@endora-commerce/mod-addresses 0.100.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Endora sp. z o.o. and the Endora Commerce contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,48 @@
+<!-- Generated by `pnpm --filter backend run manifests:generate`. Delete this line to take the file over; a README without it is never regenerated. -->
+
+# @endora-commerce/mod-addresses
+
+Reusable address entities used by organizations, customers, and order fulfilment.
+
+## What this is
+
+An **Endora Commerce module package**. Its module id is `addresses` — the identity of record in the platform's registries, in its migrations and in its setting, permission and translation codes.
+
+A module is not imported by application code. The platform discovers the extension packages an instance has installed, reads the manifest on the root subpath and composes the module from it, so installing this package and starting the instance is the whole integration.
+
+## Entry points
+
+| Import | Contents |
+| --- | --- |
+| `@endora-commerce/mod-addresses` | the module manifest — its id, version, dependencies, settings and activation |
+| `@endora-commerce/mod-addresses/backend` | the composition root the platform calls, with the entities, services, routes and workers it registers |
+
+## Depends on
+
+Everything below is a **peer** dependency, so the application resolves exactly one copy of each — two copies of a host or of React are a runtime failure rather than a type error. An entry marked *optional* is needed only by the layers that use it.
+
+**Endora packages**
+
+- `@endora-commerce/contracts`
+- `@endora-commerce/platform`
+
+**Third-party**
+
+- `@mikro-orm/core` ^6
+- `@mikro-orm/postgresql` ^6
+
+## What the tarball carries
+
+- `dist/` — the compiled JavaScript and its type declarations
+- `i18n/` — the translation bundles this package ships (`en`, `pl`), loaded by the platform
+- `docs/` — the package’s own pages in the Endora Commerce documentation site
+
+## Install
+
+```bash
+pnpm add @endora-commerce/mod-addresses
+```
+
+## Licence
+
+MIT — the text is in `LICENSE`, beside this file.

package/dist/backend/entities/address.entity.d.ts

@@ -0,0 +1,23 @@
+import { OptionalProps } from '@mikro-orm/core';
+/**
+ * Address — a delivery or billing address belonging to an Organization.
+ * The partial unique index "one default per (organization, kind)" is enforced
+ * in the migration, not at the ORM layer.
+ */
+export declare class Address {
+    [OptionalProps]?: 'id' | 'createdAt' | 'updatedAt' | 'isDefault' | 'phone' | 'deletedAt';
+    id: string;
+    organizationId: string;
+    kind: 'delivery' | 'billing';
+    recipientName: string;
+    street: string;
+    city: string;
+    postalCode: string;
+    country: string;
+    phone?: string | null;
+    isDefault: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt?: Date | null;
+}
+//# sourceMappingURL=address.entity.d.ts.map

package/dist/backend/entities/address.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.entity.d.ts","sourceRoot":"","sources":["../../../src/backend/entities/address.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,aAAa,EAAwB,MAAM,iBAAiB,CAAC;AAIrF;;;;GAIG;AACH,qBAEa,OAAO;IAClB,CAAC,aAAa,CAAC,CAAC,EACZ,IAAI,GACJ,WAAW,GACX,WAAW,GACX,WAAW,GACX,OAAO,GACP,WAAW,CAAC;IAGhB,EAAE,EAAE,MAAM,CAAgB;IAI1B,cAAc,EAAG,MAAM,CAAC;IAIxB,IAAI,EAAG,UAAU,GAAG,SAAS,CAAC;IAG9B,aAAa,EAAG,MAAM,CAAC;IAGvB,MAAM,EAAG,MAAM,CAAC;IAGhB,IAAI,EAAG,MAAM,CAAC;IAGd,UAAU,EAAG,MAAM,CAAC;IAGpB,OAAO,EAAG,MAAM,CAAC;IAGjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtB,SAAS,EAAE,OAAO,CAAS;IAG3B,SAAS,EAAE,IAAI,CAAc;IAG7B,SAAS,EAAE,IAAI,CAAc;IAG7B,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB"}

package/dist/backend/entities/address.entity.js

@@ -0,0 +1,93 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Entity, Index, OptionalProps, PrimaryKey, Property } from '@mikro-orm/core';
+import { OrgScoped } from '@endora-commerce/platform/tenancy';
+import { randomUUID } from 'crypto';
+/**
+ * Address — a delivery or billing address belonging to an Organization.
+ * The partial unique index "one default per (organization, kind)" is enforced
+ * in the migration, not at the ORM layer.
+ */
+let Address = class Address {
+    [OptionalProps];
+    id = randomUUID();
+    organizationId;
+    kind;
+    recipientName;
+    street;
+    city;
+    postalCode;
+    country;
+    phone;
+    isDefault = false;
+    createdAt = new Date();
+    updatedAt = new Date();
+    deletedAt;
+};
+__decorate([
+    PrimaryKey({ type: 'uuid' }),
+    __metadata("design:type", String)
+], Address.prototype, "id", void 0);
+__decorate([
+    Property({ type: 'uuid' }),
+    Index(),
+    __metadata("design:type", String)
+], Address.prototype, "organizationId", void 0);
+__decorate([
+    Property({ type: 'string', length: 16 }),
+    Index(),
+    __metadata("design:type", String)
+], Address.prototype, "kind", void 0);
+__decorate([
+    Property({ type: 'string', length: 160 }),
+    __metadata("design:type", String)
+], Address.prototype, "recipientName", void 0);
+__decorate([
+    Property({ type: 'string', length: 255 }),
+    __metadata("design:type", String)
+], Address.prototype, "street", void 0);
+__decorate([
+    Property({ type: 'string', length: 120 }),
+    __metadata("design:type", String)
+], Address.prototype, "city", void 0);
+__decorate([
+    Property({ type: 'string', length: 20 }),
+    __metadata("design:type", String)
+], Address.prototype, "postalCode", void 0);
+__decorate([
+    Property({ type: 'string', length: 2 }),
+    __metadata("design:type", String)
+], Address.prototype, "country", void 0);
+__decorate([
+    Property({ type: 'string', length: 32, nullable: true }),
+    __metadata("design:type", Object)
+], Address.prototype, "phone", void 0);
+__decorate([
+    Property({ type: 'boolean' }),
+    __metadata("design:type", Boolean)
+], Address.prototype, "isDefault", void 0);
+__decorate([
+    Property({ type: 'datetime', onCreate: () => new Date() }),
+    __metadata("design:type", Date)
+], Address.prototype, "createdAt", void 0);
+__decorate([
+    Property({ type: 'datetime', onUpdate: () => new Date() }),
+    __metadata("design:type", Date)
+], Address.prototype, "updatedAt", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], Address.prototype, "deletedAt", void 0);
+Address = __decorate([
+    OrgScoped(),
+    Entity({ tableName: 'addresses' })
+], Address);
+export { Address };
+//# sourceMappingURL=address.entity.js.map

