@open-mercato/shared 0.6.4-develop.4382.1.6b4f656b77 → 0.6.4

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
-[build:shared] found 216 entry points
+[build:shared] found 222 entry points
 [build:shared] built successfully

package/AGENTS.md

@@ -37,6 +37,7 @@ yarn workspace @open-mercato/shared build
 | `boolean/` | When parsing boolean strings from env/query params | `@open-mercato/shared/lib/boolean` |
 | `commands/` | When implementing undo/redo command pattern | `@open-mercato/shared/lib/commands` |
 | `commands/flush` | When a command mutates entities across multiple phases (scalar + relation syncs) — wraps phases in a single atomic flush | `@open-mercato/shared/lib/commands/flush` — `withAtomicFlush(em, phases, { transaction? })` |
+| `commands/runCrudCommandWrite` | When a command writes an entity + custom fields + CRUD/index side effects in one logical operation — composes fork → atomic flush → custom-field write → side-effect queue in the only correct order. **Prefer this over composing the primitives by hand for new commands.** | `@open-mercato/shared/lib/commands/runCrudCommandWrite` — `runCrudCommandWrite({ ctx, entityId, action, scope, phases, customFields?, events?, indexer?, sideEffect })` |
 | `crud/` | When building CRUD routes | `@open-mercato/shared/lib/crud` |
 | `custom-fields/` | When handling custom field payloads | `@open-mercato/shared/lib/custom-fields` |
 | `data/` | When you need `DataEngine` or `QueryEngine` types | `@open-mercato/shared/lib/data/engine` |
@@ -121,6 +122,15 @@ import { hasFeature, hasAllFeatures } from '@open-mercato/shared/security/featur
 - Use `parseIdsParam()` and `mergeIdFilter()` from `@open-mercato/shared/lib/crud/ids` for factory-level `ids` query support.
 - Keep `ids` format as comma-separated UUIDs (`?ids=uuid1,uuid2`) and intersect with existing `id` filters.
 
+### Command Undo Pattern — read the snapshot via `extractUndoPayload`
+
+A command's `buildLog()` returns `payload: { undo: { before, after } }`, but the command bus persists that under `commandPayload` (column `command_payload`, wrapped in a redo envelope) — **the stored `ActionLog` row has no top-level `payload`**. Reading `logEntry.payload` inside an `undo()` handler is therefore always `undefined`, which makes undo a silent no-op (issue #2504).
+
+MUST rules:
+- Inside `undo()`, read the snapshot **only** through `extractUndoPayload<UndoPayload<TSnapshot>>(logEntry)` from `@open-mercato/shared/lib/commands/undo`. It unwraps `commandPayload` (and the redo envelope) and falls back to `snapshotBefore`/`snapshotAfter`.
+- NEVER access `logEntry.payload` in an undo handler. The `logEntry` parameter is typed as `CommandUndoLogEntry`, which intentionally omits `payload` so this footgun is a compile-time error.
+- Delete-undo should be robust to either deletion strategy: clear `deletedAt` when the row survives (soft delete), otherwise re-create the entity from the snapshot (mirror `packages/core/src/modules/sales/commands/configuration.ts`).
+
 ### Module-Level Overrides (`@open-mercato/shared/modules/overrides`)
 
 Downstream apps replace or disable any contract a module presents through a single `entry.overrides` field on a `ModuleEntry`. The umbrella spec is `.ai/specs/2026-05-04-modules-ts-unified-overrides.md`; phases 1-18 are wired.

package/dist/lib/auth/apiKeyAuthCache.js

@@ -1,7 +1,13 @@
+import { createHmac, randomBytes } from "node:crypto";
 const DEFAULT_SUCCESS_TTL_MS = 3e4;
 const DEFAULT_NEGATIVE_TTL_MS = 5e3;
 const DEFAULT_LAST_USED_WRITE_INTERVAL_MS = 6e4;
 const DEFAULT_MAX_ENTRIES = 1e3;
+const FINGERPRINT_BYTES = 16;
+function createSecretFingerprinter() {
+  const key = randomBytes(32);
+  return (secret) => createHmac("sha256", key).update(secret, "utf8").digest("hex").slice(0, FINGERPRINT_BYTES * 2);
+}
 function resolveTtlEnv(name, fallback) {
   const raw = process.env?.[name];
   if (!raw) return fallback;
@@ -18,6 +24,7 @@ function createApiKeyAuthCache(options = {}) {
   );
   const maxEntries = options.maxEntries ?? DEFAULT_MAX_ENTRIES;
   const now = options.now ?? (() => Date.now());
+  const fingerprint = createSecretFingerprinter();
   const entries = /* @__PURE__ */ new Map();
   const lastUsedWrites = /* @__PURE__ */ new Map();
   function touch(key, entry) {
@@ -36,12 +43,13 @@ function createApiKeyAuthCache(options = {}) {
   return {
     get(secret) {
       if (!secret) return void 0;
-      const entry = entries.get(secret);
+      const key = fingerprint(secret);
+      const entry = entries.get(key);
       if (!entry) return void 0;
       const currentMs = now();
-      if (purgeStale(secret, entry, currentMs)) return void 0;
-      entries.delete(secret);
-      entries.set(secret, entry);
+      if (purgeStale(key, entry, currentMs)) return void 0;
+      entries.delete(key);
+      entries.set(key, entry);
       return entry.auth;
     },
     setSuccess(secret, auth, expiresAtMs) {
@@ -51,13 +59,13 @@ function createApiKeyAuthCache(options = {}) {
       const ttlEnd = currentMs + successTtlMs;
       const effectiveExpiry = expiresAtMs != null ? Math.min(ttlEnd, expiresAtMs) : ttlEnd;
       if (effectiveExpiry <= currentMs) return;
-      touch(secret, { auth, cachedAtMs: currentMs, expiresAtMs: effectiveExpiry });
+      touch(fingerprint(secret), { auth, cachedAtMs: currentMs, expiresAtMs: effectiveExpiry });
     },
     setMiss(secret) {
       if (!secret) return;
       if (negativeTtlMs <= 0) return;
       const currentMs = now();
-      touch(secret, { auth: null, cachedAtMs: currentMs, expiresAtMs: currentMs + negativeTtlMs });
+      touch(fingerprint(secret), { auth: null, cachedAtMs: currentMs, expiresAtMs: currentMs + negativeTtlMs });
     },
     invalidateByKeyId(keyId) {
       if (!keyId) return;
@@ -84,6 +92,9 @@ function createApiKeyAuthCache(options = {}) {
     },
     size() {
       return entries.size;
+    },
+    inspectEntryKeysForTests() {
+      return Array.from(entries.keys());
     }
   };
 }

package/dist/lib/auth/apiKeyAuthCache.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/auth/apiKeyAuthCache.ts"],
-  "sourcesContent": ["const DEFAULT_SUCCESS_TTL_MS = 30_000\nconst DEFAULT_NEGATIVE_TTL_MS = 5_000\nconst DEFAULT_LAST_USED_WRITE_INTERVAL_MS = 60_000\nconst DEFAULT_MAX_ENTRIES = 1_000\n\nexport type CachedApiKeyAuth = Record<string, unknown> | null\n\ntype CachedEntry = {\n  auth: CachedApiKeyAuth\n  cachedAtMs: number\n  expiresAtMs: number\n}\n\nexport type ApiKeyAuthCacheOptions = {\n  successTtlMs?: number\n  negativeTtlMs?: number\n  lastUsedWriteIntervalMs?: number\n  maxEntries?: number\n  now?: () => number\n}\n\nexport type ApiKeyAuthCache = {\n  get(secret: string): CachedApiKeyAuth | undefined\n  setSuccess(secret: string, auth: Exclude<CachedApiKeyAuth, null>, expiresAtMs: number | null): void\n  setMiss(secret: string): void\n  invalidateByKeyId(keyId: string): void\n  shouldWriteLastUsed(keyId: string): boolean\n  clear(): void\n  size(): number\n}\n\nfunction resolveTtlEnv(name: string, fallback: number): number {\n  const raw = process.env?.[name]\n  if (!raw) return fallback\n  const parsed = Number(raw)\n  if (!Number.isFinite(parsed) || parsed < 0) return fallback\n  return parsed\n}\n\nexport function createApiKeyAuthCache(options: ApiKeyAuthCacheOptions = {}): ApiKeyAuthCache {\n  const successTtlMs = options.successTtlMs ?? resolveTtlEnv('OM_API_KEY_AUTH_TTL_MS', DEFAULT_SUCCESS_TTL_MS)\n  const negativeTtlMs = options.negativeTtlMs ?? resolveTtlEnv('OM_API_KEY_AUTH_NEGATIVE_TTL_MS', DEFAULT_NEGATIVE_TTL_MS)\n  const lastUsedWriteIntervalMs = options.lastUsedWriteIntervalMs ?? resolveTtlEnv(\n    'OM_API_KEY_LAST_USED_WRITE_INTERVAL_MS',\n    DEFAULT_LAST_USED_WRITE_INTERVAL_MS,\n  )\n  const maxEntries = options.maxEntries ?? DEFAULT_MAX_ENTRIES\n  const now = options.now ?? (() => Date.now())\n\n  const entries = new Map<string, CachedEntry>()\n  const lastUsedWrites = new Map<string, number>()\n\n  function touch(key: string, entry: CachedEntry) {\n    entries.delete(key)\n    entries.set(key, entry)\n    if (entries.size > maxEntries) {\n      const oldest = entries.keys().next().value\n      if (typeof oldest === 'string') entries.delete(oldest)\n    }\n  }\n\n  function purgeStale(key: string, entry: CachedEntry, currentMs: number): boolean {\n    if (entry.expiresAtMs > currentMs) return false\n    entries.delete(key)\n    return true\n  }\n\n  return {\n    get(secret) {\n      if (!secret) return undefined\n      const entry = entries.get(secret)\n      if (!entry) return undefined\n      const currentMs = now()\n      if (purgeStale(secret, entry, currentMs)) return undefined\n      entries.delete(secret)\n      entries.set(secret, entry)\n      return entry.auth\n    },\n    setSuccess(secret, auth, expiresAtMs) {\n      if (!secret) return\n      if (successTtlMs <= 0) return\n      const currentMs = now()\n      const ttlEnd = currentMs + successTtlMs\n      const effectiveExpiry = expiresAtMs != null ? Math.min(ttlEnd, expiresAtMs) : ttlEnd\n      if (effectiveExpiry <= currentMs) return\n      touch(secret, { auth, cachedAtMs: currentMs, expiresAtMs: effectiveExpiry })\n    },\n    setMiss(secret) {\n      if (!secret) return\n      if (negativeTtlMs <= 0) return\n      const currentMs = now()\n      touch(secret, { auth: null, cachedAtMs: currentMs, expiresAtMs: currentMs + negativeTtlMs })\n    },\n    invalidateByKeyId(keyId) {\n      if (!keyId) return\n      for (const [key, entry] of entries) {\n        const auth = entry.auth\n        if (auth && typeof auth === 'object' && (auth as { keyId?: string }).keyId === keyId) {\n          entries.delete(key)\n        }\n      }\n      lastUsedWrites.delete(keyId)\n    },\n    shouldWriteLastUsed(keyId) {\n      if (!keyId) return true\n      if (lastUsedWriteIntervalMs <= 0) return true\n      const currentMs = now()\n      const previous = lastUsedWrites.get(keyId)\n      if (previous != null && currentMs - previous < lastUsedWriteIntervalMs) return false\n      lastUsedWrites.set(keyId, currentMs)\n      return true\n    },\n    clear() {\n      entries.clear()\n      lastUsedWrites.clear()\n    },\n    size() {\n      return entries.size\n    },\n  }\n}\n\nlet sharedCache: ApiKeyAuthCache | null = null\n\nexport function getSharedApiKeyAuthCache(): ApiKeyAuthCache {\n  if (!sharedCache) sharedCache = createApiKeyAuthCache()\n  return sharedCache\n}\n\nexport function resetSharedApiKeyAuthCacheForTests(): void {\n  sharedCache = null\n}\n"],
-  "mappings": "AAAA,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;AAChC,MAAM,sCAAsC;AAC5C,MAAM,sBAAsB;AA4B5B,SAAS,cAAc,MAAc,UAA0B;AAC7D,QAAM,MAAM,QAAQ,MAAM,IAAI;AAC9B,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,SAAS,OAAO,GAAG;AACzB,MAAI,CAAC,OAAO,SAAS,MAAM,KAAK,SAAS,EAAG,QAAO;AACnD,SAAO;AACT;AAEO,SAAS,sBAAsB,UAAkC,CAAC,GAAoB;AAC3F,QAAM,eAAe,QAAQ,gBAAgB,cAAc,0BAA0B,sBAAsB;AAC3G,QAAM,gBAAgB,QAAQ,iBAAiB,cAAc,mCAAmC,uBAAuB;AACvH,QAAM,0BAA0B,QAAQ,2BAA2B;AAAA,IACjE;AAAA,IACA;AAAA,EACF;AACA,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI;AAE3C,QAAM,UAAU,oBAAI,IAAyB;AAC7C,QAAM,iBAAiB,oBAAI,IAAoB;AAE/C,WAAS,MAAM,KAAa,OAAoB;AAC9C,YAAQ,OAAO,GAAG;AAClB,YAAQ,IAAI,KAAK,KAAK;AACtB,QAAI,QAAQ,OAAO,YAAY;AAC7B,YAAM,SAAS,QAAQ,KAAK,EAAE,KAAK,EAAE;AACrC,UAAI,OAAO,WAAW,SAAU,SAAQ,OAAO,MAAM;AAAA,IACvD;AAAA,EACF;AAEA,WAAS,WAAW,KAAa,OAAoB,WAA4B;AAC/E,QAAI,MAAM,cAAc,UAAW,QAAO;AAC1C,YAAQ,OAAO,GAAG;AAClB,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,IAAI,QAAQ;AACV,UAAI,CAAC,OAAQ,QAAO;AACpB,YAAM,QAAQ,QAAQ,IAAI,MAAM;AAChC,UAAI,CAAC,MAAO,QAAO;AACnB,YAAM,YAAY,IAAI;AACtB,UAAI,WAAW,QAAQ,OAAO,SAAS,EAAG,QAAO;AACjD,cAAQ,OAAO,MAAM;AACrB,cAAQ,IAAI,QAAQ,KAAK;AACzB,aAAO,MAAM;AAAA,IACf;AAAA,IACA,WAAW,QAAQ,MAAM,aAAa;AACpC,UAAI,CAAC,OAAQ;AACb,UAAI,gBAAgB,EAAG;AACvB,YAAM,YAAY,IAAI;AACtB,YAAM,SAAS,YAAY;AAC3B,YAAM,kBAAkB,eAAe,OAAO,KAAK,IAAI,QAAQ,WAAW,IAAI;AAC9E,UAAI,mBAAmB,UAAW;AAClC,YAAM,QAAQ,EAAE,MAAM,YAAY,WAAW,aAAa,gBAAgB,CAAC;AAAA,IAC7E;AAAA,IACA,QAAQ,QAAQ;AACd,UAAI,CAAC,OAAQ;AACb,UAAI,iBAAiB,EAAG;AACxB,YAAM,YAAY,IAAI;AACtB,YAAM,QAAQ,EAAE,MAAM,MAAM,YAAY,WAAW,aAAa,YAAY,cAAc,CAAC;AAAA,IAC7F;AAAA,IACA,kBAAkB,OAAO;AACvB,UAAI,CAAC,MAAO;AACZ,iBAAW,CAAC,KAAK,KAAK,KAAK,SAAS;AAClC,cAAM,OAAO,MAAM;AACnB,YAAI,QAAQ,OAAO,SAAS,YAAa,KAA4B,UAAU,OAAO;AACpF,kBAAQ,OAAO,GAAG;AAAA,QACpB;AAAA,MACF;AACA,qBAAe,OAAO,KAAK;AAAA,IAC7B;AAAA,IACA,oBAAoB,OAAO;AACzB,UAAI,CAAC,MAAO,QAAO;AACnB,UAAI,2BAA2B,EAAG,QAAO;AACzC,YAAM,YAAY,IAAI;AACtB,YAAM,WAAW,eAAe,IAAI,KAAK;AACzC,UAAI,YAAY,QAAQ,YAAY,WAAW,wBAAyB,QAAO;AAC/E,qBAAe,IAAI,OAAO,SAAS;AACnC,aAAO;AAAA,IACT;AAAA,IACA,QAAQ;AACN,cAAQ,MAAM;AACd,qBAAe,MAAM;AAAA,IACvB;AAAA,IACA,OAAO;AACL,aAAO,QAAQ;AAAA,IACjB;AAAA,EACF;AACF;AAEA,IAAI,cAAsC;AAEnC,SAAS,2BAA4C;AAC1D,MAAI,CAAC,YAAa,eAAc,sBAAsB;AACtD,SAAO;AACT;AAEO,SAAS,qCAA2C;AACzD,gBAAc;AAChB;",
+  "sourcesContent": ["import { createHmac, randomBytes } from 'node:crypto'\n\nconst DEFAULT_SUCCESS_TTL_MS = 30_000\nconst DEFAULT_NEGATIVE_TTL_MS = 5_000\nconst DEFAULT_LAST_USED_WRITE_INTERVAL_MS = 60_000\nconst DEFAULT_MAX_ENTRIES = 1_000\nconst FINGERPRINT_BYTES = 16\n\nfunction createSecretFingerprinter(): (secret: string) => string {\n  const key = randomBytes(32)\n  return (secret) => createHmac('sha256', key).update(secret, 'utf8').digest('hex').slice(0, FINGERPRINT_BYTES * 2)\n}\n\nexport type CachedApiKeyAuth = Record<string, unknown> | null\n\ntype CachedEntry = {\n  auth: CachedApiKeyAuth\n  cachedAtMs: number\n  expiresAtMs: number\n}\n\nexport type ApiKeyAuthCacheOptions = {\n  successTtlMs?: number\n  negativeTtlMs?: number\n  lastUsedWriteIntervalMs?: number\n  maxEntries?: number\n  now?: () => number\n}\n\nexport type ApiKeyAuthCache = {\n  get(secret: string): CachedApiKeyAuth | undefined\n  setSuccess(secret: string, auth: Exclude<CachedApiKeyAuth, null>, expiresAtMs: number | null): void\n  setMiss(secret: string): void\n  invalidateByKeyId(keyId: string): void\n  shouldWriteLastUsed(keyId: string): boolean\n  clear(): void\n  size(): number\n  inspectEntryKeysForTests(): string[]\n}\n\nfunction resolveTtlEnv(name: string, fallback: number): number {\n  const raw = process.env?.[name]\n  if (!raw) return fallback\n  const parsed = Number(raw)\n  if (!Number.isFinite(parsed) || parsed < 0) return fallback\n  return parsed\n}\n\nexport function createApiKeyAuthCache(options: ApiKeyAuthCacheOptions = {}): ApiKeyAuthCache {\n  const successTtlMs = options.successTtlMs ?? resolveTtlEnv('OM_API_KEY_AUTH_TTL_MS', DEFAULT_SUCCESS_TTL_MS)\n  const negativeTtlMs = options.negativeTtlMs ?? resolveTtlEnv('OM_API_KEY_AUTH_NEGATIVE_TTL_MS', DEFAULT_NEGATIVE_TTL_MS)\n  const lastUsedWriteIntervalMs = options.lastUsedWriteIntervalMs ?? resolveTtlEnv(\n    'OM_API_KEY_LAST_USED_WRITE_INTERVAL_MS',\n    DEFAULT_LAST_USED_WRITE_INTERVAL_MS,\n  )\n  const maxEntries = options.maxEntries ?? DEFAULT_MAX_ENTRIES\n  const now = options.now ?? (() => Date.now())\n  const fingerprint = createSecretFingerprinter()\n\n  const entries = new Map<string, CachedEntry>()\n  const lastUsedWrites = new Map<string, number>()\n\n  function touch(key: string, entry: CachedEntry) {\n    entries.delete(key)\n    entries.set(key, entry)\n    if (entries.size > maxEntries) {\n      const oldest = entries.keys().next().value\n      if (typeof oldest === 'string') entries.delete(oldest)\n    }\n  }\n\n  function purgeStale(key: string, entry: CachedEntry, currentMs: number): boolean {\n    if (entry.expiresAtMs > currentMs) return false\n    entries.delete(key)\n    return true\n  }\n\n  return {\n    get(secret) {\n      if (!secret) return undefined\n      const key = fingerprint(secret)\n      const entry = entries.get(key)\n      if (!entry) return undefined\n      const currentMs = now()\n      if (purgeStale(key, entry, currentMs)) return undefined\n      entries.delete(key)\n      entries.set(key, entry)\n      return entry.auth\n    },\n    setSuccess(secret, auth, expiresAtMs) {\n      if (!secret) return\n      if (successTtlMs <= 0) return\n      const currentMs = now()\n      const ttlEnd = currentMs + successTtlMs\n      const effectiveExpiry = expiresAtMs != null ? Math.min(ttlEnd, expiresAtMs) : ttlEnd\n      if (effectiveExpiry <= currentMs) return\n      touch(fingerprint(secret), { auth, cachedAtMs: currentMs, expiresAtMs: effectiveExpiry })\n    },\n    setMiss(secret) {\n      if (!secret) return\n      if (negativeTtlMs <= 0) return\n      const currentMs = now()\n      touch(fingerprint(secret), { auth: null, cachedAtMs: currentMs, expiresAtMs: currentMs + negativeTtlMs })\n    },\n    invalidateByKeyId(keyId) {\n      if (!keyId) return\n      for (const [key, entry] of entries) {\n        const auth = entry.auth\n        if (auth && typeof auth === 'object' && (auth as { keyId?: string }).keyId === keyId) {\n          entries.delete(key)\n        }\n      }\n      lastUsedWrites.delete(keyId)\n    },\n    shouldWriteLastUsed(keyId) {\n      if (!keyId) return true\n      if (lastUsedWriteIntervalMs <= 0) return true\n      const currentMs = now()\n      const previous = lastUsedWrites.get(keyId)\n      if (previous != null && currentMs - previous < lastUsedWriteIntervalMs) return false\n      lastUsedWrites.set(keyId, currentMs)\n      return true\n    },\n    clear() {\n      entries.clear()\n      lastUsedWrites.clear()\n    },\n    size() {\n      return entries.size\n    },\n    inspectEntryKeysForTests() {\n      return Array.from(entries.keys())\n    },\n  }\n}\n\nlet sharedCache: ApiKeyAuthCache | null = null\n\nexport function getSharedApiKeyAuthCache(): ApiKeyAuthCache {\n  if (!sharedCache) sharedCache = createApiKeyAuthCache()\n  return sharedCache\n}\n\nexport function resetSharedApiKeyAuthCacheForTests(): void {\n  sharedCache = null\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,mBAAmB;AAExC,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;AAChC,MAAM,sCAAsC;AAC5C,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAE1B,SAAS,4BAAwD;AAC/D,QAAM,MAAM,YAAY,EAAE;AAC1B,SAAO,CAAC,WAAW,WAAW,UAAU,GAAG,EAAE,OAAO,QAAQ,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,oBAAoB,CAAC;AAClH;AA6BA,SAAS,cAAc,MAAc,UAA0B;AAC7D,QAAM,MAAM,QAAQ,MAAM,IAAI;AAC9B,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,SAAS,OAAO,GAAG;AACzB,MAAI,CAAC,OAAO,SAAS,MAAM,KAAK,SAAS,EAAG,QAAO;AACnD,SAAO;AACT;AAEO,SAAS,sBAAsB,UAAkC,CAAC,GAAoB;AAC3F,QAAM,eAAe,QAAQ,gBAAgB,cAAc,0BAA0B,sBAAsB;AAC3G,QAAM,gBAAgB,QAAQ,iBAAiB,cAAc,mCAAmC,uBAAuB;AACvH,QAAM,0BAA0B,QAAQ,2BAA2B;AAAA,IACjE;AAAA,IACA;AAAA,EACF;AACA,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI;AAC3C,QAAM,cAAc,0BAA0B;AAE9C,QAAM,UAAU,oBAAI,IAAyB;AAC7C,QAAM,iBAAiB,oBAAI,IAAoB;AAE/C,WAAS,MAAM,KAAa,OAAoB;AAC9C,YAAQ,OAAO,GAAG;AAClB,YAAQ,IAAI,KAAK,KAAK;AACtB,QAAI,QAAQ,OAAO,YAAY;AAC7B,YAAM,SAAS,QAAQ,KAAK,EAAE,KAAK,EAAE;AACrC,UAAI,OAAO,WAAW,SAAU,SAAQ,OAAO,MAAM;AAAA,IACvD;AAAA,EACF;AAEA,WAAS,WAAW,KAAa,OAAoB,WAA4B;AAC/E,QAAI,MAAM,cAAc,UAAW,QAAO;AAC1C,YAAQ,OAAO,GAAG;AAClB,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,IAAI,QAAQ;AACV,UAAI,CAAC,OAAQ,QAAO;AACpB,YAAM,MAAM,YAAY,MAAM;AAC9B,YAAM,QAAQ,QAAQ,IAAI,GAAG;AAC7B,UAAI,CAAC,MAAO,QAAO;AACnB,YAAM,YAAY,IAAI;AACtB,UAAI,WAAW,KAAK,OAAO,SAAS,EAAG,QAAO;AAC9C,cAAQ,OAAO,GAAG;AAClB,cAAQ,IAAI,KAAK,KAAK;AACtB,aAAO,MAAM;AAAA,IACf;AAAA,IACA,WAAW,QAAQ,MAAM,aAAa;AACpC,UAAI,CAAC,OAAQ;AACb,UAAI,gBAAgB,EAAG;AACvB,YAAM,YAAY,IAAI;AACtB,YAAM,SAAS,YAAY;AAC3B,YAAM,kBAAkB,eAAe,OAAO,KAAK,IAAI,QAAQ,WAAW,IAAI;AAC9E,UAAI,mBAAmB,UAAW;AAClC,YAAM,YAAY,MAAM,GAAG,EAAE,MAAM,YAAY,WAAW,aAAa,gBAAgB,CAAC;AAAA,IAC1F;AAAA,IACA,QAAQ,QAAQ;AACd,UAAI,CAAC,OAAQ;AACb,UAAI,iBAAiB,EAAG;AACxB,YAAM,YAAY,IAAI;AACtB,YAAM,YAAY,MAAM,GAAG,EAAE,MAAM,MAAM,YAAY,WAAW,aAAa,YAAY,cAAc,CAAC;AAAA,IAC1G;AAAA,IACA,kBAAkB,OAAO;AACvB,UAAI,CAAC,MAAO;AACZ,iBAAW,CAAC,KAAK,KAAK,KAAK,SAAS;AAClC,cAAM,OAAO,MAAM;AACnB,YAAI,QAAQ,OAAO,SAAS,YAAa,KAA4B,UAAU,OAAO;AACpF,kBAAQ,OAAO,GAAG;AAAA,QACpB;AAAA,MACF;AACA,qBAAe,OAAO,KAAK;AAAA,IAC7B;AAAA,IACA,oBAAoB,OAAO;AACzB,UAAI,CAAC,MAAO,QAAO;AACnB,UAAI,2BAA2B,EAAG,QAAO;AACzC,YAAM,YAAY,IAAI;AACtB,YAAM,WAAW,eAAe,IAAI,KAAK;AACzC,UAAI,YAAY,QAAQ,YAAY,WAAW,wBAAyB,QAAO;AAC/E,qBAAe,IAAI,OAAO,SAAS;AACnC,aAAO;AAAA,IACT;AAAA,IACA,QAAQ;AACN,cAAQ,MAAM;AACd,qBAAe,MAAM;AAAA,IACvB;AAAA,IACA,OAAO;AACL,aAAO,QAAQ;AAAA,IACjB;AAAA,IACA,2BAA2B;AACzB,aAAO,MAAM,KAAK,QAAQ,KAAK,CAAC;AAAA,IAClC;AAAA,EACF;AACF;AAEA,IAAI,cAAsC;AAEnC,SAAS,2BAA4C;AAC1D,MAAI,CAAC,YAAa,eAAc,sBAAsB;AACtD,SAAO;AACT;AAEO,SAAS,qCAA2C;AACzD,gBAAc;AAChB;",
   "names": []
 }

