@endora-commerce/mod-carts 0.100.0

package/docs/carts.md

@@ -0,0 +1,232 @@
+---
+title: carts
+description: Customer shopping cart with anonymous→logged-in merge
+---
+
+# `carts`
+
+Anonymous and customer-bound shopping carts. An anonymous cart is identified
+by a long-lived cookie token; on login it merges into the Customer's cart
+deterministically.
+
+The carts consolidation of May 2026 extended the foundation cart
+module with a full lifecycle (`active` / `abandoned` / `completed` /
+`rejected`), an orthogonal approval sub-state, sales-channel scoping,
+last-activity bookkeeping, coupon application against the Promotions module,
+up-sell suggestions, three conversions (Cart ↔ Quote Request, Shopping List
+→ Cart), Organization-Administrator visibility + approval gate, an
+abandonment sweep, and a platform-admin observability surface.
+
+## Lifecycle
+
+```text
+                ┌──────────────────────────────────────────────────────┐
+                │                                                      │
+[ active / not_required ] ──(qty/add/remove/coupon)──┐                 │
+        │                                            ▼                 │
+        │                                  [ active / pending ]        │
+        │                                            │                 │
+        │                                            ├──(org-admin     │
+        │                                            │   approve)──▶   │
+        │                                            │  [ active /     │
+        │                                            │   approved ]    │
+        │                                            │     │           │
+        │                                            ▼     ▼           │
+        │  (org-admin reject)                  [ rejected / rejected_by_org_admin ]
+        │
+        ▼
+[ abandoned ] ◀──(sweep: last_activity_at < threshold)── [ active / * ]
+        │                                                      ▲
+        │                                                      │
+        └────────────────(any buyer activity)──────────────────┘
+
+[ active / approved ]    ──(checkout success)──▶ [ completed / approved ]
+[ active / * ]           ──(Cart→QR conversion)─▶ [ completed / *; converted_to_quote_request_id set ]
+```
+
+Re-arm rule: any buyer-driven mutation (add/remove/quantity/coupon) on an
+`approved` cart silently drops `approval_status` back to `pending`.
+
+Self-approval exemption: a cart created by an Organization Administrator
+is born with `approval_status='not_required'` regardless of the per-Org
+policy flag.
+
+## Public surface
+
+### Storefront (buyer)
+
+| Verb + Path | Purpose |
+| --- | --- |
+| `GET /api/v1/cart` | Active cart (lazy-create); the payload includes `status`, `approvalStatus`, `salesChannelId`, `grandTotal`, `discount`, `primaryCta`, `droppedLines`, `couponDroppedThisRead`, `lastActivityAt` |
+| `POST /api/v1/cart/items` | Add line item (200-line cap enforced) |
+| `PATCH /api/v1/cart/items/:itemId` | Update quantity (accepts `0` to delete) |
+| `DELETE /api/v1/cart/items/:itemId` | Remove line |
+| `POST /api/v1/cart/items/:itemId/save-to-shopping-list` | Push line to a Purchase List |
+| `POST /api/v1/cart/touch` | Explicit page-open ping; bumps `last_activity_at` and reactivates an abandoned cart |
+| `GET /api/v1/cart/upsells?limit=N` | Up-sell strip from Catalog `product_links` (kind = `up_sell`) |
+| `POST /api/v1/cart/coupon` | Apply (or replace, or clear) the active coupon code; 422 `CART_COUPON_REJECTED` with reason on rejection |
+| `DELETE /api/v1/cart/coupon` | Alias for `POST {code: null}` |
+| `POST /api/v1/cart/convert-to-quote-request` | Cart → Quote Request; source cart becomes `completed` with `converted_to_quote_request_id` set |
+| `POST /api/v1/cart/from-quote-request/:qrId` | Quote Request → Cart; lines re-priced from the customer's current price list |
+| `POST /api/v1/cart/from-shopping-list/:listId` | Shopping List → Cart; lines re-priced |
+
+### Storefront (Organization Administrator)
+
+| Verb + Path | Purpose |
+| --- | --- |
+| `GET /api/v1/organization/carts` | List every cart in the caller's Organization |
+| `GET /api/v1/organization/carts/:id` | Detail (member-owned cart) |
+| `PATCH /api/v1/organization/policies/cart-approval` | Toggle `requires_cart_approval` for the Organization |
+| `POST /api/v1/cart/submit-for-approval` | Buyer submits cart for Org-Admin approval (no-op when policy off; refused for Org-Admins themselves) |
+| `POST /api/v1/organization/carts/:id/approve` | Approve a pending cart |
+| `POST /api/v1/organization/carts/:id/reject` | Reject a pending cart with a required reason |
+
+Role gate: `CustomerAccount.role === 'organization_admin'` for every
+`organization/*` route. Foreign-organization carts return 404
+(anti-enumeration symmetry).
