@endora-commerce/mod-carts 0.100.0

package/dist/backend/services/cart-admin-service.d.ts

@@ -0,0 +1,58 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { AdminCartsListQuery, AdminCartsListResponse, AdminCartDetailResponse, AdminCartAuditResponse, CatalogProductReadPort, CustomerAccountReadPort, OrganizationDetailsPort } from '@endora-commerce/contracts';
+import type { CartAuditService } from './cart-audit-service.js';
+import type { CartSnapshot, PromotionApplication } from '@endora-commerce/contracts';
+/** Narrow port over the promotion engine for the admin cart-detail discount. */
+export interface AdminCartPromotionPort {
+    applyToCart(snapshot: CartSnapshot): Promise<PromotionApplication>;
+}
+/**
+ * Platform-admin observability + emergency-reject surface for carts
+ * (feature 027 US6).
+ *
+ *   - list(filter, sort, page) — paginated, filterable, sortable view
+ *     across every cart on the platform.
+ *   - getById(id) — read-only detail with line items, discount, and
+ *     conversion lineage.
+ *   - getAudit(id, page) — paginated cart-detail audit feed.
+ *   - reject(id, adminUserId, reason) — terminal `Rejected` transition
+ *     by a platform admin. Refuses on already-terminal carts.
+ *
+ * Capability gates are enforced at the route level via `requireAdmin('carts:read')`
+ * and `requireAdmin('carts:reject')`.
+ */
+export declare class CartAdminService {
+    #private;
+    private readonly emFactory;
+    private readonly cartAuditService;
+    /**
+     * The three read models this surface renders names from (feature 075,
+     * Phase C). Every one of them was an `em.find` against another module's
+     * table, so an operator who switched `catalog` off still saw product
+     * names on the admin cart detail — out of rows deactivation leaves in
+     * place. `SalesChannel` is the kernel's and stays a direct read.
+     */
+    private readonly customerAccounts;
+    private readonly organizations;
+    private readonly catalogProducts;
+    /** Feature 045 (T043) — when wired, the detail shows the real discount. */
+    private readonly promotion?;
+    constructor(emFactory: () => EntityManager, cartAuditService: CartAuditService, 
+    /**
+     * The three read models this surface renders names from (feature 075,
+     * Phase C). Every one of them was an `em.find` against another module's
+     * table, so an operator who switched `catalog` off still saw product
+     * names on the admin cart detail — out of rows deactivation leaves in
+     * place. `SalesChannel` is the kernel's and stays a direct read.
+     */
+    customerAccounts: CustomerAccountReadPort, organizations: OrganizationDetailsPort, catalogProducts: CatalogProductReadPort, 
+    /** Feature 045 (T043) — when wired, the detail shows the real discount. */
+    promotion?: AdminCartPromotionPort | undefined);
+    list(query?: AdminCartsListQuery): Promise<AdminCartsListResponse>;
+    getById(cartId: string): Promise<AdminCartDetailResponse>;
+    getAudit(cartId: string, page?: number, pageSize?: number): Promise<AdminCartAuditResponse>;
+    reject(cartId: string, adminUserId: string, reason: string): Promise<AdminCartDetailResponse>;
+    private sortClause;
+    private itemCountsByCart;
+}
+//# sourceMappingURL=cart-admin-service.d.ts.map

package/dist/backend/services/cart-admin-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-admin-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/cart-admin-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EACV,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EAEtB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,4BAA4B,CAAC;AAOpC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAErF,gFAAgF;AAChF,MAAM,WAAW,sBAAsB;IACrC,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACpE;AAED;;;;;;;;;;;;;;GAcG;AAEH,qBAAa,gBAAgB;;IAEzB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAbV,SAAS,EAAE,MAAM,aAAa,EAC9B,gBAAgB,EAAE,gBAAgB;IACnD;;;;;;OAMG;IACc,gBAAgB,EAAE,uBAAuB,EACzC,aAAa,EAAE,uBAAuB,EACtC,eAAe,EAAE,sBAAsB;IACxD,2EAA2E;IAC1D,SAAS,CAAC,EAAE,sBAAsB,YAAA;IAkF/C,IAAI,CAAC,KAAK,GAAE,mBAAwB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAqFtE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAsGzD,QAAQ,CACZ,MAAM,EAAE,MAAM,EACd,IAAI,SAAI,EACR,QAAQ,SAAK,GACZ,OAAO,CAAC,sBAAsB,CAAC;IAuC5B,MAAM,CACV,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC;IAiCnC,OAAO,CAAC,UAAU;YAoBJ,gBAAgB;CAe/B"}

package/dist/backend/services/cart-admin-service.js

@@ -0,0 +1,397 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { orgConstraintFor } from '@endora-commerce/platform/tenancy';
+import { Cart } from '../entities/cart.entity.js';
+import { CartItem } from '../entities/cart-item.entity.js';
+import { CartAuditEntry } from '../entities/cart-audit-entry.entity.js';
+import { SalesChannel } from '@endora-commerce/platform/kernel';
+/**
+ * Platform-admin observability + emergency-reject surface for carts
+ * (feature 027 US6).
