@endora-commerce/mod-carts 0.100.0

package/dist/backend/cli/abandonment-sweep.d.ts

@@ -0,0 +1,64 @@
+/**
+ * `carts abandonment-sweep` — one pass of `CartAbandonmentWorker.sweep()`
+ * against the live database (feature 027 US5).
+ *
+ * Intended for a cron job or a deploy hook, and safe to run manually:
+ *
+ *   pnpm --filter backend run cart:abandonment-sweep
+ *
+ * Idempotent: subsequent invocations within the same threshold window are a
+ * no-op, because the eligibility filter excludes carts that already carry
+ * `abandonment_notified_at`.
+ *
+ * ## Why this file no longer asks the gate itself (feature 080, T042b)
+ *
+ * It used to, and the header it carried was the best statement in the tree of
+ * the question D-157 answered:
+ *
+ * > It used to run whatever the platform's opinion of `carts` was, because there
+ * > is nothing here for the gate to hang on: `ctx.routes` / `ctx.worker` /
+ * > `ctx.subscribe` gate at a registration seam and `providePort` gates at a
+ * > resolution, and a CLI has none of the three.
+ *
+ * There is a seam now, and it is the **declaration**: the host knows which
+ * module declared the command it is about to run and asks
+ * `requireModuleEnabled` about that module — first, before it builds a context
+ * and outside every `try` — in `src/cli/module-commands.ts`. That is the same
+ * call at the same point in the same order; what changed is that it is applied
+ * once, by the host, for every command, instead of being a line each command's
+ * author has to remember. Constitution XVII item 3 states the reason in the
+ * general case: *"A gate the registration applies cannot be forgotten in the one
+ * service somebody adds later, which a hand-placed call can and did."*
+ *
+ * ## What the conversion fixed
+ *
+ * The old file's *"What it still does not do"* section named it: *"It builds its
+ * services by hand, so a deployment **decoration** over `cartAuditService` or
+ * `cartAbandonmentWorker` does not reach it."* That is a client not getting an
+ * override they paid for, and it is fixed by resolving the module's own
+ * registration instead of running `new CartAbandonmentWorker(…)` here.
+ *
+ * The same section refused composition on the ground that `composeApp()`
+ * *"starts every queue consumer in the platform"*. That was false and
+ * `worker.ts` says so in its own comment — a composition without `buildServer`
+ * starts no BullMQ worker and arms no timer, because all three `ctx.worker(`
+ * call sites and both module timers sit inside `ctx.routes(…)` bodies that run
+ * at Fastify registration (D-157.2, measured three ways). The claim is retired
+ * here rather than left for the next author to re-derive.
+ *
+ * ## Notification dispatch
+ *
+ * The old file said no e-mail is dispatched in the CLI variant, and that *"the
+ * HTTP-bootstrap path in `composition.ts` injects the real
+ * `dispatchCartAbandonmentNotification`"*. The second half is stale: measured on
+ * this tree, `cartAbandonmentNotifier` is a contribution point that **nobody
+ * contributes** — neither composition root writes it — so it defaults to
+ * `undefined` and the composed worker dispatches nothing either. Behaviour is
+ * therefore unchanged by the conversion, and the day a deployment does
+ * contribute a notifier, this command and the platform will agree about it,
+ * which they could not before.
+ */
+import type { ModuleCliCommandContext } from '@endora-commerce/contracts';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+export declare function abandonmentSweep({ ctx, out, }: ModuleCliCommandContext<ModuleContext>): Promise<number>;
+//# sourceMappingURL=abandonment-sweep.d.ts.map

package/dist/backend/cli/abandonment-sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abandonment-sweep.d.ts","sourceRoot":"","sources":["../../../src/backend/cli/abandonment-sweep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAQtE,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,GAAG,GACJ,EAAE,uBAAuB,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB1D"}