+
+### Admin
+
+| Verb + Path | Capability | Purpose |
+| --- | --- | --- |
+| `GET /api/v1/admin/carts` | `carts:read` | Paginated platform-wide list (status / approvalStatus / org / customer / channel / date filters) |
+| `GET /api/v1/admin/carts/:id` | `carts:read` | Read-only cart detail |
+| `GET /api/v1/admin/carts/:id/audit` | `carts:read` | Cart-detail audit feed |
+| `POST /api/v1/admin/carts/:id/reject` | `carts:reject` | Emergency terminal reject (requires reason) |
+
+## Entities
+
+- `Cart` (one active per `(customer_account_id, sales_channel_id)`; partial
+  unique index enforces this in PostgreSQL).
+- `CartItem` (per-line with `unit_price` snapshot at add + cached
+  `recomputed_*` columns).
+- `CartAuditEntry` (typed per-cart feed; indexed on `(cart_id, occurred_at
+  DESC)`). Every state transition also lands a row in the existing
+  `audit_log_entries` table via `AuditPort` for the platform-wide
+  audit timeline.
+
+## Settings
+
+| Key | Default | Description |
+| --- | --- | --- |
+| `carts.abandonment.inactivity_minutes` | `10080` (7 days) | Minutes of inactivity before an `active` cart is considered `abandoned`. `0` disables the sweep. |
+| `carts.abandonment.notification_recipient` | `""` (empty) | Single e-mail address to notify on abandonment. Empty = no notification e-mail (the status flip still occurs). |
+
+Seeded by the module-lifecycle ManifestReconciler on backend boot (see
+`packages/modules/carts/src/manifest.ts`).
+
+## Merge-on-login
+
+`cart-service.ts#mergeAnonymousIntoCustomer()` is invoked by the
+`organizations` module's `onLogin` hook. Conflicting line items combine
+quantities; the anonymous cart cookie is invalidated atomically. The source
+anonymous cart's `status` flips to `'completed'` (not `'abandoned'`) so the
+sweep does not later fire a stray abandonment notification for it.
+
+## Abandonment sweep
+
+`cart-abandonment-worker.ts` exposes a plain async `sweep(now?)` mirroring
+the `RfqExpiryWorker` pattern. The sweep:
+
+1. Reads `carts.abandonment.inactivity_minutes` (≤ 0 disables).
+2. Selects `active` carts whose `last_activity_at < now - threshold` AND
+   `abandonment_notified_at IS NULL` (idempotency).
+3. Flips status to `abandoned`, stamps `abandonment_notified_at = now`.
+4. Writes one `cart_audit_entries.abandonment_swept` row per affected cart.
+5. Dispatches an e-mail to the configured recipient **only** for non-empty
+   carts (empty carts flip status but suppress the notification per the
+   spec edge case).
+6. Notification dispatch failures do not roll back the status flip.
+
+Reactivation: any buyer activity (touch, add/remove/qty/coupon) on an
+`abandoned` cart returns it to `active` and clears
+`abandonment_notified_at` so the next abandonment cycle can re-notify.
+
+## Conversions
+
+- **Cart → Quote Request**: `RfqService.createForCustomer` is reused; the
+  cart's buyer-snapshotted unit prices are carried over as
+  `desired_unit_price` so sales sees the cart's reference price. The source
+  cart's items are deleted and the cart flips to `'completed'` with
+  `converted_to_quote_request_id` set.
+- **Quote Request → Cart**: iterates the QR's items through
+  `CartService.addItem`, which already routes through `PricingService` for
+  re-pricing. The QR's `desired_unit_price` is intentionally dropped — the
+  buyer's current contractual prices are the source of truth. Unavailable /
+  no-price / not-purchasable lines are skipped and returned in
+  `droppedLines[]` with typed reasons.
