@open-mercato/documents 0.6.8-develop.7016.1.4ed7b1e49d

package/dist/modules/documents/commands/links.js

@@ -0,0 +1,410 @@
+import { LockMode } from "@mikro-orm/core";
+import { z } from "zod";
+import { registerCommand } from "@open-mercato/shared/lib/commands";
+import { extractUndoPayload } from "@open-mercato/shared/lib/commands/undo";
+import { withAtomicFlush } from "@open-mercato/shared/lib/commands/flush";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import {
+  assertOptimisticLock,
+  buildOptimisticLockConflictBody,
+  enforceCommandOptimisticLockWithGuards
+} from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { DocumentEntityLink } from "../data/entities.js";
+import { documentEntityLinkCreateSchema } from "../data/validators.js";
+import { DOCUMENTS_ENTITY_IDS } from "../lib/constants.js";
+import {
+  assertDocumentEntityLinkCapacity,
+  buildDocumentEntityLinkTargetWhere,
+  createDocumentEntityLinkData,
+  getDocumentEntityLinkEntityId,
+  getDocumentEntityLinkType
+} from "../lib/entityLinks.js";
+import { getEntityRegistryEntry } from "../lib/entityRegistry.js";
+import { isDocumentEntityRegistryModuleEnabled } from "../lib/entityRegistryAvailability.server.js";
+import {
+  verifyEntityRegistrySelection
+} from "../lib/entityRegistry.server.js";
+import { lockDocumentAggregateRoot } from "./aggregate.js";
+import { bufferLinkMutationSideEffects } from "./side-effects.js";
+import {
+  assertCommandFeature,
+  assertDocumentCommandCanEdit,
+  resolveDocumentsCommandActor,
+  resolveDocumentsCommandEntityManager,
+  resolveDocumentsCommandFeatures,
+  resolveDocumentsCommandScope
+} from "./shared.js";
+import { nextDocumentVersion } from "./mutation-helpers.js";
+const scopedSchema = z.object({
+  tenantId: z.string().uuid(),
+  organizationId: z.string().uuid()
+});
+const linkCreateCommandSchema = scopedSchema.extend({
+  linkId: z.string().uuid(),
+  documentId: z.string().uuid(),
+  link: documentEntityLinkCreateSchema
+});
+const linkDeleteCommandSchema = scopedSchema.extend({
+  documentId: z.string().uuid(),
+  linkId: z.string().uuid()
+});
+function buildCanonicalLinkInput(input, verified) {
+  return {
+    ...input,
+    link: {
+      ...input.link,
+      label: verified.label,
+      href: verified.href
+    }
+  };
+}
+function assertVerifiedLinkTargetMatchesRow(verified, link) {
+  if (verified.id !== getDocumentEntityLinkEntityId(link)) {
+    throw new CrudHttpError(409, { error: "Record changed by another user" });
+  }
+}
+function captureLinkState(link, fallbackId) {
+  return {
+    id: link?.id ?? fallbackId,
+    existed: link !== null,
+    deletedAt: link?.deletedAt?.toISOString() ?? null,
+    updatedAt: link?.updatedAt?.toISOString() ?? null
+  };
+}
+function assertLinkStateUnchanged(link, expected) {
+  if (!expected.updatedAt) throw new CrudHttpError(409, { error: "Record changed by another user" });
+  assertOptimisticLock({
+    resourceKind: DOCUMENTS_ENTITY_IDS.documentEntityLink,
+    resourceId: link.id,
+    current: link.updatedAt,
+    expected: expected.updatedAt,
+    envValue: "all"
+  });
+  const deletedAt = link.deletedAt?.toISOString() ?? null;
+  if (deletedAt !== expected.deletedAt) {
+    throw new CrudHttpError(409, buildOptimisticLockConflictBody(
+      link.updatedAt.toISOString(),
+      expected.updatedAt
+    ));
+  }
+}
+async function authorizeLinkCreateUndo(ctx, em, input, entityType) {
+  const scope = resolveDocumentsCommandScope(ctx, input);
+  const features = await assertDocumentCommandCanEdit(ctx, em, input.documentId, scope);
+  const registryEntry = getEntityRegistryEntry(entityType);
+  if (!registryEntry) throw new CrudHttpError(400, { error: "documents.links.invalidEntityType" });
+  if (!isDocumentEntityRegistryModuleEnabled(registryEntry)) {
+    throw new CrudHttpError(403, { error: "documents.links.targetRestricted" });
+  }
+  assertCommandFeature(features, registryEntry.requiredFeature);
+}
+async function loadLinkById(em, input, includeDeleted = false, lock = false) {
+  return findOneWithDecryption(
+    em,
+    DocumentEntityLink,
+    {
+      id: input.linkId,
+      documentId: input.documentId,
+      tenantId: input.tenantId,
+      organizationId: input.organizationId,
+      ...includeDeleted ? {} : { deletedAt: null }
+    },
+    {
+      ...includeDeleted ? { filters: false } : {},
+      ...lock ? { lockMode: LockMode.PESSIMISTIC_WRITE } : {}
+    },
+    { tenantId: input.tenantId, organizationId: input.organizationId }
+  );
+}
+async function loadLinkByTarget(em, input, lock = false) {
+  return findOneWithDecryption(
+    em,
+    DocumentEntityLink,
+    {
+      documentId: input.documentId,
+      tenantId: input.tenantId,
+      organizationId: input.organizationId,
+      ...buildDocumentEntityLinkTargetWhere(input.link.entityType, input.link.entityId)
+    },
+    {
+      filters: false,
+      orderBy: { updatedAt: "DESC" },
+      ...lock ? { lockMode: LockMode.PESSIMISTIC_WRITE } : {}
+    },
+    { tenantId: input.tenantId, organizationId: input.organizationId }
+  );
+}
+const createLinkCommand = {
+  id: "documents.link.create",
+  async execute(rawInput, ctx) {
+    const input = linkCreateCommandSchema.parse(rawInput);
+    const scope = resolveDocumentsCommandScope(ctx, input);
+    const registryEntry = getEntityRegistryEntry(input.link.entityType);
+    if (!registryEntry) {
+      throw new CrudHttpError(400, { error: "documents.links.invalidEntityType" });
+    }
+    if (!isDocumentEntityRegistryModuleEnabled(registryEntry)) {
+      throw new CrudHttpError(403, { error: "documents.links.targetRestricted" });
+    }
+    const preflightFeatures = await resolveDocumentsCommandFeatures(ctx, scope);
+    assertCommandFeature(preflightFeatures, registryEntry.requiredFeature);
+    const request = ctx.request;
+    if (!request) {
+      throw new CrudHttpError(503, { error: "documents.links.targetUnavailable" });
+    }
+    const verified = await verifyEntityRegistrySelection(request, input.link);
+    const canonicalInput = buildCanonicalLinkInput(input, verified);
