@open-mercato/documents 0.6.8-develop.7016.1.4ed7b1e49d

package/dist/modules/documents/lib/entityLinks.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/entityLinks.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { DocumentEntityLink } from '../data/entities'\nimport type {\n  DocumentEntityLinkCreateInput,\n  DocumentEntityType,\n} from '../data/validators'\nimport { sanitizeDocumentsDisplayLabel } from './displayLabels'\nimport { getEntityTokenFieldNames } from './entityRegistry'\nimport { DOCUMENTS_MAX_ENTITY_LINKS_PER_DOCUMENT } from './resourceLimits'\n\nexport type DocumentEntityLinkScope = {\n  tenantId: string\n  organizationId: string\n}\n\nexport type DocumentEntityLinkCanonicalTarget = {\n  id: string\n  label: string\n  href: string\n  values?: Record<string, string | null>\n}\n\ntype LinkTargetFields = Pick<\n  DocumentEntityLink,\n  | 'customerEntityId'\n  | 'customerKind'\n  | 'dealId'\n  | 'productId'\n  | 'catalogOfferId'\n  | 'quoteId'\n  | 'salesOrderId'\n  | 'linkedDocumentId'\n>\n\nexport type DocumentEntityLinkCreateData = LinkTargetFields & {\n  id: string\n  documentId: string\n  tenantId: string\n  organizationId: string\n  labelSnapshot: string\n  hrefSnapshot: string\n  source: DocumentEntityLinkCreateInput['source']\n  createdByUserId: string\n}\n\nconst EMPTY_TARGET: LinkTargetFields = {\n  customerEntityId: null,\n  customerKind: null,\n  dealId: null,\n  productId: null,\n  catalogOfferId: null,\n  quoteId: null,\n  salesOrderId: null,\n  linkedDocumentId: null,\n}\n\nfunction sanitizeDocumentEntityValue(value: unknown): string | null {\n  const label = sanitizeDocumentsDisplayLabel(value)\n  return label && label.length <= 10_000 ? label : null\n}\n\nexport function buildDocumentEntityLinkTarget(\n  entityType: DocumentEntityType,\n  entityId: string,\n): LinkTargetFields {\n  const target = { ...EMPTY_TARGET }\n  if (entityType === 'customer-person' || entityType === 'customer-company') {\n    target.customerEntityId = entityId\n    target.customerKind = entityType === 'customer-person' ? 'person' : 'company'\n  } else if (entityType === 'deal') {\n    target.dealId = entityId\n  } else if (entityType === 'product') {\n    target.productId = entityId\n  } else if (entityType === 'catalog-offer') {\n    target.catalogOfferId = entityId\n  } else if (entityType === 'quote') {\n    target.quoteId = entityId\n  } else if (entityType === 'document') {\n    target.linkedDocumentId = entityId\n  } else {\n    target.salesOrderId = entityId\n  }\n  return target\n}\n\nexport function buildDocumentEntityLinkTargetWhere(\n  entityType: DocumentEntityType,\n  entityId: string,\n): LinkTargetFields {\n  return buildDocumentEntityLinkTarget(entityType, entityId)\n}\n\nexport function getDocumentEntityLinkType(link: DocumentEntityLink): DocumentEntityType {\n  if (link.customerEntityId) {\n    return link.customerKind === 'company' ? 'customer-company' : 'customer-person'\n  }\n  if (link.dealId) return 'deal'\n  if (link.productId) return 'product'\n  if (link.catalogOfferId) return 'catalog-offer'\n  if (link.quoteId) return 'quote'\n  if (link.linkedDocumentId) return 'document'\n  return 'sales-order'\n}\n\nexport function getDocumentEntityLinkEntityId(link: DocumentEntityLink): string {\n  return link.customerEntityId\n    ?? link.dealId\n    ?? link.productId\n    ?? link.catalogOfferId\n    ?? link.quoteId\n    ?? link.linkedDocumentId\n    ?? link.salesOrderId\n    ?? ''\n}\n\nexport function createDocumentEntityLinkData(input: {\n  id: string\n  documentId: string\n  scope: DocumentEntityLinkScope\n  actorUserId: string\n  link: DocumentEntityLinkCreateInput\n}): DocumentEntityLinkCreateData {\n  const labelSnapshot = sanitizeDocumentsDisplayLabel(input.link.label)\n  if (!labelSnapshot) {\n    throw new Error('[internal] document entity link label crossed persistence without a readable label')\n  }\n  return {\n    id: input.id,\n    documentId: input.documentId,\n    tenantId: input.scope.tenantId,\n    organizationId: input.scope.organizationId,\n    labelSnapshot,\n    hrefSnapshot: input.link.href,\n    source: input.link.source,\n    createdByUserId: input.actorUserId,\n    ...buildDocumentEntityLinkTarget(input.link.entityType, input.link.entityId),\n  }\n}\n\nexport async function findDocumentEntityLinks(\n  em: EntityManager,\n  documentId: string,\n  scope: DocumentEntityLinkScope,\n  options: { withDeleted?: boolean } = {},\n): Promise<DocumentEntityLink[]> {\n  const links = await findWithDecryption(\n    em,\n    DocumentEntityLink,\n    {\n      documentId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      ...(options.withDeleted ? {} : { deletedAt: null }),\n    },\n    options.withDeleted\n      ? { orderBy: { createdAt: 'ASC' } }\n      : {\n          orderBy: { createdAt: 'ASC' },\n          limit: DOCUMENTS_MAX_ENTITY_LINKS_PER_DOCUMENT + 1,\n        },\n    scope,\n  )\n  if (!options.withDeleted) assertDocumentEntityLinkListWithinLimit(links)\n  return links\n}\n\nexport function assertDocumentEntityLinkListWithinLimit(\n  links: readonly DocumentEntityLink[],\n): void {\n  if (links.length <= DOCUMENTS_MAX_ENTITY_LINKS_PER_DOCUMENT) return\n  throw new CrudHttpError(413, { error: 'documents.links.limitExceeded' })\n}\n\n/** Call only while holding the document aggregate lock. */\nexport async function assertDocumentEntityLinkCapacity(\n  em: EntityManager,\n  documentId: string,\n  scope: DocumentEntityLinkScope,\n): Promise<void> {\n  const activeCount = await em.count(DocumentEntityLink, {\n    documentId,\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    deletedAt: null,\n  })\n  if (activeCount < DOCUMENTS_MAX_ENTITY_LINKS_PER_DOCUMENT) return\n  throw new CrudHttpError(413, { error: 'documents.links.limitExceeded' })\n}\n\nexport function serializeDocumentEntityLink(\n  link: DocumentEntityLink,\n  options: {\n    canOpen: boolean\n    restrictedLabel: string\n    canonicalTarget?: DocumentEntityLinkCanonicalTarget\n  },\n): {\n  id: string\n  entityType: DocumentEntityType\n  entityId: string | null\n  label: string\n  href: string | null\n  canOpen: boolean\n  source: string\n  createdAt: string\n  updatedAt: string\n  values?: Record<string, string | null>\n} {\n  const entityType = getDocumentEntityLinkType(link)\n  const restrictedLabel = sanitizeDocumentsDisplayLabel(options.restrictedLabel)\n  const canonicalLabel = options.canonicalTarget\n    ? sanitizeDocumentsDisplayLabel(options.canonicalTarget.label)\n    : null\n  const snapshotLabel = sanitizeDocumentsDisplayLabel(link.labelSnapshot)\n  const canOpen = options.canOpen && (\n    options.canonicalTarget ? Boolean(canonicalLabel) : Boolean(snapshotLabel)\n  )\n  const readableLabel = canOpen ? canonicalLabel ?? snapshotLabel : restrictedLabel\n  if (!readableLabel) {\n    throw new Error('[internal] document entity link serialization requires a readable fallback label')\n  }\n  const allowedValueFields = getEntityTokenFieldNames(entityType)\n  const values = options.canonicalTarget?.values\n    ? Object.fromEntries(Array.from(allowedValueFields, (field) => [\n        field,\n        sanitizeDocumentEntityValue(options.canonicalTarget?.values?.[field]),\n      ]))\n    : null\n  const hasReadableValues = values\n    ? Object.values(values).some((value) => value !== null)\n    : false\n  return {\n    id: link.id,\n    entityType,\n    entityId: canOpen\n      ? options.canonicalTarget?.id ?? getDocumentEntityLinkEntityId(link)\n      : null,\n    label: canOpen ? readableLabel : restrictedLabel ?? readableLabel,\n    href: canOpen\n      ? options.canonicalTarget?.href ?? link.hrefSnapshot\n      : null,\n    canOpen,\n    source: link.source,\n    createdAt: link.createdAt.toISOString(),\n    updatedAt: link.updatedAt.toISOString(),\n    ...(canOpen && hasReadableValues && values ? { values } : {}),\n  }\n}\n"],
