@endora-commerce/mod-blog 0.100.0

package/dist/backend/services/blog-tag-service.js

@@ -0,0 +1,198 @@
+import { randomUUID } from 'crypto';
+import { ERROR_CODES, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+/**
+ * BlogTagService — feature 016 / T065.
+ *
+ * CRUD over `blog_tags` with global `code` uniqueness (R14) and block-
+ * on-delete (FR-018): deletion is refused with 409 BLOG_TAG_IN_USE
+ * (listing the first 25 referencing posts) when at least one
+ * `blog_post_tags` row references the tag.
+ *
+ * Tag → Post attachment (`replaceForPost`) is owned by `BlogPostService`
+ * already (`setTags` keeps the ordered list per Post + bumps the post's
+ * version); this service exposes `getInboundReferences` to drive the
+ * admin's confirmation dialog before the operator commits a delete.
+ */
+export class BlogTagService {
+    emFactory;
+    cache;
+    constructor(emFactory, cache) {
+        this.emFactory = emFactory;
+        this.cache = cache;
+    }
+    async list(filters) {
+        const page = Math.max(1, filters.page ?? 1);
+        const perPage = Math.min(100, Math.max(1, filters.perPage ?? 50));
+        const em = this.emFactory();
+        const where = ['deleted_at is null'];
+        const params = [];
+        if (filters.q) {
+            where.push(`(name::text ilike ? or code ilike ?)`);
+            params.push(`%${filters.q}%`, `%${filters.q}%`);
+        }
+        const whereSql = `where ${where.join(' and ')}`;
+        const totalRows = (await em.execute(`select count(*)::int as n from blog_tags ${whereSql}`, params));
+        const totalItems = totalRows[0]?.n ?? 0;
+        const offset = (page - 1) * perPage;
+        const rows = (await em.execute(`select * from blog_tags ${whereSql}
+        order by code asc
+        limit ${perPage} offset ${offset}`, params));
+        return {
+            data: rows.map((r) => this.toDetail(r)),
+            pagination: {
+                page,
+                perPage,
+                totalPages: Math.max(1, Math.ceil(totalItems / perPage)),
+                totalItems,
+            },
+        };
+    }
+    async getById(id) {
+        const row = await this.findRow(this.emFactory(), id);
+        if (!row) {
+            throw new HttpError(404, ERROR_CODES.BLOG_TAG_NOT_FOUND, 'Blog tag not found.');
+        }
+        return this.toDetail(row);
+    }
+    async create(input) {
+        const em = this.emFactory();
+        const id = randomUUID();
+        const now = new Date();
+        return em.transactional(async (tx) => {
+            // Probe for friendly 409 before the partial-unique index fires.
+            await this.assertCodeAvailable(tx, input.code);
+            await tx.execute(`insert into blog_tags (id, name, description, code, version, created_at, updated_at)
+           values (?, ?::jsonb, ?::jsonb, ?, 1, ?, ?)`, [
+                id,
+                JSON.stringify(input.name),
+                input.description ? JSON.stringify(input.description) : null,
+                input.code,
+                now,
+                now,
+            ]);
+            const row = await this.findRow(tx, id);
+            return this.toDetail(row);
+        });
+    }
+    async patch(id, input) {
+        const em = this.emFactory();
+        return em.transactional(async (tx) => {
+            const existing = await this.findRow(tx, id);
+            if (!existing) {
+                throw new HttpError(404, ERROR_CODES.BLOG_TAG_NOT_FOUND, 'Blog tag not found.');
+            }
+            this.assertVersion(existing.version, input.version);
+            const codeChange = input.code !== undefined && input.code !== existing.code;
+            if (codeChange) {
+                await this.assertCodeAvailable(tx, input.code, id);
+            }
+            const sets = ['version = version + 1', 'updated_at = now()'];
+            const params = [];
+            if (input.name !== undefined) {
+                sets.push('name = ?::jsonb');
+                params.push(JSON.stringify(input.name));
+            }
+            if (input.description !== undefined) {
+                sets.push('description = ?::jsonb');
+                params.push(input.description ? JSON.stringify(input.description) : null);
+            }
+            if (input.code !== undefined) {
