' },\n        {\n          status: 409,\n          description: 'The target day already has entries; nothing was copied',\n          schema: targetNotEmptySchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AA+CA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,eAAe,WAAW,uBAAuB;AAC1D,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAE/B,SAAS,0CAA0C;AAGnD,SAAS,gBAAgB,yBAAyB;AAClD,SAAS,0BAA0B,8BAA8B;AACjE,SAAS,4BAAgD;AACzD,SAAS,gCAAgC;AACzC,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AAEzC,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,uCAAuC,CAAC;AAEhG,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAC3B,MAAM,gBAAgB,mCAAmC;AAGlD,MAAM,iCAAiC;AAG9C,MAAM,qBAAqB;AAEpB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,UAAU,EAAE,OAAO,KAAK;AAAA,EACxB,QAAQ,EAAE,OAAO,KAAK;AAAA;AAAA,EAEtB,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AACvD,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,MAAM,EAAE,OAAO;AAAA,EACf,iBAAiB,EAAE,OAAO;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,YAAY,EAAE,QAAQ;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AACnC,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO;AAAA,EACjB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,UAAU,EAAE,OAAO;AAAA,EACnB,QAAQ,EAAE,OAAO;AAAA,EACjB,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,QAAQ,EAAE,OAAO;AAAA,EACjB,SAAS,EAAE,MAAM,iBAAiB;AAAA,EAClC,SAAS,EAAE,MAAM,kBAAkB;AACrC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,8BAA8B;AAAA,EAC9C,OAAO,EAAE,OAAO;AAAA,EAChB,QAAQ,EAAE,OAAO;AAAA,EACjB,oBAAoB,EAAE,OAAO;AAAA,EAC7B,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAC7C,CAAC;AAeD,SAAS,OAAO,OAAiD;AAC/D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AACtF;AAEA,eAAe,2BAA2B,WAA0B,UAA0C;AAC5G,MAAI;AACF,UAAM,gBAAgB,UAAU,QAAQ,qBAAqB;AAC7D,UAAM,WAAW,MAAM,yBAAyB,eAAe,EAAE,SAAS,CAAC;AAC3E,WAAO,SAAS,OAAO;AAAA,EACzB,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBACb,WACA,QACA,UACA,gBACA,iBACwB;AACxB,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO,qBAAqB;AAAA,IAC1B,IAAI,GAAG,KAAK;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,qBAAqB,MAAM,2BAA2B,WAAW,QAAQ;AAAA,EAC3E,CAAC;AACH;AAQA,SAAS,mBACP,OACA,QACS;AACT,MAAI,OAAO,aAAc,QAAO;AAChC,QAAM,YAAY,MAAM,iBAAiB;AACzC,MAAI,UAAW,QAAO,OAAO,WAAW,SAAS,SAAS;AAC1D,SAAO,OAAO,kBAAkB,QAAQ,OAAO,kBAAkB,MAAM;AACzE;AAEA,eAAe,kBACb,IACA,UACA,UACA,gBACgC;AAChC,QAAM,YAAY,oBAAI,IAAsB;AAC5C,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,cAAc,MAAM,GAAG,KAAK,mBAAmB;AAAA,IACnD,aAAa,EAAE,KAAK,SAAS;AAAA,IAC7B;AAAA,IACA;AAAA,EACF,CAAC;AACD,aAAW,cAAc,aAAa;AACpC,UAAM,OAAO,UAAU,IAAI,WAAW,WAAW,KAAK,CAAC;AACvD,SAAK,KAAK,WAAW,KAAK;AAC1B,cAAU,IAAI,WAAW,aAAa,IAAI;AAAA,EAC5C;AACA,SAAO;AACT;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,KAAK,OAAO;AAM5B,UAAM,YAAY,MAAM,qBAAqB,WAAW,SAAS,CAAC,kBAAkB,GAAG,EAAE,UAAU,eAAe,CAAC;AACnH,QAAI,CAAC,UAAU,SAAS;AACtB,YAAM,UAAU,UAAU,0BAA0B,WAAW,CAAC;AAAA,IAClE;AACA,UAAM,kBAAkB,UAAU;AAClC,UAAM,gBACJ,MAAM,qBAAqB,WAAW,SAAS,CAAC,kBAAkB,GAAG,EAAE,UAAU,eAAe,CAAC,GACjG;AAEF,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,SAAS,UAAU,gBAAgB,cAAc,gBAAgB;AAAA,MAC7F,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,qBAAqB,MAAM,QAAQ,IAAI;AACtD,UAAM,UAAU,OAAO,OAAO,QAAQ;AACtC,UAAM,QAAQ,OAAO,OAAO,MAAM;AAClC,QAAI,YAAY,OAAO;AAGrB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,MAAM,kBAAkB,WAAW,WAAW,MAAM,UAAU,gBAAgB,eAAe;AAK5G,QAAI,OAAO,iBAAiB,OAAO,kBAAkB,OAAO,iBAAiB,CAAC,cAAc;AAC1F,YAAM;AAAA,QACJ,UAAU,oCAAoC,4CAA4C;AAAA,MAC5F;AAAA,IACF;AACA,UAAM,gBAAgB,OAAO,iBAAiB,OAAO;AACrD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,yCAAyC,yCAAyC;AAAA,MACrG,CAAC;AAAA,IACH;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,EAAE,UAAU,eAAe;AAE5C,UAAM,WACJ,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,EAAE,UAAU,gBAAgB,eAAe,MAAM,OAAO,UAAU,WAAW,KAAK;AAAA,MAClF,CAAC;AAAA,MACD;AAAA,IACF,GACA,OAAO,CAAC,UAAU,mBAAmB,OAAO,MAAM,CAAC;AAErD,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO,QAAQ,QAAQ,KAAK;AAAA,QAC1B,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,QAAQ;AAAA,QACR;AAAA,QACA,QAAQ;AAAA,QACR,SAAS,CAAC;AAAA,QACV,SAAS,CAAC;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,OAAO,iBAAiB;AAC3B,YAAM,WAAW,MAAM,GAAG;AAAA,QACxB;AAAA,QACA,EAAE,UAAU,gBAAgB,eAAe,MAAM,OAAO,QAAQ,WAAW,KAAK;AAAA,QAChF,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,MACnB;AACA,UAAI,SAAS,SAAS,GAAG;AACvB,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,MAAM;AAAA,UACN,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,UACA,QAAQ;AAAA,UACR,oBAAoB,SAAS;AAAA,UAC7B,kBAAkB,SAAS,IAAI,CAAC,UAAU,MAAM,EAAE;AAAA,QACpD,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,cAAc,MAAM,uBAAuB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,cAAc;AAAA,MAChB;AAAA,MACA,OAAO;AAAA,QACL,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,GAAI,QAAO,YAAY;AAExC,UAAM,UAA2B,CAAC;AAClC,UAAM,WAA6B,CAAC;AACpC,eAAW,SAAS,SAAS;AAC3B,UAAI,MAAM,gBAAgB;AACxB,gBAAQ,KAAK;AAAA,UACX,IAAI,MAAM;AAAA,UACV,QAAQ;AAAA,UACR,gBAAgB,MAAM;AAAA,UACtB,OAAO;AAAA,QACT,CAAC;AACD;AAAA,MACF;AACA,eAAS,KAAK,KAAK;AAAA,IACrB;AAMA,UAAM,gBAAgB,MAAM,kBAAkB,IAAI,SAAS,IAAI,CAAC,UAAU,MAAM,EAAE,GAAG,UAAU,cAAc;AAE7G,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,kCAAkC,OAAO,IAAI,KAAK;AAAA,MAC1E,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AAEjD,UAAM,mBAAmB,oBAAI,IAAoB;AACjD,eAAW,SAAS,UAAU;AAC5B,UAAI;AACF,cAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,UAClC,yBAAyB;AAAA,UACzB;AAAA,YACE,OAAO;AAAA,cACL,IAAI,MAAM;AAAA,cACV,MAAM,OAAO;AAAA,cACb,QAAQ,cAAc,IAAI,MAAM,EAAE,KAAK,CAAC;AAAA,YAC1C;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,YAAI,QAAQ,YAAa,kBAAiB,IAAI,MAAM,IAAI,OAAO,WAAW;AAAA,MAC5E,SAAS,KAAK;AAYZ,cAAM,uBAAuB,mCAAmC,GAAG;AACnE,cAAM,eAAe,uBACjB,OAAO,qBAAqB,KAAK,SAAS,EAAE,KAAK,OACjD,gBAAgB,GAAG,IACjB,OAAQ,IAAI,MAA8B,SAAS,EAAE,KAAK,OAC1D;AACN,eAAO,KAAK,6DAA6D,EAAE,KAAK,UAAU,MAAM,GAAG,CAAC;AACpG,gBAAQ,KAAK;AAAA,UACX,IAAI,MAAM;AAAA,UACV,QAAQ;AAAA,UACR,gBAAgB;AAAA,UAChB,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,YAAY,gBAAgB;AAElC,eAAW,CAAC,UAAU,SAAS,KAAK,kBAAkB;AACpD,WAAK,eAAe,sCAAsC;AAAA,QACxD,IAAI;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM;AAAA,MACR,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,eAAO,MAAM,kDAAkD,EAAE,KAAK,SAAS,CAAC;AAAA,MAClF,CAAC;AAAA,IACH;AAIA,UAAM,aAAa,MAAM,KAAK,iBAAiB,OAAO,CAAC;AACvD,UAAM,cAAc,WAAW,SAC3B,MAAM;AAAA,MACJ,GAAG,KAAK;AAAA,MACR;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACrE,CAAC;AAAA,MACD;AAAA,IACF,IACA,CAAC;AACL,UAAM,iBAAiB,IAAI,IAAI,YAAY,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AAEtE,UAAM,UAAU,MAAM,KAAK,iBAAiB,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,UAAU,SAAS,MAAM;AACxF,YAAM,MAAM,eAAe,IAAI,SAAS;AACxC,UAAI,CAAC,IAAK,QAAO,CAAC;AAClB,aAAO;AAAA,QACL;AAAA,UACE,IAAI,IAAI;AAAA,UACR;AAAA,UACA,MAAM,OAAO,IAAI,IAAI;AAAA,UACrB,iBAAiB,IAAI;AAAA,UACrB,gBAAgB,IAAI,kBAAkB;AAAA,UACtC,eAAe,IAAI,iBAAiB;AAAA,UACpC,QAAQ,IAAI,UAAU;AAAA,UACtB,YAAY,IAAI;AAAA,UAChB,aAAa,IAAI,SAAS;AAAA,UAC1B,QAAQ,cAAc,IAAI,QAAQ,KAAK,CAAC;AAAA,QAC1C;AAAA,MACF;AAAA,IACF,CAAC;AAED,WAAO,QAAQ,QAAQ,KAAK;AAAA,MAC1B,IAAI;AAAA,MACJ,UAAU;AAAA,MACV,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,iDAAiD,EAAE,IAAI,CAAC;AACrE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qDAAqD,QAAQ,sBAAsB;AAAA,MACjH;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,2DAA2D;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,yHAAyH;AAAA,QACrJ;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/timesheets/time-entries/overlaps/route.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
@@ -177,7 +178,7 @@ async function GET(req) {
     }
     const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
     const tenantId = orgScope?.tenantId ?? auth.tenantId ?? null;
-    const organizationId = orgScope?.selectedId ?? auth.orgId ?? null;
+    const organizationId = resolveSingleOrganizationIdOrDeny(orgScope, auth) ?? null;
     if (!tenantId || !organizationId) {
       throw new CrudHttpError(400, {
         error: translate("staff.errors.missingScope", "Missing tenant or organization scope.")