+  "mappings": "AACA,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;AAC9B,SAAS,0BAA0B;AAKnC,SAAS,qCAAqC;AAC9C,SAAS,gCAAgC;AACzC,SAAS,+CAA+C;AAqCxD,MAAM,eAAiC;AAAA,EACrC,kBAAkB;AAAA,EAClB,cAAc;AAAA,EACd,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,cAAc;AAAA,EACd,kBAAkB;AACpB;AAEA,SAAS,4BAA4B,OAA+B;AAClE,QAAM,QAAQ,8BAA8B,KAAK;AACjD,SAAO,SAAS,MAAM,UAAU,MAAS,QAAQ;AACnD;AAEO,SAAS,8BACd,YACA,UACkB;AAClB,QAAM,SAAS,EAAE,GAAG,aAAa;AACjC,MAAI,eAAe,qBAAqB,eAAe,oBAAoB;AACzE,WAAO,mBAAmB;AAC1B,WAAO,eAAe,eAAe,oBAAoB,WAAW;AAAA,EACtE,WAAW,eAAe,QAAQ;AAChC,WAAO,SAAS;AAAA,EAClB,WAAW,eAAe,WAAW;AACnC,WAAO,YAAY;AAAA,EACrB,WAAW,eAAe,iBAAiB;AACzC,WAAO,iBAAiB;AAAA,EAC1B,WAAW,eAAe,SAAS;AACjC,WAAO,UAAU;AAAA,EACnB,WAAW,eAAe,YAAY;AACpC,WAAO,mBAAmB;AAAA,EAC5B,OAAO;AACL,WAAO,eAAe;AAAA,EACxB;AACA,SAAO;AACT;AAEO,SAAS,mCACd,YACA,UACkB;AAClB,SAAO,8BAA8B,YAAY,QAAQ;AAC3D;AAEO,SAAS,0BAA0B,MAA8C;AACtF,MAAI,KAAK,kBAAkB;AACzB,WAAO,KAAK,iBAAiB,YAAY,qBAAqB;AAAA,EAChE;AACA,MAAI,KAAK,OAAQ,QAAO;AACxB,MAAI,KAAK,UAAW,QAAO;AAC3B,MAAI,KAAK,eAAgB,QAAO;AAChC,MAAI,KAAK,QAAS,QAAO;AACzB,MAAI,KAAK,iBAAkB,QAAO;AAClC,SAAO;AACT;AAEO,SAAS,8BAA8B,MAAkC;AAC9E,SAAO,KAAK,oBACP,KAAK,UACL,KAAK,aACL,KAAK,kBACL,KAAK,WACL,KAAK,oBACL,KAAK,gBACL;AACP;AAEO,SAAS,6BAA6B,OAMZ;AAC/B,QAAM,gBAAgB,8BAA8B,MAAM,KAAK,KAAK;AACpE,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,oFAAoF;AAAA,EACtG;AACA,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,YAAY,MAAM;AAAA,IAClB,UAAU,MAAM,MAAM;AAAA,IACtB,gBAAgB,MAAM,MAAM;AAAA,IAC5B;AAAA,IACA,cAAc,MAAM,KAAK;AAAA,IACzB,QAAQ,MAAM,KAAK;AAAA,IACnB,iBAAiB,MAAM;AAAA,IACvB,GAAG,8BAA8B,MAAM,KAAK,YAAY,MAAM,KAAK,QAAQ;AAAA,EAC7E;AACF;AAEA,eAAsB,wBACpB,IACA,YACA,OACA,UAAqC,CAAC,GACP;AAC/B,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,GAAI,QAAQ,cAAc,CAAC,IAAI,EAAE,WAAW,KAAK;AAAA,IACnD;AAAA,IACA,QAAQ,cACJ,EAAE,SAAS,EAAE,WAAW,MAAM,EAAE,IAChC;AAAA,MACE,SAAS,EAAE,WAAW,MAAM;AAAA,MAC5B,OAAO,0CAA0C;AAAA,IACnD;AAAA,IACJ;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAa,yCAAwC,KAAK;AACvE,SAAO;AACT;AAEO,SAAS,wCACd,OACM;AACN,MAAI,MAAM,UAAU,wCAAyC;AAC7D,QAAM,IAAI,cAAc,KAAK,EAAE,OAAO,gCAAgC,CAAC;AACzE;AAGA,eAAsB,iCACpB,IACA,YACA,OACe;AACf,QAAM,cAAc,MAAM,GAAG,MAAM,oBAAoB;AAAA,IACrD;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,cAAc,wCAAyC;AAC3D,QAAM,IAAI,cAAc,KAAK,EAAE,OAAO,gCAAgC,CAAC;AACzE;AAEO,SAAS,4BACd,MACA,SAgBA;AACA,QAAM,aAAa,0BAA0B,IAAI;AACjD,QAAM,kBAAkB,8BAA8B,QAAQ,eAAe;AAC7E,QAAM,iBAAiB,QAAQ,kBAC3B,8BAA8B,QAAQ,gBAAgB,KAAK,IAC3D;AACJ,QAAM,gBAAgB,8BAA8B,KAAK,aAAa;AACtE,QAAM,UAAU,QAAQ,YACtB,QAAQ,kBAAkB,QAAQ,cAAc,IAAI,QAAQ,aAAa;AAE3E,QAAM,gBAAgB,UAAU,kBAAkB,gBAAgB;AAClE,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,kFAAkF;AAAA,EACpG;AACA,QAAM,qBAAqB,yBAAyB,UAAU;AAC9D,QAAM,SAAS,QAAQ,iBAAiB,SACpC,OAAO,YAAY,MAAM,KAAK,oBAAoB,CAAC,UAAU;AAAA,IAC3D;AAAA,IACA,4BAA4B,QAAQ,iBAAiB,SAAS,KAAK,CAAC;AAAA,EACtE,CAAC,CAAC,IACF;AACJ,QAAM,oBAAoB,SACtB,OAAO,OAAO,MAAM,EAAE,KAAK,CAAC,UAAU,UAAU,IAAI,IACpD;AACJ,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT;AAAA,IACA,UAAU,UACN,QAAQ,iBAAiB,MAAM,8BAA8B,IAAI,IACjE;AAAA,IACJ,OAAO,UAAU,gBAAgB,mBAAmB;AAAA,IACpD,MAAM,UACF,QAAQ,iBAAiB,QAAQ,KAAK,eACtC;AAAA,IACJ;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK,UAAU,YAAY;AAAA,IACtC,WAAW,KAAK,UAAU,YAAY;AAAA,IACtC,GAAI,WAAW,qBAAqB,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,EAC7D;AACF;",
+  "names": []
+}

package/dist/modules/documents/lib/entityRegistry.js

@@ -0,0 +1,258 @@
+import {
+  firstSafeDocumentsDisplayLabel,
+  sanitizeDocumentsDisplayLabel
+} from "./displayLabels.js";
+function readRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function readString(item, ...keys) {
+  for (const key of keys) {
+    const value = item[key];
+    if (typeof value === "string" && value.trim().length > 0) return value.trim();
+  }
+  return null;
+}
+function readDisplayString(item, ...keys) {
+  return firstSafeDocumentsDisplayLabel(...keys.map((key) => item[key]));
+}
+function readNestedString(item, parentKey, ...keys) {
+  const parent = readRecord(item[parentKey]);
+  return parent ? readString(parent, ...keys) : null;
+}
+function readNestedDisplayString(item, parentKey, ...keys) {
+  const parent = readRecord(item[parentKey]);
+  return parent ? readDisplayString(parent, ...keys) : null;
+}
+function readDisplayTextValue(item, ...keys) {
+  for (const key of keys) {
+    const value = item[key];
+    const safe = typeof value === "number" && Number.isFinite(value) ? sanitizeDocumentsDisplayLabel(String(value)) : sanitizeDocumentsDisplayLabel(value);
+    if (safe) return safe;
+  }
+  return null;
+}
+function optionalSubtitle(value) {
+  return value ?? void 0;
+}
+function mapCustomerItem(item) {
+  const id = readString(item, "id");
+  const email = readDisplayString(item, "email", "primaryEmail", "primary_email");
+  const label = readDisplayString(item, "name", "displayName", "display_name") ?? email;
+  if (!id || !label) return null;
+  return { id, label, subtitle: optionalSubtitle(email) };
+}
+function mapDealItem(item) {
+  const id = readString(item, "id");
+  const label = readDisplayString(item, "title");
+  if (!id || !label) return null;
+  return { id, label, subtitle: optionalSubtitle(readDisplayString(item, "status")) };
+}
+function mapProductItem(item) {
+  const id = readString(item, "id");
+  const label = readDisplayString(item, "title");
+  if (!id || !label) return null;
+  return { id, label, subtitle: optionalSubtitle(readDisplayString(item, "sku")) };
+}
+function mapCatalogOfferItem(item) {
+  const id = readString(item, "id");
+  const productId = readString(item, "productId", "product_id") ?? readNestedString(item, "product", "id");
+  const productTitle = readNestedDisplayString(item, "product", "title", "name");
+  const label = readDisplayString(item, "title", "name") ?? productTitle;
+  if (!id || !productId || !label) return null;
+  const productSku = readNestedDisplayString(item, "product", "sku");
+  return {
+    id,
+    label,
+    subtitle: optionalSubtitle(productTitle ?? productSku),
+    href: `/backend/catalog/products/${productId}`
+  };
+}
+function mapSalesDocumentItem(item, numberKeys) {
+  const id = readString(item, "id");
+  const label = readDisplayString(item, ...numberKeys, "number", "title");
+  if (!id || !label) return null;
+  return { id, label, subtitle: optionalSubtitle(readDisplayString(item, "status")) };
+}
+function mapDocumentItem(item) {
+  const id = readString(item, "id");
+  const label = readDisplayString(item, "title");
+  if (!id || !label) return null;
+  const archivedAt = item.archivedAt ?? item.archived_at;
+  return {
+    id,
+    label,
+    archivedAt: typeof archivedAt === "string" && archivedAt.length > 0 ? archivedAt : null
+  };
+}
+function field(fieldName, labelKey, keys) {
+  return {
+    field: fieldName,
+    labelKey,
+    extract: (item) => readDisplayTextValue(item, ...keys)
+  };
+}
+function exactIdPath(pathPrefix, id) {
+  return `${pathPrefix}/${id}`;
+}
+const CATALOG_PRODUCT_HREF_PATTERN = /^\/backend\/catalog\/products\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function buildIdAddressableEntry(input) {
+  return {
+    ...input,
+    resolveHref: (item) => input.href(item.id),
+    isCanonicalHref: (item, href) => href === input.href(item.id)
+  };
+}
+function readItemsArray(response) {
+  if (Array.isArray(response)) {
+    return response.map(readRecord).filter((item) => item !== null);
+  }
+  const record = readRecord(response);
+  const candidates = [record?.items, record?.data];
+  for (const candidate of candidates) {
+    if (Array.isArray(candidate)) {
+      return candidate.map(readRecord).filter((item) => item !== null);
+    }
+  }
+  return [];
+}
+const DOCUMENT_ENTITY_REGISTRY = [
+  buildIdAddressableEntry({
+    type: "customer-person",
+    labelKey: "documents.entities.customerPerson",
+    searchPath: "/api/customers/people",
+    mapItem: mapCustomerItem,
+    href: (id) => exactIdPath("/backend/customers/people", id),
+    requiredModule: "customers",
+    requiredFeatureModule: "customers",
+    requiredFeature: "customers.people.view",
+    tokenFields: [
+      field("name", "documents.entityFields.name", ["name", "displayName", "display_name"]),
+      field("email", "documents.entityFields.email", ["email", "primaryEmail", "primary_email"]),
+      field("phone", "documents.entityFields.phone", ["phone", "primaryPhone", "primary_phone"])
+    ]
+  }),
+  buildIdAddressableEntry({
+    type: "customer-company",
+    labelKey: "documents.entities.customerCompany",
+    searchPath: "/api/customers/companies",
+    mapItem: mapCustomerItem,
+    href: (id) => exactIdPath("/backend/customers/companies", id),