+                sets.push('code = ?');
+                params.push(input.code);
+            }
+            params.push(id);
+            await tx.execute(`update blog_tags set ${sets.join(', ')} where id = ?`, params);
+            const row = await this.findRow(tx, id);
+            const detail = this.toDetail(row);
+            // Tag rename ⇒ blow the storefront cache (URLs change).
+            if (codeChange && this.cache)
+                await this.cache.invalidateAll();
+            return detail;
+        });
+    }
+    async softDelete(id, version) {
+        const em = this.emFactory();
+        return em.transactional(async (tx) => {
+            const existing = await this.findRow(tx, id);
+            if (!existing) {
+                throw new HttpError(404, ERROR_CODES.BLOG_TAG_NOT_FOUND, 'Blog tag not found.');
+            }
+            this.assertVersion(existing.version, version);
+            const refRows = (await tx.execute(`select count(*)::int as n from blog_post_tags where blog_tag_id = ?`, [id]));
+            if ((refRows[0]?.n ?? 0) > 0) {
+                // Build a useful details list (first 25 referencing posts).
+                const posts = (await tx.execute(`select p.id::text as id, p.name, p.slug
+             from blog_post_tags pt
+             join blog_posts p on p.id = pt.blog_post_id and p.deleted_at is null
+            where pt.blog_tag_id = ?
+            order by p.slug
+            limit 25`, [id]));
+                throw new HttpError(409, ERROR_CODES.BLOG_TAG_IN_USE, 'Tag is attached to one or more posts; detach it before deletion.', posts.map((p) => ({
+                    path: 'tagId',
+                    issue: `attached to post id=${p.id} slug=${p.slug}`,
+                })));
+            }
+            await tx.execute(`update blog_tags set deleted_at = now(), updated_at = now() where id = ?`, [id]);
+            if (this.cache)
+                await this.cache.invalidateAll();
+        });
+    }
+    async getInboundReferences(id) {
+        const em = this.emFactory();
+        const totalRows = (await em.execute(`select count(*)::int as n from blog_post_tags where blog_tag_id = ?`, [id]));
+        const totalPosts = totalRows[0]?.n ?? 0;
+        const rows = (await em.execute(`select p.id::text as id, p.name, p.slug
+         from blog_post_tags pt
+         join blog_posts p on p.id = pt.blog_post_id and p.deleted_at is null
+        where pt.blog_tag_id = ?
+        order by p.slug
+        limit 25`, [id]));
+        const posts = rows.map((r) => ({
+            id: r.id,
+            name: r.name,
+            slug: r.slug,
+        }));
+        return { posts, totalPosts };
+    }
+    // ────────────────────────────────────────────────────────────────────
+    // Internals
+    // ────────────────────────────────────────────────────────────────────
+    async findRow(em, id) {
+        const rows = (await em.execute(`select * from blog_tags where id = ? and deleted_at is null limit 1`, [id]));
+        return rows[0] ?? null;
+    }
+    async assertCodeAvailable(em, code, excludeId) {
+        const args = [code];
+        let sql = `select 1 from blog_tags where code = ? and deleted_at is null`;
+        if (excludeId) {
+            sql += ` and id <> ?`;
+            args.push(excludeId);
+        }
+        sql += ` limit 1`;
+        const rows = (await em.execute(sql, args));
+        if (rows.length > 0) {
+            throw new HttpError(409, ERROR_CODES.BLOG_TAG_CODE_TAKEN, `A blog tag with code "${code}" already exists.`);
+        }
+    }
+    assertVersion(have, sent) {
+        if (sent !== undefined && sent !== have) {
+            throw new HttpError(409, ERROR_CODES.VERSION_CONFLICT, `Blog tag was updated concurrently (have v${have}, request v${sent}).`);
+        }
+    }
+    toDetail(row) {
+        return {
+            id: row.id,
+            name: row.name,
+            description: row.description,
+            code: row.code,
+            version: row.version,
+            createdAt: this.toIso(row.created_at),
+            updatedAt: this.toIso(row.updated_at),
+        };
+    }
+    toIso(value) {
+        return value instanceof Date ? value.toISOString() : new Date(value).toISOString();
+    }
+}
+//# sourceMappingURL=blog-tag-service.js.map