package/dist/modules/staff/api/timesheets/time-entries/overlaps/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/staff/api/timesheets/time-entries/overlaps/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { ModuleConfigService } from '@open-mercato/core/modules/configs/lib/module-config-service'\nimport { StaffTimeEntry, StaffTimeProject, StaffTimeTask } from '../../../../data/entities'\nimport { deriveInterval, formatClock, parseClock } from '../../../../lib/time-tracking/interval'\nimport {\n  evaluateOverlapPolicies,\n  findOverlaps,\n  type OverlapSpan,\n} from '../../../../lib/time-tracking/overlap'\nimport { resolveFeatureAccess } from '../../../../lib/time-tracking/featureAccess'\nimport {\n  MANAGE_PROJECTS_FEATURE,\n  assertProjectAccess,\n  resolveProjectAccess,\n} from '../../../../lib/time-tracking/access'\nimport { readTimeTrackingSettings } from '../../../../lib/time-tracking/settings'\nimport {\n  readSearchParamsRecord,\n  runTimesheetInterceptors,\n} from '../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-entries/overlaps' })\n\nconst VIEW_FEATURE = 'staff.timesheets.view'\nconst MANAGE_ALL_FEATURE = 'staff.timesheets.manage_all'\n\n/**\n * Upper bound for the day-window scan. One staff member can only hold a handful\n * of entries across three days, so this is a guard against pathological data\n * rather than a paging contract.\n */\nconst MAX_WINDOW_ROWS = 500\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [VIEW_FEATURE] },\n}\n\nconst DATE_PATTERN = /^\\d{4}-\\d{2}-\\d{2}$/\nconst DATE_PREFIX_PATTERN = /^(\\d{4}-\\d{2}-\\d{2})/\n\nconst querySchema = z.object({\n  date: z.string().regex(DATE_PATTERN),\n  startedAt: z.string().optional(),\n  endedAt: z.string().optional(),\n  durationMinutes: z.coerce.number().int().min(0).max(1440).optional(),\n  excludeId: z.string().uuid().optional(),\n  staffMemberId: z.string().uuid().optional(),\n})\n\nconst overlapItemSchema = z.object({\n  id: z.string().uuid(),\n  staff_member_id: z.string().uuid(),\n  date: z.string(),\n  started_at: z.string(),\n  ended_at: z.string(),\n  duration_minutes: z.number(),\n  overlap_minutes: z.number(),\n  crosses_midnight: z.boolean(),\n  task_id: z.string().uuid().nullable(),\n  task_title: z.string().nullable(),\n  time_project_id: z.string().uuid().nullable(),\n  project_name: z.string().nullable(),\n  notes: z.string().nullable(),\n})\n\nconst overlapsResponseSchema = z.object({\n  items: z.array(overlapItemSchema),\n  total: z.number(),\n  /**\n   * EP-38. `warn` is what this route has always meant; the field exists so a\n   * contributed policy that escalates to `block` reaches the form, and so a\n   * caller can tell \"the tenant turned the warning off\" from \"nothing overlaps\".\n   */\n  decision: z.enum(['allow', 'warn', 'block']),\n})\n\ntype OverlapItem = z.infer<typeof overlapItemSchema>\n\ntype RbacServiceLike = {\n  getGrantedFeatures?: (\n    userId: string,\n    options: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<string[]>\n}\n\ntype EntryRow = Pick<\n  StaffTimeEntry,\n  | 'id'\n  | 'staffMemberId'\n  | 'durationMinutes'\n  | 'startedAt'\n  | 'endedAt'\n  | 'notes'\n  | 'taskId'\n  | 'timeProjectId'\n> & { date: unknown }\n\nconst EMPTY_OVERLAP_RESULT = { items: [], total: 0, decision: 'allow' as const }\n\nfunction pad(value: number): string {\n  return String(value).padStart(2, '0')\n}\n\nfunction formatLocalDate(value: Date): string {\n  return `${value.getFullYear()}-${pad(value.getMonth() + 1)}-${pad(value.getDate())}`\n}\n\nfunction shiftDate(date: string, days: number): string {\n  const [year, month, day] = date.split('-').map(Number)\n  const shifted = new Date(Date.UTC(year, month - 1, day + days))\n  return `${shifted.getUTCFullYear()}-${pad(shifted.getUTCMonth() + 1)}-${pad(shifted.getUTCDate())}`\n}\n\nfunction toDayString(value: unknown): string | null {\n  if (typeof value === 'string') {\n    const match = DATE_PREFIX_PATTERN.exec(value.trim())\n    return match ? match[1] : null\n  }\n  if (value instanceof Date && !Number.isNaN(value.getTime())) return formatLocalDate(value)\n  return null\n}\n\n/**\n * Accepts either a wall clock (`11:45`, what the entry form sends) or a full\n * timestamp (what the timer endpoints persist), and always answers in the\n * calendar the rest of the module reads dates in.\n */\nfunction toClock(value: unknown): string | null {\n  if (value instanceof Date) {\n    if (Number.isNaN(value.getTime())) return null\n    return formatClock(value.getHours() * 60 + value.getMinutes())\n  }\n  if (typeof value !== 'string') return null\n  const trimmed = value.trim()\n  if (!trimmed) return null\n  const clock = parseClock(trimmed)\n  if (clock !== null) return formatClock(clock)\n  const parsed = new Date(trimmed)\n  if (Number.isNaN(parsed.getTime())) return null\n  return formatClock(parsed.getHours() * 60 + parsed.getMinutes())\n}\n\nfunction toRowSpan(row: EntryRow): OverlapSpan | null {\n  const start = toClock(row.startedAt)\n  if (!start) return null\n  const date =\n    (row.startedAt instanceof Date && !Number.isNaN(row.startedAt.getTime())\n      ? formatLocalDate(row.startedAt)\n      : null) ?? toDayString(row.date)\n  if (!date) return null\n  return {\n    id: row.id,\n    date,\n    start,\n    end: toClock(row.endedAt),\n    durationMinutes: typeof row.durationMinutes === 'number' ? row.durationMinutes : null,\n  }\n}\n\nfunction readQuery(params: URLSearchParams): z.infer<typeof querySchema> {\n  const raw: Record<string, string> = {}\n  for (const key of ['date', 'startedAt', 'endedAt', 'durationMinutes', 'excludeId', 'staffMemberId']) {\n    const value = params.get(key)\n    if (value !== null && value.trim().length > 0) raw[key] = value.trim()\n  }\n  return querySchema.parse(raw)\n}\n\nasync function resolveGrantedFeatures(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<string[]> {\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike | undefined\n    if (!rbac?.getGrantedFeatures) return []\n    return (await rbac.getGrantedFeatures(userId, scope)) ?? []\n  } catch {\n    return []\n  }\n}\n\nasync function resolveOverlapSettings(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n  tenantId: string,\n): Promise<{ assignmentGraceDays: number | null; warningsEnabled: boolean }> {\n  try {\n    const configService = container.resolve('moduleConfigService') as ModuleConfigService\n    const settings = await readTimeTrackingSettings(configService, { tenantId })\n    return {\n      assignmentGraceDays: settings.access.assignmentGraceDays,\n      warningsEnabled: settings.warnings.overlap,\n    }\n  } catch {\n    // The same fail-safe the grace window uses: an unreadable settings row keeps\n    // the advisory warning on, which is what the module default says.\n    return { assignmentGraceDays: null, warningsEnabled: true }\n  }\n}\n\nasync function loadLabels(\n  em: EntityManager,\n  scope: { tenantId: string; organizationId: string },\n  taskIds: string[],\n  projectIds: string[],\n): Promise<{ tasks: Map<string, string>; projects: Map<string, string> }> {\n  const tasks = new Map<string, string>()\n  const projects = new Map<string, string>()\n  if (taskIds.length) {\n    const rows = await findWithDecryption(\n      em,\n      StaffTimeTask,\n      { id: { $in: taskIds }, ...scope, deletedAt: null },\n      {},\n      scope,\n    )\n    for (const row of rows) tasks.set(row.id, row.title)\n  }\n  if (projectIds.length) {\n    const rows = await findWithDecryption(\n      em,\n      StaffTimeProject,\n      { id: { $in: projectIds }, ...scope, deletedAt: null },\n      {},\n      scope,\n    )\n    for (const row of rows) projects.set(row.id, row.name)\n  }\n  return { tasks, projects }\n}\n\n/**\n * GET /api/staff/timesheets/time-entries/overlaps\n *\n * Advisory-only overlap probe for the time entry form (mockup screen 9). It is\n * read-only and never blocks a save: overlapping time is legitimate in\n * consulting work (a client call while taking notes), so the UI renders the\n * result as a warning with a suggested fix, never as a validation error. Any\n * failure here MUST degrade to \"no warning\" rather than break the form \u2014 the\n * route therefore answers `{ items: [], total: 0 }` for unusable input, a\n * caller without a linked staff member, or a lookup that yields nothing, and\n * the client is expected to ignore non-200 responses.\n *\n * Scoping: rows are always filtered by `tenant_id` + `organization_id` and\n * intersected with `resolveProjectAccess`, so the endpoint cannot be used to\n * probe entries on projects the caller cannot see. Asking about another staff\n * member requires `staff.timesheets.manage_all`; without it the request is\n * silently scoped back to the caller's own member instead of erroring.\n *\n * Query shape: the form calls this on blur, so the lookup reads a three-day\n * window (`date - 1 .. date + 1`) against the\n * `(organization_id, staff_member_id, date, started_at)` index. The adjacent\n * days cover midnight-crossing spans in both directions \u2014 a candidate that ends\n * after midnight, and a stored entry that started the previous evening \u2014 without\n * ever scanning history.\n */\nexport async function GET(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = orgScope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = orgScope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'GET',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n      query: readSearchParamsRecord(req.url),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const query = readQuery(session.searchParams)\n    const candidate: OverlapSpan = {\n      date: query.date,\n      start: toClock(query.startedAt),\n      end: toClock(query.endedAt),\n      durationMinutes: query.durationMinutes ?? null,\n    }\n    const derived = deriveInterval({\n      start: candidate.start,\n      end: candidate.end,\n      durationMinutes: candidate.durationMinutes,\n    })\n    if (!derived.start || derived.durationMinutes === null || derived.durationMinutes <= 0) {\n      return session.respond(200, EMPTY_OVERLAP_RESULT)\n    }\n\n    const scope = { tenantId, organizationId }\n    const em = (container.resolve('em') as EntityManager).fork()\n    const userId = typeof auth.sub === 'string' ? auth.sub : null\n    // Both questions go to the service. Asking one and inferring the other from a\n    // grant array is how the two could disagree when the read failed.\n    const manageAll = await resolveFeatureAccess(container, userId, [MANAGE_ALL_FEATURE], scope)\n    const manageProjects = await resolveFeatureAccess(container, userId, [MANAGE_PROJECTS_FEATURE], scope)\n    const canManageAll = manageAll.allowed\n\n    const overlapSettings = await resolveOverlapSettings(container, tenantId)\n    const access = await resolveProjectAccess({\n      em,\n      userId,\n      tenantId,\n      organizationId,\n      canManageAll: manageProjects.allowed,\n      userFeatures: manageAll.grantedFeatures,\n      assignmentGraceDays: overlapSettings.assignmentGraceDays,\n    })\n\n    const staffMemberId =\n      canManageAll && query.staffMemberId ? query.staffMemberId : access.staffMemberId\n    if (!staffMemberId) return session.respond(200, EMPTY_OVERLAP_RESULT)\n    const isSelfScope = staffMemberId === access.staffMemberId\n\n    const where = {\n      tenantId,\n      organizationId,\n      staffMemberId,\n      deletedAt: null,\n      date: { $gte: shiftDate(query.date, -1), $lte: shiftDate(query.date, 1) },\n    } as unknown as FilterQuery<StaffTimeEntry>\n    const rows = (await findWithDecryption(\n      em,\n      StaffTimeEntry,\n      where,\n      { orderBy: { startedAt: 'asc' }, limit: MAX_WINDOW_ROWS },\n      scope,\n    )) as unknown as EntryRow[]\n\n    const visible = rows.filter(\n      (row) =>\n        assertProjectAccess(access, row.timeProjectId ?? null) ||\n        (isSelfScope && !row.timeProjectId),\n    )\n    const byId = new Map(visible.map((row) => [row.id, row]))\n    const spans = visible\n      .map((row) => toRowSpan(row))\n      .filter((span): span is OverlapSpan => span !