+    requiredModule: "customers",
+    requiredFeatureModule: "customers",
+    requiredFeature: "customers.companies.view",
+    tokenFields: [
+      field("name", "documents.entityFields.name", ["name", "displayName", "display_name"]),
+      field("email", "documents.entityFields.email", ["email", "primaryEmail", "primary_email"]),
+      field("phone", "documents.entityFields.phone", ["phone", "primaryPhone", "primary_phone"])
+    ]
+  }),
+  buildIdAddressableEntry({
+    type: "deal",
+    labelKey: "documents.entities.deal",
+    searchPath: "/api/customers/deals",
+    mapItem: mapDealItem,
+    href: (id) => exactIdPath("/backend/customers/deals", id),
+    requiredModule: "customers",
+    requiredFeatureModule: "customers",
+    requiredFeature: "customers.deals.view",
+    tokenFields: [
+      field("title", "documents.entityFields.title", ["title"]),
+      field("status", "documents.entityFields.status", ["status"]),
+      field("value", "documents.entityFields.value", ["value", "valueAmount", "value_amount"]),
+      field("valueCurrency", "documents.entityFields.valueCurrency", ["valueCurrency", "value_currency"])
+    ]
+  }),
+  buildIdAddressableEntry({
+    type: "product",
+    labelKey: "documents.entities.product",
+    searchPath: "/api/catalog/products",
+    mapItem: mapProductItem,
+    href: (id) => exactIdPath("/backend/catalog/products", id),
+    requiredModule: "catalog",
+    requiredFeatureModule: "catalog",
+    requiredFeature: "catalog.products.view",
+    tokenFields: [
+      field("title", "documents.entityFields.title", ["title"]),
+      field("subtitle", "documents.entityFields.subtitle", ["subtitle"]),
+      field("sku", "documents.entityFields.sku", ["sku"])
+    ]
+  }),
+  {
+    type: "catalog-offer",
+    labelKey: "documents.entities.catalogOffer",
+    searchPath: "/api/catalog/offers",
+    mapItem: mapCatalogOfferItem,
+    href: () => "",
+    resolveHref: (item) => {
+      const href = item.href ?? null;
+      return href && CATALOG_PRODUCT_HREF_PATTERN.test(href) ? href : null;
+    },
+    isCanonicalHref: (item, href) => Boolean(item.href && href === item.href && CATALOG_PRODUCT_HREF_PATTERN.test(href)),
+    requiredModule: "catalog",
+    requiredFeatureModule: "sales",
+    requiredFeature: "sales.channels.manage",
+    tokenFields: [
+      field("title", "documents.entityFields.title", ["title", "name"]),
+      field("description", "documents.entityFields.description", ["description"])
+    ]
+  },
+  buildIdAddressableEntry({
+    type: "quote",
+    labelKey: "documents.entities.quote",
+    searchPath: "/api/sales/quotes",
+    mapItem: (item) => mapSalesDocumentItem(item, ["quoteNumber", "quote_number"]),
+    href: (id) => exactIdPath("/backend/sales/quotes", id),
+    requiredModule: "sales",
+    requiredFeatureModule: "sales",
+    requiredFeature: "sales.quotes.view",
+    tokenFields: [
+      field("number", "documents.entityFields.number", ["quoteNumber", "quote_number", "number"]),
+      field("status", "documents.entityFields.status", ["status"]),
+      field("total", "documents.entityFields.total", ["grandTotalGross", "grand_total_gross", "total"]),
+      field("currency", "documents.entityFields.currency", ["currencyCode", "currency_code"])
+    ]
+  }),
+  buildIdAddressableEntry({
+    type: "sales-order",
+    labelKey: "documents.entities.salesOrder",
+    searchPath: "/api/sales/orders",
+    mapItem: (item) => mapSalesDocumentItem(item, ["orderNumber", "order_number"]),
+    href: (id) => exactIdPath("/backend/sales/orders", id),
+    requiredModule: "sales",
+    requiredFeatureModule: "sales",
+    requiredFeature: "sales.orders.view",
+    tokenFields: [
+      field("number", "documents.entityFields.number", ["orderNumber", "order_number", "number"]),
+      field("status", "documents.entityFields.status", ["status"]),
+      field("total", "documents.entityFields.total", ["grandTotalGross", "grand_total_gross", "total"]),
+      field("currency", "documents.entityFields.currency", ["currencyCode", "currency_code"])
+    ]
+  }),
+  buildIdAddressableEntry({
+    type: "document",
+    labelKey: "documents.entities.document",
+    searchPath: "/api/documents",
+    mapItem: mapDocumentItem,
+    href: (id) => exactIdPath("/backend/documents", id),
+    requiredModule: "documents",
+    requiredFeatureModule: "documents",
+    requiredFeature: "documents.view",
+    tokenFields: [
+      field("title", "documents.entityFields.title", ["title"])
+    ]
+  })
+];
+function getEntityRegistryEntry(type) {
+  return DOCUMENT_ENTITY_REGISTRY.find((entry) => entry.type === type) ?? null;
+}
+function getEntityTokenFieldNames(type) {
+  const entry = getEntityRegistryEntry(type);
+  return new Set(entry?.tokenFields.map((tokenField) => tokenField.field) ?? []);
+}
+export {
+  DOCUMENT_ENTITY_REGISTRY,
+  getEntityRegistryEntry,
+  getEntityTokenFieldNames,
+  readItemsArray
+};
+//# sourceMappingURL=entityRegistry.js.map

package/dist/modules/documents/lib/entityRegistry.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/entityRegistry.ts"],
+  "sourcesContent": ["import type { DocumentEntityType } from '../data/validators'\nimport {\n  firstSafeDocumentsDisplayLabel,\n  sanitizeDocumentsDisplayLabel,\n} from './displayLabels'\n\nexport type { DocumentEntityType } from '../data/validators'\n\nexport type EntityPickerItem = {\n  id: string\n  label: string\n  subtitle?: string\n  href?: string\n  archivedAt?: string | null\n}\n\nexport type EntityTokenField = {\n  field: string\n  labelKey: string\n  extract: (item: Record<string, unknown>) => string | null\n}\n\nexport type EntityRegistryEntry = {\n  type: DocumentEntityType\n  labelKey: string\n  searchPath: string\n  mapItem: (item: Record<string, unknown>) => EntityPickerItem | null\n  href: (id: string) => string\n  tokenFields: EntityTokenField[]\n}\n\n/**\n * Internal registry contract used by Documents integrations. Keep the\n * long-standing EntityRegistryEntry shape above assignable for deep-import\n * consumers while requiring every built-in entry to declare its capability\n * and canonical-link policy.\n */\nexport type DocumentEntityRegistryEntry = EntityRegistryEntry & {\n  resolveHref: (item: EntityPickerItem) => string | null\n  isCanonicalHref: (item: Pick<EntityPickerItem, 'id' | 'href'>, href: string) => boolean\n  requiredModule: string\n  /**\n   * Module that owns `requiredFeature`. This is usually the same as\n   * `requiredModule`, but catalog offers are rendered by Catalog while their\n   * channel-access feature is owned by Sales. Keeping it explicit lets the\n   * server and ClientBootstrap-backed picker make the same fail-closed choice.\n   */\n  requiredFeatureModule: string\n  requiredFeature: string\n}\n\nfunction readRecord(value: unknown): Record<string, unknown> | null {\n  return value && typeof value === 'object' && !Array.isArray(value)\n    ? value as Record<string, unknown>\n    : null\n}\n\nfunction readString(item: Record<string, unknown>, ...keys: string[]): string | null {\n  for (const key of keys) {\n    const value = item[key]\n    if (typeof value === 'string' && value.trim().length > 0) return value.trim()\n  }\n  return null\n}\n\n/**\n * Cross-module records are an untrusted display boundary. Their identifiers\n * remain available to the registry for canonical routing, but a name, status,\n * SKU, or other rendered value must never fall back to an identifier-shaped\n * string. Continue through aliases so a malformed preferred field does not\n * hide a later readable value.