package/dist/backend/services/blog-tag-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blog-tag-service.js","sourceRoot":"","sources":["../../../src/backend/services/blog-tag-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,OAAO,EACL,WAAW,GAMZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAa3D;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,cAAc;IAEN;IACA;IAFnB,YACmB,SAA8B,EAC9B,KAAwB;QADxB,cAAS,GAAT,SAAS,CAAqB;QAC9B,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,OAIV;QAIC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,MAAM,KAAK,GAAa,CAAC,oBAAoB,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAEhD,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CACjC,4CAA4C,QAAQ,EAAE,EACtD,MAAM,CACP,CAAyB,CAAC;QAC3B,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAExC,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC;QACpC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B,2BAA2B,QAAQ;;gBAEzB,OAAO,WAAW,MAAM,EAAE,EACpC,MAAM,CACP,CAAa,CAAC;QAEf,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvC,UAAU,EAAE;gBACV,IAAI;gBACJ,OAAO;gBACP,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,CAAC;gBACxD,UAAU;aACX;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA2B;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACnC,gEAAgE;YAChE,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,EAAE,CAAC,OAAO,CACd;sDAC8C,EAC9C;gBACE,EAAE;gBACF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC1B,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC5D,KAAK,CAAC,IAAI;gBACV,GAAG;gBACH,GAAG;aACJ,CACF,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,KAA0B;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;YAClF,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAEpD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;YAC5E,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,IAAK,EAAE,EAAE,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,IAAI,GAAa,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,CAAC;YACvE,MAAM,MAAM,GAAc,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChB,MAAM,EAAE,CAAC,OAAO,CACd,wBAAwB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EACtD,MAAM,CACP,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAI,CAAC,CAAC;YACnC,wDAAwD;YACxD,IAAI,UAAU,IAAI,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAC/D,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,OAA2B;QACtD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;YAClF,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE9C,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC/B,qEAAqE,EACrE,CAAC,EAAE,CAAC,CACL,CAAyB,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,4DAA4D;gBAC5D,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC7B;;;;;qBAKW,EACX,CAAC,EAAE,CAAC,CACL,CAAsE,CAAC;gBACxE,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,eAAe,EAC3B,kEAAkE,EAClE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAChB,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,uBAAuB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE;iBACpD,CAAC,CAAC,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,CAAC,OAAO,CACd,0EAA0E,EAC1E,CAAC,EAAE,CAAC,CACL,CAAC;YACF,IAAI,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,EAAU;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CACjC,qEAAqE,EACrE,CAAC,EAAE,CAAC,CACL,CAAyB,CAAC;QAC3B,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B;;;;;iBAKW,EACX,CAAC,EAAE,CAAC,CACL,CAAsE,CAAC;QACxE,MAAM,KAAK,GAA+B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC/B,CAAC;IAED,uEAAuE;IACvE,YAAY;IACZ,uEAAuE;IAE/D,KAAK,CAAC,OAAO,CAAC,EAAiB,EAAE,EAAU;QACjD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B,qEAAqE,EACrE,CAAC,EAAE,CAAC,CACL,CAAa,CAAC;QACf,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,EAAiB,EACjB,IAAY,EACZ,SAAkB;QAElB,MAAM,IAAI,GAAc,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG,GAAG,+DAA+D,CAAC;QAC1E,IAAI,SAAS,EAAE,CAAC;YACd,GAAG,IAAI,cAAc,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC;QACD,GAAG,IAAI,UAAU,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAmB,CAAC;QAC7D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,mBAAmB,EAC/B,yBAAyB,IAAI,mBAAmB,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,IAAY,EAAE,IAAwB;QAC1D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,gBAAgB,EAC5B,4CAA4C,IAAI,cAAc,IAAI,IAAI,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,GAAW;QAC1B,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;SACtC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,KAAoB;QAChC,OAAO,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrF,CAAC;CACF"}