== null)\n\n    const candidateSpan: OverlapSpan = {\n      date: query.date,\n      start: derived.start,\n      end: derived.end,\n      durationMinutes: derived.durationMinutes,\n    }\n    const overlaps = findOverlaps(\n      candidateSpan,\n      spans,\n      query.excludeId ? { excludeId: query.excludeId } : undefined,\n    )\n    const decision = evaluateOverlapPolicies(overlaps, {\n      tenantId,\n      organizationId,\n      candidate: candidateSpan,\n      warningsEnabled: overlapSettings.warningsEnabled,\n      staffMemberId,\n      excludeId: query.excludeId ?? null,\n    })\n    // The item list is unchanged by the policy: this endpoint answers \"what\n    // intersects\", and `decision` answers \"and what should happen\". Collapsing\n    // the list when a tenant turns the warning off would make the two\n    // indistinguishable from \"nothing intersects\" for every other caller.\n    if (!overlaps.length) return session.respond(200, { ...EMPTY_OVERLAP_RESULT, decision })\n\n    const taskIds = new Set<string>()\n    const projectIds = new Set<string>()\n    for (const overlap of overlaps) {\n      const row = overlap.id ? byId.get(overlap.id) : undefined\n      if (row?.taskId) taskIds.add(row.taskId)\n      if (row?.timeProjectId) projectIds.add(row.timeProjectId)\n    }\n    const labels = await loadLabels(em, scope, [...taskIds], [...projectIds])\n\n    const items: OverlapItem[] = []\n    for (const overlap of overlaps) {\n      const row = overlap.id ? byId.get(overlap.id) : undefined\n      if (!row) continue\n      const interval = deriveInterval({\n        start: overlap.entry.start,\n        end: overlap.entry.end,\n        durationMinutes: overlap.entry.durationMinutes,\n      })\n      items.push({\n        id: row.id,\n        staff_member_id: row.staffMemberId,\n        date: overlap.entry.date,\n        started_at: interval.start ?? '',\n        ended_at: interval.end ?? '',\n        duration_minutes: interval.durationMinutes ?? 0,\n        overlap_minutes: overlap.overlapMinutes,\n        crosses_midnight: interval.crossesMidnight,\n        task_id: row.taskId ?? null,\n        task_title: row.taskId ? labels.tasks.get(row.taskId) ?? null : null,\n        time_project_id: row.timeProjectId ?? null,\n        project_name: row.timeProjectId ? labels.projects.get(row.timeProjectId) ?? null : null,\n        notes: row.notes ?? null,\n      })\n    }\n\n    return session.respond(200, { items, total: items.length, decision })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-entries.overlaps GET failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Advisory time entry overlap check',\n  methods: {\n    GET: {\n      summary: 'List time entries overlapping a candidate span',\n      description:\n        'Advisory, read-only lookup used by the time entry form to warn about conflicting entries. Overlapping time is allowed, so the result never blocks a save. Returns an empty list when the supplied time information is insufficient. Checking another staff member requires staff.timesheets.manage_all; without it the request is silently scoped to the caller.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Overlapping entries', schema: overlapsResponseSchema },\n        { status: 400, description: 'Invalid query or missing scope', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,eAAe,uBAAuB;AAE/C,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAG7B,SAAS,gBAAgB,kBAAkB,qBAAqB;AAChE,SAAS,gBAAgB,aAAa,kBAAkB;AACxD;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,uCAAuC,CAAC;AAEhG,MAAM,eAAe;AACrB,MAAM,qBAAqB;AAO3B,MAAM,kBAAkB;AAEjB,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,YAAY,EAAE;AAC5D;AAEA,MAAM,eAAe;AACrB,MAAM,sBAAsB;AAE5B,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,iBAAiB,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,EACnE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC5C,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,MAAM,EAAE,OAAO;AAAA,EACf,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,OAAO;AAAA,EACnB,kBAAkB,EAAE,OAAO;AAAA,EAC3B,iBAAiB,EAAE,OAAO;AAAA,EAC1B,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC5C,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,OAAO,EAAE,MAAM,iBAAiB;AAAA,EAChC,OAAO,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMhB,UAAU,EAAE,KAAK,CAAC,SAAS,QAAQ,OAAO,CAAC;AAC7C,CAAC;AAuBD,MAAM,uBAAuB,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,UAAU,QAAiB;AAE/E,SAAS,IAAI,OAAuB;AAClC,SAAO,OAAO,KAAK,EAAE,SAAS,GAAG,GAAG;AACtC;AAEA,SAAS,gBAAgB,OAAqB;AAC5C,SAAO,GAAG,MAAM,YAAY,CAAC,IAAI,IAAI,MAAM,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,QAAQ,CAAC,CAAC;AACpF;AAEA,SAAS,UAAU,MAAc,MAAsB;AACrD,QAAM,CAAC,MAAM,OAAO,GAAG,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI,MAAM;AACrD,QAAM,UAAU,IAAI,KAAK,KAAK,IAAI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC;AAC9D,SAAO,GAAG,QAAQ,eAAe,CAAC,IAAI,IAAI,QAAQ,YAAY,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,WAAW,CAAC,CAAC;AACnG;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,oBAAoB,KAAK,MAAM,KAAK,CAAC;AACnD,WAAO,QAAQ,MAAM,CAAC,IAAI;AAAA,EAC5B;AACA,MAAI,iBAAiB,QAAQ,CAAC,OAAO,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO,gBAAgB,KAAK;AACzF,SAAO;AACT;AAOA,SAAS,QAAQ,OAA+B;AAC9C,MAAI,iBAAiB,MAAM;AACzB,QAAI,OAAO,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO;AAC1C,WAAO,YAAY,MAAM,SAAS,IAAI,KAAK,MAAM,WAAW,CAAC;AAAA,EAC/D;AACA,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,QAAQ,WAAW,OAAO;AAChC,MAAI,UAAU,KAAM,QAAO,YAAY,KAAK;AAC5C,QAAM,SAAS,IAAI,KAAK,OAAO;AAC/B,MAAI,OAAO,MAAM,OAAO,QAAQ,CAAC,EAAG,QAAO;AAC3C,SAAO,YAAY,OAAO,SAAS,IAAI,KAAK,OAAO,WAAW,CAAC;AACjE;AAEA,SAAS,UAAU,KAAmC;AACpD,QAAM,QAAQ,QAAQ,IAAI,SAAS;AACnC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QACH,IAAI,qBAAqB,QAAQ,CAAC,OAAO,MAAM,IAAI,UAAU,QAAQ,CAAC,IACnE,gBAAgB,IAAI,SAAS,IAC7B,SAAS,YAAY,IAAI,IAAI;AACnC,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR;AAAA,IACA;AAAA,IACA,KAAK,QAAQ,IAAI,OAAO;AAAA,IACxB,iBAAiB,OAAO,IAAI,oBAAoB,WAAW,IAAI,kBAAkB;AAAA,EACnF;AACF;AAEA,SAAS,UAAU,QAAsD;AACvE,QAAM,MAA8B,CAAC;AACrC,aAAW,OAAO,CAAC,QAAQ,aAAa,WAAW,mBAAmB,aAAa,eAAe,GAAG;AACnG,UAAM,QAAQ,OAAO,IAAI,GAAG;AAC5B,QAAI,UAAU,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAG,KAAI,GAAG,IAAI,MAAM,KAAK;AAAA,EACvE;AACA,SAAO,YAAY,MAAM,GAAG;AAC9B;AAEA,eAAe,uBACb,WACA,QACA,OACmB;AACnB,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAI,CAAC,MAAM,mBAAoB,QAAO,CAAC;AACvC,WAAQ,MAAM,KAAK,mBAAmB,QAAQ,KAAK,KAAM,CAAC;AAAA,EAC5D,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAe,uBACb,WACA,UAC2E;AAC3E,MAAI;AACF,UAAM,gBAAgB,UAAU,QAAQ,qBAAqB;AAC7D,UAAM,WAAW,MAAM,yBAAyB,eAAe,EAAE,SAAS,CAAC;AAC3E,WAAO;AAAA,MACL,qBAAqB,SAAS,OAAO;AAAA,MACrC,iBAAiB,SAAS,SAAS;AAAA,IACrC;AAAA,EACF,QAAQ;AAGN,WAAO,EAAE,qBAAqB,MAAM,iBAAiB,KAAK;AAAA,EAC5D;AACF;AAEA,eAAe,WACb,IACA,OACA,SACA,YACwE;AACxE,QAAM,QAAQ,oBAAI,IAAoB;AACtC,QAAM,WAAW,oBAAI,IAAoB;AACzC,MAAI,QAAQ,QAAQ;AAClB,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,QAAQ,GAAG,GAAG,OAAO,WAAW,KAAK;AAAA,MAClD,CAAC;AAAA,MACD;AAAA,IACF;AACA,eAAW,OAAO,KAAM,OAAM,IAAI,IAAI,IAAI,IAAI,KAAK;AAAA,EACrD;AACA,MAAI,WAAW,QAAQ;AACrB,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,GAAG,OAAO,WAAW,KAAK;AAAA,MACrD,CAAC;AAAA,MACD;AAAA,IACF;AACA,eAAW,OAAO,KAAM,UAAS,IAAI,IAAI,IAAI,IAAI,IAAI;AAAA,EACvD;AACA,SAAO,EAAE,OAAO,SAAS;AAC3B;AA2BA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,WAAW,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAC3F,UAAM,WAAW,UAAU,YAAY,KAAK,YAAY;AACxD,UAAM,iBAAiB,UAAU,cAAc,KAAK,SAAS;AAC7D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,MAC/D,OAAO,uBAAuB,IAAI,GAAG;AAAA,IACvC,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,QAAQ,UAAU,QAAQ,YAAY;AAC5C,UAAM,YAAyB;AAAA,MAC7B,MAAM,MAAM;AAAA,MACZ,OAAO,QAAQ,MAAM,SAAS;AAAA,MAC9B,KAAK,QAAQ,MAAM,OAAO;AAAA,MAC1B,iBAAiB,MAAM,mBAAmB;AAAA,IAC5C;AACA,UAAM,UAAU,eAAe;AAAA,MAC7B,OAAO,UAAU;AAAA,MACjB,KAAK,UAAU;AAAA,MACf,iBAAiB,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,QAAQ,SAAS,QAAQ,oBAAoB,QAAQ,QAAQ,mBAAmB,GAAG;AACtF,aAAO,QAAQ,QAAQ,KAAK,oBAAoB;AAAA,IAClD;AAEA,UAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AAGzD,UAAM,YAAY,MAAM,qBAAqB,WAAW,QAAQ,CAAC,kBAAkB,GAAG,KAAK;AAC3F,UAAM,iBAAiB,MAAM,qBAAqB,WAAW,QAAQ,CAAC,uBAAuB,GAAG,KAAK;AACrG,UAAM,eAAe,UAAU;AAE/B,UAAM,kBAAkB,MAAM,uBAAuB,WAAW,QAAQ;AACxE,UAAM,SAAS,MAAM,qBAAqB;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,eAAe;AAAA,MAC7B,cAAc,UAAU;AAAA,MACxB,qBAAqB,gBAAgB;AAAA,IACvC,CAAC;AAED,UAAM,gBACJ,gBAAgB,MAAM,gBAAgB,MAAM,gBAAgB,OAAO;AACrE,QAAI,CAAC,cAAe,QAAO,QAAQ,QAAQ,KAAK,oBAAoB;AACpE,UAAM,cAAc,kBAAkB,OAAO;AAE7C,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,MAAM,EAAE,MAAM,UAAU,MAAM,MAAM,EAAE,GAAG,MAAM,UAAU,MAAM,MAAM,CAAC,EAAE;AAAA,IAC1E;AACA,UAAM,OAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,SAAS,EAAE,WAAW,MAAM,GAAG,OAAO,gBAAgB;AAAA,MACxD;AAAA,IACF;AAEA,UAAM,UAAU,KAAK;AAAA,MACnB,CAAC,QACC,oBAAoB,QAAQ,IAAI,iBAAiB,IAAI,KACpD,eAAe,CAAC,IAAI;AAAA,IACzB;AACA,UAAM,OAAO,IAAI,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AACxD,UAAM,QAAQ,QACX,IAAI,CAAC,QAAQ,UAAU,GAAG,CAAC,EAC3B,OAAO,CAAC,SAA8B,SAAS,IAAI;AAEtD,UAAM,gBAA6B;AAAA,MACjC,MAAM,MAAM;AAAA,MACZ,OAAO,QAAQ;AAAA,MACf,KAAK,QAAQ;AAAA,MACb,iBAAiB,QAAQ;AAAA,IAC3B;AACA,UAAM,WAAW;AAAA,MACf;AAAA,MACA;AAAA,MACA,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI;AAAA,IACrD;AACA,UAAM,WAAW,wBAAwB,UAAU;AAAA,MACjD;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,iBAAiB,gBAAgB;AAAA,MACjC;AAAA,MACA,WAAW,MAAM,aAAa;AAAA,IAChC,CAAC;AAKD,QAAI,CAAC,SAAS,OAAQ,QAAO,QAAQ,QAAQ,KAAK,EAAE,GAAG,sBAAsB,SAAS,CAAC;AAEvF,UAAM,UAAU,oBAAI,IAAY;AAChC,UAAM,aAAa,oBAAI,IAAY;AACnC,eAAW,WAAW,UAAU;AAC9B,YAAM,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE,IAAI;AAChD,UAAI,KAAK,OAAQ,SAAQ,IAAI,IAAI,MAAM;AACvC,UAAI,KAAK,cAAe,YAAW,IAAI,IAAI,aAAa;AAAA,IAC1D;AACA,UAAM,SAAS,MAAM,WAAW,IAAI,OAAO,CAAC,GAAG,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC;AAExE,UAAM,QAAuB,CAAC;AAC9B,eAAW,WAAW,UAAU;AAC9B,YAAM,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE,IAAI;AAChD,UAAI,CAAC,IAAK;AACV,YAAM,WAAW,eAAe;AAAA,QAC9B,OAAO,QAAQ,MAAM;AAAA,QACrB,KAAK,QAAQ,MAAM;AAAA,QACnB,iBAAiB,QAAQ,MAAM;AAAA,MACjC,CAAC;AACD,YAAM,KAAK;AAAA,QACT,IAAI,IAAI;AAAA,QACR,iBAAiB,IAAI;AAAA,QACrB,MAAM,QAAQ,MAAM;AAAA,QACpB,YAAY,SAAS,SAAS;AAAA,QAC9B,UAAU,SAAS,OAAO;AAAA,QAC1B,kBAAkB,SAAS,mBAAmB;AAAA,QAC9C,iBAAiB,QAAQ;AAAA,QACzB,kBAAkB,SAAS;AAAA,QAC3B,SAAS,IAAI,UAAU;AAAA,QACvB,YAAY,IAAI,SAAS,OAAO,MAAM,IAAI,IAAI,MAAM,KAAK,OAAO;AAAA,QAChE,iBAAiB,IAAI,iBAAiB;AAAA,QACtC,cAAc,IAAI,gBAAgB,OAAO,SAAS,IAAI,IAAI,aAAa,KAAK,OAAO;AAAA,QACnF,OAAO,IAAI,SAAS;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,QAAQ,QAAQ,KAAK,EAAE,OAAO,OAAO,MAAM,QAAQ,SAAS,CAAC;AAAA,EACtE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,qDAAqD,EAAE,IAAI,CAAC;AACzE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,uBAAuB;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACtG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { ModuleConfigService } from '@open-mercato/core/modules/configs/lib/module-config-service'\nimport { StaffTimeEntry, StaffTimeProject, StaffTimeTask } from '../../../../data/entities'\nimport { deriveInterval, formatClock, parseClock } from '../../../../lib/time-tracking/interval'\nimport {\n  evaluateOverlapPolicies,\n  findOverlaps,\n  type OverlapSpan,\n} from '../../../../lib/time-tracking/overlap'\nimport { resolveFeatureAccess } from '../../../../lib/time-tracking/featureAccess'\nimport {\n  MANAGE_PROJECTS_FEATURE,\n  assertProjectAccess,\n  resolveProjectAccess,\n} from '../../../../lib/time-tracking/access'\nimport { readTimeTrackingSettings } from '../../../../lib/time-tracking/settings'\nimport {\n  readSearchParamsRecord,\n  runTimesheetInterceptors,\n} from '../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-entries/overlaps' })\n\nconst VIEW_FEATURE = 'staff.timesheets.view'\nconst MANAGE_ALL_FEATURE = 'staff.timesheets.manage_all'\n\n/**\n * Upper bound for the day-window scan. One staff member can only hold a handful\n * of entries across three days, so this is a guard against pathological data\n * rather than a paging contract.