package/dist/backend/entities/address.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.entity.js","sourceRoot":"","sources":["../../../src/backend/entities/address.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;GAIG;AAGI,IAAM,OAAO,GAAb,MAAM,OAAO;IAClB,CAAC,aAAa,CAAC,CAMC;IAGhB,EAAE,GAAW,UAAU,EAAE,CAAC;IAI1B,cAAc,CAAU;IAIxB,IAAI,CAA0B;IAG9B,aAAa,CAAU;IAGvB,MAAM,CAAU;IAGhB,IAAI,CAAU;IAGd,UAAU,CAAU;IAGpB,OAAO,CAAU;IAGjB,KAAK,CAAiB;IAGtB,SAAS,GAAY,KAAK,CAAC;IAG3B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAG7B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAG7B,SAAS,CAAe;CACzB,CAAA;AAvCC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;mCACH;AAI1B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,KAAK,EAAE;;+CACgB;AAIxB;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxC,KAAK,EAAE;;qCACsB;AAG9B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;8CACnB;AAGvB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;uCAC1B;AAGhB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;qCAC5B;AAGd;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;2CACrB;AAGpB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;;wCACvB;AAGjB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sCACnC;AAGtB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;0CACH;AAG3B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;0CAAc;AAG7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;0CAAc;AAG7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0CACvB;AAhDb,OAAO;IAFnB,SAAS,EAAE;IACX,MAAM,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;GACtB,OAAO,CAiDnB"}

package/dist/backend/index.d.ts

@@ -0,0 +1,58 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { DictionaryValidator } from '@endora-commerce/contracts';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+import { AddressService } from './services/address-service.js';
+import { Address } from './entities/address.entity.js';
+/**
+ * `addresses` — one service, where there were three (feature 072, wave 1,
+ * T090).
+ *
+ * The module owns no routes: `organizations`, `customers`, `orders` and
+ * `quick_order` each serve their own address surface over the same table. Three
+ * of them built their own `AddressService`, and the constructor takes its
+ * dictionary validator and its audit writer as **optional** arguments — so the
+ * three instances were not required to agree, and one of them did not:
+ *
+ *     orders/plugin.ts:  options.addressService ?? new AddressService(options.emFactory)
+ *
+ * Both roots pass `addressService`, so that branch is dead today. It is a
+ * *loaded* dead branch, though, not an inert one: anything constructing
+ * `commerceModule` without the option gets an address service that validates no
+ * country or region code and writes no audit entry, on the checkout path.
+ * `currencies` shipped this exact shape in wave 1 and there it was live, which
+ * is the argument for removing the shape rather than the instance.
+ *
+ * A **port**, because four other modules resolve it: an address write reaching
+ * a module the operator switched off should get an explicit 503 rather than a
+ * service that half-answers.
+ *
+ * `dictionaryValidator` goes through `lazyPort`, and the reason changed under
+ * it. It used to be read once in the factory body — `const validator =
+ * ctx.cradle<…>().dictionaryValidator` — which looks deferred and is not: the
+ * factory body runs when the registration is first constructed. That was
+ * harmless while `dictionaries` registered a plain value, and stopped being
+ * harmless the moment that module converted and made it a port, because a
+ * singleton may not hold a transient gate. `lazyPort` defers it per call, which
+ * is what the comment always claimed was happening.
+ */
+export interface AddressesCradle {
+    readonly emFactory: () => EntityManager;
+    readonly auditLogService: AuditPort;
+    readonly dictionaryValidator: DictionaryValidator | undefined;
+    readonly addressService: AddressService;
+}
+export declare function registerModule(ctx: ModuleContext): void;
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export declare const entities: (typeof Address)[];
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAEhC,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAG/D,OAAO,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CACzC;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CA2DvD;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,QAAQ,oBAEpB,CAAC"}

