@dainamite/cpq 0.2.2

package/dist/modules/cpq/api/quotes/[quoteId]/merge-meta/route.js

@@ -0,0 +1,72 @@
+import { NextResponse } from "next/server";
+import { resolveCpqRouteContext } from "../../../context.js";
+import { cpqMergeMetaSchema } from "../../../../data/validators.js";
+import { resolveQuotingService } from "../../../resolveQuotingService.js";
+import { handleArcError } from "../../../_helpers/handleArcError.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["cpq.arc.renew.manage"] }
+};
+async function POST(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { quoteId } = await params;
+    const body = cpqMergeMetaSchema.parse(await req.json());
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = resolveQuotingService(ctx);
+    const result = await service.setMergeMeta(
+      quoteId,
+      {
+        newTermStart: body.newTermStart,
+        newTermEnd: body.newTermEnd,
+        newTermMonths: body.newTermMonths ?? null,
+        newSubCode: body.newSubCode ?? null,
+        newSubName: body.newSubName ?? null
+      },
+      scope
+    );
+    return NextResponse.json(result);
+  } catch (err) {
+    return handleArcError(err, "cpq/quotes/[quoteId]/merge-meta.POST");
+  }
+}
+const openApi = {
+  "/api/cpq/quotes/{quoteId}/merge-meta": {
+    parameters: [
+      { name: "quoteId", in: "path", required: true, schema: { type: "string", format: "uuid" } }
+    ],
+    post: {
+      tags: ["CPQ ARC"],
+      summary: "Stamp the new contract term + optional code/name on a merge-renew quote",
+      requestBody: {
+        required: true,
+        content: {
+          "application/json": {
+            schema: {
+              type: "object",
+              required: ["newTermStart", "newTermEnd"],
+              properties: {
+                newTermStart: { type: "string" },
+                newTermEnd: { type: "string" },
+                newTermMonths: { type: "integer", minimum: 1 },
+                newSubCode: { type: "string" },
+                newSubName: { type: "string" }
+              }
+            }
+          }
+        }
+      },
+      responses: {
+        "200": { description: "Merge meta stamped" },
+        "404": { description: "Quote not found" },
+        "409": { description: "Quote not renew-type or no longer editable" }
+      }
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/quotes/[quoteId]/merge-meta/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/cpq/api/quotes/%5BquoteId%5D/merge-meta/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveCpqRouteContext } from '../../../context'\nimport { cpqMergeMetaSchema } from '../../../../data/validators'\nimport { resolveQuotingService } from '../../../resolveQuotingService'\nimport { handleArcError } from '../../../_helpers/handleArcError'\n\n/**\n * POST /api/cpq/quotes/[quoteId]/merge-meta\n *\n * Stamp the new contract term + optional code/name on a renew quote that\n * has entered merge mode (\u22652 absorb targets). Required before activation.\n */\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['cpq.arc.renew.manage'] },\n}\n\nexport async function POST(\n  req: Request,\n  { params }: { params: Promise<{ quoteId: string }> },\n) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    const { quoteId } = await params\n    const body = cpqMergeMetaSchema.parse(await req.json())\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = resolveQuotingService(ctx)\n    const result = await service.setMergeMeta(\n      quoteId,\n      {\n        newTermStart: body.newTermStart,\n        newTermEnd: body.newTermEnd,\n        newTermMonths: body.newTermMonths ?? null,\n        newSubCode: body.newSubCode ?? null,\n        newSubName: body.newSubName ?? null,\n      },\n      scope,\n    )\n    return NextResponse.json(result)\n  } catch (err) {\n    return handleArcError(err, 'cpq/quotes/[quoteId]/merge-meta.POST')\n  }\n}\n\nexport const openApi = {\n  '/api/cpq/quotes/{quoteId}/merge-meta': {\n    parameters: [\n      { name: 'quoteId', in: 'path', required: true, schema: { type: 'string', format: 'uuid' } },\n    ],\n    post: {\n      tags: ['CPQ ARC'],\n      summary: 'Stamp the new contract term + optional code/name on a merge-renew quote',\n      requestBody: {\n        required: true,\n        content: {\n          'application/json': {\n            schema: {\n              type: 'object',\n              required: ['newTermStart', 'newTermEnd'],\n              properties: {\n                newTermStart: { type: 'string' },\n                newTermEnd: { type: 'string' },\n                newTermMonths: { type: 'integer', minimum: 1 },\n                newSubCode: { type: 'string' },\n                newSubName: { type: 'string' },\n              },\n            },\n          },\n        },\n      },\n      responses: {\n        '200': { description: 'Merge meta stamped' },\n        '404': { description: 'Quote not found' },\n        '409': { description: 'Quote not renew-type or no longer editable' },\n      },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,sBAAsB;AAQxB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,eAAsB,KACpB,KACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,OAAO,mBAAmB,MAAM,MAAM,IAAI,KAAK,CAAC;AACtD,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,sBAAsB,GAAG;AACzC,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B;AAAA,MACA;AAAA,QACE,cAAc,KAAK;AAAA,QACnB,YAAY,KAAK;AAAA,QACjB,eAAe,KAAK,iBAAiB;AAAA,QACrC,YAAY,KAAK,cAAc;AAAA,QAC/B,YAAY,KAAK,cAAc;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AACA,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,WAAO,eAAe,KAAK,sCAAsC;AAAA,EACnE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,wCAAwC;AAAA,IACtC,YAAY;AAAA,MACV,EAAE,MAAM,WAAW,IAAI,QAAQ,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO,EAAE;AAAA,IAC5F;AAAA,IACA,MAAM;AAAA,MACJ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aAAa;AAAA,QACX,UAAU;AAAA,QACV,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB,QAAQ;AAAA,cACN,MAAM;AAAA,cACN,UAAU,CAAC,gBAAgB,YAAY;AAAA,cACvC,YAAY;AAAA,gBACV,cAAc,EAAE,MAAM,SAAS;AAAA,gBAC/B,YAAY,EAAE,MAAM,SAAS;AAAA,gBAC7B,eAAe,EAAE,MAAM,WAAW,SAAS,EAAE;AAAA,gBAC7C,YAAY,EAAE,MAAM,SAAS;AAAA,gBAC7B,YAAY,EAAE,MAAM,SAAS;AAAA,cAC/B;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,WAAW;AAAA,QACT,OAAO,EAAE,aAAa,qBAAqB;AAAA,QAC3C,OAAO,EAAE,aAAa,kBAAkB;AAAA,QACxC,OAAO,EAAE,aAAa,6CAA6C;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/cpq/api/quotes/[quoteId]/recalculate/route.js

@@ -0,0 +1,35 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { resolveCpqRouteContext } from "../../../context.js";
+import { cpqRecalculateSchema } from "../../../../data/validators.js";
+import { QuotingError } from "../../../../services/cpqQuotingService.js";
+import { resolveQuotingService } from "../../../resolveQuotingService.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["cpq.quotes.view"] }
+};
+async function POST(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { quoteId } = await params;
+    const body = cpqRecalculateSchema.parse(await req.json());
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = resolveQuotingService(ctx);
+    const result = await service.recalculate(quoteId, body, scope);
+    return NextResponse.json(result);
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: "Validation error", details: err.issues }, { status: 400 });
+    }
+    if (err instanceof QuotingError) {
+      return NextResponse.json({ error: err.message }, { status: err.status });
+    }
+    console.error("[cpq/quotes/[quoteId]/recalculate.POST]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+export {
+  POST,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/quotes/[quoteId]/recalculate/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/cpq/api/quotes/%5BquoteId%5D/recalculate/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { resolveCpqRouteContext } from '../../../context'\nimport { cpqRecalculateSchema } from '../../../../data/validators'\nimport { QuotingError } from '../../../../services/cpqQuotingService'\nimport { resolveQuotingService } from '../../../resolveQuotingService'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['cpq.quotes.view'] },\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ quoteId: string }> }) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const { quoteId } = await params\n    const body = cpqRecalculateSchema.parse(await req.json())\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n\n    const service = resolveQuotingService(ctx)\n    const result = await service.recalculate(quoteId, body, scope)\n    return NextResponse.json(result)\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation error', details: err.issues }, { status: 400 })\n    }\n    if (err instanceof QuotingError) {\n      return NextResponse.json({ error: err.message }, { status: err.status })\n    }\n    console.error('[cpq/quotes/[quoteId]/recalculate.POST]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,oBAAoB;AAC7B,SAAS,6BAA6B;AAE/B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAClE;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAA6C;AAC7F,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,OAAO,qBAAqB,MAAM,MAAM,IAAI,KAAK,CAAC;AACxD,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAE3E,UAAM,UAAU,sBAAsB,GAAG;AACzC,UAAM,SAAS,MAAM,QAAQ,YAAY,SAAS,MAAM,KAAK;AAC7D,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AACA,QAAI,eAAe,cAAc;AAC/B,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IACzE;AACA,YAAQ,MAAM,2CAA2C,GAAG;AAC5D,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;",
+  "names": []
+}

package/dist/modules/cpq/api/quotes/[quoteId]/route.js

@@ -0,0 +1,102 @@
+import { NextResponse } from "next/server";
+import { resolveCpqRouteContext } from "../../context.js";
+import { cpqUpdateQuoteSchema } from "../../../data/validators.js";
+import { QuotingError } from "../../../services/cpqQuotingService.js";
+import { resolveQuotingService } from "../../resolveQuotingService.js";
+import { CpqQuoteConfiguration, CpqQuoteLineConfiguration } from "../../../data/entities.js";
+import { SalesQuote, SalesQuoteLine } from "@open-mercato/core/modules/sales/data/entities";
+import { handleArcError } from "../../_helpers/handleArcError.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["cpq.quotes.view"] },
+  PATCH: { requireAuth: true, requireFeatures: ["cpq.quotes.manage"] },
+  DELETE: { requireAuth: true, requireFeatures: ["cpq.quotes.manage"] }
+};
+async function GET(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { quoteId } = await params;
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = resolveQuotingService(ctx);
+    const result = await service.getQuote(quoteId, scope);
+    return NextResponse.json(result);
+  } catch (err) {
+    if (err instanceof QuotingError) {
+      return NextResponse.json({ error: err.message }, { status: err.status });
+    }
+    console.error("[cpq/quotes/[quoteId].GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+async function PATCH(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { quoteId } = await params;
+    const body = cpqUpdateQuoteSchema.parse(await req.json());
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    if (body.quoteType !== void 0) {