package/dist/lib/commands/command-bus.js

@@ -183,7 +183,8 @@ class CommandBus {
       }
     }
     const snapshots = await this.prepareSnapshots(handler, effectiveOptions);
-    const result = await handler.execute(effectiveOptions.input, effectiveOptions.ctx);
+    const redoLogEntry = effectiveOptions.redoLogEntry ?? null;
+    const result = redoLogEntry && typeof handler.redo === "function" ? await handler.redo({ input: effectiveOptions.input, ctx: effectiveOptions.ctx, logEntry: redoLogEntry }) : await handler.execute(effectiveOptions.input, effectiveOptions.ctx);
     const afterSnapshot = await this.captureAfter(handler, effectiveOptions, result);
     const snapshotsWithAfter = { ...snapshots, after: afterSnapshot };
     const logMeta = await this.buildLog(handler, effectiveOptions, result, snapshotsWithAfter);
@@ -252,54 +253,62 @@ class CommandBus {
     if (!handler.undo || this.isUndoable(handler) === false) {
       throw new Error(`Command ${log.commandId} is not undoable`);
     }
-    const allInterceptors = getAllCommandInterceptorInstances();
-    let undoInterceptorMetadata = /* @__PURE__ */ new Map();
-    const userFeatures = allInterceptors.length ? await this.resolveUserFeaturesForInterceptors(ctx) : [];
-    if (allInterceptors.length) {
-      const undoCtx = { input: log.commandPayload, logEntry: log, undoToken };
-      const interceptorCtx = {
-        commandId: log.commandId,
-        auth: ctx.auth ?? null,
-        selectedOrganizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,
-        container: ctx.container
-      };
-      const beforeResult = await runCommandInterceptorsBeforeUndo(
-        allInterceptors,
-        log.commandId,
-        undoCtx,
-        interceptorCtx,
-        userFeatures
-      );
-      if (!beforeResult.ok) {
-        throw new CommandInterceptorError(beforeResult.error.message);
+    const claimed = await service.claimForUndo(log.id);
+    if (!claimed) throw new Error("Undo token already consumed");
+    try {
+      const allInterceptors = getAllCommandInterceptorInstances();
+      let undoInterceptorMetadata = /* @__PURE__ */ new Map();
+      const userFeatures = allInterceptors.length ? await this.resolveUserFeaturesForInterceptors(ctx) : [];
+      if (allInterceptors.length) {
+        const undoCtx = { input: log.commandPayload, logEntry: log, undoToken };
+        const interceptorCtx = {
+          commandId: log.commandId,
+          auth: ctx.auth ?? null,
+          selectedOrganizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,
+          container: ctx.container
+        };
+        const beforeResult = await runCommandInterceptorsBeforeUndo(
+          allInterceptors,
+          log.commandId,
+          undoCtx,
+          interceptorCtx,
+          userFeatures
+        );
+        if (!beforeResult.ok) {
+          throw new CommandInterceptorError(beforeResult.error.message);
+        }
+        undoInterceptorMetadata = beforeResult.metadataByInterceptor;
       }
-      undoInterceptorMetadata = beforeResult.metadataByInterceptor;
-    }
-    await handler.undo({
-      input: log.commandPayload,
-      ctx,
-      logEntry: log
-    });
-    await service.markUndone(log.id, this.buildUndoTraceLog(log, ctx));
-    if (allInterceptors.length) {
-      const undoCtx = { input: log.commandPayload, logEntry: log, undoToken };
-      const interceptorCtx = {
-        commandId: log.commandId,
-        auth: ctx.auth ?? null,
-        selectedOrganizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,
-        container: ctx.container
-      };
-      await runCommandInterceptorsAfterUndo(
-        allInterceptors,
-        log.commandId,
-        undoCtx,
-        interceptorCtx,
-        userFeatures,
-        undoInterceptorMetadata
-      );
+      await handler.undo({
+        input: log.commandPayload,
+        ctx,
+        logEntry: log
+      });
+      await service.markUndone(log.id, this.buildUndoTraceLog(log, ctx));
+      if (allInterceptors.length) {
+        const undoCtx = { input: log.commandPayload, logEntry: log, undoToken };
+        const interceptorCtx = {
+          commandId: log.commandId,
+          auth: ctx.auth ?? null,
+          selectedOrganizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,
+          container: ctx.container
+        };
+        await runCommandInterceptorsAfterUndo(
+          allInterceptors,
+          log.commandId,
+          undoCtx,
+          interceptorCtx,
+          userFeatures,
+          undoInterceptorMetadata
+        );
+      }
+      await this.invalidateCacheAfterUndo(log, ctx);
+      await this.flushCrudSideEffects(ctx.container);
+    } catch (err) {
+      await service.releaseUndoClaim(log.id).catch(() => {
+      });
+      throw err;
     }
-    await this.invalidateCacheAfterUndo(log, ctx);
-    await this.flushCrudSideEffects(ctx.container);
   }
   buildUndoTraceLog(log, ctx) {
     const snapshotBefore = log.snapshotAfter ?? null;

