@endora-commerce/mod-carts 0.100.0

package/dist/backend/entities/cart.entity.js

@@ -0,0 +1,207 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Entity, Index, OptionalProps, PrimaryKey, Property, Unique } from '@mikro-orm/core';
+import { CustomerScoped } from '@endora-commerce/platform/tenancy';
+import { randomUUID } from 'crypto';
+/**
+ * Cart — a buyer's in-progress basket. Owned by a Customer (authenticated)
+ * or an anonymous session (cookie-token addressable). Scoped to a Sales
+ * Channel (feature 027) so the spec's "one active cart per
+ * (Customer, Sales Channel)" rule holds.
+ *
+ * Status lifecycle (feature 027):
+ *   active       → abandoned  (sweep: last_activity_at past threshold)
+ *   abandoned    → active     (owner activity)
+ *   active       → completed  (checkout success OR cart→QR conversion)
+ *   active       → rejected   (org-admin reject OR platform-admin reject)
+ *
+ * Legacy `converted` was migrated to `completed` by migration 050. Mass
+ * code in the repo that previously wrote `'converted'` now writes
+ * `'completed'` (CartService.clearForCustomer).
+ *
+ * `approval_status` is the orthogonal sub-state that gates checkout when
+ * the Organization's `requires_cart_approval` policy is `true`. Self-
+ * approval exemption: a cart created by an Org Admin is born with
+ * `approval_status='not_required'` regardless of the policy. Post-approval
+ * mutation re-arms `approved → pending` (see CartApprovalService).
+ *
+ * `version` is the optimistic-lock token used by the approval / mutation
+ * race (buyer-vs-Org-Admin) — aligned with the convention shared by
+ * features 003 / 026.
+ */
+let Cart = class Cart {
+    [OptionalProps];
+    id = randomUUID();
+    customerAccountId;
+    organizationId;
+    anonymousCartToken;
+    /**
+     * Sales channel the cart is scoped to. Backfilled to the system-default
+     * channel by migration 050; NULL is read as "system default" until the
+     * next consolidation tightens it (see research.md §R3).
+     */
+    salesChannelId;
+    status = 'active';
+    approvalStatus = 'not_required';
+    submittedForApprovalAt;
+    approvedAt;
+    approvedByCustomerAccountId;
+    rejectedAt;
+    /** Free-form `customer:<uuid>` / `admin:<uuid>` / `org_admin:<uuid>`. */
+    rejectedByActor;
+    rejectedReason;
+    /**
+     * The Promotion.code the buyer most recently applied to this cart. The
+     * resolver in PromotionService.applyToCart consumes this on every read.
+     * Persisted even on terminal carts for audit / analytics.
+     */
+    appliedPromotionCode;
+    /**
+     * The order this cart produced, set by `placeOrder` beside
+     * `status = 'completed'` and inside the placement transaction (D-94.1).
+     *
+     * The twin of {@link convertedToQuoteRequestId}: the two terminal artefacts
+     * a cart can leave behind, and until D-94 only one of them was recorded —
+     * asked which order emptied a completed cart, the platform answered by
+     * correlating timestamps. `carts_completed_order_fk` holds it
+     * (`on delete set null`), for the reason the QR pointer's migration wrote
+     * down for its own: deleting the order does not invalidate the fact that
+     * the cart was once completed.
+     *
+     * Nullable, and it stays nullable. It cannot be backfilled — no surviving
+     * record says which order emptied which historical cart — and
+     * `status = 'completed'` does not imply it: `CartService.clearForCustomer`,
+     * the anonymous-merge source and the quote-request conversion all reach
+     * `completed` without an order.
+     */
+    completedOrderId;
+    /** Set on Cart → Quote Request conversion (feature 027 US3). */
+    convertedToQuoteRequestId;
+    /**
+     * Idempotency stamp for the abandonment-sweep notification. Cleared on
+     * reactivation so the next abandonment cycle can notify again.
+     */
+    abandonmentNotifiedAt;
+    /**
+     * Bumped by every buyer-driven add / remove / qty / coupon / explicit
+     * page-open. Drives the abandonment sweep. NOT bumped by mini-cart
+     * hovers or non-owner inspections (Org-Admin / platform-admin reads).