package/dist/backend/cli/abandonment-sweep.js

@@ -0,0 +1,17 @@
+export async function abandonmentSweep({ ctx, out, }) {
+    // This module's own registration, so a deployment decoration over it reaches
+    // the command — and so the settings thresholds come from the one file
+    // `backend.ts` composes the worker from, which is what stopped the CLI and the
+    // server disagreeing about them (D-41/D-43).
+    //
+    // A cradle read rather than `lazyPort`, because `cartAbandonmentWorker` is a
+    // plain `ctx.di.register` and not a `providePort`: spelling it as a port here
+    // would suggest a presence gate that this name does not carry. Presence for
+    // this module is decided by the host before the command is invoked.
+    const worker = ctx.cradle().cartAbandonmentWorker;
+    const result = await worker.sweep();
+    out(`[cart abandonment-sweep] abandoned=${result.abandonedCount} ` +
+        `notified=${result.notifiedCount}`);
+    return 0;
+}
+//# sourceMappingURL=abandonment-sweep.js.map

package/dist/backend/cli/abandonment-sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abandonment-sweep.js","sourceRoot":"","sources":["../../../src/backend/cli/abandonment-sweep.ts"],"names":[],"mappings":"AAqEA,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,GAAG,EACH,GAAG,GACoC;IACvC,6EAA6E;IAC7E,sEAAsE;IACtE,+EAA+E;IAC/E,6CAA6C;IAC7C,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAA0B,CAAC,qBAAqB,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACpC,GAAG,CACD,sCAAsC,MAAM,CAAC,cAAc,GAAG;QAC5D,YAAY,MAAM,CAAC,aAAa,EAAE,CACrC,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/backend/entities/cart-audit-entry.entity.d.ts

@@ -0,0 +1,29 @@
+import { OptionalProps } from '@mikro-orm/core';
+/**
+ * One audit row on a cart's typed feed (feature 027). Backs the cart-
+ * detail-page audit panel for both Org-Admin and platform-admin views.
+ *
+ * Companion to `audit_log_entries` — every cart-state transition also
+ * lands a row there via AuditPort.record(...), so the platform-wide
+ * audit timeline stays whole. Splitting the two tables keeps the cart UI
+ * tight (typed `from_state` / `to_state` / `metadata`) without bloating
+ * the generic audit feed.
+ */
+export declare class CartAuditEntry {
+    [OptionalProps]?: 'id' | 'occurredAt' | 'actorId' | 'fromState' | 'toState' | 'reason' | 'metadata';
+    id: string;
+    cartId: string;
+    occurredAt: Date;
+    actorType: CartAuditActorType;
+    actorId?: string | null;
+    action: CartAuditAction;
+    fromState?: string | null;
+    toState?: string | null;
+    reason?: string | null;
+    metadata: Record<string, unknown>;
+}
+export type CartAuditActorType = 'customer' | 'org_admin' | 'platform_admin' | 'system' | 'sweep';
+export declare const CART_AUDIT_ACTOR_TYPES: readonly CartAuditActorType[];
+export type CartAuditAction = 'status_changed' | 'approval_submitted' | 'approval_approved' | 'approval_rejected' | 'approval_policy_reset' | 'approval_resubmission_required' | 'coupon_applied' | 'coupon_dropped' | 'converted_to_qr' | 'created_from_qr' | 'created_from_shopping_list' | 'admin_rejected' | 'abandonment_swept' | 'abandonment_reactivated' | 'line_added' | 'line_removed' | 'line_qty_changed' | 'cart_merged_from_anon';
+export declare const CART_AUDIT_ACTIONS: readonly CartAuditAction[];
+//# sourceMappingURL=cart-audit-entry.entity.d.ts.map