\n */\nconst MAX_WINDOW_ROWS = 500\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [VIEW_FEATURE] },\n}\n\nconst DATE_PATTERN = /^\\d{4}-\\d{2}-\\d{2}$/\nconst DATE_PREFIX_PATTERN = /^(\\d{4}-\\d{2}-\\d{2})/\n\nconst querySchema = z.object({\n  date: z.string().regex(DATE_PATTERN),\n  startedAt: z.string().optional(),\n  endedAt: z.string().optional(),\n  durationMinutes: z.coerce.number().int().min(0).max(1440).optional(),\n  excludeId: z.string().uuid().optional(),\n  staffMemberId: z.string().uuid().optional(),\n})\n\nconst overlapItemSchema = z.object({\n  id: z.string().uuid(),\n  staff_member_id: z.string().uuid(),\n  date: z.string(),\n  started_at: z.string(),\n  ended_at: z.string(),\n  duration_minutes: z.number(),\n  overlap_minutes: z.number(),\n  crosses_midnight: z.boolean(),\n  task_id: z.string().uuid().nullable(),\n  task_title: z.string().nullable(),\n  time_project_id: z.string().uuid().nullable(),\n  project_name: z.string().nullable(),\n  notes: z.string().nullable(),\n})\n\nconst overlapsResponseSchema = z.object({\n  items: z.array(overlapItemSchema),\n  total: z.number(),\n  /**\n   * EP-38. `warn` is what this route has always meant; the field exists so a\n   * contributed policy that escalates to `block` reaches the form, and so a\n   * caller can tell \"the tenant turned the warning off\" from \"nothing overlaps\".\n   */\n  decision: z.enum(['allow', 'warn', 'block']),\n})\n\ntype OverlapItem = z.infer<typeof overlapItemSchema>\n\ntype RbacServiceLike = {\n  getGrantedFeatures?: (\n    userId: string,\n    options: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<string[]>\n}\n\ntype EntryRow = Pick<\n  StaffTimeEntry,\n  | 'id'\n  | 'staffMemberId'\n  | 'durationMinutes'\n  | 'startedAt'\n  | 'endedAt'\n  | 'notes'\n  | 'taskId'\n  | 'timeProjectId'\n> & { date: unknown }\n\nconst EMPTY_OVERLAP_RESULT = { items: [], total: 0, decision: 'allow' as const }\n\nfunction pad(value: number): string {\n  return String(value).padStart(2, '0')\n}\n\nfunction formatLocalDate(value: Date): string {\n  return `${value.getFullYear()}-${pad(value.getMonth() + 1)}-${pad(value.getDate())}`\n}\n\nfunction shiftDate(date: string, days: number): string {\n  const [year, month, day] = date.split('-').map(Number)\n  const shifted = new Date(Date.UTC(year, month - 1, day + days))\n  return `${shifted.getUTCFullYear()}-${pad(shifted.getUTCMonth() + 1)}-${pad(shifted.getUTCDate())}`\n}\n\nfunction toDayString(value: unknown): string | null {\n  if (typeof value === 'string') {\n    const match = DATE_PREFIX_PATTERN.exec(value.trim())\n    return match ? match[1] : null\n  }\n  if (value instanceof Date && !Number.isNaN(value.getTime())) return formatLocalDate(value)\n  return null\n}\n\n/**\n * Accepts either a wall clock (`11:45`, what the entry form sends) or a full\n * timestamp (what the timer endpoints persist), and always answers in the\n * calendar the rest of the module reads dates in.\n */\nfunction toClock(value: unknown): string | null {\n  if (value instanceof Date) {\n    if (Number.isNaN(value.getTime())) return null\n    return formatClock(value.getHours() * 60 + value.getMinutes())\n  }\n  if (typeof value !== 'string') return null\n  const trimmed = value.trim()\n  if (!trimmed) return null\n  const clock = parseClock(trimmed)\n  if (clock !== null) return formatClock(clock)\n  const parsed = new Date(trimmed)\n  if (Number.isNaN(parsed.getTime())) return null\n  return formatClock(parsed.getHours() * 60 + parsed.getMinutes())\n}\n\nfunction toRowSpan(row: EntryRow): OverlapSpan | null {\n  const start = toClock(row.startedAt)\n  if (!start) return null\n  const date =\n    (row.startedAt instanceof Date && !Number.isNaN(row.startedAt.getTime())\n      ? formatLocalDate(row.startedAt)\n      : null) ?? toDayString(row.date)\n  if (!date) return null\n  return {\n    id: row.id,\n    date,\n    start,\n    end: toClock(row.endedAt),\n    durationMinutes: typeof row.durationMinutes === 'number' ? row.durationMinutes : null,\n  }\n}\n\nfunction readQuery(params: URLSearchParams): z.infer<typeof querySchema> {\n  const raw: Record<string, string> = {}\n  for (const key of ['date', 'startedAt', 'endedAt', 'durationMinutes', 'excludeId', 'staffMemberId']) {\n    const value = params.get(key)\n    if (value !== null && value.trim().length > 0) raw[key] = value.trim()\n  }\n  return querySchema.parse(raw)\n}\n\nasync function resolveGrantedFeatures(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<string[]> {\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike | undefined\n    if (!rbac?.getGrantedFeatures) return []\n    return (await rbac.getGrantedFeatures(userId, scope)) ?? []\n  } catch {\n    return []\n  }\n}\n\nasync function resolveOverlapSettings(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n  tenantId: string,\n): Promise<{ assignmentGraceDays: number | null; warningsEnabled: boolean }> {\n  try {\n    const configService = container.resolve('moduleConfigService') as ModuleConfigService\n    const settings = await readTimeTrackingSettings(configService, { tenantId })\n    return {\n      assignmentGraceDays: settings.access.assignmentGraceDays,\n      warningsEnabled: settings.warnings.overlap,\n    }\n  } catch {\n    // The same fail-safe the grace window uses: an unreadable settings row keeps\n    // the advisory warning on, which is what the module default says.\n    return { assignmentGraceDays: null, warningsEnabled: true }\n  }\n}\n\nasync function loadLabels(\n  em: EntityManager,\n  scope: { tenantId: string; organizationId: string },\n  taskIds: string[],\n  projectIds: string[],\n): Promise<{ tasks: Map<string, string>; projects: Map<string, string> }> {\n  const tasks = new Map<string, string>()\n  const projects = new Map<string, string>()\n  if (taskIds.length) {\n    const rows = await findWithDecryption(\n      em,\n      StaffTimeTask,\n      { id: { $in: taskIds }, ...scope, deletedAt: null },\n      {},\n      scope,\n    )\n    for (const row of rows) tasks.set(row.id, row.title)\n  }\n  if (projectIds.length) {\n    const rows = await findWithDecryption(\n      em,\n      StaffTimeProject,\n      { id: { $in: projectIds }, ...scope, deletedAt: null },\n      {},\n      scope,\n    )\n    for (const row of rows) projects.set(row.id, row.name)\n  }\n  return { tasks, projects }\n}\n\n/**\n * GET /api/staff/timesheets/time-entries/overlaps\n *\n * Advisory-only overlap probe for the time entry form (mockup screen 9). It is\n * read-only and never blocks a save: overlapping time is legitimate in\n * consulting work (a client call while taking notes), so the UI renders the\n * result as a warning with a suggested fix, never as a validation error. Any\n * failure here MUST degrade to \"no warning\" rather than break the form \u2014 the\n * route therefore answers `{ items: [], total: 0 }` for unusable input, a\n * caller without a linked staff member, or a lookup that yields nothing, and\n * the client is expected to ignore non-200 responses.\n *\n * Scoping: rows are always filtered by `tenant_id` + `organization_id` and\n * intersected with `resolveProjectAccess`, so the endpoint cannot be used to\n * probe entries on projects the caller cannot see. Asking about another staff\n * member requires `staff.timesheets.manage_all`; without it the request is\n * silently scoped back to the caller's own member instead of erroring.\n *\n * Query shape: the form calls this on blur, so the lookup reads a three-day\n * window (`date - 1 .. date + 1`) against the\n * `(organization_id, staff_member_id, date, started_at)` index. The adjacent\n * days cover midnight-crossing spans in both directions \u2014 a candidate that ends\n * after midnight, and a stored entry that started the previous evening \u2014 without\n * ever scanning history.\n */\nexport async function GET(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = orgScope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = resolveSingleOrganizationIdOrDeny(orgScope, auth) ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'GET',\n      scope: { container, userId: auth.sub, tenantId, organizationId },\n      query: readSearchParamsRecord(req.url),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const query = readQuery(session.searchParams)\n    const candidate: OverlapSpan = {\n      date: query.date,\n      start: toClock(query.startedAt),\n      end: toClock(query.endedAt),\n      durationMinutes: query.durationMinutes ?? null,\n    }\n    const derived = deriveInterval({\n      start: candidate.start,\n      end: candidate.end,\n      durationMinutes: candidate.durationMinutes,\n    })\n    if (!derived.start || derived.durationMinutes === null || derived.durationMinutes <= 0) {\n      return session.respond(200, EMPTY_OVERLAP_RESULT)\n    }\n\n    const scope = { tenantId, organizationId }\n    const em = (container.resolve('em') as EntityManager).fork()\n    const userId = typeof auth.sub === 'string' ? auth.sub : null\n    // Both questions go to the service. Asking one and inferring the other from a\n    // grant array is how the two could disagree when the read failed.\n    const manageAll = await resolveFeatureAccess(container, userId, [MANAGE_ALL_FEATURE], scope)\n    const manageProjects = await resolveFeatureAccess(container, userId, [MANAGE_PROJECTS_FEATURE], scope)\n    const canManageAll = manageAll.allowed\n\n    const overlapSettings = await resolveOverlapSettings(container, tenantId)\n    const access = await resolveProjectAccess({\n      em,\n      userId,\n      tenantId,\n      organizationId,\n      canManageAll: manageProjects.allowed,\n      userFeatures: manageAll.grantedFeatures,\n      assignmentGraceDays: overlapSettings.assignmentGraceDays,\n    })\n\n    const staffMemberId =\n      canManageAll && query.staffMemberId ? query.staffMemberId : access.staffMemberId\n    if (!staffMemberId) return session.respond(200, EMPTY_OVERLAP_RESULT)\n    const isSelfScope = staffMemberId === access.staffMemberId\n\n    const where = {\n      tenantId,\n      organizationId,\n      staffMemberId,\n      deletedAt: null,\n      date: { $gte: shiftDate(query.date, -1), $lte: shiftDate(query.date, 1) },\n    } as unknown as FilterQuery<StaffTimeEntry>\n    const rows = (await findWithDecryption(\n      em,\n      StaffTimeEntry,\n      where,\n      { orderBy: { startedAt: 'asc' }, limit: MAX_WINDOW_ROWS },\n      scope,\n    )) as unknown as EntryRow[]\n\n    const visible = rows.filter(\n      (row) =>\n        assertProjectAccess(access, row.timeProjectId ?? null) ||\n        (isSelfScope && !row.timeProjectId),\n    )\n    const byId = new Map(visible.map((row) => [row.id, row]))\n    const spans = visible\n      .map((row) => toRowSpan(row))\n      .filter((span): span is OverlapSpan => span !