+      const service = resolveQuotingService(ctx);
+      const result = await service.setQuoteType(quoteId, body.quoteType, scope);
+      return NextResponse.json(result);
+    }
+    return NextResponse.json({ error: "Nothing to update" }, { status: 400 });
+  } catch (err) {
+    return handleArcError(err, "cpq/quotes/[quoteId].PATCH");
+  }
+}
+async function DELETE(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { quoteId } = await params;
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const em = ctx.em;
+    const now = /* @__PURE__ */ new Date();
+    let cpqConfig = await em.findOne(CpqQuoteConfiguration, {
+      id: quoteId,
+      organizationId: scope.organizationId,
+      tenantId: scope.tenantId,
+      deletedAt: null
+    });
+    if (!cpqConfig) {
+      cpqConfig = await em.findOne(CpqQuoteConfiguration, {
+        quoteId,
+        organizationId: scope.organizationId,
+        tenantId: scope.tenantId,
+        deletedAt: null
+      });
+    }
+    if (!cpqConfig) return NextResponse.json({ error: "Quote not found" }, { status: 404 });
+    const terminalStatuses = ["accepted", "rejected", "cancelled"];
+    if (terminalStatuses.includes(cpqConfig.cpqStatus)) {
+      return NextResponse.json({ error: `Cannot delete a quote in '${cpqConfig.cpqStatus}' status` }, { status: 409 });
+    }
+    const lineConfigs = await em.find(CpqQuoteLineConfiguration, {
+      quoteConfigurationId: cpqConfig.id,
+      organizationId: scope.organizationId,
+      tenantId: scope.tenantId,
+      deletedAt: null
+    });
+    for (const lc of lineConfigs) {
+      lc.deletedAt = now;
+      const salesLine = await em.findOne(SalesQuoteLine, { id: lc.quoteLineId });
+      if (salesLine) salesLine.deletedAt = now;
+    }
+    cpqConfig.deletedAt = now;
+    const salesQuote = await em.findOne(SalesQuote, { id: cpqConfig.quoteId });
+    if (salesQuote) salesQuote.deletedAt = now;
+    await em.flush();
+    return NextResponse.json({ ok: true });
+  } catch (err) {
+    console.error("[cpq/quotes/[quoteId].DELETE]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+export {
+  DELETE,
+  GET,
+  PATCH,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/quotes/[quoteId]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/cpq/api/quotes/%5BquoteId%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveCpqRouteContext } from '../../context'\nimport { cpqUpdateQuoteSchema } from '../../../data/validators'\nimport { QuotingError } from '../../../services/cpqQuotingService'\nimport { resolveQuotingService } from '../../resolveQuotingService'\nimport { CpqQuoteConfiguration, CpqQuoteLineConfiguration } from '../../../data/entities'\nimport { SalesQuote, SalesQuoteLine } from '@open-mercato/core/modules/sales/data/entities'\nimport { handleArcError } from '../../_helpers/handleArcError'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['cpq.quotes.view'] },\n  PATCH: { requireAuth: true, requireFeatures: ['cpq.quotes.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['cpq.quotes.manage'] },\n}\n\nexport async function GET(req: Request, { params }: { params: Promise<{ quoteId: string }> }) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const { quoteId } = await params\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n\n    const service = resolveQuotingService(ctx)\n    const result = await service.getQuote(quoteId, scope)\n    return NextResponse.json(result)\n  } catch (err) {\n    if (err instanceof QuotingError) {\n      return NextResponse.json({ error: err.message }, { status: err.status })\n    }\n    console.error('[cpq/quotes/[quoteId].GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport async function PATCH(\n  req: Request,\n  { params }: { params: Promise<{ quoteId: string }> },\n) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const { quoteId } = await params\n    const body = cpqUpdateQuoteSchema.parse(await req.json())\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n\n    if (body.quoteType !== undefined) {\n      // ARC quote-type one-way transition (XD-250 DD-ARC-9). The service\n      // enforces 'new' \u2192 'amend'/'renew'/'cancel' only; subsequent changes\n      // return 409.\n      const service = resolveQuotingService(ctx)\n      const result = await service.setQuoteType(quoteId, body.quoteType, scope)\n      return NextResponse.json(result)\n    }\n\n    return NextResponse.json({ error: 'Nothing to update' }, { status: 400 })\n  } catch (err) {\n    return handleArcError(err, 'cpq/quotes/[quoteId].PATCH')\n  }\n}\n\nexport async function DELETE(req: Request, { params }: { params: Promise<{ quoteId: string }> }) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const { quoteId } = await params\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const em = ctx.em\n    const now = new Date()\n\n    let cpqConfig = await em.findOne(CpqQuoteConfiguration, {\n      id: quoteId, organizationId: scope.organizationId, tenantId: scope.tenantId, deletedAt: null,\n    })\n    if (!cpqConfig) {\n      cpqConfig = await em.findOne(CpqQuoteConfiguration, {\n        quoteId, organizationId: scope.organizationId, tenantId: scope.tenantId, deletedAt: null,\n      })\n    }\n    if (!cpqConfig) return NextResponse.json({ error: 'Quote not found' }, { status: 404 })\n\n    const terminalStatuses = ['accepted', 'rejected', 'cancelled']\n    if (terminalStatuses.includes(cpqConfig.cpqStatus)) {\n      return NextResponse.json({ error: `Cannot delete a quote in '${cpqConfig.cpqStatus}' status` }, { status: 409 })\n    }\n\n    const lineConfigs = await em.find(CpqQuoteLineConfiguration, {\n      quoteConfigurationId: cpqConfig.id, organizationId: scope.organizationId, tenantId: scope.tenantId, deletedAt: null,\n    })\n    for (const lc of lineConfigs) {\n      lc.deletedAt = now\n      const salesLine = await em.findOne(SalesQuoteLine, { id: lc.quoteLineId })\n      if (salesLine) salesLine.deletedAt = now\n    }\n\n    cpqConfig.deletedAt = now\n\n    const salesQuote = await em.findOne(SalesQuote, { id: cpqConfig.quoteId })\n    if (salesQuote) salesQuote.deletedAt = now\n\n    await em.flush()\n\n    return NextResponse.json({ ok: true })\n  } catch (err) {\n    console.error('[cpq/quotes/[quoteId].DELETE]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,oBAAoB;AAC7B,SAAS,6BAA6B;AACtC,SAAS,uBAAuB,iCAAiC;AACjE,SAAS,YAAY,sBAAsB;AAC3C,SAAS,sBAAsB;AAExB,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,EAC/D,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AAAA,EACnE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACtE;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAA6C;AAC5F,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAE3E,UAAM,UAAU,sBAAsB,GAAG;AACzC,UAAM,SAAS,MAAM,QAAQ,SAAS,SAAS,KAAK;AACpD,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,QAAI,eAAe,cAAc;AAC/B,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IACzE;AACA,YAAQ,MAAM,8BAA8B,GAAG;AAC/C,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEA,eAAsB,MACpB,KACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,OAAO,qBAAqB,MAAM,MAAM,IAAI,KAAK,CAAC;AACxD,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAE3E,QAAI,KAAK,cAAc,QAAW;AAIhC,YAAM,UAAU,sBAAsB,GAAG;AACzC,YAAM,SAAS,MAAM,QAAQ,aAAa,SAAS,KAAK,WAAW,KAAK;AACxE,aAAO,aAAa,KAAK,MAAM;AAAA,IACjC;AAEA,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E,SAAS,KAAK;AACZ,WAAO,eAAe,KAAK,4BAA4B;AAAA,EACzD;AACF;AAEA,eAAsB,OAAO,KAAc,EAAE,OAAO,GAA6C;AAC/F,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,KAAK,IAAI;AACf,UAAM,MAAM,oBAAI,KAAK;AAErB,QAAI,YAAY,MAAM,GAAG,QAAQ,uBAAuB;AAAA,MACtD,IAAI;AAAA,MAAS,gBAAgB,MAAM;AAAA,MAAgB,UAAU,MAAM;AAAA,MAAU,WAAW;AAAA,IAC1F,CAAC;AACD,QAAI,CAAC,WAAW;AACd,kBAAY,MAAM,GAAG,QAAQ,uBAAuB;AAAA,QAClD;AAAA,QAAS,gBAAgB,MAAM;AAAA,QAAgB,UAAU,MAAM;AAAA,QAAU,WAAW;AAAA,MACtF,CAAC;AAAA,IACH;AACA,QAAI,CAAC,UAAW,QAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEtF,UAAM,mBAAmB,CAAC,YAAY,YAAY,WAAW;AAC7D,QAAI,iBAAiB,SAAS,UAAU,SAAS,GAAG;AAClD,aAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,UAAU,SAAS,WAAW,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjH;AAEA,UAAM,cAAc,MAAM,GAAG,KAAK,2BAA2B;AAAA,MAC3D,sBAAsB,UAAU;AAAA,MAAI,gBAAgB,MAAM;AAAA,MAAgB,UAAU,MAAM;AAAA,MAAU,WAAW;AAAA,IACjH,CAAC;AACD,eAAW,MAAM,aAAa;AAC5B,SAAG,YAAY;AACf,YAAM,YAAY,MAAM,GAAG,QAAQ,gBAAgB,EAAE,IAAI,GAAG,YAAY,CAAC;AACzE,UAAI,UAAW,WAAU,YAAY;AAAA,IACvC;AAEA,cAAU,YAAY;AAEtB,UAAM,aAAa,MAAM,GAAG,QAAQ,YAAY,EAAE,IAAI,UAAU,QAAQ,CAAC;AACzE,QAAI,WAAY,YAAW,YAAY;AAEvC,UAAM,GAAG,MAAM;AAEf,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,SAAS,KAAK;AACZ,YAAQ,MAAM,iCAAiC,GAAG;AAClD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;",
+  "names": []
+}

package/dist/modules/cpq/api/quotes/[quoteId]/status/route.js

@@ -0,0 +1,27 @@
+import { NextResponse } from "next/server";
+import { resolveCpqRouteContext } from "../../../context.js";
+import { cpqTransitionStatusSchema } from "../../../../data/validators.js";
+import { resolveQuotingService } from "../../../resolveQuotingService.js";
+import { handleArcError } from "../../../_helpers/handleArcError.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["cpq.quotes.manage"] }
+};
+async function POST(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { quoteId } = await params;
+    const body = cpqTransitionStatusSchema.parse(await req.json());
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = resolveQuotingService(ctx);
+    const result = await service.transitionStatus(quoteId, body.targetStatus, scope);
+    return NextResponse.json(result);
+  } catch (err) {
+    return handleArcError(err, "cpq/quotes/[quoteId]/status.POST");
+  }
+}
+export {
+  POST,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/quotes/[quoteId]/status/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/cpq/api/quotes/%5BquoteId%5D/status/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveCpqRouteContext } from '../../../context'\nimport { cpqTransitionStatusSchema } from '../../../../data/validators'\nimport { resolveQuotingService } from '../../../resolveQuotingService'\nimport { handleArcError } from '../../../_helpers/handleArcError'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['cpq.quotes.manage'] },\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ quoteId: string }> }) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const { quoteId } = await params\n    const body = cpqTransitionStatusSchema.parse(await req.json())\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n\n    const service = resolveQuotingService(ctx)\n    const result = await service.transitionStatus(quoteId, body.targetStatus, scope)\n    return NextResponse.json(result)\n  } catch (err) {\n    return handleArcError(err, 'cpq/quotes/[quoteId]/status.POST')\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,iCAAiC;AAC1C,SAAS,6BAA6B;AACtC,SAAS,sBAAsB;AAExB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAA6C;AAC7F,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,OAAO,0BAA0B,MAAM,MAAM,IAAI,KAAK,CAAC;AAC7D,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAE3E,UAAM,UAAU,sBAAsB,GAAG;AACzC,UAAM,SAAS,MAAM,QAAQ,iBAAiB,SAAS,KAAK,cAAc,KAAK;AAC/E,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,WAAO,eAAe,KAAK,kCAAkC;AAAA,EAC/D;AACF;",
+  "names": []
+}