+     */
+    lastActivityAt = new Date();
+    /** Optimistic-lock token (auto-incremented by MikroORM on every update). */
+    version;
+    createdAt = new Date();
+    updatedAt = new Date();
+};
+__decorate([
+    PrimaryKey({ type: 'uuid' }),
+    __metadata("design:type", String)
+], Cart.prototype, "id", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    Index(),
+    __metadata("design:type", Object)
+], Cart.prototype, "customerAccountId", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    Index(),
+    __metadata("design:type", Object)
+], Cart.prototype, "organizationId", void 0);
+__decorate([
+    Property({ type: 'string', length: 64, nullable: true }),
+    Unique(),
+    __metadata("design:type", Object)
+], Cart.prototype, "anonymousCartToken", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    __metadata("design:type", Object)
+], Cart.prototype, "salesChannelId", void 0);
+__decorate([
+    Property({ type: 'string', length: 16 }),
+    __metadata("design:type", String)
+], Cart.prototype, "status", void 0);
+__decorate([
+    Property({ type: 'string', length: 32 }),
+    __metadata("design:type", String)
+], Cart.prototype, "approvalStatus", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], Cart.prototype, "submittedForApprovalAt", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], Cart.prototype, "approvedAt", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    __metadata("design:type", Object)
+], Cart.prototype, "approvedByCustomerAccountId", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], Cart.prototype, "rejectedAt", void 0);
+__decorate([
+    Property({ type: 'string', length: 48, nullable: true }),
+    __metadata("design:type", Object)
+], Cart.prototype, "rejectedByActor", void 0);
+__decorate([
+    Property({ type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], Cart.prototype, "rejectedReason", void 0);
+__decorate([
+    Property({ type: 'string', length: 64, nullable: true }),
+    __metadata("design:type", Object)
+], Cart.prototype, "appliedPromotionCode", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    __metadata("design:type", Object)
+], Cart.prototype, "completedOrderId", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    __metadata("design:type", Object)
+], Cart.prototype, "convertedToQuoteRequestId", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], Cart.prototype, "abandonmentNotifiedAt", void 0);
+__decorate([
+    Property({ type: 'datetime' }),
+    __metadata("design:type", Date)
+], Cart.prototype, "lastActivityAt", void 0);
+__decorate([
+    Property({ type: 'integer', version: true }),
+    __metadata("design:type", Number)
+], Cart.prototype, "version", void 0);
+__decorate([
+    Property({ type: 'datetime', onCreate: () => new Date() }),
+    __metadata("design:type", Date)
+], Cart.prototype, "createdAt", void 0);
+__decorate([
+    Property({ type: 'datetime', onUpdate: () => new Date() }),
+    __metadata("design:type", Date)
+], Cart.prototype, "updatedAt", void 0);
+Cart = __decorate([
+    CustomerScoped(),
+    Entity({ tableName: 'carts' })
+], Cart);
+export { Cart };
+export const CART_STATUSES = [
+    'active',
+    'abandoned',
+    'completed',
+    'rejected',
+];
+export const CART_APPROVAL_STATUSES = [
+    'not_required',
+    'pending',
+    'approved',
+    'rejected_by_org_admin',
+];
+//# sourceMappingURL=cart.entity.js.map

package/dist/backend/entities/cart.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart.entity.js","sourceRoot":"","sources":["../../../src/backend/entities/cart.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGI,IAAM,IAAI,GAAV,MAAM,IAAI;IACf,CAAC,aAAa,CAAC,CAqBD;IAGd,EAAE,GAAW,UAAU,EAAE,CAAC;IAI1B,iBAAiB,CAAiB;IAIlC,cAAc,CAAiB;IAI/B,kBAAkB,CAAiB;IAEnC;;;;OAIG;IAEH,cAAc,CAAiB;IAG/B,MAAM,GAAe,QAAQ,CAAC;IAG9B,cAAc,GAAuB,cAAc,CAAC;IAGpD,sBAAsB,CAAe;IAGrC,UAAU,CAAe;IAGzB,2BAA2B,CAAiB;IAG5C,UAAU,CAAe;IAEzB,yEAAyE;IAEzE,eAAe,CAAiB;IAGhC,cAAc,CAAiB;IAE/B;;;;OAIG;IAEH,oBAAoB,CAAiB;IAErC;;;;;;;;;;;;;;;;;OAiBG;IAEH,gBAAgB,CAAiB;IAEjC,gEAAgE;IAEhE,yBAAyB,CAAiB;IAE1C;;;OAGG;IAEH,qBAAqB,CAAe;IAEpC;;;;OAIG;IAEH,cAAc,GAAS,IAAI,IAAI,EAAE,CAAC;IAElC,4EAA4E;IAE5E,OAAO,CAAU;IAGjB,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAG7B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;CAC9B,CAAA;AAxGC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;gCACH;AAI1B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,KAAK,EAAE;;+CAC0B;AAIlC;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,KAAK,EAAE;;4CACuB;AAI/B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,EAAE;;gDAC0B;AAQnC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4CACZ;AAG/B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;oCACX;AAG9B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;4CACW;AAGpD;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACV;AAGrC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wCACtB;AAGzB