@dainamite/cpq 0.2.2

package/dist/modules/cpq/api/inventory/subscriptions/[subscriptionId]/change-log/route.js

@@ -0,0 +1,57 @@
+import { NextResponse } from "next/server";
+import { resolveCpqRouteContext } from "../../../../context.js";
+import { cpqChangeLogQuerySchema } from "../../../../../data/validators.js";
+import { handleArcError } from "../../../../_helpers/handleArcError.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["cpq.arc.changelog.view"] }
+};
+async function GET(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { subscriptionId } = await params;
+    const url = new URL(req.url);
+    const query = cpqChangeLogQuerySchema.parse({
+      page: url.searchParams.get("page") ?? void 0,
+      pageSize: url.searchParams.get("pageSize") ?? void 0
+    });
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqInventoryService");
+    const result = await service.listChangeLog(
+      subscriptionId,
+      { page: query.page, pageSize: query.pageSize },
+      scope
+    );
+    return NextResponse.json(result);
+  } catch (err) {
+    return handleArcError(err, "cpq/inventory/subscriptions/[subscriptionId]/change-log.GET");
+  }
+}
+const openApi = {
+  "/api/cpq/inventory/subscriptions/{subscriptionId}/change-log": {
+    parameters: [
+      {
+        name: "subscriptionId",
+        in: "path",
+        required: true,
+        schema: { type: "string", format: "uuid" }
+      },
+      { name: "page", in: "query", schema: { type: "integer", minimum: 1, default: 1 } },
+      { name: "pageSize", in: "query", schema: { type: "integer", minimum: 1, maximum: 100 } }
+    ],
+    get: {
+      tags: ["CPQ ARC"],
+      summary: "List ARC change-log entries for a subscription",
+      responses: {
+        "200": { description: "Paginated change log" },
+        "401": { description: "Unauthorized" }
+      }
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/inventory/subscriptions/[subscriptionId]/change-log/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/cpq/api/inventory/subscriptions/%5BsubscriptionId%5D/change-log/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveCpqRouteContext } from '../../../../context'\nimport { cpqChangeLogQuerySchema } from '../../../../../data/validators'\nimport type { DefaultCpqInventoryService } from '../../../../../services/cpqInventoryService'\nimport { handleArcError } from '../../../../_helpers/handleArcError'\n\n/**\n * GET /api/cpq/inventory/subscriptions/[subscriptionId]/change-log\n *\n * Paginated CpqSubscriptionChangeLog timeline for a subscription\n * (most recent first).\n */\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['cpq.arc.changelog.view'] },\n}\n\nexport async function GET(\n  req: Request,\n  { params }: { params: Promise<{ subscriptionId: string }> },\n) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    const { subscriptionId } = await params\n    const url = new URL(req.url)\n    const query = cpqChangeLogQuerySchema.parse({\n      page: url.searchParams.get('page') ?? undefined,\n      pageSize: url.searchParams.get('pageSize') ?? undefined,\n    })\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = ctx.container.resolve('cpqInventoryService') as DefaultCpqInventoryService\n    const result = await service.listChangeLog(\n      subscriptionId,\n      { page: query.page, pageSize: query.pageSize },\n      scope,\n    )\n    return NextResponse.json(result)\n  } catch (err) {\n    return handleArcError(err, 'cpq/inventory/subscriptions/[subscriptionId]/change-log.GET')\n  }\n}\n\nexport const openApi = {\n  '/api/cpq/inventory/subscriptions/{subscriptionId}/change-log': {\n    parameters: [\n      {\n        name: 'subscriptionId',\n        in: 'path',\n        required: true,\n        schema: { type: 'string', format: 'uuid' },\n      },\n      { name: 'page', in: 'query', schema: { type: 'integer', minimum: 1, default: 1 } },\n      { name: 'pageSize', in: 'query', schema: { type: 'integer', minimum: 1, maximum: 100 } },\n    ],\n    get: {\n      tags: ['CPQ ARC'],\n      summary: 'List ARC change-log entries for a subscription',\n      responses: {\n        '200': { description: 'Paginated change log' },\n        '401': { description: 'Unauthorized' },\n      },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,+BAA+B;AAExC,SAAS,sBAAsB;AAQxB,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEA,eAAsB,IACpB,KACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClF,UAAM,EAAE,eAAe,IAAI,MAAM;AACjC,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,wBAAwB,MAAM;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAChD,CAAC;AACD,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,IAAI,UAAU,QAAQ,qBAAqB;AAC3D,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B;AAAA,MACA,EAAE,MAAM,MAAM,MAAM,UAAU,MAAM,SAAS;AAAA,MAC7C;AAAA,IACF;AACA,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,WAAO,eAAe,KAAK,6DAA6D;AAAA,EAC1F;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,gEAAgE;AAAA,IAC9D,YAAY;AAAA,MACV;AAAA,QACE,MAAM;AAAA,QACN,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO;AAAA,MAC3C;AAAA,MACA,EAAE,MAAM,QAAQ,IAAI,SAAS,QAAQ,EAAE,MAAM,WAAW,SAAS,GAAG,SAAS,EAAE,EAAE;AAAA,MACjF,EAAE,MAAM,YAAY,IAAI,SAAS,QAAQ,EAAE,MAAM,WAAW,SAAS,GAAG,SAAS,IAAI,EAAE;AAAA,IACzF;AAAA,IACA,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,WAAW;AAAA,QACT,OAAO,EAAE,aAAa,uBAAuB;AAAA,QAC7C,OAAO,EAAE,aAAa,eAAe;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/cpq/api/inventory/subscriptions/expiring/route.js

@@ -0,0 +1,62 @@
+import { NextResponse } from "next/server";
+import { resolveCpqRouteContext } from "../../../context.js";
+import { cpqExpiringSubscriptionsQuerySchema } from "../../../../data/validators.js";
+import { handleArcError } from "../../../_helpers/handleArcError.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["cpq.inventory.expiring.view"] }