\n */\nfunction readDisplayString(item: Record<string, unknown>, ...keys: string[]): string | null {\n  return firstSafeDocumentsDisplayLabel(...keys.map((key) => item[key]))\n}\n\nfunction readNestedString(\n  item: Record<string, unknown>,\n  parentKey: string,\n  ...keys: string[]\n): string | null {\n  const parent = readRecord(item[parentKey])\n  return parent ? readString(parent, ...keys) : null\n}\n\nfunction readNestedDisplayString(\n  item: Record<string, unknown>,\n  parentKey: string,\n  ...keys: string[]\n): string | null {\n  const parent = readRecord(item[parentKey])\n  return parent ? readDisplayString(parent, ...keys) : null\n}\n\nfunction readDisplayTextValue(item: Record<string, unknown>, ...keys: string[]): string | null {\n  for (const key of keys) {\n    const value = item[key]\n    const safe = typeof value === 'number' && Number.isFinite(value)\n      ? sanitizeDocumentsDisplayLabel(String(value))\n      : sanitizeDocumentsDisplayLabel(value)\n    if (safe) return safe\n  }\n  return null\n}\n\nfunction optionalSubtitle(value: string | null): string | undefined {\n  return value ?? undefined\n}\n\nfunction mapCustomerItem(item: Record<string, unknown>): EntityPickerItem | null {\n  const id = readString(item, 'id')\n  const email = readDisplayString(item, 'email', 'primaryEmail', 'primary_email')\n  const label = readDisplayString(item, 'name', 'displayName', 'display_name') ?? email\n  if (!id || !label) return null\n  return { id, label, subtitle: optionalSubtitle(email) }\n}\n\nfunction mapDealItem(item: Record<string, unknown>): EntityPickerItem | null {\n  const id = readString(item, 'id')\n  const label = readDisplayString(item, 'title')\n  if (!id || !label) return null\n  return { id, label, subtitle: optionalSubtitle(readDisplayString(item, 'status')) }\n}\n\nfunction mapProductItem(item: Record<string, unknown>): EntityPickerItem | null {\n  const id = readString(item, 'id')\n  const label = readDisplayString(item, 'title')\n  if (!id || !label) return null\n  return { id, label, subtitle: optionalSubtitle(readDisplayString(item, 'sku')) }\n}\n\nfunction mapCatalogOfferItem(item: Record<string, unknown>): EntityPickerItem | null {\n  const id = readString(item, 'id')\n  const productId = readString(item, 'productId', 'product_id')\n    ?? readNestedString(item, 'product', 'id')\n  const productTitle = readNestedDisplayString(item, 'product', 'title', 'name')\n  const label = readDisplayString(item, 'title', 'name') ?? productTitle\n  if (!id || !productId || !label) return null\n  const productSku = readNestedDisplayString(item, 'product', 'sku')\n  return {\n    id,\n    label,\n    subtitle: optionalSubtitle(productTitle ?? productSku),\n    href: `/backend/catalog/products/${productId}`,\n  }\n}\n\nfunction mapSalesDocumentItem(\n  item: Record<string, unknown>,\n  numberKeys: string[],\n): EntityPickerItem | null {\n  const id = readString(item, 'id')\n  const label = readDisplayString(item, ...numberKeys, 'number', 'title')\n  if (!id || !label) return null\n  return { id, label, subtitle: optionalSubtitle(readDisplayString(item, 'status')) }\n}\n\nfunction mapDocumentItem(item: Record<string, unknown>): EntityPickerItem | null {\n  const id = readString(item, 'id')\n  const label = readDisplayString(item, 'title')\n  if (!id || !label) return null\n  const archivedAt = item.archivedAt ?? item.archived_at\n  return {\n    id,\n    label,\n    archivedAt: typeof archivedAt === 'string' && archivedAt.length > 0 ? archivedAt : null,\n  }\n}\n\nfunction field(fieldName: string, labelKey: string, keys: string[]): EntityTokenField {\n  return {\n    field: fieldName,\n    labelKey,\n    extract: (item) => readDisplayTextValue(item, ...keys),\n  }\n}\n\nfunction exactIdPath(pathPrefix: string, id: string): string {\n  return `${pathPrefix}/${id}`\n}\n\nconst CATALOG_PRODUCT_HREF_PATTERN =\n  /^\\/backend\\/catalog\\/products\\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\nfunction buildIdAddressableEntry(\n  input: Omit<DocumentEntityRegistryEntry, 'resolveHref' | 'isCanonicalHref'>,\n): DocumentEntityRegistryEntry {\n  return {\n    ...input,\n    resolveHref: (item) => input.href(item.id),\n    isCanonicalHref: (item, href) => href === input.href(item.id),\n  }\n}\n\nexport function readItemsArray(response: unknown): Record<string, unknown>[] {\n  if (Array.isArray(response)) {\n    return response.map(readRecord).filter((item): item is Record<string, unknown> => item !== null)\n  }\n\n  const record = readRecord(response)\n  const candidates = [record?.items, record?.data]\n  for (const candidate of candidates) {\n    if (Array.isArray(candidate)) {\n      return candidate.map(readRecord).filter((item): item is Record<string, unknown> => item !== null)\n    }\n  }\n  return []\n}\n\nexport const DOCUMENT_ENTITY_REGISTRY: DocumentEntityRegistryEntry[] = [\n  buildIdAddressableEntry({\n    type: 'customer-person',\n    labelKey: 'documents.entities.customerPerson',\n    searchPath: '/api/customers/people',\n    mapItem: mapCustomerItem,\n    href: (id) => exactIdPath('/backend/customers/people', id),\n    requiredModule: 'customers',\n    requiredFeatureModule: 'customers',\n    requiredFeature: 'customers.people.view',\n    tokenFields: [\n      field('name', 'documents.entityFields.name', ['name', 'displayName', 'display_name']),\n      field('email', 'documents.entityFields.email', ['email', 'primaryEmail', 'primary_email']),\n      field('phone', 'documents.entityFields.phone', ['phone', 'primaryPhone', 'primary_phone']),\n    ],\n  }),\n  buildIdAddressableEntry({\n    type: 'customer-company',\n    labelKey: 'documents.entities.customerCompany',\n    searchPath: '/api/customers/companies',\n    mapItem: mapCustomerItem,\n    href: (id) => exactIdPath('/backend/customers/companies', id),\n    requiredModule: 'customers',\n    requiredFeatureModule: 'customers',\n    requiredFeature: 'customers.companies.view',\n    tokenFields: [\n      field('name', 'documents.entityFields.name', ['name', 'displayName', 'display_name']),\n      field('email', 'documents.entityFields.email', ['email', 'primaryEmail', 'primary_email']),\n      field('phone', 'documents.entityFields.phone', ['phone', 'primaryPhone', 'primary_phone']),\n    ],\n  }),\n  buildIdAddressableEntry({\n    type: 'deal',\n    labelKey: 'documents.entities.deal',\n    searchPath: '/api/customers/deals',\n    mapItem: mapDealItem,\n    href: (id) => exactIdPath('/backend/customers/deals', id),\n    requiredModule: 'customers',\n    requiredFeatureModule: 'customers',\n    requiredFeature: 'customers.deals.view',\n    tokenFields: [\n      field('title', 'documents.entityFields.title', ['title']),\n      field('status', 'documents.entityFields.status', ['status']),\n      field('value', 'documents.entityFields.value', ['value', 'valueAmount', 'value_amount']),\n      field('valueCurrency', 'documents.entityFields.valueCurrency', ['valueCurrency', 'value_currency']),\n    ],\n  }),\n  buildIdAddressableEntry({\n    type: 'product',\n    labelKey: 'documents.entities.product',\n    searchPath: '/api/catalog/products',\n    mapItem: mapProductItem,\n    href: (id) => exactIdPath('/backend/catalog/products', id),\n    requiredModule: 'catalog',\n    requiredFeatureModule: 'catalog',\n    requiredFeature: 'catalog.products.view',\n    tokenFields: [\n      field('title', 'documents.entityFields.title', ['title']),\n      field('subtitle', 'documents.entityFields.subtitle', ['subtitle']),\n      field('sku', 'documents.entityFields.sku', ['sku']),\n    ],\n  }),\n  {\n    type: 'catalog-offer',\n    labelKey: 'documents.entities.catalogOffer',\n    searchPath: '/api/catalog/offers',\n    mapItem: mapCatalogOfferItem,\n    href: () => '',\n    resolveHref: (item) => {\n      const href = item.href ?? null\n      return href && CATALOG_PRODUCT_HREF_PATTERN.test(href) ? href : null\n    },\n    isCanonicalHref: (item, href) => Boolean(item.href && href === item.href && CATALOG_PRODUCT_HREF_PATTERN.test(href)),\n    requiredModule: 'catalog',\n    requiredFeatureModule: 'sales',\n    requiredFeature: 'sales.channels.manage',\n    tokenFields: [\n      field('title', 'documents.entityFields.title', ['title', 'name']),\n      field('description', 'documents.entityFields.description', ['description']),\n    ],\n  },\n  buildIdAddressableEntry({\n    type: 'quote',\n    labelKey: 'documents.entities.quote',\n    searchPath: '/api/sales/quotes',\n    mapItem: (item) => mapSalesDocumentItem(item, ['quoteNumber', 'quote_number']),\n    href: (id) => exactIdPath('/backend/sales/quotes', id),\n    requiredModule: 'sales',\n    requiredFeatureModule: 'sales',\n    requiredFeature: 'sales.quotes.view',\n    tokenFields: [\n      field('number', 'documents.entityFields.number', ['quoteNumber', 'quote_number', 'number']),\n      field('status', 'documents.entityFields.status', ['status']),\n      field('total', 