package/dist/backend/entities/cart-audit-entry.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-audit-entry.entity.d.ts","sourceRoot":"","sources":["../../../src/backend/entities/cart-audit-entry.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,aAAa,EAAwB,MAAM,iBAAiB,CAAC;AAIrF;;;;;;;;;GASG;AACH,qBAEa,cAAc;IACzB,CAAC,aAAa,CAAC,CAAC,EACZ,IAAI,GACJ,YAAY,GACZ,SAAS,GACT,WAAW,GACX,SAAS,GACT,QAAQ,GACR,UAAU,CAAC;IAGf,EAAE,EAAE,MAAM,CAAgB;IAI1B,MAAM,EAAG,MAAM,CAAC;IAGhB,UAAU,EAAE,IAAI,CAAc;IAG9B,SAAS,EAAG,kBAAkB,CAAC;IAG/B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGxB,MAAM,EAAG,eAAe,CAAC;IAGzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAG1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAM;CACxC;AAED,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,WAAW,GACX,gBAAgB,GAChB,QAAQ,GACR,OAAO,CAAC;AAEZ,eAAO,MAAM,sBAAsB,EAAE,SAAS,kBAAkB,EAMtD,CAAC;AAEX,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,oBAAoB,GACpB,mBAAmB,GACnB,mBAAmB,GACnB,uBAAuB,GACvB,gCAAgC,GAChC,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,4BAA4B,GAC5B,gBAAgB,GAChB,mBAAmB,GACnB,yBAAyB,GACzB,YAAY,GACZ,cAAc,GACd,kBAAkB,GAClB,uBAAuB,CAAC;AAE5B,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAmB/C,CAAC"}

package/dist/backend/entities/cart-audit-entry.entity.js

@@ -0,0 +1,109 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Entity, Index, OptionalProps, PrimaryKey, Property } from '@mikro-orm/core';
+import { GlobalEntity } from '@endora-commerce/platform/tenancy';
+import { randomUUID } from 'crypto';
+/**
+ * One audit row on a cart's typed feed (feature 027). Backs the cart-
+ * detail-page audit panel for both Org-Admin and platform-admin views.
+ *
+ * Companion to `audit_log_entries` — every cart-state transition also
+ * lands a row there via AuditPort.record(...), so the platform-wide
+ * audit timeline stays whole. Splitting the two tables keeps the cart UI
+ * tight (typed `from_state` / `to_state` / `metadata`) without bloating
+ * the generic audit feed.
+ */
+let CartAuditEntry = class CartAuditEntry {
+    [OptionalProps];
+    id = randomUUID();
+    cartId;
+    occurredAt = new Date();
+    actorType;
+    actorId;
+    action;
+    fromState;
+    toState;
+    reason;
+    metadata = {};
+};
+__decorate([
+    PrimaryKey({ type: 'uuid' }),
+    __metadata("design:type", String)
+], CartAuditEntry.prototype, "id", void 0);
+__decorate([
+    Property({ type: 'uuid' }),
+    Index(),
+    __metadata("design:type", String)
+], CartAuditEntry.prototype, "cartId", void 0);
+__decorate([
+    Property({ type: 'datetime' }),
+    __metadata("design:type", Date)
+], CartAuditEntry.prototype, "occurredAt", void 0);
+__decorate([
+    Property({ type: 'string', length: 32 }),
+    __metadata("design:type", String)
+], CartAuditEntry.prototype, "actorType", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    __metadata("design:type", Object)
+], CartAuditEntry.prototype, "actorId", void 0);
+__decorate([
+    Property({ type: 'string', length: 64 }),
+    __metadata("design:type", String)
+], CartAuditEntry.prototype, "action", void 0);
+__decorate([
+    Property({ type: 'string', length: 32, nullable: true }),
+    __metadata("design:type", Object)
+], CartAuditEntry.prototype, "fromState", void 0);
+__decorate([
+    Property({ type: 'string', length: 32, nullable: true }),
+    __metadata("design:type", Object)
+], CartAuditEntry.prototype, "toState", void 0);
+__decorate([
+    Property({ type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], CartAuditEntry.prototype, "reason", void 0);
+__decorate([
+    Property({ type: 'json' }),
+    __metadata("design:type", Object)
+], CartAuditEntry.prototype, "metadata", void 0);
+CartAuditEntry = __decorate([
+    GlobalEntity(),
+    Entity({ tableName: 'cart_audit_entries' })
+], CartAuditEntry);
+export { CartAuditEntry };
+export const CART_AUDIT_ACTOR_TYPES = [
+    'customer',
+    'org_admin',
+    'platform_admin',
+    'system',
+    'sweep',
+];
+export const CART_AUDIT_ACTIONS = [
+    'status_changed',
+    'approval_submitted',
+    'approval_approved',
+    'approval_rejected',
+    'approval_policy_reset',
+    'approval_resubmission_required',
+    'coupon_applied',
+    'coupon_dropped',
+    'converted_to_qr',
+    'created_from_qr',
+    'created_from_shopping_list',
+    'admin_rejected',
+    'abandonment_swept',
+    'abandonment_reactivated',
+    'line_added',
+    'line_removed',
+    'line_qty_changed',
+    'cart_merged_from_anon',
+];
+//# sourceMappingURL=cart-audit-entry.entity.js.map