+};
+async function GET(req) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const url = new URL(req.url);
+    const query = cpqExpiringSubscriptionsQuerySchema.parse({
+      withinDays: url.searchParams.get("withinDays") ?? void 0,
+      customerId: url.searchParams.get("customerId") ?? void 0,
+      billingCycle: url.searchParams.get("billingCycle") ?? void 0,
+      status: url.searchParams.get("status") ?? void 0,
+      page: url.searchParams.get("page") ?? void 0,
+      pageSize: url.searchParams.get("pageSize") ?? void 0
+    });
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqInventoryService");
+    const result = await service.findExpiringSubscriptions(query, scope);
+    return NextResponse.json(result);
+  } catch (err) {
+    return handleArcError(err, "cpq/inventory/subscriptions/expiring.GET");
+  }
+}
+const openApi = {
+  "/api/cpq/inventory/subscriptions/expiring": {
+    parameters: [
+      {
+        name: "withinDays",
+        in: "query",
+        schema: { type: "integer", minimum: 1, maximum: 365, default: 30 }
+      },
+      { name: "customerId", in: "query", schema: { type: "string", format: "uuid" } },
+      {
+        name: "billingCycle",
+        in: "query",
+        schema: { type: "string", enum: ["monthly", "quarterly", "annually"] }
+      },
+      { name: "status", in: "query", schema: { type: "string", default: "active" } },
+      { name: "page", in: "query", schema: { type: "integer", minimum: 1, default: 1 } },
+      { name: "pageSize", in: "query", schema: { type: "integer", minimum: 1, maximum: 100 } }
+    ],
+    get: {
+      tags: ["CPQ ARC"],
+      summary: "List subscriptions expiring within N days",
+      responses: {
+        "200": { description: "Paginated subscriptions" },
+        "401": { description: "Unauthorized" }
+      }
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/inventory/subscriptions/expiring/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/cpq/api/inventory/subscriptions/expiring/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveCpqRouteContext } from '../../../context'\nimport { cpqExpiringSubscriptionsQuerySchema } from '../../../../data/validators'\nimport type { DefaultCpqInventoryService } from '../../../../services/cpqInventoryService'\nimport { handleArcError } from '../../../_helpers/handleArcError'\n\n/**\n * GET /api/cpq/inventory/subscriptions/expiring\n *\n * List active subscriptions whose currentTermEnd falls within the next\n * `withinDays` days. Drives the operator's renewal triage view.\n */\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['cpq.inventory.expiring.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    const url = new URL(req.url)\n    const query = cpqExpiringSubscriptionsQuerySchema.parse({\n      withinDays: url.searchParams.get('withinDays') ?? undefined,\n      customerId: url.searchParams.get('customerId') ?? undefined,\n      billingCycle: url.searchParams.get('billingCycle') ?? undefined,\n      status: url.searchParams.get('status') ?? undefined,\n      page: url.searchParams.get('page') ?? undefined,\n      pageSize: url.searchParams.get('pageSize') ?? undefined,\n    })\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = ctx.container.resolve('cpqInventoryService') as DefaultCpqInventoryService\n    const result = await service.findExpiringSubscriptions(query, scope)\n    return NextResponse.json(result)\n  } catch (err) {\n    return handleArcError(err, 'cpq/inventory/subscriptions/expiring.GET')\n  }\n}\n\nexport const openApi = {\n  '/api/cpq/inventory/subscriptions/expiring': {\n    parameters: [\n      {\n        name: 'withinDays',\n        in: 'query',\n        schema: { type: 'integer', minimum: 1, maximum: 365, default: 30 },\n      },\n      { name: 'customerId', in: 'query', schema: { type: 'string', format: 'uuid' } },\n      {\n        name: 'billingCycle',\n        in: 'query',\n        schema: { type: 'string', enum: ['monthly', 'quarterly', 'annually'] },\n      },\n      { name: 'status', in: 'query', schema: { type: 'string', default: 'active' } },\n      { name: 'page', in: 'query', schema: { type: 'integer', minimum: 1, default: 1 } },\n      { name: 'pageSize', in: 'query', schema: { type: 'integer', minimum: 1, maximum: 100 } },\n    ],\n    get: {\n      tags: ['CPQ ARC'],\n      summary: 'List subscriptions expiring within N days',\n      responses: {\n        '200': { description: 'Paginated subscriptions' },\n        '401': { description: 'Unauthorized' },\n      },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,2CAA2C;AAEpD,SAAS,sBAAsB;AAQxB,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,oCAAoC,MAAM;AAAA,MACtD,YAAY,IAAI,aAAa,IAAI,YAAY,KAAK;AAAA,MAClD,YAAY,IAAI,aAAa,IAAI,YAAY,KAAK;AAAA,MAClD,cAAc,IAAI,aAAa,IAAI,cAAc,KAAK;AAAA,MACtD,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAChD,CAAC;AACD,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,IAAI,UAAU,QAAQ,qBAAqB;AAC3D,UAAM,SAAS,MAAM,QAAQ,0BAA0B,OAAO,KAAK;AACnE,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,WAAO,eAAe,KAAK,0CAA0C;AAAA,EACvE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,6CAA6C;AAAA,IAC3C,YAAY;AAAA,MACV;AAAA,QACE,MAAM;AAAA,QACN,IAAI;AAAA,QACJ,QAAQ,EAAE,MAAM,WAAW,SAAS,GAAG,SAAS,KAAK,SAAS,GAAG;AAAA,MACnE;AAAA,MACA,EAAE,MAAM,cAAc,IAAI,SAAS,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO,EAAE;AAAA,MAC9E;AAAA,QACE,MAAM;AAAA,QACN,IAAI;AAAA,QACJ,QAAQ,EAAE,MAAM,UAAU,MAAM,CAAC,WAAW,aAAa,UAAU,EAAE;AAAA,MACvE;AAAA,MACA,EAAE,MAAM,UAAU,IAAI,SAAS,QAAQ,EAAE,MAAM,UAAU,SAAS,SAAS,EAAE;AAAA,MAC7E,EAAE,MAAM,QAAQ,IAAI,SAAS,QAAQ,EAAE,MAAM,WAAW,SAAS,GAAG,SAAS,EAAE,EAAE;AAAA,MACjF,EAAE,MAAM,YAAY,IAAI,SAAS,QAAQ,EAAE,MAAM,WAAW,SAAS,GAAG,SAAS,IAAI,EAAE;AAAA,IACzF;AAAA,IACA,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,WAAW;AAAA,QACT,OAAO,EAAE,aAAa,0BAA0B;AAAA,QAChD,OAAO,EAAE,aAAa,eAAe;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/cpq/api/inventory/subscriptions/route.js