'documents.entityFields.total', ['grandTotalGross', 'grand_total_gross', 'total']),\n      field('currency', 'documents.entityFields.currency', ['currencyCode', 'currency_code']),\n    ],\n  }),\n  buildIdAddressableEntry({\n    type: 'sales-order',\n    labelKey: 'documents.entities.salesOrder',\n    searchPath: '/api/sales/orders',\n    mapItem: (item) => mapSalesDocumentItem(item, ['orderNumber', 'order_number']),\n    href: (id) => exactIdPath('/backend/sales/orders', id),\n    requiredModule: 'sales',\n    requiredFeatureModule: 'sales',\n    requiredFeature: 'sales.orders.view',\n    tokenFields: [\n      field('number', 'documents.entityFields.number', ['orderNumber', 'order_number', 'number']),\n      field('status', 'documents.entityFields.status', ['status']),\n      field('total', 'documents.entityFields.total', ['grandTotalGross', 'grand_total_gross', 'total']),\n      field('currency', 'documents.entityFields.currency', ['currencyCode', 'currency_code']),\n    ],\n  }),\n  buildIdAddressableEntry({\n    type: 'document',\n    labelKey: 'documents.entities.document',\n    searchPath: '/api/documents',\n    mapItem: mapDocumentItem,\n    href: (id) => exactIdPath('/backend/documents', id),\n    requiredModule: 'documents',\n    requiredFeatureModule: 'documents',\n    requiredFeature: 'documents.view',\n    tokenFields: [\n      field('title', 'documents.entityFields.title', ['title']),\n    ],\n  }),\n]\n\nexport function getEntityRegistryEntry(type: string): DocumentEntityRegistryEntry | null {\n  return DOCUMENT_ENTITY_REGISTRY.find((entry) => entry.type === type) ?? null\n}\n\nexport function getEntityTokenFieldNames(type: DocumentEntityType): Set<string> {\n  const entry = getEntityRegistryEntry(type)\n  return new Set(entry?.tokenFields.map((tokenField) => tokenField.field) ?? [])\n}\n"],
+  "mappings": "AACA;AAAA,EACE;AAAA,EACA;AAAA,OACK;AA+CP,SAAS,WAAW,OAAgD;AAClE,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAC7D,QACA;AACN;AAEA,SAAS,WAAW,SAAkC,MAA+B;AACnF,aAAW,OAAO,MAAM;AACtB,UAAM,QAAQ,KAAK,GAAG;AACtB,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO,MAAM,KAAK;AAAA,EAC9E;AACA,SAAO;AACT;AASA,SAAS,kBAAkB,SAAkC,MAA+B;AAC1F,SAAO,+BAA+B,GAAG,KAAK,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC;AACvE;AAEA,SAAS,iBACP,MACA,cACG,MACY;AACf,QAAM,SAAS,WAAW,KAAK,SAAS,CAAC;AACzC,SAAO,SAAS,WAAW,QAAQ,GAAG,IAAI,IAAI;AAChD;AAEA,SAAS,wBACP,MACA,cACG,MACY;AACf,QAAM,SAAS,WAAW,KAAK,SAAS,CAAC;AACzC,SAAO,SAAS,kBAAkB,QAAQ,GAAG,IAAI,IAAI;AACvD;AAEA,SAAS,qBAAqB,SAAkC,MAA+B;AAC7F,aAAW,OAAO,MAAM;AACtB,UAAM,QAAQ,KAAK,GAAG;AACtB,UAAM,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAC3D,8BAA8B,OAAO,KAAK,CAAC,IAC3C,8BAA8B,KAAK;AACvC,QAAI,KAAM,QAAO;AAAA,EACnB;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,OAA0C;AAClE,SAAO,SAAS;AAClB;AAEA,SAAS,gBAAgB,MAAwD;AAC/E,QAAM,KAAK,WAAW,MAAM,IAAI;AAChC,QAAM,QAAQ,kBAAkB,MAAM,SAAS,gBAAgB,eAAe;AAC9E,QAAM,QAAQ,kBAAkB,MAAM,QAAQ,eAAe,cAAc,KAAK;AAChF,MAAI,CAAC,MAAM,CAAC,MAAO,QAAO;AAC1B,SAAO,EAAE,IAAI,OAAO,UAAU,iBAAiB,KAAK,EAAE;AACxD;AAEA,SAAS,YAAY,MAAwD;AAC3E,QAAM,KAAK,WAAW,MAAM,IAAI;AAChC,QAAM,QAAQ,kBAAkB,MAAM,OAAO;AAC7C,MAAI,CAAC,MAAM,CAAC,MAAO,QAAO;AAC1B,SAAO,EAAE,IAAI,OAAO,UAAU,iBAAiB,kBAAkB,MAAM,QAAQ,CAAC,EAAE;AACpF;AAEA,SAAS,eAAe,MAAwD;AAC9E,QAAM,KAAK,WAAW,MAAM,IAAI;AAChC,QAAM,QAAQ,kBAAkB,MAAM,OAAO;AAC7C,MAAI,CAAC,MAAM,CAAC,MAAO,QAAO;AAC1B,SAAO,EAAE,IAAI,OAAO,UAAU,iBAAiB,kBAAkB,MAAM,KAAK,CAAC,EAAE;AACjF;AAEA,SAAS,oBAAoB,MAAwD;AACnF,QAAM,KAAK,WAAW,MAAM,IAAI;AAChC,QAAM,YAAY,WAAW,MAAM,aAAa,YAAY,KACvD,iBAAiB,MAAM,WAAW,IAAI;AAC3C,QAAM,eAAe,wBAAwB,MAAM,WAAW,SAAS,MAAM;AAC7E,QAAM,QAAQ,kBAAkB,MAAM,SAAS,MAAM,KAAK;AAC1D,MAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAO,QAAO;AACxC,QAAM,aAAa,wBAAwB,MAAM,WAAW,KAAK;AACjE,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,UAAU,iBAAiB,gBAAgB,UAAU;AAAA,IACrD,MAAM,6BAA6B,SAAS;AAAA,EAC9C;AACF;AAEA,SAAS,qBACP,MACA,YACyB;AACzB,QAAM,KAAK,WAAW,MAAM,IAAI;AAChC,QAAM,QAAQ,kBAAkB,MAAM,GAAG,YAAY,UAAU,OAAO;AACtE,MAAI,CAAC,MAAM,CAAC,MAAO,QAAO;AAC1B,SAAO,EAAE,IAAI,OAAO,UAAU,iBAAiB,kBAAkB,MAAM,QAAQ,CAAC,EAAE;AACpF;AAEA,SAAS,gBAAgB,MAAwD;AAC/E,QAAM,KAAK,WAAW,MAAM,IAAI;AAChC,QAAM,QAAQ,kBAAkB,MAAM,OAAO;AAC7C,MAAI,CAAC,MAAM,CAAC,MAAO,QAAO;AAC1B,QAAM,aAAa,KAAK,cAAc,KAAK;AAC3C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAY,OAAO,eAAe,YAAY,WAAW,SAAS,IAAI,aAAa;AAAA,EACrF;AACF;AAEA,SAAS,MAAM,WAAmB,UAAkB,MAAkC;AACpF,SAAO;AAAA,IACL,OAAO;AAAA,IACP;AAAA,IACA,SAAS,CAAC,SAAS,qBAAqB,MAAM,GAAG,IAAI;AAAA,EACvD;AACF;AAEA,SAAS,YAAY,YAAoB,IAAoB;AAC3D,SAAO,GAAG,UAAU,IAAI,EAAE;AAC5B;AAEA,MAAM,+BACJ;AAEF,SAAS,wBACP,OAC6B;AAC7B,SAAO;AAAA,IACL,GAAG;AAAA,IACH,aAAa,CAAC,SAAS,MAAM,KAAK,KAAK,EAAE;AAAA,IACzC,iBAAiB,CAAC,MAAM,SAAS,SAAS,MAAM,KAAK,KAAK,EAAE;AAAA,EAC9D;AACF;AAEO,SAAS,eAAe,UAA8C;AAC3E,MAAI,MAAM,QAAQ,QAAQ,GAAG;AAC3B,WAAO,SAAS,IAAI,UAAU,EAAE,OAAO,CAAC,SAA0C,SAAS,IAAI;AAAA,EACjG;AAEA,QAAM,SAAS,WAAW,QAAQ;AAClC,QAAM,aAAa,CAAC,QAAQ,OAAO,QAAQ,IAAI;AAC/C,aAAW,aAAa,YAAY;AAClC,QAAI,MAAM,QAAQ,SAAS,GAAG;AAC5B,aAAO,UAAU,IAAI,UAAU,EAAE,OAAO,CAAC,SAA0C,SAAS,IAAI;AAAA,IAClG;AAAA,EACF;AACA,SAAO,CAAC;AACV;AAEO,MAAM,2BAA0D;AAAA,EACrE,wBAAwB;AAAA,IACtB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,MAAM,CAAC,OAAO,YAAY,6BAA6B,EAAE;AAAA,IACzD,gBAAgB;AAAA,IAChB,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,IACjB,aAAa;AAAA,MACX,MAAM,QAAQ,+BAA+B,CAAC,QAAQ,eAAe,cAAc,CAAC;AAAA,MACpF,MAAM,SAAS,gCAAgC,CAAC,SAAS,gBAAgB,eAAe,CAAC;AAAA,MACzF,MAAM,SAAS,gCAAgC,CAAC,SAAS,gBAAgB,eAAe,CAAC;AAAA,IAC3F;AAAA,EACF,CAAC;AAAA,EACD,wBAAwB;AAAA,IACtB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,MAAM,CAAC,OAAO,YAAY,gCAAgC,EAAE;AAAA,IAC5D,gBAAgB;AAAA,IAChB,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,IACjB,aAAa;AAAA,MACX,MAAM,QAAQ,+BAA+B,CAAC,QAAQ,eAAe,cAAc,CAAC;AAAA,MACpF,MAAM,SAAS,gCAAgC,CAAC,SAAS,gBAAgB,eAAe,CAAC;AAAA,MACzF,MAAM,SAAS,gCAAgC,CAAC,SAAS,gBAAgB,eAAe,CAAC;AAAA,IAC3F;AAAA,EACF,CAAC;AAAA,EACD,wBAAwB;AAAA,IACtB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,MAAM,CAAC,OAAO,YAAY,4BAA4B,EAAE;AAAA,IACxD,gBAAgB;AAAA,IAChB,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,IACjB,aAAa;AAAA,MACX,MAAM,SAAS,gCAAgC,CAAC,OAAO,CAAC;AAAA,MACxD,MAAM,UAAU,iCAAiC,CAAC,QAAQ,CAAC;AAAA,MAC3D,MAAM,SAAS,gCAAgC,CAAC,SAAS,eAAe,cAAc,CAAC;AAAA,MACvF,MAAM,iBAAiB,wCAAwC,CAAC,iBAAiB,gBAAgB,CAAC;AAAA,IACpG;AAAA,EACF,CAAC;AAAA,EACD,wBAAwB;AAAA,IACtB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,MAAM,CAAC,OAAO,YAAY,6BAA6B,EAAE;AAAA,IACzD,gBAAgB;AAAA,IAChB,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,IACjB,aAAa;AAAA,MACX,MAAM,SAAS,gCAAgC,CAAC,OAAO,CAAC;AAAA,MACxD,MAAM,YAAY,mCAAmC,CAAC,UAAU,CAAC;AAAA,MACjE,MAAM,OAAO,8BAA8B,CAAC,KAAK,CAAC;AAAA,IACpD;AAAA,EACF,CAAC;AAAA,EACD;AAAA,IACE,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,MAAM,MAAM;AAAA,IACZ,aAAa,CAAC,SAAS;AACrB,YAAM,OAAO,KAAK,QAAQ;AAC1B,aAAO,QAAQ,6BAA6B,KAAK,IAAI,IAAI,OAAO;AAAA,IAClE;AAAA,IACA,iBAAiB,CAAC,MAAM,SAAS,QAAQ,KAAK,QAAQ,SAAS,KAAK,QAAQ,6BAA6B,KAAK,IAAI,CAAC;AAAA,IACnH,gBAAgB;AAAA,IAChB,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,IACjB,aAAa;AAAA,MACX,MAAM,SAAS,gCAAgC,CAAC,SAAS,MAAM,CAAC;AAAA,MAChE,MAAM,eAAe,sCAAsC,CAAC,aAAa,CAAC;AAAA,IAC5E;AAAA,EACF;AAAA,EACA,wBAAwB;AAAA,IACtB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,SAAS,CAAC,SAAS,qBAAqB,MAAM,CAAC,eAAe,cAAc,CAAC;AAAA,IAC7E,MAAM,CAAC,OAAO,YAAY,yBAAyB,EAAE;AAAA,IACrD,gBAAgB;AAAA,IAChB,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,IACjB,aAAa;AAAA,MACX,MAAM,UAAU,iCAAiC,CAAC,eAAe,gBAAgB,QAAQ,CAAC;AAAA,MAC1F,MAAM,UAAU,iCAAiC,CAAC,QAAQ,CAAC;AAAA,MAC3D,MAAM,SAAS,gCAAgC,CAAC,mBAAmB,qBAAqB,OAAO,CAAC;AAAA,MAChG,MAAM,YAAY,mCAAmC,CAAC,gBAAgB,eAAe,CAAC;AAAA,IACxF;AAAA,EACF,CAAC;AAAA,EACD,wBAAwB;AAAA,IACtB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,SAAS,CAAC,SAAS,qBAAqB,MAAM,CAAC,eAAe,cAAc,CAAC;AAAA,IAC7E,MAAM,CAAC,OAAO,YAAY,yBAAyB,EAAE;AAAA,IACrD,gBAAgB;AAAA,IAChB,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,IACjB,aAAa;AAAA,MACX,MAAM,UAAU,iCAAiC,CAAC,eAAe,gBAAgB,QAAQ,CAAC;AAAA,MAC1F,MAAM,UAAU,iCAAiC,CAAC,QAAQ,CAAC;AAAA,MAC3D,MAAM,SAAS,gCAAgC,CAAC,mBAAmB,qBAAqB,OAAO,CAAC;AAAA,MAChG,MAAM,YAAY,mCAAmC,CAAC,gBAAgB,eAAe,CAAC;AAAA,IACxF;AAAA,EACF,CAAC;AAAA,EACD,wBAAwB;AAAA,IACtB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,MAAM,CAAC,OAAO,YAAY,sBAAsB,EAAE;AAAA,IAClD,gBAAgB;AAAA,IAChB,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,IACjB,aAAa;AAAA,MACX,MAAM,SAAS,gCAAgC,CAAC,OAAO,CAAC;AAAA,IAC1D;AAAA,EACF,CAAC;AACH;AAEO,SAAS,uBAAuB,MAAkD;AACvF,SAAO,yBAAyB,KAAK,CAAC,UAAU,MAAM,SAAS,IAAI,KAAK;AAC1E;AAEO,SAAS,yBAAyB,MAAuC;AAC9E,QAAM,QAAQ,uBAAuB,IAAI;AACzC,SAAO,IAAI,IAAI,OAAO,YAAY,IAAI,CAAC,eAAe,WAAW,KAAK,KAAK,CAAC,CAAC;AAC/E;",