package/dist/backend/entities/cart-audit-entry.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-audit-entry.entity.js","sourceRoot":"","sources":["../../../src/backend/entities/cart-audit-entry.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;;;;;;GASG;AAGI,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,CAAC,aAAa,CAAC,CAOA;IAGf,EAAE,GAAW,UAAU,EAAE,CAAC;IAI1B,MAAM,CAAU;IAGhB,UAAU,GAAS,IAAI,IAAI,EAAE,CAAC;IAG9B,SAAS,CAAsB;IAG/B,OAAO,CAAiB;IAGxB,MAAM,CAAmB;IAGzB,SAAS,CAAiB;IAG1B,OAAO,CAAiB;IAGxB,MAAM,CAAiB;IAGvB,QAAQ,GAA4B,EAAE,CAAC;CACxC,CAAA;AA7BC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;0CACH;AAI1B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,KAAK,EAAE;;8CACQ;AAGhB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;8BACnB,IAAI;kDAAc;AAG9B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;iDACV;AAG/B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CACnB;AAGxB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;8CAChB;AAGzB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iDAC/B;AAG1B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CACjC;AAGxB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8CACpB;AAGvB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;gDACY;AAvC5B,cAAc;IAF1B,YAAY,EAAE;IACd,MAAM,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC;GAC/B,cAAc,CAwC1B;;AASD,MAAM,CAAC,MAAM,sBAAsB,GAAkC;IACnE,UAAU;IACV,WAAW;IACX,gBAAgB;IAChB,QAAQ;IACR,OAAO;CACC,CAAC;AAsBX,MAAM,CAAC,MAAM,kBAAkB,GAA+B;IAC5D,gBAAgB;IAChB,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,uBAAuB;IACvB,gCAAgC;IAChC,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,4BAA4B;IAC5B,gBAAgB;IAChB,mBAAmB;IACnB,yBAAyB;IACzB,YAAY;IACZ,cAAc;IACd,kBAAkB;IAClB,uBAAuB;CACf,CAAC"}

package/dist/backend/entities/cart-item.entity.d.ts

@@ -0,0 +1,42 @@
+import { OptionalProps } from '@mikro-orm/core';
+/**
+ * A line in a Cart. Two-layer pricing snapshot (feature 027):
+ *   - `unitPrice` / `currency`: the price the line was added at. Read-only
+ *     after add; useful for audit / diff and for the "added at" column in
+ *     cart_audit_entries metadata.
+ *   - `recomputedUnitPrice` / `recomputedAt` / `recomputedCurrency`: the
+ *     most recent re-resolved price. The Cart-Pricing-Recompute helper
+ *     refreshes these on every full-cart-view read (with a 30 s Redis
+ *     cache between mini-cart / full-cart / checkout-entry walks).
+ *     Cleared on any cart-side write.
+ */
+export declare class CartItem {
+    [OptionalProps]?: 'id' | 'createdAt' | 'updatedAt' | 'variantId' | 'recomputedUnitPrice' | 'recomputedAt' | 'recomputedCurrency' | 'packagingUnitId' | 'packagingUnitName' | 'packagingUnitBaseQuantity';
+    id: string;
+    cartId: string;
+    productId: string;
+    variantId?: string | null;
+    quantity: number;
+    /** Price snapshot at time of add — services recalculate on read. */
+    unitPrice: string;
+    currency: string;
+    /**
+     * Most-recent re-resolved unit price (per feature 011 PricingService).
+     * Stale beyond the cache TTL → re-resolve on next read. Cleared on every
+     * cart-side write so the next read forces a fresh resolution.
+     */
+    recomputedUnitPrice?: string | null;
+    recomputedAt?: Date | null;
+    recomputedCurrency?: string | null;
+    /**
+     * Feature 043 — when this line was added as a packaging unit (e.g. a
+     * pallet), these snapshot the unit it came from. `quantity` above already
+     * holds the resulting base-piece count. Null for plain single-piece lines.
+     */
+    packagingUnitId?: string | null;
+    packagingUnitName?: string | null;
+    packagingUnitBaseQuantity?: number | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+//# sourceMappingURL=cart-item.entity.d.ts.map