package/dist/backend/index.js

@@ -0,0 +1,55 @@
+import { lazyPort } from '@endora-commerce/platform/kernel';
+import { AddressService } from './services/address-service.js';
+import { AddressReadService, createAddressServicePort } from './services/address-ports.js';
+import { registerAddressCountryReferences } from './services/address-country-reference.js';
+import { Address } from './entities/address.entity.js';
+export function registerModule(ctx) {
+    // ---------------------------------------------------------------------------
+    // Feature 075, Phase P — the published surface.
+    //
+    // `addressService` below hands out the class; four of the ten inbound sites
+    // do not want a service at all, they read the `Address` entity to snapshot
+    // one onto an order, serialise one, or resolve a buyer's default. These two
+    // ports are what both halves rewire to, and every read on the first is
+    // scoped by organisation — three of the four direct readers apply that check
+    // in a second statement today, in a tenancy-critical table.
+    // ---------------------------------------------------------------------------
+    ctx.di.providePort('addressReadPort', ctx
+        .asFunction(({ emFactory }) => new AddressReadService(emFactory))
+        .singleton());
+    ctx.di.providePort('addressServicePort', ctx
+        .asFunction(() => createAddressServicePort(() => ctx.cradle().addressService))
+        .singleton());
+    ctx.di.providePort('addressService', ctx
+        .asFunction(({ emFactory, auditLogService }) => new AddressService(emFactory, lazyPort(ctx, 'dictionaryValidator'), auditLogService))
+        .singleton());
+    /**
+     * This module's rows carry a country code, so it answers "who still points at
+     * this country?" about its own tables (feature 077, D-87), where the owner used
+     * to count them with SQL naming this module's tables.
+     *
+     * A **contribution** hook: it pushes an inert descriptor into `countryReferenceRegistry`,
+     * an ungated registry, and carries no presence probe (D-62/D-68). Probing
+     * would be wrong in the dangerous direction — a switched-off module still owns
+     * the rows, so its country must still refuse the delete, which is the
+     * enumeration policy the registry states.
+     */
+    ctx.onBoot(() => {
+        registerAddressCountryReferences(lazyPort(ctx, 'countryReferenceRegistry'), ctx.cradle().emFactory);
+    });
+}
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export const entities = [
+    Address,
+];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAC3F,OAAO,EAAE,gCAAgC,EAAE,MAAM,yCAAyC,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AA0CvD,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C,8EAA8E;IAC9E,gDAAgD;IAChD,EAAE;IACF,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,4DAA4D;IAC5D,8EAA8E;IAE9E,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,iBAAiB,EACjB,GAAG;SACA,UAAU,CAAC,CAAC,EAAE,SAAS,EAAmB,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;SACjF,SAAS,EAAE,CACf,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,oBAAoB,EACpB,GAAG;SACA,UAAU,CAAC,GAAG,EAAE,CACf,wBAAwB,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAmB,CAAC,cAAc,CAAC,CAC7E;SACA,SAAS,EAAE,CACf,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,gBAAgB,EAChB,GAAG;SACA,UAAU,CACT,CAAC,EAAE,SAAS,EAAE,eAAe,EAAmB,EAAE,EAAE,CAClD,IAAI,cAAc,CAChB,SAAS,EACT,QAAQ,CAAsB,GAAG,EAAE,qBAAqB,CAAC,EACzD,eAAe,CAChB,CACJ;SACA,SAAS,EAAE,CACf,CAAC;IAEF;;;;;;;;;;OAUG;IACH,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,gCAAgC,CAC9B,QAAQ,CAAkC,GAAG,EAAE,0BAA0B,CAAC,EAC1E,GAAG,CAAC,MAAM,EAAmB,CAAC,SAAS,CACxC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,OAAO;CACR,CAAC"}

package/dist/backend/services/address-country-reference.d.ts

@@ -0,0 +1,12 @@
+import type { DictionaryReferenceRegistryPort } from '@endora-commerce/contracts';
+import type { EntityManager } from '@mikro-orm/postgresql';
+/**
+ * Who in `addresses` still points at a country (feature 077, D-87).
+ *
+ * `dictionaries` used to count this table itself and join it a second time
+ * for the orphan report, naming it in strings no import-level boundary check
+ * can see. An address with a country the platform does not have cannot be
+ * validated or rendered, so the reference blocks the delete.
+ */
+export declare function registerAddressCountryReferences(registry: DictionaryReferenceRegistryPort, emFactory: () => EntityManager): void;
+//# sourceMappingURL=address-country-reference.d.ts.map

package/dist/backend/services/address-country-reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address-country-reference.d.ts","sourceRoot":"","sources":["../../../src/backend/services/address-country-reference.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,+BAA+B,EACzC,SAAS,EAAE,MAAM,aAAa,GAC7B,IAAI,CAoBN"}

package/dist/backend/services/address-country-reference.js

@@ -0,0 +1,24 @@
+/**
+ * Who in `addresses` still points at a country (feature 077, D-87).
+ *
+ * `dictionaries` used to count this table itself and join it a second time
+ * for the orphan report, naming it in strings no import-level boundary check
+ * can see. An address with a country the platform does not have cannot be
+ * validated or rendered, so the reference blocks the delete.
+ */
+export function registerAddressCountryReferences(registry, emFactory) {
+    registry.register({
+        ownerModuleId: 'addresses',
+        consumer: 'addresses',
+        tableName: 'addresses',
+        columnName: 'country',
+        blocking: true,
+        countReferences: async (code) => {
+            const rows = (await emFactory().execute(`select count(*)::int as n from "addresses" where "country" = ?`, [code]));
+            return rows[0]?.n ?? 0;
+        },
+        usedCodes: async () => (await emFactory().execute(`select "country" as code, count(*)::int as count
+           from "addresses" where "country" is not null group by "country"`)),
+    });
+}
+//# sourceMappingURL=address-country-reference.js.map

package/dist/backend/services/address-country-reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address-country-reference.js","sourceRoot":"","sources":["../../../src/backend/services/address-country-reference.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,UAAU,gCAAgC,CAC9C,QAAyC,EACzC,SAA8B;IAE9B,QAAQ,CAAC,QAAQ,CAAC;QAChB,aAAa,EAAE,WAAW;QAC1B,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;QACtB,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,IAAI;QACd,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,EAAE,CAAC,OAAO,CACrC,gEAAgE,EAChE,CAAC,IAAI,CAAC,CACP,CAAyB,CAAC;YAC3B,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,SAAS,EAAE,KAAK,IAAI,EAAE,CACpB,CAAC,MAAM,SAAS,EAAE,CAAC,OAAO,CACxB;2EACmE,CACpE,CAA2C;KAC/C,CAAC,CAAC;AACL,CAAC"}

package/dist/backend/services/address-ports.d.ts

@@ -0,0 +1,37 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { AddressKindValue, AddressReadPort, AddressRecord, AddressServicePort } from '@endora-commerce/contracts';
+import { Address } from '../entities/address.entity.js';
+import type { AddressService } from './address-service.js';
+/**
+ * The published face of `addresses` (feature 075, Phase P).
+ *
+ * Ten inbound sites, six-four: `orders` and `organizations` type themselves
+ * against `AddressService`, and four read the `Address` entity directly —
+ * `orders` snapshotting one onto a placed order, `customers` serialising one,
+ * `quick_order` resolving a buyer's default.
+ *
+ * Every read here is scoped by organisation. That is not defensiveness: the
+ * four direct readers each already know whose address they are asking for, and
+ * three of them apply the check in a second statement — which is a check that
+ * can be forgotten, and in a tenancy-critical table.
+ */
+export declare class AddressReadService implements AddressReadPort {
+    private readonly emFactory;
+    constructor(emFactory: () => EntityManager);
+    findById(organizationId: string, addressId: string, options?: {
+        liveOnly?: boolean;
+    }): Promise<AddressRecord | null>;
+    findByIds(organizationId: string, addressIds: readonly string[], options?: {
+        liveOnly?: boolean;
+    }): Promise<AddressRecord[]>;
+    listForOrganization(organizationId: string, kind?: AddressKindValue): Promise<AddressRecord[]>;
+    findDefault(organizationId: string, kind: AddressKindValue): Promise<AddressRecord | null>;
+}
+/**
+ * The write side, adapting `AddressService`. The service arrives as a getter
+ * so the adapter resolves it per call rather than capturing this module's own
+ * gated port into a singleton.
+ */
+export declare function createAddressServicePort(getService: () => AddressService): AddressServicePort;
+export declare function toAddressRecord(address: Address): AddressRecord;
+//# sourceMappingURL=address-ports.d.ts.map