+- **Shopping List → Cart**: delegated to the existing
+  `ShoppingListService.convertToCart`; the carts module
+  exposes a port that composition wires to it.
+
+## Coupon application
+
+The carts module never owns promotion logic — it plumbs the buyer's coupon
+code through `PromotionService.applyToCart(snapshot)`. The
+`CartCouponService.apply(cart, code)` method:
+
+1. Looks up the named `Promotion` row.
+2. Runs the local pre-checks (existence, validity window, org match, min
+   cart subtotal) and emits a typed `CouponDropReason` on the first failure.
+3. If pre-checks pass, calls `applyToCart` and verifies the named promotion
+   is in the returned `appliedPromotions[]`.
+4. On success: writes `cart.applied_promotion_code = code`, audits
+   `coupon_applied`, re-arms approval if needed.
+5. On any failure: returns `{outcome: 'dropped', reason, shortfall?}` and
+   does not change the cart.
+
+`reevaluateOnRead(cart, items)` is intended to be called from the GET-cart
+read path so a previously-applied code that no longer fits (e.g. cart fell
+below min spend after a line removal) is silently dropped and the response
+surfaces `couponDroppedThisRead`. Wiring into the read path is a follow-up.
+
+## Extension points
+
+- **Re-pricing-on-read** — `CartPricingRecompute` + `CartRecomputeCache`
+  (30 s Redis TTL) exist and are tested but not yet wired into `GET
+  /api/v1/cart`; the snapshotted `unit_price` is returned today.
+- **Email dispatch** — submit-for-approval / approve / reject / abandonment
+  e-mails are scaffolded in the service surfaces; dedicated templates are a
+  follow-up.
+- **Abandonment scheduler** — the worker is constructed in production
+  composition but not yet wired to a cron / BullMQ schedule. The ops CLI
+  `pnpm --filter backend run cart:abandonment-sweep` runs one tick by hand.
+  It is a manifest-declared command the host runs, so it sweeps through the
+  composition's own `cartAbandonmentWorker` — see
+  `packages/modules/carts/src/backend/cli/abandonment-sweep.ts` for the body and
+  the `cliCommands` export in `packages/modules/carts/src/manifest.ts` for the
+  declaration.
+
+## Audit retention
+
+`cart_audit_entries` is the **per-cart action log** (line added/removed,
+quantity changed, coupon applied/cleared/dropped, approval submitted /
+approved / rejected, sweep marked the cart abandoned, conversion to /
+from a Quote Request, conversion from a Shopping List). Every row also
+lands in the platform-wide `audit_log_entries` table via
+`CartAuditService.record`, so the carts table is the canonical
+denormalised view used by the Org-Admin and platform-admin "Cart history"
+panel.
+
+Retention policy:
+
+- **Never auto-purge `cart_audit_entries`.** Org admins and the platform
+  admin rely on a complete history to defend approval decisions and
+  reproduce buyer disputes. The table is append-only — services never
+  `UPDATE` or `DELETE` rows.
+- **Cart deletion cascade.** `cart_audit_entries.cart_id` is `ON DELETE
+  CASCADE`. We do not currently delete carts in production; if a future
+  GDPR / right-to-erasure workflow ever does, the audit trail follows.
+  When that workflow lands, mirror the carts row plus its audit entries
+  into a long-term audit-only archive table *before* the cascade fires —
+  do not silently lose history.
+- **Production data-purges must exclude `cart_audit_entries`.** Any
+  scheduled job that prunes carts, customer accounts, or organizations
+  for storage hygiene MUST either skip `cart_audit_entries` or archive
+  it first. Reviewers: add this table to the exclusion list in
+  `packages/modules/audit_logs/src/backend/retention-policy.ts` when that policy
+  is introduced.
+- **The platform-wide `audit_log_entries` table follows the audit_logs
+  module's retention policy** (controlled outside this feature). The
+  carts-side mirror in `cart_audit_entries` is the source of truth for
+  the carts UI even when the platform-wide table has aged out.