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACC;AAG5C;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wCACtB;AAIzB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;6CACzB;AAGhC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4CACZ;AAQ/B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDACpB;AAqBrC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8CACV;AAIjC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uDACD;AAO1C;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDACX;AAQpC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;8BACf,IAAI;4CAAc;AAIlC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;qCAC5B;AAGjB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;uCAAc;AAG7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;uCAAc;AAhIlB,IAAI;IAFhB,cAAc,EAAE;IAChB,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;GAClB,IAAI,CAiIhB;;AAID,MAAM,CAAC,MAAM,aAAa,GAA0B;IAClD,QAAQ;IACR,WAAW;IACX,WAAW;IACX,UAAU;CACF,CAAC;AAQX,MAAM,CAAC,MAAM,sBAAsB,GAAkC;IACnE,cAAc;IACd,SAAS;IACT,UAAU;IACV,uBAAuB;CACf,CAAC"}

package/dist/backend/index.d.ts

@@ -0,0 +1,122 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { Redis } from 'ioredis';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import type { CatalogProductReadPort, CustomerAccountReadPort, LinePricePort, OrganizationDetailsPort, PromotionApplyPort, PromotionCodePort, QuoteRequestReadPort, RfqCustomerPort } from '@endora-commerce/contracts';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+import type { OrganizationReadPort } from '@endora-commerce/platform/kernel';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+import type { SettingsReadPort } from '@endora-commerce/platform/kernel';
+import { CartService } from './services/cart-service.js';
+import { CartAuditService } from './services/cart-audit-service.js';
+import { CartApprovalService } from './services/cart-approval-service.js';
+import { CartRecomputeCache } from './services/cart-recompute-cache.js';
+import { CartAbandonmentWorker } from './services/cart-abandonment-worker.js';
+import { type CartsDeps } from './routes.js';
+import { CartAuditEntry } from './entities/cart-audit-entry.entity.js';
+import { CartItem } from './entities/cart-item.entity.js';
+import { Cart } from './entities/cart.entity.js';
+/**
+ * `carts` — the module that owned 4593 lines and registered none of them
+ * (feature 072, wave 3, T136).
+ *
+ * Every service here was constructed inside `orders/plugin.ts`, and most of them
+ * **conditionally**: `options.auditLogService ? new CartAuditService(…) :
+ * undefined`, and so on down a chain where each `undefined` disabled the next
+ * thing. That made feature availability a function of which arguments a
+ * composition root happened to pass, which is the defect T141's task text names
+ * for `orders` and which `languages` produced in wave 1 as a live bug.
+ *
+ * The stake was not theoretical. Without `CartRecomputeCache` there is no
+ * `CartPricingRecompute`, so every full-cart read returns the snapshotted
+ * `unit_price` instead of a re-resolved engine price. Without `CartAuditService`
+ * there is no `CartApprovalService`, so the organization approval routes never
+ * registered at all — the route *surface* was a function of arguments, the same
+ * finding `shopping_lists` produced in T133.
+ *
+ * All thirteen registrations are unconditional now. `auditLogService` and
+ * `redis` are kernel-owned names, so there is nothing left to branch on.
+ *
+ * **`cartService` is a port, and the outward edge is a different one.** Four
+ * modules read the cart service — `orders`, `shopping_lists`, `quick_order` and
+ * this module's own routes — and all four sit downstream in the manifest graph,
+ * so it is an ordinary `providePort`. What points *outward* is
+ * `pushLineToShoppingList` / `appendShoppingListToCart`: `carts` reaching into
+ * `shopping_lists`, which cannot be a port because `shopping_lists → orders →
+ * carts` would close a cycle. That is {@link CartsCradle.cartShoppingListBridge}
+ * — a contribution point **this module owns**, defaulted to a refusal naming the
+ * absent module, which is the direction `shipmentEmailSender` uses and the
+ * mirror image of the `shoppingListServiceSink` this conversion retires.
+ *
+ * The `RfqService` `Proxy` that lived in `orders/plugin.ts` is gone with it:
+ * it existed only to late-bind a service that `quote_requests` has provided as
+ * a real port since T132.
+ *
+ * The two abandonment settings are read here, through the settings port, rather
+ * than resolved by each root. They are `carts.abandonment.*` — this module's own
+ * knobs — and the identical try/catch-to-default stood in both compositions.
+ */
+/**
+ * How this composition reaches `shopping_lists`, which `carts` may not import.
+ *
+ * Both shapes are taken from the route module's own option types rather than
+ * restated, so a change there is a type error here instead of a drift.