package/dist/backend/services/address-ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address-ports.d.ts","sourceRoot":"","sources":["../../../src/backend/services/address-ports.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;;;;;;;;;;GAYG;AACH,qBAAa,kBAAmB,YAAW,eAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM,aAAa;IAErD,QAAQ,CACZ,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAS1B,SAAS,CACb,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/B,OAAO,CAAC,aAAa,EAAE,CAAC;IAUrB,mBAAmB,CACvB,cAAc,EAAE,MAAM,EACtB,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,aAAa,EAAE,CAAC;IASrB,WAAW,CACf,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;CASjC;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,cAAc,GAAG,kBAAkB,CAc7F;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAgB/D"}

package/dist/backend/services/address-ports.js

@@ -0,0 +1,88 @@
+import { Address } from '../entities/address.entity.js';
+/**
+ * The published face of `addresses` (feature 075, Phase P).
+ *
+ * Ten inbound sites, six-four: `orders` and `organizations` type themselves
+ * against `AddressService`, and four read the `Address` entity directly —
+ * `orders` snapshotting one onto a placed order, `customers` serialising one,
+ * `quick_order` resolving a buyer's default.
+ *
+ * Every read here is scoped by organisation. That is not defensiveness: the
+ * four direct readers each already know whose address they are asking for, and
+ * three of them apply the check in a second statement — which is a check that
+ * can be forgotten, and in a tenancy-critical table.
+ */
+export class AddressReadService {
+    emFactory;
+    constructor(emFactory) {
+        this.emFactory = emFactory;
+    }
+    async findById(organizationId, addressId, options) {
+        const address = await this.emFactory().findOne(Address, {
+            id: addressId,
+            organizationId,
+            ...(options?.liveOnly ? { deletedAt: null } : {}),
+        });
+        return address ? toAddressRecord(address) : null;
+    }
+    async findByIds(organizationId, addressIds, options) {
+        if (addressIds.length === 0)
+            return [];
+        const addresses = await this.emFactory().find(Address, {
+            id: { $in: [...addressIds] },
+            organizationId,
+            ...(options?.liveOnly ? { deletedAt: null } : {}),
+        });
+        return addresses.map(toAddressRecord);
+    }
+    async listForOrganization(organizationId, kind) {
+        const addresses = await this.emFactory().find(Address, { organizationId, deletedAt: null, ...(kind === undefined ? {} : { kind }) }, { orderBy: { isDefault: 'desc', createdAt: 'asc' } });
+        return addresses.map(toAddressRecord);
+    }
+    async findDefault(organizationId, kind) {
+        const address = await this.emFactory().findOne(Address, {
+            organizationId,
+            kind,
+            isDefault: true,
+            deletedAt: null,
+        });
+        return address ? toAddressRecord(address) : null;
+    }
+}
+/**
+ * The write side, adapting `AddressService`. The service arrives as a getter
+ * so the adapter resolves it per call rather than capturing this module's own
+ * gated port into a singleton.
+ */
+export function createAddressServicePort(getService) {
+    return {
+        async list(organizationId, kind) {
+            return (await getService().list(organizationId, kind)).map(toAddressRecord);
+        },
+        async createAddress(organizationId, input) {
+            return toAddressRecord(await getService().createAddress(organizationId, input));
+        },
+        async updateAddress(organizationId, addressId, patch) {
+            return toAddressRecord(await getService().updateAddress(organizationId, addressId, patch));
+        },
+        deleteAddress: (organizationId, addressId) => getService().deleteAddress(organizationId, addressId),
+    };
+}
+export function toAddressRecord(address) {
+    return {
+        id: address.id,
+        organizationId: address.organizationId,
+        kind: address.kind,
+        recipientName: address.recipientName,
+        street: address.street,
+        city: address.city,
+        postalCode: address.postalCode,
+        country: address.country,
+        phone: address.phone ?? null,
+        isDefault: address.isDefault,
+        createdAt: address.createdAt,
+        updatedAt: address.updatedAt,
+        deletedAt: address.deletedAt ?? null,
+    };
+}
+//# sourceMappingURL=address-ports.js.map

package/dist/backend/services/address-ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address-ports.js","sourceRoot":"","sources":["../../../src/backend/services/address-ports.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAGxD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,SAA8B;QAA9B,cAAS,GAAT,SAAS,CAAqB;IAAG,CAAC;IAE/D,KAAK,CAAC,QAAQ,CACZ,cAAsB,EACtB,SAAiB,EACjB,OAAgC;QAEhC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;YACtD,EAAE,EAAE,SAAS;YACb,cAAc;YACd,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,SAAS,CACb,cAAsB,EACtB,UAA6B,EAC7B,OAAgC;QAEhC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE;YACrD,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE;YAC5B,cAAc;YACd,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,cAAsB,EACtB,IAAuB;QAEvB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAC3C,OAAO,EACP,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAC5E,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CACrD,CAAC;QACF,OAAO,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,WAAW,CACf,cAAsB,EACtB,IAAsB;QAEtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;YACtD,cAAc;YACd,IAAI;YACJ,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAAgC;IACvE,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI;YAC7B,OAAO,CAAC,MAAM,UAAU,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE,KAAK;YACvC,OAAO,eAAe,CAAC,MAAM,UAAU,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;QAClF,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK;YAClD,OAAO,eAAe,CAAC,MAAM,UAAU,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7F,CAAC;QACD,aAAa,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,EAAE,CAC3C,UAAU,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,SAAS,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;KACrC,CAAC;AACJ,CAAC"}