package/dist/backend/services/seed-default-category.d.ts

@@ -0,0 +1,25 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+/**
+ * SeedDefaultCategory — feature 016 / R11.
+ *
+ * Idempotent boot reconciler. On first run, creates a single
+ * `is_system = true` Category named "Default" (slug: 'default') and
+ * attaches it to every existing Sales Channel. On subsequent runs, when
+ * a system row already exists, the reconciler **does nothing** — admin
+ * edits to name / slug / scope / description / image / metadata are
+ * preserved (FR-004).
+ *
+ * Newly added Sales Channels do NOT get auto-attached to `Default` —
+ * the admin attaches them explicitly through the Categories editor. This
+ * matches the spec's R11 decision and avoids re-attaching a channel an
+ * admin has intentionally detached.
+ *
+ * The reconciler runs all reads + writes through the caller's single
+ * EntityManager so its behaviour is consistent across MikroORM transaction
+ * boundaries (tests + production share the same path).
+ */
+export declare function seedDefaultCategory(emFactory: () => EntityManager): Promise<{
+    categoryId: string;
+    created: boolean;
+}>;
+//# sourceMappingURL=seed-default-category.d.ts.map

package/dist/backend/services/seed-default-category.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-default-category.d.ts","sourceRoot":"","sources":["../../../src/backend/services/seed-default-category.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI3D;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,aAAa,GAC7B,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAsCnD"}

package/dist/backend/services/seed-default-category.js

@@ -0,0 +1,48 @@
+import { SalesChannel } from '@endora-commerce/platform/kernel';
+import { randomUUID } from 'crypto';
+/**
+ * SeedDefaultCategory — feature 016 / R11.
+ *
+ * Idempotent boot reconciler. On first run, creates a single
+ * `is_system = true` Category named "Default" (slug: 'default') and
+ * attaches it to every existing Sales Channel. On subsequent runs, when
+ * a system row already exists, the reconciler **does nothing** — admin
+ * edits to name / slug / scope / description / image / metadata are
+ * preserved (FR-004).
+ *
+ * Newly added Sales Channels do NOT get auto-attached to `Default` —
+ * the admin attaches them explicitly through the Categories editor. This
+ * matches the spec's R11 decision and avoids re-attaching a channel an
+ * admin has intentionally detached.
+ *
+ * The reconciler runs all reads + writes through the caller's single
+ * EntityManager so its behaviour is consistent across MikroORM transaction
+ * boundaries (tests + production share the same path).
+ */
+export async function seedDefaultCategory(emFactory) {
+    const em = emFactory();
+    const existingRows = (await em.execute('select id::text as id from blog_categories where is_system = true and deleted_at is null limit 1'));
+    if (existingRows.length > 0) {
+        return { categoryId: existingRows[0].id, created: false };
+    }
+    const categoryId = randomUUID();
+    await em.execute(`insert into blog_categories
+       (id, slug, name, enabled, is_system, position, version, created_at, updated_at)
+       values
+       (?, 'default', '{"en-US":"Default"}'::jsonb, true, true, 0, 1, now(), now())`, [categoryId]);
+    /**
+     * The kernel's own entity, not `select id from sales_channels` (feature 075,
+     * D-87). `sales_channels` is the kernel's table since feature 072 moved the
+     * resolution machinery there, and a module relating into the kernel by ORM is
+     * the sanctioned access. It reads through the same `em` as the inserts below,
+     * so the enumeration and the bindings still share one connection.
+     */
+    const channels = await em.find(SalesChannel, {}, { fields: ['id'] });
+    for (const channel of channels) {
+        await em.execute(`insert into blog_category_sales_channels
+         (blog_category_id, sales_channel_id, slug)
+         values (?, ?, 'default')`, [categoryId, channel.id]);
+    }
+    return { categoryId, created: true };
+}
+//# sourceMappingURL=seed-default-category.js.map

package/dist/backend/services/seed-default-category.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-default-category.js","sourceRoot":"","sources":["../../../src/backend/services/seed-default-category.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAA8B;IAE9B,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAEvB,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CACpC,kGAAkG,CACnG,CAA0B,CAAC;IAC5B,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,MAAM,EAAE,CAAC,OAAO,CACd;;;oFAGgF,EAChF,CAAC,UAAU,CAAC,CACb,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAErE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,EAAE,CAAC,OAAO,CACd;;kCAE4B,EAC5B,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CACzB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC"}