+ */
+export interface CartShoppingListBridge {
+    readonly pushLineToShoppingList: NonNullable<CartsDeps['pushLineToShoppingList']>;
+    readonly appendShoppingListToCart: NonNullable<CartsDeps['appendShoppingListToCart']>;
+}
+/** What `carts` resolves from the container, and the names it owns. */
+export interface CartsCradle {
+    readonly emFactory: () => EntityManager;
+    readonly auditLogService: AuditPort;
+    readonly redis: Redis;
+    readonly requireAdmin: RequireAdminFactory;
+    readonly settingsReadPort: SettingsReadPort;
+    /**
+     * Feature 075, Phase C — the six ports every service here used to reach by
+     * importing another module's class or entity. Each is a contract type from
+     * `@endora-commerce/contracts`, never the provider's class, and each is resolved lazily
+     * by a string literal so a switched-off owner answers at the call.
+     */
+    readonly pricingService: LinePricePort;
+    readonly promotionService: PromotionApplyPort;
+    readonly promotionCodePort: PromotionCodePort;
+    readonly rfqService: RfqCustomerPort;
+    readonly quoteRequestReadPort: QuoteRequestReadPort;
+    readonly catalogProductReadPort: CatalogProductReadPort;
+    readonly customerAccountReadPort: CustomerAccountReadPort;
+    readonly organizationDetailsPort: OrganizationDetailsPort;
+    /** Root-shaped: production reads `request.actor`, the harness `request.testActor`. */
+    readonly cartActorResolver: CartsDeps['resolveCartActor'];
+    /**
+     * The tenancy read port (T138). Was `organizationTransactGuard`, a closure
+     * each root wrote over `OrganizationContextService` — and which the harness
+     * registered as `async () => undefined`, so feature 026's rule that an
+     * unapproved Organization may not transact was enforced in production and by
+     * no test at all.
+     */
+    readonly organizationReadPort: OrganizationReadPort;
+    /** Contribution point: absent means save-to-list and list-to-cart refuse. */
+    readonly cartShoppingListBridge: CartShoppingListBridge;
+    /** Contribution point: absent means the sweep flips status and sends nothing. */
+    readonly cartAbandonmentNotifier: ConstructorParameters<typeof CartAbandonmentWorker>[0]['dispatchNotification'] | undefined;
+    readonly cartService: CartService;
+    readonly cartAuditService: CartAuditService;
+    readonly cartApprovalService: CartApprovalService;
+    readonly cartRecomputeCache: CartRecomputeCache;
+    readonly cartAbandonmentWorker: CartAbandonmentWorker;
+}
+export declare function registerModule(ctx: ModuleContext): void;
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export declare const entities: (typeof Cart | typeof CartItem | typeof CartAuditEntry)[];
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElE,OAAO,KAAK,EAIV,sBAAsB,EACtB,uBAAuB,EACvB,aAAa,EAEb,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EAChB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAKzE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAKzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAExE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAsB,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAGjE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,sBAAsB,EAAE,WAAW,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAClF,QAAQ,CAAC,wBAAwB,EAAE,WAAW,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAC;CACvF;AAED,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;IAC9C,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;IACxD,QAAQ,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;IAC1D,QAAQ,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;IAC1D,sFAAsF;IACtF,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC1D;;;;;;OAMG;IACH,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD,6EAA6E;IAC7E,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;IACxD,iFAAiF;IACjF,QAAQ,CAAC,uBAAuB,EAC5B,qBAAqB,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAC9E,SAAS,CAAC;IACd,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;CACvD;AAeD,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAyOvD;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,QAAQ,2DAIpB,CAAC"}

package/dist/backend/index.js

@@ -0,0 +1,184 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { lazyPort } from '@endora-commerce/platform/kernel';
+import { abandonmentSettingsReaders } from './services/cart-abandonment-settings.js';
+import { CartQueryService } from './services/cart-query-service.js';
+import { CartPlacementApplyService } from './services/cart-placement-apply-port.js';
+import { CartReadService, createCartWritePort } from './services/cart-read-port.js';
+import { CartService } from './services/cart-service.js';
+import { CartUpsellService } from './services/cart-upsell-service.js';
+import { CartCouponService } from './services/cart-coupon-service.js';
+import { CartConversionService } from './services/cart-conversion-service.js';
+import { CartAdminService } from './services/cart-admin-service.js';
+import { CartAuditService } from './services/cart-audit-service.js';
+import { CartApprovalService } from './services/cart-approval-service.js';
+import { CartOrganizationVisibilityService } from './services/cart-organization-visibility-service.js';
+import { CartRecomputeCache } from './services/cart-recompute-cache.js';
+import { CartPricingRecompute } from './services/cart-pricing-recompute.js';
+import { CartAbandonmentWorker } from './services/cart-abandonment-worker.js';
+import { registerCartRoutes } from './routes.js';
+import { registerCartsAdminRoutes } from './routes.admin.js';
+import { registerCartsOrganizationRoutes } from './routes.organization.js';
+import { CartAuditEntry } from './entities/cart-audit-entry.entity.js';
+import { CartItem } from './entities/cart-item.entity.js';
+import { Cart } from './entities/cart.entity.js';
+/** Refuses in the shape Constitution XVII item 3 requires: an explicit 503. */
+function refuseShoppingList() {
+    const refuse = async () => {
+        throw new HttpError(503, ERROR_CODES.MODULE_DISABLED, 'Shopping lists are not available in this deployment.', { module: 'shopping_lists' });
+    };
+    return { pushLineToShoppingList: refuse, appendShoppingListToCart: refuse };
+}
+export function registerModule(ctx) {
+    ctx.di.register({
+        // Contribution point, defaulted to a refusal that names the absent module
+        // rather than a 404 that does not.