package/dist/lib/commands/command-bus.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/commands/command-bus.ts"],
-  "sourcesContent": ["import type { ActionLog } from '@open-mercato/core/modules/audit_logs/data/entities'\nimport type { ActionLogCreateInput } from '@open-mercato/core/modules/audit_logs/data/validators'\nimport { commandRegistry } from './registry'\nimport type {\n  CommandExecutionOptions,\n  CommandExecuteResult,\n  CommandHandler,\n  CommandLogBuilderArgs,\n  CommandLogMetadata,\n  CommandRuntimeContext,\n} from './types'\nimport { defaultUndoToken } from './types'\nimport type { ActionLogService } from '@open-mercato/core/modules/audit_logs/services/actionLogService'\nimport type { AwilixContainer } from 'awilix'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport {\n  canonicalizeResourceTag,\n  deriveResourceFromCommandId,\n  invalidateCrudCache,\n  pickFirstIdentifier,\n  isCrudCacheDebugEnabled,\n} from '@open-mercato/shared/lib/crud/cache'\nimport { normalizeCustomFieldKey } from '@open-mercato/shared/lib/custom-fields/keys'\nimport { getAllCommandInterceptorInstances } from './command-interceptor-store'\nimport {\n  runCommandInterceptorsBefore,\n  runCommandInterceptorsAfter,\n  runCommandInterceptorsBeforeUndo,\n  runCommandInterceptorsAfterUndo,\n} from './command-interceptor-runner'\nimport type { CommandInterceptorContext } from './command-interceptor'\nimport { CommandInterceptorError } from './errors'\n\nconst SKIPPED_ACTION_LOG_RESOURCE_KINDS = new Set<string>([\n  'audit_logs.access',\n  'audit_logs.action',\n  'dashboards.layout',\n  'dashboards.user_widgets',\n  'dashboards.role_widgets',\n])\n\nfunction asRecord(input: unknown): Record<string, unknown> | null {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) return null\n  return input as Record<string, unknown>\n}\n\nfunction toISOString(value: unknown): string | null {\n  if (value instanceof Date) {\n    const iso = value.toISOString()\n    return Number.isNaN(value.getTime()) ? null : iso\n  }\n  if (typeof value === 'string') {\n    const parsed = new Date(value)\n    return Number.isNaN(parsed.getTime()) ? null : parsed.toISOString()\n  }\n  return null\n}\n\nfunction deepEqual(a: unknown, b: unknown, seen?: Set<unknown>): boolean {\n  if (Object.is(a, b)) return true\n  if (a instanceof Date || b instanceof Date) {\n    const aIso = toISOString(a)\n    const bIso = toISOString(b)\n    if (aIso != null && bIso != null) return aIso === bIso\n    return false\n  }\n  if (Array.isArray(a) && Array.isArray(b)) {\n    if (a.length !== b.length) return false\n    return a.every((value, index) => deepEqual(value, b[index], seen))\n  }\n  if (a && b && typeof a === 'object' && typeof b === 'object') {\n    if (!seen) seen = new Set()\n    if (seen.has(a) || seen.has(b)) return false\n    seen.add(a)\n    seen.add(b)\n    const aRec = a as Record<string, unknown>\n    const bRec = b as Record<string, unknown>\n    const keysA = Object.keys(aRec)\n    const keysB = Object.keys(bRec)\n    if (keysA.length !== keysB.length) return false\n    return keysA.every((key) => deepEqual(aRec[key], bRec[key], seen))\n  }\n  return false\n}\n\nconst CUSTOM_FIELD_CONTAINER_KEYS = new Set(['custom', 'customFields', 'customValues', 'cf'])\nconst SKIPPED_CHANGE_KEYS = new Set(['updatedAt', 'updated_at'])\n\nfunction appendCustomFieldChanges(\n  changes: Record<string, { from: unknown; to: unknown }>,\n  before: unknown,\n  after: unknown\n): boolean {\n  const beforeRec = asRecord(before)\n  const afterRec = asRecord(after)\n  if (!beforeRec && !afterRec) return false\n  const left = beforeRec ?? {}\n  const right = afterRec ?? {}\n  const keys = new Set([...Object.keys(left), ...Object.keys(right)])\n  for (const key of keys) {\n    const from = left[key]\n    const to = right[key]\n    if (!deepEqual(from, to)) {\n      changes[normalizeCustomFieldKey(key)] = { from, to }\n    }\n  }\n  return true\n}\n\nfunction buildRecordChanges(\n  before: Record<string, unknown>,\n  after: Record<string, unknown>,\n): Record<string, { from: unknown; to: unknown }> {\n  return buildRecordChangesDeep(before, after)\n}\n\nfunction buildRecordChangesDeep(\n  before: Record<string, unknown>,\n  after: Record<string, unknown>,\n  prefix?: string,\n  seen?: Set<unknown>,\n): Record<string, { from: unknown; to: unknown }> {\n  const changes: Record<string, { from: unknown; to: unknown }> = {}\n  if (!seen) seen = new Set()\n  if (seen.has(before) || seen.has(after)) return changes\n  seen.add(before)\n  seen.add(after)\n  const keys = new Set([...Object.keys(before), ...Object.keys(after)])\n  for (const key of keys) {\n    if (SKIPPED_CHANGE_KEYS.has(key)) continue\n    if (CUSTOM_FIELD_CONTAINER_KEYS.has(key)) {\n      const handled = appendCustomFieldChanges(changes, before[key], after[key])\n      if (handled) continue\n    }\n    const from = before[key]\n    const to = after[key]\n    const path = prefix ? `${prefix}.${key}` : key\n    const fromRec = asRecord(from)\n    const toRec = asRecord(to)\n    if (fromRec && toRec) {\n      const nested = buildRecordChangesDeep(fromRec, toRec, path, seen)\n      if (Object.keys(nested).length) {\n        Object.assign(changes, nested)\n        continue\n      }\n    }\n    if (!deepEqual(from, to)) {\n      changes[path] = { from, to }\n    }\n  }\n  return changes\n}\n\nfunction deriveChangesFromSnapshots(\n  before: unknown,\n  after: unknown,\n): Record<string, { from: unknown; to: unknown }> | null {\n  const beforeRec = asRecord(before)\n  const afterRec = asRecord(after)\n  if (!beforeRec || !afterRec) return null\n  const changes = buildRecordChanges(beforeRec, afterRec)\n  return Object.keys(changes).length ? changes : null\n}\n\nfunction invertRecordedChanges(\n  changes: unknown,\n): Record<string, { from: unknown; to: unknown }> | null {\n  const source = asRecord(changes)\n  if (!source) return null\n  const inverted: Record<string, { from: unknown; to: unknown }> = {}\n  for (const [key, value] of Object.entries(source)) {\n    const entry = asRecord(value)\n    if (!entry || (!('from' in entry) && !('to' in entry))) continue\n    inverted[key] = {\n      from: entry.to,\n      to: entry.from,\n    }\n  }\n  return Object.keys(inverted).length ? inverted : null\n}\n\nfunction extractAliasList(source: unknown): string[] {\n  if (!source || typeof source !== 'object' || Array.isArray(source)) return []\n  const record = source as Record<string, unknown>\n  const raw = record.cacheAliases\n  if (!Array.isArray(raw)) return []\n  const aliases = new Set<string>()\n  for (const value of raw) {\n    if (typeof value !== 'string') continue\n    const normalized = canonicalizeResourceTag(value)\n    if (normalized) aliases.add(normalized)\n  }\n  return Array.from(aliases)\n}\n\nexport class CommandBus {\n  async execute<TInput = unknown, TResult = unknown>(\n    commandId: string,\n    options: CommandExecutionOptions<TInput>\n  ): Promise<CommandExecuteResult<TResult>> {\n    const handler = this.resolveHandler<TInput, TResult>(commandId)\n\n    // Run beforeExecute command interceptors\n    const allInterceptors = getAllCommandInterceptorInstances()\n    let interceptorMetadata = new Map<string, Record<string, unknown>>()\n    let effectiveOptions = options\n    const userFeatures = allInterceptors.length\n      ? await this.resolveUserFeaturesForInterceptors(options.ctx)\n      : []\n    if (allInterceptors.length) {\n      const interceptorCtx: CommandInterceptorContext = {\n        commandId,\n        auth: options.ctx.auth ?? null,\n        selectedOrganizationId: options.ctx.selectedOrganizationId ?? options.ctx.auth?.orgId ?? null,\n        container: options.ctx.container,\n      }\n      const beforeResult = await runCommandInterceptorsBefore(\n        allInterceptors, commandId, options.input, interceptorCtx, userFeatures,\n      )\n      if (!beforeResult.ok) {\n        throw new CommandInterceptorError(beforeResult.error!.message)\n      }\n      interceptorMetadata = beforeResult.metadataByInterceptor\n      if (beforeResult.modifiedInput) {\n        effectiveOptions = {\n          ...options,\n          input: { ...(options.input as object), ...beforeResult.modifiedInput } as TInput,\n        }\n      }\n    }\n\n    const snapshots = await this.prepareSnapshots(handler, effectiveOptions)\n    const result = await handler.execute(effectiveOptions.input, effectiveOptions.ctx)\n    const afterSnapshot = await this.captureAfter(handler, effectiveOptions, result)\n    const snapshotsWithAfter = { ...snapshots, after: afterSnapshot }\n    const logMeta = await this.buildLog(handler, effectiveOptions, result, snapshotsWithAfter)\n    let mergedMeta = this.mergeMetadata(effectiveOptions.metadata, logMeta)\n    const undoable = this.isUndoable(handler)\n    if (undoable) {\n      mergedMeta = mergedMeta ?? {}\n      if (!mergedMeta.undoToken) mergedMeta.undoToken = defaultUndoToken()\n      if (mergedMeta.actorUserId === undefined) mergedMeta.actorUserId = effectiveOptions.ctx.auth?.sub ?? null\n    }\n    if (afterSnapshot !== undefined && afterSnapshot !== null) {\n      if (!mergedMeta) {\n        mergedMeta = { snapshotAfter: afterSnapshot }\n      } else if (!mergedMeta.snapshotAfter) {\n        mergedMeta.snapshotAfter = afterSnapshot\n      }\n    }\n    if (snapshots.before) {\n      if (!mergedMeta) {\n        mergedMeta = { snapshotBefore: snapshots.before }\n      } else if (!mergedMeta.snapshotBefore) {\n        mergedMeta.snapshotBefore = snapshots.before\n      }\n    }\n    if (mergedMeta?.snapshotBefore !== undefined && mergedMeta?.snapshotAfter !== undefined) {\n      const currentChanges = mergedMeta.changes\n      const shouldInfer =\n        currentChanges === undefined ||\n        currentChanges === null ||\n        (typeof currentChanges === 'object' && !Array.isArray(currentChanges) && Object.keys(currentChanges).length === 0)\n      if (shouldInfer) {\n        const inferred = deriveChangesFromSnapshots(mergedMeta.snapshotBefore, mergedMeta.snapshotAfter)\n        if (inferred) mergedMeta.changes = inferred\n      }\n    }\n    const logEntry = await this.persistLog(commandId, effectiveOptions, mergedMeta)\n\n    // Run afterExecute command interceptors\n    let finalResult = result\n    if (allInterceptors.length) {\n      const interceptorCtx: CommandInterceptorContext = {\n        commandId,\n        auth: effectiveOptions.ctx.auth ?? null,\n        selectedOrganizationId: effectiveOptions.ctx.selectedOrganizationId ?? effectiveOptions.ctx.auth?.orgId ?? null,\n        container: effectiveOptions.ctx.container,\n      }\n      const afterResult = await runCommandInterceptorsAfter(\n        allInterceptors, commandId, effectiveOptions.input, result, interceptorCtx,\n        userFeatures, interceptorMetadata,\n      )\n      if (afterResult.modifiedResult && typeof result === 'object' && result) {\n        finalResult = { ...(result as object), ...afterResult.modifiedResult } as Awaited<TResult>\n      }\n    }\n\n    if (!effectiveOptions.skipCacheInvalidation) {\n      await this.invalidateCacheAfterExecute(commandId, effectiveOptions, finalResult, mergedMeta)\n    }\n    await this.flushCrudSideEffects(effectiveOptions.ctx.container)\n    return { result: finalResult, logEntry }\n  }\n\n  async undo(undoToken: string, ctx: CommandRuntimeContext): Promise<void> {\n    const service = (ctx.container.resolve('actionLogService') as ActionLogService)\n    const log = await service.findByUndoToken(undoToken)\n    if (!log) throw new Error('Undo token expired or not found')\n    const handler = this.resolveHandler(log.commandId)\n    if (!handler.undo || this.isUndoable(handler) === false) {\n      throw new Error(`Command ${log.commandId} is not undoable`)\n    }\n\n    // Run beforeUndo command interceptors\n    const allInterceptors = getAllCommandInterceptorInstances()\n    let undoInterceptorMetadata = new Map<string, Record<string, unknown>>()\n    const userFeatures = allInterceptors.length\n      ? await this.resolveUserFeaturesForInterceptors(ctx)\n      : []\n    if (allInterceptors.length) {\n      const undoCtx = { input: log.commandPayload, logEntry: log, undoToken }\n      const interceptorCtx: CommandInterceptorContext = {\n        commandId: log.commandId,\n        auth: ctx.auth ?? null,\n        selectedOrganizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n        container: ctx.container,\n      }\n      const beforeResult = await runCommandInterceptorsBeforeUndo(\n        allInterceptors, log.commandId, undoCtx, interceptorCtx, userFeatures,\n      )\n      if (!beforeResult.ok) {\n        throw new CommandInterceptorError(beforeResult.error!.message)\n      }\n      undoInterceptorMetadata = beforeResult.metadataByInterceptor\n    }\n\n    await handler.undo({\n      input: log.commandPayload as Parameters<NonNullable<typeof handler.undo>>[0]['input'],\n      ctx,\n      logEntry: log,\n    })\n    await service.markUndone(log.id, this.buildUndoTraceLog(log, ctx))\n\n    // Run afterUndo command interceptors\n    if (allInterceptors.length) {\n      const undoCtx = { input: log.commandPayload, logEntry: log, undoToken }\n      const interceptorCtx: CommandInterceptorContext = {\n        commandId: log.commandId,\n        auth: ctx.auth ?? null,\n        selectedOrganizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n        container: ctx.container,\n      }\n      await runCommandInterceptorsAfterUndo(\n        allInterceptors, log.commandId, undoCtx, interceptorCtx,\n        userFeatures, undoInterceptorMetadata,\n      )\n    }\n\n    await this.invalidateCacheAfterUndo(log, ctx)\n    await this.flushCrudSideEffects(ctx.container)\n  }\n\n  private buildUndoTraceLog(log: ActionLog, ctx: CommandRuntimeContext): ActionLogCreateInput | undefined {\n    const snapshotBefore = log.snapshotAfter ?? null\n    const snapshotAfter = log.snapshotBefore ?? null\n    const changes =\n      deriveChangesFromSnapshots(snapshotBefore, snapshotAfter)\n      ?? invertRecordedChanges(log.changesJson)\n      ?? undefined\n\n    const baseContext = asRecord(log.contextJson) ?? {}\n    const context = {\n      ...baseContext,\n      historyAction: 'undo',\n      sourceLogId: log.id,\n      sourceCommandId: log.commandId,\n    }\n\n    return {\n      tenantId: log.tenantId ?? ctx.auth?.tenantId ?? null,\n      organizationId: log.organizationId ?? ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n      actorUserId: ctx.auth?.sub ?? log.actorUserId ?? null,\n      commandId: log.commandId,\n      actionLabel: log.actionLabel ?? undefined,\n      resourceKind: log.resourceKind ?? undefined,\n      resourceId: log.resourceId ?? undefined,\n      parentResourceKind: log.parentResourceKind ?? null,\n      parentResourceId: log.parentResourceId ?? null,\n      relatedResourceKind: log.relatedResourceKind ?? null,\n      relatedResourceId: log.relatedResourceId ?? null,\n      snapshotBefore,\n      snapshotAfter,\n      changes,\n      context,\n    }\n  }\n\n  private async resolveUserFeaturesForInterceptors(ctx: CommandRuntimeContext): Promise<string[]> {\n    if (!ctx.auth) return []\n    try {\n      type RbacLike = { getGrantedFeatures: (userId: string, opts: { tenantId: string | null; organizationId: string | null }) => Promise<string[]> }\n      const rbac = ctx.container.resolve('rbacService') as RbacLike | undefined\n      if (rbac?.getGrantedFeatures) {\n        return await rbac.getGrantedFeatures(ctx.auth.sub, {\n          tenantId: ctx.auth.tenantId,\n          organizationId: ctx.selectedOrganizationId ?? ctx.auth.orgId,\n        })\n      }\n    } catch {\n      // Intentional: rbacService is not registered in all runtime contexts (CLI, tests, bootstrap).\n      // Falling through to return [] is safe \u2014 interceptors without feature gating still run.\n    }\n    return []\n  }\n\n  private resolveHandler<TInput, TResult>(commandId: string): CommandHandler<TInput, TResult> {\n    const handler = commandRegistry.get<TInput, TResult>(commandId)\n    if (!handler) {\n      const moduleName = commandId.split('.')[0]\n      const registered = commandRegistry.list()\n      const sameModule = registered.filter((id) => id.split('.')[0] === moduleName)\n      const hint = sameModule.length > 0\n        ? ` Registered commands for module \"${moduleName}\": [${sameModule.join(', ')}].`\n        : ` No commands registered for module \"${moduleName}\". Ensure the command file is imported (side-effect) in the module's index.ts.`\n      throw new Error(`Command handler not registered for id ${commandId}.