@endora-commerce/mod-carts 0.100.0

package/dist/backend/routes.organization.d.ts

@@ -0,0 +1,29 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import { type CustomerAccountReadPort } from '@endora-commerce/contracts';
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { CartService } from './services/cart-service.js';
+import type { CartApprovalService } from './services/cart-approval-service.js';
+import type { CartOrganizationVisibilityService } from './services/cart-organization-visibility-service.js';
+export interface CartsOrganizationRoutesDeps {
+    cartService: CartService;
+    /**
+     * `customer_accounts`' read model (feature 075, Phase C). Two reads: the
+     * caller's own role — which is the org-admin gate on every route here — and
+     * the owner's e-mail on the cart detail. Both were `em.findOne` against
+     * `customer_accounts`' table, so the gate went on answering out of rows a
+     * deactivation leaves in place.
+     */
+    customerAccounts: CustomerAccountReadPort;
+    cartApprovalService: CartApprovalService;
+    visibilityService: CartOrganizationVisibilityService;
+    emFactory: () => EntityManager;
+    resolveCartActor: (request: FastifyRequest) => {
+        customer?: {
+            customerAccountId: string;
+            organizationId: string | null;
+        };
+        anonymousToken?: string;
+    };
+}
+export declare function registerCartsOrganizationRoutes(app: FastifyInstance, deps: CartsOrganizationRoutesDeps): Promise<void>;
+//# sourceMappingURL=routes.organization.d.ts.map

package/dist/backend/routes.organization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.organization.d.ts","sourceRoot":"","sources":["../../src/backend/routes.organization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAQL,KAAK,uBAAuB,EAC7B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,oDAAoD,CAAC;AAsC5G,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,WAAW,CAAC;IACzB;;;;;;OAMG;IACH,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,iBAAiB,EAAE,iCAAiC,CAAC;IACrD,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,gBAAgB,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK;QAC7C,QAAQ,CAAC,EAAE;YAAE,iBAAiB,EAAE,MAAM,CAAC;YAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;QACxE,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED,wBAAsB,+BAA+B,CACnD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,IAAI,CAAC,CAoJf"}