+        cartShoppingListBridge: ctx
+            .asFunction(() => refuseShoppingList())
+            .singleton(),
+        // Contribution point: a deployment with no outbound mail flips the cart's
+        // status and sends nothing, which is a coherent state.
+        cartAbandonmentNotifier: ctx
+            .asFunction(() => undefined)
+            .singleton(),
+        cartRecomputeCache: ctx
+            .asFunction(({ redis }) => new CartRecomputeCache(redis))
+            .singleton(),
+        cartAuditService: ctx
+            .asFunction(({ emFactory, auditLogService }) => new CartAuditService(emFactory, auditLogService))
+            .singleton(),
+        cartApprovalService: ctx
+            .asFunction(({ emFactory, cartAuditService }) => new CartApprovalService(emFactory, cartAuditService, lazyPort(ctx, 'organizationDetailsPort'), lazyPort(ctx, 'organizationCartApprovalWritePort'), lazyPort(ctx, 'customerAccountReadPort')))
+            .singleton(),
+        cartAbandonmentWorker: ctx
+            .asFunction(({ emFactory, cartAuditService }) => new CartAbandonmentWorker({
+            emFactory,
+            cartAuditService,
+            /**
+             * This module's own settings, read through the port it holds — the
+             * identical try/catch-to-default stood in both roots before T136,
+             * and in the ops CLI until issue #54. It lives in one file now
+             * (`services/cart-abandonment-settings.ts`), which also carries the
+             * D-41/D-43 history of what these two reads used to get wrong.
+             *
+             * The thunk is what keeps the port read lazy: a gate captured into
+             * this singleton would keep answering after `settings` is switched
+             * off.
+             */
+            ...abandonmentSettingsReaders(() => ctx.cradle().settingsReadPort),
+            dispatchNotification: async (input) => {
+                await ctx.cradle().cartAbandonmentNotifier?.(input);
+            },
+        }))
+            .singleton(),
+    });
+    ctx.di.providePort('cartService', ctx
+        .asFunction(({ emFactory, cartApprovalService, cartAuditService, cartRecomputeCache }) => new CartService(emFactory, lazyPort(ctx, 'pricingService'), lazyPort(ctx, 'catalogProductReadPort'), lazyPort(ctx, 'organizationDetailsPort'), lazyPort(ctx, 'salesChannelMembershipPort'), cartApprovalService, cartAuditService, cartRecomputeCache))
+        .singleton());
+    // ---------------------------------------------------------------------------
+    // Feature 075, Phase P — the published surface.
+    //
+    // `cartService` above hands out the class, and five modules type themselves
+    // against it. These three are what they rewire to: none carries a `Cart` or
+    // a `CartItem` across the boundary, and `cartWritePort` adds the one
+    // operation two of them were writing by hand — clear the customer's active
+    // cart and seed it with these lines, which `orders`' reorder and
+    // `quote_requests`' quote conversion each spelled out with `em.create(Cart,
+    // …)` against this module's tables.
+    // ---------------------------------------------------------------------------
+    ctx.di.providePort('cartReadPort', ctx.asFunction(({ emFactory }) => new CartReadService(emFactory)).singleton());
+    ctx.di.providePort('cartWritePort', ctx
+        .asFunction(({ emFactory }) => createCartWritePort(emFactory, () => ctx.cradle().cartService))
+        .singleton());
+    /**
+     * The basket half of order placement, on the **caller's** `EntityManager`
+     * (feature 080, T048; D-169).
+     *
+     * `orders` imported this module's `Cart` and `CartItem` classes for it until
+     * T048 — a co-transactional seam D-78 point 2 ruled permanent and D-94.1
+     * settled with `carts_completed_order_fk`. The constraint and the transaction
+     * are unchanged; what moved is the four statements, to the module that owns
+     * the two tables. `CartPlacementApplyPort` is declared in this module's
+     * `ports/` directory rather than in `@endora-commerce/contracts`, because its
+     * methods take a MikroORM `EntityManager` and FR-034 keeps that package free
+     * of them.
+     *
+     * It sits beside `cartReadPort` rather than replacing it: that port is the
+     * standalone read, on this module's own `EntityManager`, and `orders`' total
+     * preview is its consumer. The doc block on `CartReadPort` predicted both
+     * halves of this arrangement and asked whoever settled the escalation to
+     * write the real consumer down; T048 is that settlement.