+ *
+ *   - list(filter, sort, page) — paginated, filterable, sortable view
+ *     across every cart on the platform.
+ *   - getById(id) — read-only detail with line items, discount, and
+ *     conversion lineage.
+ *   - getAudit(id, page) — paginated cart-detail audit feed.
+ *   - reject(id, adminUserId, reason) — terminal `Rejected` transition
+ *     by a platform admin. Refuses on already-terminal carts.
+ *
+ * Capability gates are enforced at the route level via `requireAdmin('carts:read')`
+ * and `requireAdmin('carts:reject')`.
+ */
+export class CartAdminService {
+    emFactory;
+    cartAuditService;
+    customerAccounts;
+    organizations;
+    catalogProducts;
+    promotion;
+    constructor(emFactory, cartAuditService, 
+    /**
+     * The three read models this surface renders names from (feature 075,
+     * Phase C). Every one of them was an `em.find` against another module's
+     * table, so an operator who switched `catalog` off still saw product
+     * names on the admin cart detail — out of rows deactivation leaves in
+     * place. `SalesChannel` is the kernel's and stays a direct read.
+     */
+    customerAccounts, organizations, catalogProducts, 
+    /** Feature 045 (T043) — when wired, the detail shows the real discount. */
+    promotion) {
+        this.emFactory = emFactory;
+        this.cartAuditService = cartAuditService;
+        this.customerAccounts = customerAccounts;
+        this.organizations = organizations;
+        this.catalogProducts = catalogProducts;
+        this.promotion = promotion;
+    }
+    /**
+     * The organization restriction this surface must apply for itself.
+     *
+     * `Cart` is `@CustomerScoped`, and `customerFilterCond` contributes **no
+     * predicate at all** under `allowed-set` — the mode an assignment-scoped
+     * administrator resolves to — because a customer-account predicate cannot
+     * express an organization restriction. So for a `sales_representative` this
+     * entity behaves exactly as if it were `@GlobalEntity`, and every method
+     * below would answer for every cart on the platform.
+     *
+     * The reason given for that exemption is that customer-scoped entities carry
+     * no org column. `Cart` does carry one, so the constraint is expressible
+     * here, with the helper `derived-scope.ts` exists to provide and that
+     * `returns` already uses for the same reason at its own list.
+     *
+     * A cart with **no** organization is an anonymous or guest cart. It belongs
+     * to no organization, so it is outside the reach of an administrator whose
+     * authority is a set of organizations, and inside a platform administrator's.
+     * `$in` over the assigned ids expresses exactly that — SQL `in` never matches
+     * NULL — so the list needs no separate clause for it and the per-row check
+     * below states it explicitly.
+     */
+    #orgScopeWhere(requested) {
+        const constraint = orgConstraintFor();
+        if (constraint.kind === 'all') {
+            return requested ? { organizationId: requested } : {};
+        }
+        // The `single` arm's null branch matches nothing since D-178, and that is
+        // the resolution of feature 087's R-4 rather than an answer to it: R-4 asks
+        // which of two shipped semantics for "a single-org actor whose organisation
+        // is null" is correct — this one's "matches nothing" or `orgFilterCond`'s
+        // "matches null-org rows". There is no such actor any more, so both arms
+        // die and neither semantic has to win.
+        //
+        // That holds **because the tightening landed first**, and the condition
+        // does not travel separately from the claim. Feature 087's Group B adds a
+        // nullable `organization_id` to five tables and leaves ownerless rows in
+        // place; in the other order those rows would exist while the null-org actor
+        // still did, `orgFilterCond`'s `{ organizationId: null }` would start
+        // matching real data, and the two semantics would begin disagreeing about
+        // rows a buyer can see rather than about an empty set.
+        const allowed = constraint.kind === 'single'
+            ? constraint.organizationId === null
+                ? []
+                : [constraint.organizationId]
+            : [...constraint.organizationIds];
+        // A caller-supplied filter narrows within the scope; it never widens it,
+        // and asking for an organization outside the scope is answered as an empty
+        // page rather than as an error, so the filter is no existence oracle.