package/dist/backend/routes.organization.js

@@ -0,0 +1,150 @@
+import { rejectOrgCartSchema, setCartApprovalPolicySchema, cartStatusSchema, cartApprovalStatusSchema, ERROR_CODES, } from '@endora-commerce/contracts';
+import { z } from 'zod';
+import { HttpError } from '@endora-commerce/platform/http';
+/**
+ * Storefront routes scoped to an Organization Admin (feature 027 US4).
+ *
+ *   - GET    /api/v1/organization/carts                        org-admin
+ *   - GET    /api/v1/organization/carts/:id                    org-admin
+ *   - PATCH  /api/v1/organization/policies/cart-approval       org-admin
+ *   - POST   /api/v1/cart/submit-for-approval                  ordinary member
+ *   - POST   /api/v1/organization/carts/:id/approve            org-admin
+ *   - POST   /api/v1/organization/carts/:id/reject             org-admin
+ *
+ * Role check is uniform: the caller's CustomerAccount.role must be
+ * `organization_admin` for every endpoint marked "org-admin" above.
+ * Anti-enumeration: a foreign organization's carts return 404, not 403.
+ */
+const orgCartsListQuerySchema = z.object({
+    status: z.union([
+        z.array(cartStatusSchema),
+        z.string().transform((s) => s.split(',').filter(Boolean)),
+    ]).optional(),
+    approvalStatus: z.union([
+        z.array(cartApprovalStatusSchema),
+        z.string().transform((s) => s.split(',').filter(Boolean)),
+    ]).optional(),
+    page: z.coerce.number().int().positive().optional(),
+    pageSize: z.coerce.number().int().positive().max(100).optional(),
+    sort: z.enum([
+        'last_activity_desc',
+        'last_activity_asc',
+        'total_desc',
+        'total_asc',
+        'created_desc',
+    ]).optional(),
+});
+export async function registerCartsOrganizationRoutes(app, deps) {
+    const { cartService, cartApprovalService, visibilityService, customerAccounts, resolveCartActor, } = deps;
+    /** Resolves the caller as an Organization Administrator (404 if not). */
+    const requireOrgAdmin = async (request) => {
+        const actor = resolveCartActor(request);
+        if (!actor.customer) {
+            throw new HttpError(401, ERROR_CODES.UNAUTHORIZED, 'Sign-in required.');
+        }
+        if (!actor.customer.organizationId) {
+            throw new HttpError(403, ERROR_CODES.FORBIDDEN, 'No organization in session.');
+        }
+        const me = await customerAccounts.findById(actor.customer.customerAccountId);
+        if (!me || me.role !== 'organization_admin') {
+            throw new HttpError(403, ERROR_CODES.FORBIDDEN, 'Organization Admin role required.');
+        }
+        return {
+            customerAccountId: actor.customer.customerAccountId,
+            organizationId: actor.customer.organizationId,
+        };
+    };
+    app.get('/api/v1/organization/carts', async (request) => {
+        const orgAdmin = await requireOrgAdmin(request);
+        const parsed = orgCartsListQuerySchema.parse(request.query ?? {});
+        const query = {};
+        if (parsed.status !== undefined)
+            query.status = parsed.status;
+        if (parsed.approvalStatus !== undefined)
+            query.approvalStatus = parsed.approvalStatus;
+        if (parsed.page !== undefined)
+            query.page = parsed.page;
+        if (parsed.pageSize !== undefined)
+            query.pageSize = parsed.pageSize;
+        if (parsed.sort !== undefined)
+            query.sort = parsed.sort;
+        return visibilityService.list(orgAdmin.organizationId, query);
+    });
+    app.get('/api/v1/organization/carts/:id', async (request) => {
+        const orgAdmin = await requireOrgAdmin(request);
+        const cart = await visibilityService.getInOrganization(request.params.id, orgAdmin.organizationId);
+        const items = await cartService.getItems(cart.id);
+        const total = items.reduce((acc, it) => acc + Number(it.unitPrice) * it.quantity, 0);
+        const currency = items[0]?.currency ?? 'PLN';
+        const owner = cart.customerAccountId
+            ? await customerAccounts.findById(cart.customerAccountId)
+            : null;
+        return {
+            data: {
+                id: cart.id,
+                ownerCustomerAccountId: cart.customerAccountId,
+                ownerDisplayName: owner?.email ?? cart.customerAccountId,
+                status: cart.status,
+                approvalStatus: cart.approvalStatus,
+                itemCount: items.length,
+                total: { amount: total, currency },
+                lastActivityAt: cart.lastActivityAt.toISOString(),
+                submittedForApprovalAt: cart.submittedForApprovalAt?.toISOString() ?? null,
+                approvedAt: cart.approvedAt?.toISOString() ?? null,
+                rejectedAt: cart.rejectedAt?.toISOString() ?? null,
+                rejectedReason: cart.rejectedReason ?? null,
+            },
+        };
+    });
+    app.patch('/api/v1/organization/policies/cart-approval', { schema: { body: setCartApprovalPolicySchema } }, async (request) => {
+        const orgAdmin = await requireOrgAdmin(request);
+        const body = setCartApprovalPolicySchema.parse(request.body);
+        const org = await cartApprovalService.setPolicyForOrganization(orgAdmin.organizationId, orgAdmin, body.requiresCartApproval);
+        return {
+            data: {
+                organizationId: org.id,
+                requiresCartApproval: org.requiresCartApproval,
+                updatedAt: org.updatedAt.toISOString(),
+            },
+        };
+    });
+    app.post('/api/v1/cart/submit-for-approval', async (request) => {
+        const actor = resolveCartActor(request);
+        if (!actor.customer) {
+            throw new HttpError(401, ERROR_CODES.UNAUTHORIZED, 'Sign-in required.');
+        }
+        // D-178 — an invariant, not a business state: every customer account has an
+        // Organization (`customer_accounts.organization_id` is `NOT NULL`), so
+        // reaching this is a broken platform and not a buyer who needs to attach
+        // one. Kept rather than deleted — the actor's field is optional at this
+        // seam and the call below takes a `string`.
+        if (!actor.customer.organizationId) {
+            throw new HttpError(500, ERROR_CODES.INTERNAL, 'Invariant violated: a customer account has no Organization (Principle XI).');
+        }
+        const cart = await cartService.getOrCreateForCustomer(actor.customer);
+        await cartApprovalService.submitForApproval(cart, {
+            customerAccountId: actor.customer.customerAccountId,
+            organizationId: actor.customer.organizationId,
+        });
+        return { data: { ok: true, approvalStatus: cart.approvalStatus } };
+    });
+    app.post('/api/v1/organization/carts/:id/approve', async (request) => {
+        const orgAdmin = await requireOrgAdmin(request);
+        const cart = await cartApprovalService.approve(request.params.id, orgAdmin);
+        return { data: { ok: true, cartId: cart.id, approvalStatus: cart.approvalStatus } };
+    });
+    app.post('/api/v1/organization/carts/:id/reject', { schema: { body: rejectOrgCartSchema } }, async (request) => {
+        const orgAdmin = await requireOrgAdmin(request);
+        const body = rejectOrgCartSchema.parse(request.body);
+        const cart = await cartApprovalService.reject(request.params.id, orgAdmin, body.reason);
+        return {
+            data: {
+                ok: true,
+                cartId: cart.id,
+                status: cart.status,
+                approvalStatus: cart.approvalStatus,
+            },
+        };
+    });
+}
+//# sourceMappingURL=routes.organization.js.map