+    const writeEm = resolveDocumentsCommandEntityManager(ctx);
+    let link = null;
+    let created = false;
+    let before;
+    let after;
+    await withAtomicFlush(writeEm, [
+      async () => {
+        await lockDocumentAggregateRoot(writeEm, input.documentId, scope);
+        const features = await assertDocumentCommandCanEdit(ctx, writeEm, input.documentId, scope);
+        if (!isDocumentEntityRegistryModuleEnabled(registryEntry)) {
+          throw new CrudHttpError(403, { error: "documents.links.targetRestricted" });
+        }
+        assertCommandFeature(features, registryEntry.requiredFeature);
+        const existing = await loadLinkByTarget(writeEm, canonicalInput, true);
+        before = captureLinkState(existing, input.linkId);
+        if (existing && !existing.deletedAt) {
+          link = existing;
+          return;
+        }
+        await assertDocumentEntityLinkCapacity(writeEm, input.documentId, scope);
+        link = existing ?? writeEm.create(
+          DocumentEntityLink,
+          createDocumentEntityLinkData({
+            id: input.linkId,
+            documentId: input.documentId,
+            scope,
+            actorUserId: resolveDocumentsCommandActor(ctx),
+            link: canonicalInput.link
+          })
+        );
+        if (!existing) writeEm.persist(link);
+        link.labelSnapshot = canonicalInput.link.label;
+        link.hrefSnapshot = canonicalInput.link.href;
+        link.source = canonicalInput.link.source;
+        link.createdByUserId = resolveDocumentsCommandActor(ctx);
+        link.deletedAt = null;
+        link.updatedAt = nextDocumentVersion(link.updatedAt);
+        created = true;
+      },
+      () => {
+        const captured = link;
+        if (!captured) throw new Error("[internal] document link create produced no row");
+        after = captureLinkState(captured, captured.id);
+      }
+    ], { transaction: true, label: "documents.link.create" });
+    const finalLink = link;
+    if (!finalLink) throw new Error("[internal] document link create produced no row");
+    if (!created) {
+      return {
+        id: finalLink.id,
+        created: false,
+        updatedAt: finalLink.updatedAt.toISOString(),
+        before,
+        after
+      };
+    }
+    await bufferLinkMutationSideEffects(ctx, "created", finalLink, {
+      entityType: input.link.entityType,
+      entityId: input.link.entityId
+    });
+    return {
+      id: finalLink.id,
+      created: true,
+      updatedAt: finalLink.updatedAt.toISOString(),
+      before,
+      after
+    };
+  },
+  async buildLog({ input, result }) {
+    if (!result.created) return { skipLog: true };
+    const { translate } = await resolveTranslations();
+    return {
+      actionLabel: translate("documents.audit.linkCreated", "Link document to record"),
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentEntityLink,
+      resourceId: result.id,
+      parentResourceKind: DOCUMENTS_ENTITY_IDS.document,
+      parentResourceId: input.documentId,
+      tenantId: input.tenantId,
+      organizationId: input.organizationId,
+      snapshotBefore: result.before,
+      snapshotAfter: result.after,
+      payload: {
+        undo: {
+          before: result.before,
+          after: result.after,
+          createdByCommand: result.created
+        }
+      }
+    };
+  },
+  async undo({ logEntry, ctx }) {
+    const undo = extractUndoPayload(logEntry);
+    if (!undo?.createdByCommand) return;
+    const before = undo?.before;
+    const after = undo?.after;
+    if (!after || before?.existed && before.deletedAt === null) return;
+    const input = linkCreateCommandSchema.parse(
+      logEntry.commandPayload && typeof logEntry.commandPayload === "object" ? logEntry.commandPayload.__redoInput : {}
+    );
+    const em = resolveDocumentsCommandEntityManager(ctx);
+    let link = null;
+    await withAtomicFlush(em, [async () => {
+      await lockDocumentAggregateRoot(em, input.documentId, {
+        tenantId: input.tenantId,
+        organizationId: input.organizationId
+      });
+      await authorizeLinkCreateUndo(ctx, em, input, input.link.entityType);
+      link = await loadLinkById(em, { ...input, linkId: after.id }, true, true);
+      if (!link) throw new CrudHttpError(409, { error: "Record changed by another user" });
+      assertLinkStateUnchanged(link, after);
+      const version = nextDocumentVersion(link.updatedAt);
+      link.deletedAt = before?.deletedAt ? new Date(before.deletedAt) : version;
+      link.updatedAt = version;
+    }], { transaction: true, label: "documents.link.create.undo" });
+    if (link) await bufferLinkMutationSideEffects(ctx, "deleted", link, { undo: true });
+  }
+};
+const deleteLinkCommand = {
+  id: "documents.link.delete",
+  async execute(rawInput, ctx) {
+    const input = linkDeleteCommandSchema.parse(rawInput);
+    const scope = resolveDocumentsCommandScope(ctx, input);
+    const em = resolveDocumentsCommandEntityManager(ctx);
+    let link = null;
+    let before;
+    let after;
+    await withAtomicFlush(em, [
+      async () => {
+        await lockDocumentAggregateRoot(em, input.documentId, scope);
+        await assertDocumentCommandCanEdit(ctx, em, input.documentId, scope);
+        link = await loadLinkById(em, input, false, true);
+        if (!link) throw new CrudHttpError(404, { error: "documents.links.notFound" });
+        before = captureLinkState(link, input.linkId);
+        await enforceCommandOptimisticLockWithGuards(ctx.container, {
+          resourceKind: DOCUMENTS_ENTITY_IDS.documentEntityLink,
+          resourceId: link.id,
+          current: link.updatedAt,
+          request: ctx.request ?? null
+        });
+        const version = nextDocumentVersion(link.updatedAt);
+        link.deletedAt = version;
+        link.updatedAt = version;
+      },
+      () => {
+        const captured = link;
+        if (!captured) throw new Error("[internal] document link delete produced no row");
+        after = captureLinkState(captured, captured.id);
+      }
+    ], { transaction: true, label: "documents.link.delete" });