package/i18n/en.json

@@ -0,0 +1,96 @@
+{
+  "errors.CART_EMPTY": "Your cart is empty.",
+  "errors.CART_LINE_CAP_EXCEEDED": "You have reached the maximum number of lines on this cart.",
+  "errors.CART_COUPON_REJECTED": "This coupon code could not be applied.",
+  "errors.CART_COUPON_REJECTED.invalid_code": "This coupon code is invalid.",
+  "errors.CART_COUPON_REJECTED.expired": "This coupon code has expired.",
+  "errors.CART_COUPON_REJECTED.below_min_spend": "Add more to your cart to unlock this promotion.",
+  "errors.CART_COUPON_REJECTED.wrong_channel": "This coupon does not apply in this sales channel.",
+  "errors.CART_COUPON_REJECTED.wrong_customer_group": "This coupon is not available for your customer group.",
+  "errors.CART_COUPON_REJECTED.wrong_organization": "This coupon is not available for your organization.",
+  "errors.CART_COUPON_REJECTED.coupon_format_invalid": "Coupon codes use only uppercase letters, digits, '-' and '_'.",
+
+  "lines.unavailable.out_of_stock": "Out of stock.",
+  "lines.unavailable.not_purchasable": "No longer available.",
+  "lines.unavailable.no_price_in_customer_list": "Pricing unavailable for your account.",
+  "lines.qty.label": "Quantity",
+  "lines.unit_price.label": "Unit price",
+  "lines.line_total.label": "Line total",
+  "lines.remove.label": "Remove",
+  "lines.save_to_list.label": "Save to shopping list",
+
+  "totals.subtotal": "Subtotal",
+  "totals.discount": "Discount",
+  "totals.grand_total": "Total",
+  "totals.empty": "Your cart is empty.",
+
+  "minicart.heading": "Cart",
+  "minicart.empty": "Your cart is empty.",
+  "minicart.view_full": "View cart",
+  "minicart.checkout": "Checkout",
+  "minicart.item_count_one": "{count} item",
+  "minicart.item_count_other": "{count} items",
+
+  "dropped.not_purchasable": "Removed because it is no longer available.",
+  "dropped.out_of_stock": "Removed because it is out of stock.",
+  "dropped.no_price_in_customer_list": "Removed because pricing is unavailable for your account.",
+  "dropped.removed_by_conversion": "Skipped during conversion.",
+  "dropped.banner.heading": "Some lines were skipped",
+  "dropped.banner.intro": "These products were not added because:",
+
+  "cta.checkout": "Proceed to checkout",
+  "cta.submit_for_approval": "Submit for approval",
+  "cta.awaiting_approval": "Awaiting approval",
+  "cta.blocked_by_organization": "Checkout unavailable",
+  "cta.convert_to_qr": "Convert to quote request",
+  "cta.convert_to_qr.hint": "Send this cart to sales as a quote request.",
+  "cta.convert_from_qr": "Convert to cart",
+  "cta.convert_from_qr.hint": "Start a new cart pre-filled from this quote request.",
+  "cta.add_list_to_cart": "Add list to cart",
+  "cta.add_list_to_cart.hint": "Pre-fill the cart with the items from this list.",
+  "cta.save_to_list": "Save to a shopping list",
+  "cta.apply_coupon": "Apply coupon",
+  "cta.clear_coupon": "Remove coupon",
+
+  "coupon.placeholder": "Enter coupon code",
+  "coupon.applied": "Coupon {code} is active.",
+  "coupon.dropped_on_read": "The coupon {code} is no longer valid for this cart and has been removed.",
+
+  "conversion.banner.qr_created": "We've sent your cart to sales as a new quote request.",
+  "conversion.banner.qr_converted": "We've started a new cart from quote request {reference}.",
+  "conversion.banner.list_added": "We've added the contents of \"{listName}\" to your cart.",
+  "conversion.banner.lines_dropped_during_conversion": "Some lines were skipped during conversion — see the panel below.",
+
+  "approval.banner.pending": "Your cart is awaiting approval by an organization administrator.",
+  "approval.banner.approved": "Your cart has been approved and is ready for checkout.",
+  "approval.banner.rejected": "Your cart was rejected by an organization administrator.",
+  "approval.banner.policy_on": "Your organization now requires cart approval before checkout.",
+  "approval.banner.policy_off": "Cart approval is no longer required by your organization.",