package/dist/backend/services/address-service.d.ts

@@ -0,0 +1,42 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type DictionaryValidator } from '@endora-commerce/contracts';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import { Address } from '../entities/address.entity.js';
+/**
+ * AddressService (T120).
+ *
+ * `setDefault` is atomic — it clears any prior `is_default=true` address of the
+ * same (organization, kind), then sets the new default, inside one transaction.
+ * The partial unique index on addresses prevents two defaults from coexisting
+ * even under concurrent callers.
+ */
+export declare class AddressService {
+    #private;
+    private readonly emFactory;
+    private readonly dictionaryValidator?;
+    private readonly auditLog?;
+    constructor(emFactory: () => EntityManager, dictionaryValidator?: DictionaryValidator | undefined, auditLog?: AuditPort | undefined);
+    list(organizationId: string, kind?: 'delivery' | 'billing'): Promise<Address[]>;
+    createAddress(organizationId: string, input: {
+        kind: 'delivery' | 'billing';
+        recipientName: string;
+        street: string;
+        city: string;
+        postalCode: string;
+        country: string;
+        phone?: string;
+        isDefault?: boolean;
+    }): Promise<Address>;
+    updateAddress(organizationId: string, addressId: string, patch: Partial<{
+        recipientName: string;
+        street: string;
+        city: string;
+        postalCode: string;
+        country: string;
+        phone: string;
+        isDefault: boolean;
+    }>): Promise<Address>;
+    deleteAddress(organizationId: string, addressId: string): Promise<void>;
+    private validateCountry;
+}
+//# sourceMappingURL=address-service.d.ts.map

package/dist/backend/services/address-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/address-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAIL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAExD;;;;;;;GAOG;AACH,qBAAa,cAAc;;IAEvB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAFT,SAAS,EAAE,MAAM,aAAa,EAC9B,mBAAmB,CAAC,EAAE,mBAAmB,YAAA,EACzC,QAAQ,CAAC,EAAE,SAAS,YAAA;IASjC,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAO/E,aAAa,CACjB,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE;QACL,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;QAC7B,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GACA,OAAO,CAAC,OAAO,CAAC;IA8Bb,aAAa,CACjB,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,OAAO,CAAC;KACpB,CAAC,GACD,OAAO,CAAC,OAAO,CAAC;IAiCb,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAc/D,eAAe;CAqB9B"}

package/dist/backend/services/address-service.js

@@ -0,0 +1,120 @@
+import { DictionaryReferenceError, ERROR_CODES, dispatchValidatorMode, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { recordAuditFromContext } from '@endora-commerce/platform/commands';
+import { Address } from '../entities/address.entity.js';
+/**
+ * AddressService (T120).
+ *
+ * `setDefault` is atomic — it clears any prior `is_default=true` address of the
+ * same (organization, kind), then sets the new default, inside one transaction.
+ * The partial unique index on addresses prevents two defaults from coexisting
+ * even under concurrent callers.
+ */
+export class AddressService {
+    emFactory;
+    dictionaryValidator;
+    auditLog;
+    constructor(emFactory, dictionaryValidator, auditLog) {
+        this.emFactory = emFactory;
+        this.dictionaryValidator = dictionaryValidator;
+        this.auditLog = auditLog;
+    }
+    #audit(em, action, objectId, stateBefore, stateAfter) {
+        if (this.auditLog) {
+            recordAuditFromContext(this.auditLog, em, { action, objectType: 'address', objectId, stateBefore, stateAfter });
+        }
+    }
+    async list(organizationId, kind) {
+        const em = this.emFactory();
+        const where = { organizationId, deletedAt: null };
+        if (kind)
+            where['kind'] = kind;
+        return em.find(Address, where, { orderBy: { isDefault: 'desc', createdAt: 'asc' } });
+    }
+    async createAddress(organizationId, input) {
+        await this.validateCountry(input.country, 'create-or-change');
+        const em = this.emFactory();
+        return em.transactional(async (txEm) => {
+            if (input.isDefault) {
+                // Demote any existing default of the same kind.
+                await txEm.nativeUpdate(Address, { organizationId, kind: input.kind, isDefault: true, deletedAt: null }, { isDefault: false });
+            }
+            const address = txEm.create(Address, {
+                organizationId,
+                kind: input.kind,
+                recipientName: input.recipientName,
+                street: input.street,
+                city: input.city,
+                postalCode: input.postalCode,
+                country: input.country.toUpperCase(),
+                ...(input.phone ? { phone: input.phone } : {}),
+                isDefault: input.isDefault ?? false,
+            });
+            txEm.persist(address);
+            this.#audit(txEm, 'address.create', address.id, null, { organizationId, kind: address.kind });
+            await txEm.flush();
+            return address;
+        });
+    }
+    async updateAddress(organizationId, addressId, patch) {
+        const em = this.emFactory();
+        return em.transactional(async (txEm) => {
+            const address = await txEm.findOne(Address, { id: addressId, organizationId, deletedAt: null });
+            if (!address) {
+                throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Address not found.');
+            }
+            if (patch.isDefault === true && !address.isDefault) {
+                await txEm.nativeUpdate(Address, { organizationId, kind: address.kind, isDefault: true, deletedAt: null }, { isDefault: false });
+            }
+            if (patch.country !== undefined) {
+                await this.validateCountry(patch.country, dispatchValidatorMode(address.country, patch.country));
+            }
+            if (patch.recipientName !== undefined)
+                address.recipientName = patch.recipientName;
+            if (patch.street !== undefined)
+                address.street = patch.street;
+            if (patch.city !== undefined)
+                address.city = patch.city;
+            if (patch.postalCode !== undefined)
+                address.postalCode = patch.postalCode;
+            if (patch.country !== undefined)
+                address.country = patch.country.toUpperCase();
+            if (patch.phone !== undefined)
+                address.phone = patch.phone;
+            if (patch.isDefault !== undefined)
+                address.isDefault = patch.isDefault;
+            this.#audit(txEm, 'address.update', address.id, null, { organizationId, kind: address.kind });
+            await txEm.flush();
+            return address;
+        });
+    }
+    async deleteAddress(organizationId, addressId) {
+        const em = this.emFactory();
+        const address = await em.findOne(Address, { id: addressId, organizationId, deletedAt: null });
+        if (!address) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Address not found.');
+        }
+        // ADDRESS_IN_USE check lives with the orders module (US2 T142) — the Order
+        // entity there references addresses via snapshot, so a true "in-use" block
+        // must query the Orders table. For now we soft-delete.
+        address.deletedAt = new Date();
+        this.#audit(em, 'address.delete', address.id, { organizationId, kind: address.kind }, null);
+        await em.flush();
+    }
+    async validateCountry(country, mode) {
+        if (!this.dictionaryValidator)
+            return;
+        try {
+            await this.dictionaryValidator.validateCountryCode(country, mode);
+        }
+        catch (err) {
+            if (err instanceof DictionaryReferenceError) {
+                throw new HttpError(409, err.code, err.code === 'DICTIONARY_ENTRY_INACTIVE'
+                    ? `Country code ${err.entryCode} is no longer available for new entries.`
+                    : `Country code ${err.entryCode} is not recognised.`, [{ path: 'country', issue: err.code }]);
+            }
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=address-service.js.map