@@ -0,0 +1,116 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { resolveCpqRouteContext } from "../../context.js";
+import {
+  cpqInventorySubscriptionCreateSchema,
+  cpqInventorySubscriptionUpdateSchema
+} from "../../../data/validators.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["cpq.inventory.view"] },
+  POST: { requireAuth: true, requireFeatures: ["cpq.inventory.manage"] },
+  PUT: { requireAuth: true, requireFeatures: ["cpq.inventory.manage"] },
+  DELETE: { requireAuth: true, requireFeatures: ["cpq.inventory.manage"] }
+};
+async function GET(req) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const url = new URL(req.url);
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqInventoryService");
+    const id = url.searchParams.get("id");
+    if (id) {
+      const result2 = await service.getSubscription(id, scope);
+      return NextResponse.json(result2);
+    }
+    const filters = {};
+    const customerId = url.searchParams.get("customerId");
+    if (customerId) filters.customerId = customerId;
+    const status = url.searchParams.get("status");
+    if (status) filters.status = status.split(",");
+    const productId = url.searchParams.get("productId");
+    if (productId) filters.productId = productId;
+    const sourceOrderId = url.searchParams.get("sourceOrderId");
+    if (sourceOrderId) filters.sourceOrderId = sourceOrderId;
+    const billingCycle = url.searchParams.get("billingCycle");
+    if (billingCycle) filters.billingCycle = billingCycle;
+    const search = url.searchParams.get("search");
+    if (search) filters.search = search;
+    const expiringWithinDays = url.searchParams.get("expiringWithinDays");
+    if (expiringWithinDays) {
+      const n = Number(expiringWithinDays);
+      if (Number.isFinite(n) && n > 0) filters.expiringWithinDays = Math.min(365, n);
+    }
+    const ALLOWED_SORT_FIELDS = ["createdAt", "updatedAt", "code", "name", "status", "startDate", "currentTermEnd"];
+    const sortFieldParam = url.searchParams.get("sortField") ?? "";
+    if (ALLOWED_SORT_FIELDS.includes(sortFieldParam)) {
+      filters.sortField = sortFieldParam;
+    }
+    filters.sortDir = url.searchParams.get("sortDir") === "asc" ? "asc" : "desc";
+    filters.page = Math.max(1, Number(url.searchParams.get("page") ?? "1"));
+    filters.pageSize = Math.min(100, Math.max(1, Number(url.searchParams.get("pageSize") ?? "50")));
+    const result = await service.listSubscriptions(filters, scope);
+    return NextResponse.json(result);
+  } catch (err) {
+    console.error("[cpq/inventory/subscriptions.GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+async function POST(req) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const body = cpqInventorySubscriptionCreateSchema.parse(await req.json());
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqInventoryService");
+    const result = await service.createSubscription(body, scope);
+    return NextResponse.json(result, { status: 201 });
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: "Validation error", details: err.issues }, { status: 400 });
+    }
+    console.error("[cpq/inventory/subscriptions.POST]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+async function PUT(req) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const body = cpqInventorySubscriptionUpdateSchema.parse(await req.json());
+    const { id, ...updates } = body;
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqInventoryService");
+    const result = await service.updateSubscription(id, updates, scope);
+    return NextResponse.json(result);
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: "Validation error", details: err.issues }, { status: 400 });
+    }
+    console.error("[cpq/inventory/subscriptions.PUT]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+async function DELETE(req) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { id } = await req.json();
+    if (!id) return NextResponse.json({ error: "Missing id" }, { status: 400 });
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqInventoryService");
+    await service.deleteSubscription(id, scope);
+    return NextResponse.json({ success: true });
+  } catch (err) {
+    console.error("[cpq/inventory/subscriptions.DELETE]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+export {
+  DELETE,
+  GET,
+  POST,
+  PUT,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/inventory/subscriptions/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/cpq/api/inventory/subscriptions/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { resolveCpqRouteContext } from '../../context'\nimport {\n  cpqInventorySubscriptionCreateSchema,\n  cpqInventorySubscriptionUpdateSchema,\n} from '../../../data/validators'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['cpq.inventory.view'] },\n  POST: { requireAuth: true, requireFeatures: ['cpq.inventory.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['cpq.inventory.