package/dist/backend/entities/cart-item.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-item.entity.d.ts","sourceRoot":"","sources":["../../../src/backend/entities/cart-item.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,aAAa,EAAwB,MAAM,iBAAiB,CAAC;AAIrF;;;;;;;;;;GAUG;AACH,qBAEa,QAAQ;IACnB,CAAC,aAAa,CAAC,CAAC,EACZ,IAAI,GACJ,WAAW,GACX,WAAW,GACX,WAAW,GACX,qBAAqB,GACrB,cAAc,GACd,oBAAoB,GACpB,iBAAiB,GACjB,mBAAmB,GACnB,2BAA2B,CAAC;IAGhC,EAAE,EAAE,MAAM,CAAgB;IAI1B,MAAM,EAAG,MAAM,CAAC;IAGhB,SAAS,EAAG,MAAM,CAAC;IAGnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAG1B,QAAQ,EAAG,MAAM,CAAC;IAElB,oEAAoE;IAEpE,SAAS,EAAG,MAAM,CAAC;IAGnB,QAAQ,EAAG,MAAM,CAAC;IAElB;;;;OAIG;IAEH,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGpC,YAAY,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAG3B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEnC;;;;OAIG;IAEH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGlC,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAG1C,SAAS,EAAE,IAAI,CAAc;IAG7B,SAAS,EAAE,IAAI,CAAc;CAC9B"}