package/dist/backend/routes.organization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.organization.js","sourceRoot":"","sources":["../../src/backend/routes.organization.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,gBAAgB,EAChB,wBAAwB,EACxB,WAAW,GAIZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAE3D;;;;;;;;;;;;;GAaG;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC;QACd,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACzB,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAiB,CAAC;KAC1E,CAAC,CAAC,QAAQ,EAAE;IACb,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;QACjC,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAyB,CAAC;KAClF,CAAC,CAAC,QAAQ,EAAE;IACb,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QACX,oBAAoB;QACpB,mBAAmB;QACnB,YAAY;QACZ,WAAW;QACX,cAAc;KACf,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAqBH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,GAAoB,EACpB,IAAiC;IAEjC,MAAM,EACJ,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,GAAG,IAAI,CAAC;IAET,yEAAyE;IACzE,MAAM,eAAe,GAAG,KAAK,EAAE,OAAuB,EAGnD,EAAE;QACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QAC7E,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC;QACvF,CAAC;QACD,OAAO;YACL,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,iBAAiB;YACnD,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;SAC9C,CAAC;IACJ,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACtD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAiD,EAAE,CAAC;QAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9D,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;YAAE,KAAK,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QACtF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxD,OAAO,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,gCAAgC,EAChC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,iBAAiB,CACpD,OAAO,CAAC,MAAM,CAAC,EAAE,EACjB,QAAQ,CAAC,cAAc,CACxB,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,KAAK,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB;YAClC,CAAC,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC;YACzD,CAAC,CAAC,IAAI,CAAC;QACT,OAAO;YACL,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,sBAAsB,EAAE,IAAI,CAAC,iBAAiB;gBAC9C,gBAAgB,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,iBAAiB;gBACxD,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,SAAS,EAAE,KAAK,CAAC,MAAM;gBACvB,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;gBAClC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE;gBACjD,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,EAAE,WAAW,EAAE,IAAI,IAAI;gBAC1E,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;gBAClD,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;gBAClD,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;aAC5C;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,6CAA6C,EAC7C,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,EAAE,EACjD,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,wBAAwB,CAC5D,QAAQ,CAAC,cAAc,EACvB,QAAQ,EACR,IAAI,CAAC,oBAAoB,CAC1B,CAAC;QACF,OAAO;YACL,IAAI,EAAE;gBACJ,cAAc,EAAE,GAAG,CAAC,EAAE;gBACtB,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;gBAC9C,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;aACvC;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC1E,CAAC;QACD,4EAA4E;QAC5E,uEAAuE;QACvE,yEAAyE;QACzE,wEAAwE;QACxE,4CAA4C;QAC5C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,QAAQ,EACpB,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtE,MAAM,mBAAmB,CAAC,iBAAiB,CAAC,IAAI,EAAE;YAChD,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,iBAAiB;YACnD,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;SAC9C,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CACN,wCAAwC,EACxC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;IACtF,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,uCAAuC,EACvC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EACzC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxF,OAAO;YACL,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/services/cart-abandonment-settings.d.ts

@@ -0,0 +1,34 @@
+import type { SettingsReadPort } from '@endora-commerce/platform/kernel';
+/**
+ * The two `carts.abandonment.*` reads, in one place (issue #54).
+ *
+ * They stood twice: once in `backend.ts`, for the composed sweep, and once in
+ * the hand-built ops CLI, for the operator running it by hand. Two copies of
+ * "which channel does this read name, and what does it fall back to" is
+ * precisely the drift the composition checklist's item 6 is about, and this
+ * pair has drifted before — both copies once passed the literal `'default'` as
+ * a channel id against a `uuid` column and both fell back to `0`, which the
+ * sweep reads as "sweep nothing" (feature 072, D-41/D-43).
+ *
+ * There is one reader now and no second copy to drift: since feature 080's
+ * T042b the operator command resolves the composition's own
+ * `cartAbandonmentWorker`, which this file already supplies.
+ *
+ * The reads are **platform-wide** (`null` channel) on purpose: an abandonment
+ * threshold and an ops mailbox are properties of the platform, not of a
+ * storefront. What may be absorbed is enumerated, because a bare `catch` around
+ * a port call turns fail-closed into fail-open — a shape mismatch, a driver
+ * error or a `ModuleDisabledError` propagates.
+ */
+/** Resolvers in the shape {@link CartAbandonmentWorkerDeps} asks for. */
+export interface AbandonmentSettingsReaders {
+    resolveInactivityMinutes: () => Promise<number>;
+    resolveNotificationRecipient: () => Promise<string>;
+}
+/**
+ * `settings` is a thunk, not a value: in the composed module it resolves the
+ * settings port on every call, and a port captured once keeps answering after
+ * its owner is switched off.
+ */
+export declare function abandonmentSettingsReaders(settings: () => SettingsReadPort): AbandonmentSettingsReaders;
+//# sourceMappingURL=cart-abandonment-settings.d.ts.map