+  "approval.reject_reason.prompt": "Why are you rejecting this cart?",
+  "approval.reject_reason.placeholder": "Short explanation visible to the buyer",
+  "approval.reject_reason.required": "Please provide a rejection reason.",
+
+  "approval.email.submit.subject": "A cart was submitted for your approval",
+  "approval.email.submit.body": "{submitterDisplayName} submitted a cart for approval. Visit your dashboard to review or reject it.",
+  "approval.email.approve.subject": "Your cart was approved",
+  "approval.email.approve.body": "Your cart was approved by {approverDisplayName} and is ready for checkout.",
+
+  "abandonment.email.subject": "A cart was abandoned",
+  "abandonment.email.body": "A cart belonging to {ownerDisplayName} has been inactive for the configured threshold and has been marked Abandoned.",
+
+  "reject.email.subject": "Your cart was rejected",
+  "reject.email.body": "An administrator rejected your cart. Reason: {reason}",
+
+  "upsells.heading": "You might also need",
+  "upsells.empty": "No suggestions for this cart.",
+  "policy.title": "Cart approval",
+  "policy.description": "When this is on, ordinary members of this organization must submit their cart for an Organization Administrator's approval before they can check out.",
+  "policy.on": "Approval required before checkout",
+  "policy.off": "No approval required",
+  "policy.hint": "Turning the policy off returns every pending or approved cart in this organization to “not required”, and each change is recorded in the audit trail.",
+  "policy.saving": "Saving…",
+  "policy.turnedOn": "Cart approval is now required for this organization.",
+  "policy.turnedOff": "Cart approval is no longer required; pending carts were released.",
+  "policy.loadError": "Failed to load the cart-approval policy.",
+  "policy.saveError": "Failed to update the policy."
+}

package/i18n/pl.json

@@ -0,0 +1,96 @@
+{
+  "errors.CART_EMPTY": "Twój koszyk jest pusty.",
+  "errors.CART_LINE_CAP_EXCEEDED": "Osiągnięto maksymalną liczbę pozycji w koszyku.",
+  "errors.CART_COUPON_REJECTED": "Nie udało się zastosować kodu kuponu.",
+  "errors.CART_COUPON_REJECTED.invalid_code": "Nieprawidłowy kod kuponu.",
+  "errors.CART_COUPON_REJECTED.expired": "Kod kuponu wygasł.",
+  "errors.CART_COUPON_REJECTED.below_min_spend": "Dodaj więcej produktów, aby odblokować tę promocję.",
+  "errors.CART_COUPON_REJECTED.wrong_channel": "Ten kupon nie obowiązuje w tym kanale sprzedaży.",
+  "errors.CART_COUPON_REJECTED.wrong_customer_group": "Ten kupon nie jest dostępny dla Twojej grupy klientów.",
+  "errors.CART_COUPON_REJECTED.wrong_organization": "Ten kupon nie jest dostępny dla Twojej organizacji.",
+  "errors.CART_COUPON_REJECTED.coupon_format_invalid": "Kody kuponów mogą zawierać tylko duże litery, cyfry, '-' i '_'.",
+
+  "lines.unavailable.out_of_stock": "Brak na stanie.",
+  "lines.unavailable.not_purchasable": "Niedostępny.",
+  "lines.unavailable.no_price_in_customer_list": "Brak ceny dla Twojego konta.",
+  "lines.qty.label": "Ilość",
+  "lines.unit_price.label": "Cena jednostkowa",
+  "lines.line_total.label": "Wartość pozycji",
+  "lines.remove.label": "Usuń",
+  "lines.save_to_list.label": "Zapisz na liście zakupowej",
+
+  "totals.subtotal": "Suma częściowa",
+  "totals.discount": "Rabat",
+  "totals.grand_total": "Razem",
+  "totals.empty": "Twój koszyk jest pusty.",
+
+  "minicart.heading": "Koszyk",
+  "minicart.empty": "Twój koszyk jest pusty.",
+  "minicart.view_full": "Otwórz koszyk",
+  "minicart.checkout": "Do kasy",
+  "minicart.item_count_one": "{count} pozycja",
+  "minicart.item_count_other": "{count} pozycji",
+
+  "dropped.not_purchasable": "Pominięto — produkt jest niedostępny.",
+  "dropped.out_of_stock": "Pominięto — produkt jest niedostępny w magazynie.",
+  "dropped.no_price_in_customer_list": "Pominięto — brak ceny dla Twojego konta.",
+  "dropped.removed_by_conversion": "Pominięto podczas konwersji.",