+  "names": []
+}

package/dist/modules/documents/lib/entityRegistry.server.js

@@ -0,0 +1,189 @@
+import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import {
+  fetchWithTimeout,
+  resolveTimeoutMs,
+  withTimeout
+} from "@open-mercato/shared/lib/http/fetchWithTimeout";
+import { getSecurityEmailBaseUrl } from "@open-mercato/shared/lib/url";
+import {
+  getEntityRegistryEntry,
+  readItemsArray
+} from "./entityRegistry.js";
+import { isDocumentEntityRegistryModuleEnabled } from "./entityRegistryAvailability.server.js";
+const DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS = 3e3;
+const MAX_REGISTRY_RESPONSE_BYTES = 1e6;
+async function readRegistryJsonBody(response, callerSignal, timeoutMs) {
+  return withTimeout(async (timeoutSignal) => {
+    const signals = [callerSignal, timeoutSignal];
+    for (const signal of signals) {
+      if (signal.aborted) {
+        throw signal.reason instanceof Error ? signal.reason : new DOMException("Aborted", "AbortError");
+      }
+    }
+    const reader = response.body?.getReader();
+    if (!reader) return null;
+    let aborted = null;
+    const listeners = signals.map((signal) => {
+      let handled = false;
+      const listener = () => {
+        if (handled) return;
+        handled = true;
+        aborted = signal.reason instanceof Error ? signal.reason : new DOMException("Aborted", "AbortError");
+        void reader.cancel(aborted).catch(() => void 0);
+      };
+      signal.addEventListener("abort", listener, { once: true });
+      if (signal.aborted) listener();
+      return { signal, listener };
+    });
+    const decoder = new TextDecoder();
+    let decoded = "";
+    let totalBytes = 0;
+    try {
+      while (true) {
+        const { done, value } = await reader.read();
+        if (done) break;
+        totalBytes += value.byteLength;
+        if (totalBytes > MAX_REGISTRY_RESPONSE_BYTES) {
+          await reader.cancel().catch(() => void 0);
+          throw new Error("[internal] Entity registry response exceeded the size limit");
+        }
+        decoded += decoder.decode(value, { stream: true });
+      }
+      if (aborted) throw aborted;
+      decoded += decoder.decode();
+    } finally {
+      for (const { signal, listener } of listeners) {
+        signal.removeEventListener("abort", listener);
+      }
+      reader.releaseLock();
+    }
+    try {
+      return JSON.parse(decoded);
+    } catch {
+      return null;
+    }
+  }, timeoutMs, "documents entity-registry response");
+}
+function buildForwardedHeaders(request) {
+  const headers = new Headers();
+  const cookie = request.headers.get("cookie");
+  const authorization = request.headers.get("authorization");
+  const apiKey = request.headers.get("x-api-key");
+  if (cookie) headers.set("cookie", cookie);
+  if (authorization) headers.set("authorization", authorization);
+  if (apiKey) headers.set("x-api-key", apiKey);
+  return headers;
+}
+async function verifyEntityRegistryTarget(request, input, options = {}) {
+  const entry = getEntityRegistryEntry(input.entityType);
+  if (!entry) {
+    throw new CrudHttpError(400, { error: "documents.links.invalidEntityType" });
+  }
+  if (!isDocumentEntityRegistryModuleEnabled(entry)) {
+    throw new CrudHttpError(503, { error: "documents.links.targetUnavailable" });
+  }
+  const timeoutMs = Math.min(
+    resolveTimeoutMs(options.timeoutMs, DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS),
+    DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS
+  );
+  const deadline = Date.now() + timeoutMs;
+  let response;
+  try {
+    const lookupUrl = new URL(entry.searchPath, getSecurityEmailBaseUrl());
+    lookupUrl.searchParams.set("id", input.entityId);
+    lookupUrl.searchParams.set("pageSize", "1");
+    const fetchImpl = options.fetchImpl ?? fetchWithTimeout;
+    response = await fetchImpl(lookupUrl, {
+      method: "GET",
+      headers: buildForwardedHeaders(request),
+      cache: "no-store",
+      redirect: "manual",
+      signal: request.signal,
+      timeoutMs
+    });
+  } catch {
+    throw new CrudHttpError(503, { error: "documents.links.targetUnavailable" });
+  }
+  if (response.status === 404) {
+    throw new CrudHttpError(options.maskTargetAbsence ? 403 : 503, {
+      error: options.maskTargetAbsence ? "documents.links.targetRestricted" : "documents.links.targetUnavailable"
+    });
+  }
+  if (response.status >= 500) {
+    throw new CrudHttpError(503, { error: "documents.links.targetUnavailable" });
+  }
+  if (!response.ok) {
+    throw new CrudHttpError(response.status === 401 ? 401 : 403, {
+      error: "documents.links.targetRestricted"
+    });
+  }
+  let payload;
+  try {
+    payload = await readRegistryJsonBody(
+      response,
+      request.signal,
+      Math.max(1, deadline - Date.now())
+    );
+  } catch {
+    throw new CrudHttpError(503, { error: "documents.links.targetUnavailable" });
+  }
+  const rawItem = readItemsArray(payload).find((candidate) => entry.mapItem(candidate)?.id === input.entityId) ?? null;
+  const mapped = rawItem ? entry.mapItem(rawItem) : null;
+  const resolvedHref = mapped ? entry.resolveHref(mapped) : null;
+  if (!mapped || !rawItem || !resolvedHref || !entry.isCanonicalHref(mapped, resolvedHref)) {
+    throw new CrudHttpError(options.maskTargetAbsence ? 403 : 400, {
+      error: options.maskTargetAbsence ? "documents.links.targetRestricted" : "documents.links.targetMismatch"
+    });
+  }
+  return {
+    ...mapped,
+    href: resolvedHref,
+    values: Object.fromEntries(entry.tokenFields.map((field) => [field.field, field.extract(rawItem)]))
+  };
+}
+async function verifyEntityRegistrySelection(request, input, options = {}) {
+  return verifyEntityRegistryTarget(request, input, options);
+}
+async function verifyEntityRegistryTargetAccess(request, input, options = {}) {
+  try {
+    return await verifyEntityRegistryTarget(request, input, {
+      ...options,
+      maskTargetAbsence: true
+    });
+  } catch (error) {
+    if (isCrudHttpError(error) && error.status >= 400 && error.status < 500) {
+      throw new CrudHttpError(403, { error: "documents.links.targetRestricted" });
+    }
+    throw error;
+  }
+}
+async function verifyEntityRegistrySelections(request, inputs, options = {}) {
+  const deduped = Array.from(
+    new Map(inputs.map((input) => [`${input.entityType}:${input.entityId}`, input])).values()
+  );
+  if (deduped.length > 20) {
+    throw new CrudHttpError(400, { error: "documents.templates.tooManySlots" });
+  }
+  const concurrency = Math.max(1, Math.min(4, options.concurrency ?? 4));
+  const verified = /* @__PURE__ */ new Map();
+  let nextIndex = 0;
+  const workers = Array.from({ length: Math.min(concurrency, deduped.length) }, async () => {
+    while (nextIndex < deduped.length) {
+      const index = nextIndex;
+      nextIndex += 1;
+      const input = deduped[index];
+      verified.set(
+        `${input.entityType}:${input.entityId}`,
+        await verifyEntityRegistrySelection(request, input, options)
+      );
+    }
+  });
+  await Promise.all(workers);
+  return verified;
+}
+export {
+  verifyEntityRegistrySelection,
+  verifyEntityRegistrySelections,
+  verifyEntityRegistryTargetAccess
+};
+//# sourceMappingURL=entityRegistry.server.js.map

package/dist/modules/documents/lib/entityRegistry.server.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/entityRegistry.server.ts"],