+    const deletedLink = link;
+    if (!deletedLink) throw new Error("[internal] document link delete produced no row");
+    await bufferLinkMutationSideEffects(ctx, "deleted", deletedLink);
+    return {
+      id: deletedLink.id,
+      updatedAt: deletedLink.updatedAt.toISOString(),
+      before,
+      after
+    };
+  },
+  async buildLog({ input, result }) {
+    const { translate } = await resolveTranslations();
+    return {
+      actionLabel: translate("documents.audit.linkDeleted", "Unlink document from record"),
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentEntityLink,
+      resourceId: result.id,
+      parentResourceKind: DOCUMENTS_ENTITY_IDS.document,
+      parentResourceId: input.documentId,
+      tenantId: input.tenantId,
+      organizationId: input.organizationId,
+      snapshotBefore: result.before,
+      snapshotAfter: result.after,
+      payload: {
+        undo: {
+          before: result.before,
+          after: result.after
+        }
+      }
+    };
+  },
+  async undo({ logEntry, ctx }) {
+    const undo = extractUndoPayload(logEntry);
+    const before = undo?.before;
+    const after = undo?.after;
+    if (!before?.existed || before.deletedAt !== null) return;
+    const input = linkDeleteCommandSchema.parse(
+      logEntry.commandPayload && typeof logEntry.commandPayload === "object" ? logEntry.commandPayload.__redoInput : {}
+    );
+    const em = resolveDocumentsCommandEntityManager(ctx);
+    if (!after) throw new CrudHttpError(409, { error: "Record changed by another user" });
+    const preflightLink = await loadLinkById(
+      ctx.container.resolve("em").fork(),
+      input,
+      true
+    );
+    if (!preflightLink) throw new CrudHttpError(409, { error: "Record changed by another user" });
+    const preflightRegistryEntry = getEntityRegistryEntry(getDocumentEntityLinkType(preflightLink));
+    if (!preflightRegistryEntry) {
+      throw new CrudHttpError(400, { error: "documents.links.invalidEntityType" });
+    }
+    if (!isDocumentEntityRegistryModuleEnabled(preflightRegistryEntry)) {
+      throw new CrudHttpError(403, { error: "documents.links.targetRestricted" });
+    }
+    if (!ctx.request) {
+      throw new CrudHttpError(503, { error: "documents.links.targetUnavailable" });
+    }
+    const verified = await verifyEntityRegistrySelection(ctx.request, {
+      entityType: preflightRegistryEntry.type,
+      entityId: getDocumentEntityLinkEntityId(preflightLink),
+      label: preflightLink.labelSnapshot,
+      href: preflightLink.hrefSnapshot
+    });
+    let link = null;
+    await withAtomicFlush(em, [async () => {
+      await lockDocumentAggregateRoot(em, input.documentId, {
+        tenantId: input.tenantId,
+        organizationId: input.organizationId
+      });
+      const features = await assertDocumentCommandCanEdit(ctx, em, input.documentId, {
+        tenantId: input.tenantId,
+        organizationId: input.organizationId
+      });
+      link = await loadLinkById(em, input, true, true);
+      if (!link) throw new CrudHttpError(409, { error: "Record changed by another user" });
+      assertLinkStateUnchanged(link, after);
+      const registryEntry = getEntityRegistryEntry(getDocumentEntityLinkType(link));
+      if (!registryEntry) throw new CrudHttpError(400, { error: "documents.links.invalidEntityType" });
+      if (!isDocumentEntityRegistryModuleEnabled(registryEntry)) {
+        throw new CrudHttpError(403, { error: "documents.links.targetRestricted" });
+      }
+      assertCommandFeature(features, registryEntry.requiredFeature);
+      assertVerifiedLinkTargetMatchesRow(verified, link);
+      await assertDocumentEntityLinkCapacity(em, input.documentId, {
+        tenantId: input.tenantId,
+        organizationId: input.organizationId
+      });
+      link.labelSnapshot = verified.label;
+      link.hrefSnapshot = verified.href;
+      link.deletedAt = null;
+      link.updatedAt = nextDocumentVersion(link.updatedAt);
+    }], { transaction: true, label: "documents.link.delete.undo" });
+    if (link) await bufferLinkMutationSideEffects(ctx, "created", link, { undo: true });
+  }
+};
+registerCommand(createLinkCommand);
+registerCommand(deleteLinkCommand);
+export {
+  createLinkCommand,
+  deleteLinkCommand,
+  linkCreateCommandSchema,
+  linkDeleteCommandSchema
+};
+//# sourceMappingURL=links.js.map

package/dist/modules/documents/commands/links.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/commands/links.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { LockMode } from '@mikro-orm/core'\nimport { z } from 'zod'\nimport { registerCommand, type CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { extractUndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  assertOptimisticLock,\n  buildOptimisticLockConflictBody,\n  enforceCommandOptimisticLockWithGuards,\n} from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { DocumentEntityLink } from '../data/entities'\nimport { documentEntityLinkCreateSchema } from '../data/validators'\nimport { DOCUMENTS_ENTITY_IDS } from '../lib/constants'\nimport {\n  assertDocumentEntityLinkCapacity,\n  buildDocumentEntityLinkTargetWhere,\n  createDocumentEntityLinkData,\n  getDocumentEntityLinkEntityId,\n  getDocumentEntityLinkType,\n} from '../lib/entityLinks'\nimport { getEntityRegistryEntry } from '../lib/entityRegistry'\nimport { isDocumentEntityRegistryModuleEnabled } from '../lib/entityRegistryAvailability.server'\nimport {\n  verifyEntityRegistrySelection,\n  type VerifiedEntityRegistrySelection,\n} from '../lib/entityRegistry.server'\nimport { lockDocumentAggregateRoot } from './aggregate'\nimport { bufferLinkMutationSideEffects } from './side-effects'\nimport {\n  assertCommandFeature,\n  assertDocumentCommandCanEdit,\n  resolveDocumentsCommandActor,\n  resolveDocumentsCommandEntityManager,\n  resolveDocumentsCommandFeatures,\n  resolveDocumentsCommandScope,\n} from './shared'\nimport { nextDocumentVersion } from './mutation-helpers'\n\nconst scopedSchema = z.object({\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n})\n\nexport