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['cpq.inventory.manage'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const url = new URL(req.url)\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = ctx.container.resolve('cpqInventoryService') as any\n\n    const id = url.searchParams.get('id')\n    if (id) {\n      const result = await service.getSubscription(id, scope)\n      return NextResponse.json(result)\n    }\n\n    const filters: Record<string, unknown> = {}\n    const customerId = url.searchParams.get('customerId')\n    if (customerId) filters.customerId = customerId\n    const status = url.searchParams.get('status')\n    if (status) filters.status = status.split(',')\n    const productId = url.searchParams.get('productId')\n    if (productId) filters.productId = productId\n    const sourceOrderId = url.searchParams.get('sourceOrderId')\n    if (sourceOrderId) filters.sourceOrderId = sourceOrderId\n    const billingCycle = url.searchParams.get('billingCycle')\n    if (billingCycle) filters.billingCycle = billingCycle\n    const search = url.searchParams.get('search')\n    if (search) filters.search = search\n    const expiringWithinDays = url.searchParams.get('expiringWithinDays')\n    if (expiringWithinDays) {\n      const n = Number(expiringWithinDays)\n      if (Number.isFinite(n) && n > 0) filters.expiringWithinDays = Math.min(365, n)\n    }\n\n    const ALLOWED_SORT_FIELDS = ['createdAt', 'updatedAt', 'code', 'name', 'status', 'startDate', 'currentTermEnd'] as const\n    const sortFieldParam = url.searchParams.get('sortField') ?? ''\n    if ((ALLOWED_SORT_FIELDS as readonly string[]).includes(sortFieldParam)) {\n      filters.sortField = sortFieldParam\n    }\n    filters.sortDir = url.searchParams.get('sortDir') === 'asc' ? 'asc' : 'desc'\n\n    filters.page = Math.max(1, Number(url.searchParams.get('page') ?? '1'))\n    filters.pageSize = Math.min(100, Math.max(1, Number(url.searchParams.get('pageSize') ?? '50')))\n\n    const result = await service.listSubscriptions(filters, scope)\n    return NextResponse.json(result)\n  } catch (err) {\n    console.error('[cpq/inventory/subscriptions.GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const body = cpqInventorySubscriptionCreateSchema.parse(await req.json())\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = ctx.container.resolve('cpqInventoryService') as any\n\n    const result = await service.createSubscription(body, scope)\n    return NextResponse.json(result, { status: 201 })\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation error', details: err.issues }, { status: 400 })\n    }\n    console.error('[cpq/inventory/subscriptions.POST]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport async function PUT(req: Request) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const body = cpqInventorySubscriptionUpdateSchema.parse(await req.json())\n    const { id, ...updates } = body\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = ctx.container.resolve('cpqInventoryService') as any\n\n    const result = await service.updateSubscription(id, updates, scope)\n    return NextResponse.json(result)\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation error', details: err.issues }, { status: 400 })\n    }\n    console.error('[cpq/inventory/subscriptions.PUT]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport async function DELETE(req: Request) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const { id } = (await req.json()) as { id?: string }\n    if (!id) return NextResponse.json({ error: 'Missing id' }, { status: 400 })\n\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = ctx.container.resolve('cpqInventoryService') as any\n\n    await service.deleteSubscription(id, scope)\n    return NextResponse.json({ success: true })\n  } catch (err) {\n    console.error('[cpq/inventory/subscriptions.DELETE]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AAAA,EAClE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACrE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACzE;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,IAAI,UAAU,QAAQ,qBAAqB;AAE3D,UAAM,KAAK,IAAI,aAAa,IAAI,IAAI;AACpC,QAAI,IAAI;AACN,YAAMA,UAAS,MAAM,QAAQ,gBAAgB,IAAI,KAAK;AACtD,aAAO,aAAa,KAAKA,OAAM;AAAA,IACjC;AAEA,UAAM,UAAmC,CAAC;AAC1C,UAAM,aAAa,IAAI,aAAa,IAAI,YAAY;AACpD,QAAI,WAAY,SAAQ,aAAa;AACrC,UAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,QAAI,OAAQ,SAAQ,SAAS,OAAO,MAAM,GAAG;AAC7C,UAAM,YAAY,IAAI,aAAa,IAAI,WAAW;AAClD,QAAI,UAAW,SAAQ,YAAY;AACnC,UAAM,gBAAgB,IAAI,aAAa,IAAI,eAAe;AAC1D,QAAI,cAAe,SAAQ,gBAAgB;AAC3C,UAAM,eAAe,IAAI,aAAa,IAAI,cAAc;AACxD,QAAI,aAAc,SAAQ,eAAe;AACzC,UAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,QAAI,OAAQ,SAAQ,SAAS;AAC7B,UAAM,qBAAqB,IAAI,aAAa,IAAI,oBAAoB;AACpE,QAAI,oBAAoB;AACtB,YAAM,IAAI,OAAO,kBAAkB;AACnC,UAAI,OAAO,SAAS,CAAC,KAAK,IAAI,EAAG,SAAQ,qBAAqB,KAAK,IAAI,KAAK,CAAC;AAAA,IAC/E;AAEA,UAAM,sBAAsB,CAAC,aAAa,aAAa,QAAQ,QAAQ,UAAU,aAAa,gBAAgB;AAC9G,UAAM,iBAAiB,IAAI,aAAa,IAAI,WAAW,KAAK;AAC5D,QAAK,oBAA0C,SAAS,cAAc,GAAG;AACvE,cAAQ,YAAY;AAAA,IACtB;AACA,YAAQ,UAAU,IAAI,aAAa,IAAI,SAAS,MAAM,QAAQ,QAAQ;AAEtE,YAAQ,OAAO,KAAK,IAAI,GAAG,OAAO,IAAI,aAAa,IAAI,MAAM,KAAK,GAAG,CAAC;AACtE,YAAQ,WAAW,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,OAAO,IAAI,aAAa,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC;AAE9F,UAAM,SAAS,MAAM,QAAQ,kBAAkB,SAAS,KAAK;AAC7D,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,YAAQ,MAAM,qCAAqC,GAAG;AACtD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,OAAO,qCAAqC,MAAM,MAAM,IAAI,KAAK,CAAC;AACxE,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,IAAI,UAAU,QAAQ,qBAAqB;AAE3D,UAAM,SAAS,MAAM,QAAQ,mBAAmB,MAAM,KAAK;AAC3D,WAAO,aAAa,KAAK,QAAQ,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClD,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AACA,YAAQ,MAAM,sCAAsC,GAAG;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,OAAO,qCAAqC,MAAM,MAAM,IAAI,KAAK,CAAC;AACxE,UAAM,EAAE,IAAI,GAAG,QAAQ,IAAI;AAC3B,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,IAAI,UAAU,QAAQ,qBAAqB;AAE3D,UAAM,SAAS,MAAM,QAAQ,mBAAmB,IAAI,SAAS,KAAK;AAClE,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AACA,YAAQ,MAAM,qCAAqC,GAAG;AACtD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEA,eAAsB,OAAO,KAAc;AACzC,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,EAAE,GAAG,IAAK,MAAM,IAAI,KAAK;AAC/B,QAAI,CAAC,GAAI,QAAO,aAAa,KAAK,EAAE,OAAO,aAAa,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE1E,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,IAAI,UAAU,QAAQ,qBAAqB;AAE3D,UAAM,QAAQ,mBAAmB,IAAI,KAAK;AAC1C,WAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,EAC5C,SAAS,KAAK;AACZ,YAAQ,MAAM,wCAAwC,GAAG;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;",
+  "names": ["result"]
+}

package/dist/modules/cpq/api/inventory/subscriptions/status/route.js

@@ -0,0 +1,35 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { resolveCpqRouteContext } from "../../../context.js";
+import { cpqInventoryStatusTransitionSchema } from "../../../../data/validators.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["cpq.inventory.manage"] }
+};
+async function POST(req) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const body = cpqInventoryStatusTransitionSchema.parse(await req.json());
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqInventoryService");
+    const result = await service.transitionSubscriptionStatus(body.id, body.targetStatus, scope);
+    return NextResponse.json(result);
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: "Validation error", details: err.issues }, { status: 400 });
+    }
+    if (err && typeof err === "object" && "status" in err && err.status === 409) {
+      return NextResponse.json(
+        { error: err.error ?? "Conflict" },
+        { status: 409 }
+      );
+    }
+    console.error("[cpq/inventory/subscriptions/status.POST]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+export {
+  POST,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/inventory/subscriptions/status/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/cpq/api/inventory/subscriptions/status/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { resolveCpqRouteContext } from '../../../context'\nimport { cpqInventoryStatusTransitionSchema } from '../../../../data/validators'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['cpq.inventory.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const body = cpqInventoryStatusTransitionSchema.parse(await req.json())\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = ctx.container.resolve('cpqInventoryService') as any\n\n    const result = await service.transitionSubscriptionStatus(body.id, body.targetStatus, scope)\n    return NextResponse.json(result)\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation error', details: err.issues }, { status: 400 })\n    }\n    if (err && typeof err === 'object' && 'status' in err && (err as any).status === 409) {\n      return NextResponse.json(\n        { error: (err as any).error ?? 'Conflict' },\n        { status: 409 },\n      )\n    }\n    console.error('[cpq/inventory/subscriptions/status.POST]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0CAA0C;AAE5C,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,OAAO,mCAAmC,MAAM,MAAM,IAAI,KAAK,CAAC;AACtE,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,IAAI,UAAU,QAAQ,qBAAqB;AAE3D,UAAM,SAAS,MAAM,QAAQ,6BAA6B,KAAK,IAAI,KAAK,cAAc,KAAK;AAC3F,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AACA,QAAI,OAAO,OAAO,QAAQ,YAAY,YAAY,OAAQ,IAAY,WAAW,KAAK;AACpF,aAAO,aAAa;AAAA,QAClB,EAAE,OAAQ,IAAY,SAAS,WAAW;AAAA,QAC1C,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,YAAQ,MAAM,6CAA6C,GAAG;AAC9D,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;",
+  "names": []
+}

package/dist/modules/cpq/api/offering-components/route.js

@@ -0,0 +1,91 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { resolveCpqRouteContext } from "../context.js";
+import { cpqOfferingComponentCreateSchema, cpqOfferingComponentUpdateSchema } from "../../data/validators.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["cpq.offerings.view"] },
+  POST: { requireAuth: true, requireFeatures: ["cpq.offerings.manage"] },
+  PUT: { requireAuth: true, requireFeatures: ["cpq.offerings.manage"] },
+  DELETE: { requireAuth: true, requireFeatures: ["cpq.offerings.manage"] }
+};
+async function GET(req) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const url = new URL(req.url);
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqBundleService");
+    const offeringId = url.searchParams.get("offeringId");
+    if (!offeringId) return NextResponse.json({ error: "offeringId is required" }, { status: 400 });
+    const components = await service.getComponents(offeringId, scope);
+    const slotId = url.searchParams.get("slotId");
+    const filtered = slotId ? components.filter((c) => c.slotId === slotId) : components;
+    return NextResponse.json({ items: filtered });
+  } catch (err) {
+    console.error("[cpq/offering-components.GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+async function POST(req) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const body = cpqOfferingComponentCreateSchema.parse(await req.json());
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqBundleService");
+    const component = await service.addComponent(body, scope);
+    return NextResponse.json(component, { status: 201 });
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: "Validation error", details: err.issues }, { status: 400 });
+    }
+    if (err instanceof Error && err.message.startsWith("V-")) {
+      return NextResponse.json({ error: err.message }, { status: 400 });
+    }
+    console.error("[cpq/offering-components.POST]", err);
+    return NextResponse.json({ error: err instanceof Error ? err.message : "Internal error" }, { status: 500 });
+  }
+}
+async function PUT(req) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const body = cpqOfferingComponentUpdateSchema.parse(await req.json());
+    const { id, ...updates } = body;
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqBundleService");
+    const component = await service.updateComponent(id, updates, scope);
+    if (!component) return NextResponse.json({ error: "Not found" }, { status: 404 });