+  "sourcesContent": ["import { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  fetchWithTimeout,\n  type FetchWithTimeoutInit,\n  resolveTimeoutMs,\n  withTimeout,\n} from '@open-mercato/shared/lib/http/fetchWithTimeout'\nimport { getSecurityEmailBaseUrl } from '@open-mercato/shared/lib/url'\nimport type { DocumentEntityType } from '../data/validators'\nimport {\n  getEntityRegistryEntry,\n  readItemsArray,\n  type EntityPickerItem,\n} from './entityRegistry'\nimport { isDocumentEntityRegistryModuleEnabled } from './entityRegistryAvailability.server'\n\nexport type VerifyEntityRegistrySelectionInput = {\n  entityType: DocumentEntityType\n  entityId: string\n  label: string\n  href: string\n}\n\nexport type VerifyEntityRegistryTargetAccessInput = Pick<\n  VerifyEntityRegistrySelectionInput,\n  'entityType' | 'entityId'\n>\n\nexport type VerifiedEntityRegistrySelection = EntityPickerItem & {\n  href: string\n  values: Record<string, string | null>\n}\n\ntype RegistryFetch = (\n  input: RequestInfo | URL,\n  init?: FetchWithTimeoutInit,\n) => Promise<Response>\n\nconst DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS = 3_000\nconst MAX_REGISTRY_RESPONSE_BYTES = 1_000_000\n\nasync function readRegistryJsonBody(\n  response: Response,\n  callerSignal: AbortSignal,\n  timeoutMs: number,\n): Promise<unknown> {\n  return withTimeout(async (timeoutSignal) => {\n    const signals = [callerSignal, timeoutSignal]\n    for (const signal of signals) {\n      if (signal.aborted) {\n        throw signal.reason instanceof Error\n          ? signal.reason\n          : new DOMException('Aborted', 'AbortError')\n      }\n    }\n\n    const reader = response.body?.getReader()\n    if (!reader) return null\n    let aborted: unknown = null\n    const listeners = signals.map((signal) => {\n      let handled = false\n      const listener = () => {\n        if (handled) return\n        handled = true\n        aborted = signal.reason instanceof Error\n          ? signal.reason\n          : new DOMException('Aborted', 'AbortError')\n        void reader.cancel(aborted).catch(() => undefined)\n      }\n      signal.addEventListener('abort', listener, { once: true })\n      if (signal.aborted) listener()\n      return { signal, listener }\n    })\n\n    const decoder = new TextDecoder()\n    let decoded = ''\n    let totalBytes = 0\n    try {\n      while (true) {\n        const { done, value } = await reader.read()\n        if (done) break\n        totalBytes += value.byteLength\n        if (totalBytes > MAX_REGISTRY_RESPONSE_BYTES) {\n          await reader.cancel().catch(() => undefined)\n          throw new Error('[internal] Entity registry response exceeded the size limit')\n        }\n        decoded += decoder.decode(value, { stream: true })\n      }\n      if (aborted) throw aborted\n      decoded += decoder.decode()\n    } finally {\n      for (const { signal, listener } of listeners) {\n        signal.removeEventListener('abort', listener)\n      }\n      reader.releaseLock()\n    }\n\n    try {\n      return JSON.parse(decoded) as unknown\n    } catch {\n      return null\n    }\n  }, timeoutMs, 'documents entity-registry response')\n}\n\nfunction buildForwardedHeaders(request: Request): Headers {\n  const headers = new Headers()\n  const cookie = request.headers.get('cookie')\n  const authorization = request.headers.get('authorization')\n  const apiKey = request.headers.get('x-api-key')\n  if (cookie) headers.set('cookie', cookie)\n  if (authorization) headers.set('authorization', authorization)\n  if (apiKey) headers.set('x-api-key', apiKey)\n  return headers\n}\n\ntype RegistryVerificationOptions = {\n  fetchImpl?: RegistryFetch\n  timeoutMs?: number\n  maskTargetAbsence?: boolean\n}\n\nasync function verifyEntityRegistryTarget(\n  request: Request,\n  input: VerifyEntityRegistryTargetAccessInput,\n  options: RegistryVerificationOptions = {},\n): Promise<VerifiedEntityRegistrySelection> {\n  const entry = getEntityRegistryEntry(input.entityType)\n  if (!entry) {\n    throw new CrudHttpError(400, { error: 'documents.links.invalidEntityType' })\n  }\n  if (!isDocumentEntityRegistryModuleEnabled(entry)) {\n    throw new CrudHttpError(503, { error: 'documents.links.targetUnavailable' })\n  }\n\n  const timeoutMs = Math.min(\n    resolveTimeoutMs(options.timeoutMs, DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS),\n    DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS,\n  )\n  const deadline = Date.now() + timeoutMs\n  let response: Response\n  try {\n    // This request carries the caller's credentials, so its destination must\n    // come from the configured application URL rather than request.url/Host.\n    // getSecurityEmailBaseUrl intentionally has a fixed loopback development\n    // fallback and requires APP_URL in production.\n    const lookupUrl = new URL(entry.searchPath, getSecurityEmailBaseUrl())\n    lookupUrl.searchParams.set('id', input.entityId)\n    lookupUrl.searchParams.set('pageSize', '1')\n    const fetchImpl = options.fetchImpl ?? fetchWithTimeout\n    response = await fetchImpl(lookupUrl, {\n      method: 'GET',\n      headers: buildForwardedHeaders(request),\n      cache: 'no-store',\n      redirect: 'manual',\n      signal: request.signal,\n      timeoutMs,\n    })\n  } catch {\n    throw new CrudHttpError(503, { error: 'documents.links.targetUnavailable' })\n  }\n\n  if (response.status === 404) {\n    throw new CrudHttpError(options.maskTargetAbsence ? 403 : 503, {\n      error: options.maskTargetAbsence\n        ? 'documents.links.targetRestricted'\n        : 'documents.links.targetUnavailable',\n    })\n  }\n  if (response.status >= 500) {\n    throw new CrudHttpError(503, { error: 'documents.links.targetUnavailable' })\n  }\n  if (!response.ok) {\n    throw new CrudHttpError(response.status === 401 ? 401 : 403, {\n      error: 'documents.links.targetRestricted',\n    })\n  }\n\n  let payload: unknown\n  try {\n    payload = await readRegistryJsonBody(\n      response,\n      request.signal,\n      Math.max(1, deadline - Date.now()),\n    )\n  } catch {\n    throw new CrudHttpError(503, { error: 'documents.links.targetUnavailable' })\n  }\n  const rawItem = readItemsArray(payload).find((candidate) => (\n    entry.mapItem(candidate)?.id === input.entityId\n  )) ?? null\n  const mapped = rawItem ? entry.mapItem(rawItem) : null\n  const resolvedHref = mapped ? entry.resolveHref(mapped) : null\n  if (!mapped || !rawItem || !resolvedHref || !entry.isCanonicalHref(mapped, resolvedHref)) {\n    throw new CrudHttpError(options.maskTargetAbsence ? 403 : 400, {\n      error: options.maskTargetAbsence\n        ? 'documents.links.targetRestricted'\n        : 'documents.links.targetMismatch',\n    })\n  }\n  return {\n    ...mapped,\n    href: resolvedHref,\n    values: Object.fromEntries(entry.tokenFields.map((field) => [field.field, field.extract(rawItem)])),\n  }\n}\n\nexport async function verifyEntityRegistrySelection(\n  request: Request,\n  input: VerifyEntityRegistrySelectionInput,\n  options: { fetchImpl?: RegistryFetch; timeoutMs?: number } = {},\n): Promise<VerifiedEntityRegistrySelection> {\n  return verifyEntityRegistryTarget(request, input, options)\n}\n\n/**\n * Verify access to one exact peer record before using its UUID as a reverse\n * relation filter. Missing and restricted targets intentionally share the same\n * denial so the Documents collection cannot become a peer-record oracle.\n */\nexport async function verifyEntityRegistryTargetAccess(\n  request: Request,\n  input: VerifyEntityRegistryTargetAccessInput,\n  options: { fetchImpl?: RegistryFetch; timeoutMs?: number } = {},\n): Promise<VerifiedEntityRegistrySelection> {\n  try {\n    return await verifyEntityRegistryTarget(request, input, {\n      ...options,\n      maskTargetAbsence: true,\n    })\n  } catch (error) {\n    if (isCrudHttpError(error) && error.status >= 400 && error.status < 500) {\n      throw new CrudHttpError(403, { error: 'documents.links.targetRestricted' })\n    }\n    throw error\n  }\n}\n\nexport async function verifyEntityRegistrySelections(\n  request: Request,\n  inputs: VerifyEntityRegistrySelectionInput[],\n  options: { fetchImpl?: RegistryFetch; concurrency?: number; timeoutMs?: number } = {},\n): Promise<Map<string, VerifiedEntityRegistrySelection>> {\n  const deduped = Array.from(\n    new Map(inputs.map((input) => [`${input.entityType}:${input.entityId}`, input])).values(),\n  )\n  if (deduped.length > 20) {\n    throw new CrudHttpError(400, { error: 'documents.templates.tooManySlots' })\n  }\n\n  const concurrency = Math.max(1, Math.min(4, options.concurrency ?? 4))\n  const verified = new Map<string, VerifiedEntityRegistrySelection>()\n  let nextIndex = 0\n  const workers = Array.from({ length: Math.min(concurrency, deduped.length) }, async () => {\n    while (nextIndex < deduped.length) {\n      const index = nextIndex\n      nextIndex += 1\n      const input = deduped[index]!\n      verified.set(\n        `${input.entityType}:${input.entityId}`,\n        await verifyEntityRegistrySelection(request, input, options),\n      )\n    }\n  })\n  await Promise.all(workers)\n  return verified\n}\n"],