+     */
+    ctx.di.providePort('cartPlacementApplyPort', ctx.asFunction(() => new CartPlacementApplyService()).singleton());
+    ctx.di.providePort('cartQueryPort', ctx.asFunction(({ emFactory }) => new CartQueryService(emFactory)).singleton());
+    ctx.routes(async (app) => {
+        const cradle = ctx.cradle();
+        const emFactory = cradle.emFactory;
+        const resolveCartActor = (req) => ctx.cradle().cartActorResolver(req);
+        // Lazily, even though the module owns this port: route *registration* runs
+        // inside `buildServer` whatever the module's effective state is, so reading
+        // the gate here — through the cradle alias above, which is how it stayed
+        // invisible to `check-port-dependencies` — would stop the next start
+        // instead of stopping the routes (D-40).
+        const cartService = lazyPort(ctx, 'cartService');
+        await registerCartRoutes(app, {
+            emFactory,
+            resolveCartActor,
+            cartService,
+            catalogProducts: lazyPort(ctx, 'catalogProductReadPort'),
+            cartUpsellService: new CartUpsellService(emFactory, lazyPort(ctx, 'catalogProductReadPort')),
+            cartCouponService: new CartCouponService(emFactory, lazyPort(ctx, 'promotionService'), lazyPort(ctx, 'promotionCodePort'), lazyPort(ctx, 'customerAccountReadPort'), lazyPort(ctx, 'organizationDetailsPort'), cradle.cartApprovalService),
+            cartConversionService: new CartConversionService(emFactory, cartService, lazyPort(ctx, 'rfqService'), lazyPort(ctx, 'quoteRequestReadPort'), lazyPort(ctx, 'catalogProductReadPort'), lazyPort(ctx, 'salesChannelMembershipPort')),
+            cartPricingRecompute: new CartPricingRecompute(emFactory, lazyPort(ctx, 'pricingService'), cradle.cartRecomputeCache, lazyPort(ctx, 'catalogProductReadPort'), lazyPort(ctx, 'organizationDetailsPort')),
+            assertOrganizationCanTransact: async (organizationId) => {
+                await ctx.cradle().organizationReadPort.assertCanTransact(organizationId);
+            },
+            pushLineToShoppingList: (input) => ctx.cradle().cartShoppingListBridge.pushLineToShoppingList(input),
+            appendShoppingListToCart: (input) => ctx.cradle().cartShoppingListBridge.appendShoppingListToCart(input),
+        });
+        // Registered unconditionally. Before T136 these two mounted only when the
+        // chain of optional arguments happened to reach them, so an approval or
+        // admin surface could be absent with nothing saying so; the module's own
+        // activation control is the intentional gate now.
+        await registerCartsOrganizationRoutes(app, {
+            emFactory,
+            resolveCartActor,
+            cartService,
+            cartApprovalService: cradle.cartApprovalService,
+            customerAccounts: lazyPort(ctx, 'customerAccountReadPort'),
+            visibilityService: new CartOrganizationVisibilityService(emFactory, lazyPort(ctx, 'customerAccountReadPort')),
+        });
+        await registerCartsAdminRoutes(app, {
+            requireAdmin: cradle.requireAdmin,
+            cartAdminService: new CartAdminService(emFactory, cradle.cartAuditService, lazyPort(ctx, 'customerAccountReadPort'), lazyPort(ctx, 'organizationDetailsPort'), lazyPort(ctx, 'catalogProductReadPort'), lazyPort(ctx, 'promotionService')),
+            cartApprovalService: cradle.cartApprovalService,
+            resolveAdminUserId: (req) => {
+                const prodActor = req.actor;
+                if (prodActor?.kind === 'admin' && prodActor.adminUserId)
+                    return prodActor.adminUserId;
+                const testActor = req
+                    .testActor;
+                if (testActor?.kind === 'admin' && testActor.adminUserId)
+                    return testActor.adminUserId;
+                return null;
+            },
+        });
+    });
+}
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export const entities = [
+    CartAuditEntry,
+    CartItem,
+    Cart,