package/dist/backend/services/address-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address-service.js","sourceRoot":"","sources":["../../../src/backend/services/address-service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,EACxB,WAAW,EACX,qBAAqB,GAEtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IAEN;IACA;IACA;IAHnB,YACmB,SAA8B,EAC9B,mBAAyC,EACzC,QAAoB;QAFpB,cAAS,GAAT,SAAS,CAAqB;QAC9B,wBAAmB,GAAnB,mBAAmB,CAAsB;QACzC,aAAQ,GAAR,QAAQ,CAAY;IACpC,CAAC;IAEJ,MAAM,CAAC,EAAiB,EAAE,MAAc,EAAE,QAAgB,EAAE,WAA2C,EAAE,UAA0C;QACjJ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,cAAsB,EAAE,IAA6B;QAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAA4B,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC3E,IAAI,IAAI;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC/B,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,cAAsB,EACtB,KASC;QAED,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACrC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACpB,gDAAgD;gBAChD,MAAM,IAAI,CAAC,YAAY,CACrB,OAAO,EACP,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EACtE,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;gBACnC,cAAc;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE;gBACpC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK;aACpC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9F,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,cAAsB,EACtB,SAAiB,EACjB,KAQE;QAEF,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChG,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,YAAY,CACrB,OAAO,EACP,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EACxE,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,eAAe,CACxB,KAAK,CAAC,OAAO,EACb,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CACtD,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;gBAAE,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YACnF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACxD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;gBAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;YAC1E,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC/E,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAC3D,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;gBAAE,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9F,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,cAAsB,EAAE,SAAiB;QAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACxE,CAAC;QACD,2EAA2E;QAC3E,2EAA2E;QAC3E,uDAAuD;QACvD,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5F,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,OAAe,EACf,IAAsC;QAEtC,IAAI,CAAC,IAAI,CAAC,mBAAmB;YAAE,OAAO;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;gBAC5C,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,IAAI,KAAK,2BAA2B;oBACtC,CAAC,CAAC,gBAAgB,GAAG,CAAC,SAAS,0CAA0C;oBACzE,CAAC,CAAC,gBAAgB,GAAG,CAAC,SAAS,qBAAqB,EACtD,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CACvC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/manifest.d.ts