const linkCreateCommandSchema = scopedSchema.extend({\n  linkId: z.string().uuid(),\n  documentId: z.string().uuid(),\n  link: documentEntityLinkCreateSchema,\n})\n\nexport const linkDeleteCommandSchema = scopedSchema.extend({\n  documentId: z.string().uuid(),\n  linkId: z.string().uuid(),\n})\n\nexport type LinkCreateCommandInput = z.infer<typeof linkCreateCommandSchema>\nexport type LinkDeleteCommandInput = z.infer<typeof linkDeleteCommandSchema>\n\ntype LinkStateSnapshot = {\n  id: string\n  existed: boolean\n  deletedAt: string | null\n  updatedAt: string | null\n}\n\ntype LinkUndoPayload = {\n  before?: LinkStateSnapshot | null\n  after?: LinkStateSnapshot | null\n  createdByCommand?: boolean\n}\n\nexport type LinkCreateCommandResult = {\n  id: string\n  created: boolean\n  updatedAt: string\n  before: LinkStateSnapshot\n  after: LinkStateSnapshot\n}\n\nexport type LinkDeleteCommandResult = {\n  id: string\n  updatedAt: string\n  before: LinkStateSnapshot\n  after: LinkStateSnapshot\n}\n\nfunction buildCanonicalLinkInput(\n  input: LinkCreateCommandInput,\n  verified: VerifiedEntityRegistrySelection,\n): LinkCreateCommandInput {\n  return {\n    ...input,\n    link: {\n      ...input.link,\n      label: verified.label,\n      href: verified.href,\n    },\n  }\n}\n\nfunction assertVerifiedLinkTargetMatchesRow(\n  verified: VerifiedEntityRegistrySelection,\n  link: DocumentEntityLink,\n): void {\n  if (verified.id !== getDocumentEntityLinkEntityId(link)) {\n    throw new CrudHttpError(409, { error: 'Record changed by another user' })\n  }\n}\n\nfunction captureLinkState(link: DocumentEntityLink | null, fallbackId: string): LinkStateSnapshot {\n  return {\n    id: link?.id ?? fallbackId,\n    existed: link !== null,\n    deletedAt: link?.deletedAt?.toISOString() ?? null,\n    updatedAt: link?.updatedAt?.toISOString() ?? null,\n  }\n}\n\nfunction assertLinkStateUnchanged(link: DocumentEntityLink, expected: LinkStateSnapshot): void {\n  if (!expected.updatedAt) throw new CrudHttpError(409, { error: 'Record changed by another user' })\n  assertOptimisticLock({\n    resourceKind: DOCUMENTS_ENTITY_IDS.documentEntityLink,\n    resourceId: link.id,\n    current: link.updatedAt,\n    expected: expected.updatedAt,\n    envValue: 'all',\n  })\n  const deletedAt = link.deletedAt?.toISOString() ?? null\n  if (deletedAt !== expected.deletedAt) {\n    throw new CrudHttpError(409, buildOptimisticLockConflictBody(\n      link.updatedAt.toISOString(),\n      expected.updatedAt,\n    ))\n  }\n}\n\nasync function authorizeLinkCreateUndo(\n  ctx: Parameters<NonNullable<CommandHandler['undo']>>[0]['ctx'],\n  em: EntityManager,\n  input: LinkDeleteCommandInput,\n  entityType: Parameters<typeof getEntityRegistryEntry>[0],\n): Promise<void> {\n  const scope = resolveDocumentsCommandScope(ctx, input)\n  const features = await assertDocumentCommandCanEdit(ctx, em, input.documentId, scope)\n  const registryEntry = getEntityRegistryEntry(entityType)\n  if (!registryEntry) throw new CrudHttpError(400, { error: 'documents.links.invalidEntityType' })\n  if (!isDocumentEntityRegistryModuleEnabled(registryEntry)) {\n    throw new CrudHttpError(403, { error: 'documents.links.targetRestricted' })\n  }\n  assertCommandFeature(features, registryEntry.requiredFeature)\n}\n\nasync function loadLinkById(\n  em: EntityManager,\n  input: LinkDeleteCommandInput,\n  includeDeleted = false,\n  lock = false,\n): Promise<DocumentEntityLink | null> {\n  return findOneWithDecryption(\n    em,\n    DocumentEntityLink,\n    {\n      id: input.linkId,\n      documentId: input.documentId,\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n      ...(includeDeleted ? {} : { deletedAt: null }),\n    },\n    {\n      ...(includeDeleted ? { filters: false } : {}),\n      ...(lock ? { lockMode: LockMode.PESSIMISTIC_WRITE } : {}),\n    },\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n}\n\nasync function loadLinkByTarget(\n  em: EntityManager,\n  input: LinkCreateCommandInput,\n  lock = false,\n): Promise<DocumentEntityLink | null> {\n  return findOneWithDecryption(\n    em,\n    DocumentEntityLink,\n    {\n      documentId: input.documentId,\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n      ...buildDocumentEntityLinkTargetWhere(input.link.entityType, input.link.entityId),\n    },\n    {\n      filters: false,\n      orderBy: { updatedAt: 'DESC' },\n      ...(lock ? { lockMode: LockMode.PESSIMISTIC_WRITE } : {}),\n    },\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n}\n\nconst createLinkCommand: CommandHandler<LinkCreateCommandInput, LinkCreateCommandResult> = {\n  id: 'documents.link.create',\n  async execute(rawInput, ctx) {\n    const input = linkCreateCommandSchema.parse(rawInput)\n    const scope = resolveDocumentsCommandScope(ctx, input)\n    const registryEntry = getEntityRegistryEntry(input.link.entityType)\n    if (!registryEntry) {\n      throw new CrudHttpError(400, { error: 'documents.links.invalidEntityType' })\n    }\n    if (!isDocumentEntityRegistryModuleEnabled(registryEntry)) {\n      throw new CrudHttpError(403, { error: 'documents.links.targetRestricted' })\n    }\n    const preflightFeatures = await resolveDocumentsCommandFeatures(ctx, scope)\n    assertCommandFeature(preflightFeatures, registryEntry.requiredFeature)\n    const request = ctx.request\n    if (!request) {\n      throw new CrudHttpError(503, { error: 'documents.links.targetUnavailable' })\n    }\n    // The registry lookup is a loopback HTTP request; it must complete before\n    // the aggregate transaction so it never pins the PESSIMISTIC_WRITE lock or\n    // a second pool connection. Freshness at commit is preserved by the\n    // in-transaction re-checks below (fresh ACL, module availability, feature).