${hint}`)\n    }\n    return handler\n  }\n\n  private async prepareSnapshots<TInput, TResult>(\n    handler: CommandHandler<TInput, TResult>,\n    options: CommandExecutionOptions<TInput>\n  ): Promise<{ before?: unknown }> {\n    if (!handler.prepare) return {}\n    try {\n      return (await handler.prepare(options.input, options.ctx)) || {}\n    } catch (err) {\n      throw err\n    }\n  }\n\n  private async captureAfter<TInput, TResult>(\n    handler: CommandHandler<TInput, TResult>,\n    options: CommandExecutionOptions<TInput>,\n    result: TResult\n  ): Promise<unknown> {\n    if (!handler.captureAfter) return undefined\n    return handler.captureAfter(options.input, result, options.ctx)\n  }\n\n  private async buildLog<TInput, TResult>(\n    handler: CommandHandler<TInput, TResult>,\n    options: CommandExecutionOptions<TInput>,\n    result: TResult,\n    snapshots: { before?: unknown; after?: unknown }\n  ): Promise<CommandLogMetadata | null> {\n    if (!handler.buildLog) return null\n    const args: CommandLogBuilderArgs<TInput, TResult> = {\n      input: options.input,\n      result,\n      ctx: options.ctx,\n      snapshots,\n    }\n    return (await handler.buildLog(args)) || null\n  }\n\n  private mergeMetadata(primary?: CommandLogMetadata | null, secondary?: CommandLogMetadata | null): CommandLogMetadata | null {\n    if (!primary && !secondary) return null\n    return {\n      skipLog: secondary?.skipLog ?? primary?.skipLog ?? false,\n      tenantId: secondary?.tenantId ?? primary?.tenantId ?? null,\n      organizationId: secondary?.organizationId ?? primary?.organizationId ?? null,\n      actorUserId: secondary?.actorUserId ?? primary?.actorUserId ?? null,\n      actionLabel: secondary?.actionLabel ?? primary?.actionLabel ?? null,\n      resourceKind: secondary?.resourceKind ?? primary?.resourceKind ?? null,\n      resourceId: secondary?.resourceId ?? primary?.resourceId ?? null,\n      parentResourceKind: secondary?.parentResourceKind ?? primary?.parentResourceKind ?? null,\n      parentResourceId: secondary?.parentResourceId ?? primary?.parentResourceId ?? null,\n      relatedResourceKind: secondary?.relatedResourceKind ?? primary?.relatedResourceKind ?? null,\n      relatedResourceId: secondary?.relatedResourceId ?? primary?.relatedResourceId ?? null,\n      undoToken: secondary?.undoToken ?? primary?.undoToken ?? null,\n      payload: secondary?.payload ?? primary?.payload ?? null,\n      snapshotBefore: secondary?.snapshotBefore ?? primary?.snapshotBefore ?? null,\n      snapshotAfter: secondary?.snapshotAfter ?? primary?.snapshotAfter ?? null,\n      changes: secondary?.changes ?? primary?.changes ?? null,\n      context: secondary?.context ?? primary?.context ?? null,\n    }\n  }\n\n  private async persistLog<TInput>(\n    commandId: string,\n    options: CommandExecutionOptions<TInput>,\n    metadata: CommandLogMetadata | null\n  ): Promise<ActionLog | null> {\n    if (!metadata) return null\n    if (metadata.skipLog) return null\n    const resourceKind =\n      typeof metadata.resourceKind === 'string' ? metadata.resourceKind : null\n    if (resourceKind && SKIPPED_ACTION_LOG_RESOURCE_KINDS.has(resourceKind)) {\n      return null\n    }\n    let service: ActionLogService | null = null\n    try {\n      service = (options.ctx.container.resolve('actionLogService') as ActionLogService)\n    } catch {\n      service = null\n    }\n    if (!service) return null\n\n    const tenantId = metadata.tenantId ?? options.ctx.auth?.tenantId ?? null\n    const organizationId =\n      metadata.organizationId ?? options.ctx.selectedOrganizationId ?? options.ctx.auth?.orgId ?? null\n    const actorUserId = metadata.actorUserId ?? options.ctx.auth?.sub ?? null\n    const payload: Record<string, unknown> = {\n      tenantId: tenantId ?? undefined,\n      organizationId: organizationId ?? undefined,\n      actorUserId: actorUserId ?? undefined,\n      commandId,\n    }\n\n    if (metadata) {\n      if ('actionLabel' in metadata && metadata.actionLabel != null) payload.actionLabel = metadata.actionLabel\n      if ('resourceKind' in metadata && metadata.resourceKind != null) payload.resourceKind = metadata.resourceKind\n      if ('resourceId' in metadata && metadata.resourceId != null) payload.resourceId = metadata.resourceId\n      if ('parentResourceKind' in metadata && metadata.parentResourceKind != null) payload.parentResourceKind = metadata.parentResourceKind\n      if ('parentResourceId' in metadata && metadata.parentResourceId != null) payload.parentResourceId = metadata.parentResourceId\n      if ('relatedResourceKind' in metadata && metadata.relatedResourceKind != null) payload.relatedResourceKind = metadata.relatedResourceKind\n      if ('relatedResourceId' in metadata && metadata.relatedResourceId != null) payload.relatedResourceId = metadata.relatedResourceId\n      if ('undoToken' in metadata && metadata.undoToken != null) payload.undoToken = metadata.undoToken\n      if ('payload' in metadata && metadata.payload !== undefined) payload.commandPayload = metadata.payload\n      if ('snapshotBefore' in metadata && metadata.snapshotBefore !== undefined) payload.snapshotBefore = metadata.snapshotBefore\n      if ('snapshotAfter' in metadata && metadata.snapshotAfter !== undefined) payload.snapshotAfter = metadata.snapshotAfter\n      if ('changes' in metadata && metadata.changes !== undefined && metadata.changes !== null) payload.changes = metadata.changes\n      if ('context' in metadata && metadata.context !== undefined && metadata.context !== null) payload.context = metadata.context\n    }\n\n    const redoEnvelope = wrapRedoPayload('commandPayload' in payload ? (payload.commandPayload as unknown) : undefined, options.input)\n    payload.commandPayload = redoEnvelope\n\n    return await service.log(payload as ActionLogCreateInput)\n  }\n\n  private isUndoable(handler: CommandHandler<unknown, unknown>): boolean {\n    return handler.isUndoable !== false && typeof handler.undo === 'function'\n  }\n\n  private async invalidateCacheAfterExecute<TResult>(\n    commandId: string,\n    options: CommandExecutionOptions<unknown>,\n    result: TResult,\n    metadata: CommandLogMetadata | null\n  ): Promise<void> {\n    const resource = typeof metadata?.resourceKind === 'string' ? metadata.resourceKind : null\n    if (!resource) return\n    try {\n      const ctx = options.ctx\n      const resultRecord = asRecord(result)\n      const resultEntity = asRecord(resultRecord?.entity)\n      const inputRecord = asRecord(options.input)\n      const inputEntity = asRecord(inputRecord?.entity)\n\n      const recordId = pickFirstIdentifier(\n        metadata?.resourceId,\n        resultRecord?.entityId,\n        resultRecord?.id,\n        resultRecord?.recordId,\n        resultEntity?.id,\n        inputRecord?.id,\n        inputRecord?.entityId,\n        inputRecord?.recordId,\n        inputEntity?.id\n      )\n\n      const organizationId = pickFirstIdentifier(\n        metadata?.organizationId,\n        resultRecord?.organizationId,\n        resultEntity?.organizationId,\n        inputRecord?.organizationId,\n        inputEntity?.organizationId,\n        ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n      )\n\n      const tenantId = pickFirstIdentifier(\n        metadata?.tenantId,\n        resultRecord?.tenantId,\n        resultEntity?.tenantId,\n        inputRecord?.tenantId,\n        inputEntity?.tenantId,\n        ctx.auth?.tenantId ?? null\n      )\n\n      const fallbackTenant = pickFirstIdentifier(metadata?.tenantId, ctx.auth?.tenantId ?? null)\n\n      const aliasSet = new Set<string>()\n      for (const alias of extractAliasList(metadata?.context ?? null)) {\n        aliasSet.add(alias)\n      }\n      const derived = deriveResourceFromCommandId(commandId)\n      if (derived) aliasSet.add(derived)\n      const aliasExtras = Array.from(aliasSet)\n      await invalidateCrudCache(\n        ctx.container,\n        resource,\n        { id: recordId, organizationId, tenantId },\n        fallbackTenant,\n        `command:${commandId}:execute`,\n        aliasExtras\n      )\n    } catch (err) {\n      if (isCrudCacheDebugEnabled()) {\n        try {\n          console.debug('[crud][cache] execute-invalidation failed', { commandId, err })\n        } catch {}\n      }\n    }\n  }\n\n  private async invalidateCacheAfterUndo(log: ActionLog, ctx: CommandRuntimeContext): Promise<void> {\n    const resource = typeof log.resourceKind === 'string' ? log.resourceKind : null\n    if (!resource) return\n    try {\n      const recordId = pickFirstIdentifier(log.resourceId)\n      const organizationId = pickFirstIdentifier(log.organizationId, ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null)\n      const tenantId = pickFirstIdentifier(log.tenantId, ctx.auth?.tenantId ?? null)\n      const fallbackTenant = pickFirstIdentifier(log.tenantId, ctx.auth?.tenantId ?? null)\n      const aliasSet = new Set<string>()\n      for (const alias of extractAliasList(log.contextJson ?? null)) {\n        aliasSet.add(alias)\n      }\n      const derived = deriveResourceFromCommandId(log.commandId)\n      if (derived) aliasSet.add(derived)\n      const aliasExtras = Array.from(aliasSet)\n      await invalidateCrudCache(\n        ctx.container,\n        resource,\n        { id: recordId, organizationId, tenantId },\n        fallbackTenant,\n        `command:${log.commandId}:undo`,\n        aliasExtras\n      )\n    } catch (err) {\n      if (isCrudCacheDebugEnabled()) {\n        try {\n          console.debug('[crud][cache] undo-invalidation failed', { commandId: log.commandId, err })\n        } catch {}\n      }\n    }\n  }\n\n  private async flushCrudSideEffects(container: AwilixContainer): Promise<void> {\n    try {\n      const dataEngine = (container.resolve('dataEngine') as DataEngine)\n      await dataEngine.flushOrmEntityChanges()\n    } catch {\n      // best-effort: failures should not block command execution\n    }\n  }\n}\n\ntype RedoEnvelope = {\n  __redoInput: unknown\n  [key: string]: unknown\n}\n\nfunction wrapRedoPayload(existing: unknown, input: unknown): RedoEnvelope {\n  if (!existing || typeof existing !== 'object' || Array.isArray(existing)) {\n    const envelope: RedoEnvelope = { __redoInput: input }\n    if (existing !== undefined) envelope.value = existing\n    return envelope\n  }\n  const current = existing as Record<string, unknown>\n  if ('__redoInput' in current && current.__redoInput !== undefined) {\n    return current as RedoEnvelope\n  }\n  return { __redoInput: input, ...current }\n}\n"],
-  "mappings": "AAEA,SAAS,uBAAuB;AAShC,SAAS,wBAAwB;AAIjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,yCAAyC;AAClD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,+BAA+B;AAExC,MAAM,oCAAoC,oBAAI,IAAY;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,SAAS,OAAgD;AAChE,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,SAAO;AACT;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,iBAAiB,MAAM;AACzB,UAAM,MAAM,MAAM,YAAY;AAC9B,WAAO,OAAO,MAAM,MAAM,QAAQ,CAAC,IAAI,OAAO;AAAA,EAChD;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,WAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,OAAO,OAAO,YAAY;AAAA,EACpE;AACA,SAAO;AACT;AAEA,SAAS,UAAU,GAAY,GAAY,MAA8B;AACvE,MAAI,OAAO,GAAG,GAAG,CAAC,EAAG,QAAO;AAC5B,MAAI,aAAa,QAAQ,aAAa,MAAM;AAC1C,UAAM,OAAO,YAAY,CAAC;AAC1B,UAAM,OAAO,YAAY,CAAC;AAC1B,QAAI,QAAQ,QAAQ,QAAQ,KAAM,QAAO,SAAS;AAClD,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,CAAC,KAAK,MAAM,QAAQ,CAAC,GAAG;AACxC,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,WAAO,EAAE,MAAM,CAAC,OAAO,UAAU,UAAU,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC;AAAA,EACnE;AACA,MAAI,KAAK,KAAK,OAAO,MAAM,YAAY,OAAO,MAAM,UAAU;AAC5D,QAAI,CAAC,KAAM,QAAO,oBAAI,IAAI;AAC1B,QAAI,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAG,QAAO;AACvC,SAAK,IAAI,CAAC;AACV,SAAK,IAAI,CAAC;AACV,UAAM,OAAO;AACb,UAAM,OAAO;AACb,UAAM,QAAQ,OAAO,KAAK,IAAI;AAC9B,UAAM,QAAQ,OAAO,KAAK,IAAI;AAC9B,QAAI,MAAM,WAAW,MAAM,OAAQ,QAAO;AAC1C,WAAO,MAAM,MAAM,CAAC,QAAQ,UAAU,KAAK,GAAG,GAAG,KAAK,GAAG,GAAG,IAAI,CAAC;AAAA,EACnE;AACA,SAAO;AACT;AAEA,MAAM,8BAA8B,oBAAI,IAAI,CAAC,UAAU,gBAAgB,gBAAgB,IAAI,CAAC;AAC5F,MAAM,sBAAsB,oBAAI,IAAI,CAAC,aAAa,YAAY,CAAC;AAE/D,SAAS,yBACP,SACA,QACA,OACS;AACT,QAAM,YAAY,SAAS,MAAM;AACjC,QAAM,WAAW,SAAS,KAAK;AAC/B,MAAI,CAAC,aAAa,CAAC,SAAU,QAAO;AACpC,QAAM,OAAO,aAAa,CAAC;AAC3B,QAAM,QAAQ,YAAY,CAAC;AAC3B,QAAM,OAAO,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,IAAI,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AAClE,aAAW,OAAO,MAAM;AACtB,UAAM,OAAO,KAAK,GAAG;AACrB,UAAM,KAAK,MAAM,GAAG;AACpB,QAAI,CAAC,UAAU,MAAM,EAAE,GAAG;AACxB,cAAQ,wBAAwB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG;AAAA,IACrD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBACP,QACA,OACgD;AAChD,SAAO,uBAAuB,QAAQ,KAAK;AAC7C;AAEA,SAAS,uBACP,QACA,OACA,QACA,MACgD;AAChD,QAAM,UAA0D,CAAC;AACjE,MAAI,CAAC,KAAM,QAAO,oBAAI,IAAI;AAC1B,MAAI,KAAK,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,EAAG,QAAO;AAChD,OAAK,IAAI,MAAM;AACf,OAAK,IAAI,KAAK;AACd,QAAM,OAAO,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AACpE,aAAW,OAAO,MAAM;AACtB,QAAI,oBAAoB,IAAI,GAAG,EAAG;AAClC,QAAI,4BAA4B,IAAI,GAAG,GAAG;AACxC,YAAM,UAAU,yBAAyB,SAAS,OAAO,GAAG,GAAG,MAAM,GAAG,CAAC;AACzE,UAAI,QAAS;AAAA,IACf;AACA,UAAM,OAAO,OAAO,GAAG;AACvB,UAAM,KAAK,MAAM,GAAG;AACpB,UAAM,OAAO,SAAS,GAAG,MAAM,IAAI,GAAG,KAAK;AAC3C,UAAM,UAAU,SAAS,IAAI;AAC7B,UAAM,QAAQ,SAAS,EAAE;AACzB,QAAI,WAAW,OAAO;AACpB,YAAM,SAAS,uBAAuB,SAAS,OAAO,MAAM,IAAI;AAChE,UAAI,OAAO,KAAK,MAAM,EAAE,QAAQ;AAC9B,eAAO,OAAO,SAAS,MAAM;AAC7B;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,UAAU,MAAM,EAAE,GAAG;AACxB,cAAQ,IAAI,IAAI,EAAE,MAAM,GAAG;AAAA,IAC7B;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,2BACP,QACA,OACuD;AACvD,QAAM,YAAY,SAAS,MAAM;AACjC,QAAM,WAAW,SAAS,KAAK;AAC/B,MAAI,CAAC,aAAa,CAAC,SAAU,QAAO;AACpC,QAAM,UAAU,mBAAmB,WAAW,QAAQ;AACtD,SAAO,OAAO,KAAK,OAAO,EAAE,SAAS,UAAU;AACjD;AAEA,SAAS,sBACP,SACuD;AACvD,QAAM,SAAS,SAAS,OAAO;AAC/B,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,WAA2D,CAAC;AAClE,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,UAAM,QAAQ,SAAS,KAAK;AAC5B,QAAI,CAAC,SAAU,EAAE,UAAU,UAAU,EAAE,QAAQ,OAAS;AACxD,aAAS,GAAG,IAAI;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,IAAI,MAAM;AAAA,IACZ;AAAA,EACF;AACA,SAAO,OAAO,KAAK,QAAQ,EAAE,SAAS,WAAW;AACnD;AAEA,SAAS,iBAAiB,QAA2B;AACnD,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AAC5E,QAAM,SAAS;AACf,QAAM,MAAM,OAAO;AACnB,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACjC,QAAM,UAAU,oBAAI,IAAY;AAChC,aAAW,SAAS,KAAK;AACvB,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,aAAa,wBAAwB,KAAK;AAChD,QAAI,WAAY,SAAQ,IAAI,UAAU;AAAA,EACxC;AACA,SAAO,MAAM,KAAK,OAAO;AAC3B;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,QACJ,WACA,SACwC;AACxC,UAAM,UAAU,KAAK,eAAgC,SAAS;AAG9D,UAAM,kBAAkB,kCAAkC;AAC1D,QAAI,sBAAsB,oBAAI,IAAqC;AACnE,QAAI,mBAAmB;AACvB,UAAM,eAAe,gBAAgB,SACjC,MAAM,KAAK,mCAAmC,QAAQ,GAAG,IACzD,CAAC;AACL,QAAI,gBAAgB,QAAQ;AAC1B,YAAM,iBAA4C;AAAA,QAChD;AAAA,QACA,MAAM,QAAQ,IAAI,QAAQ;AAAA,QAC1B,wBAAwB,QAAQ,IAAI,0BAA0B,QAAQ,IAAI,MAAM,SAAS;AAAA,QACzF,WAAW,QAAQ,IAAI;AAAA,MACzB;AACA,YAAM,eAAe,MAAM;AAAA,QACzB;AAAA,QAAiB;AAAA,QAAW,QAAQ;AAAA,QAAO;AAAA,QAAgB;AAAA,MAC7D;AACA,UAAI,CAAC,aAAa,IAAI;AACpB,cAAM,IAAI,wBAAwB,aAAa,MAAO,OAAO;AAAA,MAC/D;AACA,4BAAsB,aAAa;AACnC,UAAI,aAAa,eAAe;AAC9B,2BAAmB;AAAA,UACjB,GAAG;AAAA,UACH,OAAO,EAAE,GAAI,QAAQ,OAAkB,GAAG,aAAa,cAAc;AAAA,QACvE;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,KAAK,iBAAiB,SAAS,gBAAgB;AACvE,UAAM,SAAS,MAAM,QAAQ,QAAQ,iBAAiB,OAAO,iBAAiB,GAAG;AACjF,UAAM,gBAAgB,MAAM,KAAK,aAAa,SAAS,kBAAkB,MAAM;AAC/E,UAAM,qBAAqB,EAAE,GAAG,WAAW,OAAO,cAAc;AAChE,UAAM,UAAU,MAAM,KAAK,SAAS,SAAS,kBAAkB,QAAQ,kBAAkB;AACzF,QAAI,aAAa,KAAK,cAAc,iBAAiB,UAAU,OAAO;AACtE,UAAM,WAAW,KAAK,WAAW,OAAO;AACxC,QAAI,UAAU;AACZ,mBAAa,cAAc,CAAC;AAC5B,UAAI,CAAC,WAAW,UAAW,YAAW,YAAY,iBAAiB;AACnE,UAAI,WAAW,gBAAgB,OAAW,YAAW,cAAc,iBAAiB,IAAI,MAAM,OAAO;AAAA,IACvG;AACA,QAAI,kBAAkB,UAAa,kBAAkB,MAAM;AACzD,UAAI,CAAC,YAAY;AACf,qBAAa,EAAE,eAAe,cAAc;AAAA,MAC9C,WAAW,CAAC,WAAW,eAAe;AACpC,mBAAW,gBAAgB;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,UAAU,QAAQ;AACpB,UAAI,CAAC,YAAY;AACf,qBAAa,EAAE,gBAAgB,UAAU,OAAO;AAAA,MAClD,WAAW,CAAC,WAAW,gBAAgB;AACrC,mBAAW,iBAAiB,UAAU;AAAA,MACxC;AAAA,IACF;AACA,QAAI,YAAY,mBAAmB,UAAa,YAAY,kBAAkB,QAAW;AACvF,YAAM,iBAAiB,WAAW;AAClC,YAAM,cACJ,mBAAmB,UACnB,mBAAmB,QAClB,OAAO,mBAAmB,YAAY,CAAC,MAAM,QAAQ,cAAc,KAAK,OAAO,KAAK,cAAc,EAAE,WAAW;AAClH,UAAI,aAAa;AACf,cAAM,WAAW,2BAA2B,WAAW,gBAAgB,WAAW,aAAa;AAC/F,YAAI,SAAU,YAAW,UAAU;AAAA,MACrC;AAAA,IACF;AACA,UAAM,WAAW,MAAM,KAAK,WAAW,WAAW,kBAAkB,UAAU;AAG9E,QAAI,cAAc;AAClB,QAAI,gBAAgB,QAAQ;AAC1B,YAAM,iBAA4C;AAAA,QAChD;AAAA,QACA,MAAM,iBAAiB,IAAI,QAAQ;AAAA,QACnC,wBAAwB,iBAAiB,IAAI,0BAA0B,iBAAiB,IAAI,MAAM,SAAS;AAAA,QAC3G,WAAW,iBAAiB,IAAI;AAAA,MAClC;AACA,YAAM,cAAc,MAAM;AAAA,QACxB;AAAA,QAAiB;AAAA,QAAW,iBAAiB;AAAA,QAAO;AAAA,QAAQ;AAAA,QAC5D;AAAA,QAAc;AAAA,MAChB;AACA,UAAI,YAAY,kBAAkB,OAAO,WAAW,YAAY,QAAQ;AACtE,sBAAc,EAAE,GAAI,QAAmB,GAAG,YAAY,eAAe;AAAA,MACvE;AAAA,IACF;AAEA,QAAI,CAAC,iBAAiB,uBAAuB;AAC3C,YAAM,KAAK,4BAA4B,WAAW,kBAAkB,aAAa,UAAU;AAAA,IAC7F;AACA,UAAM,KAAK,qBAAqB,iBAAiB,IAAI,SAAS;AAC9D,WAAO,EAAE,QAAQ,aAAa,SAAS;AAAA,EACzC;AAAA,EAEA,MAAM,KAAK,WAAmB,KAA2C;AACvE,UAAM,UAAW,IAAI,UAAU,QAAQ,kBAAkB;AACzD,UAAM,MAAM,MAAM,QAAQ,gBAAgB,SAAS;AACnD,QAAI,CAAC,IAAK,OAAM,IAAI,MAAM,iCAAiC;AAC3D,UAAM,UAAU,KAAK,eAAe,IAAI,SAAS;AACjD,QAAI,CAAC,QAAQ,QAAQ,KAAK,WAAW,OAAO,MAAM,OAAO;AACvD,YAAM,IAAI,MAAM,WAAW,IAAI,SAAS,kBAAkB;AAAA,IAC5D;AAGA,UAAM,kBAAkB,kCAAkC;AAC1D,QAAI,0BAA0B,oBAAI,IAAqC;AACvE,UAAM,eAAe,gBAAgB,SACjC,MAAM,KAAK,mCAAmC,GAAG,IACjD,CAAC;AACL,QAAI,gBAAgB,QAAQ;AAC1B,YAAM,UAAU,EAAE,OAAO,IAAI,gBAAgB,UAAU,KAAK,UAAU;AACtE,YAAM,iBAA4C;AAAA,QAChD,WAAW,IAAI;AAAA,QACf,MAAM,IAAI,QAAQ;AAAA,QAClB,wBAAwB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,QACzE,WAAW,IAAI;AAAA,MACjB;AACA,YAAM,eAAe,MAAM;AAAA,QACzB;AAAA,QAAiB,IAAI;AAAA,QAAW;AAAA,QAAS;AAAA,QAAgB;AAAA,MAC3D;AACA,UAAI,CAAC,aAAa,IAAI;AACpB,cAAM,IAAI,wBAAwB,aAAa,MAAO,OAAO;AAAA,MAC/D;AACA,gCAA0B,aAAa;AAAA,IACzC;AAEA,UAAM,QAAQ,KAAK;AAAA,MACjB,OAAO,IAAI;AAAA,MACX;AAAA,MACA,UAAU;AAAA,IACZ,CAAC;AACD,UAAM,QAAQ,WAAW,IAAI,IAAI,KAAK,kBAAkB,KAAK,GAAG,CAAC;AAGjE,QAAI,gBAAgB,QAAQ;AAC1B,YAAM,UAAU,EAAE,OAAO,IAAI,gBAAgB,UAAU,KAAK,UAAU;AACtE,YAAM,iBAA4C;AAAA,QAChD,WAAW,IAAI;AAAA,QACf,MAAM,IAAI,QAAQ;AAAA,QAClB,wBAAwB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,QACzE,WAAW,IAAI;AAAA,MACjB;AACA,YAAM;AAAA,QACJ;AAAA,QAAiB,IAAI;AAAA,QAAW;AAAA,QAAS;AAAA,QACzC;AAAA,QAAc;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,KAAK,yBAAyB,KAAK,GAAG;AAC5C,UAAM,KAAK,qBAAqB,IAAI,SAAS;AAAA,EAC/C;AAAA,EAEQ,kBAAkB,KAAgB,KAA8D;AACtG,UAAM,iBAAiB,IAAI,iBAAiB;AAC5C,UAAM,gBAAgB,IAAI,kBAAkB;AAC5C,UAAM,UACJ,2BAA2B,gBAAgB,aAAa,KACrD,sBAAsB,IAAI,WAAW,KACrC;AAEL,UAAM,cAAc,SAAS,IAAI,WAAW,KAAK,CAAC;AAClD,UAAM,UAAU;AAAA,MACd,GAAG;AAAA,MACH,eAAe;AAAA,MACf,aAAa,IAAI;AAAA,MACjB,iBAAiB,IAAI;AAAA,IACvB;AAEA,WAAO;AAAA,MACL,UAAU,IAAI,YAAY,IAAI,MAAM,YAAY;AAAA,MAChD,gBAAgB,IAAI,kBAAkB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,MACvF,aAAa,IAAI,MAAM,OAAO,IAAI,eAAe;AAAA,MACjD,WAAW,IAAI;AAAA,MACf,aAAa,IAAI,eAAe;AAAA,MAChC,cAAc,IAAI,gBAAgB;AAAA,MAClC,YAAY,IAAI,cAAc;AAAA,MAC9B,oBAAoB,IAAI,sBAAsB;AAAA,MAC9C,kBAAkB,IAAI,oBAAoB;AAAA,MAC1C,qBAAqB,IAAI,uBAAuB;AAAA,MAChD,mBAAmB,IAAI,qBAAqB;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,mCAAmC,KAA+C;AAC9F,QAAI,CAAC,IAAI,KAAM,QAAO,CAAC;AACvB,QAAI;AAEF,YAAM,OAAO,IAAI,UAAU,QAAQ,aAAa;AAChD,UAAI,MAAM,oBAAoB;AAC5B,eAAO,MAAM,KAAK,mBAAmB,IAAI,KAAK,KAAK;AAAA,UACjD,UAAU,IAAI,KAAK;AAAA,UACnB,gBAAgB,IAAI,0BAA0B,IAAI,KAAK;AAAA,QACzD,CAAC;AAAA,MACH;AAAA,IACF,QAAQ;AAAA,IAGR;AACA,WAAO,CAAC;AAAA,EACV;AAAA,EAEQ,eAAgC,WAAoD;AAC1F,UAAM,UAAU,gBAAgB,IAAqB,SAAS;AAC9D,QAAI,CAAC,SAAS;AACZ,YAAM,aAAa,UAAU,MAAM,GAAG,EAAE,CAAC;AACzC,YAAM,aAAa,gBAAgB,KAAK;AACxC,YAAM,aAAa,WAAW,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,EAAE,CAAC,MAAM,UAAU;AAC5E,YAAM,OAAO,WAAW,SAAS,IAC7B,oCAAoC,UAAU,OAAO,WAAW,KAAK,IAAI,CAAC,OAC1E,uCAAuC,UAAU;AACrD,YAAM,IAAI,MAAM,yCAAyC,SAAS,IAAI,IAAI,EAAE;AAAA,IAC9E;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,iBACZ,SACA,SAC+B;AAC/B,QAAI,CAAC,QAAQ,QAAS,QAAO,CAAC;AAC9B,QAAI;AACF,aAAQ,MAAM,QAAQ,QAAQ,QAAQ,OAAO,QAAQ,GAAG,KAAM,CAAC;AAAA,IACjE,SAAS,KAAK;AACZ,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,aACZ,SACA,SACA,QACkB;AAClB,QAAI,CAAC,QAAQ,aAAc,QAAO;AAClC,WAAO,QAAQ,aAAa,QAAQ,OAAO,QAAQ,QAAQ,GAAG;AAAA,EAChE;AAAA,EAEA,MAAc,SACZ,SACA,SACA,QACA,WACoC;AACpC,QAAI,CAAC,QAAQ,SAAU,QAAO;AAC9B,UAAM,OAA+C;AAAA,MACnD,OAAO,QAAQ;AAAA,MACf;AAAA,MACA,KAAK,QAAQ;AAAA,MACb;AAAA,IACF;AACA,WAAQ,MAAM,QAAQ,SAAS,IAAI,KAAM;AAAA,EAC3C;AAAA,EAEQ,cAAc,SAAqC,WAAkE;AAC3H,QAAI,CAAC,WAAW,CAAC,UAAW,QAAO;AACnC,WAAO;AAAA,MACL,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,MACnD,UAAU,WAAW,YAAY,SAAS,YAAY;AAAA,MACtD,gBAAgB,WAAW,kBAAkB,SAAS,kBAAkB;AAAA,MACxE,aAAa,WAAW,eAAe,SAAS,eAAe;AAAA,MAC/D,aAAa,WAAW,eAAe,SAAS,eAAe;AAAA,MAC/D,cAAc,WAAW,gBAAgB,SAAS,gBAAgB;AAAA,MAClE,YAAY,WAAW,cAAc,SAAS,cAAc;AAAA,MAC5D,oBAAoB,WAAW,sBAAsB,SAAS,sBAAsB;AAAA,MACpF,kBAAkB,WAAW,oBAAoB,SAAS,oBAAoB;AAAA,MAC9E,qBAAqB,WAAW,uBAAuB,SAAS,uBAAuB;AAAA,MACvF,mBAAmB,WAAW,qBAAqB,SAAS,qBAAqB;AAAA,MACjF,WAAW,WAAW,aAAa,SAAS,aAAa;AAAA,MACzD,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,MACnD,gBAAgB,WAAW,kBAAkB,SAAS,kBAAkB;AAAA,MACxE,eAAe,WAAW,iBAAiB,SAAS,iBAAiB;AAAA,MACrE,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,MACnD,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,IACrD;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,WACA,SACA,UAC2B;AAC3B,QAAI,CAAC,SAAU,QAAO;AACtB,QAAI,SAAS,QAAS,QAAO;AAC7B,UAAM,eACJ,OAAO,SAAS,iBAAiB,WAAW,SAAS,eAAe;AACtE,QAAI,gBAAgB,kCAAkC,IAAI,YAAY,GAAG;AACvE,aAAO;AAAA,IACT;AACA,QAAI,UAAmC;AACvC,QAAI;AACF,gBAAW,QAAQ,IAAI,UAAU,QAAQ,kBAAkB;AAAA,IAC7D,QAAQ;AACN,gBAAU;AAAA,IACZ;AACA,QAAI,CAAC,QAAS,QAAO;AAErB,UAAM,WAAW,SAAS,YAAY,QAAQ,IAAI,MAAM,YAAY;AACpE,UAAM,iBACJ,SAAS,kBAAkB,QAAQ,IAAI,0BAA0B,QAAQ,IAAI,MAAM,SAAS;AAC9F,UAAM,cAAc,SAAS,eAAe,QAAQ,IAAI,MAAM,OAAO;AACrE,UAAM,UAAmC;AAAA,MACvC,UAAU,YAAY;AAAA,MACtB,gBAAgB,kBAAkB;AAAA,MAClC,aAAa,eAAe;AAAA,MAC5B;AAAA,IACF;AAEA,QAAI,UAAU;AACZ,UAAI,iBAAiB,YAAY,SAAS,eAAe,KAAM,SAAQ,cAAc,SAAS;AAC9F,UAAI,kBAAkB,YAAY,SAAS,gBAAgB,KAAM,SAAQ,eAAe,SAAS;AACjG,UAAI,gBAAgB,YAAY,SAAS,cAAc,KAAM,SAAQ,aAAa,SAAS;AAC3F,UAAI,wBAAwB,YAAY,SAAS,sBAAsB,KAAM,SAAQ,qBAAqB,SAAS;AACnH,UAAI,sBAAsB,YAAY,SAAS,oBAAoB,KAAM,SAAQ,mBAAmB,SAAS;AAC7G,UAAI,yBAAyB,YAAY,SAAS,uBAAuB,KAAM,SAAQ,sBAAsB,SAAS;AACtH,UAAI,uBAAuB,YAAY,SAAS,qBAAqB,KAAM,SAAQ,oBAAoB,SAAS;AAChH,UAAI,eAAe,YAAY,SAAS,aAAa,KAAM,SAAQ,YAAY,SAAS;AACxF,UAAI,aAAa,YAAY,SAAS,YAAY,OAAW,SAAQ,iBAAiB,SAAS;AAC/F,UAAI,oBAAoB,YAAY,SAAS,mBAAmB,OAAW,SAAQ,iBAAiB,SAAS;AAC7G,UAAI,mBAAmB,YAAY,SAAS,kBAAkB,OAAW,SAAQ,gBAAgB,SAAS;AAC1G,UAAI,aAAa,YAAY,SAAS,YAAY,UAAa,SAAS,YAAY,KAAM,SAAQ,UAAU,SAAS;AACrH,UAAI,aAAa,YAAY,SAAS,YAAY,UAAa,SAAS,YAAY,KAAM,SAAQ,UAAU,SAAS;AAAA,IACvH;AAEA,UAAM,eAAe,gBAAgB,oBAAoB,UAAW,QAAQ,iBAA6B,QAAW,QAAQ,KAAK;AACjI,YAAQ,iBAAiB;AAEzB,WAAO,MAAM,QAAQ,IAAI,OAA+B;AAAA,EAC1D;AAAA,EAEQ,WAAW,SAAoD;AACrE,WAAO,QAAQ,eAAe,SAAS,OAAO,QAAQ,SAAS;AAAA,EACjE;AAAA,EAEA,MAAc,4BACZ,WACA,SACA,QACA,UACe;AACf,UAAM,WAAW,OAAO,UAAU,iBAAiB,WAAW,SAAS,eAAe;AACtF,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM,MAAM,QAAQ;AACpB,YAAM,eAAe,SAAS,MAAM;AACpC,YAAM,eAAe,SAAS,cAAc,MAAM;AAClD,YAAM,cAAc,SAAS,QAAQ,KAAK;AAC1C,YAAM,cAAc,SAAS,aAAa,MAAM;AAEhD,YAAM,WAAW;AAAA,QACf,UAAU;AAAA,QACV,cAAc;AAAA,QACd,cAAc;AAAA,QACd,cAAc;AAAA,QACd,cAAc;AAAA,QACd,aAAa;AAAA,QACb,aAAa;AAAA,QACb,aAAa;AAAA,QACb,aAAa;AAAA,MACf;AAEA,YAAM,iBAAiB;AAAA,QACrB,UAAU;AAAA,QACV,cAAc;AAAA,QACd,cAAc;AAAA,QACd,aAAa;AAAA,QACb,aAAa;AAAA,QACb,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,MACnD;AAEA,YAAM,WAAW;AAAA,QACf,UAAU;AAAA,QACV,cAAc;AAAA,QACd,cAAc;AAAA,QACd,aAAa;AAAA,QACb,aAAa;AAAA,QACb,IAAI,MAAM,YAAY;AAAA,MACxB;AAEA,YAAM,iBAAiB,oBAAoB,UAAU,UAAU,IAAI,MAAM,YAAY,IAAI;AAEzF,YAAM,WAAW,oBAAI,IAAY;AACjC,iBAAW,SAAS,iBAAiB,UAAU,WAAW,IAAI,GAAG;AAC/D,iBAAS,IAAI,KAAK;AAAA,MACpB;AACA,YAAM,UAAU,4BAA4B,SAAS;AACrD,UAAI,QAAS,UAAS,IAAI,OAAO;AACjC,YAAM,cAAc,MAAM,KAAK,QAAQ;AACvC,YAAM;AAAA,QACJ,IAAI;AAAA,QACJ;AAAA,QACA,EAAE,IAAI,UAAU,gBAAgB,SAAS;AAAA,QACzC;AAAA,QACA,WAAW,SAAS;AAAA,QACpB;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,wBAAwB,GAAG;AAC7B,YAAI;AACF,kBAAQ,MAAM,6CAA6C,EAAE,WAAW,IAAI,CAAC;AAAA,QAC/E,QAAQ;AAAA,QAAC;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,yBAAyB,KAAgB,KAA2C;AAChG,UAAM,WAAW,OAAO,IAAI,iBAAiB,WAAW,IAAI,eAAe;AAC3E,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM,WAAW,oBAAoB,IAAI,UAAU;AACnD,YAAM,iBAAiB,oBAAoB,IAAI,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS,IAAI;AACpH,YAAM,WAAW,oBAAoB,IAAI,UAAU,IAAI,MAAM,YAAY,IAAI;AAC7E,YAAM,iBAAiB,oBAAoB,IAAI,UAAU,IAAI,MAAM,YAAY,IAAI;AACnF,YAAM,WAAW,oBAAI,IAAY;AACjC,iBAAW,SAAS,iBAAiB,IAAI,eAAe,IAAI,GAAG;AAC7D,iBAAS,IAAI,KAAK;AAAA,MACpB;AACA,YAAM,UAAU,4BAA4B,IAAI,SAAS;AACzD,UAAI,QAAS,UAAS,IAAI,OAAO;AACjC,YAAM,cAAc,MAAM,KAAK,QAAQ;AACvC,YAAM;AAAA,QACJ,IAAI;AAAA,QACJ;AAAA,QACA,EAAE,IAAI,UAAU,gBAAgB,SAAS;AAAA,QACzC;AAAA,QACA,WAAW,IAAI,SAAS;AAAA,QACxB;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,wBAAwB,GAAG;AAC7B,YAAI;AACF,kBAAQ,MAAM,0CAA0C,EAAE,WAAW,IAAI,WAAW,IAAI,CAAC;AAAA,QAC3F,QAAQ;AAAA,QAAC;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,qBAAqB,WAA2C;AAC5E,QAAI;AACF,YAAM,aAAc,UAAU,QAAQ,YAAY;AAClD,YAAM,WAAW,sBAAsB;AAAA,IACzC,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAOA,SAAS,gBAAgB,UAAmB,OAA8B;AACxE,MAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG;AACxE,UAAM,WAAyB,EAAE,aAAa,MAAM;AACpD,QAAI,aAAa,OAAW,UAAS,QAAQ;AAC7C,WAAO;AAAA,EACT;AACA,QAAM,UAAU;AAChB,MAAI,iBAAiB,WAAW,QAAQ,gBAAgB,QAAW;AACjE,WAAO;AAAA,EACT;AACA,SAAO,EAAE,aAAa,OAAO,GAAG,QAAQ;AAC1C;",
+  "sourcesContent": ["import type { ActionLog } from '@open-mercato/core/modules/audit_logs/data/entities'\nimport type { ActionLogCreateInput } from '@open-mercato/core/modules/audit_logs/data/validators'\nimport { commandRegistry } from './registry'\nimport type {\n  CommandExecutionOptions,\n  CommandExecuteResult,\n  CommandHandler,\n  CommandLogBuilderArgs,\n  CommandLogMetadata,\n  CommandRuntimeContext,\n} from './types'\nimport { defaultUndoToken } from './types'\nimport type { ActionLogService } from '@open-mercato/core/modules/audit_logs/services/actionLogService'\nimport type { AwilixContainer } from 'awilix'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport {\n  canonicalizeResourceTag,\n  deriveResourceFromCommandId,\n  invalidateCrudCache,\n  pickFirstIdentifier,\n  isCrudCacheDebugEnabled,\n} from '@open-mercato/shared/lib/crud/cache'\nimport { normalizeCustomFieldKey } from '@open-mercato/shared/lib/custom-fields/keys'\nimport { getAllCommandInterceptorInstances } from './command-interceptor-store'\nimport {\n  runCommandInterceptorsBefore,\n  runCommandInterceptorsAfter,\n  runCommandInterceptorsBeforeUndo,\n  runCommandInterceptorsAfterUndo,\n} from './command-interceptor-runner'\nimport type { CommandInterceptorContext } from './command-interceptor'\nimport { CommandInterceptorError } from './errors'\n\nconst SKIPPED_ACTION_LOG_RESOURCE_KINDS = new Set<string>([\n  'audit_logs.access',\n  'audit_logs.action',\n  'dashboards.layout',\n  'dashboards.user_widgets',\n  'dashboards.role_widgets',\n])\n\nfunction asRecord(input: unknown): Record<string, unknown> | null {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) return null\n  return input as Record<string, unknown>\n}\n\nfunction toISOString(value: unknown): string | null {\n  if (value instanceof Date) {\n    const iso = value.toISOString()\n    return Number.isNaN(value.getTime()) ? null : iso\n  }\n  if (typeof value === 'string') {\n    const parsed = new Date(value)\n    return Number.isNaN(parsed.getTime()) ? null : parsed.toISOString()\n  }\n  return null\n}\n\nfunction deepEqual(a: unknown, b: unknown, seen?: Set<unknown>): boolean {\n  if (Object.is(a, b)) return true\n  if (a instanceof Date || b instanceof Date) {\n    const aIso = toISOString(a)\n    const bIso = toISOString(b)\n    if (aIso != null && bIso != null) return aIso === bIso\n    return false\n  }\n  if (Array.isArray(a) && Array.isArray(b)) {\n    if (a.length !== b.length) return false\n    return a.every((value, index) => deepEqual(value, b[index], seen))\n  }\n  if (a && b && typeof a === 'object' && typeof b === 'object') {\n    if (!seen) seen = new Set()\n    if (seen.has(a) || seen.has(b)) return false\n    seen.add(a)\n    seen.add(b)\n    const aRec = a as Record<string, unknown>\n    const bRec = b as Record<string, unknown>\n    const keysA = Object.keys(aRec)\n    const keysB = Object.keys(bRec)\n    if (keysA.length !== keysB.length) return false\n    return keysA.every((key) => deepEqual(aRec[key], bRec[key], seen))\n  }\n  return false\n}\n\nconst CUSTOM_FIELD_CONTAINER_KEYS = new Set(['custom', 'customFields', 'customValues', 'cf'])\nconst SKIPPED_CHANGE_KEYS = new Set(['updatedAt', 'updated_at'])\n\nfunction appendCustomFieldChanges(\n  changes: Record<string, { from: unknown; to: unknown }>,\n  before: unknown,\n  after: unknown\n): boolean {\n  const beforeRec = asRecord(before)\n  const afterRec = asRecord(after)\n  if (!beforeRec && !afterRec) return false\n  const left = beforeRec ?? {}\n  const right = afterRec ?? {}\n  const keys = new Set([...Object.keys(left), ...Object.keys(right)])\n  for (const key of keys) {\n    const from = left[key]\n    const to = right[key]\n    if (!deepEqual(from, to)) {\n      changes[normalizeCustomFieldKey(key)] = { from, to }\n    }\n  }\n  return true\n}\n\nfunction buildRecordChanges(\n  before: Record<string, unknown>,\n  after: Record<string, unknown>,\n): Record<string, { from: unknown; to: unknown }> {\n  return buildRecordChangesDeep(before, after)\n}\n\nfunction buildRecordChangesDeep(\n  before: Record<string, unknown>,\n  after: Record<string, unknown>,\n  prefix?: string,\n  seen?: Set<unknown>,\n): Record<string, { from: unknown; to: unknown }> {\n  const changes: Record<string, { from: unknown; to: unknown }> = {}\n  if (!seen) seen = new Set()\n  if (seen.has(before) || seen.has(after)) return changes\n  seen.add(before)\n  seen.add(after)\n  const keys = new Set([...Object.keys(before), ...Object.keys(after)])\n  for (const key of keys) {\n    if (SKIPPED_CHANGE_KEYS.has(key)) continue\n    if (CUSTOM_FIELD_CONTAINER_KEYS.has(key)) {\n      const handled = appendCustomFieldChanges(changes, before[key], after[key])\n      if (handled) continue\n    }\n    const from = before[key]\n    const to = after[key]\n    const path = prefix ? `${prefix}.${key}` : key\n    const fromRec = asRecord(from)\n    const toRec = asRecord(to)\n    if (fromRec && toRec) {\n      const nested = buildRecordChangesDeep(fromRec, toRec, path, seen)\n      if (Object.keys(nested).length) {\n        Object.assign(changes, nested)\n        continue\n      }\n    }\n    if (!deepEqual(from, to)) {\n      changes[path] = { from, to }\n    }\n  }\n  return changes\n}\n\nfunction deriveChangesFromSnapshots(\n  before: unknown,\n  after: unknown,\n): Record<string, { from: unknown; to: unknown }> | null {\n  const beforeRec = asRecord(before)\n  const afterRec = asRecord(after)\n  if (!beforeRec || !afterRec) return null\n  const changes = buildRecordChanges(beforeRec, afterRec)\n  return Object.keys(changes).length ? changes : null\n}\n\nfunction invertRecordedChanges(\n  changes: unknown,\n): Record<string, { from: unknown; to: unknown }> | null {\n  const source = asRecord(changes)\n  if (!source) return null\n  const inverted: Record<string, { from: unknown; to: unknown }> = {}\n  for (const [key, value] of Object.entries(source)) {\n    const entry = asRecord(value)\n    if (!entry || (!('from' in entry) && !('to' in entry))) continue\n    inverted[key] = {\n      from: entry.to,\n      to: entry.from,\n    }\n  }\n  return Object.keys(inverted).length ? inverted : null\n}\n\nfunction extractAliasList(source: unknown): string[] {\n  if (!source || typeof source !== 'object' || Array.isArray(source)) return []\n  const record = source as Record<string, unknown>\n  const raw = record.cacheAliases\n  if (!Array.isArray(raw)) return []\n  const aliases = new Set<string>()\n  for (const value of raw) {\n    if (typeof value !== 'string') continue\n    const normalized = canonicalizeResourceTag(value)\n    if (normalized) aliases.add(normalized)\n  }\n  return Array.from(aliases)\n}\n\nexport class CommandBus {\n  async execute<TInput = unknown, TResult = unknown>(\n    commandId: string,\n    options: CommandExecutionOptions<TInput>\n  ): Promise<CommandExecuteResult<TResult>> {\n    const handler = this.resolveHandler<TInput, TResult>(commandId)\n\n    // Run beforeExecute command interceptors\n    const allInterceptors = getAllCommandInterceptorInstances()\n    let interceptorMetadata = new Map<string, Record<string, unknown>>()\n    let effectiveOptions = options\n    const userFeatures = allInterceptors.length\n      ? await this.resolveUserFeaturesForInterceptors(options.ctx)\n      : []\n    if (allInterceptors.length) {\n      const interceptorCtx: CommandInterceptorContext = {\n        commandId,\n        auth: options.ctx.auth ?? null,\n        selectedOrganizationId: options.ctx.selectedOrganizationId ?? options.ctx.auth?.orgId ?? null,\n        container: options.ctx.container,\n      }\n      const beforeResult = await runCommandInterceptorsBefore(\n        allInterceptors, commandId, options.input, interceptorCtx, userFeatures,\n      )\n      if (!beforeResult.ok) {\n        throw new CommandInterceptorError(beforeResult.error!.message)\n      }\n      interceptorMetadata = beforeResult.metadataByInterceptor\n      if (beforeResult.modifiedInput) {\n        effectiveOptions = {\n          ...options,\n          input: { ...(options.input as object), ...beforeResult.modifiedInput } as TInput,\n        }\n      }\n    }\n\n    const snapshots = await this.prepareSnapshots(handler, effectiveOptions)\n    const redoLogEntry = effectiveOptions.redoLogEntry ?? null\n    const result =\n      redoLogEntry && typeof handler.redo === 'function'\n        ? await handler.redo({ input: effectiveOptions.input, ctx: effectiveOptions.ctx, logEntry: redoLogEntry })\n        : await handler.execute(effectiveOptions.input, effectiveOptions.ctx)\n    const afterSnapshot = await this.captureAfter(handler, effectiveOptions, result)\n    const snapshotsWithAfter = { ...snapshots, after: afterSnapshot }\n    const logMeta = await this.buildLog(handler, effectiveOptions, result, snapshotsWithAfter)\n    let mergedMeta = this.mergeMetadata(effectiveOptions.metadata, logMeta)\n    const undoable = this.isUndoable(handler)\n    if (undoable) {\n      mergedMeta = mergedMeta ?? {}\n      if (!mergedMeta.undoToken) mergedMeta.undoToken = defaultUndoToken()\n      if (mergedMeta.actorUserId === undefined) mergedMeta.actorUserId = effectiveOptions.ctx.auth?.sub ?? null\n    }\n    if (afterSnapshot !