+        if (requested)
+            return allowed.includes(requested) ? { organizationId: requested } : 'refuse';
+        return { organizationId: { $in: allowed } };
+    }
+    /**
+     * Refuse a cart the caller's organizations do not reach.
+     *
+     * 404 rather than 403, and the same `cart_not_found` code the absent row
+     * gets: an out-of-scope cart must not be distinguishable from one that does
+     * not exist.
+     */
+    #assertCartInScope(cart) {
+        const constraint = orgConstraintFor();
+        if (constraint.kind === 'all')
+            return;
+        // The cart's own organisation is still nullable — an anonymous visitor's
+        // cart has none, and feature 087's Group B is what settles that. What is
+        // gone since D-178 is the other half of the pairing: a `single-org` *actor*
+        // whose organisation is null, which is why the `single` arm can no longer
+        // match one of those carts by having a null of its own.
+        const organizationId = cart.organizationId ?? null;
+        const allowed = constraint.kind === 'single'
+            ? constraint.organizationId === organizationId
+            : organizationId !== null && constraint.organizationIds.includes(organizationId);
+        if (!allowed) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'cart_not_found');
+        }
+    }
+    async list(query = {}) {
+        const em = this.emFactory();
+        const where = {};
+        if (query.status && query.status.length > 0)
+            where['status'] = { $in: query.status };
+        if (query.approvalStatus && query.approvalStatus.length > 0) {
+            where['approvalStatus'] = { $in: query.approvalStatus };
+        }
+        const orgWhere = this.#orgScopeWhere(query.organizationId);
+        if (orgWhere === 'refuse') {
+            const emptyPage = query.page ?? 1;
+            const emptySize = Math.min(query.pageSize ?? 50, 200);
+            return { data: [], meta: { page: emptyPage, pageSize: emptySize, totalCount: 0 } };
+        }
+        Object.assign(where, orgWhere);
+        if (query.customerAccountId)
+            where['customerAccountId'] = query.customerAccountId;
+        if (query.salesChannelId)
+            where['salesChannelId'] = query.salesChannelId;
+        if (query.lastActivityFrom || query.lastActivityTo) {
+            const range = {};
+            if (query.lastActivityFrom)
+                range['$gte'] = new Date(query.lastActivityFrom);
+            if (query.lastActivityTo)
+                range['$lte'] = new Date(query.lastActivityTo);
+            where['lastActivityAt'] = range;
+        }
+        const page = query.page ?? 1;
+        const pageSize = Math.min(query.pageSize ?? 50, 200);
+        const orderBy = this.sortClause(query.sort ?? 'last_activity_desc');
+        const [rows, totalCount] = await em.findAndCount(Cart, where, {
+            orderBy,
+            limit: pageSize,
+            offset: (page - 1) * pageSize,
+        });
+        // Resolve display names + counts in bulk to avoid N+1 lookups.
+        const cartIds = rows.map((r) => r.id);
+        const customerIds = Array.from(new Set(rows.map((r) => r.customerAccountId).filter((id) => Boolean(id))));
+        const orgIds = Array.from(new Set(rows.map((r) => r.organizationId).filter((id) => Boolean(id))));
+        const channelIds = Array.from(new Set(rows.map((r) => r.salesChannelId).filter((id) => Boolean(id))));
+        const [customers, organizations, channels, itemCounts] = await Promise.all([
+            this.customerAccounts.findByIds(customerIds),
+            this.organizations.findByIds(orgIds),
+            channelIds.length > 0
+                ? em.find(SalesChannel, { id: { $in: channelIds } })
+                : Promise.resolve([]),
+            this.itemCountsByCart(em, cartIds),
+        ]);
+        const customerById = new Map(customers.map((c) => [c.id, c]));
+        const orgById = new Map(organizations.map((o) => [o.id, o]));
+        const channelById = new Map(channels.map((c) => [c.id, c]));
+        return {
+            data: rows.map((cart) => {
+                const items = itemCounts.get(cart.id) ?? { count: 0, total: 0, currency: 'PLN' };
+                const cust = cart.customerAccountId ? customerById.get(cart.customerAccountId) : null;
+                const org = cart.organizationId ? orgById.get(cart.organizationId) : null;
+                const channel = cart.salesChannelId ? channelById.get(cart.salesChannelId) : null;
+                return {
+                    id: cart.id,
+                    ownerCustomerAccountId: cart.customerAccountId ?? null,