+  "mappings": "AAAA,SAAS,eAAe,uBAAuB;AAC/C;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AAExC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,6CAA6C;AAwBtD,MAAM,qCAAqC;AAC3C,MAAM,8BAA8B;AAEpC,eAAe,qBACb,UACA,cACA,WACkB;AAClB,SAAO,YAAY,OAAO,kBAAkB;AAC1C,UAAM,UAAU,CAAC,cAAc,aAAa;AAC5C,eAAW,UAAU,SAAS;AAC5B,UAAI,OAAO,SAAS;AAClB,cAAM,OAAO,kBAAkB,QAC3B,OAAO,SACP,IAAI,aAAa,WAAW,YAAY;AAAA,MAC9C;AAAA,IACF;AAEA,UAAM,SAAS,SAAS,MAAM,UAAU;AACxC,QAAI,CAAC,OAAQ,QAAO;AACpB,QAAI,UAAmB;AACvB,UAAM,YAAY,QAAQ,IAAI,CAAC,WAAW;AACxC,UAAI,UAAU;AACd,YAAM,WAAW,MAAM;AACrB,YAAI,QAAS;AACb,kBAAU;AACV,kBAAU,OAAO,kBAAkB,QAC/B,OAAO,SACP,IAAI,aAAa,WAAW,YAAY;AAC5C,aAAK,OAAO,OAAO,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,MACnD;AACA,aAAO,iBAAiB,SAAS,UAAU,EAAE,MAAM,KAAK,CAAC;AACzD,UAAI,OAAO,QAAS,UAAS;AAC7B,aAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B,CAAC;AAED,UAAM,UAAU,IAAI,YAAY;AAChC,QAAI,UAAU;AACd,QAAI,aAAa;AACjB,QAAI;AACF,aAAO,MAAM;AACX,cAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,YAAI,KAAM;AACV,sBAAc,MAAM;AACpB,YAAI,aAAa,6BAA6B;AAC5C,gBAAM,OAAO,OAAO,EAAE,MAAM,MAAM,MAAS;AAC3C,gBAAM,IAAI,MAAM,6DAA6D;AAAA,QAC/E;AACA,mBAAW,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAAA,MACnD;AACA,UAAI,QAAS,OAAM;AACnB,iBAAW,QAAQ,OAAO;AAAA,IAC5B,UAAE;AACA,iBAAW,EAAE,QAAQ,SAAS,KAAK,WAAW;AAC5C,eAAO,oBAAoB,SAAS,QAAQ;AAAA,MAC9C;AACA,aAAO,YAAY;AAAA,IACrB;AAEA,QAAI;AACF,aAAO,KAAK,MAAM,OAAO;AAAA,IAC3B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG,WAAW,oCAAoC;AACpD;AAEA,SAAS,sBAAsB,SAA2B;AACxD,QAAM,UAAU,IAAI,QAAQ;AAC5B,QAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAC3C,QAAM,gBAAgB,QAAQ,QAAQ,IAAI,eAAe;AACzD,QAAM,SAAS,QAAQ,QAAQ,IAAI,WAAW;AAC9C,MAAI,OAAQ,SAAQ,IAAI,UAAU,MAAM;AACxC,MAAI,cAAe,SAAQ,IAAI,iBAAiB,aAAa;AAC7D,MAAI,OAAQ,SAAQ,IAAI,aAAa,MAAM;AAC3C,SAAO;AACT;AAQA,eAAe,2BACb,SACA,OACA,UAAuC,CAAC,GACE;AAC1C,QAAM,QAAQ,uBAAuB,MAAM,UAAU;AACrD,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,EAC7E;AACA,MAAI,CAAC,sCAAsC,KAAK,GAAG;AACjD,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,EAC7E;AAEA,QAAM,YAAY,KAAK;AAAA,IACrB,iBAAiB,QAAQ,WAAW,kCAAkC;AAAA,IACtE;AAAA,EACF;AACA,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,MAAI;AACJ,MAAI;AAKF,UAAM,YAAY,IAAI,IAAI,MAAM,YAAY,wBAAwB,CAAC;AACrE,cAAU,aAAa,IAAI,MAAM,MAAM,QAAQ;AAC/C,cAAU,aAAa,IAAI,YAAY,GAAG;AAC1C,UAAM,YAAY,QAAQ,aAAa;AACvC,eAAW,MAAM,UAAU,WAAW;AAAA,MACpC,QAAQ;AAAA,MACR,SAAS,sBAAsB,OAAO;AAAA,MACtC,OAAO;AAAA,MACP,UAAU;AAAA,MACV,QAAQ,QAAQ;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AACN,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,EAC7E;AAEA,MAAI,SAAS,WAAW,KAAK;AAC3B,UAAM,IAAI,cAAc,QAAQ,oBAAoB,MAAM,KAAK;AAAA,MAC7D,OAAO,QAAQ,oBACX,qCACA;AAAA,IACN,CAAC;AAAA,EACH;AACA,MAAI,SAAS,UAAU,KAAK;AAC1B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,EAC7E;AACA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,cAAc,SAAS,WAAW,MAAM,MAAM,KAAK;AAAA,MAC3D,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,MAAM;AAAA,MACd;AAAA,MACA,QAAQ;AAAA,MACR,KAAK,IAAI,GAAG,WAAW,KAAK,IAAI,CAAC;AAAA,IACnC;AAAA,EACF,QAAQ;AACN,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,EAC7E;AACA,QAAM,UAAU,eAAe,OAAO,EAAE,KAAK,CAAC,cAC5C,MAAM,QAAQ,SAAS,GAAG,OAAO,MAAM,QACxC,KAAK;AACN,QAAM,SAAS,UAAU,MAAM,QAAQ,OAAO,IAAI;AAClD,QAAM,eAAe,SAAS,MAAM,YAAY,MAAM,IAAI;AAC1D,MAAI,CAAC,UAAU,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,gBAAgB,QAAQ,YAAY,GAAG;AACxF,UAAM,IAAI,cAAc,QAAQ,oBAAoB,MAAM,KAAK;AAAA,MAC7D,OAAO,QAAQ,oBACX,qCACA;AAAA,IACN,CAAC;AAAA,EACH;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM;AAAA,IACN,QAAQ,OAAO,YAAY,MAAM,YAAY,IAAI,CAAC,UAAU,CAAC,MAAM,OAAO,MAAM,QAAQ,OAAO,CAAC,CAAC,CAAC;AAAA,EACpG;AACF;AAEA,eAAsB,8BACpB,SACA,OACA,UAA6D,CAAC,GACpB;AAC1C,SAAO,2BAA2B,SAAS,OAAO,OAAO;AAC3D;AAOA,eAAsB,iCACpB,SACA,OACA,UAA6D,CAAC,GACpB;AAC1C,MAAI;AACF,WAAO,MAAM,2BAA2B,SAAS,OAAO;AAAA,MACtD,GAAG;AAAA,MACH,mBAAmB;AAAA,IACrB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,KAAK,MAAM,UAAU,OAAO,MAAM,SAAS,KAAK;AACvE,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,IAC5E;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAsB,+BACpB,SACA,QACA,UAAmF,CAAC,GAC7B;AACvD,QAAM,UAAU,MAAM;AAAA,IACpB,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,UAAU,IAAI,MAAM,QAAQ,IAAI,KAAK,CAAC,CAAC,EAAE,OAAO;AAAA,EAC1F;AACA,MAAI,QAAQ,SAAS,IAAI;AACvB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,EAC5E;AAEA,QAAM,cAAc,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,QAAQ,eAAe,CAAC,CAAC;AACrE,QAAM,WAAW,oBAAI,IAA6C;AAClE,MAAI,YAAY;AAChB,QAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,aAAa,QAAQ,MAAM,EAAE,GAAG,YAAY;AACxF,WAAO,YAAY,QAAQ,QAAQ;AACjC,YAAM,QAAQ;AACd,mBAAa;AACb,YAAM,QAAQ,QAAQ,KAAK;AAC3B,eAAS;AAAA,QACP,GAAG,MAAM,UAAU,IAAI,MAAM,QAAQ;AAAA,QACrC,MAAM,8BAA8B,SAAS,OAAO,OAAO;AAAA,MAC7D;AAAA,IACF;AAAA,EACF,CAAC;AACD,QAAM,QAAQ,IAAI,OAAO;AACzB,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/documents/lib/entityRegistryAvailability.server.js

@@ -0,0 +1,9 @@
+import { getEnabledModuleIds } from "@open-mercato/shared/security/enabledModulesRegistry";
+function isDocumentEntityRegistryModuleEnabled(entry) {
+  const enabledModuleIds = new Set(getEnabledModuleIds());
+  return enabledModuleIds.has(entry.requiredModule) && enabledModuleIds.has(entry.requiredFeatureModule);
+}
+export {
+  isDocumentEntityRegistryModuleEnabled
+};
+//# sourceMappingURL=entityRegistryAvailability.server.js.map

package/dist/modules/documents/lib/entityRegistryAvailability.server.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/entityRegistryAvailability.server.ts"],
+  "sourcesContent": ["import { getEnabledModuleIds } from '@open-mercato/shared/security/enabledModulesRegistry'\nimport type { DocumentEntityRegistryEntry } from './entityRegistry'\n\n/**\n * Returns whether the peer module backing a Documents entity-registry entry\n * is enabled in the running application.\n *\n * The bootstrapped module registry is the canonical server-side source. An\n * empty/unavailable registry therefore fails closed for peer-backed entries;\n * stale ACL grants (including superadmin wildcards) must never make a disabled\n * module addressable through Documents.\n */\nexport function isDocumentEntityRegistryModuleEnabled(\n  entry: Pick<DocumentEntityRegistryEntry, 'requiredModule' | 'requiredFeatureModule'>,\n): boolean {\n  const enabledModuleIds = new Set(getEnabledModuleIds())\n  return enabledModuleIds.has(entry.requiredModule)\n    && enabledModuleIds.has(entry.requiredFeatureModule)\n}\n"],
+  "mappings": "AAAA,SAAS,2BAA2B;AAY7B,SAAS,sCACd,OACS;AACT,QAAM,mBAAmB,IAAI,IAAI,oBAAoB,CAAC;AACtD,SAAO,iBAAiB,IAAI,MAAM,cAAc,KAC3C,iBAAiB,IAAI,MAAM,qBAAqB;AACvD;",
+  "names": []
+}

package/dist/modules/documents/lib/entitySuggestion.js

@@ -0,0 +1,50 @@
+import { Extension } from "@tiptap/core";
+import { Suggestion } from "@tiptap/suggestion";
+function notifyTrigger(handlers, props) {
+  handlers.onTrigger({
+    query: props.query,
+    range: {
+      from: props.range.from,
+      to: props.range.to
+    }
+  });
+}
+function createEntitySuggestionExtension(handlers) {
+  return Extension.create({
+    name: "entitySuggestion",
+    addProseMirrorPlugins() {
+      return [
+        Suggestion({
+          editor: this.editor,
+          char: "@",
+          allowSpaces: false,
+          startOfLine: false,
+          items: () => [],
+          command: () => void 0,
+          render: () => ({
+            onStart: (props) => notifyTrigger(handlers, props),
+            onUpdate: (props) => notifyTrigger(handlers, props),
+            onExit: () => handlers.onClose()
+          })
+        })
+      ];
+    }
+  });
+}
+function insertEntityRef(editor, attrs) {
+  return editor.chain().focus().insertContent([
+    {
+      type: "entityRef",
+      attrs
+    },
+    {
+      type: "text",
+      text: " "
+    }
+  ]).run();
+}
+export {
+  createEntitySuggestionExtension,
+  insertEntityRef
+};
+//# sourceMappingURL=entitySuggestion.js.map