package/dist/backend/services/cart-abandonment-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-abandonment-settings.d.ts","sourceRoot":"","sources":["../../../src/backend/services/cart-abandonment-settings.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAOzE;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,yEAAyE;AACzE,MAAM,WAAW,0BAA0B;IACzC,wBAAwB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,4BAA4B,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACrD;AAkDD;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,gBAAgB,GAC/B,0BAA0B,CAiB5B"}

package/dist/backend/services/cart-abandonment-settings.js

@@ -0,0 +1,55 @@
+import { z } from 'zod';
+import { SettingNotRegistered, SettingOutOfScopeForChannel } from '@endora-commerce/platform/kernel';
+import { CARTS_SETTING_CODES, DEFAULT_ABANDONMENT_INACTIVITY_MINUTES, DEFAULT_ABANDONMENT_NOTIFICATION_RECIPIENT, } from '../../manifest.js';
+/**
+ * Conditions the process has already reported. Never reset, so the guard is per
+ * **process**: an out-of-scope setting is a deployment fact that holds for every
+ * subsequent read, and the sweep runs on a timer. One line per condition is what
+ * makes it findable; one line per read is what makes it invisible. A CLI run is
+ * one pass and then exits, so "once per process" is "once" there — and the warn
+ * is still worth emitting, because an operator running the sweep by hand is
+ * precisely the person who needs to be told the threshold did not come from the
+ * setting they configured.
+ */
+const warnedConditions = new Set();
+function warnOnce(condition, message) {
+    if (warnedConditions.has(condition))
+        return;
+    warnedConditions.add(condition);
+    console.warn(message);
+}
+/**
+ * One platform-wide read of one of this module's own settings, degrading to the
+ * manifest default under exactly the two conditions D-43 allows: an
+ * unregistered code (quiet — the normal state before the manifest reconciler's
+ * first run) and a setting the operator scoped to specific channels (warned
+ * once, because that scoping cannot be intentional for a platform-wide value).
+ */
+async function readPlatformSetting(settings, code, schema, fallback) {
+    try {
+        return await settings.get(code, null, schema);
+    }
+    catch (error) {
+        if (error instanceof SettingNotRegistered)
+            return fallback;
+        if (error instanceof SettingOutOfScopeForChannel) {
+            warnOnce(`out-of-scope:${code}`, `[carts] setting "${code}" is scoped to specific sales channels, so it has ` +
+                `no platform-wide value — falling back to the manifest default ` +
+                `(logged once per process).`);
+            return fallback;
+        }
+        throw error;
+    }
+}
+/**
+ * `settings` is a thunk, not a value: in the composed module it resolves the
+ * settings port on every call, and a port captured once keeps answering after
+ * its owner is switched off.
+ */
+export function abandonmentSettingsReaders(settings) {
+    return {
+        resolveInactivityMinutes: async () => readPlatformSetting(settings(), CARTS_SETTING_CODES.ABANDONMENT_INACTIVITY_MINUTES, z.number().int().nonnegative(), DEFAULT_ABANDONMENT_INACTIVITY_MINUTES),
+        resolveNotificationRecipient: async () => readPlatformSetting(settings(), CARTS_SETTING_CODES.ABANDONMENT_NOTIFICATION_RECIPIENT, z.string(), DEFAULT_ABANDONMENT_NOTIFICATION_RECIPIENT),
+    };
+}
+//# sourceMappingURL=cart-abandonment-settings.js.map

package/dist/backend/services/cart-abandonment-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-abandonment-settings.js","sourceRoot":"","sources":["../../../src/backend/services/cart-abandonment-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAErG,OAAO,EACL,mBAAmB,EACnB,sCAAsC,EACtC,0CAA0C,GAC3C,MAAM,mBAAmB,CAAC;AA8B3B;;;;;;;;;GASG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE3C,SAAS,QAAQ,CAAC,SAAiB,EAAE,OAAe;IAClD,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO;IAC5C,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,mBAAmB,CAChC,QAA0B,EAC1B,IAAY,EACZ,MAAoB,EACpB,QAAW;IAEX,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oBAAoB;YAAE,OAAO,QAAQ,CAAC;QAC3D,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;YACjD,QAAQ,CACN,gBAAgB,IAAI,EAAE,EACtB,oBAAoB,IAAI,oDAAoD;gBAC1E,gEAAgE;gBAChE,4BAA4B,CAC/B,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAgC;IAEhC,OAAO;QACL,wBAAwB,EAAE,KAAK,IAAI,EAAE,CACnC,mBAAmB,CACjB,QAAQ,EAAE,EACV,mBAAmB,CAAC,8BAA8B,EAClD,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAC9B,sCAAsC,CACvC;QACH,4BAA4B,EAAE,KAAK,IAAI,EAAE,CACvC,mBAAmB,CACjB,QAAQ,EAAE,EACV,mBAAmB,CAAC,kCAAkC,EACtD,CAAC,CAAC,MAAM,EAAE,EACV,0CAA0C,CAC3C;KACJ,CAAC;AACJ,CAAC"}