+                    ownerDisplayName: cust ? (cust.email ?? cust.id) : null,
+                    organizationId: cart.organizationId ?? null,
+                    organizationDisplayName: org?.name ?? null,
+                    salesChannelId: cart.salesChannelId ?? null,
+                    salesChannelCode: channel?.code ?? null,
+                    status: cart.status,
+                    approvalStatus: cart.approvalStatus,
+                    itemCount: items.count,
+                    total: { amount: items.total, currency: items.currency },
+                    appliedPromotionCode: cart.appliedPromotionCode ?? null,
+                    lastActivityAt: cart.lastActivityAt.toISOString(),
+                    createdAt: cart.createdAt.toISOString(),
+                };
+            }),
+            meta: { page, pageSize, totalCount },
+        };
+    }
+    async getById(cartId) {
+        const em = this.emFactory();
+        const cart = await em.findOne(Cart, { id: cartId });
+        if (!cart) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'cart_not_found');
+        }
+        this.#assertCartInScope(cart);
+        const items = await em.find(CartItem, { cartId });
+        const cust = cart.customerAccountId
+            ? await this.customerAccounts.findById(cart.customerAccountId)
+            : null;
+        const org = cart.organizationId
+            ? await this.organizations.findById(cart.organizationId)
+            : null;
+        const channel = cart.salesChannelId
+            ? await em.findOne(SalesChannel, { id: cart.salesChannelId })
+            : null;
+        const productIds = Array.from(new Set(items.map((it) => it.productId)));
+        const products = await this.catalogProducts.findByIds(productIds);
+        const productById = new Map(products.map((p) => [p.id, p]));
+        const subtotal = items.reduce((acc, it) => acc + Number(it.unitPrice) * it.quantity, 0);
+        const currency = items[0]?.currency ?? 'PLN';
+        // Feature 045 (T043) — compute the real discount for the detail view.
+        //
+        // No `catch` (issue #84). `applyToCart` returns `discountTotal: 0` when
+        // nothing applies, so zero is already an answer it can give; catching one
+        // made "no promotion matched" and "`promotions` is switched off"
+        // indistinguishable, and an administrator reading this panel would have
+        // quoted a customer the undiscounted total as if it were the real one.
+        let discountTotal = 0;
+        if (this.promotion && items.length > 0) {
+            const application = await this.promotion.applyToCart({
+                organizationId: cart.organizationId ?? null,
+                // Issue #177 — the owner's effective group, from the two records this
+                // handler has already loaded. A literal `null` here showed the operator
+                // an undiscounted total for every buyer a group-targeted promotion
+                // applies to, which is the figure they then quote to that buyer.
+                customerGroupId: cust?.customerGroupId ?? org?.customerGroupId ?? null,
+                currency,
+                lines: items.map((it) => ({
+                    productId: it.productId,
+                    variantId: it.variantId ?? null,
+                    categoryIds: [],
+                    quantity: it.quantity,
+                    unitPrice: { amount: Number(it.unitPrice), currency: it.currency },
+                })),
+                deliveryTotal: 0,
+                promotionCode: cart.appliedPromotionCode ?? null,
+                salesChannelId: cart.salesChannelId ?? null,
+            });
+            discountTotal = application.discountTotal;
+        }
+        const total = Math.max(0, Math.round((subtotal - discountTotal) * 100) / 100);
+        return {
+            data: {
+                id: cart.id,
+                ownerCustomerAccountId: cart.customerAccountId ?? null,
+                ownerDisplayName: cust ? (cust.email ?? cust.id) : null,
+                organizationId: cart.organizationId ?? null,
+                organizationDisplayName: org?.name ?? null,
+                salesChannelId: cart.salesChannelId ?? null,
+                salesChannelCode: channel?.code ?? null,
+                status: cart.status,
+                approvalStatus: cart.approvalStatus,
+                itemCount: items.length,
+                total: { amount: total, currency },
+                appliedPromotionCode: cart.appliedPromotionCode ?? null,
+                lastActivityAt: cart.lastActivityAt.toISOString(),