== undefined && afterSnapshot !== null) {\n      if (!mergedMeta) {\n        mergedMeta = { snapshotAfter: afterSnapshot }\n      } else if (!mergedMeta.snapshotAfter) {\n        mergedMeta.snapshotAfter = afterSnapshot\n      }\n    }\n    if (snapshots.before) {\n      if (!mergedMeta) {\n        mergedMeta = { snapshotBefore: snapshots.before }\n      } else if (!mergedMeta.snapshotBefore) {\n        mergedMeta.snapshotBefore = snapshots.before\n      }\n    }\n    if (mergedMeta?.snapshotBefore !== undefined && mergedMeta?.snapshotAfter !== undefined) {\n      const currentChanges = mergedMeta.changes\n      const shouldInfer =\n        currentChanges === undefined ||\n        currentChanges === null ||\n        (typeof currentChanges === 'object' && !Array.isArray(currentChanges) && Object.keys(currentChanges).length === 0)\n      if (shouldInfer) {\n        const inferred = deriveChangesFromSnapshots(mergedMeta.snapshotBefore, mergedMeta.snapshotAfter)\n        if (inferred) mergedMeta.changes = inferred\n      }\n    }\n    const logEntry = await this.persistLog(commandId, effectiveOptions, mergedMeta)\n\n    // Run afterExecute command interceptors\n    let finalResult = result\n    if (allInterceptors.length) {\n      const interceptorCtx: CommandInterceptorContext = {\n        commandId,\n        auth: effectiveOptions.ctx.auth ?? null,\n        selectedOrganizationId: effectiveOptions.ctx.selectedOrganizationId ?? effectiveOptions.ctx.auth?.orgId ?? null,\n        container: effectiveOptions.ctx.container,\n      }\n      const afterResult = await runCommandInterceptorsAfter(\n        allInterceptors, commandId, effectiveOptions.input, result, interceptorCtx,\n        userFeatures, interceptorMetadata,\n      )\n      if (afterResult.modifiedResult && typeof result === 'object' && result) {\n        finalResult = { ...(result as object), ...afterResult.modifiedResult } as Awaited<TResult>\n      }\n    }\n\n    if (!effectiveOptions.skipCacheInvalidation) {\n      await this.invalidateCacheAfterExecute(commandId, effectiveOptions, finalResult, mergedMeta)\n    }\n    await this.flushCrudSideEffects(effectiveOptions.ctx.container)\n    return { result: finalResult, logEntry }\n  }\n\n  async undo(undoToken: string, ctx: CommandRuntimeContext): Promise<void> {\n    const service = (ctx.container.resolve('actionLogService') as ActionLogService)\n    const log = await service.findByUndoToken(undoToken)\n    if (!log) throw new Error('Undo token expired or not found')\n    const handler = this.resolveHandler(log.commandId)\n    if (!handler.undo || this.isUndoable(handler) === false) {\n      throw new Error(`Command ${log.commandId} is not undoable`)\n    }\n\n    // Atomically claim the action-log row before running any undo side effects.\n    // Two concurrent requests holding the same undo token can both pass\n    // findByUndoToken/executionState checks; the compare-and-set below ensures\n    // only one transitions `done` -> `undoing` and proceeds, the other bails out.\n    const claimed = await service.claimForUndo(log.id)\n    if (!claimed) throw new Error('Undo token already consumed')\n\n    try {\n      // Run beforeUndo command interceptors\n      const allInterceptors = getAllCommandInterceptorInstances()\n      let undoInterceptorMetadata = new Map<string, Record<string, unknown>>()\n      const userFeatures = allInterceptors.length\n        ? await this.resolveUserFeaturesForInterceptors(ctx)\n        : []\n      if (allInterceptors.length) {\n        const undoCtx = { input: log.commandPayload, logEntry: log, undoToken }\n        const interceptorCtx: CommandInterceptorContext = {\n          commandId: log.commandId,\n          auth: ctx.auth ?? null,\n          selectedOrganizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          container: ctx.container,\n        }\n        const beforeResult = await runCommandInterceptorsBeforeUndo(\n          allInterceptors, log.commandId, undoCtx, interceptorCtx, userFeatures,\n        )\n        if (!beforeResult.ok) {\n          throw new CommandInterceptorError(beforeResult.error!.message)\n        }\n        undoInterceptorMetadata = beforeResult.metadataByInterceptor\n      }\n\n      await handler.undo({\n        input: log.commandPayload as Parameters<NonNullable<typeof handler.undo>>[0]['input'],\n        ctx,\n        logEntry: log,\n      })\n      await service.markUndone(log.id, this.buildUndoTraceLog(log, ctx))\n\n      // Run afterUndo command interceptors\n      if (allInterceptors.length) {\n        const undoCtx = { input: log.commandPayload, logEntry: log, undoToken }\n        const interceptorCtx: CommandInterceptorContext = {\n          commandId: log.commandId,\n          auth: ctx.auth ?? null,\n          selectedOrganizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n          container: ctx.container,\n        }\n        await runCommandInterceptorsAfterUndo(\n          allInterceptors, log.commandId, undoCtx, interceptorCtx,\n          userFeatures, undoInterceptorMetadata,\n        )\n      }\n\n      await this.invalidateCacheAfterUndo(log, ctx)\n      await this.flushCrudSideEffects(ctx.container)\n    } catch (err) {\n      // Undo failed after claiming the row \u2014 release the claim so the action\n      // remains retryable instead of being stranded in the `undoing` state.\n      await service.releaseUndoClaim(log.id).catch(() => {})\n      throw err\n    }\n  }\n\n  private buildUndoTraceLog(log: ActionLog, ctx: CommandRuntimeContext): ActionLogCreateInput | undefined {\n    const snapshotBefore = log.snapshotAfter ?? null\n    const snapshotAfter = log.snapshotBefore ?? null\n    const changes =\n      deriveChangesFromSnapshots(snapshotBefore, snapshotAfter)\n      ?? invertRecordedChanges(log.changesJson)\n      ?? undefined\n\n    const baseContext = asRecord(log.contextJson) ?? {}\n    const context = {\n      ...baseContext,\n      historyAction: 'undo',\n      sourceLogId: log.id,\n      sourceCommandId: log.commandId,\n    }\n\n    return {\n      tenantId: log.tenantId ?? ctx.auth?.tenantId ?? null,\n      organizationId: log.organizationId ?? ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n      actorUserId: ctx.auth?.sub ?? log.actorUserId ?? null,\n      commandId: log.commandId,\n      actionLabel: log.actionLabel ?? undefined,\n      resourceKind: log.resourceKind ?? undefined,\n      resourceId: log.resourceId ?? undefined,\n      parentResourceKind: log.parentResourceKind ?? null,\n      parentResourceId: log.parentResourceId ?? null,\n      relatedResourceKind: log.relatedResourceKind ?? null,\n      relatedResourceId: log.relatedResourceId ?? null,\n      snapshotBefore,\n      snapshotAfter,\n      changes,\n      context,\n    }\n  }\n\n  private async resolveUserFeaturesForInterceptors(ctx: CommandRuntimeContext): Promise<string[]> {\n    if (!ctx.auth) return []\n    try {\n      type RbacLike = { getGrantedFeatures: (userId: string, opts: { tenantId: string | null; organizationId: string | null }) => Promise<string[]> }\n      const rbac = ctx.container.resolve('rbacService') as RbacLike | undefined\n      if (rbac?.getGrantedFeatures) {\n        return await rbac.getGrantedFeatures(ctx.auth.sub, {\n          tenantId: ctx.auth.tenantId,\n          organizationId: ctx.selectedOrganizationId ?? ctx.auth.orgId,\n        })\n      }\n    } catch {\n      // Intentional: rbacService is not registered in all runtime contexts (CLI, tests, bootstrap).\n      // Falling through to return [] is safe \u2014 interceptors without feature gating still run.\n    }\n    return []\n  }\n\n  private resolveHandler<TInput, TResult>(commandId: string): CommandHandler<TInput, TResult> {\n    const handler = commandRegistry.get<TInput, TResult>(commandId)\n    if (!handler) {\n      const moduleName = commandId.split('.')[0]\n      const registered = commandRegistry.list()\n      const sameModule = registered.filter((id) => id.split('.')[0] === moduleName)\n      const hint = sameModule.length > 0\n        ? ` Registered commands for module \"${moduleName}\": [${sameModule.join(', ')}].`\n        : ` No commands registered for module \"${moduleName}\". Ensure the command file is imported (side-effect) in the module's index.ts.`\n      throw new Error(`Command handler not registered for id ${commandId}.${hint}`)\n    }\n    return handler\n  }\n\n  private async prepareSnapshots<TInput, TResult>(\n    handler: CommandHandler<TInput, TResult>,\n    options: CommandExecutionOptions<TInput>\n  ): Promise<{ before?: unknown }> {\n    if (!handler.prepare) return {}\n    try {\n      return (await handler.prepare(options.input, options.ctx)) || {}\n    } catch (err) {\n      throw err\n    }\n  }\n\n  private async captureAfter<TInput, TResult>(\n    handler: CommandHandler<TInput, TResult>,\n    options: CommandExecutionOptions<TInput>,\n    result: TResult\n  ): Promise<unknown> {\n    if (!handler.captureAfter) return undefined\n    return handler.captureAfter(options.input, result, options.ctx)\n  }\n\n  private async buildLog<TInput, TResult>(\n    handler: CommandHandler<TInput, TResult>,\n    options: CommandExecutionOptions<TInput>,\n    result: TResult,\n    snapshots: { before?: unknown; after?: unknown }\n  ): Promise<CommandLogMetadata | null> {\n    if (!handler.buildLog) return null\n    const args: CommandLogBuilderArgs<TInput, TResult> = {\n      input: options.input,\n      result,\n      ctx: options.ctx,\n      snapshots,\n    }\n    return (await handler.buildLog(args)) || null\n  }\n\n  private mergeMetadata(primary?: CommandLogMetadata | null, secondary?: CommandLogMetadata | null): CommandLogMetadata | null {\n    if (!primary && !secondary) return null\n    return {\n      skipLog: secondary?.skipLog ?? primary?.skipLog ?? false,\n      tenantId: secondary?.tenantId ?? primary?.tenantId ?? null,\n      organizationId: secondary?.organizationId ?? primary?.organizationId ?? null,\n      actorUserId: secondary?.actorUserId ?? primary?.actorUserId ?? null,\n      actionLabel: secondary?.actionLabel ?? primary?.actionLabel ?? null,\n      resourceKind: secondary?.resourceKind ?? primary?.resourceKind ?? null,\n      resourceId: secondary?.resourceId ?? primary?.resourceId ?? null,\n      parentResourceKind: secondary?.parentResourceKind ?? primary?.parentResourceKind ?? null,\n      parentResourceId: secondary?.parentResourceId ?? primary?.parentResourceId ?? null,\n      relatedResourceKind: secondary?.relatedResourceKind ?? primary?.relatedResourceKind ?? null,\n      relatedResourceId: secondary?.relatedResourceId ?? primary?.relatedResourceId ?? null,\n      undoToken: secondary?.undoToken ?? primary?.undoToken ?? null,\n      payload: secondary?.payload ?? primary?.payload ?? null,\n      snapshotBefore: secondary?.snapshotBefore ?? primary?.snapshotBefore ?? null,\n      snapshotAfter: secondary?.snapshotAfter ?? primary?.snapshotAfter ?? null,\n      changes: secondary?.changes ?? primary?.changes ?? null,\n      context: secondary?.context ?? primary?.context ?? null,\n    }\n  }\n\n  private async persistLog<TInput>(\n    commandId: string,\n    options: CommandExecutionOptions<TInput>,\n    metadata: CommandLogMetadata | null\n  ): Promise<ActionLog | null> {\n    if (!metadata) return null\n    if (metadata.skipLog) return null\n    const resourceKind =\n      typeof metadata.resourceKind === 'string' ? metadata.resourceKind : null\n    if (resourceKind && SKIPPED_ACTION_LOG_RESOURCE_KINDS.has(resourceKind)) {\n      return null\n    }\n    let service: ActionLogService | null = null\n    try {\n      service = (options.ctx.container.resolve('actionLogService') as ActionLogService)\n    } catch {\n      service = null\n    }\n    if (!service) return null\n\n    const tenantId = metadata.tenantId ?? options.ctx.auth?.tenantId ?? null\n    const organizationId =\n      metadata.organizationId ?? options.ctx.selectedOrganizationId ?? options.ctx.auth?.orgId ?? null\n    const actorUserId = metadata.actorUserId ?? options.ctx.auth?.sub ?? null\n    const payload: Record<string, unknown> = {\n      tenantId: tenantId ?? undefined,\n      organizationId: organizationId ?? undefined,\n      actorUserId: actorUserId ?? undefined,\n      commandId,\n    }\n\n    if (metadata) {\n      if ('actionLabel' in metadata && metadata.actionLabel != null) payload.actionLabel = metadata.actionLabel\n      if ('resourceKind' in metadata && metadata.resourceKind != null) payload.resourceKind = metadata.resourceKind\n      if ('resourceId' in metadata && metadata.resourceId != null) payload.resourceId = metadata.resourceId\n      if ('parentResourceKind' in metadata && metadata.parentResourceKind != null) payload.parentResourceKind = metadata.parentResourceKind\n      if ('parentResourceId' in metadata && metadata.parentResourceId != null) payload.parentResourceId = metadata.parentResourceId\n      if ('relatedResourceKind' in metadata && metadata.relatedResourceKind != null) payload.relatedResourceKind = metadata.relatedResourceKind\n      if ('relatedResourceId' in metadata && metadata.relatedResourceId != null) payload.relatedResourceId = metadata.relatedResourceId\n      if ('undoToken' in metadata && metadata.undoToken != null) payload.undoToken = metadata.undoToken\n      if ('payload' in metadata && metadata.payload !== undefined) payload.commandPayload = metadata.payload\n      if ('snapshotBefore' in metadata && metadata.snapshotBefore !== undefined) payload.snapshotBefore = metadata.snapshotBefore\n      if ('snapshotAfter' in metadata && metadata.snapshotAfter !== undefined) payload.snapshotAfter = metadata.snapshotAfter\n      if ('changes' in metadata && metadata.changes !== undefined && metadata.changes !== null) payload.changes = metadata.changes\n      if ('context' in metadata && metadata.context !== undefined && metadata.context !== null) payload.context = metadata.context\n    }\n\n    const redoEnvelope = wrapRedoPayload('commandPayload' in payload ? (payload.commandPayload as unknown) : undefined, options.input)\n    payload.commandPayload = redoEnvelope\n\n    return await service.log(payload as ActionLogCreateInput)\n  }\n\n  private isUndoable(handler: CommandHandler<unknown, unknown>): boolean {\n    return handler.isUndoable !== false && typeof handler.undo === 'function'\n  }\n\n  private async invalidateCacheAfterExecute<TResult>(\n    commandId: string,\n    options: CommandExecutionOptions<unknown>,\n    result: TResult,\n    metadata: CommandLogMetadata | null\n  ): Promise<void> {\n    const resource = typeof metadata?.resourceKind === 'string' ? metadata.resourceKind : null\n    if (!resource) return\n    try {\n      const ctx = options.ctx\n      const resultRecord = asRecord(result)\n      const resultEntity = asRecord(resultRecord?.entity)\n      const inputRecord = asRecord(options.input)\n      const inputEntity = asRecord(inputRecord?.entity)\n\n      const recordId = pickFirstIdentifier(\n        metadata?.resourceId,\n        resultRecord?.entityId,\n        resultRecord?.id,\n        resultRecord?.recordId,\n        resultEntity?.id,\n        inputRecord?.id,\n        inputRecord?.entityId,\n        inputRecord?.recordId,\n        inputEntity?.id\n      )\n\n      const organizationId = pickFirstIdentifier(\n        metadata?.organizationId,\n        resultRecord?.organizationId,\n        resultEntity?.organizationId,\n        inputRecord?.organizationId,\n        inputEntity?.organizationId,\n        ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n      )\n\n      const tenantId = pickFirstIdentifier(\n        metadata?.tenantId,\n        resultRecord?.tenantId,\n        resultEntity?.tenantId,\n        inputRecord?.tenantId,\n        inputEntity?.tenantId,\n        ctx.auth?.tenantId ?? null\n      )\n\n      const fallbackTenant = pickFirstIdentifier(metadata?.tenantId, ctx.auth?.tenantId ?? null)\n\n      const aliasSet = new Set<string>()\n      for (const alias of extractAliasList(metadata?.context ?? null)) {\n        aliasSet.add(alias)\n      }\n      const derived = deriveResourceFromCommandId(commandId)\n      if (derived) aliasSet.add(derived)\n      const aliasExtras = Array.from(aliasSet)\n      await invalidateCrudCache(\n        ctx.container,\n        resource,\n        { id: recordId, organizationId, tenantId },\n        fallbackTenant,\n        `command:${commandId}:execute`,\n        aliasExtras\n      )\n    } catch (err) {\n      if (isCrudCacheDebugEnabled()) {\n        try {\n          console.debug('[crud][cache] execute-invalidation failed', { commandId, err })\n        } catch {}\n      }\n    }\n  }\n\n  private async invalidateCacheAfterUndo(log: ActionLog, ctx: CommandRuntimeContext): Promise<void> {\n    const resource = typeof log.resourceKind === 'string' ? log.resourceKind : null\n    if (!resource) return\n    try {\n      const recordId = pickFirstIdentifier(log.resourceId)\n      const organizationId = pickFirstIdentifier(log.organizationId, ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null)\n      const tenantId = pickFirstIdentifier(log.tenantId, ctx.auth?.tenantId ?? null)\n      const fallbackTenant = pickFirstIdentifier(log.tenantId, ctx.auth?.tenantId ?? null)\n      const aliasSet = new Set<string>()\n      for (const alias of extractAliasList(log.contextJson ?? null)) {\n        aliasSet.add(alias)\n      }\n      const derived = deriveResourceFromCommandId(log.commandId)\n      if (derived) aliasSet.add(derived)\n      const aliasExtras = Array.from(aliasSet)\n      await invalidateCrudCache(\n        ctx.container,\n        resource,\n        { id: recordId, organizationId, tenantId },\n        fallbackTenant,\n        `command:${log.commandId}:undo`,\n        aliasExtras\n      )\n    } catch (err) {\n      if (isCrudCacheDebugEnabled()) {\n        try {\n          console.debug('[crud][cache] undo-invalidation failed', { commandId: log.commandId, err })\n        } catch {}\n      }\n    }\n  }\n\n  private async flushCrudSideEffects(container: AwilixContainer): Promise<void> {\n    try {\n      const dataEngine = (container.resolve('dataEngine') as DataEngine)\n      await dataEngine.flushOrmEntityChanges()\n    } catch {\n      // best-effort: failures should not block command execution\n    }\n  }\n}\n\ntype RedoEnvelope = {\n  __redoInput: unknown\n  [key: string]: unknown\n}\n\nfunction wrapRedoPayload(existing: unknown, input: unknown): RedoEnvelope {\n  if (!existing || typeof existing !== 'object' || Array.isArray(existing)) {\n    const envelope: RedoEnvelope = { __redoInput: input }\n    if (existing !== undefined) envelope.value = existing\n    return envelope\n  }\n  const current = existing as Record<string, unknown>\n  if ('__redoInput' in current && current.__redoInput !== undefined) {\n    return current as RedoEnvelope\n  }\n  return { __redoInput: input, ...current }\n}\n"],