package/dist/backend/entities/cart-item.entity.js

@@ -0,0 +1,119 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Entity, Index, OptionalProps, PrimaryKey, Property } from '@mikro-orm/core';
+import { GlobalEntity } from '@endora-commerce/platform/tenancy';
+import { randomUUID } from 'crypto';
+/**
+ * A line in a Cart. Two-layer pricing snapshot (feature 027):
+ *   - `unitPrice` / `currency`: the price the line was added at. Read-only
+ *     after add; useful for audit / diff and for the "added at" column in
+ *     cart_audit_entries metadata.
+ *   - `recomputedUnitPrice` / `recomputedAt` / `recomputedCurrency`: the
+ *     most recent re-resolved price. The Cart-Pricing-Recompute helper
+ *     refreshes these on every full-cart-view read (with a 30 s Redis
+ *     cache between mini-cart / full-cart / checkout-entry walks).
+ *     Cleared on any cart-side write.
+ */
+let CartItem = class CartItem {
+    [OptionalProps];
+    id = randomUUID();
+    cartId;
+    productId;
+    variantId;
+    quantity;
+    /** Price snapshot at time of add — services recalculate on read. */
+    unitPrice;
+    currency;
+    /**
+     * Most-recent re-resolved unit price (per feature 011 PricingService).
+     * Stale beyond the cache TTL → re-resolve on next read. Cleared on every
+     * cart-side write so the next read forces a fresh resolution.
+     */
+    recomputedUnitPrice;
+    recomputedAt;
+    recomputedCurrency;
+    /**
+     * Feature 043 — when this line was added as a packaging unit (e.g. a
+     * pallet), these snapshot the unit it came from. `quantity` above already
+     * holds the resulting base-piece count. Null for plain single-piece lines.
+     */
+    packagingUnitId;
+    packagingUnitName;
+    packagingUnitBaseQuantity;
+    createdAt = new Date();
+    updatedAt = new Date();
+};
+__decorate([
+    PrimaryKey({ type: 'uuid' }),
+    __metadata("design:type", String)
+], CartItem.prototype, "id", void 0);
+__decorate([
+    Property({ type: 'uuid' }),
+    Index(),
+    __metadata("design:type", String)
+], CartItem.prototype, "cartId", void 0);
+__decorate([
+    Property({ type: 'uuid' }),
+    __metadata("design:type", String)
+], CartItem.prototype, "productId", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    __metadata("design:type", Object)
+], CartItem.prototype, "variantId", void 0);
+__decorate([
+    Property({ type: 'integer' }),
+    __metadata("design:type", Number)
+], CartItem.prototype, "quantity", void 0);
+__decorate([
+    Property({ type: 'decimal', precision: 12, scale: 2 }),
+    __metadata("design:type", String)
+], CartItem.prototype, "unitPrice", void 0);
+__decorate([
+    Property({ type: 'string', length: 3 }),
+    __metadata("design:type", String)
+], CartItem.prototype, "currency", void 0);
+__decorate([
+    Property({ type: 'decimal', precision: 12, scale: 2, nullable: true }),
+    __metadata("design:type", Object)
+], CartItem.prototype, "recomputedUnitPrice", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], CartItem.prototype, "recomputedAt", void 0);
+__decorate([
+    Property({ type: 'string', length: 3, nullable: true }),
+    __metadata("design:type", Object)
+], CartItem.prototype, "recomputedCurrency", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    __metadata("design:type", Object)
+], CartItem.prototype, "packagingUnitId", void 0);
+__decorate([
+    Property({ type: 'string', length: 160, nullable: true }),
+    __metadata("design:type", Object)
+], CartItem.prototype, "packagingUnitName", void 0);
+__decorate([
+    Property({ type: 'integer', nullable: true }),
+    __metadata("design:type", Object)
+], CartItem.prototype, "packagingUnitBaseQuantity", void 0);
+__decorate([
+    Property({ type: 'datetime', onCreate: () => new Date() }),
+    __metadata("design:type", Date)
+], CartItem.prototype, "createdAt", void 0);
+__decorate([
+    Property({ type: 'datetime', onUpdate: () => new Date() }),
+    __metadata("design:type", Date)
+], CartItem.prototype, "updatedAt", void 0);
+CartItem = __decorate([
+    GlobalEntity(),
+    Entity({ tableName: 'cart_items' })
+], CartItem);
+export { CartItem };
+//# sourceMappingURL=cart-item.entity.js.map

package/dist/backend/entities/cart-item.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-item.entity.js","sourceRoot":"","sources":["../../../src/backend/entities/cart-item.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;;;;;;;GAUG;AAGI,IAAM,QAAQ,GAAd,MAAM,QAAQ;IACnB,CAAC,aAAa,CAAC,CAUiB;IAGhC,EAAE,GAAW,UAAU,EAAE,CAAC;IAI1B,MAAM,CAAU;IAGhB,SAAS,CAAU;IAGnB,SAAS,CAAiB;IAG1B,QAAQ,CAAU;IAElB,oEAAoE;IAEpE,SAAS,CAAU;IAGnB,QAAQ,CAAU;IAElB;;;;OAIG;IAEH,mBAAmB,CAAiB;IAGpC,YAAY,CAAe;IAG3B,kBAAkB,CAAiB;IAEnC;;;;OAIG;IAEH,eAAe,CAAiB;IAGhC,iBAAiB,CAAiB;IAGlC,yBAAyB,CAAiB;IAG1C,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAG7B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;CAC9B,CAAA;AAvDC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;oCACH;AAI1B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,KAAK,EAAE;;wCACQ;AAGhB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;2CACR;AAGnB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2CACjB;AAG1B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;0CACZ;AAIlB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;;2CACpC;AAGnB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;;0CACtB;AAQlB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;qDACnC;AAGpC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8CACpB;AAG3B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACrB;AAQnC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iDACX;AAGhC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDACxB;AAGlC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2DACJ;AAG1C;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;2CAAc;AAG7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;2CAAc;AApElB,QAAQ;IAFpB,YAAY,EAAE;IACd,MAAM,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;GACvB,QAAQ,CAqEpB"}