package/dist/modules/cpq/api/quotes/[quoteId]/target-subscriptions/[targetId]/route.js

@@ -0,0 +1,79 @@
+import { NextResponse } from "next/server";
+import { resolveCpqRouteContext } from "../../../../context.js";
+import { cpqUpdateTargetSubscriptionSchema } from "../../../../../data/validators.js";
+import { resolveQuotingService } from "../../../../resolveQuotingService.js";
+import { handleArcError } from "../../../../_helpers/handleArcError.js";
+const metadata = {
+  PATCH: { requireAuth: true, requireFeatures: ["cpq.quotes.manage"] },
+  DELETE: { requireAuth: true, requireFeatures: ["cpq.quotes.manage"] }
+};
+async function PATCH(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { quoteId, targetId } = await params;
+    const body = cpqUpdateTargetSubscriptionSchema.parse(await req.json());
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = resolveQuotingService(ctx);
+    const result = await service.updateTargetSubscription(
+      quoteId,
+      targetId,
+      {
+        mergeAction: body.mergeAction,
+        newTermStart: body.newTermStart ?? null,
+        newTermEnd: body.newTermEnd ?? null,
+        newTermMonths: body.newTermMonths ?? null
+      },
+      scope
+    );
+    return NextResponse.json(result);
+  } catch (err) {
+    return handleArcError(err, "cpq/quotes/[quoteId]/target-subscriptions/[targetId].PATCH");
+  }
+}
+async function DELETE(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { quoteId, targetId } = await params;
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = resolveQuotingService(ctx);
+    const result = await service.detachTargetSubscription(quoteId, targetId, scope);
+    return NextResponse.json(result);
+  } catch (err) {
+    return handleArcError(err, "cpq/quotes/[quoteId]/target-subscriptions/[targetId].DELETE");
+  }
+}
+const openApi = {
+  "/api/cpq/quotes/{quoteId}/target-subscriptions/{targetId}": {
+    parameters: [
+      { name: "quoteId", in: "path", required: true, schema: { type: "string", format: "uuid" } },
+      { name: "targetId", in: "path", required: true, schema: { type: "string", format: "uuid" } }
+    ],
+    patch: {
+      tags: ["CPQ ARC"],
+      summary: "Update an ARC target (mergeAction / term fields)",
+      responses: {
+        "200": { description: "Updated" },
+        "404": { description: "Target not found" },
+        "409": { description: "Quote no longer editable" }
+      }
+    },
+    delete: {
+      tags: ["CPQ ARC"],
+      summary: "Detach an ARC target",
+      responses: {
+        "200": { description: "Detached" },
+        "404": { description: "Target not found" },
+        "409": { description: "Quote no longer editable" }
+      }
+    }
+  }
+};
+export {
+  DELETE,
+  PATCH,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/quotes/[quoteId]/target-subscriptions/[targetId]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/cpq/api/quotes/%5BquoteId%5D/target-subscriptions/%5BtargetId%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveCpqRouteContext } from '../../../../context'\nimport { cpqUpdateTargetSubscriptionSchema } from '../../../../../data/validators'\nimport { resolveQuotingService } from '../../../../resolveQuotingService'\nimport { handleArcError } from '../../../../_helpers/handleArcError'\n\n/**\n * Manage a single attached ARC target.\n *\n *   PATCH  /api/cpq/quotes/[quoteId]/target-subscriptions/[targetId]\n *     \u2192 update mergeAction or term fields (renew only).\n *\n *   DELETE /api/cpq/quotes/[quoteId]/target-subscriptions/[targetId]\n *     \u2192 detach the target. Drops associated quote lines.\n */\nexport const metadata = {\n  PATCH: { requireAuth: true, requireFeatures: ['cpq.quotes.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['cpq.quotes.manage'] },\n}\n\nexport async function PATCH(\n  req: Request,\n  { params }: { params: Promise<{ quoteId: string; targetId: string }> },\n) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    const { quoteId, targetId } = await params\n    const body = cpqUpdateTargetSubscriptionSchema.parse(await req.json())\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = resolveQuotingService(ctx)\n    const result = await service.updateTargetSubscription(\n      quoteId,\n      targetId,\n      {\n        mergeAction: body.mergeAction,\n        newTermStart: body.newTermStart ?? null,\n        newTermEnd: body.newTermEnd ?? null,\n        newTermMonths: body.newTermMonths ?? null,\n      },\n      scope,\n    )\n    return NextResponse.json(result)\n  } catch (err) {\n    return handleArcError(err, 'cpq/quotes/[quoteId]/target-subscriptions/[targetId].PATCH')\n  }\n}\n\nexport async function DELETE(\n  req: Request,\n  { params }: { params: Promise<{ quoteId: string; targetId: string }> },\n) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    const { quoteId, targetId } = await params\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = resolveQuotingService(ctx)\n    const result = await service.detachTargetSubscription(quoteId, targetId, scope)\n    return NextResponse.json(result)\n  } catch (err) {\n    return handleArcError(err, 'cpq/quotes/[quoteId]/target-subscriptions/[targetId].DELETE')\n  }\n}\n\nexport const openApi = {\n  '/api/cpq/quotes/{quoteId}/target-subscriptions/{targetId}': {\n    parameters: [\n      { name: 'quoteId', in: 'path', required: true, schema: { type: 'string', format: 'uuid' } },\n      { name: 'targetId', in: 'path', required: true, schema: { type: 'string', format: 'uuid' } },\n    ],\n    patch: {\n      tags: ['CPQ ARC'],\n      summary: 'Update an ARC target (mergeAction / term fields)',\n      responses: {\n        '200': { description: 