+                createdAt: cart.createdAt.toISOString(),
+                items: items.map((it) => {
+                    const product = productById.get(it.productId);
+                    return {
+                        id: it.id,
+                        productId: it.productId,
+                        productName: product ? anyLocaleName(product) : it.productId,
+                        variantId: it.variantId ?? null,
+                        quantity: it.quantity,
+                        unitPrice: { amount: Number(it.unitPrice), currency: it.currency },
+                        lineTotal: { amount: Number(it.unitPrice) * it.quantity, currency: it.currency },
+                    };
+                }),
+                discount: discountTotal > 0
+                    ? { code: cart.appliedPromotionCode ?? null, amount: discountTotal, currency }
+                    : cart.appliedPromotionCode
+                        ? { code: cart.appliedPromotionCode, amount: 0, currency }
+                        : null,
+                convertedToQuoteRequestId: cart.convertedToQuoteRequestId ?? null,
+                submittedForApprovalAt: cart.submittedForApprovalAt?.toISOString() ?? null,
+                approvedAt: cart.approvedAt?.toISOString() ?? null,
+                approvedByCustomerAccountId: cart.approvedByCustomerAccountId ?? null,
+                rejectedAt: cart.rejectedAt?.toISOString() ?? null,
+                rejectedByActor: cart.rejectedByActor ?? null,
+                rejectedReason: cart.rejectedReason ?? null,
+            },
+        };
+    }
+    async getAudit(cartId, page = 1, pageSize = 50) {
+        const em = this.emFactory();
+        const cart = await em.findOne(Cart, { id: cartId });
+        if (!cart) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'cart_not_found');
+        }
+        this.#assertCartInScope(cart);
+        const capped = Math.min(pageSize, 200);
+        const [rows, totalCount] = await em.findAndCount(CartAuditEntry, { cartId }, { orderBy: { occurredAt: 'desc' }, limit: capped, offset: (page - 1) * capped });
+        const actorIds = Array.from(new Set(rows.map((r) => r.actorId).filter((id) => Boolean(id))));
+        const actors = await this.customerAccounts.findByIds(actorIds);
+        const actorById = new Map(actors.map((a) => [a.id, a]));
+        return {
+            data: rows.map((r) => ({
+                id: r.id,
+                occurredAt: r.occurredAt.toISOString(),
+                actorType: r.actorType,
+                actorId: r.actorId ?? null,
+                actorDisplayName: r.actorId
+                    ? (actorById.get(r.actorId)?.email ?? r.actorId)
+                    : null,
+                action: r.action,
+                fromState: r.fromState ?? null,
+                toState: r.toState ?? null,
+                reason: r.reason ?? null,
+                metadata: r.metadata,
+            })),
+            meta: { page, pageSize: capped, totalCount },
+        };
+    }
+    async reject(cartId, adminUserId, reason) {
+        const em = this.emFactory();
+        const cart = await em.findOne(Cart, { id: cartId });
+        if (!cart) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'cart_not_found');
+        }
+        this.#assertCartInScope(cart);
+        if (cart.status === 'completed' || cart.status === 'rejected') {
+            throw new HttpError(422, ERROR_CODES.VALIDATION_FAILED, 'already_terminal');
+        }
+        const fromStatus = cart.status;
+        cart.status = 'rejected';
+        cart.rejectedAt = new Date();
+        cart.rejectedByActor = `admin:${adminUserId}`;
+        cart.rejectedReason = reason;
+        cart.lastActivityAt = new Date();
+        await em.flush();
+        await this.cartAuditService.record({
+            cartId: cart.id,
+            actorType: 'platform_admin',
+            actorId: adminUserId,
+            action: 'admin_rejected',
+            fromState: fromStatus,
+            toState: 'rejected',
+            reason,
+        });
+        return this.getById(cartId);
+    }
+    // Internal helpers ─────────────────────────────────────────────────────
+    sortClause(sort) {
+        switch (sort) {
+            case 'last_activity_asc':
+                return { lastActivityAt: 'asc' };
+            case 'total_desc':
+            case 'total_asc':
+                // The grand total is computed from cart_items at read time; the
+                // SQL-side approximation is `updatedAt` (a write-heavy proxy). A
+                // true total-sort needs a subquery — kept as a follow-up.