+  "mappings": "AAEA,SAAS,uBAAuB;AAShC,SAAS,wBAAwB;AAIjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,yCAAyC;AAClD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,+BAA+B;AAExC,MAAM,oCAAoC,oBAAI,IAAY;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,SAAS,OAAgD;AAChE,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,SAAO;AACT;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,iBAAiB,MAAM;AACzB,UAAM,MAAM,MAAM,YAAY;AAC9B,WAAO,OAAO,MAAM,MAAM,QAAQ,CAAC,IAAI,OAAO;AAAA,EAChD;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,WAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,OAAO,OAAO,YAAY;AAAA,EACpE;AACA,SAAO;AACT;AAEA,SAAS,UAAU,GAAY,GAAY,MAA8B;AACvE,MAAI,OAAO,GAAG,GAAG,CAAC,EAAG,QAAO;AAC5B,MAAI,aAAa,QAAQ,aAAa,MAAM;AAC1C,UAAM,OAAO,YAAY,CAAC;AAC1B,UAAM,OAAO,YAAY,CAAC;AAC1B,QAAI,QAAQ,QAAQ,QAAQ,KAAM,QAAO,SAAS;AAClD,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,CAAC,KAAK,MAAM,QAAQ,CAAC,GAAG;AACxC,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,WAAO,EAAE,MAAM,CAAC,OAAO,UAAU,UAAU,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC;AAAA,EACnE;AACA,MAAI,KAAK,KAAK,OAAO,MAAM,YAAY,OAAO,MAAM,UAAU;AAC5D,QAAI,CAAC,KAAM,QAAO,oBAAI,IAAI;AAC1B,QAAI,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAG,QAAO;AACvC,SAAK,IAAI,CAAC;AACV,SAAK,IAAI,CAAC;AACV,UAAM,OAAO;AACb,UAAM,OAAO;AACb,UAAM,QAAQ,OAAO,KAAK,IAAI;AAC9B,UAAM,QAAQ,OAAO,KAAK,IAAI;AAC9B,QAAI,MAAM,WAAW,MAAM,OAAQ,QAAO;AAC1C,WAAO,MAAM,MAAM,CAAC,QAAQ,UAAU,KAAK,GAAG,GAAG,KAAK,GAAG,GAAG,IAAI,CAAC;AAAA,EACnE;AACA,SAAO;AACT;AAEA,MAAM,8BAA8B,oBAAI,IAAI,CAAC,UAAU,gBAAgB,gBAAgB,IAAI,CAAC;AAC5F,MAAM,sBAAsB,oBAAI,IAAI,CAAC,aAAa,YAAY,CAAC;AAE/D,SAAS,yBACP,SACA,QACA,OACS;AACT,QAAM,YAAY,SAAS,MAAM;AACjC,QAAM,WAAW,SAAS,KAAK;AAC/B,MAAI,CAAC,aAAa,CAAC,SAAU,QAAO;AACpC,QAAM,OAAO,aAAa,CAAC;AAC3B,QAAM,QAAQ,YAAY,CAAC;AAC3B,QAAM,OAAO,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,IAAI,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AAClE,aAAW,OAAO,MAAM;AACtB,UAAM,OAAO,KAAK,GAAG;AACrB,UAAM,KAAK,MAAM,GAAG;AACpB,QAAI,CAAC,UAAU,MAAM,EAAE,GAAG;AACxB,cAAQ,wBAAwB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG;AAAA,IACrD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBACP,QACA,OACgD;AAChD,SAAO,uBAAuB,QAAQ,KAAK;AAC7C;AAEA,SAAS,uBACP,QACA,OACA,QACA,MACgD;AAChD,QAAM,UAA0D,CAAC;AACjE,MAAI,CAAC,KAAM,QAAO,oBAAI,IAAI;AAC1B,MAAI,KAAK,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,EAAG,QAAO;AAChD,OAAK,IAAI,MAAM;AACf,OAAK,IAAI,KAAK;AACd,QAAM,OAAO,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AACpE,aAAW,OAAO,MAAM;AACtB,QAAI,oBAAoB,IAAI,GAAG,EAAG;AAClC,QAAI,4BAA4B,IAAI,GAAG,GAAG;AACxC,YAAM,UAAU,yBAAyB,SAAS,OAAO,GAAG,GAAG,MAAM,GAAG,CAAC;AACzE,UAAI,QAAS;AAAA,IACf;AACA,UAAM,OAAO,OAAO,GAAG;AACvB,UAAM,KAAK,MAAM,GAAG;AACpB,UAAM,OAAO,SAAS,GAAG,MAAM,IAAI,GAAG,KAAK;AAC3C,UAAM,UAAU,SAAS,IAAI;AAC7B,UAAM,QAAQ,SAAS,EAAE;AACzB,QAAI,WAAW,OAAO;AACpB,YAAM,SAAS,uBAAuB,SAAS,OAAO,MAAM,IAAI;AAChE,UAAI,OAAO,KAAK,MAAM,EAAE,QAAQ;AAC9B,eAAO,OAAO,SAAS,MAAM;AAC7B;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,UAAU,MAAM,EAAE,GAAG;AACxB,cAAQ,IAAI,IAAI,EAAE,MAAM,GAAG;AAAA,IAC7B;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,2BACP,QACA,OACuD;AACvD,QAAM,YAAY,SAAS,MAAM;AACjC,QAAM,WAAW,SAAS,KAAK;AAC/B,MAAI,CAAC,aAAa,CAAC,SAAU,QAAO;AACpC,QAAM,UAAU,mBAAmB,WAAW,QAAQ;AACtD,SAAO,OAAO,KAAK,OAAO,EAAE,SAAS,UAAU;AACjD;AAEA,SAAS,sBACP,SACuD;AACvD,QAAM,SAAS,SAAS,OAAO;AAC/B,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,WAA2D,CAAC;AAClE,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,UAAM,QAAQ,SAAS,KAAK;AAC5B,QAAI,CAAC,SAAU,EAAE,UAAU,UAAU,EAAE,QAAQ,OAAS;AACxD,aAAS,GAAG,IAAI;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,IAAI,MAAM;AAAA,IACZ;AAAA,EACF;AACA,SAAO,OAAO,KAAK,QAAQ,EAAE,SAAS,WAAW;AACnD;AAEA,SAAS,iBAAiB,QAA2B;AACnD,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AAC5E,QAAM,SAAS;AACf,QAAM,MAAM,OAAO;AACnB,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACjC,QAAM,UAAU,oBAAI,IAAY;AAChC,aAAW,SAAS,KAAK;AACvB,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,aAAa,wBAAwB,KAAK;AAChD,QAAI,WAAY,SAAQ,IAAI,UAAU;AAAA,EACxC;AACA,SAAO,MAAM,KAAK,OAAO;AAC3B;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,QACJ,WACA,SACwC;AACxC,UAAM,UAAU,KAAK,eAAgC,SAAS;AAG9D,UAAM,kBAAkB,kCAAkC;AAC1D,QAAI,sBAAsB,oBAAI,IAAqC;AACnE,QAAI,mBAAmB;AACvB,UAAM,eAAe,gBAAgB,SACjC,MAAM,KAAK,mCAAmC,QAAQ,GAAG,IACzD,CAAC;AACL,QAAI,gBAAgB,QAAQ;AAC1B,YAAM,iBAA4C;AAAA,QAChD;AAAA,QACA,MAAM,QAAQ,IAAI,QAAQ;AAAA,QAC1B,wBAAwB,QAAQ,IAAI,0BAA0B,QAAQ,IAAI,MAAM,SAAS;AAAA,QACzF,WAAW,QAAQ,IAAI;AAAA,MACzB;AACA,YAAM,eAAe,MAAM;AAAA,QACzB;AAAA,QAAiB;AAAA,QAAW,QAAQ;AAAA,QAAO;AAAA,QAAgB;AAAA,MAC7D;AACA,UAAI,CAAC,aAAa,IAAI;AACpB,cAAM,IAAI,wBAAwB,aAAa,MAAO,OAAO;AAAA,MAC/D;AACA,4BAAsB,aAAa;AACnC,UAAI,aAAa,eAAe;AAC9B,2BAAmB;AAAA,UACjB,GAAG;AAAA,UACH,OAAO,EAAE,GAAI,QAAQ,OAAkB,GAAG,aAAa,cAAc;AAAA,QACvE;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,KAAK,iBAAiB,SAAS,gBAAgB;AACvE,UAAM,eAAe,iBAAiB,gBAAgB;AACtD,UAAM,SACJ,gBAAgB,OAAO,QAAQ,SAAS,aACpC,MAAM,QAAQ,KAAK,EAAE,OAAO,iBAAiB,OAAO,KAAK,iBAAiB,KAAK,UAAU,aAAa,CAAC,IACvG,MAAM,QAAQ,QAAQ,iBAAiB,OAAO,iBAAiB,GAAG;AACxE,UAAM,gBAAgB,MAAM,KAAK,aAAa,SAAS,kBAAkB,MAAM;AAC/E,UAAM,qBAAqB,EAAE,GAAG,WAAW,OAAO,cAAc;AAChE,UAAM,UAAU,MAAM,KAAK,SAAS,SAAS,kBAAkB,QAAQ,kBAAkB;AACzF,QAAI,aAAa,KAAK,cAAc,iBAAiB,UAAU,OAAO;AACtE,UAAM,WAAW,KAAK,WAAW,OAAO;AACxC,QAAI,UAAU;AACZ,mBAAa,cAAc,CAAC;AAC5B,UAAI,CAAC,WAAW,UAAW,YAAW,YAAY,iBAAiB;AACnE,UAAI,WAAW,gBAAgB,OAAW,YAAW,cAAc,iBAAiB,IAAI,MAAM,OAAO;AAAA,IACvG;AACA,QAAI,kBAAkB,UAAa,kBAAkB,MAAM;AACzD,UAAI,CAAC,YAAY;AACf,qBAAa,EAAE,eAAe,cAAc;AAAA,MAC9C,WAAW,CAAC,WAAW,eAAe;AACpC,mBAAW,gBAAgB;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,UAAU,QAAQ;AACpB,UAAI,CAAC,YAAY;AACf,qBAAa,EAAE,gBAAgB,UAAU,OAAO;AAAA,MAClD,WAAW,CAAC,WAAW,gBAAgB;AACrC,mBAAW,iBAAiB,UAAU;AAAA,MACxC;AAAA,IACF;AACA,QAAI,YAAY,mBAAmB,UAAa,YAAY,kBAAkB,QAAW;AACvF,YAAM,iBAAiB,WAAW;AAClC,YAAM,cACJ,mBAAmB,UACnB,mBAAmB,QAClB,OAAO,mBAAmB,YAAY,CAAC,MAAM,QAAQ,cAAc,KAAK,OAAO,KAAK,cAAc,EAAE,WAAW;AAClH,UAAI,aAAa;AACf,cAAM,WAAW,2BAA2B,WAAW,gBAAgB,WAAW,aAAa;AAC/F,YAAI,SAAU,YAAW,UAAU;AAAA,MACrC;AAAA,IACF;AACA,UAAM,WAAW,MAAM,KAAK,WAAW,WAAW,kBAAkB,UAAU;AAG9E,QAAI,cAAc;AAClB,QAAI,gBAAgB,QAAQ;AAC1B,YAAM,iBAA4C;AAAA,QAChD;AAAA,QACA,MAAM,iBAAiB,IAAI,QAAQ;AAAA,QACnC,wBAAwB,iBAAiB,IAAI,0BAA0B,iBAAiB,IAAI,MAAM,SAAS;AAAA,QAC3G,WAAW,iBAAiB,IAAI;AAAA,MAClC;AACA,YAAM,cAAc,MAAM;AAAA,QACxB;AAAA,QAAiB;AAAA,QAAW,iBAAiB;AAAA,QAAO;AAAA,QAAQ;AAAA,QAC5D;AAAA,QAAc;AAAA,MAChB;AACA,UAAI,YAAY,kBAAkB,OAAO,WAAW,YAAY,QAAQ;AACtE,sBAAc,EAAE,GAAI,QAAmB,GAAG,YAAY,eAAe;AAAA,MACvE;AAAA,IACF;AAEA,QAAI,CAAC,iBAAiB,uBAAuB;AAC3C,YAAM,KAAK,4BAA4B,WAAW,kBAAkB,aAAa,UAAU;AAAA,IAC7F;AACA,UAAM,KAAK,qBAAqB,iBAAiB,IAAI,SAAS;AAC9D,WAAO,EAAE,QAAQ,aAAa,SAAS;AAAA,EACzC;AAAA,EAEA,MAAM,KAAK,WAAmB,KAA2C;AACvE,UAAM,UAAW,IAAI,UAAU,QAAQ,kBAAkB;AACzD,UAAM,MAAM,MAAM,QAAQ,gBAAgB,SAAS;AACnD,QAAI,CAAC,IAAK,OAAM,IAAI,MAAM,iCAAiC;AAC3D,UAAM,UAAU,KAAK,eAAe,IAAI,SAAS;AACjD,QAAI,CAAC,QAAQ,QAAQ,KAAK,WAAW,OAAO,MAAM,OAAO;AACvD,YAAM,IAAI,MAAM,WAAW,IAAI,SAAS,kBAAkB;AAAA,IAC5D;AAMA,UAAM,UAAU,MAAM,QAAQ,aAAa,IAAI,EAAE;AACjD,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,6BAA6B;AAE3D,QAAI;AAEF,YAAM,kBAAkB,kCAAkC;AAC1D,UAAI,0BAA0B,oBAAI,IAAqC;AACvE,YAAM,eAAe,gBAAgB,SACjC,MAAM,KAAK,mCAAmC,GAAG,IACjD,CAAC;AACL,UAAI,gBAAgB,QAAQ;AAC1B,cAAM,UAAU,EAAE,OAAO,IAAI,gBAAgB,UAAU,KAAK,UAAU;AACtE,cAAM,iBAA4C;AAAA,UAChD,WAAW,IAAI;AAAA,UACf,MAAM,IAAI,QAAQ;AAAA,UAClB,wBAAwB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACzE,WAAW,IAAI;AAAA,QACjB;AACA,cAAM,eAAe,MAAM;AAAA,UACzB;AAAA,UAAiB,IAAI;AAAA,UAAW;AAAA,UAAS;AAAA,UAAgB;AAAA,QAC3D;AACA,YAAI,CAAC,aAAa,IAAI;AACpB,gBAAM,IAAI,wBAAwB,aAAa,MAAO,OAAO;AAAA,QAC/D;AACA,kCAA0B,aAAa;AAAA,MACzC;AAEA,YAAM,QAAQ,KAAK;AAAA,QACjB,OAAO,IAAI;AAAA,QACX;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AACD,YAAM,QAAQ,WAAW,IAAI,IAAI,KAAK,kBAAkB,KAAK,GAAG,CAAC;AAGjE,UAAI,gBAAgB,QAAQ;AAC1B,cAAM,UAAU,EAAE,OAAO,IAAI,gBAAgB,UAAU,KAAK,UAAU;AACtE,cAAM,iBAA4C;AAAA,UAChD,WAAW,IAAI;AAAA,UACf,MAAM,IAAI,QAAQ;AAAA,UAClB,wBAAwB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACzE,WAAW,IAAI;AAAA,QACjB;AACA,cAAM;AAAA,UACJ;AAAA,UAAiB,IAAI;AAAA,UAAW;AAAA,UAAS;AAAA,UACzC;AAAA,UAAc;AAAA,QAChB;AAAA,MACF;AAEA,YAAM,KAAK,yBAAyB,KAAK,GAAG;AAC5C,YAAM,KAAK,qBAAqB,IAAI,SAAS;AAAA,IAC/C,SAAS,KAAK;AAGZ,YAAM,QAAQ,iBAAiB,IAAI,EAAE,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AACrD,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEQ,kBAAkB,KAAgB,KAA8D;AACtG,UAAM,iBAAiB,IAAI,iBAAiB;AAC5C,UAAM,gBAAgB,IAAI,kBAAkB;AAC5C,UAAM,UACJ,2BAA2B,gBAAgB,aAAa,KACrD,sBAAsB,IAAI,WAAW,KACrC;AAEL,UAAM,cAAc,SAAS,IAAI,WAAW,KAAK,CAAC;AAClD,UAAM,UAAU;AAAA,MACd,GAAG;AAAA,MACH,eAAe;AAAA,MACf,aAAa,IAAI;AAAA,MACjB,iBAAiB,IAAI;AAAA,IACvB;AAEA,WAAO;AAAA,MACL,UAAU,IAAI,YAAY,IAAI,MAAM,YAAY;AAAA,MAChD,gBAAgB,IAAI,kBAAkB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,MACvF,aAAa,IAAI,MAAM,OAAO,IAAI,eAAe;AAAA,MACjD,WAAW,IAAI;AAAA,MACf,aAAa,IAAI,eAAe;AAAA,MAChC,cAAc,IAAI,gBAAgB;AAAA,MAClC,YAAY,IAAI,cAAc;AAAA,MAC9B,oBAAoB,IAAI,sBAAsB;AAAA,MAC9C,kBAAkB,IAAI,oBAAoB;AAAA,MAC1C,qBAAqB,IAAI,uBAAuB;AAAA,MAChD,mBAAmB,IAAI,qBAAqB;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,mCAAmC,KAA+C;AAC9F,QAAI,CAAC,IAAI,KAAM,QAAO,CAAC;AACvB,QAAI;AAEF,YAAM,OAAO,IAAI,UAAU,QAAQ,aAAa;AAChD,UAAI,MAAM,oBAAoB;AAC5B,eAAO,MAAM,KAAK,mBAAmB,IAAI,KAAK,KAAK;AAAA,UACjD,UAAU,IAAI,KAAK;AAAA,UACnB,gBAAgB,IAAI,0BAA0B,IAAI,KAAK;AAAA,QACzD,CAAC;AAAA,MACH;AAAA,IACF,QAAQ;AAAA,IAGR;AACA,WAAO,CAAC;AAAA,EACV;AAAA,EAEQ,eAAgC,WAAoD;AAC1F,UAAM,UAAU,gBAAgB,IAAqB,SAAS;AAC9D,QAAI,CAAC,SAAS;AACZ,YAAM,aAAa,UAAU,MAAM,GAAG,EAAE,CAAC;AACzC,YAAM,aAAa,gBAAgB,KAAK;AACxC,YAAM,aAAa,WAAW,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,EAAE,CAAC,MAAM,UAAU;AAC5E,YAAM,OAAO,WAAW,SAAS,IAC7B,oCAAoC,UAAU,OAAO,WAAW,KAAK,IAAI,CAAC,OAC1E,uCAAuC,UAAU;AACrD,YAAM,IAAI,MAAM,yCAAyC,SAAS,IAAI,IAAI,EAAE;AAAA,IAC9E;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,iBACZ,SACA,SAC+B;AAC/B,QAAI,CAAC,QAAQ,QAAS,QAAO,CAAC;AAC9B,QAAI;AACF,aAAQ,MAAM,QAAQ,QAAQ,QAAQ,OAAO,QAAQ,GAAG,KAAM,CAAC;AAAA,IACjE,SAAS,KAAK;AACZ,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,aACZ,SACA,SACA,QACkB;AAClB,QAAI,CAAC,QAAQ,aAAc,QAAO;AAClC,WAAO,QAAQ,aAAa,QAAQ,OAAO,QAAQ,QAAQ,GAAG;AAAA,EAChE;AAAA,EAEA,MAAc,SACZ,SACA,SACA,QACA,WACoC;AACpC,QAAI,CAAC,QAAQ,SAAU,QAAO;AAC9B,UAAM,OAA+C;AAAA,MACnD,OAAO,QAAQ;AAAA,MACf;AAAA,MACA,KAAK,QAAQ;AAAA,MACb;AAAA,IACF;AACA,WAAQ,MAAM,QAAQ,SAAS,IAAI,KAAM;AAAA,EAC3C;AAAA,EAEQ,cAAc,SAAqC,WAAkE;AAC3H,QAAI,CAAC,WAAW,CAAC,UAAW,QAAO;AACnC,WAAO;AAAA,MACL,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,MACnD,UAAU,WAAW,YAAY,SAAS,YAAY;AAAA,MACtD,gBAAgB,WAAW,kBAAkB,SAAS,kBAAkB;AAAA,MACxE,aAAa,WAAW,eAAe,SAAS,eAAe;AAAA,MAC/D,aAAa,WAAW,eAAe,SAAS,eAAe;AAAA,MAC/D,cAAc,WAAW,gBAAgB,SAAS,gBAAgB;AAAA,MAClE,YAAY,WAAW,cAAc,SAAS,cAAc;AAAA,MAC5D,oBAAoB,WAAW,sBAAsB,SAAS,sBAAsB;AAAA,MACpF,kBAAkB,WAAW,oBAAoB,SAAS,oBAAoB;AAAA,MAC9E,qBAAqB,WAAW,uBAAuB,SAAS,uBAAuB;AAAA,MACvF,mBAAmB,WAAW,qBAAqB,SAAS,qBAAqB;AAAA,MACjF,WAAW,WAAW,aAAa,SAAS,aAAa;AAAA,MACzD,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,MACnD,gBAAgB,WAAW,kBAAkB,SAAS,kBAAkB;AAAA,MACxE,eAAe,WAAW,iBAAiB,SAAS,iBAAiB;AAAA,MACrE,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,MACnD,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,IACrD;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,WACA,SACA,UAC2B;AAC3B,QAAI,CAAC,SAAU,QAAO;AACtB,QAAI,SAAS,QAAS,QAAO;AAC7B,UAAM,eACJ,OAAO,SAAS,iBAAiB,WAAW,SAAS,eAAe;AACtE,QAAI,gBAAgB,kCAAkC,IAAI,YAAY,GAAG;AACvE,aAAO;AAAA,IACT;AACA,QAAI,UAAmC;AACvC,QAAI;AACF,gBAAW,QAAQ,IAAI,UAAU,QAAQ,kBAAkB;AAAA,IAC7D,QAAQ;AACN,gBAAU;AAAA,IACZ;AACA,QAAI,CAAC,QAAS,QAAO;AAErB,UAAM,WAAW,SAAS,YAAY,QAAQ,IAAI,MAAM,YAAY;AACpE,UAAM,iBACJ,SAAS,kBAAkB,QAAQ,IAAI,0BAA0B,QAAQ,IAAI,MAAM,SAAS;AAC9F,UAAM,cAAc,SAAS,eAAe,QAAQ,IAAI,MAAM,OAAO;AACrE,UAAM,UAAmC;AAAA,MACvC,UAAU,YAAY;AAAA,MACtB,gBAAgB,kBAAkB;AAAA,MAClC,aAAa,eAAe;AAAA,MAC5B;AAAA,IACF;AAEA,QAAI,UAAU;AACZ,UAAI,iBAAiB,YAAY,SAAS,eAAe,KAAM,SAAQ,cAAc,SAAS;AAC9F,UAAI,kBAAkB,YAAY,SAAS,gBAAgB,KAAM,SAAQ,eAAe,SAAS;AACjG,UAAI,gBAAgB,YAAY,SAAS,cAAc,KAAM,SAAQ,aAAa,SAAS;AAC3F,UAAI,wBAAwB,YAAY,SAAS,sBAAsB,KAAM,SAAQ,qBAAqB,SAAS;AACnH,UAAI,sBAAsB,YAAY,SAAS,oBAAoB,KAAM,SAAQ,mBAAmB,SAAS;AAC7G,UAAI,yBAAyB,YAAY,SAAS,uBAAuB,KAAM,SAAQ,sBAAsB,SAAS;AACtH,UAAI,uBAAuB,YAAY,SAAS,qBAAqB,KAAM,SAAQ,oBAAoB,SAAS;AAChH,UAAI,eAAe,YAAY,SAAS,aAAa,KAAM,SAAQ,YAAY,SAAS;AACxF,UAAI,aAAa,YAAY,SAAS,YAAY,OAAW,SAAQ,iBAAiB,SAAS;AAC/F,UAAI,oBAAoB,YAAY,SAAS,mBAAmB,OAAW,SAAQ,iBAAiB,SAAS;AAC7G,UAAI,mBAAmB,YAAY,SAAS,kBAAkB,OAAW,SAAQ,gBAAgB,SAAS;AAC1G,UAAI,aAAa,YAAY,SAAS,YAAY,UAAa,SAAS,YAAY,KAAM,SAAQ,UAAU,SAAS;AACrH,UAAI,aAAa,YAAY,SAAS,YAAY,UAAa,SAAS,YAAY,KAAM,SAAQ,UAAU,SAAS;AAAA,IACvH;AAEA,UAAM,eAAe,gBAAgB,oBAAoB,UAAW,QAAQ,iBAA6B,QAAW,QAAQ,KAAK;AACjI,YAAQ,iBAAiB;AAEzB,WAAO,MAAM,QAAQ,IAAI,OAA+B;AAAA,EAC1D;AAAA,EAEQ,WAAW,SAAoD;AACrE,WAAO,QAAQ,eAAe,SAAS,OAAO,QAAQ,SAAS;AAAA,EACjE;AAAA,EAEA,MAAc,4BACZ,WACA,SACA,QACA,UACe;AACf,UAAM,WAAW,OAAO,UAAU,iBAAiB,WAAW,SAAS,eAAe;AACtF,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM,MAAM,QAAQ;AACpB,YAAM,eAAe,SAAS,MAAM;AACpC,YAAM,eAAe,SAAS,cAAc,MAAM;AAClD,YAAM,cAAc,SAAS,QAAQ,KAAK;AAC1C,YAAM,cAAc,SAAS,aAAa,MAAM;AAEhD,YAAM,WAAW;AAAA,QACf,UAAU;AAAA,QACV,cAAc;AAAA,QACd,cAAc;AAAA,QACd,cAAc;AAAA,QACd,cAAc;AAAA,QACd,aAAa;AAAA,QACb,aAAa;AAAA,QACb,aAAa;AAAA,QACb,aAAa;AAAA,MACf;AAEA,YAAM,iBAAiB;AAAA,QACrB,UAAU;AAAA,QACV,cAAc;AAAA,QACd,cAAc;AAAA,QACd,aAAa;AAAA,QACb,aAAa;AAAA,QACb,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,MACnD;AAEA,YAAM,WAAW;AAAA,QACf,UAAU;AAAA,QACV,cAAc;AAAA,QACd,cAAc;AAAA,QACd,aAAa;AAAA,QACb,aAAa;AAAA,QACb,IAAI,MAAM,YAAY;AAAA,MACxB;AAEA,YAAM,iBAAiB,oBAAoB,UAAU,UAAU,IAAI,MAAM,YAAY,IAAI;AAEzF,YAAM,WAAW,oBAAI,IAAY;AACjC,iBAAW,SAAS,iBAAiB,UAAU,WAAW,IAAI,GAAG;AAC/D,iBAAS,IAAI,KAAK;AAAA,MACpB;AACA,YAAM,UAAU,4BAA4B,SAAS;AACrD,UAAI,QAAS,UAAS,IAAI,OAAO;AACjC,YAAM,cAAc,MAAM,KAAK,QAAQ;AACvC,YAAM;AAAA,QACJ,IAAI;AAAA,QACJ;AAAA,QACA,EAAE,IAAI,UAAU,gBAAgB,SAAS;AAAA,QACzC;AAAA,QACA,WAAW,SAAS;AAAA,QACpB;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,wBAAwB,GAAG;AAC7B,YAAI;AACF,kBAAQ,MAAM,6CAA6C,EAAE,WAAW,IAAI,CAAC;AAAA,QAC/E,QAAQ;AAAA,QAAC;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,yBAAyB,KAAgB,KAA2C;AAChG,UAAM,WAAW,OAAO,IAAI,iBAAiB,WAAW,IAAI,eAAe;AAC3E,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM,WAAW,oBAAoB,IAAI,UAAU;AACnD,YAAM,iBAAiB,oBAAoB,IAAI,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS,IAAI;AACpH,YAAM,WAAW,oBAAoB,IAAI,UAAU,IAAI,MAAM,YAAY,IAAI;AAC7E,YAAM,iBAAiB,oBAAoB,IAAI,UAAU,IAAI,MAAM,YAAY,IAAI;AACnF,YAAM,WAAW,oBAAI,IAAY;AACjC,iBAAW,SAAS,iBAAiB,IAAI,eAAe,IAAI,GAAG;AAC7D,iBAAS,IAAI,KAAK;AAAA,MACpB;AACA,YAAM,UAAU,4BAA4B,IAAI,SAAS;AACzD,UAAI,QAAS,UAAS,IAAI,OAAO;AACjC,YAAM,cAAc,MAAM,KAAK,QAAQ;AACvC,YAAM;AAAA,QACJ,IAAI;AAAA,QACJ;AAAA,QACA,EAAE,IAAI,UAAU,gBAAgB,SAAS;AAAA,QACzC;AAAA,QACA,WAAW,IAAI,SAAS;AAAA,QACxB;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,wBAAwB,GAAG;AAC7B,YAAI;AACF,kBAAQ,MAAM,0CAA0C,EAAE,WAAW,IAAI,WAAW,IAAI,CAAC;AAAA,QAC3F,QAAQ;AAAA,QAAC;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,qBAAqB,WAA2C;AAC5E,QAAI;AACF,YAAM,aAAc,UAAU,QAAQ,YAAY;AAClD,YAAM,WAAW,sBAAsB;AAAA,IACzC,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAOA,SAAS,gBAAgB,UAAmB,OAA8B;AACxE,MAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG;AACxE,UAAM,WAAyB,EAAE,aAAa,MAAM;AACpD,QAAI,aAAa,OAAW,UAAS,QAAQ;AAC7C,WAAO;AAAA,EACT;AACA,QAAM,UAAU;AAChB,MAAI,iBAAiB,WAAW,QAAQ,gBAAgB,QAAW;AACjE,WAAO;AAAA,EACT;AACA,SAAO,EAAE,aAAa,OAAO,GAAG,QAAQ;AAC1C;",
   "names": []
 }