== null)\n\n    const candidateSpan: OverlapSpan = {\n      date: query.date,\n      start: derived.start,\n      end: derived.end,\n      durationMinutes: derived.durationMinutes,\n    }\n    const overlaps = findOverlaps(\n      candidateSpan,\n      spans,\n      query.excludeId ? { excludeId: query.excludeId } : undefined,\n    )\n    const decision = evaluateOverlapPolicies(overlaps, {\n      tenantId,\n      organizationId,\n      candidate: candidateSpan,\n      warningsEnabled: overlapSettings.warningsEnabled,\n      staffMemberId,\n      excludeId: query.excludeId ?? null,\n    })\n    // The item list is unchanged by the policy: this endpoint answers \"what\n    // intersects\", and `decision` answers \"and what should happen\". Collapsing\n    // the list when a tenant turns the warning off would make the two\n    // indistinguishable from \"nothing intersects\" for every other caller.\n    if (!overlaps.length) return session.respond(200, { ...EMPTY_OVERLAP_RESULT, decision })\n\n    const taskIds = new Set<string>()\n    const projectIds = new Set<string>()\n    for (const overlap of overlaps) {\n      const row = overlap.id ? byId.get(overlap.id) : undefined\n      if (row?.taskId) taskIds.add(row.taskId)\n      if (row?.timeProjectId) projectIds.add(row.timeProjectId)\n    }\n    const labels = await loadLabels(em, scope, [...taskIds], [...projectIds])\n\n    const items: OverlapItem[] = []\n    for (const overlap of overlaps) {\n      const row = overlap.id ? byId.get(overlap.id) : undefined\n      if (!row) continue\n      const interval = deriveInterval({\n        start: overlap.entry.start,\n        end: overlap.entry.end,\n        durationMinutes: overlap.entry.durationMinutes,\n      })\n      items.push({\n        id: row.id,\n        staff_member_id: row.staffMemberId,\n        date: overlap.entry.date,\n        started_at: interval.start ?? '',\n        ended_at: interval.end ?? '',\n        duration_minutes: interval.durationMinutes ?? 0,\n        overlap_minutes: overlap.overlapMinutes,\n        crosses_midnight: interval.crossesMidnight,\n        task_id: row.taskId ?? null,\n        task_title: row.taskId ? labels.tasks.get(row.taskId) ?? null : null,\n        time_project_id: row.timeProjectId ?? null,\n        project_name: row.timeProjectId ? labels.projects.get(row.timeProjectId) ?? null : null,\n        notes: row.notes ?? null,\n      })\n    }\n\n    return session.respond(200, { items, total: items.length, decision })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-entries.overlaps GET failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Advisory time entry overlap check',\n  methods: {\n    GET: {\n      summary: 'List time entries overlapping a candidate span',\n      description:\n        'Advisory, read-only lookup used by the time entry form to warn about conflicting entries. Overlapping time is allowed, so the result never blocks a save. Returns an empty list when the supplied time information is insufficient. Checking another staff member requires staff.timesheets.manage_all; without it the request is silently scoped to the caller.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Overlapping entries', schema: overlapsResponseSchema },\n        { status: 400, description: 'Invalid query or missing scope', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,eAAe,uBAAuB;AAE/C,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAG7B,SAAS,gBAAgB,kBAAkB,qBAAqB;AAChE,SAAS,gBAAgB,aAAa,kBAAkB;AACxD;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,uCAAuC,CAAC;AAEhG,MAAM,eAAe;AACrB,MAAM,qBAAqB;AAO3B,MAAM,kBAAkB;AAEjB,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,YAAY,EAAE;AAC5D;AAEA,MAAM,eAAe;AACrB,MAAM,sBAAsB;AAE5B,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,iBAAiB,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,EACnE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC5C,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,MAAM,EAAE,OAAO;AAAA,EACf,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,OAAO;AAAA,EACnB,kBAAkB,EAAE,OAAO;AAAA,EAC3B,iBAAiB,EAAE,OAAO;AAAA,EAC1B,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC5C,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,OAAO,EAAE,MAAM,iBAAiB;AAAA,EAChC,OAAO,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMhB,UAAU,EAAE,KAAK,CAAC,SAAS,QAAQ,OAAO,CAAC;AAC7C,CAAC;AAuBD,MAAM,uBAAuB,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,UAAU,QAAiB;AAE/E,SAAS,IAAI,OAAuB;AAClC,SAAO,OAAO,KAAK,EAAE,SAAS,GAAG,GAAG;AACtC;AAEA,SAAS,gBAAgB,OAAqB;AAC5C,SAAO,GAAG,MAAM,YAAY,CAAC,IAAI,IAAI,MAAM,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,QAAQ,CAAC,CAAC;AACpF;AAEA,SAAS,UAAU,MAAc,MAAsB;AACrD,QAAM,CAAC,MAAM,OAAO,GAAG,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI,MAAM;AACrD,QAAM,UAAU,IAAI,KAAK,KAAK,IAAI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC;AAC9D,SAAO,GAAG,QAAQ,eAAe,CAAC,IAAI,IAAI,QAAQ,YAAY,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,WAAW,CAAC,CAAC;AACnG;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,oBAAoB,KAAK,MAAM,KAAK,CAAC;AACnD,WAAO,QAAQ,MAAM,CAAC,IAAI;AAAA,EAC5B;AACA,MAAI,iBAAiB,QAAQ,CAAC,OAAO,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO,gBAAgB,KAAK;AACzF,SAAO;AACT;AAOA,SAAS,QAAQ,OAA+B;AAC9C,MAAI,iBAAiB,MAAM;AACzB,QAAI,OAAO,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO;AAC1C,WAAO,YAAY,MAAM,SAAS,IAAI,KAAK,MAAM,WAAW,CAAC;AAAA,EAC/D;AACA,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,QAAQ,WAAW,OAAO;AAChC,MAAI,UAAU,KAAM,QAAO,YAAY,KAAK;AAC5C,QAAM,SAAS,IAAI,KAAK,OAAO;AAC/B,MAAI,OAAO,MAAM,OAAO,QAAQ,CAAC,EAAG,QAAO;AAC3C,SAAO,YAAY,OAAO,SAAS,IAAI,KAAK,OAAO,WAAW,CAAC;AACjE;AAEA,SAAS,UAAU,KAAmC;AACpD,QAAM,QAAQ,QAAQ,IAAI,SAAS;AACnC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QACH,IAAI,qBAAqB,QAAQ,CAAC,OAAO,MAAM,IAAI,UAAU,QAAQ,CAAC,IACnE,gBAAgB,IAAI,SAAS,IAC7B,SAAS,YAAY,IAAI,IAAI;AACnC,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR;AAAA,IACA;AAAA,IACA,KAAK,QAAQ,IAAI,OAAO;AAAA,IACxB,iBAAiB,OAAO,IAAI,oBAAoB,WAAW,IAAI,kBAAkB;AAAA,EACnF;AACF;AAEA,SAAS,UAAU,QAAsD;AACvE,QAAM,MAA8B,CAAC;AACrC,aAAW,OAAO,CAAC,QAAQ,aAAa,WAAW,mBAAmB,aAAa,eAAe,GAAG;AACnG,UAAM,QAAQ,OAAO,IAAI,GAAG;AAC5B,QAAI,UAAU,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAG,KAAI,GAAG,IAAI,MAAM,KAAK;AAAA,EACvE;AACA,SAAO,YAAY,MAAM,GAAG;AAC9B;AAEA,eAAe,uBACb,WACA,QACA,OACmB;AACnB,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAI,CAAC,MAAM,mBAAoB,QAAO,CAAC;AACvC,WAAQ,MAAM,KAAK,mBAAmB,QAAQ,KAAK,KAAM,CAAC;AAAA,EAC5D,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAe,uBACb,WACA,UAC2E;AAC3E,MAAI;AACF,UAAM,gBAAgB,UAAU,QAAQ,qBAAqB;AAC7D,UAAM,WAAW,MAAM,yBAAyB,eAAe,EAAE,SAAS,CAAC;AAC3E,WAAO;AAAA,MACL,qBAAqB,SAAS,OAAO;AAAA,MACrC,iBAAiB,SAAS,SAAS;AAAA,IACrC;AAAA,EACF,QAAQ;AAGN,WAAO,EAAE,qBAAqB,MAAM,iBAAiB,KAAK;AAAA,EAC5D;AACF;AAEA,eAAe,WACb,IACA,OACA,SACA,YACwE;AACxE,QAAM,QAAQ,oBAAI,IAAoB;AACtC,QAAM,WAAW,oBAAI,IAAoB;AACzC,MAAI,QAAQ,QAAQ;AAClB,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,QAAQ,GAAG,GAAG,OAAO,WAAW,KAAK;AAAA,MAClD,CAAC;AAAA,MACD;AAAA,IACF;AACA,eAAW,OAAO,KAAM,OAAM,IAAI,IAAI,IAAI,IAAI,KAAK;AAAA,EACrD;AACA,MAAI,WAAW,QAAQ;AACrB,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,GAAG,OAAO,WAAW,KAAK;AAAA,MACrD,CAAC;AAAA,MACD;AAAA,IACF;AACA,eAAW,OAAO,KAAM,UAAS,IAAI,IAAI,IAAI,IAAI,IAAI;AAAA,EACvD;AACA,SAAO,EAAE,OAAO,SAAS;AAC3B;AA2BA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,WAAW,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAC3F,UAAM,WAAW,UAAU,YAAY,KAAK,YAAY;AACxD,UAAM,iBAAiB,kCAAkC,UAAU,IAAI,KAAK;AAC5E,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,KAAK,KAAK,UAAU,eAAe;AAAA,MAC/D,OAAO,uBAAuB,IAAI,GAAG;AAAA,IACvC,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,QAAQ,UAAU,QAAQ,YAAY;AAC5C,UAAM,YAAyB;AAAA,MAC7B,MAAM,MAAM;AAAA,MACZ,OAAO,QAAQ,MAAM,SAAS;AAAA,MAC9B,KAAK,QAAQ,MAAM,OAAO;AAAA,MAC1B,iBAAiB,MAAM,mBAAmB;AAAA,IAC5C;AACA,UAAM,UAAU,eAAe;AAAA,MAC7B,OAAO,UAAU;AAAA,MACjB,KAAK,UAAU;AAAA,MACf,iBAAiB,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,QAAQ,SAAS,QAAQ,oBAAoB,QAAQ,QAAQ,mBAAmB,GAAG;AACtF,aAAO,QAAQ,QAAQ,KAAK,oBAAoB;AAAA,IAClD;AAEA,UAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,SAAS,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AAGzD,UAAM,YAAY,MAAM,qBAAqB,WAAW,QAAQ,CAAC,kBAAkB,GAAG,KAAK;AAC3F,UAAM,iBAAiB,MAAM,qBAAqB,WAAW,QAAQ,CAAC,uBAAuB,GAAG,KAAK;AACrG,UAAM,eAAe,UAAU;AAE/B,UAAM,kBAAkB,MAAM,uBAAuB,WAAW,QAAQ;AACxE,UAAM,SAAS,MAAM,qBAAqB;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,eAAe;AAAA,MAC7B,cAAc,UAAU;AAAA,MACxB,qBAAqB,gBAAgB;AAAA,IACvC,CAAC;AAED,UAAM,gBACJ,gBAAgB,MAAM,gBAAgB,MAAM,gBAAgB,OAAO;AACrE,QAAI,CAAC,cAAe,QAAO,QAAQ,QAAQ,KAAK,oBAAoB;AACpE,UAAM,cAAc,kBAAkB,OAAO;AAE7C,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,MAAM,EAAE,MAAM,UAAU,MAAM,MAAM,EAAE,GAAG,MAAM,UAAU,MAAM,MAAM,CAAC,EAAE;AAAA,IAC1E;AACA,UAAM,OAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,SAAS,EAAE,WAAW,MAAM,GAAG,OAAO,gBAAgB;AAAA,MACxD;AAAA,IACF;AAEA,UAAM,UAAU,KAAK;AAAA,MACnB,CAAC,QACC,oBAAoB,QAAQ,IAAI,iBAAiB,IAAI,KACpD,eAAe,CAAC,IAAI;AAAA,IACzB;AACA,UAAM,OAAO,IAAI,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AACxD,UAAM,QAAQ,QACX,IAAI,CAAC,QAAQ,UAAU,GAAG,CAAC,EAC3B,OAAO,CAAC,SAA8B,SAAS,IAAI;AAEtD,UAAM,gBAA6B;AAAA,MACjC,MAAM,MAAM;AAAA,MACZ,OAAO,QAAQ;AAAA,MACf,KAAK,QAAQ;AAAA,MACb,iBAAiB,QAAQ;AAAA,IAC3B;AACA,UAAM,WAAW;AAAA,MACf;AAAA,MACA;AAAA,MACA,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI;AAAA,IACrD;AACA,UAAM,WAAW,wBAAwB,UAAU;AAAA,MACjD;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,iBAAiB,gBAAgB;AAAA,MACjC;AAAA,MACA,WAAW,MAAM,aAAa;AAAA,IAChC,CAAC;AAKD,QAAI,CAAC,SAAS,OAAQ,QAAO,QAAQ,QAAQ,KAAK,EAAE,GAAG,sBAAsB,SAAS,CAAC;AAEvF,UAAM,UAAU,oBAAI,IAAY;AAChC,UAAM,aAAa,oBAAI,IAAY;AACnC,eAAW,WAAW,UAAU;AAC9B,YAAM,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE,IAAI;AAChD,UAAI,KAAK,OAAQ,SAAQ,IAAI,IAAI,MAAM;AACvC,UAAI,KAAK,cAAe,YAAW,IAAI,IAAI,aAAa;AAAA,IAC1D;AACA,UAAM,SAAS,MAAM,WAAW,IAAI,OAAO,CAAC,GAAG,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC;AAExE,UAAM,QAAuB,CAAC;AAC9B,eAAW,WAAW,UAAU;AAC9B,YAAM,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE,IAAI;AAChD,UAAI,CAAC,IAAK;AACV,YAAM,WAAW,eAAe;AAAA,QAC9B,OAAO,QAAQ,MAAM;AAAA,QACrB,KAAK,QAAQ,MAAM;AAAA,QACnB,iBAAiB,QAAQ,MAAM;AAAA,MACjC,CAAC;AACD,YAAM,KAAK;AAAA,QACT,IAAI,IAAI;AAAA,QACR,iBAAiB,IAAI;AAAA,QACrB,MAAM,QAAQ,MAAM;AAAA,QACpB,YAAY,SAAS,SAAS;AAAA,QAC9B,UAAU,SAAS,OAAO;AAAA,QAC1B,kBAAkB,SAAS,mBAAmB;AAAA,QAC9C,iBAAiB,QAAQ;AAAA,QACzB,kBAAkB,SAAS;AAAA,QAC3B,SAAS,IAAI,UAAU;AAAA,QACvB,YAAY,IAAI,SAAS,OAAO,MAAM,IAAI,IAAI,MAAM,KAAK,OAAO;AAAA,QAChE,iBAAiB,IAAI,iBAAiB;AAAA,QACtC,cAAc,IAAI,gBAAgB,OAAO,SAAS,IAAI,IAAI,aAAa,KAAK,OAAO;AAAA,QACnF,OAAO,IAAI,SAAS;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,QAAQ,QAAQ,KAAK,EAAE,OAAO,OAAO,MAAM,QAAQ,SAAS,CAAC;AAAA,EACtE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,qDAAqD,EAAE,IAAI,CAAC;AACzE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,uBAAuB;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACtG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/timesheets/time-entries/start-timer/route.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/operationMetadata";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