+];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAgBzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAE3D,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAK5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,iCAAiC,EAAE,MAAM,oDAAoD,CAAC;AACvG,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAkB,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,+BAA+B,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AAkGjD,+EAA+E;AAC/E,SAAS,kBAAkB;IACzB,MAAM,MAAM,GAAG,KAAK,IAAoB,EAAE;QACxC,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,eAAe,EAC3B,sDAAsD,EACtD,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAC7B,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACd,0EAA0E;QAC1E,mCAAmC;QACnC,sBAAsB,EAAE,GAAG;aACxB,UAAU,CAAC,GAA2B,EAAE,CAAC,kBAAkB,EAAE,CAAC;aAC9D,SAAS,EAAE;QAEd,0EAA0E;QAC1E,uDAAuD;QACvD,uBAAuB,EAAE,GAAG;aACzB,UAAU,CAAC,GAA2C,EAAE,CAAC,SAAS,CAAC;aACnE,SAAS,EAAE;QAEd,kBAAkB,EAAE,GAAG;aACpB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAe,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;aACrE,SAAS,EAAE;QAEd,gBAAgB,EAAE,GAAG;aAClB,UAAU,CACT,CAAC,EAAE,SAAS,EAAE,eAAe,EAAe,EAAE,EAAE,CAC9C,IAAI,gBAAgB,CAAC,SAAS,EAAE,eAAe,CAAC,CACnD;aACA,SAAS,EAAE;QAEd,mBAAmB,EAAE,GAAG;aACrB,UAAU,CACT,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAe,EAAE,EAAE,CAC/C,IAAI,mBAAmB,CACrB,SAAS,EACT,gBAAgB,EAChB,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC,EACjE,QAAQ,CACN,GAAG,EACH,mCAAmC,CACpC,EACD,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC,CAClE,CACJ;aACA,SAAS,EAAE;QAEd,qBAAqB,EAAE,GAAG;aACvB,UAAU,CACT,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAe,EAAE,EAAE,CAC/C,IAAI,qBAAqB,CAAC;YACxB,SAAS;YACT,gBAAgB;YAChB;;;;;;;;;;eAUG;YACH,GAAG,0BAA0B,CAC3B,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAe,CAAC,gBAAgB,CACjD;YACD,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAiB,EAAE;gBACnD,MAAM,GAAG,CAAC,MAAM,EAAe,CAAC,uBAAuB,EAAE,CAAC,KAAK,CAAC,CAAC;YACnE,CAAC;SACF,CAAC,CACL;aACA,SAAS,EAAE;KACf,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,aAAa,EACb,GAAG;SACA,UAAU,CACT,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,kBAAkB,EAAe,EAAE,EAAE,CACxF,IAAI,WAAW,CACb,SAAS,EACT,QAAQ,CAAgB,GAAG,EAAE,gBAAgB,CAAC,EAC9C,QAAQ,CAAyB,GAAG,EAAE,wBAAwB,CAAC,EAC/D,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC,EACjE,QAAQ,CAA6B,GAAG,EAAE,4BAA4B,CAAC,EACvE,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,CACnB,CACJ;SACA,SAAS,EAAE,CACf,CAAC;IAEF,8EAA8E;IAC9E,gDAAgD;IAChD,EAAE;IACF,4EAA4E;IAC5E,4EAA4E;IAC5E,qEAAqE;IACrE,2EAA2E;IAC3E,iEAAiE;IACjE,4EAA4E;IAC5E,oCAAoC;IACpC,8EAA8E;IAE9E,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,cAAc,EACd,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS,EAAe,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAC3F,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,eAAe,EACf,GAAG;SACA,UAAU,CAAC,CAAC,EAAE,SAAS,EAAe,EAAE,EAAE,CACzC,mBAAmB,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAe,CAAC,WAAW,CAAC,CAC5E;SACA,SAAS,EAAE,CACf,CAAC;IAEF;;;;;;;;;;;;;;;;;;OAkBG;IACH,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,wBAAwB,EACxB,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,yBAAyB,EAAE,CAAC,CAAC,SAAS,EAAE,CAClE,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,eAAe,EACf,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS,EAAe,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAC5F,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAe,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,gBAAgB,GAAkC,CAAC,GAAG,EAAE,EAAE,CAC9D,GAAG,CAAC,MAAM,EAAe,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACnD,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,qEAAqE;QACrE,yCAAyC;QACzC,MAAM,WAAW,GAAG,QAAQ,CAAc,GAAG,EAAE,aAAa,CAAC,CAAC;QAE9D,MAAM,kBAAkB,CAAC,GAAG,EAAE;YAC5B,SAAS;YACT,gBAAgB;YAChB,WAAW;YACX,eAAe,EAAE,QAAQ,CAAyB,GAAG,EAAE,wBAAwB,CAAC;YAChF,iBAAiB,EAAE,IAAI,iBAAiB,CACtC,SAAS,EACT,QAAQ,CAAyB,GAAG,EAAE,wBAAwB,CAAC,CAChE;YACD,iBAAiB,EAAE,IAAI,iBAAiB,CACtC,SAAS,EACT,QAAQ,CAAqB,GAAG,EAAE,kBAAkB,CAAC,EACrD,QAAQ,CAAoB,GAAG,EAAE,mBAAmB,CAAC,EACrD,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC,EACjE,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC,EACjE,MAAM,CAAC,mBAAmB,CAC3B