@@ -0,0 +1,169 @@
+/**
+ * Addresses module — manifest backfill (Module Lifecycle, feature 018).
+ *
+ * Predates the lifecycle system; this manifest is the static record
+ * required so the module participates in the registry. No install /
+ * uninstall hook today — the module's schema is owned by earlier
+ * platform-wide migrations.
+ */
+export declare const manifest: {
+    id: string;
+    name: string;
+    version: string;
+    dependencies: string[];
+    description?: string | undefined;
+    acknowledgedDependencies?: {
+        moduleId: string;
+        port: string;
+        reason: string;
+    }[] | undefined;
+    nonBindingDependencies?: {
+        moduleId: string;
+        name: string;
+        kind: "contributes-to" | "degrades-without" | "refuses-without";
+        reason: string;
+        whenAbsent?: string | undefined;
+    }[] | undefined;
+    activation?: {
+        settingCode: string;
+        default: boolean;
+    } | {
+        nonDeactivatable: true;
+        reason: string;
+    } | undefined;
+    settings?: {
+        moduleCode: string;
+        groups: {
+            code: string;
+            name: string;
+            salesChannelCodes?: string[] | undefined;
+            isSystemProtected?: boolean | undefined;
+        }[];
+        settings: {
+            code: string;
+            name: string;
+            valueType: "string" | "number" | "boolean" | "json" | "string_list" | "secret" | "credential_ref";
+            defaultValue: unknown;
+            description?: string | undefined;
+            groupCode?: string | undefined;
+            previousDefaultValues?: unknown[] | undefined;
+            salesChannelCodes?: string[] | undefined;
+            enumOptions?: string[] | undefined;
+            configurationType?: string | undefined;
+            hidden?: boolean | undefined;
+        }[];
+    } | undefined;
+    i18n?: {
+        bundlesDir: string;
+    } | undefined;
+    docs?: false | {
+        dir: string;
+    } | undefined;
+    demo?: false | {
+        summary: string;
+        seed: (context: import("@endora-commerce/contracts").ModuleDemoContext<never>) => Promise<import("@endora-commerce/contracts").DemoSeedResult>;
+        reset: (context: import("@endora-commerce/contracts").ModuleDemoContext<never>) => Promise<import("@endora-commerce/contracts").DemoResetResult>;
+        after?: readonly string[] | undefined;
+        package?: string | undefined;
+    } | undefined;
+    actions?: {
+        id: string;
+        labelKey: string;
+        icon: "Plus" | "Sparkles" | "Settings" | "Search" | "Boxes" | "Layers" | "Menu" | "PlusCircle" | "PlusSquare" | "FilePlus" | "FolderPlus" | "Upload" | "FileUp" | "CloudUpload" | "Download" | "FileDown" | "FileText" | "BookOpen" | "Rss" | "Package" | "Tag" | "ShoppingCart" | "Receipt" | "CreditCard" | "Users" | "UserPlus" | "Inbox" | "ListChecks" | "ClipboardList" | "Image" | "Video" | "LayoutDashboard" | "PanelLeft" | "KeyRound" | "ShieldCheck" | "Edit" | "Archive" | "Box" | "Truck" | "CircleDollarSign" | "Activity" | "LineChart" | "Smartphone" | "Webhook" | "Scale" | "PlugZap" | "PercentDiamond" | "Newspaper" | "Languages" | "Eraser" | "Warehouse" | "TrendingDown" | "Bell" | "PackageOpen" | "Building2" | "Store" | "ClipboardCheck";
+        targetRoute: string;
+        keywords: string[];
+        weight: number;
+        descriptionKey?: string | undefined;
+        requiredPermission?: string | undefined;
+    }[] | undefined;
+    permissions?: {
+        code: string;
+        label: string;
+        module?: string | undefined;
+        description?: string | undefined;
+        requires?: string[] | undefined;
+    }[] | undefined;
+    transactionalEmails?: {
+        code: string;
+        name: string;
+        variables: {
+            key: string;
+            label: string;
+            sampleValue?: string | undefined;
+            description?: string | undefined;
+        }[];
+        description?: string | undefined;
+        group?: string | undefined;
+    }[] | undefined;
+    capabilities?: string[] | undefined;
+    exclusiveCapabilities?: {
+        key: string;
+        errorCode: string;
+    }[] | undefined;
+    errorCodes?: {
+        code: string;
+        tokens?: string[] | undefined;
+    }[] | undefined;
+    blocks?: {
+        name: string;
+        labelKey: string;
+        category: string;
+        contexts: ("invoice" | "email" | "cms" | "newsletter")[];
+        fields: Record<string, {
+            type: "number" | "object" | "array" | "text" | "textarea" | "select" | "radio" | "external" | "uuid" | "richtext";
+            label?: string | undefined;
+            required?: boolean | undefined;
+            options?: {
+                label: string;
+                value: string | number;
+            }[] | undefined;
+            refKind?: string | undefined;
+        }>;
+        descriptionKey?: string | undefined;
+        defaultProps?: Record<string, unknown> | undefined;
+        responsiveFields?: string[] | undefined;
+        previewIcon?: string | undefined;
+        weight?: number | undefined;
+    }[] | undefined;
+    blockCategories?: {
+        key: string;
+        titleKey: string;
+        contexts: ("invoice" | "email" | "cms" | "newsletter")[];
+        weight?: number | undefined;
+        visible?: boolean | undefined;
+    }[] | undefined;
+    env?: {
+        name: string;
+        describes: {
+            en: string;
+            pl: string;
+        };
+        requirement: {
+            kind: "required";
+        } | {
+            kind: "requiredWhen";
+            input: string;
+            equals: string;
+        } | {
+            kind: "optional";
+            without: {
+                en: string;
+                pl: string;
+            };
+        };
+        secret: boolean;
+        generable: boolean;
+        owner: {
+            kind: "platform";
+        } | {
+            kind: "application";
+            application: "admin" | "backend" | "storefront";
+        } | {
+            kind: "module";
+            moduleId: string;
+        };
+        consumers: ("admin" | "backend" | "storefront")[];
+        addressOf: "admin" | "backend" | "storefront" | null;
+    }[] | undefined;
+};
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiFnB,CAAC"}