+  "dropped.banner.heading": "Niektóre pozycje zostały pominięte",
+  "dropped.banner.intro": "Następujące produkty nie zostały dodane, ponieważ:",
+
+  "cta.checkout": "Przejdź do kasy",
+  "cta.submit_for_approval": "Zgłoś do akceptacji",
+  "cta.awaiting_approval": "Oczekuje na akceptację",
+  "cta.blocked_by_organization": "Kasa niedostępna",
+  "cta.convert_to_qr": "Zamień na zapytanie ofertowe",
+  "cta.convert_to_qr.hint": "Wyślij ten koszyk do działu sprzedaży jako zapytanie ofertowe.",
+  "cta.convert_from_qr": "Zamień na koszyk",
+  "cta.convert_from_qr.hint": "Utwórz nowy koszyk wypełniony pozycjami z tego zapytania ofertowego.",
+  "cta.add_list_to_cart": "Dodaj listę do koszyka",
+  "cta.add_list_to_cart.hint": "Wypełnij koszyk pozycjami z tej listy.",
+  "cta.save_to_list": "Zapisz na liście zakupowej",
+  "cta.apply_coupon": "Zastosuj kupon",
+  "cta.clear_coupon": "Usuń kupon",
+
+  "coupon.placeholder": "Wpisz kod kuponu",
+  "coupon.applied": "Kupon {code} jest aktywny.",
+  "coupon.dropped_on_read": "Kupon {code} nie obowiązuje już dla tego koszyka i został usunięty.",
+
+  "conversion.banner.qr_created": "Twój koszyk został wysłany do działu sprzedaży jako nowe zapytanie ofertowe.",
+  "conversion.banner.qr_converted": "Utworzono nowy koszyk na podstawie zapytania ofertowego {reference}.",
+  "conversion.banner.list_added": "Zawartość listy \"{listName}\" została dodana do koszyka.",
+  "conversion.banner.lines_dropped_during_conversion": "Niektóre pozycje zostały pominięte podczas konwersji — zobacz panel poniżej.",
+
+  "approval.banner.pending": "Twój koszyk oczekuje na akceptację administratora organizacji.",
+  "approval.banner.approved": "Twój koszyk został zaakceptowany i jest gotowy do realizacji.",
+  "approval.banner.rejected": "Twój koszyk został odrzucony przez administratora organizacji.",
+  "approval.banner.policy_on": "Twoja organizacja wymaga teraz akceptacji koszyka przed realizacją.",
+  "approval.banner.policy_off": "Twoja organizacja nie wymaga już akceptacji koszyka.",
+  "approval.reject_reason.prompt": "Dlaczego odrzucasz ten koszyk?",
+  "approval.reject_reason.placeholder": "Krótkie wyjaśnienie widoczne dla kupującego",
+  "approval.reject_reason.required": "Podaj powód odrzucenia.",
+
+  "approval.email.submit.subject": "Koszyk zgłoszony do Twojej akceptacji",
+  "approval.email.submit.body": "{submitterDisplayName} zgłosił(a) koszyk do akceptacji. Otwórz panel, aby go zaakceptować lub odrzucić.",
+  "approval.email.approve.subject": "Twój koszyk został zaakceptowany",
+  "approval.email.approve.body": "Twój koszyk został zaakceptowany przez {approverDisplayName} i jest gotowy do realizacji.",
+
+  "abandonment.email.subject": "Porzucony koszyk",
+  "abandonment.email.body": "Koszyk klienta {ownerDisplayName} został oznaczony jako Porzucony po przekroczeniu progu nieaktywności.",
+
+  "reject.email.subject": "Twój koszyk został odrzucony",
+  "reject.email.body": "Administrator odrzucił Twój koszyk. Powód: {reason}",
+
+  "upsells.heading": "Możesz też potrzebować",
+  "upsells.empty": "Brak sugestii dla tego koszyka.",
+  "policy.title": "Zatwierdzanie koszyka",
+  "policy.description": "Gdy opcja jest włączona, zwykli członkowie tej organizacji muszą przekazać koszyk do zatwierdzenia przez Administratora Organizacji, zanim będą mogli złożyć zamówienie.",
+  "policy.on": "Zatwierdzenie wymagane przed złożeniem zamówienia",
+  "policy.off": "Zatwierdzenie niewymagane",
+  "policy.hint": "Wyłączenie zasady przywraca każdy oczekujący lub zatwierdzony koszyk w tej organizacji do stanu „niewymagane”, a każda zmiana trafia do dziennika audytu.",
+  "policy.saving": "Zapisywanie…",
+  "policy.turnedOn": "Zatwierdzanie koszyka jest teraz wymagane w tej organizacji.",
+  "policy.turnedOff": "Zatwierdzanie koszyka nie jest już wymagane; oczekujące koszyki zostały zwolnione.",
+  "policy.loadError": "Nie udało się wczytać zasady zatwierdzania koszyka.",
+  "policy.saveError": "Nie udało się zaktualizować zasady."