+                return { updatedAt: sort === 'total_desc' ? 'desc' : 'asc' };
+            case 'created_desc':
+                return { createdAt: 'desc' };
+            case 'last_activity_desc':
+            default:
+                return { lastActivityAt: 'desc' };
+        }
+    }
+    async itemCountsByCart(em, cartIds) {
+        const result = new Map();
+        if (cartIds.length === 0)
+            return result;
+        const items = await em.find(CartItem, { cartId: { $in: cartIds } });
+        for (const it of items) {
+            const prev = result.get(it.cartId) ?? { count: 0, total: 0, currency: it.currency };
+            prev.count += 1;
+            prev.total += Number(it.unitPrice) * it.quantity;
+            result.set(it.cartId, prev);
+        }
+        return result;
+    }
+}
+function anyLocaleName(product) {
+    if (!product.name || typeof product.name !== 'object')
+        return product.id;
+    const en = product.name['en-US'] ?? product.name['en'];
+    if (typeof en === 'string' && en.length > 0)
+        return en;
+    const first = Object.values(product.name).find((v) => typeof v === 'string' && v.length > 0);
+    return first ?? product.id;
+}
+//# sourceMappingURL=cart-admin-service.js.map

package/dist/backend/services/cart-admin-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-admin-service.js","sourceRoot":"","sources":["../../../src/backend/services/cart-admin-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAWzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAShE;;;;;;;;;;;;;;GAcG;AAEH,MAAM,OAAO,gBAAgB;IAER;IACA;IAQA;IACA;IACA;IAEA;IAdnB,YACmB,SAA8B,EAC9B,gBAAkC;IACnD;;;;;;OAMG;IACc,gBAAyC,EACzC,aAAsC,EACtC,eAAuC;IACxD,2EAA2E;IAC1D,SAAkC;QAblC,cAAS,GAAT,SAAS,CAAqB;QAC9B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAQlC,qBAAgB,GAAhB,gBAAgB,CAAyB;QACzC,kBAAa,GAAb,aAAa,CAAyB;QACtC,oBAAe,GAAf,eAAe,CAAwB;QAEvC,cAAS,GAAT,SAAS,CAAyB;IAClD,CAAC;IAEJ;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,cAAc,CAAC,SAAkB;QAC/B,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;QACtC,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,CAAC;QACD,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,yEAAyE;QACzE,uCAAuC;QACvC,EAAE;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,4EAA4E;QAC5E,sEAAsE;QACtE,0EAA0E;QAC1E,uDAAuD;QACvD,MAAM,OAAO,GACX,UAAU,CAAC,IAAI,KAAK,QAAQ;YAC1B,CAAC,CAAC,UAAU,CAAC,cAAc,KAAK,IAAI;gBAClC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;YAC/B,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;QACtC,yEAAyE;QACzE,2EAA2E;QAC3E,sEAAsE;QACtE,IAAI,SAAS;YAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7F,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,IAAU;QAC3B,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;QACtC,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO;QACtC,yEAAyE;QACzE,yEAAyE;QACzE,4EAA4E;QAC5E,0EAA0E;QAC1E,wDAAwD;QACxD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC;QACnD,MAAM,OAAO,GACX,UAAU,CAAC,IAAI,KAAK,QAAQ;YAC1B,CAAC,CAAC,UAAU,CAAC,cAAc,KAAK,cAAc;YAC9C,CAAC,CAAC,cAAc,KAAK,IAAI,IAAI,UAAU,CAAC,eAAe,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAA6B,EAAE;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QACrF,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,KAAK,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC3D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;YAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACrF,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,iBAAiB;YAAE,KAAK,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC;QAClF,IAAI,KAAK,CAAC,cAAc;YAAE,KAAK,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;QACzE,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACnD,MAAM,KAAK,GAAyB,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,gBAAgB;gBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC7E,IAAI,KAAK,CAAC,cAAc;gBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACzE,KAAK,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC;QAClC,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,oBAAoB,CAAC,CAAC;QAEpE,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE;YAC5D,OAAO;YACP,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ;SAC9B,CAAC,CAAC;QAEH,+DAA+D;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAC5B,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CACxF,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CACvB,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CACrF,CAAC;QACF,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAC3B,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CACrF,CAAC;QAEF,MAAM,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzE,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,WAAW,CAAC;YAC5C,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC;YACpC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACnB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC;gBACpD,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,CAAC;SACnC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5D,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACtB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACjF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACtF,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAClF,OAAO;oBACL,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,sBAAsB,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI;oBACtD,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;oBACvD,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;oBAC3C,uBAAuB,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;oBAC1C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;oBAC3C,gBAAgB,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI;oBACvC,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,SAAS,EAAE,KAAK,CAAC,KAAK;oBACtB,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;oBACxD,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;oBACvD,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE;oBACjD,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;iBACxC,CAAC;YACJ,CAAC,CAAC;YACF,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE;SACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB;YACjC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC;YAC9D,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc;YAC7B,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC;YACxD,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc;YACjC,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7D,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5D,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,KAAK,CAAC;QAE7C,sEAAsE;QACtE,EAAE;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,iEAAiE;QACjE,wEAAwE;QACxE,uEAAuE;QACvE,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;gBACnD,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;gBAC3C,sEAAsE;gBACtE,wEAAwE;gBACxE,mEAAmE;gBACnE,iEAAiE;gBACjE,eAAe,EAAE,IAAI,EAAE,eAAe,IAAI,GAAG,EAAE,eAAe,IAAI,IAAI;gBACtE,QAAQ;gBACR,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;oBACxB,SAAS,EAAE,EAAE,CAAC,SAAS;oBACvB,SAAS,EAAE,EAAE,CAAC,SAAS,IAAI,IAAI;oBAC/B,WAAW,EAAE,EAAE;oBACf,QAAQ,EAAE,EAAE,CAAC,QAAQ;oBACrB,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;iBACnE,CAAC,CAAC;gBACH,aAAa,EAAE,CAAC;gBAChB,aAAa,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;gBAChD,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;aAC5C,CAAC,CAAC;YACH,aAAa,GAAG,WAAW,CAAC,aAAa,CAAC;QAC5C,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,aAAa,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QAE9E,OAAO;YACL,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,sBAAsB,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI;gBACtD,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;gBACvD,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;gBAC3C,uBAAuB,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;gBAC1C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;gBAC3C,gBAAgB,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI;gBACvC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,SAAS,EAAE,KAAK,CAAC,MAAM;gBACvB,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;gBAClC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;gBACvD,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE;gBACjD,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;gBACvC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;oBACtB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC9C,OAAO;wBACL,EAAE,EAAE,EAAE,CAAC,EAAE;wBACT,SAAS,EAAE,EAAE,CAAC,SAAS;wBACvB,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS;wBAC5D,SAAS,EAAE,EAAE,CAAC,SAAS,IAAI,IAAI;wBAC/B,QAAQ,EAAE,EAAE,CAAC,QAAQ;wBACrB,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;wBAClE,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;qBACjF,CAAC;gBACJ,CAAC,CAAC;gBACF,QAAQ,EACN,aAAa,GAAG,CAAC;oBACf,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE;oBAC9E,CAAC,CAAC,IAAI,CAAC,oBAAoB;wBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE;wBAC1D,CAAC,CAAC,IAAI;gBACZ,yBAAyB,EAAE,IAAI,CAAC,yBAAyB,IAAI,IAAI;gBACjE,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,EAAE,WAAW,EAAE,IAAI,IAAI;gBAC1E,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;gBAClD,2BAA2B,EAAE,IAAI,CAAC,2BAA2B,IAAI,IAAI;gBACrE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;gBAClD,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI;gBAC7C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;aAC5C;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,MAAc,EACd,IAAI,GAAG,CAAC,EACR,QAAQ,GAAG,EAAE;QAEb,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,YAAY,CAC9C,cAAc,EACd,EAAE,MAAM,EAAE,EACV,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,CAChF,CAAC;QAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CACzB,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAC9E,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAExD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE;gBACtC,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;gBAC1B,gBAAgB,EAAE,CAAC,CAAC,OAAO;oBACzB,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC;oBAChD,CAAC,CAAC,IAAI;gBACR,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;gBAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;gBAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC;YACH,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE;SAC7C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CACV,MAAc,EACd,WAAmB,EACnB,MAAc;QAEd,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC9D,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,SAAS,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC7B,IAAI,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QAEjB,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,gBAAgB;YACxB,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,UAAU;YACnB,MAAM;SACP,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,yEAAyE;IAEjE,UAAU,CAChB,IAA8C;QAE9C,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,mBAAmB;gBACtB,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YACnC,KAAK,YAAY,CAAC;YAClB,KAAK,WAAW;gBACd,gEAAgE;gBAChE,iEAAiE;gBACjE,0DAA0D;gBAC1D,OAAO,EAAE,SAAS,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAC/D,KAAK,cAAc;gBACjB,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YAC/B,KAAK,oBAAoB,CAAC;YAC1B;gBACE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,EAAiB,EACjB,OAAiB;QAEjB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8D,CAAC;QACrF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACpE,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC;YACpF,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAChB,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;YACjD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,SAAS,aAAa,CAAC,OAA6B;IAClD,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,EAAE,CAAC;IACzE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7F,OAAQ,KAAgB,IAAI,OAAO,CAAC,EAAE,CAAC;AACzC,CAAC"}

package/dist/backend/services/cart-approval-service.d.ts

@@ -0,0 +1,147 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { Cart } from '../entities/cart.entity.js';
+import type { CustomerAccountReadPort, OrganizationCartApprovalWritePort, OrganizationDetailsPort, OrganizationRecord } from '@endora-commerce/contracts';
+import type { CartAuditService } from './cart-audit-service.js';
+/**
+ * Approval-workflow state machine (feature 027 US4).