'Updated' },\n        '404': { description: 'Target not found' },\n        '409': { description: 'Quote no longer editable' },\n      },\n    },\n    delete: {\n      tags: ['CPQ ARC'],\n      summary: 'Detach an ARC target',\n      responses: {\n        '200': { description: 'Detached' },\n        '404': { description: 'Target not found' },\n        '409': { description: 'Quote no longer editable' },\n      },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,yCAAyC;AAClD,SAAS,6BAA6B;AACtC,SAAS,sBAAsB;AAWxB,MAAM,WAAW;AAAA,EACtB,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AAAA,EACnE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACtE;AAEA,eAAsB,MACpB,KACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClF,UAAM,EAAE,SAAS,SAAS,IAAI,MAAM;AACpC,UAAM,OAAO,kCAAkC,MAAM,MAAM,IAAI,KAAK,CAAC;AACrE,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,sBAAsB,GAAG;AACzC,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,QACE,aAAa,KAAK;AAAA,QAClB,cAAc,KAAK,gBAAgB;AAAA,QACnC,YAAY,KAAK,cAAc;AAAA,QAC/B,eAAe,KAAK,iBAAiB;AAAA,MACvC;AAAA,MACA;AAAA,IACF;AACA,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,WAAO,eAAe,KAAK,4DAA4D;AAAA,EACzF;AACF;AAEA,eAAsB,OACpB,KACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClF,UAAM,EAAE,SAAS,SAAS,IAAI,MAAM;AACpC,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,sBAAsB,GAAG;AACzC,UAAM,SAAS,MAAM,QAAQ,yBAAyB,SAAS,UAAU,KAAK;AAC9E,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,WAAO,eAAe,KAAK,6DAA6D;AAAA,EAC1F;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,6DAA6D;AAAA,IAC3D,YAAY;AAAA,MACV,EAAE,MAAM,WAAW,IAAI,QAAQ,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO,EAAE;AAAA,MAC1F,EAAE,MAAM,YAAY,IAAI,QAAQ,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO,EAAE;AAAA,IAC7F;AAAA,IACA,OAAO;AAAA,MACL,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,WAAW;AAAA,QACT,OAAO,EAAE,aAAa,UAAU;AAAA,QAChC,OAAO,EAAE,aAAa,mBAAmB;AAAA,QACzC,OAAO,EAAE,aAAa,2BAA2B;AAAA,MACnD;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,WAAW;AAAA,QACT,OAAO,EAAE,aAAa,WAAW;AAAA,QACjC,OAAO,EAAE,aAAa,mBAAmB;AAAA,QACzC,OAAO,EAAE,aAAa,2BAA2B;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/cpq/api/quotes/[quoteId]/target-subscriptions/route.js

@@ -0,0 +1,95 @@
+import { NextResponse } from "next/server";
+import { resolveCpqRouteContext } from "../../../context.js";
+import { cpqAttachTargetSubscriptionSchema } from "../../../../data/validators.js";
+import { resolveQuotingService } from "../../../resolveQuotingService.js";
+import { handleArcError } from "../../../_helpers/handleArcError.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["cpq.quotes.view"] },
+  POST: { requireAuth: true, requireFeatures: ["cpq.quotes.manage"] }
+};
+async function GET(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { quoteId } = await params;
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = resolveQuotingService(ctx);
+    const items = await service.listTargetSubscriptions(quoteId, scope);
+    return NextResponse.json({ items });
+  } catch (err) {
+    return handleArcError(err, "cpq/quotes/[quoteId]/target-subscriptions.GET");
+  }
+}
+async function POST(req, { params }) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const { quoteId } = await params;
+    const body = cpqAttachTargetSubscriptionSchema.parse(await req.json());
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const service = resolveQuotingService(ctx);
+    const result = await service.attachTargetSubscription(
+      quoteId,
+      {
+        subscriptionId: body.subscriptionId,
+        quoteType: body.quoteType,
+        mergeAction: body.mergeAction,
+        newTermStart: body.newTermStart ?? null,
+        newTermEnd: body.newTermEnd ?? null,
+        newTermMonths: body.newTermMonths ?? null
+      },
+      scope
+    );
+    return NextResponse.json(result, { status: 201 });
+  } catch (err) {
+    return handleArcError(err, "cpq/quotes/[quoteId]/target-subscriptions.POST");
+  }
+}
+const openApi = {
+  "/api/cpq/quotes/{quoteId}/target-subscriptions": {
+    parameters: [
+      { name: "quoteId", in: "path", required: true, schema: { type: "string", format: "uuid" } }
+    ],
+    get: {
+      tags: ["CPQ ARC"],
+      summary: "List target subscriptions attached to an ARC quote",
+      responses: { "200": { description: "Targets" }, "401": { description: "Unauthorized" } }
+    },
+    post: {
+      tags: ["CPQ ARC"],
+      summary: "Attach a subscription as an ARC target",
+      requestBody: {
+        required: true,
+        content: {
+          "application/json": {
+            schema: {
+              type: "object",
+              required: ["subscriptionId", "quoteType"],
+              properties: {
+                subscriptionId: { type: "string", format: "uuid" },
+                quoteType: { type: "string", enum: ["amend", "renew", "cancel"] },
+                mergeAction: { type: "string", enum: ["standalone", "absorb"] },
+                newTermStart: { type: "string" },
+                newTermEnd: { type: "string" },
+                newTermMonths: { type: "integer", minimum: 1 }
+              }
+            }
+          }
+        }
+      },
+      responses: {
+        "201": { description: "Target attached" },
+        "400": { description: "Validation error / mismatch" },
+        "404": { description: "Subscription not found" },
+        "409": { description: "Subscription not eligible / concurrent ARC quote" }
+      }
+    }
+  }
+};
+export {
+  GET,