@@ -27,7 +28,7 @@ async function buildContext(req) {
     container,
     auth,
     organizationScope: scope,
-    selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+    selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,
     organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
     request: req
   };
@@ -35,7 +36,7 @@ async function buildContext(req) {
     ctx,
     translate,
     tenantId: scope?.tenantId ?? auth.tenantId ?? null,
-    organizationId: scope?.selectedId ?? auth.orgId ?? null
+    organizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null
   };
 }
 async function POST(req) {

package/dist/modules/staff/api/timesheets/time-entries/start-timer/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/staff/api/timesheets/time-entries/start-timer/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { staffTimeEntryStartTimerSchema, type StaffTimeEntryStartTimerInput } from '../../../../data/validators'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { STAFF_TIME_TRACKING_RESOURCE_KINDS } from '../../../guards'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff')\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nasync function buildContext(\n  req: Request\n): Promise<{\n  ctx: CommandRuntimeContext\n  translate: (key: string, fallback?: string) => string\n  tenantId: string | null\n  organizationId: string | null\n}> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n  return {\n    ctx,\n    translate,\n    tenantId: scope?.tenantId ?? auth.tenantId ?? null,\n    organizationId: scope?.selectedId ?? auth.orgId ?? null,\n  }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx, translate, tenantId, organizationId } = await buildContext(req)\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container: ctx.container, userId: ctx.auth?.sub, tenantId, organizationId },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const input = parseScopedCommandInput(staffTimeEntryStartTimerSchema, session.body, ctx, translate)\n    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)\n    const { result, logEntry } = await commandBus.execute<StaffTimeEntryStartTimerInput, { timeEntryId: string }>(\n      'staff.timesheets.time_entries.start_timer',\n      { input, ctx },\n    )\n    const response = await session.respond(201, { ok: true, id: result?.timeEntryId ?? null })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n          resourceId: logEntry.resourceId ?? result?.timeEntryId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.start-timer failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.timerStart', 'Failed to start timer.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Start a timesheet timer',\n  methods: {\n    POST: {\n      summary: 'Start a timesheet timer',\n      description:\n        'Atomically creates a timer-sourced time entry and starts it (sets startedAt and creates the initial work segment) in a single transaction, so a partial failure cannot leave an orphaned, unstarted entry. An optional `taskId` is validated and stored by the same write, so starting a timer from a board card or the task drawer takes one request instead of a start followed by a link that can fail; when only `taskId` is sent, the project follows from the task.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeEntryStartTimerSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Timer started',\n          schema: z.object({ ok: z.literal(true), id: z.string().uuid().nullable() }),\n        },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        {\n          status: 409,\n          description: 'Another timer is already running for this staff member',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 422,\n          description:\n            'Referenced time project or task not found, out of scope, or the task belongs to another project',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,kCAAkC;AAE3C,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AAExC,SAAS,sCAA0E;AACnF,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AACnD,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AAEzC,MAAM,SAAS,aAAa,OAAO;AAE5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAe,aACb,KAMC;AACD,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AACzG,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,IAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,UAAU,OAAO,YAAY,KAAK,YAAY;AAAA,IAC9C,gBAAgB,OAAO,cAAc,KAAK,SAAS;AAAA,EACrD;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,KAAK,WAAW,UAAU,eAAe,IAAI,MAAM,aAAa,GAAG;AAC3E,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,IAAI,WAAW,QAAQ,IAAI,MAAM,KAAK,UAAU,eAAe;AAAA,MACnF,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,QAAQ,wBAAwB,gCAAgC,QAAQ,MAAM,KAAK,SAAS;AAClG,UAAM,aAAc,IAAI,UAAU,QAAQ,YAAY;AACtD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,MAC5C;AAAA,MACA,EAAE,OAAO,IAAI;AAAA,IACf;AACA,UAAM,WAAW,MAAM,QAAQ,QAAQ,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,eAAe,KAAK,CAAC;AACzF,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB,mCAAmC;AAAA,UAC1E,YAAY,SAAS,cAAc,QAAQ,eAAe;AAAA,UAC1D,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,oDAAoD,EAAE,IAAI,CAAC;AACxE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,sCAAsC,wBAAwB,EAAE;AAAA,MACnF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,QAC5E;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aACE;AAAA,UACF,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { staffTimeEntryStartTimerSchema, type StaffTimeEntryStartTimerInput } from '../../../../data/validators'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { STAFF_TIME_TRACKING_RESOURCE_KINDS } from '../../../guards'\nimport { runTimesheetInterceptors } from '../../_shared/withTimesheetInterceptors'\n\nconst logger = createLogger('staff')\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.manage_own'] },\n}\n\nasync function buildContext(\n  req: Request\n): Promise<{\n  ctx: CommandRuntimeContext\n  translate: (key: string, fallback?: string) => string\n  tenantId: string | null\n  organizationId: string | null\n}> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth) throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n  return {\n    ctx,\n    translate,\n    tenantId: scope?.tenantId ?? auth.tenantId ?? null,\n    organizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,\n  }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx, translate, tenantId, organizationId } = await buildContext(req)\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container: ctx.container, userId: ctx.auth?.sub, tenantId, organizationId },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const input = parseScopedCommandInput(staffTimeEntryStartTimerSchema, session.body, ctx, translate)\n    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)\n    const { result, logEntry } = await commandBus.execute<StaffTimeEntryStartTimerInput, { timeEntryId: string }>(\n      'staff.timesheets.time_entries.start_timer',\n      { input, ctx },\n    )\n    const response = await session.respond(201, { ok: true, id: result?.timeEntryId ?? null })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? STAFF_TIME_TRACKING_RESOURCE_KINDS.timeEntry,\n          resourceId: logEntry.resourceId ?? result?.timeEntryId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('staff.timesheets.time-entries.start-timer failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.timesheets.errors.timerStart', 'Failed to start timer.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Start a timesheet timer',\n  methods: {\n    POST: {\n      summary: 'Start a timesheet timer',\n      description:\n        'Atomically creates a timer-sourced time entry and starts it (sets startedAt and creates the initial work segment) in a single transaction, so a partial failure cannot leave an orphaned, unstarted entry. An optional `taskId` is validated and stored by the same write, so starting a timer from a board card or the task drawer takes one request instead of a start followed by a link that can fail; when only `taskId` is sent, the project follows from the task.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeEntryStartTimerSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Timer started',\n          schema: z.object({ ok: z.literal(true), id: z.string().uuid().nullable() }),\n        },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        {\n          status: 409,\n          description: 'Another timer is already running for this staff member',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 422,\n          description:\n            'Referenced time project or task not found, out of scope, or the task belongs to another project',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,kCAAkC;AAE3C,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AAExC,SAAS,sCAA0E;AACnF,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AACnD,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AAEzC,MAAM,SAAS,aAAa,OAAO;AAE5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC9E;AAEA,eAAe,aACb,KAMC;AACD,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AACzG,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,kCAAkC,OAAO,IAAI,KAAK;AAAA,IAC1E,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,UAAU,OAAO,YAAY,KAAK,YAAY;AAAA,IAC9C,gBAAgB,kCAAkC,OAAO,IAAI,KAAK;AAAA,EACpE;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,KAAK,WAAW,UAAU,eAAe,IAAI,MAAM,aAAa,GAAG;AAC3E,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,IAAI,WAAW,QAAQ,IAAI,MAAM,KAAK,UAAU,eAAe;AAAA,MACnF,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,QAAQ,wBAAwB,gCAAgC,QAAQ,MAAM,KAAK,SAAS;AAClG,UAAM,aAAc,IAAI,UAAU,QAAQ,YAAY;AACtD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,MAC5C;AAAA,MACA,EAAE,OAAO,IAAI;AAAA,IACf;AACA,UAAM,WAAW,MAAM,QAAQ,QAAQ,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,eAAe,KAAK,CAAC;AACzF,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB,mCAAmC;AAAA,UAC1E,YAAY,SAAS,cAAc,QAAQ,eAAe;AAAA,UAC1D,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,oDAAoD,EAAE,IAAI,CAAC;AACxE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,sCAAsC,wBAAwB,EAAE;AAAA,MACnF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,QAC5E;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aACE;AAAA,UACF,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/timesheets/time-projects/[id]/change-currency/route.js

@@ -4,6 +4,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CrudHttpError, forbidden, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
@@ -44,7 +45,7 @@ async function POST(req) {
     }
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
     const tenantId = scope?.tenantId ?? auth.tenantId ?? null;
-    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null;
     if (!tenantId || !organizationId) {
       throw new CrudHttpError(400, {
         error: translate("staff.errors.missingScope", "Missing tenant or organization scope.")