;YACD,qBAAqB,EAAE,IAAI,qBAAqB,CAC9C,SAAS,EACT,WAAW,EACX,QAAQ,CAAkB,GAAG,EAAE,YAAY,CAAC,EAC5C,QAAQ,CAAuB,GAAG,EAAE,sBAAsB,CAAC,EAC3D,QAAQ,CAAyB,GAAG,EAAE,wBAAwB,CAAC,EAC/D,QAAQ,CAA6B,GAAG,EAAE,4BAA4B,CAAC,CACxE;YACD,oBAAoB,EAAE,IAAI,oBAAoB,CAC5C,SAAS,EACT,QAAQ,CAAgB,GAAG,EAAE,gBAAgB,CAAC,EAC9C,MAAM,CAAC,kBAAkB,EACzB,QAAQ,CAAyB,GAAG,EAAE,wBAAwB,CAAC,EAC/D,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC,CAClE;YACD,6BAA6B,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;gBACtD,MAAM,GAAG,CAAC,MAAM,EAAe,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;YACzF,CAAC;YACD,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE,CAChC,GAAG,CAAC,MAAM,EAAe,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,KAAK,CAAC;YAChF,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE,CAClC,GAAG,CAAC,MAAM,EAAe,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,KAAK,CAAC;SACnF,CAAC,CAAC;QAEH,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,kDAAkD;QAClD,MAAM,+BAA+B,CAAC,GAAG,EAAE;YACzC,SAAS;YACT,gBAAgB;YAChB,WAAW;YACX,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,gBAAgB,EAAE,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC;YACnF,iBAAiB,EAAE,IAAI,iCAAiC,CACtD,SAAS,EACT,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC,CAClE;SACF,CAAC,CAAC;QAEH,MAAM,wBAAwB,CAAC,GAAG,EAAE;YAClC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,gBAAgB,EAAE,IAAI,gBAAgB,CACpC,SAAS,EACT,MAAM,CAAC,gBAAgB,EACvB,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC,EACjE,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC,EACjE,QAAQ,CAAyB,GAAG,EAAE,wBAAwB,CAAC,EAC/D,QAAQ,CAAqB,GAAG,EAAE,kBAAkB,CAAC,CACtD;YACD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,kBAAkB,EAAE,CAAC,GAAmB,EAAiB,EAAE;gBACzD,MAAM,SAAS,GAAI,GAA2D,CAAC,KAAK,CAAC;gBACrF,IAAI,SAAS,EAAE,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,WAAW;oBAAE,OAAO,SAAS,CAAC,WAAW,CAAC;gBACvF,MAAM,SAAS,GAAI,GAA+D;qBAC/E,SAAS,CAAC;gBACb,IAAI,SAAS,EAAE,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,WAAW;oBAAE,OAAO,SAAS,CAAC,WAAW,CAAC;gBACvF,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,cAAc;IACd,QAAQ;IACR,IAAI;CACL,CAAC"}

package/dist/backend/routes.admin.d.ts

@@ -0,0 +1,31 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import type { CartAdminService } from './services/cart-admin-service.js';
+import type { CartApprovalService } from './services/cart-approval-service.js';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+/**
+ * Admin Carts routes (feature 027 US6).
+ *
+ *   - GET    /api/v1/admin/carts                  carts:read
+ *   - GET    /api/v1/admin/carts/:id              carts:read
+ *   - GET    /api/v1/admin/carts/:id/audit        carts:read
+ *   - POST   /api/v1/admin/carts/:id/reject       carts:reject
+ *   - GET    /api/v1/admin/organizations/:id/cart-approval-policy   customers:manage
+ *   - PATCH  /api/v1/admin/organizations/:id/cart-approval-policy   customers:manage
+ */
+export interface CartsAdminRoutesDeps {
+    cartAdminService: CartAdminService;
+    /**
+     * Feature 027 US4 — platform-admin proxy for the per-Organization
+     * `requires_cart_approval` policy. Optional so legacy compositions
+     * still build; production wires it.
+     */
+    cartApprovalService?: CartApprovalService;
+    requireAdmin: RequireAdminFactory;
+    /**
+     * Resolves the admin user id from the authenticated session. Used as
+     * the `actor` on the audit-log row for the reject action.
+     */
+    resolveAdminUserId: (req: FastifyRequest) => string | null;
+}
+export declare function registerCartsAdminRoutes(app: FastifyInstance, deps: CartsAdminRoutesDeps): Promise<void>;
+//# sourceMappingURL=routes.admin.d.ts.map

package/dist/backend/routes.admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.d.ts","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAO/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;;;;GASG;AAEH,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;OAGG;IACH,kBAAkB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,MAAM,GAAG,IAAI,CAAC;CAC5D;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,IAAI,CAAC,CA6Hf"}