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/quotes/[quoteId]/target-subscriptions/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/cpq/api/quotes/%5BquoteId%5D/target-subscriptions/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveCpqRouteContext } from '../../../context'\nimport { cpqAttachTargetSubscriptionSchema } from '../../../../data/validators'\nimport { resolveQuotingService } from '../../../resolveQuotingService'\nimport { handleArcError } from '../../../_helpers/handleArcError'\n\n/**\n * Manage ARC target subscriptions on a quote.\n *\n *   GET  /api/cpq/quotes/[quoteId]/target-subscriptions\n *     \u2192 list attached targets with per-target context (current items, term).\n *\n *   POST /api/cpq/quotes/[quoteId]/target-subscriptions\n *     \u2192 attach a subscription to the quote (multi-target / merge case).\n */\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['cpq.quotes.view'] },\n  POST: { requireAuth: true, requireFeatures: ['cpq.quotes.manage'] },\n}\n\nexport async function GET(\n  req: Request,\n  { params }: { params: Promise<{ quoteId: string }> },\n) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    const { quoteId } = await params\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = resolveQuotingService(ctx)\n    const items = await service.listTargetSubscriptions(quoteId, scope)\n    return NextResponse.json({ items })\n  } catch (err) {\n    return handleArcError(err, 'cpq/quotes/[quoteId]/target-subscriptions.GET')\n  }\n}\n\nexport async function POST(\n  req: Request,\n  { params }: { params: Promise<{ quoteId: string }> },\n) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    const { quoteId } = await params\n    const body = cpqAttachTargetSubscriptionSchema.parse(await req.json())\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const service = resolveQuotingService(ctx)\n    const result = await service.attachTargetSubscription(\n      quoteId,\n      {\n        subscriptionId: body.subscriptionId,\n        quoteType: body.quoteType,\n        mergeAction: body.mergeAction,\n        newTermStart: body.newTermStart ?? null,\n        newTermEnd: body.newTermEnd ?? null,\n        newTermMonths: body.newTermMonths ?? null,\n      },\n      scope,\n    )\n    return NextResponse.json(result, { status: 201 })\n  } catch (err) {\n    return handleArcError(err, 'cpq/quotes/[quoteId]/target-subscriptions.POST')\n  }\n}\n\nexport const openApi = {\n  '/api/cpq/quotes/{quoteId}/target-subscriptions': {\n    parameters: [\n      { name: 'quoteId', in: 'path', required: true, schema: { type: 'string', format: 'uuid' } },\n    ],\n    get: {\n      tags: ['CPQ ARC'],\n      summary: 'List target subscriptions attached to an ARC quote',\n      responses: { '200': { description: 'Targets' }, '401': { description: 'Unauthorized' } },\n    },\n    post: {\n      tags: ['CPQ ARC'],\n      summary: 'Attach a subscription as an ARC target',\n      requestBody: {\n        required: true,\n        content: {\n          'application/json': {\n            schema: {\n              type: 'object',\n              required: ['subscriptionId', 'quoteType'],\n              properties: {\n                subscriptionId: { type: 'string', format: 'uuid' },\n                quoteType: { type: 'string', enum: ['amend', 'renew', 'cancel'] },\n                mergeAction: { type: 'string', enum: ['standalone', 'absorb'] },\n                newTermStart: { type: 'string' },\n                newTermEnd: { type: 'string' },\n                newTermMonths: { type: 'integer', minimum: 1 },\n              },\n            },\n          },\n        },\n      },\n      responses: {\n        '201': { description: 'Target attached' },\n        '400': { description: 'Validation error / mismatch' },\n        '404': { description: 'Subscription not found' },\n        '409': { description: 'Subscription not eligible / concurrent ARC quote' },\n      },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,yCAAyC;AAClD,SAAS,6BAA6B;AACtC,SAAS,sBAAsB;AAWxB,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,EAC/D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAEA,eAAsB,IACpB,KACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,sBAAsB,GAAG;AACzC,UAAM,QAAQ,MAAM,QAAQ,wBAAwB,SAAS,KAAK;AAClE,WAAO,aAAa,KAAK,EAAE,MAAM,CAAC;AAAA,EACpC,SAAS,KAAK;AACZ,WAAO,eAAe,KAAK,+CAA+C;AAAA,EAC5E;AACF;AAEA,eAAsB,KACpB,KACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,OAAO,kCAAkC,MAAM,MAAM,IAAI,KAAK,CAAC;AACrE,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,UAAU,sBAAsB,GAAG;AACzC,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B;AAAA,MACA;AAAA,QACE,gBAAgB,KAAK;AAAA,QACrB,WAAW,KAAK;AAAA,QAChB,aAAa,KAAK;AAAA,QAClB,cAAc,KAAK,gBAAgB;AAAA,QACnC,YAAY,KAAK,cAAc;AAAA,QAC/B,eAAe,KAAK,iBAAiB;AAAA,MACvC;AAAA,MACA;AAAA,IACF;AACA,WAAO,aAAa,KAAK,QAAQ,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClD,SAAS,KAAK;AACZ,WAAO,eAAe,KAAK,gDAAgD;AAAA,EAC7E;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,kDAAkD;AAAA,IAChD,YAAY;AAAA,MACV,EAAE,MAAM,WAAW,IAAI,QAAQ,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO,EAAE;AAAA,IAC5F;AAAA,IACA,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,WAAW,EAAE,OAAO,EAAE,aAAa,UAAU,GAAG,OAAO,EAAE,aAAa,eAAe,EAAE;AAAA,IACzF;AAAA,IACA,MAAM;AAAA,MACJ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aAAa;AAAA,QACX,UAAU;AAAA,QACV,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB,QAAQ;AAAA,cACN,MAAM;AAAA,cACN,UAAU,CAAC,kBAAkB,WAAW;AAAA,cACxC,YAAY;AAAA,gBACV,gBAAgB,EAAE,MAAM,UAAU,QAAQ,OAAO;AAAA,gBACjD,WAAW,EAAE,MAAM,UAAU,MAAM,CAAC,SAAS,SAAS,QAAQ,EAAE;AAAA,gBAChE,aAAa,EAAE,MAAM,UAAU,MAAM,CAAC,cAAc,QAAQ,EAAE;AAAA,gBAC9D,cAAc,EAAE,MAAM,SAAS;AAAA,gBAC/B,YAAY,EAAE,MAAM,SAAS;AAAA,gBAC7B,eAAe,EAAE,MAAM,WAAW,SAAS,EAAE;AAAA,cAC/C;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,WAAW;AAAA,QACT,OAAO,EAAE,aAAa,kBAAkB;AAAA,QACxC,OAAO,EAAE,aAAa,8BAA8B;AAAA,QACpD,OAAO,EAAE,aAAa,yBAAyB;AAAA,QAC/C,OAAO,EAAE,aAAa,mDAAmD;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/cpq/api/quotes/attributes/route.js