@@ -93,7 +94,7 @@ async function POST(req) {
       container,
       auth,
       organizationScope: scope,
-      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+      selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,
       organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
       request: req
     };

package/dist/modules/staff/api/timesheets/time-projects/[id]/change-currency/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/staff/api/timesheets/time-projects/%5Bid%5D/change-currency/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveFeatureAccess } from '../../../../../lib/time-tracking/featureAccess'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError, forbidden, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { emitStaffEvent } from '../../../../../events'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { staffTimeProjectChangeCurrencySchema } from '../../../../../data/validators'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { STAFF_TIME_TRACKING_RESOURCE_KINDS } from '../../../../guards'\nimport { runTimesheetInterceptors } from '../../../_shared/withTimesheetInterceptors'\nimport {\n  staffTimeProjectChangeCurrencyCommandId,\n  type StaffTimeProjectChangeCurrencyCommandInput,\n  type StaffTimeProjectChangeCurrencyResult,\n} from '../../../../../commands/timesheets-projects'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-projects/change-currency' })\n\nconst MANAGE_FEATURE = 'staff.timesheets.projects.manage'\nconst RESOURCE_KIND = STAFF_TIME_TRACKING_RESOURCE_KINDS.timeProject\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: [MANAGE_FEATURE] },\n}\n\nfunction extractProjectIdFromUrl(request?: Request): string | null {\n  if (!request?.url) return null\n  try {\n    const url = new URL(request.url)\n    const match = url.pathname.match(/\\/time-projects\\/([^/]+)\\/change-currency/)\n    return match?.[1] ?? null\n  } catch {\n    return null\n  }\n}\n\n/**\n * D-3: relabels a project's currency without converting a single historical\n * amount. The `acknowledged: true` literal in the body is deliberate friction \u2014\n * the client must have shown the non-conversion warning \u2014 and the request is\n * refused with `409 project_has_locked_entries` while any of the project's\n * entries is frozen inside a closed report.\n */\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const timeProjectId = extractProjectIdFromUrl(req)\n    if (!timeProjectId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.timesheets.errors.projectRequired', 'Time project id is required.'),\n      })\n    }\n\n    const actorId = auth.sub ?? ''\n    // One lookup through the module's single RBAC authority, answering both\n    // questions this route asks: may the caller manage projects, and what grant\n    // list do the interceptors and the mutation-guard registry gate on. The\n    // decision is checked unconditionally and fails closed; the list is plumbing\n    // and is empty \u2014 never absent \u2014 when RBAC could not produce it.\n    const access = await resolveFeatureAccess(container, actorId, [MANAGE_FEATURE], { tenantId, organizationId })\n    if (!access.allowed) {\n      throw forbidden(translate('staff.errors.forbidden', 'Forbidden'))\n    }\n    const grantedFeatures = access.grantedFeatures\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: actorId, tenantId, organizationId, userFeatures: grantedFeatures },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = staffTimeProjectChangeCurrencySchema.parse(session.body)\n\n    const guardResult = await runRouteMutationGuards({\n      container,\n      req,\n      auth: {\n        userId: actorId,\n        tenantId,\n        organizationId,\n        userFeatures: grantedFeatures,\n      },\n      input: {\n        resourceKind: RESOURCE_KIND,\n        resourceId: timeProjectId,\n        operation: 'update',\n        mutationPayload: parsed,\n      },\n    })\n    if (!guardResult.ok) return guardResult.response\n\n    const effective = guardResult.modifiedPayload\n      ? staffTimeProjectChangeCurrencySchema.parse({ ...parsed, ...guardResult.modifiedPayload })\n      : parsed\n\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<\n      StaffTimeProjectChangeCurrencyCommandInput,\n      StaffTimeProjectChangeCurrencyResult\n    >(staffTimeProjectChangeCurrencyCommandId, {\n      input: { ...effective, id: timeProjectId },\n      ctx,\n    })\n\n    await guardResult.runAfterSuccess()\n\n    void emitStaffEvent('staff.timesheets.time_project.currency_changed', {\n      id: result?.timeProjectId ?? timeProjectId,\n      tenantId,\n      organizationId,\n      currencyCode: result?.currencyCode ?? effective.currencyCode,\n      previousCurrencyCode: result?.previousCurrencyCode ?? null,\n      converted: false,\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit time_project.currency_changed failed', { err })\n    })\n\n    const response = await session.respond(200, {\n      id: result?.timeProjectId ?? timeProjectId,\n      currencyCode: result?.currencyCode ?? effective.currencyCode,\n      previousCurrencyCode: result?.previousCurrencyCode ?? null,\n      converted: false,\n    })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? RESOURCE_KIND,\n          resourceId: logEntry.resourceId ?? timeProjectId,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-projects.change-currency failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nconst blockingReportSchema = z.object({\n  id: z.string().uuid(),\n  reference: z.string().nullable(),\n  title: z.string().nullable(),\n})\n\nconst changeCurrencyResponseSchema = z.object({\n  id: z.string().uuid(),\n  currencyCode: z.string(),\n  previousCurrencyCode: z.string().nullable(),\n  converted: z.literal(false),\n})\n\nconst lockedConflictSchema = z.object({\n  code: z.literal('project_has_locked_entries'),\n  error: z.string(),\n  lockedEntryCount: z.number().int(),\n  lockedReports: z.array(blockingReportSchema),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Change a time project currency',\n  methods: {\n    POST: {\n      summary: 'Change a time project currency',\n      description:\n        'Relabels the project currency without converting any historical amount. Requires an explicit `acknowledged: true` and is refused while any of the project entries is locked into a closed report.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeProjectChangeCurrencySchema,\n      },\n      responses: [\n        { status: 200, description: 'Currency relabelled', schema: changeCurrencyResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid body, or the change was not acknowledged' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.projects.manage' },\n        { status: 404, description: 'Time project not found' },\n        {\n          status: 409,\n          description: 'Project has entries locked into a closed report',\n          schema: lockedConflictSchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,eAAe,WAAW,uBAAuB;AAC1D,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,kCAAkC;AAE3C,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAE/B,SAAS,4CAA4C;AACrD,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,OAGK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,+CAA+C,CAAC;AAExG,MAAM,iBAAiB;AACvB,MAAM,gBAAgB,mCAAmC;AAElD,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,cAAc,EAAE;AAC/D;AAEA,SAAS,wBAAwB,SAAkC;AACjE,MAAI,CAAC,SAAS,IAAK,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,IAAI,SAAS,MAAM,2CAA2C;AAC5E,WAAO,QAAQ,CAAC,KAAK;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AASA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,gBAAgB,wBAAwB,GAAG;AACjD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,2CAA2C,8BAA8B;AAAA,MAC5F,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,KAAK,OAAO;AAM5B,UAAM,SAAS,MAAM,qBAAqB,WAAW,SAAS,CAAC,cAAc,GAAG,EAAE,UAAU,eAAe,CAAC;AAC5G,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,UAAU,UAAU,0BAA0B,WAAW,CAAC;AAAA,IAClE;AACA,UAAM,kBAAkB,OAAO;AAE/B,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,SAAS,UAAU,gBAAgB,cAAc,gBAAgB;AAAA,MAC7F,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,qCAAqC,MAAM,QAAQ,IAAI;AAEtE,UAAM,cAAc,MAAM,uBAAuB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,cAAc;AAAA,MAChB;AAAA,MACA,OAAO;AAAA,QACL,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,GAAI,QAAO,YAAY;AAExC,UAAM,YAAY,YAAY,kBAC1B,qCAAqC,MAAM,EAAE,GAAG,QAAQ,GAAG,YAAY,gBAAgB,CAAC,IACxF;AAEJ,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,OAAO,cAAc,KAAK,SAAS;AAAA,MAC3D,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAEA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAG5C,yCAAyC;AAAA,MACzC,OAAO,EAAE,GAAG,WAAW,IAAI,cAAc;AAAA,MACzC;AAAA,IACF,CAAC;AAED,UAAM,YAAY,gBAAgB;AAElC,SAAK,eAAe,kDAAkD;AAAA,MACpE,IAAI,QAAQ,iBAAiB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,cAAc,QAAQ,gBAAgB,UAAU;AAAA,MAChD,sBAAsB,QAAQ,wBAAwB;AAAA,MACtD,WAAW;AAAA,IACb,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,8DAA8D,EAAE,IAAI,CAAC;AAAA,IACpF,CAAC;AAED,UAAM,WAAW,MAAM,QAAQ,QAAQ,KAAK;AAAA,MAC1C,IAAI,QAAQ,iBAAiB;AAAA,MAC7B,cAAc,QAAQ,gBAAgB,UAAU;AAAA,MAChD,sBAAsB,QAAQ,wBAAwB;AAAA,MACtD,WAAW;AAAA,IACb,CAAC;AACD,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc;AAAA,UACnC,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,yDAAyD,EAAE,IAAI,CAAC;AAC7E,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO;AAAA,EACvB,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,QAAQ,KAAK;AAC5B,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,4BAA4B;AAAA,EAC5C,OAAO,EAAE,OAAO;AAAA,EAChB,kBAAkB,EAAE,OAAO,EAAE,IAAI;AAAA,EACjC,eAAe,EAAE,MAAM,oBAAoB;AAC7C,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,6BAA6B;AAAA,MAC1F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mDAAmD;AAAA,QAC/E,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveFeatureAccess } from '../../../../../lib/time-tracking/featureAccess'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CrudHttpError, forbidden, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { emitStaffEvent } from '../../../../../events'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { staffTimeProjectChangeCurrencySchema } from '../../../../../data/validators'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { STAFF_TIME_TRACKING_RESOURCE_KINDS } from '../../../../guards'\nimport { runTimesheetInterceptors } from '../../../_shared/withTimesheetInterceptors'\nimport {\n  staffTimeProjectChangeCurrencyCommandId,\n  type StaffTimeProjectChangeCurrencyCommandInput,\n  type StaffTimeProjectChangeCurrencyResult,\n} from '../../../../../commands/timesheets-projects'\n\nconst logger = createLogger('staff').child({ component: 'api/timesheets/time-projects/change-currency' })\n\nconst MANAGE_FEATURE = 'staff.timesheets.projects.manage'\nconst RESOURCE_KIND = STAFF_TIME_TRACKING_RESOURCE_KINDS.timeProject\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: [MANAGE_FEATURE] },\n}\n\nfunction extractProjectIdFromUrl(request?: Request): string | null {\n  if (!request?.url) return null\n  try {\n    const url = new URL(request.url)\n    const match = url.pathname.match(/\\/time-projects\\/([^/]+)\\/change-currency/)\n    return match?.