package/dist/manifest.js

@@ -0,0 +1,90 @@
+import { defineModuleManifest } from '@endora-commerce/contracts';
+/**
+ * Addresses module — manifest backfill (Module Lifecycle, feature 018).
+ *
+ * Predates the lifecycle system; this manifest is the static record
+ * required so the module participates in the registry. No install /
+ * uninstall hook today — the module's schema is owned by earlier
+ * platform-wide migrations.
+ */
+export const manifest = defineModuleManifest({
+    id: 'addresses',
+    name: 'Addresses',
+    description: 'Reusable address entities used by organizations, customers, and order fulfilment.',
+    version: '1.0.0',
+    // `addresses.organization_id` foreign-keys `organizations`. The edge was
+    // found by the FK-drift validator (feature 065) and is genuinely declarable:
+    // quick_order → addresses → organizations → settings stays acyclic.
+    //
+    // `dictionaries` added with the conversion (feature 072, T090): the one
+    // `AddressService` resolves `dictionaryValidator` to check country and region
+    // codes, so the edge is real and was previously invisible to the lifecycle.
+    dependencies: ['dictionaries', 'organizations'],
+    // Feature 074 (Constitution XVII), test C2 — functional base. The flag was
+    // previously carried by a port edge: `organizations` resolves this module's
+    // `addressService`, and that reached this manifest through the other one's
+    // declaration. Ruling 2 withdraws that authority — a module a criterion
+    // module happens to resolve is not thereby core — so the ground here is now
+    // this module's own. Every B2B document is addressed: an order ships
+    // somewhere, an invoice is billed somewhere, a shipment has a destination.
+    // A platform that cannot record where is not a smaller commerce platform,
+    // it is one that cannot complete a transaction.
+    activation: {
+        nonDeactivatable: true,
+        reason: 'Every B2B document — order, invoice, shipment — is addressed; there is no transaction ' +
+            'without one.',
+    },
+    /**
+     * This module's first i18n bundle — D-129's remaining sweep, MR 5.
+     *
+     * It exists because a **declaring** module that contributes no bundle file is
+     * `check:error-translations` exit 2 for the whole tree rather than a finding
+     * (`specs/090-module-owned-error-codes/contracts/error-translation-population.md`
+     * §2.1, §2.3; `d129-sweep.md` §3.4). The bundle lives at the **package
+     * root**, not under `dist`: `manifest-locations.ts` resolves a packaged
+     * module's `manifestPath` to its `package.json`, so `dirname` is the package
+     * directory. The files are a **flat** `{"a.b.c": "text"}` map, because a
+     * nested object fails `TranslationBundleEntriesSchema` and the boot
+     * reconciler logs and skips it — silently.
+     */
+    i18n: { bundlesDir: 'i18n' },
+    docs: { dir: 'docs' },
+    /**
+     * The two `ADDRESS_*` codes — D-129's remaining sweep, Tier B
+     * (`specs/090-module-owned-error-codes/d129-sweep.md` §5.2, Appendix A;
+     * MR 5).
+     *
+     * Both were declared by `_i18n` until this merge request, not because anybody
+     * judged them the platform's but because the deleted prefix chain had no rule
+     * for them and its last line was `return 'core'`. **D-121 T1 puts them
+     * here**: the noun in both is an address, which is this module's entity, and
+     * both refusals are about that row — who owns it, and whether anything still
+     * points at it.
+     *
+     * `ADDRESS_NOT_OWNED` is the sweep's cleanest disagreement between the noun
+     * and the raise-site count: `orders` is the only module that raises it, and it
+     * does so having asked this module's read port for the address and got
+     * nothing back. That is the caller reporting the absence of the owner's row —
+     * D-95.2's `INVOICE_NOT_READY` shape — and T1 does not ask who throws.
+     * `ADDRESS_IN_USE` is raised by nothing at all, which T1 also does not ask
+     * about (T10).
+     *
+     * **One of the two arrives with a sentence.** Each carried a placeholder in
+     * `_i18n`'s bundle — `"Address Not Owned."` / `"Błąd: address not owned."` —
+     * which D-186 §2 deletes rather than carries, because in this module's own
+     * bundle it would read as this module's answer. §5.4 keeps writing the prose
+     * available and is not a re-opening of that ruling, so the decision was taken
+     * per code: `ADDRESS_NOT_OWNED` is written, because a buyer meets it at
+     * checkout and the refusal has one remedy to offer; `ADDRESS_IN_USE` is
+     * deleted and joins `UNTRANSLATED_ERROR_CODES` under this module, because
+     * with no raise site there is no refusal to describe and a sentence could
+     * only be invented from the code's own name.
+     *
+     * **`tokens` is derived from the raise sites, not from the bundle**
+     * (runbook §5), and there are none: the one raise is a bare
+     * `HttpError(403, code, message)` with no `details` argument, measured by
+     * balanced-paren extraction of the call's own arguments.
+     */
+    errorCodes: [{ code: 'ADDRESS_IN_USE' }, { code: 'ADDRESS_NOT_OWNED' }],
+});
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;IAC3C,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,WAAW;IACjB,WAAW,EACT,mFAAmF;IACrF,OAAO,EAAE,OAAO;IAChB,yEAAyE;IACzE,6EAA6E;IAC7E,oEAAoE;IACpE,EAAE;IACF,wEAAwE;IACxE,8EAA8E;IAC9E,4EAA4E;IAC5E,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;IAC/C,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,4EAA4E;IAC5E,qEAAqE;IACrE,2EAA2E;IAC3E,0EAA0E;IAC1E,gDAAgD;IAChD,UAAU,EAAE;QACV,gBAAgB,EAAE,IAAI;QACtB,MAAM,EACJ,wFAAwF;YACxF,cAAc;KACjB;IACD;;;;;;;;;;;;OAYG;IACH,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;IAC5B,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;IACrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;CACxE,CAAC,CAAC"}

package/docs/addresses.md

@@ -0,0 +1,31 @@
+---
+title: addresses
+description: Customer postal addresses with default-per-kind invariant
+---
+
+# `addresses`
+
+Customer postal addresses scoped to an Organization. Each address has a
+`kind` (`shipping`, `billing`, `delivery`) and a per-kind default flag.
+
+## Public surface
+
+| Verb + Path | Purpose |
+| --- | --- |
+| `GET /api/v1/organizations/mine/addresses` | List own Organization's addresses |
+| `POST /api/v1/organizations/mine/addresses` | Create; `isDefault=true` atomically demotes the previous default of the same kind |
+| `PATCH /api/v1/organizations/mine/addresses/:id` | Update |
+| `DELETE /api/v1/organizations/mine/addresses/:id` | Delete (rejected if referenced by an order via `409 ADDRESS_IN_USE`) |
+
+## Entities
+
+`Address` — partial unique index `(organization_id, kind) WHERE
+is_default = true` enforces "at most one default per kind" at the DB level.
+
+## Extension points
+
+- **Country-specific validation** — `address-service.ts#createAddress`
+  delegates per-country format checks; add validators here when new markets
+  go live.
+- **Snapshot on order** — Orders embed an `AddressSnapshot` value object so
+  later edits to the source address don't mutate historical orders.

package/i18n/en.json

@@ -0,0 +1,3 @@
+{
+  "errors.ADDRESS_NOT_OWNED": "That address does not belong to your organization. Choose one of your organization's saved addresses, or add a new one."
+}

package/i18n/pl.json

@@ -0,0 +1,3 @@
+{
+  "errors.ADDRESS_NOT_OWNED": "Ten adres nie należy do Twojej organizacji. Wybierz jeden z zapisanych adresów organizacji albo dodaj nowy."
+}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@endora-commerce/mod-addresses",
+  "version": "0.100.0",
+  "type": "module",
+  "sideEffects": false,
+  "description": "Reusable address entities used by organizations, customers, and order fulfilment.",
+  "license": "MIT",
+  "endora": {
+    "type": "module",
+    "id": "addresses"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/endora-commerce/endora-commerce.git",
+    "directory": "packages/modules/addresses"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/manifest.d.ts",
+      "default": "./dist/manifest.js"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.ts",
+      "default": "./dist/backend/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "i18n",
+    "docs"
+  ],
+  "engines": {
+    "node": ">=22.18.0"
+  },
+  "peerDependencies": {
+    "@mikro-orm/core": "^6",
+    "@mikro-orm/postgresql": "^6",
+    "@endora-commerce/contracts": "0.100.0",
+    "@endora-commerce/platform": "0.100.0"
+  },
+  "devDependencies": {
+    "@mikro-orm/core": "^6.6.13",
+    "@mikro-orm/postgresql": "^6.6.13",
+    "@types/node": "^22.9.0",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.11",
+    "@endora-commerce/contracts": "0.100.0",
+    "@endora-commerce/platform": "0.100.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json",
+    "lint": "eslint src",
+    "test": "vitest run"
+  }
+}