package/dist/backend/services/cart-abandonment-worker.d.ts

@@ -0,0 +1,110 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { CartAuditService } from './cart-audit-service.js';
+/**
+ * CartAbandonmentWorker — feature 027 US5.
+ *
+ * Periodic sweep that transitions `active` carts inactive past the
+ * configured threshold to `abandoned`. Mirrors the RfqExpiryWorker
+ * pattern from feature 008: public `sweep()` is a plain async function
+ * so tests can drive it directly without Redis/BullMQ.
+ *
+ * Idempotency: the eligibility filter excludes carts that already have
+ * `abandonment_notified_at` set. The sweep cycle thus fires the
+ * notification at most once per abandonment episode; reactivation
+ * (CartService.touch / any owner-driven write) clears the column so
+ * the next episode can re-notify.
+ *
+ * Empty-cart suppression: per the spec's edge case, empty carts still
+ * transition to `abandoned` by status, but the notification e-mail is
+ * suppressed (no buyer-side signal worth notifying anyone about).
+ *
+ * ## The sweep works in batches (issue #152)
+ *
+ * It used to load every eligible cart at once and then, per cart, run one
+ * `em.find(CartItem)` and one `CartAuditService.record()` — which flushed. Over
+ * an identity map that kept every cart and every audit row it had already
+ * touched, so each flush re-examined the whole run: 500 carts cost 8.4 s
+ * (16.8 ms each) and 2000 cost 132.0 s (66.0 ms each). Four times the carts,
+ * sixteen times the time. At the 50 000 the spec states its target over, the
+ * benchmark timed out rather than reporting a number, which is why it was
+ * excluded from the perf schedules.
+ *
+ * Three things changed, and only together do they make the cost linear:
+ *
+ *  1. **Eligible carts are read a batch at a time.** The flip removes a cart
+ *     from the eligibility filter, so the same query paginates itself; nothing
+ *     holds 50 000 entities.
+ *  2. **Line counts are one aggregate per batch**, not one query per cart.
+ *  3. **Audit rows land with the flip**, in one flush per batch, through
+ *     {@link CartAuditService.recordWithin}.
+ *
+ * and `em.clear()` at the end of each batch keeps the identity map the size of
+ * one batch rather than the size of the run.
+ *
+ * ## What a failure mid-sweep now costs
+ *
+ * Each batch commits its status flip and its audit rows in the same flush, so
+ * a batch is atomic: never an `abandoned` cart whose audit row is missing.
+ * Before, the whole eligible set was flipped and committed **first** and the
+ * audit rows followed one at a time, so a crash left every cart the sweep had
+ * not reached yet flipped-but-unaudited — permanently, since
+ * `abandonment_notified_at` had already been set and the next tick skips those
+ * carts. The window that used to be "the rest of the run" is now "nothing".
+ *
+ * Batches before the failure are complete and durable; batches after it are
+ * untouched and eligible for the next tick. The notification e-mail is the one
+ * thing that stays best-effort — it is dispatched after the batch is durable,
+ * exactly as it was after the per-cart write before.
+ */
+/**
+ * Eligible carts read, flipped, audited and flushed per round trip.
+ *
+ * Chosen for the flush rather than the query: 500 carts is 500 updates plus
+ * 1000 audit inserts in one transaction, which PostgreSQL takes in a few
+ * multi-row statements, while the memory held between two `em.clear()` calls
+ * stays bounded by this number rather than by the corpus. Overridable per
+ * instance so a test can cross a batch boundary with a handful of carts.
+ */
+export declare const DEFAULT_SWEEP_BATCH_SIZE = 500;
+export interface CartAbandonmentWorkerDeps {
+    emFactory: () => EntityManager;
+    cartAuditService: CartAuditService;
+    /** Resolves the current `carts.abandonment.inactivity_minutes` from settings.
+     * `0` disables the sweep entirely. */
+    resolveInactivityMinutes: () => Promise<number>;
+    /** Resolves the current `carts.abandonment.notification_recipient`
+     * from settings. Empty string = no notification e-mail. */
+    resolveNotificationRecipient: () => Promise<string>;
+    /** Outbound e-mail dispatch. Implementation lives in composition so
+     * the worker stays decoupled from the email module. */
+    dispatchNotification?: (input: {
+        recipientEmail: string;
+        cartId: string;
+        ownerDisplayName: string | null;
+        lineCount: number;
+        organizationId: string | null;
+    }) => Promise<void>;
+    /** Defaults to {@link DEFAULT_SWEEP_BATCH_SIZE}. */
+    batchSize?: number;
+}
+export interface CartAbandonmentSweepResult {
+    abandonedCount: number;
+    notifiedCount: number;
+}
+export declare class CartAbandonmentWorker {
+    private readonly deps;
+    constructor(deps: CartAbandonmentWorkerDeps);
+    sweep(now?: Date): Promise<CartAbandonmentSweepResult>;
+    /**
+     * Lines per cart for a whole batch, as one grouped count.
+     *
+     * Executed through `em.execute` rather than awaited on the knex builder, so
+     * it runs on the EntityManager's transaction context — a bare knex call would
+     * take its own connection and, inside a wrapping transaction, would not see
+     * the rows the caller has written but not committed.
+     */
+    private countLines;
+    /** Returns how many notifications were dispatched for this batch. */
+    private dispatchFor;
+}
+//# sourceMappingURL=cart-abandonment-worker.d.ts.map