[1] ?? null\n  } catch {\n    return null\n  }\n}\n\n/**\n * D-3: relabels a project's currency without converting a single historical\n * amount. The `acknowledged: true` literal in the body is deliberate friction \u2014\n * the client must have shown the non-conversion warning \u2014 and the request is\n * refused with `409 project_has_locked_entries` while any of the project's\n * entries is frozen inside a closed report.\n */\nexport async function POST(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const { translate } = await resolveTranslations()\n    if (!auth) {\n      throw new CrudHttpError(401, { error: translate('staff.errors.unauthorized', 'Unauthorized') })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const tenantId = scope?.tenantId ?? auth.tenantId ?? null\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n    if (!tenantId || !organizationId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.errors.missingScope', 'Missing tenant or organization scope.'),\n      })\n    }\n\n    const timeProjectId = extractProjectIdFromUrl(req)\n    if (!timeProjectId) {\n      throw new CrudHttpError(400, {\n        error: translate('staff.timesheets.errors.projectRequired', 'Time project id is required.'),\n      })\n    }\n\n    const actorId = auth.sub ?? ''\n    // One lookup through the module's single RBAC authority, answering both\n    // questions this route asks: may the caller manage projects, and what grant\n    // list do the interceptors and the mutation-guard registry gate on. The\n    // decision is checked unconditionally and fails closed; the list is plumbing\n    // and is empty \u2014 never absent \u2014 when RBAC could not produce it.\n    const access = await resolveFeatureAccess(container, actorId, [MANAGE_FEATURE], { tenantId, organizationId })\n    if (!access.allowed) {\n      throw forbidden(translate('staff.errors.forbidden', 'Forbidden'))\n    }\n    const grantedFeatures = access.grantedFeatures\n\n    const interceptors = await runTimesheetInterceptors({\n      request: req,\n      method: 'POST',\n      scope: { container, userId: actorId, tenantId, organizationId, userFeatures: grantedFeatures },\n      body: await readJsonSafe<Record<string, unknown>>(req, {}),\n    })\n    if (!interceptors.ok) return interceptors.response\n    const { session } = interceptors\n\n    const parsed = staffTimeProjectChangeCurrencySchema.parse(session.body)\n\n    const guardResult = await runRouteMutationGuards({\n      container,\n      req,\n      auth: {\n        userId: actorId,\n        tenantId,\n        organizationId,\n        userFeatures: grantedFeatures,\n      },\n      input: {\n        resourceKind: RESOURCE_KIND,\n        resourceId: timeProjectId,\n        operation: 'update',\n        mutationPayload: parsed,\n      },\n    })\n    if (!guardResult.ok) return guardResult.response\n\n    const effective = guardResult.modifiedPayload\n      ? staffTimeProjectChangeCurrencySchema.parse({ ...parsed, ...guardResult.modifiedPayload })\n      : parsed\n\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    }\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<\n      StaffTimeProjectChangeCurrencyCommandInput,\n      StaffTimeProjectChangeCurrencyResult\n    >(staffTimeProjectChangeCurrencyCommandId, {\n      input: { ...effective, id: timeProjectId },\n      ctx,\n    })\n\n    await guardResult.runAfterSuccess()\n\n    void emitStaffEvent('staff.timesheets.time_project.currency_changed', {\n      id: result?.timeProjectId ?? timeProjectId,\n      tenantId,\n      organizationId,\n      currencyCode: result?.currencyCode ?? effective.currencyCode,\n      previousCurrencyCode: result?.previousCurrencyCode ?? null,\n      converted: false,\n    }, { persistent: true }).catch((err) => {\n      logger.error('staff.timesheets emit time_project.currency_changed failed', { err })\n    })\n\n    const response = await session.respond(200, {\n      id: result?.timeProjectId ?? timeProjectId,\n      currencyCode: result?.currencyCode ?? effective.currencyCode,\n      previousCurrencyCode: result?.previousCurrencyCode ?? null,\n      converted: false,\n    })\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? RESOURCE_KIND,\n          resourceId: logEntry.resourceId ?? timeProjectId,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('staff.errors.invalid_request', 'Invalid request'), details: err.issues },\n        { status: 400 },\n      )\n    }\n    logger.error('staff.timesheets.time-projects.change-currency failed', { err })\n    return NextResponse.json(\n      { error: translate('staff.errors.internal', 'Internal server error') },\n      { status: 500 },\n    )\n  }\n}\n\nconst blockingReportSchema = z.object({\n  id: z.string().uuid(),\n  reference: z.string().nullable(),\n  title: z.string().nullable(),\n})\n\nconst changeCurrencyResponseSchema = z.object({\n  id: z.string().uuid(),\n  currencyCode: z.string(),\n  previousCurrencyCode: z.string().nullable(),\n  converted: z.literal(false),\n})\n\nconst lockedConflictSchema = z.object({\n  code: z.literal('project_has_locked_entries'),\n  error: z.string(),\n  lockedEntryCount: z.number().int(),\n  lockedReports: z.array(blockingReportSchema),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Staff',\n  summary: 'Change a time project currency',\n  methods: {\n    POST: {\n      summary: 'Change a time project currency',\n      description:\n        'Relabels the project currency without converting any historical amount. Requires an explicit `acknowledged: true` and is refused while any of the project entries is locked into a closed report.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: staffTimeProjectChangeCurrencySchema,\n      },\n      responses: [\n        { status: 200, description: 'Currency relabelled', schema: changeCurrencyResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid body, or the change was not acknowledged' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing staff.timesheets.projects.manage' },\n        { status: 404, description: 'Time project not found' },\n        {\n          status: 409,\n          description: 'Project has entries locked into a closed report',\n          schema: lockedConflictSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,eAAe,WAAW,uBAAuB;AAC1D,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,kCAAkC;AAE3C,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAE/B,SAAS,4CAA4C;AACrD,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,OAGK;AAEP,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,+CAA+C,CAAC;AAExG,MAAM,iBAAiB;AACvB,MAAM,gBAAgB,mCAAmC;AAElD,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,cAAc,EAAE;AAC/D;AAEA,SAAS,wBAAwB,SAAkC;AACjE,MAAI,CAAC,SAAS,IAAK,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,IAAI,SAAS,MAAM,2CAA2C;AAC5E,WAAO,QAAQ,CAAC,KAAK;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AASA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,6BAA6B,cAAc,EAAE,CAAC;AAAA,IAChG;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY;AACrD,UAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,uCAAuC;AAAA,MACvF,CAAC;AAAA,IACH;AAEA,UAAM,gBAAgB,wBAAwB,GAAG;AACjD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,2CAA2C,8BAA8B;AAAA,MAC5F,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,KAAK,OAAO;AAM5B,UAAM,SAAS,MAAM,qBAAqB,WAAW,SAAS,CAAC,cAAc,GAAG,EAAE,UAAU,eAAe,CAAC;AAC5G,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,UAAU,UAAU,0BAA0B,WAAW,CAAC;AAAA,IAClE;AACA,UAAM,kBAAkB,OAAO;AAE/B,UAAM,eAAe,MAAM,yBAAyB;AAAA,MAClD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,EAAE,WAAW,QAAQ,SAAS,UAAU,gBAAgB,cAAc,gBAAgB;AAAA,MAC7F,MAAM,MAAM,aAAsC,KAAK,CAAC,CAAC;AAAA,IAC3D,CAAC;AACD,QAAI,CAAC,aAAa,GAAI,QAAO,aAAa;AAC1C,UAAM,EAAE,QAAQ,IAAI;AAEpB,UAAM,SAAS,qCAAqC,MAAM,QAAQ,IAAI;AAEtE,UAAM,cAAc,MAAM,uBAAuB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,cAAc;AAAA,MAChB;AAAA,MACA,OAAO;AAAA,QACL,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,GAAI,QAAO,YAAY;AAExC,UAAM,YAAY,YAAY,kBAC1B,qCAAqC,MAAM,EAAE,GAAG,QAAQ,GAAG,YAAY,gBAAgB,CAAC,IACxF;AAEJ,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB,kCAAkC,OAAO,IAAI,KAAK;AAAA,MAC1E,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAEA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAG5C,yCAAyC;AAAA,MACzC,OAAO,EAAE,GAAG,WAAW,IAAI,cAAc;AAAA,MACzC;AAAA,IACF,CAAC;AAED,UAAM,YAAY,gBAAgB;AAElC,SAAK,eAAe,kDAAkD;AAAA,MACpE,IAAI,QAAQ,iBAAiB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,cAAc,QAAQ,gBAAgB,UAAU;AAAA,MAChD,sBAAsB,QAAQ,wBAAwB;AAAA,MACtD,WAAW;AAAA,IACb,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACtC,aAAO,MAAM,8DAA8D,EAAE,IAAI,CAAC;AAAA,IACpF,CAAC;AAED,UAAM,WAAW,MAAM,QAAQ,QAAQ,KAAK;AAAA,MAC1C,IAAI,QAAQ,iBAAiB;AAAA,MAC7B,cAAc,QAAQ,gBAAgB,UAAU;AAAA,MAChD,sBAAsB,QAAQ,wBAAwB;AAAA,MACtD,WAAW;AAAA,IACb,CAAC;AACD,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc;AAAA,UACnC,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,gCAAgC,iBAAiB,GAAG,SAAS,IAAI,OAAO;AAAA,QAC3F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,yDAAyD,EAAE,IAAI,CAAC;AAC7E,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yBAAyB,uBAAuB,EAAE;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAED,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO;AAAA,EACvB,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,QAAQ,KAAK;AAC5B,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,4BAA4B;AAAA,EAC5C,OAAO,EAAE,OAAO;AAAA,EAChB,kBAAkB,EAAE,OAAO,EAAE,IAAI;AAAA,EACjC,eAAe,EAAE,MAAM,oBAAoB;AAC7C,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,6BAA6B;AAAA,MAC1F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mDAAmD;AAAA,QAC/E,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/staff/api/timesheets/time-projects/route.js

@@ -9,6 +9,7 @@ import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find"
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { isIdsParamProvided, parseIdsParam } from "@open-mercato/shared/lib/crud/ids";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 import { StaffTimeProject, StaffTimeProjectMember, StaffTeamMember } from "../../../data/entities.js";
@@ -356,7 +357,7 @@ async function resolveProjectAccessDenial(req) {
     if (!auth) return null;
     const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
     const tenantId = orgScope?.tenantId ?? auth.tenantId ?? null;
-    const organizationId = orgScope?.selectedId ?? auth.orgId ?? null;
+    const organizationId = resolveSingleOrganizationIdOrDeny(orgScope, auth) ?? null;
     if (!tenantId || !organizationId) return null;
     const access = await resolveRequestProjectAccess(
       req,