package/dist/backend/entities/cart.entity.d.ts

@@ -0,0 +1,96 @@
+import { OptionalProps } from '@mikro-orm/core';
+/**
+ * Cart — a buyer's in-progress basket. Owned by a Customer (authenticated)
+ * or an anonymous session (cookie-token addressable). Scoped to a Sales
+ * Channel (feature 027) so the spec's "one active cart per
+ * (Customer, Sales Channel)" rule holds.
+ *
+ * Status lifecycle (feature 027):
+ *   active       → abandoned  (sweep: last_activity_at past threshold)
+ *   abandoned    → active     (owner activity)
+ *   active       → completed  (checkout success OR cart→QR conversion)
+ *   active       → rejected   (org-admin reject OR platform-admin reject)
+ *
+ * Legacy `converted` was migrated to `completed` by migration 050. Mass
+ * code in the repo that previously wrote `'converted'` now writes
+ * `'completed'` (CartService.clearForCustomer).
+ *
+ * `approval_status` is the orthogonal sub-state that gates checkout when
+ * the Organization's `requires_cart_approval` policy is `true`. Self-
+ * approval exemption: a cart created by an Org Admin is born with
+ * `approval_status='not_required'` regardless of the policy. Post-approval
+ * mutation re-arms `approved → pending` (see CartApprovalService).
+ *
+ * `version` is the optimistic-lock token used by the approval / mutation
+ * race (buyer-vs-Org-Admin) — aligned with the convention shared by
+ * features 003 / 026.
+ */
+export declare class Cart {
+    [OptionalProps]?: 'id' | 'createdAt' | 'updatedAt' | 'customerAccountId' | 'organizationId' | 'anonymousCartToken' | 'salesChannelId' | 'status' | 'approvalStatus' | 'submittedForApprovalAt' | 'approvedAt' | 'approvedByCustomerAccountId' | 'rejectedAt' | 'rejectedByActor' | 'rejectedReason' | 'appliedPromotionCode' | 'completedOrderId' | 'convertedToQuoteRequestId' | 'abandonmentNotifiedAt' | 'lastActivityAt' | 'version';
+    id: string;
+    customerAccountId?: string | null;
+    organizationId?: string | null;
+    anonymousCartToken?: string | null;
+    /**
+     * Sales channel the cart is scoped to. Backfilled to the system-default
+     * channel by migration 050; NULL is read as "system default" until the
+     * next consolidation tightens it (see research.md §R3).
+     */
+    salesChannelId?: string | null;
+    status: CartStatus;
+    approvalStatus: CartApprovalStatus;
+    submittedForApprovalAt?: Date | null;
+    approvedAt?: Date | null;
+    approvedByCustomerAccountId?: string | null;
+    rejectedAt?: Date | null;
+    /** Free-form `customer:<uuid>` / `admin:<uuid>` / `org_admin:<uuid>`. */
+    rejectedByActor?: string | null;
+    rejectedReason?: string | null;
+    /**
+     * The Promotion.code the buyer most recently applied to this cart. The
+     * resolver in PromotionService.applyToCart consumes this on every read.
+     * Persisted even on terminal carts for audit / analytics.
+     */
+    appliedPromotionCode?: string | null;
+    /**
+     * The order this cart produced, set by `placeOrder` beside
+     * `status = 'completed'` and inside the placement transaction (D-94.1).
+     *
+     * The twin of {@link convertedToQuoteRequestId}: the two terminal artefacts
+     * a cart can leave behind, and until D-94 only one of them was recorded —
+     * asked which order emptied a completed cart, the platform answered by
+     * correlating timestamps. `carts_completed_order_fk` holds it
+     * (`on delete set null`), for the reason the QR pointer's migration wrote
+     * down for its own: deleting the order does not invalidate the fact that
+     * the cart was once completed.
+     *
+     * Nullable, and it stays nullable. It cannot be backfilled — no surviving
+     * record says which order emptied which historical cart — and
+     * `status = 'completed'` does not imply it: `CartService.clearForCustomer`,
+     * the anonymous-merge source and the quote-request conversion all reach
+     * `completed` without an order.
+     */
+    completedOrderId?: string | null;
+    /** Set on Cart → Quote Request conversion (feature 027 US3). */
+    convertedToQuoteRequestId?: string | null;
+    /**
+     * Idempotency stamp for the abandonment-sweep notification. Cleared on
+     * reactivation so the next abandonment cycle can notify again.
+     */
+    abandonmentNotifiedAt?: Date | null;
+    /**
+     * Bumped by every buyer-driven add / remove / qty / coupon / explicit
+     * page-open. Drives the abandonment sweep. NOT bumped by mini-cart
+     * hovers or non-owner inspections (Org-Admin / platform-admin reads).
+     */
+    lastActivityAt: Date;
+    /** Optimistic-lock token (auto-incremented by MikroORM on every update). */
+    version: number;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export type CartStatus = 'active' | 'abandoned' | 'completed' | 'rejected';
+export declare const CART_STATUSES: readonly CartStatus[];
+export type CartApprovalStatus = 'not_required' | 'pending' | 'approved' | 'rejected_by_org_admin';
+export declare const CART_APPROVAL_STATUSES: readonly CartApprovalStatus[];
+//# sourceMappingURL=cart.entity.d.ts.map