package/dist/backend/services/seed-roles.d.ts

@@ -0,0 +1,41 @@
+import type { AdminRolePort, SystemRoleCodePort } from '@endora-commerce/contracts';
+/**
+ * SeedBlogRoles — feature 016 / R8 / T025.
+ *
+ * Idempotent boot reconciler. Upserts two seeded admin roles:
+ *
+ *   blog_manager     ['blog.read', 'blog.write']
+ *   content_manager  ['blog.read', 'blog.write', 'cms.read', 'cms.write']
+ *
+ * On rerun, the reconciler keeps the admin-edited `name` field intact
+ * (FR-025 idempotency) and only refreshes the canonical permission array
+ * if it has drifted from the documented set. This mirrors feature 014's
+ * Hooks-seeder pattern.
+ *
+ * **Both rows are written through `adminRolePort`** since feature 075 drained
+ * `blog`'s cross-module-import shard. Until then this file selected, inserted
+ * and updated the `admin_roles` table in raw SQL — a boundary that compiled and
+ * returned rows, because a statement in a string names no import specifier, and
+ * the one entry the shard carried. Two things follow from the port that the SQL
+ * did not give us: the seeded rows now carry an audit entry like every other
+ * role write (Constitution XIII), and their permission codes are validated
+ * against the platform's catalogue rather than trusted.
+ *
+ * `upsertByCode` assigns `name` from its input unconditionally, so preserving
+ * an operator's rename is this seeder's job and is done the only way the port's
+ * shape allows: read the row first, and hand its current name straight back on
+ * the refresh. A blind upsert here would silently rename "Bloger" to
+ * "Blog Manager" at every boot.
+ */
+export declare const BLOG_ROLE_CODES: {
+    readonly BLOG_MANAGER: "blog_manager";
+    readonly CONTENT_MANAGER: "content_manager";
+};
+export interface BlogRoleSeedResult {
+    code: string;
+    id: string;
+    created: boolean;
+    permissionsRefreshed: boolean;
+}
+export declare function seedBlogRoles(adminRoles: AdminRolePort, systemRoleCodes: SystemRoleCodePort): Promise<BlogRoleSeedResult[]>;
+//# sourceMappingURL=seed-roles.d.ts.map

package/dist/backend/services/seed-roles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-roles.d.ts","sourceRoot":"","sources":["../../../src/backend/services/seed-roles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,eAAO,MAAM,eAAe;;;CAGlB,CAAC;AAmBX,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAQD,wBAAsB,aAAa,CACjC,UAAU,EAAE,aAAa,EACzB,eAAe,EAAE,kBAAkB,GAClC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAoD/B"}