@@ -0,0 +1,52 @@
+import { NextResponse } from "next/server";
+import { resolveCpqRouteContext } from "../../context.js";
+import { DefaultCpqProductService } from "../../../services/cpqProductService.js";
+import { CpqProductOffering } from "../../../data/entities.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["cpq.quotes.view"] }
+};
+async function GET(req) {
+  try {
+    const ctx = await resolveCpqRouteContext(req);
+    if (!ctx.auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const url = new URL(req.url);
+    const offeringId = url.searchParams.get("offeringId");
+    const productId = url.searchParams.get("productId");
+    const configParam = url.searchParams.get("configuration");
+    if (!offeringId && !productId) {
+      return NextResponse.json({ error: "Either offeringId or productId is required" }, { status: 400 });
+    }
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId };
+    const currentConfig = configParam ? JSON.parse(configParam) : {};
+    const productService = new DefaultCpqProductService(ctx.em);
+    let specId;
+    if (offeringId) {
+      const offering = await ctx.em.findOne(CpqProductOffering, {
+        id: offeringId,
+        ...scope,
+        deletedAt: null
+      });
+      if (!offering) return NextResponse.json({ error: "Offering not found" }, { status: 404 });
+      specId = offering.specId;
+    }
+    if (specId) {
+      const attributes = await productService.getConstrainedAttributes({
+        specId,
+        ...scope,
+        currentConfig,
+        offeringId: offeringId ?? void 0
+      });
+      const runTimeAttrs = attributes.filter((a) => a.resolutionTime === "run_time");
+      return NextResponse.json({ attributes: runTimeAttrs });
+    }
+    return NextResponse.json({ attributes: [] });
+  } catch (err) {
+    console.error("[cpq/quotes/attributes.GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+export {
+  GET,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/cpq/api/quotes/attributes/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/cpq/api/quotes/attributes/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { resolveCpqRouteContext } from '../../context'\nimport { DefaultCpqProductService } from '../../../services/cpqProductService'\nimport { CpqProductOffering } from '../../../data/entities'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['cpq.quotes.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveCpqRouteContext(req)\n    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n    const url = new URL(req.url)\n    const offeringId = url.searchParams.get('offeringId')\n    const productId = url.searchParams.get('productId')\n    const configParam = url.searchParams.get('configuration')\n\n    if (!offeringId && !productId) {\n      return NextResponse.json({ error: 'Either offeringId or productId is required' }, { status: 400 })\n    }\n\n    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }\n    const currentConfig = configParam ? JSON.parse(configParam) : {}\n\n    // Use ctx.em directly to avoid DI scope issues\n    const productService = new DefaultCpqProductService(ctx.em)\n\n    let specId: string | undefined\n    if (offeringId) {\n      const offering = await ctx.em.findOne(CpqProductOffering, {\n        id: offeringId,\n        ...scope,\n        deletedAt: null,\n      })\n      if (!offering) return NextResponse.json({ error: 'Offering not found' }, { status: 404 })\n      specId = offering.specId\n    }\n\n    if (specId) {\n      const attributes = await productService.getConstrainedAttributes({\n        specId,\n        ...scope,\n        currentConfig,\n        offeringId: offeringId ?? undefined,\n      })\n\n      // Filter to run-time attributes only\n      const runTimeAttrs = attributes.filter((a) => a.resolutionTime === 'run_time')\n\n      return NextResponse.json({ attributes: runTimeAttrs })\n    }\n\n    // v1 fallback: productId-based\n    return NextResponse.json({ attributes: [] })\n  } catch (err) {\n    console.error('[cpq/quotes/attributes.GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,gCAAgC;AACzC,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AACjE;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,uBAAuB,GAAG;AAC5C,QAAI,CAAC,IAAI,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,aAAa,IAAI,aAAa,IAAI,YAAY;AACpD,UAAM,YAAY,IAAI,aAAa,IAAI,WAAW;AAClD,UAAM,cAAc,IAAI,aAAa,IAAI,eAAe;AAExD,QAAI,CAAC,cAAc,CAAC,WAAW;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,6CAA6C,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnG;AAEA,UAAM,QAAQ,EAAE,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS;AAC3E,UAAM,gBAAgB,cAAc,KAAK,MAAM,WAAW,IAAI,CAAC;AAG/D,UAAM,iBAAiB,IAAI,yBAAyB,IAAI,EAAE;AAE1D,QAAI;AACJ,QAAI,YAAY;AACd,YAAM,WAAW,MAAM,IAAI,GAAG,QAAQ,oBAAoB;AAAA,QACxD,IAAI;AAAA,QACJ,GAAG;AAAA,QACH,WAAW;AAAA,MACb,CAAC;AACD,UAAI,CAAC,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AACxF,eAAS,SAAS;AAAA,IACpB;AAEA,QAAI,QAAQ;AACV,YAAM,aAAa,MAAM,eAAe,yBAAyB;AAAA,QAC/D;AAAA,QACA,GAAG;AAAA,QACH;AAAA,QACA,YAAY,cAAc;AAAA,MAC5B,CAAC;AAGD,YAAM,eAAe,WAAW,OAAO,CAAC,MAAM,EAAE,mBAAmB,UAAU;AAE7E,aAAO,aAAa,KAAK,EAAE,YAAY,aAAa,CAAC;AAAA,IACvD;AAGA,WAAO,aAAa,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;AAAA,EAC7C,SAAS,KAAK;AACZ,YAAQ,MAAM,+BAA+B,GAAG;AAChD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;",
+  "names": []
+}