+}

package/package.json

@@ -0,0 +1,107 @@
+{
+  "name": "@endora-commerce/mod-carts",
+  "version": "0.100.0",
+  "type": "module",
+  "sideEffects": false,
+  "description": "Shopping cart aggregation, pricing, lifecycle, and approval gate.",
+  "license": "MIT",
+  "endora": {
+    "type": "module",
+    "id": "carts"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/endora-commerce/endora-commerce.git",
+    "directory": "packages/modules/carts"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/manifest.d.ts",
+      "default": "./dist/manifest.js"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.ts",
+      "default": "./dist/backend/index.js"
+    },
+    "./migrations": {
+      "types": "./dist/migrations/index.d.ts",
+      "default": "./dist/migrations/index.js"
+    },
+    "./ports": {
+      "types": "./dist/ports/index.d.ts",
+      "default": "./dist/ports/index.js"
+    },
+    "./admin": {
+      "types": "./dist/admin/index.d.ts",
+      "default": "./dist/admin/index.js"
+    },
+    "./tailwind.css": "./tailwind.css",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "i18n",
+    "docs",
+    "tailwind.css"
+  ],
+  "engines": {
+    "node": ">=22.18.0"
+  },
+  "peerDependencies": {
+    "@fastify/cookie": "^11",
+    "@mikro-orm/core": "^6",
+    "@mikro-orm/migrations": "^6",
+    "@mikro-orm/postgresql": "^6",
+    "fastify": "^5",
+    "ioredis": "^5",
+    "lucide-react": "^1",
+    "react": "^19",
+    "react-router-dom": "^7",
+    "zod": "^4",
+    "@endora-commerce/admin-kit": "0.100.0",
+    "@endora-commerce/contracts": "0.100.0",
+    "@endora-commerce/platform": "0.100.0"
+  },
+  "peerDependenciesMeta": {
+    "@endora-commerce/admin-kit": {
+      "optional": true
+    },
+    "lucide-react": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    },
+    "react-router-dom": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@fastify/cookie": "^11.0.2",
+    "@mikro-orm/core": "^6.6.13",
+    "@mikro-orm/migrations": "^6.6.13",
+    "@mikro-orm/postgresql": "^6.6.13",
+    "@types/node": "^22.9.0",
+    "@types/react": "^19.2.14",
+    "fastify": "^5.12.5",
+    "ioredis": "^5.10.1",
+    "lucide-react": "^1.11.0",
+    "react": "^19.2.5",
+    "react-router-dom": "^7.18.2",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.11",
+    "zod": "^4.2.0",
+    "@endora-commerce/admin-kit": "0.100.0",
+    "@endora-commerce/contracts": "0.100.0",
+    "@endora-commerce/platform": "0.100.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json && tsc -p tsconfig.ui.json",
+    "typecheck": "tsc -p tsconfig.json && tsc -p tsconfig.ui.json --noEmit",
+    "lint": "eslint src",
+    "test": "vitest run"
+  }
+}

package/tailwind.css

@@ -0,0 +1,14 @@
+/* @endora-commerce/mod-carts — AUTO-GENERATED by `pnpm --filter backend run manifests:generate`.
+ *
+ * The `@source` directives this package asks its host to scan
+ * (`specs/110-instance-repository/contracts/admin-stylesheet-composition.md` R1).
+ * They resolve relative to **this file**, so they hold wherever the package is
+ * installed — a workspace link here, `node_modules` in a client's instance.
+ *
+ * The `dist` line is what a published tarball ships and is what an instance
+ * scans; the `src` line is inert there and is what keeps `pnpm --filter admin
+ * run dev` reading source in this repository. Do not edit: run
+ * `pnpm --filter backend run manifests:generate`.
+ */
+@source "./dist/admin";
+@source "./src/admin";