package/dist/backend/services/seed-roles.js

@@ -0,0 +1,98 @@
+/**
+ * SeedBlogRoles — feature 016 / R8 / T025.
+ *
+ * Idempotent boot reconciler. Upserts two seeded admin roles:
+ *
+ *   blog_manager     ['blog.read', 'blog.write']
+ *   content_manager  ['blog.read', 'blog.write', 'cms.read', 'cms.write']
+ *
+ * On rerun, the reconciler keeps the admin-edited `name` field intact
+ * (FR-025 idempotency) and only refreshes the canonical permission array
+ * if it has drifted from the documented set. This mirrors feature 014's
+ * Hooks-seeder pattern.
+ *
+ * **Both rows are written through `adminRolePort`** since feature 075 drained
+ * `blog`'s cross-module-import shard. Until then this file selected, inserted
+ * and updated the `admin_roles` table in raw SQL — a boundary that compiled and
+ * returned rows, because a statement in a string names no import specifier, and
+ * the one entry the shard carried. Two things follow from the port that the SQL
+ * did not give us: the seeded rows now carry an audit entry like every other
+ * role write (Constitution XIII), and their permission codes are validated
+ * against the platform's catalogue rather than trusted.
+ *
+ * `upsertByCode` assigns `name` from its input unconditionally, so preserving
+ * an operator's rename is this seeder's job and is done the only way the port's
+ * shape allows: read the row first, and hand its current name straight back on
+ * the refresh. A blind upsert here would silently rename "Bloger" to
+ * "Blog Manager" at every boot.
+ */
+export const BLOG_ROLE_CODES = {
+    BLOG_MANAGER: 'blog_manager',
+    CONTENT_MANAGER: 'content_manager',
+};
+const SEED_DEFINITIONS = [
+    {
+        code: BLOG_ROLE_CODES.BLOG_MANAGER,
+        defaultName: 'Blog Manager',
+        permissions: ['blog.read', 'blog.write'],
+    },
+    {
+        code: BLOG_ROLE_CODES.CONTENT_MANAGER,
+        defaultName: 'Content Manager',
+        permissions: ['blog.read', 'blog.write', 'cms.read', 'cms.write'],
+    },
+];
+function hasDrifted(want, have) {
+    const wanted = [...want].sort();
+    const held = [...have].sort();
+    return wanted.length !== held.length || wanted.some((code, i) => code !== held[i]);
+}
+export async function seedBlogRoles(adminRoles, systemRoleCodes) {
+    // Register the seeded codes as system-protected up-front. Idempotent,
+    // and the registration must happen even when the rows already exist
+    // (a fresh process boot starts with an empty in-memory registry).
+    //
+    // Through `systemRoleCodePort` since feature 075's Phase C, where this used
+    // to import `admin_roles`' module-level `registerSystemRoleCode`. The seam is
+    // the same one and its classification is unchanged: a contribution into an
+    // ungated registry, so a `blog` that is off registers nothing and its seeded
+    // roles are simply not protected — which is the right answer, because a
+    // module that is not there has no seeded role to protect.
+    for (const def of SEED_DEFINITIONS) {
+        systemRoleCodes.register(def.code);
+    }
+    const results = [];
+    for (const def of SEED_DEFINITIONS) {
+        const existing = await adminRoles.findByCode(def.code);
+        if (existing === null) {
+            const created = await adminRoles.upsertByCode({
+                code: def.code,
+                name: def.defaultName,
+                permissions: def.permissions,
+                requiresTwoFactor: false,
+            });
+            results.push({ code: def.code, id: created.id, created: true, permissionsRefreshed: false });
+            continue;
+        }
+        const drifted = hasDrifted(def.permissions, existing.permissions);
+        if (drifted) {
+            await adminRoles.upsertByCode({
+                code: def.code,
+                // The operator's own name and two-factor choice, handed back
+                // unchanged: this call exists to correct the permission array and
+                // nothing else.
+                name: existing.name,
+                permissions: def.permissions,
+                requiresTwoFactor: existing.requiresTwoFactor,
+            });
+        }
+        results.push({
+            code: def.code,
+            id: existing.id,
+            created: false,
+            permissionsRefreshed: drifted,
+        });
+    }
+    return results;
+}
+//# sourceMappingURL=seed-roles.js.map

package/dist/backend/services/seed-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-roles.js","sourceRoot":"","sources":["../../../src/backend/services/seed-roles.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,YAAY,EAAE,cAAc;IAC5B,eAAe,EAAE,iBAAiB;CAC1B,CAAC;AAEX,MAAM,gBAAgB,GAIjB;IACH;QACE,IAAI,EAAE,eAAe,CAAC,YAAY;QAClC,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;KACzC;IACD;QACE,IAAI,EAAE,eAAe,CAAC,eAAe;QACrC,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC;KAClE;CACF,CAAC;AASF,SAAS,UAAU,CAAC,IAAuB,EAAE,IAAuB;IAClE,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAyB,EACzB,eAAmC;IAEnC,sEAAsE;IACtE,oEAAoE;IACpE,kEAAkE;IAClE,EAAE;IACF,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,wEAAwE;IACxE,0DAA0D;IAC1D,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,OAAO,GAAyB,EAAE,CAAC;IAEzC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEvD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC;gBAC5C,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,WAAW;gBACrB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,iBAAiB,EAAE,KAAK;aACzB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7F,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAClE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,UAAU,CAAC,YAAY,CAAC;gBAC5B,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,6DAA6D;gBAC7D,kEAAkE;gBAClE,gBAAgB;gBAChB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;aAC9C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,OAAO,EAAE,KAAK;YACd,oBAAoB,EAAE,OAAO;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}