\n    const verified = await verifyEntityRegistrySelection(request, input.link)\n    const canonicalInput = buildCanonicalLinkInput(input, verified)\n    const writeEm = resolveDocumentsCommandEntityManager(ctx)\n    let link: DocumentEntityLink | null = null\n    let created = false\n    let before!: LinkStateSnapshot\n    let after!: LinkStateSnapshot\n    await withAtomicFlush(writeEm, [\n      async () => {\n        await lockDocumentAggregateRoot(writeEm, input.documentId, scope)\n        const features = await assertDocumentCommandCanEdit(ctx, writeEm, input.documentId, scope)\n        if (!isDocumentEntityRegistryModuleEnabled(registryEntry)) {\n          throw new CrudHttpError(403, { error: 'documents.links.targetRestricted' })\n        }\n        assertCommandFeature(features, registryEntry.requiredFeature)\n        const existing = await loadLinkByTarget(writeEm, canonicalInput, true)\n        before = captureLinkState(existing, input.linkId)\n        if (existing && !existing.deletedAt) {\n          link = existing\n          return\n        }\n        await assertDocumentEntityLinkCapacity(writeEm, input.documentId, scope)\n        link = existing ?? writeEm.create(\n          DocumentEntityLink,\n          createDocumentEntityLinkData({\n            id: input.linkId,\n            documentId: input.documentId,\n            scope,\n            actorUserId: resolveDocumentsCommandActor(ctx),\n            link: canonicalInput.link,\n          }),\n        )\n        if (!existing) writeEm.persist(link)\n        link.labelSnapshot = canonicalInput.link.label\n        link.hrefSnapshot = canonicalInput.link.href\n        link.source = canonicalInput.link.source\n        link.createdByUserId = resolveDocumentsCommandActor(ctx)\n        link.deletedAt = null\n        link.updatedAt = nextDocumentVersion(link.updatedAt)\n        created = true\n      },\n      () => {\n        const captured = link as DocumentEntityLink | null\n        if (!captured) throw new Error('[internal] document link create produced no row')\n        after = captureLinkState(captured, captured.id)\n      },\n    ], { transaction: true, label: 'documents.link.create' })\n    const finalLink = link as DocumentEntityLink | null\n    if (!finalLink) throw new Error('[internal] document link create produced no row')\n\n    if (!created) {\n      return {\n        id: finalLink.id,\n        created: false,\n        updatedAt: finalLink.updatedAt.toISOString(),\n        before,\n        after,\n      }\n    }\n\n    await bufferLinkMutationSideEffects(ctx, 'created', finalLink, {\n      entityType: input.link.entityType,\n      entityId: input.link.entityId,\n    })\n    return {\n      id: finalLink.id,\n      created: true,\n      updatedAt: finalLink.updatedAt.toISOString(),\n      before,\n      after,\n    }\n  },\n  async buildLog({ input, result }) {\n    if (!result.created) return { skipLog: true }\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('documents.audit.linkCreated', 'Link document to record'),\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentEntityLink,\n      resourceId: result.id,\n      parentResourceKind: DOCUMENTS_ENTITY_IDS.document,\n      parentResourceId: input.documentId,\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n      snapshotBefore: result.before,\n      snapshotAfter: result.after,\n      payload: {\n        undo: {\n          before: result.before,\n          after: result.after,\n          createdByCommand: result.created,\n        } satisfies LinkUndoPayload,\n      },\n    }\n  },\n  async undo({ logEntry, ctx }) {\n    const undo = extractUndoPayload<LinkUndoPayload>(logEntry)\n    if (!undo?.createdByCommand) return\n    const before = undo?.before\n    const after = undo?.after\n    if (!after || (before?.existed && before.deletedAt === null)) return\n    const input = linkCreateCommandSchema.parse(\n      logEntry.commandPayload && typeof logEntry.commandPayload === 'object'\n        ? (logEntry.commandPayload as { __redoInput?: unknown }).__redoInput\n        : {},\n    )\n    const em = resolveDocumentsCommandEntityManager(ctx)\n    let link: DocumentEntityLink | null = null\n    await withAtomicFlush(em, [async () => {\n      await lockDocumentAggregateRoot(em, input.documentId, {\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n      })\n      await authorizeLinkCreateUndo(ctx, em, input, input.link.entityType)\n      link = await loadLinkById(em, { ...input, linkId: after.id }, true, true)\n      if (!link) throw new CrudHttpError(409, { error: 'Record changed by another user' })\n      assertLinkStateUnchanged(link, after)\n      const version = nextDocumentVersion(link.updatedAt)\n      link.deletedAt = before?.deletedAt ? new Date(before.deletedAt) : version\n      link.updatedAt = version\n    }], { transaction: true, label: 'documents.link.create.undo' })\n    if (link) await bufferLinkMutationSideEffects(ctx, 'deleted', link, { undo: true })\n  },\n}\n\nconst deleteLinkCommand: CommandHandler<LinkDeleteCommandInput, LinkDeleteCommandResult> = {\n  id: 'documents.link.delete',\n  async execute(rawInput, ctx) {\n    const input = linkDeleteCommandSchema.parse(rawInput)\n    const scope = resolveDocumentsCommandScope(ctx, input)\n    const em = resolveDocumentsCommandEntityManager(ctx)\n    let link: DocumentEntityLink | null = null\n    let before!: LinkStateSnapshot\n    let after!: LinkStateSnapshot\n    await withAtomicFlush(em, [\n      async () => {\n        await lockDocumentAggregateRoot(em, input.documentId, scope)\n        await assertDocumentCommandCanEdit(ctx, em, input.documentId, scope)\n        link = await loadLinkById(em, input, false, true)\n        if (!link) throw new CrudHttpError(404, { error: 'documents.links.notFound' })\n        before = captureLinkState(link, input.linkId)\n        await enforceCommandOptimisticLockWithGuards(ctx.container, {\n          resourceKind: DOCUMENTS_ENTITY_IDS.documentEntityLink,\n          resourceId: link.id,\n          current: link.updatedAt,\n          request: ctx.request ?? null,\n        })\n        const version = nextDocumentVersion(link.updatedAt)\n        link.deletedAt = version\n        link.updatedAt = version\n      },\n      () => {\n        const captured = link as DocumentEntityLink | null\n        if (!captured) throw new Error('[internal] document link delete produced no row')\n        after = captureLinkState(captured, captured.id)\n      },\n    ], { transaction: true, label: 'documents.link.delete' })\n    const deletedLink = link as DocumentEntityLink | null\n    if (!deletedLink) throw new Error('[internal] document link delete produced no row')\n    await bufferLinkMutationSideEffects(ctx, 'deleted', deletedLink)\n    return {\n      id: deletedLink.id,\n      updatedAt: deletedLink.updatedAt.toISOString(),\n      before,\n      after,\n    }\n  },\n  async buildLog({ input, result }) {\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('documents.audit.linkDeleted', 'Unlink document from record'),\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentEntityLink,\n      resourceId: result.id,\n      parentResourceKind: DOCUMENTS_ENTITY_IDS.document,\n      parentResourceId: input.documentId,\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n      snapshotBefore: result.before,\n      snapshotAfter: result.after,\n      payload: {\n        undo: {\n          before: result.before,\n          after: result.after,\n        } satisfies LinkUndoPayload,\n      },\n    }\n  },\n  async undo({ logEntry, ctx }) {\n    const undo = extractUndoPayload<LinkUndoPayload>(logEntry)\n    const before = undo?.before\n    const after = undo?.after\n    if (!before?.existed || before.deletedAt !== null) return\n    const input = linkDeleteCommandSchema.parse(\n      logEntry.commandPayload && typeof logEntry.commandPayload === 'object'\n        ? (logEntry.commandPayload as { __redoInput?: unknown }).__redoInput\n        : {},\n    )\n    const em = resolveDocumentsCommandEntityManager(ctx)\n    if (!after) throw new CrudHttpError(409, { error: 'Record changed by another user' })\n    // Re-verify the resurrected target over HTTP before the aggregate\n    // transaction so the loopback request never runs under the\n    // PESSIMISTIC_WRITE lock. The locked revalidation below pins the row to\n    // the undo snapshot (monotonic versions), so the state verified here is\n    // exactly the state that gets resurrected.\n    const preflightLink = await loadLinkById(\n      (ctx.container.resolve('em') as EntityManager).fork(),\n      input,\n      true,\n    )\n    if (!preflightLink) throw new CrudHttpError(409, { error: 'Record changed by another user' })\n    const preflightRegistryEntry = getEntityRegistryEntry(getDocumentEntityLinkType(preflightLink))\n    if (!preflightRegistryEntry) {\n      throw new CrudHttpError(400, { error: 'documents.links.invalidEntityType' })\n    }\n    if (!isDocumentEntityRegistryModuleEnabled(preflightRegistryEntry)) {\n      throw new CrudHttpError(403, { error: 'documents.links.targetRestricted' })\n    }\n    if (!ctx.request) {\n      throw new CrudHttpError(503, { error: 'documents.links.targetUnavailable' })\n    }\n    const verified = await verifyEntityRegistrySelection(ctx.request, {\n      entityType: preflightRegistryEntry.type,\n      entityId: getDocumentEntityLinkEntityId(preflightLink),\n      label: preflightLink.labelSnapshot,\n      href: preflightLink.hrefSnapshot,\n    })\n    let link: DocumentEntityLink | null = null\n    await withAtomicFlush(em, [async () => {\n      await lockDocumentAggregateRoot(em, input.documentId, {\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n      })\n      const features = await assertDocumentCommandCanEdit(ctx, em, input.documentId, {\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n      })\n      link = await loadLinkById(em, input, true, true)\n      if (!link) throw new CrudHttpError(409, { error: 'Record changed by another user' })\n      assertLinkStateUnchanged(link, after)\n      const registryEntry = getEntityRegistryEntry(getDocumentEntityLinkType(link))\n      if (!registryEntry) throw new CrudHttpError(400, { error: 'documents.links.invalidEntityType' })\n      if (!isDocumentEntityRegistryModuleEnabled(registryEntry)) {\n        throw new CrudHttpError(403, { error: 'documents.links.targetRestricted' })\n      }\n      assertCommandFeature(features, registryEntry.requiredFeature)\n      assertVerifiedLinkTargetMatchesRow(verified, link)\n      await assertDocumentEntityLinkCapacity(em, input.documentId, {\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n      })\n      link.labelSnapshot = verified.label\n      link.hrefSnapshot = verified.href\n      link.deletedAt = null\n      link.updatedAt = nextDocumentVersion(link.updatedAt)\n    }], { transaction: true, label: 'documents.link.delete.undo' })\n    if (link) await bufferLinkMutationSideEffects(ctx, 'created', link, { undo: true })\n  },\n}\n\nregisterCommand(createLinkCommand)\nregisterCommand(deleteLinkCommand)\n\nexport { createLinkCommand, deleteLinkCommand }\n"],
+  "mappings": "AACA,SAAS,gBAAgB;AACzB,SAAS,SAAS;AAClB,SAAS,uBAA4C;AACrD,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AACnC,SAAS,sCAAsC;AAC/C,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,8BAA8B;AACvC,SAAS,6CAA6C;AACtD;AAAA,EACE;AAAA,OAEK;AACP,SAAS,iCAAiC;AAC1C,SAAS,qCAAqC;AAC9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,2BAA2B;AAEpC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAClC,CAAC;AAEM,MAAM,0BAA0B,aAAa,OAAO;AAAA,EACzD,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,YAAY,EAAE,OAAO,EAAE,KAAK;AAAA,EAC5B,MAAM;AACR,CAAC;AAEM,MAAM,0BAA0B,aAAa,OAAO;AAAA,EACzD,YAAY,EAAE,OAAO,EAAE,KAAK;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAiCD,SAAS,wBACP,OACA,UACwB;AACxB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM;AAAA,MACJ,GAAG,MAAM;AAAA,MACT,OAAO,SAAS;AAAA,MAChB,MAAM,SAAS;AAAA,IACjB;AAAA,EACF;AACF;AAEA,SAAS,mCACP,UACA,MACM;AACN,MAAI,SAAS,OAAO,8BAA8B,IAAI,GAAG;AACvD,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,iCAAiC,CAAC;AAAA,EAC1E;AACF;AAEA,SAAS,iBAAiB,MAAiC,YAAuC;AAChG,SAAO;AAAA,IACL,IAAI,MAAM,MAAM;AAAA,IAChB,SAAS,SAAS;AAAA,IAClB,WAAW,MAAM,WAAW,YAAY,KAAK;AAAA,IAC7C,WAAW,MAAM,WAAW,YAAY,KAAK;AAAA,EAC/C;AACF;AAEA,SAAS,yBAAyB,MAA0B,UAAmC;AAC7F,MAAI,CAAC,SAAS,UAAW,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,iCAAiC,CAAC;AACjG,uBAAqB;AAAA,IACnB,cAAc,qBAAqB;AAAA,IACnC,YAAY,KAAK;AAAA,IACjB,SAAS,KAAK;AAAA,IACd,UAAU,SAAS;AAAA,IACnB,UAAU;AAAA,EACZ,CAAC;AACD,QAAM,YAAY,KAAK,WAAW,YAAY,KAAK;AACnD,MAAI,cAAc,SAAS,WAAW;AACpC,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,KAAK,UAAU,YAAY;AAAA,MAC3B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEA,eAAe,wBACb,KACA,IACA,OACA,YACe;AACf,QAAM,QAAQ,6BAA6B,KAAK,KAAK;AACrD,QAAM,WAAW,MAAM,6BAA6B,KAAK,IAAI,MAAM,YAAY,KAAK;AACpF,QAAM,gBAAgB,uBAAuB,UAAU;AACvD,MAAI,CAAC,cAAe,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAC/F,MAAI,CAAC,sCAAsC,aAAa,GAAG;AACzD,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,EAC5E;AACA,uBAAqB,UAAU,cAAc,eAAe;AAC9D;AAEA,eAAe,aACb,IACA,OACA,iBAAiB,OACjB,OAAO,OAC6B;AACpC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,GAAI,iBAAiB,CAAC,IAAI,EAAE,WAAW,KAAK;AAAA,IAC9C;AAAA,IACA;AAAA,MACE,GAAI,iBAAiB,EAAE,SAAS,MAAM,IAAI,CAAC;AAAA,MAC3C,GAAI,OAAO,EAAE,UAAU,SAAS,kBAAkB,IAAI,CAAC;AAAA,IACzD;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACF;AAEA,eAAe,iBACb,IACA,OACA,OAAO,OAC6B;AACpC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,MACE,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,GAAG,mCAAmC,MAAM,KAAK,YAAY,MAAM,KAAK,QAAQ;AAAA,IAClF;AAAA,IACA;AAAA,MACE,SAAS;AAAA,MACT,SAAS,EAAE,WAAW,OAAO;AAAA,MAC7B,GAAI,OAAO,EAAE,UAAU,SAAS,kBAAkB,IAAI,CAAC;AAAA,IACzD;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACF;AAEA,MAAM,oBAAqF;AAAA,EACzF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,wBAAwB,MAAM,QAAQ;AACpD,UAAM,QAAQ,6BAA6B,KAAK,KAAK;AACrD,UAAM,gBAAgB,uBAAuB,MAAM,KAAK,UAAU;AAClE,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,IAC7E;AACA,QAAI,CAAC,sCAAsC,aAAa,GAAG;AACzD,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,IAC5E;AACA,UAAM,oBAAoB,MAAM,gCAAgC,KAAK,KAAK;AAC1E,yBAAqB,mBAAmB,cAAc,eAAe;AACrE,UAAM,UAAU,IAAI;AACpB,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,IAC7E;AAKA,UAAM,WAAW,MAAM,8BAA8B,SAAS,MAAM,IAAI;AACxE,UAAM,iBAAiB,wBAAwB,OAAO,QAAQ;AAC9D,UAAM,UAAU,qCAAqC,GAAG;AACxD,QAAI,OAAkC;AACtC,QAAI,UAAU;AACd,QAAI;AACJ,QAAI;AACJ,UAAM,gBAAgB,SAAS;AAAA,MAC7B,YAAY;AACV,cAAM,0BAA0B,SAAS,MAAM,YAAY,KAAK;AAChE,cAAM,WAAW,MAAM,6BAA6B,KAAK,SAAS,MAAM,YAAY,KAAK;AACzF,YAAI,CAAC,sCAAsC,aAAa,GAAG;AACzD,gBAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,QAC5E;AACA,6BAAqB,UAAU,cAAc,eAAe;AAC5D,cAAM,WAAW,MAAM,iBAAiB,SAAS,gBAAgB,IAAI;AACrE,iBAAS,iBAAiB,UAAU,MAAM,MAAM;AAChD,YAAI,YAAY,CAAC,SAAS,WAAW;AACnC,iBAAO;AACP;AAAA,QACF;AACA,cAAM,iCAAiC,SAAS,MAAM,YAAY,KAAK;AACvE,eAAO,YAAY,QAAQ;AAAA,UACzB;AAAA,UACA,6BAA6B;AAAA,YAC3B,IAAI,MAAM;AAAA,YACV,YAAY,MAAM;AAAA,YAClB;AAAA,YACA,aAAa,6BAA6B,GAAG;AAAA,YAC7C,MAAM,eAAe;AAAA,UACvB,CAAC;AAAA,QACH;AACA,YAAI,CAAC,SAAU,SAAQ,QAAQ,IAAI;AACnC,aAAK,gBAAgB,eAAe,KAAK;AACzC,aAAK,eAAe,eAAe,KAAK;AACxC,aAAK,SAAS,eAAe,KAAK;AAClC,aAAK,kBAAkB,6BAA6B,GAAG;AACvD,aAAK,YAAY;AACjB,aAAK,YAAY,oBAAoB,KAAK,SAAS;AACnD,kBAAU;AAAA,MACZ;AAAA,MACA,MAAM;AACJ,cAAM,WAAW;AACjB,YAAI,CAAC,SAAU,OAAM,IAAI,MAAM,iDAAiD;AAChF,gBAAQ,iBAAiB,UAAU,SAAS,EAAE;AAAA,MAChD;AAAA,IACF,GAAG,EAAE,aAAa,MAAM,OAAO,wBAAwB,CAAC;AACxD,UAAM,YAAY;AAClB,QAAI,CAAC,UAAW,OAAM,IAAI,MAAM,iDAAiD;AAEjF,QAAI,CAAC,SAAS;AACZ,aAAO;AAAA,QACL,IAAI,UAAU;AAAA,QACd,SAAS;AAAA,QACT,WAAW,UAAU,UAAU,YAAY;AAAA,QAC3C;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,8BAA8B,KAAK,WAAW,WAAW;AAAA,MAC7D,YAAY,MAAM,KAAK;AAAA,MACvB,UAAU,MAAM,KAAK;AAAA,IACvB,CAAC;AACD,WAAO;AAAA,MACL,IAAI,UAAU;AAAA,MACd,SAAS;AAAA,MACT,WAAW,UAAU,UAAU,YAAY;AAAA,MAC3C;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,SAAS,EAAE,OAAO,OAAO,GAAG;AAChC,QAAI,CAAC,OAAO,QAAS,QAAO,EAAE,SAAS,KAAK;AAC5C,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,+BAA+B,yBAAyB;AAAA,MAC/E,cAAc,qBAAqB;AAAA,MACnC,YAAY,OAAO;AAAA,MACnB,oBAAoB,qBAAqB;AAAA,MACzC,kBAAkB,MAAM;AAAA,MACxB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,gBAAgB,OAAO;AAAA,MACvB,eAAe,OAAO;AAAA,MACtB,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAQ,OAAO;AAAA,UACf,OAAO,OAAO;AAAA,UACd,kBAAkB,OAAO;AAAA,QAC3B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,KAAK,EAAE,UAAU,IAAI,GAAG;AAC5B,UAAM,OAAO,mBAAoC,QAAQ;AACzD,QAAI,CAAC,MAAM,iBAAkB;AAC7B,UAAM,SAAS,MAAM;AACrB,UAAM,QAAQ,MAAM;AACpB,QAAI,CAAC,SAAU,QAAQ,WAAW,OAAO,cAAc,KAAO;AAC9D,UAAM,QAAQ,wBAAwB;AAAA,MACpC,SAAS,kBAAkB,OAAO,SAAS,mBAAmB,WACzD,SAAS,eAA6C,cACvD,CAAC;AAAA,IACP;AACA,UAAM,KAAK,qCAAqC,GAAG;AACnD,QAAI,OAAkC;AACtC,UAAM,gBAAgB,IAAI,CAAC,YAAY;AACrC,YAAM,0BAA0B,IAAI,MAAM,YAAY;AAAA,QACpD,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,wBAAwB,KAAK,IAAI,OAAO,MAAM,KAAK,UAAU;AACnE,aAAO,MAAM,aAAa,IAAI,EAAE,GAAG,OAAO,QAAQ,MAAM,GAAG,GAAG,MAAM,IAAI;AACxE,UAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,iCAAiC,CAAC;AACnF,+BAAyB,MAAM,KAAK;AACpC,YAAM,UAAU,oBAAoB,KAAK,SAAS;AAClD,WAAK,YAAY,QAAQ,YAAY,IAAI,KAAK,OAAO,SAAS,IAAI;AAClE,WAAK,YAAY;AAAA,IACnB,CAAC,GAAG,EAAE,aAAa,MAAM,OAAO,6BAA6B,CAAC;AAC9D,QAAI,KAAM,OAAM,8BAA8B,KAAK,WAAW,MAAM,EAAE,MAAM,KAAK,CAAC;AAAA,EACpF;AACF;AAEA,MAAM,oBAAqF;AAAA,EACzF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,wBAAwB,MAAM,QAAQ;AACpD,UAAM,QAAQ,6BAA6B,KAAK,KAAK;AACrD,UAAM,KAAK,qCAAqC,GAAG;AACnD,QAAI,OAAkC;AACtC,QAAI;AACJ,QAAI;AACJ,UAAM,gBAAgB,IAAI;AAAA,MACxB,YAAY;AACV,cAAM,0BAA0B,IAAI,MAAM,YAAY,KAAK;AAC3D,cAAM,6BAA6B,KAAK,IAAI,MAAM,YAAY,KAAK;AACnE,eAAO,MAAM,aAAa,IAAI,OAAO,OAAO,IAAI;AAChD,YAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC7E,iBAAS,iBAAiB,MAAM,MAAM,MAAM;AAC5C,cAAM,uCAAuC,IAAI,WAAW;AAAA,UAC1D,cAAc,qBAAqB;AAAA,UACnC,YAAY,KAAK;AAAA,UACjB,SAAS,KAAK;AAAA,UACd,SAAS,IAAI,WAAW;AAAA,QAC1B,CAAC;AACD,cAAM,UAAU,oBAAoB,KAAK,SAAS;AAClD,aAAK,YAAY;AACjB,aAAK,YAAY;AAAA,MACnB;AAAA,MACA,MAAM;AACJ,cAAM,WAAW;AACjB,YAAI,CAAC,SAAU,OAAM,IAAI,MAAM,iDAAiD;AAChF,gBAAQ,iBAAiB,UAAU,SAAS,EAAE;AAAA,MAChD;AAAA,IACF,GAAG,EAAE,aAAa,MAAM,OAAO,wBAAwB,CAAC;AACxD,UAAM,cAAc;AACpB,QAAI,CAAC,YAAa,OAAM,IAAI,MAAM,iDAAiD;AACnF,UAAM,8BAA8B,KAAK,WAAW,WAAW;AAC/D,WAAO;AAAA,MACL,IAAI,YAAY;AAAA,MAChB,WAAW,YAAY,UAAU,YAAY;AAAA,MAC7C;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,SAAS,EAAE,OAAO,OAAO,GAAG;AAChC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,+BAA+B,6BAA6B;AAAA,MACnF,cAAc,qBAAqB;AAAA,MACnC,YAAY,OAAO;AAAA,MACnB,oBAAoB,qBAAqB;AAAA,MACzC,kBAAkB,MAAM;AAAA,MACxB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,gBAAgB,OAAO;AAAA,MACvB,eAAe,OAAO;AAAA,MACtB,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAQ,OAAO;AAAA,UACf,OAAO,OAAO;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,KAAK,EAAE,UAAU,IAAI,GAAG;AAC5B,UAAM,OAAO,mBAAoC,QAAQ;AACzD,UAAM,SAAS,MAAM;AACrB,UAAM,QAAQ,MAAM;AACpB,QAAI,CAAC,QAAQ,WAAW,OAAO,cAAc,KAAM;AACnD,UAAM,QAAQ,wBAAwB;AAAA,MACpC,SAAS,kBAAkB,OAAO,SAAS,mBAAmB,WACzD,SAAS,eAA6C,cACvD,CAAC;AAAA,IACP;AACA,UAAM,KAAK,qCAAqC,GAAG;AACnD,QAAI,CAAC,MAAO,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,iCAAiC,CAAC;AAMpF,UAAM,gBAAgB,MAAM;AAAA,MACzB,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAAA,MACpD;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,cAAe,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,iCAAiC,CAAC;AAC5F,UAAM,yBAAyB,uBAAuB,0BAA0B,aAAa,CAAC;AAC9F,QAAI,CAAC,wBAAwB;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,IAC7E;AACA,QAAI,CAAC,sCAAsC,sBAAsB,GAAG;AAClE,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,IAC5E;AACA,QAAI,CAAC,IAAI,SAAS;AAChB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,IAC7E;AACA,UAAM,WAAW,MAAM,8BAA8B,IAAI,SAAS;AAAA,MAChE,YAAY,uBAAuB;AAAA,MACnC,UAAU,8BAA8B,aAAa;AAAA,MACrD,OAAO,cAAc;AAAA,MACrB,MAAM,cAAc;AAAA,IACtB,CAAC;AACD,QAAI,OAAkC;AACtC,UAAM,gBAAgB,IAAI,CAAC,YAAY;AACrC,YAAM,0BAA0B,IAAI,MAAM,YAAY;AAAA,QACpD,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,WAAW,MAAM,6BAA6B,KAAK,IAAI,MAAM,YAAY;AAAA,QAC7E,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,aAAO,MAAM,aAAa,IAAI,OAAO,MAAM,IAAI;AAC/C,UAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,iCAAiC,CAAC;AACnF,+BAAyB,MAAM,KAAK;AACpC,YAAM,gBAAgB,uBAAuB,0BAA0B,IAAI,CAAC;AAC5E,UAAI,CAAC,cAAe,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAC/F,UAAI,CAAC,sCAAsC,aAAa,GAAG;AACzD,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,MAC5E;AACA,2BAAqB,UAAU,cAAc,eAAe;AAC5D,yCAAmC,UAAU,IAAI;AACjD,YAAM,iCAAiC,IAAI,MAAM,YAAY;AAAA,QAC3D,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,WAAK,gBAAgB,SAAS;AAC9B,WAAK,eAAe,SAAS;AAC7B,WAAK,YAAY;AACjB,WAAK,YAAY,oBAAoB,KAAK,SAAS;AAAA,IACrD,CAAC,GAAG,EAAE,aAAa,MAAM,OAAO,6BAA6B,CAAC;AAC9D,QAAI,KAAM,OAAM,8BAA8B,KAAK,WAAW,MAAM,EAAE,MAAM,KAAK,CAAC;AAAA,EACpF;AACF;AAEA,gBAAgB,iBAAiB;AACjC,gBAAgB,iBAAiB;",
+  "names": []
+}

package/dist/modules/documents/commands/mutation-helpers.js

@@ -0,0 +1,42 @@
+import { z } from "zod";
+import {
+  assertOptimisticLock,
+  buildOptimisticLockConflictBody
+} from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { nextDocumentVersion } from "../lib/versioning.js";
+const documentsScopedCommandSchema = z.object({
+  tenantId: z.string().uuid(),
+  organizationId: z.string().uuid()
+});
+function assertVersionedSnapshot(entity, expected, resourceKind) {
+  if (!entity || !expected) {
+    throw new CrudHttpError(409, { error: "Record changed by another user" });
+  }
+  assertOptimisticLock({
+    resourceKind,
+    resourceId: expected.id,
+    current: entity.updatedAt,
+    expected: expected.updatedAt,
+    envValue: "all"
+  });
+  const deletedAt = entity.deletedAt?.toISOString() ?? null;
+  if (deletedAt !== expected.deletedAt) {
+    throw new CrudHttpError(409, buildOptimisticLockConflictBody(
+      entity.updatedAt.toISOString(),
+      expected.updatedAt
+    ));
+  }
+}
+function readCommandRedoInput(logEntry) {
+  const payload = logEntry.commandPayload;
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) return null;
+  return payload.__redoInput ?? null;
+}
+export {
+  assertVersionedSnapshot,
+  documentsScopedCommandSchema,
+  nextDocumentVersion,
+  readCommandRedoInput
+};
+//# sourceMappingURL=mutation-helpers.js.map

package/dist/modules/documents/commands/mutation-helpers.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/commands/mutation-helpers.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport {\n  assertOptimisticLock,\n  buildOptimisticLockConflictBody,\n} from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nexport { nextDocumentVersion } from '../lib/versioning'\n\nexport const documentsScopedCommandSchema = z.object({\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n})\n\nexport type VersionedEntitySnapshot = {\n  id: string\n  updatedAt: string\n  deletedAt: string | null\n}\n\nexport function assertVersionedSnapshot(\n  entity: { id: string; updatedAt: Date; deletedAt?: Date | null } | null,\n  expected: VersionedEntitySnapshot | null | undefined,\n  resourceKind: string,\n): void {\n  if (!entity || !expected) {\n    throw new CrudHttpError(409, { error: 'Record changed by another user' })\n  }\n  assertOptimisticLock({\n    resourceKind,\n    resourceId: expected.id,\n    current: entity.updatedAt,\n    expected: expected.updatedAt,\n    envValue: 'all',\n  })\n  const deletedAt = entity.deletedAt?.toISOString() ?? null\n  if (deletedAt !== expected.deletedAt) {\n    throw new CrudHttpError(409, buildOptimisticLockConflictBody(\n      entity.updatedAt.toISOString(),\n      expected.updatedAt,\n    ))\n  }\n}\n\nexport function readCommandRedoInput(logEntry: { commandPayload?: unknown }): unknown {\n  const payload = logEntry.commandPayload\n  if (!payload || typeof payload !== 'object' || Array.isArray(payload)) return null\n  return (payload as { __redoInput?: unknown }).__redoInput ?? null\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AAE7B,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAClC,CAAC;AAQM,SAAS,wBACd,QACA,UACA,cACM;AACN,MAAI,CAAC,UAAU,CAAC,UAAU;AACxB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,iCAAiC,CAAC;AAAA,EAC1E;AACA,uBAAqB;AAAA,IACnB;AAAA,IACA,YAAY,SAAS;AAAA,IACrB,SAAS,OAAO;AAAA,IAChB,UAAU,SAAS;AAAA,IACnB,UAAU;AAAA,EACZ,CAAC;AACD,QAAM,YAAY,OAAO,WAAW,YAAY,KAAK;AACrD,MAAI,cAAc,SAAS,WAAW;AACpC,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,YAAY;AAAA,MAC7B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAEO,SAAS,qBAAqB,UAAiD;AACpF,QAAM,UAAU,SAAS;AACzB,MAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,EAAG,QAAO;AAC9E,SAAQ,QAAsC,eAAe;AAC/D;",
+  "names": []
+}

package/dist/modules/documents/commands/projection-types.js

@@ -0,0 +1 @@
+//# sourceMappingURL=projection-types.js.map

package/dist/modules/documents/commands/projection-types.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}