package/dist/lib/commands/flush.js

@@ -1,10 +1,32 @@
+async function flushPendingChangesGuard(em, label) {
+  let pendingCount = -1;
+  try {
+    const uow = typeof em.getUnitOfWork === "function" ? em.getUnitOfWork() : void 0;
+    if (uow && typeof uow.computeChangeSets === "function" && typeof uow.getChangeSets === "function") {
+      uow.computeChangeSets();
+      pendingCount = uow.getChangeSets().length;
+    }
+  } catch {
+    pendingCount = -1;
+  }
+  if (pendingCount > 0) {
+    await em.flush();
+    if (process.env.NODE_ENV !== "production") {
+      const where = label ? ` (${label})` : "";
+      console.warn(
+        `[withAtomicFlush]${where}: ${pendingCount} pending change-set(s) remained at the commit boundary and were flushed defensively. A phase mutated a managed entity after its flush boundary \u2014 split the mutation and any dependent read/sync into separate phases so the change is never at risk of being dropped.`
+      );
+    }
+  }
+}
 async function withAtomicFlush(em, phases, options) {
   if (phases.length === 0) return;
   const runPhasesAndFlush = async () => {
     for (const phase of phases) {
       await phase();
+      await em.flush();
     }
-    await em.flush();
+    await flushPendingChangesGuard(em, options?.label);
   };
   if (!options?.transaction) {
     await runPhasesAndFlush();

package/dist/lib/commands/flush.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/commands/flush.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { IsolationLevel } from '@mikro-orm/core'\n\n/**\n * Options controlling how {@link withAtomicFlush} executes its phases.\n */\nexport type AtomicFlushOptions = {\n  /**\n   * When true, the whole sequence runs inside a database transaction for\n   * all-or-nothing semantics. Default: false (a single `em.flush()` commits\n   * all phases at the end \u2014 no transaction).\n   */\n  transaction?: boolean\n  /**\n   * Optional transaction isolation level, forwarded to `em.begin()`. Only\n   * honoured when this call opens a new top-level transaction (i.e.\n   * `transaction: true` and the EntityManager is not already inside a\n   * transaction). Ignored when joining an ambient transaction.\n   */\n  isolationLevel?: IsolationLevel\n  /**\n   * Optional label for diagnostics. Currently informational only.\n   */\n  label?: string\n}\n\n/**\n * Wraps multiple mutation phases in a single atomic flush.\n *\n * Prevents partial commits when a command mutates entities across\n * multiple phases (e.g., scalar mutations + relation syncs).\n * Each phase function runs sequentially; a single `em.flush()`\n * commits all changes at the end on the same `EntityManager` the\n * phases mutate, so closures over `em` stay valid.\n *\n * When `options.transaction` is true, the whole sequence runs\n * inside a database transaction for all-or-nothing semantics.\n *\n * ## Re-entrancy / composability\n *\n * `withAtomicFlush({ transaction: true })` is safe to nest. If the\n * supplied `EntityManager` is **already inside a transaction**, this\n * call does NOT open a second one (raw `em.begin()` would clobber the\n * active `#transactionContext` and orphan the outer transaction \u2014 unlike\n * `em.transactional()`, MikroORM's `em.begin()` does not check\n * `isInTransaction()`). Instead it joins the ambient transaction: the\n * phases run and flush within it, and the outermost caller owns the final\n * `commit()` / `rollback()`. A phase error therefore rolls back the entire\n * enclosing transaction (all-or-nothing across the whole nest).\n *\n * This mirrors the contract every command relies on: each command forks\n * the request `EntityManager` first, so the common case opens a fresh\n * top-level transaction; nesting only happens when one transactional unit\n * is composed inside another on the same `em`.\n *\n * When `phases` is empty the call is a true no-op \u2014 no flush,\n * no transaction. Callers that need an explicit commit should\n * pass at least one phase.\n *\n * Keep side-effect emissions (`emitCrudSideEffects` etc.) OUTSIDE\n * the `withAtomicFlush` block \u2014 they should only fire after commit.\n */\nexport async function withAtomicFlush(\n  em: EntityManager,\n  phases: Array<() => void | Promise<void>>,\n  options?: AtomicFlushOptions,\n): Promise<void> {\n  if (phases.length === 0) return\n\n  const runPhasesAndFlush = async () => {\n    for (const phase of phases) {\n      await phase()\n    }\n    await em.flush()\n  }\n\n  if (!options?.transaction) {\n    await runPhasesAndFlush()\n    return\n  }\n\n  // Re-entrancy guard: never open a nested transaction with raw begin/commit.\n  // If a transaction is already active on this EntityManager, join it \u2014 the\n  // outermost caller owns commit/rollback. A phase error propagates and rolls\n  // back the whole enclosing transaction.\n  //\n  // Guard the probe: real MikroORM EntityManagers always implement\n  // `isInTransaction()`, but partial / mock EMs may not. A missing method is\n  // treated as \"not in a transaction\", so this call opens its own top-level\n  // transaction via the begin/commit path below (which those EMs do support).\n  const isInTransaction = (em as { isInTransaction?: () => boolean }).isInTransaction\n  if (typeof isInTransaction === 'function' && isInTransaction.call(em)) {\n    await runPhasesAndFlush()\n    return\n  }\n\n  await em.begin(options.isolationLevel ? { isolationLevel: options.isolationLevel } : undefined)\n  try {\n    await runPhasesAndFlush()\n    await em.commit()\n  } catch (err) {\n    try {\n      await em.rollback()\n    } catch {\n      // rollback failure should not mask the original error; intentionally swallowed\n    }\n    throw err\n  }\n}\n"],
-  "mappings": "AA8DA,eAAsB,gBACpB,IACA,QACA,SACe;AACf,MAAI,OAAO,WAAW,EAAG;AAEzB,QAAM,oBAAoB,YAAY;AACpC,eAAW,SAAS,QAAQ;AAC1B,YAAM,MAAM;AAAA,IACd;AACA,UAAM,GAAG,MAAM;AAAA,EACjB;AAEA,MAAI,CAAC,SAAS,aAAa;AACzB,UAAM,kBAAkB;AACxB;AAAA,EACF;AAWA,QAAM,kBAAmB,GAA2C;AACpE,MAAI,OAAO,oBAAoB,cAAc,gBAAgB,KAAK,EAAE,GAAG;AACrE,UAAM,kBAAkB;AACxB;AAAA,EACF;AAEA,QAAM,GAAG,MAAM,QAAQ,iBAAiB,EAAE,gBAAgB,QAAQ,eAAe,IAAI,MAAS;AAC9F,MAAI;AACF,UAAM,kBAAkB;AACxB,UAAM,GAAG,OAAO;AAAA,EAClB,SAAS,KAAK;AACZ,QAAI;AACF,YAAM,GAAG,SAAS;AAAA,IACpB,QAAQ;AAAA,IAER;AACA,UAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { IsolationLevel } from '@mikro-orm/core'\n\n/**\n * Options controlling how {@link withAtomicFlush} executes its phases.\n */\nexport type AtomicFlushOptions = {\n  /**\n   * When true, the whole sequence runs inside a database transaction for\n   * all-or-nothing semantics. Default: false (a single `em.flush()` commits\n   * all phases at the end \u2014 no transaction).\n   */\n  transaction?: boolean\n  /**\n   * Optional transaction isolation level, forwarded to `em.begin()`. Only\n   * honoured when this call opens a new top-level transaction (i.e.\n   * `transaction: true` and the EntityManager is not already inside a\n   * transaction). Ignored when joining an ambient transaction.\n   */\n  isolationLevel?: IsolationLevel\n  /**\n   * Optional label for diagnostics. Surfaced in the commit-boundary guard's\n   * dev warning when a pending change set had to be flushed defensively, so the\n   * offending command is identifiable.\n   */\n  label?: string\n}\n\ntype UnitOfWorkProbe = {\n  computeChangeSets?: () => void\n  getChangeSets?: () => ReadonlyArray<unknown>\n}\n\ntype FlushGuardEntityManager = {\n  flush: () => Promise<void>\n  getUnitOfWork?: () => UnitOfWorkProbe | undefined\n}\n\n/**\n * Commit-boundary safety net.\n *\n * After every phase has run and flushed, this asserts the UnitOfWork holds NO\n * pending change sets before the transaction commits. If it still does \u2014 a phase\n * mutated a managed entity AFTER its own per-phase flush boundary (the exact\n * shape that silently drops a scalar UPDATE under MikroORM v7) \u2014 the guard\n * flushes those changes defensively so the write can never be lost, and warns in\n * non-production so the latent ordering bug gets fixed at the source.\n *\n * Detection is best-effort and fail-safe: it only issues the extra flush when it\n * can PROVE the UnitOfWork is dirty (`computeChangeSets()` \u2192 `getChangeSets()`\n * non-empty). On EntityManagers that don't expose a UnitOfWork (partial/mock EMs\n * in unit tests) it does nothing \u2014 the per-phase flushes already ran \u2014 so it\n * never double-flushes a clean unit of work and never changes flush counts for\n * callers that were already correct.\n */\nasync function flushPendingChangesGuard(\n  em: FlushGuardEntityManager,\n  label?: string,\n): Promise<void> {\n  let pendingCount = -1\n  try {\n    const uow = typeof em.getUnitOfWork === 'function' ? em.getUnitOfWork() : undefined\n    if (uow && typeof uow.computeChangeSets === 'function' && typeof uow.getChangeSets === 'function') {\n      uow.computeChangeSets()\n      pendingCount = uow.getChangeSets().length\n    }\n  } catch {\n    // Probing the UnitOfWork must never break a command; fall back to \"unknown\".\n    pendingCount = -1\n  }\n\n  if (pendingCount > 0) {\n    await em.flush()\n    if (process.env.NODE_ENV !== 'production') {\n      const where = label ? ` (${label})` : ''\n      console.warn(\n        `[withAtomicFlush]${where}: ${pendingCount} pending change-set(s) remained at the commit boundary and were flushed defensively. ` +\n          'A phase mutated a managed entity after its flush boundary \u2014 split the mutation and any dependent read/sync into separate phases so the change is never at risk of being dropped.',\n      )\n    }\n  }\n}\n\n/**\n * Wraps multiple mutation phases in a single atomic flush.\n *\n * Prevents partial commits when a command mutates entities across\n * multiple phases (e.g., scalar mutations + relation syncs).\n * Each phase function runs sequentially; a single `em.flush()`\n * commits all changes at the end on the same `EntityManager` the\n * phases mutate, so closures over `em` stay valid.\n *\n * When `options.transaction` is true, the whole sequence runs\n * inside a database transaction for all-or-nothing semantics.\n *\n * ## Re-entrancy / composability\n *\n * `withAtomicFlush({ transaction: true })` is safe to nest. If the\n * supplied `EntityManager` is **already inside a transaction**, this\n * call does NOT open a second one (raw `em.begin()` would clobber the\n * active `#transactionContext` and orphan the outer transaction \u2014 unlike\n * `em.transactional()`, MikroORM's `em.begin()` does not check\n * `isInTransaction()`). Instead it joins the ambient transaction: the\n * phases run and flush within it, and the outermost caller owns the final\n * `commit()` / `rollback()`. A phase error therefore rolls back the entire\n * enclosing transaction (all-or-nothing across the whole nest).\n *\n * This mirrors the contract every command relies on: each command forks\n * the request `EntityManager` first, so the common case opens a fresh\n * top-level transaction; nesting only happens when one transactional unit\n * is composed inside another on the same `em`.\n *\n * When `phases` is empty the call is a true no-op \u2014 no flush,\n * no transaction. Callers that need an explicit commit should\n * pass at least one phase.\n *\n * Keep side-effect emissions (`emitCrudSideEffects` etc.) OUTSIDE\n * the `withAtomicFlush` block \u2014 they should only fire after commit.\n */\nexport async function withAtomicFlush(\n  em: EntityManager,\n  phases: Array<() => void | Promise<void>>,\n  options?: AtomicFlushOptions,\n): Promise<void> {\n  if (phases.length === 0) return\n\n  // SPEC-018: the phases ARE flush boundaries \u2014 flush AFTER EACH phase, not once\n  // at the end. A phase's scalar mutations must be persisted before the NEXT\n  // phase runs any query (em.find / findOne / nativeUpdate / a sync helper);\n  // otherwise the interleaved read resets MikroORM v7's identity-map changeset\n  // and the pending scalar UPDATE is silently dropped (the #2453 family). This\n  // is the framework-level guarantee that lets commands keep mutations and the\n  // reads that depend on them in separate phases without hand-rolled flushes.\n  //\n  // Atomicity is preserved: when `transaction: true` (or an ambient transaction\n  // is joined), each `em.flush()` only emits SQL inside the open transaction \u2014\n  // the single commit/rollback below still spans every phase, so a later-phase\n  // failure rolls back all earlier phases. Without a transaction the helper\n  // keeps its documented \"each phase flushes independently\" behavior.\n  //\n  // Commit-boundary guarantee: after the last phase flush, `flushPendingChangesGuard`\n  // re-checks the UnitOfWork and flushes once more if ANY pending change set remains\n  // (a phase mutated state after its boundary). The transaction therefore can never\n  // commit with unflushed work \u2014 if a per-phase flush was missed \"for some reason\",\n  // the guard catches it inside the same transaction and warns in dev.\n  const runPhasesAndFlush = async () => {\n    for (const phase of phases) {\n      await phase()\n      await em.flush()\n    }\n    await flushPendingChangesGuard(em as unknown as FlushGuardEntityManager, options?.label)\n  }\n\n  if (!options?.transaction) {\n    await runPhasesAndFlush()\n    return\n  }\n\n  // Re-entrancy guard: never open a nested transaction with raw begin/commit.\n  // If a transaction is already active on this EntityManager, join it \u2014 the\n  // outermost caller owns commit/rollback. A phase error propagates and rolls\n  // back the whole enclosing transaction.\n  //\n  // Guard the probe: real MikroORM EntityManagers always implement\n  // `isInTransaction()`, but partial / mock EMs may not. A missing method is\n  // treated as \"not in a transaction\", so this call opens its own top-level\n  // transaction via the begin/commit path below (which those EMs do support).\n  const isInTransaction = (em as { isInTransaction?: () => boolean }).isInTransaction\n  if (typeof isInTransaction === 'function' && isInTransaction.call(em)) {\n    await runPhasesAndFlush()\n    return\n  }\n\n  await em.begin(options.isolationLevel ? { isolationLevel: options.isolationLevel } : undefined)\n  try {\n    await runPhasesAndFlush()\n    await em.commit()\n  } catch (err) {\n    try {\n      await em.rollback()\n    } catch {\n      // rollback failure should not mask the original error; intentionally swallowed\n    }\n    throw err\n  }\n}\n"],
+  "mappings": "AAuDA,eAAe,yBACb,IACA,OACe;AACf,MAAI,eAAe;AACnB,MAAI;AACF,UAAM,MAAM,OAAO,GAAG,kBAAkB,aAAa,GAAG,cAAc,IAAI;AAC1E,QAAI,OAAO,OAAO,IAAI,sBAAsB,cAAc,OAAO,IAAI,kBAAkB,YAAY;AACjG,UAAI,kBAAkB;AACtB,qBAAe,IAAI,cAAc,EAAE;AAAA,IACrC;AAAA,EACF,QAAQ;AAEN,mBAAe;AAAA,EACjB;AAEA,MAAI,eAAe,GAAG;AACpB,UAAM,GAAG,MAAM;AACf,QAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,YAAM,QAAQ,QAAQ,KAAK,KAAK,MAAM;AACtC,cAAQ;AAAA,QACN,oBAAoB,KAAK,KAAK,YAAY;AAAA,MAE5C;AAAA,IACF;AAAA,EACF;AACF;AAsCA,eAAsB,gBACpB,IACA,QACA,SACe;AACf,MAAI,OAAO,WAAW,EAAG;AAqBzB,QAAM,oBAAoB,YAAY;AACpC,eAAW,SAAS,QAAQ;AAC1B,YAAM,MAAM;AACZ,YAAM,GAAG,MAAM;AAAA,IACjB;AACA,UAAM,yBAAyB,IAA0C,SAAS,KAAK;AAAA,EACzF;AAEA,MAAI,CAAC,SAAS,aAAa;AACzB,UAAM,kBAAkB;AACxB;AAAA,EACF;AAWA,QAAM,kBAAmB,GAA2C;AACpE,MAAI,OAAO,oBAAoB,cAAc,gBAAgB,KAAK,EAAE,GAAG;AACrE,UAAM,kBAAkB;AACxB;AAAA,EACF;AAEA,QAAM,GAAG,MAAM,QAAQ,iBAAiB,EAAE,gBAAgB,QAAQ,eAAe,IAAI,MAAS;AAC9F,MAAI;AACF,UAAM,kBAAkB;AACxB,UAAM,GAAG,OAAO;AAAA,EAClB,SAAS,KAAK;AACZ,QAAI;AACF,YAAM,GAAG,SAAS;AAAA,IACpB,QAAQ;AAAA,IAER;AACA,UAAM;AAAA,EACR;AACF;",
   "names": []
 }

package/dist/lib/commands/index.js

@@ -3,9 +3,14 @@ export * from "./registry.js";
 import { CommandBus } from "./command-bus.js";
 export * from "./customFieldSnapshots.js";
 export * from "./undo.js";
+export * from "./redo.js";
 import { CommandInterceptorError } from "./errors.js";
+import {
+  runCrudCommandWrite
+} from "./runCrudCommandWrite.js";
 export {
   CommandBus,
-  CommandInterceptorError
+  CommandInterceptorError,
+  runCrudCommandWrite
 };
 //# sourceMappingURL=index.js.map

package/dist/lib/commands/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/commands/index.ts"],
-  "sourcesContent": ["export * from './types'\nexport * from './registry'\nexport { CommandBus } from './command-bus'\nexport * from './customFieldSnapshots'\nexport * from './undo'\nexport { CommandInterceptorError } from './errors'\n"],
-  "mappings": "AAAA,cAAc;AACd,cAAc;AACd,SAAS,kBAAkB;AAC3B,cAAc;AACd,cAAc;AACd,SAAS,+BAA+B;",
+  "sourcesContent": ["export * from './types'\nexport * from './registry'\nexport { CommandBus } from './command-bus'\nexport * from './customFieldSnapshots'\nexport * from './undo'\nexport * from './redo'\nexport { CommandInterceptorError } from './errors'\nexport {\n  runCrudCommandWrite,\n  type RunCrudCommandWriteOptions,\n  type RunCrudCommandWriteResult,\n  type CrudCommandWritePhase,\n  type CrudCommandWriteScope,\n  type CrudCommandWriteSideEffectTarget,\n} from './runCrudCommandWrite'\n"],
+  "mappings": "AAAA,cAAc;AACd,cAAc;AACd,SAAS,kBAAkB;AAC3B,cAAc;AACd,cAAc;AACd,cAAc;AACd,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,OAMK;",
   "names": []
 }