package/dist/backend/entities/cart.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart.entity.d.ts","sourceRoot":"","sources":["../../../src/backend/entities/cart.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,aAAa,EAAgC,MAAM,iBAAiB,CAAC;AAI7F;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAEa,IAAI;IACf,CAAC,aAAa,CAAC,CAAC,EACZ,IAAI,GACJ,WAAW,GACX,WAAW,GACX,mBAAmB,GACnB,gBAAgB,GAChB,oBAAoB,GACpB,gBAAgB,GAChB,QAAQ,GACR,gBAAgB,GAChB,wBAAwB,GACxB,YAAY,GACZ,6BAA6B,GAC7B,YAAY,GACZ,iBAAiB,GACjB,gBAAgB,GAChB,sBAAsB,GACtB,kBAAkB,GAClB,2BAA2B,GAC3B,uBAAuB,GACvB,gBAAgB,GAChB,SAAS,CAAC;IAGd,EAAE,EAAE,MAAM,CAAgB;IAI1B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAIlC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAI/B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEnC;;;;OAIG;IAEH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAG/B,MAAM,EAAE,UAAU,CAAY;IAG9B,cAAc,EAAE,kBAAkB,CAAkB;IAGpD,sBAAsB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAGrC,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAGzB,2BAA2B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAG5C,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAEzB,yEAAyE;IAEzE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/B;;;;OAIG;IAEH,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAErC;;;;;;;;;;;;;;;;;OAiBG;IAEH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEjC,gEAAgE;IAEhE,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1C;;;OAGG;IAEH,qBAAqB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAEpC;;;;OAIG;IAEH,cAAc,EAAE,IAAI,CAAc;IAElC,4EAA4E;IAE5E,OAAO,EAAG,MAAM,CAAC;IAGjB,SAAS,EAAE,IAAI,CAAc;IAG7B,SAAS,EAAE,IAAI,CAAc;CAC9B;AAED,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,CAAC;AAE3E,eAAO,MAAM,aAAa,EAAE,SAAS,UAAU,EAKrC,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAC1B,cAAc,GACd,SAAS,GACT,UAAU,GACV,uBAAuB,CAAC;AAE5B,eAAO,MAAM,sBAAsB,EAAE,SAAS,kBAAkB,EAKtD,CAAC"}