package/dist/backend/services/cart-abandonment-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-abandonment-worker.d.ts","sourceRoot":"","sources":["../../../src/backend/services/cart-abandonment-worker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC;0CACsC;IACtC,wBAAwB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD;+DAC2D;IAC3D,4BAA4B,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD;2DACuD;IACvD,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE;QAC7B,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,yBAAyB;IAEtD,KAAK,CAAC,GAAG,GAAE,IAAiB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IA4ExE;;;;;;;OAOG;YACW,UAAU;IAmBxB,qEAAqE;YACvD,WAAW;CA+B1B"}

package/dist/backend/services/cart-abandonment-worker.js

@@ -0,0 +1,185 @@
+import { Cart } from '../entities/cart.entity.js';
+import { CartItem } from '../entities/cart-item.entity.js';
+import { withSystemScope } from '@endora-commerce/platform/tenancy';
+/**
+ * CartAbandonmentWorker — feature 027 US5.
+ *
+ * Periodic sweep that transitions `active` carts inactive past the
+ * configured threshold to `abandoned`. Mirrors the RfqExpiryWorker
+ * pattern from feature 008: public `sweep()` is a plain async function
+ * so tests can drive it directly without Redis/BullMQ.
+ *
+ * Idempotency: the eligibility filter excludes carts that already have
+ * `abandonment_notified_at` set. The sweep cycle thus fires the
+ * notification at most once per abandonment episode; reactivation
+ * (CartService.touch / any owner-driven write) clears the column so
+ * the next episode can re-notify.
+ *
+ * Empty-cart suppression: per the spec's edge case, empty carts still
+ * transition to `abandoned` by status, but the notification e-mail is
+ * suppressed (no buyer-side signal worth notifying anyone about).
+ *
+ * ## The sweep works in batches (issue #152)
+ *
+ * It used to load every eligible cart at once and then, per cart, run one
+ * `em.find(CartItem)` and one `CartAuditService.record()` — which flushed. Over
+ * an identity map that kept every cart and every audit row it had already
+ * touched, so each flush re-examined the whole run: 500 carts cost 8.4 s
+ * (16.8 ms each) and 2000 cost 132.0 s (66.0 ms each). Four times the carts,
+ * sixteen times the time. At the 50 000 the spec states its target over, the
+ * benchmark timed out rather than reporting a number, which is why it was
+ * excluded from the perf schedules.
+ *
+ * Three things changed, and only together do they make the cost linear:
+ *
+ *  1. **Eligible carts are read a batch at a time.** The flip removes a cart
+ *     from the eligibility filter, so the same query paginates itself; nothing
+ *     holds 50 000 entities.
+ *  2. **Line counts are one aggregate per batch**, not one query per cart.
+ *  3. **Audit rows land with the flip**, in one flush per batch, through
+ *     {@link CartAuditService.recordWithin}.
+ *
+ * and `em.clear()` at the end of each batch keeps the identity map the size of
+ * one batch rather than the size of the run.
+ *
+ * ## What a failure mid-sweep now costs
+ *
+ * Each batch commits its status flip and its audit rows in the same flush, so
+ * a batch is atomic: never an `abandoned` cart whose audit row is missing.
+ * Before, the whole eligible set was flipped and committed **first** and the
+ * audit rows followed one at a time, so a crash left every cart the sweep had
+ * not reached yet flipped-but-unaudited — permanently, since
+ * `abandonment_notified_at` had already been set and the next tick skips those
+ * carts. The window that used to be "the rest of the run" is now "nothing".
+ *
+ * Batches before the failure are complete and durable; batches after it are
+ * untouched and eligible for the next tick. The notification e-mail is the one
+ * thing that stays best-effort — it is dispatched after the batch is durable,
+ * exactly as it was after the per-cart write before.
+ */
+/**
+ * Eligible carts read, flipped, audited and flushed per round trip.
+ *
+ * Chosen for the flush rather than the query: 500 carts is 500 updates plus
+ * 1000 audit inserts in one transaction, which PostgreSQL takes in a few
+ * multi-row statements, while the memory held between two `em.clear()` calls
+ * stays bounded by this number rather than by the corpus. Overridable per
+ * instance so a test can cross a batch boundary with a handful of carts.
+ */
+export const DEFAULT_SWEEP_BATCH_SIZE = 500;
+export class CartAbandonmentWorker {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async sweep(now = new Date()) {
+        // Feature 050 — system-wide sweep across all customers; run under a system
+        // scope so the Cart reads/writes carry a tenant context (fail-closed guard).
+        return withSystemScope('cart-abandonment sweep', async () => {
+            const inactivityMinutes = await this.deps.resolveInactivityMinutes();
+            if (!Number.isFinite(inactivityMinutes) || inactivityMinutes <= 0) {
+                return { abandonedCount: 0, notifiedCount: 0 };