+    return NextResponse.json(component);
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: "Validation error", details: err.issues }, { status: 400 });
+    }
+    console.error("[cpq/offering-components.PUT]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+async function DELETE(req) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { id } = await req.json();
+    if (!id) return NextResponse.json({ error: "Missing id" }, { status: 400 });
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqBundleService");
+    const deleted = await service.removeComponent(id, scope);
+    if (!deleted) return NextResponse.json({ error: "Not found" }, { status: 404 });
+    return NextResponse.json({ success: true });
+  } catch (err) {
+    console.error("[cpq/offering-components.DELETE]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+export {
+  DELETE,
+  GET,
+  POST,
+  PUT,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/offering-components/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/cpq/api/offering-components/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { resolveCpqRouteContext } from '../context'\nimport { cpqOfferingComponentCreateSchema, cpqOfferingComponentUpdateSchema } from '../../data/validators'\nimport type { DefaultCpqBundleService } from '../../services/cpqBundleService'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['cpq.offerings.view'] },\n  POST: { requireAuth: true, requireFeatures: ['cpq.offerings.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['cpq.offerings.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['cpq.offerings.manage'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const url = new URL(req.url)\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = ctx.container.resolve('cpqBundleService') as DefaultCpqBundleService\n\n    const offeringId = url.searchParams.get('offeringId')\n    if (!offeringId) return NextResponse.json({ error: 'offeringId is required' }, { status: 400 })\n\n    const components = await service.getComponents(offeringId, scope)\n\n    const slotId = url.searchParams.get('slotId')\n    const filtered = slotId ? components.filter((c) => c.slotId === slotId) : components\n\n    return NextResponse.json({ items: filtered })\n  } catch (err) {\n    console.error('[cpq/offering-components.GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const body = cpqOfferingComponentCreateSchema.parse(await req.json())\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = ctx.container.resolve('cpqBundleService') as DefaultCpqBundleService\n\n    const component = await service.addComponent(body, scope)\n    return NextResponse.json(component, { status: 201 })\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation error', details: err.issues }, { status: 400 })\n    }\n    if (err instanceof Error && err.message.startsWith('V-')) {\n      return NextResponse.json({ error: err.message }, { status: 400 })\n    }\n    console.error('[cpq/offering-components.POST]', err)\n    return NextResponse.json({ error: err instanceof Error ? err.message : 'Internal error' }, { status: 500 })\n  }\n}\n\nexport async function PUT(req: Request) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const body = cpqOfferingComponentUpdateSchema.parse(await req.json())\n    const { id, ...updates } = body\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = ctx.container.resolve('cpqBundleService') as DefaultCpqBundleService\n\n    const component = await service.updateComponent(id, updates, scope)\n    if (!component) return NextResponse.json({ error: 'Not found' }, { status: 404 })\n\n    return NextResponse.json(component)\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation error', details: err.issues }, { status: 400 })\n    }\n    console.error('[cpq/offering-components.PUT]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport async function DELETE(req: Request) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const { id } = (await req.json()) as { id?: string }\n    if (!id) return NextResponse.json({ error: 'Missing id' }, { status: 400 })\n\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = ctx.container.resolve('cpqBundleService') as DefaultCpqBundleService\n\n    const deleted = await service.removeComponent(id, scope)\n    if (!deleted) return NextResponse.json({ error: 'Not found' }, { status: 404 })\n\n    return NextResponse.json({ success: true })\n  } catch (err) {\n    console.error('[cpq/offering-components.DELETE]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,kCAAkC,wCAAwC;AAG5E,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AAAA,EAClE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACrE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACzE;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,IAAI,UAAU,QAAQ,kBAAkB;AAExD,UAAM,aAAa,IAAI,aAAa,IAAI,YAAY;AACpD,QAAI,CAAC,WAAY,QAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9F,UAAM,aAAa,MAAM,QAAQ,cAAc,YAAY,KAAK;AAEhE,UAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,UAAM,WAAW,SAAS,WAAW,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,IAAI;AAE1E,WAAO,aAAa,KAAK,EAAE,OAAO,SAAS,CAAC;AAAA,EAC9C,SAAS,KAAK;AACZ,YAAQ,MAAM,iCAAiC,GAAG;AAClD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,OAAO,iCAAiC,MAAM,MAAM,IAAI,KAAK,CAAC;AACpE,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,IAAI,UAAU,QAAQ,kBAAkB;AAExD,UAAM,YAAY,MAAM,QAAQ,aAAa,MAAM,KAAK;AACxD,WAAO,aAAa,KAAK,WAAW,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrD,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AACA,QAAI,eAAe,SAAS,IAAI,QAAQ,WAAW,IAAI,GAAG;AACxD,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AACA,YAAQ,MAAM,kCAAkC,GAAG;AACnD,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5G;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,OAAO,iCAAiC,MAAM,MAAM,IAAI