+            }
+            const em = this.deps.emFactory();
+            const cutoff = new Date(now.getTime() - inactivityMinutes * 60_000);
+            const batchSize = Math.max(1, this.deps.batchSize ?? DEFAULT_SWEEP_BATCH_SIZE);
+            let abandonedCount = 0;
+            let notifiedCount = 0;
+            /** Read once, on the first batch that has work — as it was per sweep. */
+            let recipient = null;
+            for (;;) {
+                const batch = await em.find(Cart, {
+                    status: 'active',
+                    lastActivityAt: { $lt: cutoff },
+                    abandonmentNotifiedAt: null,
+                }, { limit: batchSize });
+                if (batch.length === 0)
+                    break;
+                if (recipient === null)
+                    recipient = await this.deps.resolveNotificationRecipient();
+                const shouldNotify = recipient.trim().length > 0 && Boolean(this.deps.dispatchNotification);
+                const lineCounts = await this.countLines(em, batch.map((c) => c.id));
+                for (const cart of batch) {
+                    cart.status = 'abandoned';
+                    cart.abandonmentNotifiedAt = now;
+                }
+                this.deps.cartAuditService.recordWithin(em, batch.map((cart) => ({
+                    cartId: cart.id,
+                    actorType: 'sweep',
+                    action: 'abandonment_swept',
+                    fromState: 'active',
+                    toState: 'abandoned',
+                    metadata: { lineCount: lineCounts.get(cart.id) ?? 0, inactivityMinutes },
+                })));
+                // One flush, one transaction: the flip and the rows auditing it.
+                await em.flush();
+                abandonedCount += batch.length;
+                // Notification fan-out happens AFTER the batch is durable so a failure
+                // in the e-mail dispatch cannot leave status in a transient state.
+                if (shouldNotify && this.deps.dispatchNotification) {
+                    notifiedCount += await this.dispatchFor(batch, recipient, lineCounts);
+                }
+                // The identity map is the other half of the old superlinear cost: every
+                // later flush walked the carts and audit rows of every earlier batch.
+                // Nothing above this line survives the batch, so dropping it is free.
+                em.clear();
+                if (batch.length < batchSize)
+                    break;
+            }
+            return { abandonedCount, notifiedCount };
+        });
+    }
+    /**
+     * Lines per cart for a whole batch, as one grouped count.
+     *
+     * Executed through `em.execute` rather than awaited on the knex builder, so
+     * it runs on the EntityManager's transaction context — a bare knex call would
+     * take its own connection and, inside a wrapping transaction, would not see
+     * the rows the caller has written but not committed.
+     */
+    async countLines(em, cartIds) {
+        if (cartIds.length === 0)
+            return new Map();
+        const knex = em.getKnex();
+        // The table name comes from the entity's own metadata rather than a
+        // literal, so a rename stays a one-file change.
+        const table = em.getMetadata().get(CartItem).tableName;
+        const rows = await em.execute(knex(table)
+            .select('cart_id')
+            .count({ line_count: '*' })
+            .whereIn('cart_id', [...cartIds])
+            .groupBy('cart_id'));
+        return new Map(rows.map((r) => [r.cart_id, Number(r.line_count)]));
+    }
+    /** Returns how many notifications were dispatched for this batch. */
+    async dispatchFor(batch, recipient, lineCounts) {
+        const dispatch = this.deps.dispatchNotification;
+        if (!dispatch)
+            return 0;
+        let sent = 0;
+        for (const cart of batch) {
+            const lineCount = lineCounts.get(cart.id) ?? 0;
+            // Empty-cart suppression — no buyer signal worth e-mailing.
+            if (lineCount === 0)
+                continue;
+            try {
+                await dispatch({
+                    recipientEmail: recipient,
+                    cartId: cart.id,
+                    ownerDisplayName: cart.customerAccountId ?? null,
+                    lineCount,
+                    organizationId: cart.organizationId ?? null,
+                });
+                sent += 1;
+            }
+            catch (err) {
+                // Notification failure must not roll back the status flip.
+                // The audit trail records the abandonment; an oncall who
+                // notices the e-mail never arrived can replay manually.
+                console.error('[cart-abandonment-worker] notification failed', err);
+            }
+        }
+        return sent;
+    }
+}
+//# sourceMappingURL=cart-abandonment-worker.js.map

package/dist/backend/services/cart-abandonment-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-abandonment-worker.js","sourceRoot":"","sources":["../../../src/backend/services/cart-abandonment-worker.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAE3D,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AA6B5C,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,IAA+B;QAA/B,SAAI,GAAJ,IAAI,CAA2B;IAAG,CAAC;IAEhE,KAAK,CAAC,KAAK,CAAC,MAAY,IAAI,IAAI,EAAE;QAChC,2EAA2E;QAC3E,6EAA6E;QAC7E,OAAO,eAAe,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,IAAI,CAAC,EAAE,CAAC;gBAClE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;YACjD,CAAC;YAED,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,iBAAiB,GAAG,MAAM,CAAC,CAAC;YACpE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,wBAAwB,CAAC,CAAC;YAE/E,IAAI,cAAc,GAAG,CAAC,CAAC;YACvB,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,yEAAyE;YACzE,IAAI,SAAS,GAAkB,IAAI,CAAC;YAEpC,SAAS,CAAC;gBACR,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CACzB,IAAI,EACJ;oBACE,MAAM,EAAE,QAAQ;oBAChB,cAAc,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;oBAC/B,qBAAqB,EAAE,IAAI;iBAC5B,EACD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;gBACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM;gBAE9B,IAAI,SAAS,KAAK,IAAI;oBAAE,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC;gBACnF,MAAM,YAAY,GAChB,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAEzE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CACtC,EAAE,EACF,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACvB,CAAC;gBAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC;oBAC1B,IAAI,CAAC,qBAAqB,GAAG,GAAG,CAAC;gBACnC,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,CACrC,EAAE,EACF,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACnB,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,SAAS,EAAE,OAAgB;oBAC3B,MAAM,EAAE,mBAA4B;oBACpC,SAAS,EAAE,QAAQ;oBACnB,OAAO,EAAE,WAAW;oBACpB,QAAQ,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE;iBACzE,CAAC,CAAC,CACJ,CAAC;gBACF,iEAAiE;gBACjE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;gBACjB,cAAc,IAAI,KAAK,CAAC,MAAM,CAAC;gBAE/B,uEAAuE;gBACvE,mEAAmE;gBACnE,IAAI,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBACnD,aAAa,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;gBACxE,CAAC;gBAED,wEAAwE;gBACxE,sEAAsE;gBACtE,sEAAsE;gBACtE,EAAE,CAAC,KAAK,EAAE,CAAC;gBAEX,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;oBAAE,MAAM;YACtC,CAAC;YAED,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,UAAU,CACtB,EAAiB,EACjB,OAA0B;QAE1B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC1B,oEAAoE;QACpE,gDAAgD;QAChD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAC3B,IAAI,CAAC,KAAK,CAAC;aACR,MAAM,CAAC,SAAS,CAAC;aACjB,KAAK,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;aAC1B,OAAO,CAAC,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC;aAChC,OAAO,CAAC,SAAS,CAAC,CACtB,CAAC;QACF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,qEAAqE;IAC7D,KAAK,CAAC,WAAW,CACvB,KAAsB,EACtB,SAAiB,EACjB,UAAuC;QAEvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;QAChD,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC;QAExB,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAC/C,4DAA4D;YAC5D,IAAI,SAAS,KAAK,CAAC;gBAAE,SAAS;YAC9B,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC;oBACb,cAAc,EAAE,SAAS;oBACzB,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,gBAAgB,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI;oBAChD,SAAS;oBACT,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;iBAC5C,CAAC,CAAC;gBACH,IAAI,IAAI,CAAC,CAAC;YACZ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,2DAA2D;gBAC3D,yDAAyD;gBACzD,wDAAwD;gBACxD,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}