,KAAK,CAAC;AACpE,UAAM,EAAE,IAAI,GAAG,QAAQ,IAAI;AAC3B,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,IAAI,UAAU,QAAQ,kBAAkB;AAExD,UAAM,YAAY,MAAM,QAAQ,gBAAgB,IAAI,SAAS,KAAK;AAClE,QAAI,CAAC,UAAW,QAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhF,WAAO,aAAa,KAAK,SAAS;AAAA,EACpC,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AACA,YAAQ,MAAM,iCAAiC,GAAG;AAClD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEA,eAAsB,OAAO,KAAc;AACzC,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,EAAE,GAAG,IAAK,MAAM,IAAI,KAAK;AAC/B,QAAI,CAAC,GAAI,QAAO,aAAa,KAAK,EAAE,OAAO,aAAa,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE1E,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,IAAI,UAAU,QAAQ,kBAAkB;AAExD,UAAM,UAAU,MAAM,QAAQ,gBAAgB,IAAI,KAAK;AACvD,QAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,WAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,EAC5C,SAAS,KAAK;AACZ,YAAQ,MAAM,oCAAoC,GAAG;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;",
+  "names": []
+}

package/dist/modules/cpq/api/orders/[orderId]/activate/route.js

@@ -0,0 +1,39 @@
+import { NextResponse } from "next/server";
+import { OptimisticLockError } from "@mikro-orm/core";
+import { resolveCpqRouteContext } from "../../../context.js";
+import { OrderError } from "../../../../services/cpqOrderService.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["cpq.orders.manage"] }
+};
+async function POST(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { orderId } = await params;
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqOrderService");
+    const result = await service.activateOrder(orderId, scope);
+    return NextResponse.json(result);
+  } catch (err) {
+    if (err instanceof OrderError) {
+      return NextResponse.json({ error: err.message }, { status: err.status });
+    }
+    if (err instanceof OptimisticLockError || err && typeof err === "object" && err.constructor?.name === "OptimisticLockError") {
+      return NextResponse.json(
+        { error: "Concurrent modification detected", details: err.message },
+        { status: 409 }
+      );
+    }
+    const errObj = err;
+    if (typeof errObj?.status === "number" && typeof errObj?.error === "string") {
+      return NextResponse.json({ error: errObj.error }, { status: errObj.status });
+    }
+    console.error("[cpq/orders/[orderId]/activate.POST]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+export {
+  POST,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/orders/[orderId]/activate/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/cpq/api/orders/%5BorderId%5D/activate/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { OptimisticLockError } from '@mikro-orm/core'\nimport { resolveCpqRouteContext } from '../../../context'\nimport { OrderError } from '../../../../services/cpqOrderService'\nimport type { DefaultCpqOrderService } from '../../../../services/cpqOrderService'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['cpq.orders.manage'] },\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ orderId: string }> }) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const { orderId } = await params\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n\n    const service = ctx.container.resolve('cpqOrderService') as DefaultCpqOrderService\n    const result = await service.activateOrder(orderId, scope)\n    return NextResponse.json(result)\n  } catch (err) {\n    if (err instanceof OrderError) {\n      return NextResponse.json({ error: err.message }, { status: err.status })\n    }\n    // XD-250 ARC: optimistic-lock collision on subscription.version when two\n    // ARC orders touching the same sub race to activate. Spec \u00A7 Risks:\n    // \"second activation gets 409, order stays in pending_activation,\n    // retryable\". Constructor-name fallback survives Turbopack class drift.\n    if (\n      err instanceof OptimisticLockError ||\n      (err &&\n        typeof err === 'object' &&\n        (err as { constructor?: { name?: string } }).constructor?.name === 'OptimisticLockError')\n    ) {\n      return NextResponse.json(\n        { error: 'Concurrent modification detected', details: (err as Error).message },\n        { status: 409 },\n      )\n    }\n    const errObj = err as Record<string, unknown>\n    if (typeof errObj?.status === 'number' && typeof errObj?.error === 'string') {\n      return NextResponse.json({ error: errObj.error }, { status: errObj.status as number })\n    }\n    console.error('[cpq/orders/[orderId]/activate.POST]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AACvC,SAAS,kBAAkB;AAGpB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAA6C;AAC7F,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAE3E,UAAM,UAAU,IAAI,UAAU,QAAQ,iBAAiB;AACvD,UAAM,SAAS,MAAM,QAAQ,cAAc,SAAS,KAAK;AACzD,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,QAAI,eAAe,YAAY;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IACzE;AAKA,QACE,eAAe,uBACd,OACC,OAAO,QAAQ,YACd,IAA4C,aAAa,SAAS,uBACrE;AACA,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,oCAAoC,SAAU,IAAc,QAAQ;AAAA,QAC7E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,UAAM,SAAS;AACf,QAAI,OAAO,QAAQ,WAAW,YAAY,OAAO,QAAQ,UAAU,UAAU;AAC3E,aAAO,aAAa,KAAK,EAAE,OAAO,OAAO,MAAM,GAAG,EAAE,QAAQ,OAAO,OAAiB,CAAC;AAAA,IACvF;AACA,YAAQ,MAAM,wCAAwC,GAAG;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;",
+  "names": []
+}

package/dist/modules/cpq/api/orders/[orderId]/route.js

@@ -0,0 +1,28 @@
+import { NextResponse } from "next/server";
+import { resolveCpqRouteContext } from "../../context.js";
+import { OrderError } from "../../../services/cpqOrderService.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["cpq.orders.view"] }
+};
+async function GET(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { orderId } = await params;
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqOrderService");
+    const result = await service.getOrder(orderId, scope);
+    return NextResponse.json(result);
+  } catch (err) {
+    if (err instanceof OrderError) {
+      return NextResponse.json({ error: err.message }, { status: err.status });
+    }
+    console.error("[cpq/orders/[orderId].GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+export {
+  GET,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/orders/[orderId]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/cpq/api/orders/%5BorderId%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveCpqRouteContext } from '../../context'\nimport { OrderError } from '../../../services/cpqOrderService'\nimport type { DefaultCpqOrderService } from '../../../services/cpqOrderService'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['cpq.orders.view'] },\n}\n\nexport async function GET(req: Request, { params }: { params: Promise<{ orderId: string }> }) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const { orderId } = await params\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n\n    const service = ctx.container.resolve('cpqOrderService') as DefaultCpqOrderService\n    const result = await service.getOrder(orderId, scope)\n    return NextResponse.json(result)\n  } catch (err) {\n    if (err instanceof OrderError) {\n      return NextResponse.json({ error: err.message }, { status: err.status })\n    }\n    console.error('[cpq/orders/[orderId].GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,kBAAkB;AAGpB,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AACjE;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAA6C;AAC5F,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAE3E,UAAM,UAAU,IAAI,UAAU,QAAQ,iBAAiB;AACvD,UAAM,SAAS,MAAM,QAAQ,SAAS,SAAS,KAAK;AACpD,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,QAAI,eAAe,YAAY;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IACzE;AACA,YAAQ,MAAM,8BAA8B,GAAG;AAC/C,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;",
+  "names": []
+}

package/dist/modules/cpq/api/orders/[orderId]/status/route.js

@@ -0,0 +1,38 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { resolveCpqRouteContext } from "../../../context.js";
+import { cpqOrderStatusTransitionSchema } from "../../../../data/validators.js";
+import { OrderError } from "../../../../services/cpqOrderService.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["cpq.orders.manage"] }
+};
+async function POST(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { orderId } = await params;
+    const body = cpqOrderStatusTransitionSchema.parse(await req.json());
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = ctx.container.resolve("cpqOrderService");
+    const result = await service.transitionOrderStatus(orderId, body.targetStatus, scope);
+    return NextResponse.json(result);
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: "Validation error", details: err.issues }, { status: 400 });
+    }
+    if (err instanceof OrderError) {
+      return NextResponse.json({ error: err.message }, { status: err.status });
+    }
+    const errObj = err;
+    if (typeof errObj?.status === "number" && typeof errObj?.error === "string") {
+      return NextResponse.json({ error: errObj.error }, { status: errObj.status });
+    }
+    console.error("[cpq/orders/[orderId]/status.POST]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+export {
+  POST,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/orders/[orderId]/status/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/cpq/api/orders/%5BorderId%5D/status/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { resolveCpqRouteContext } from '../../../context'\nimport { cpqOrderStatusTransitionSchema } from '../../../../data/validators'\nimport { OrderError } from '../../../../services/cpqOrderService'\nimport type { DefaultCpqOrderService } from '../../../../services/cpqOrderService'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['cpq.orders.manage'] },\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ orderId: string }> }) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const { orderId } = await params\n    const body = cpqOrderStatusTransitionSchema.parse(await req.json())\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n\n    const service = ctx.container.resolve('cpqOrderService') as DefaultCpqOrderService\n    const result = await service.transitionOrderStatus(orderId, body.targetStatus, scope)\n    return NextResponse.json(result)\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation error', details: err.issues }, { status: 400 })\n    }\n    if (err instanceof OrderError) {\n      return NextResponse.json({ error: err.message }, { status: err.status })\n    }\n    const errObj = err as Record<string, unknown>\n    if (typeof errObj?.status === 'number' && typeof errObj?.error === 'string') {\n      return NextResponse.json({ error: errObj.error }, { status: errObj.status as number })\n    }\n    console.error('[cpq/orders/[orderId]/status.POST]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,sCAAsC;AAC/C,SAAS,kBAAkB;AAGpB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAA6C;AAC7F,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,OAAO,+BAA+B,MAAM,MAAM,IAAI,KAAK,CAAC;AAClE,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAE3E,UAAM,UAAU,IAAI,UAAU,QAAQ,iBAAiB;AACvD,UAAM,SAAS,MAAM,QAAQ,sBAAsB,SAAS,KAAK,cAAc,KAAK;AACpF,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AACA,QAAI,eAAe,YAAY;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IACzE;AACA,UAAM,SAAS;AACf,QAAI,OAAO,QAAQ,WAAW,YAAY,OAAO,QAAQ,UAAU,UAAU;AAC3E,aAAO,aAAa,KAAK,EAAE,OAAO,OAAO,MAAM,GAAG,EAAE,QAAQ,OAAO,OAAiB,CAAC;AAAA,IACvF;AACA,YAAQ,MAAM,sCAAsC,GAAG;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;",
+  "names": []
+}