+ *
+ * Lives orthogonal to the main `status` enum: any cart may carry an
+ * `approval_status` of `not_required` / `pending` / `approved` /
+ * `rejected_by_org_admin`. Transitions:
+ *
+ *   not_required  → pending (buyer submits, when org policy is on)
+ *   pending       → approved (org-admin approves)
+ *   pending       → rejected_by_org_admin (org-admin rejects; main
+ *                                          status also flips to `rejected`)
+ *   approved      → pending (buyer mutates cart post-approval; re-arm)
+ *   pending|approved → not_required (org turns the policy off)
+ *
+ * Self-approval exemption: a cart whose owner is themself an Org Admin
+ * is born `not_required` regardless of policy.
+ */
+export interface ApproveActor {
+    customerAccountId: string;
+    organizationId: string;
+}
+/**
+ * Email-dispatch port (feature 027 T090). The carts module hands the
+ * transition event + actor + cart payload to the composition root,
+ * which is responsible for: (a) resolving recipients (org admins for
+ * submit, the buyer for approve / reject), (b) rendering the i18n
+ * template from the buyer / admin's preferred language, and (c)
+ * calling the platform Mailer. Implementations are expected to be
+ * fire-and-forget: a thrown error MUST NOT roll back the approval
+ * transition (it would be a UX regression to fail an approve because
+ * mail delivery hiccupped). Production composition wraps each method
+ * in a try / catch + structured log.
+ */
+export interface CartEmailDispatch {
+    onSubmittedForApproval(input: {
+        cart: Cart;
+        submitter: ApproveActor;
+    }): Promise<void>;
+    onApproved(input: {
+        cart: Cart;
+        approver: ApproveActor;
+    }): Promise<void>;
+    onRejected(input: {
+        cart: Cart;
+        rejector: ApproveActor;
+        reason: string;
+    }): Promise<void>;
+}
+export declare class CartApprovalService {
+    private readonly emFactory;
+    private readonly cartAuditService;
+    /** `organizations`' read model — the approval policy and its owner row. */
+    private readonly organizations;
+    /**
+     * `organizations`' write surface for the policy column (issue #175). The
+     * two `setPolicy*` methods below used to assign
+     * `organizations.requires_cart_approval` on that module's entity; the write
+     * belongs to its owner, which audits it through the Command Bus. What stays
+     * here is the cascade over this module's own carts.
+     */
+    private readonly organizationCartApproval;
+    /** `customer_accounts`' read model — the submitting buyer's role. */
+    private readonly customerAccounts;
+    private readonly emailDispatch?;
+    constructor(emFactory: () => EntityManager, cartAuditService: CartAuditService, 
+    /** `organizations`' read model — the approval policy and its owner row. */
+    organizations: OrganizationDetailsPort, 
+    /**
+     * `organizations`' write surface for the policy column (issue #175). The
+     * two `setPolicy*` methods below used to assign
+     * `organizations.requires_cart_approval` on that module's entity; the write
+     * belongs to its owner, which audits it through the Command Bus. What stays
+     * here is the cascade over this module's own carts.
+     */
+    organizationCartApproval: OrganizationCartApprovalWritePort, 
+    /** `customer_accounts`' read model — the submitting buyer's role. */
+    customerAccounts: CustomerAccountReadPort, emailDispatch?: CartEmailDispatch | undefined);
+    /**
+     * Fire-and-forget e-mail dispatch. Wraps each call so any throw is
+     * swallowed — approval transitions must complete even if mail
+     * delivery hiccups. Production composition is responsible for
+     * surfacing the failure through the platform's log + alerting paths.
+     */
+    private dispatch;
+    /**
+     * Buyer submits the cart for Org-Admin approval. Refuses if:
+     *   - the cart is empty
+     *   - the policy is off (approval not required)
+     *   - the buyer is themself an Org Admin (self-approval exemption)
+     *   - approval_status is already non-`not_required`
+     */
+    submitForApproval(cart: Cart, actor: ApproveActor): Promise<Cart>;
+    /** Org Admin approves a pending cart. */
+    approve(cartId: string, actor: ApproveActor): Promise<Cart>;
+    /** Org Admin rejects a pending cart with a reason. */
+    reject(cartId: string, actor: ApproveActor, reason: string): Promise<Cart>;
+    /**
+     * The current policy, for a platform admin (feature 091, P7b;
+     * `contracts/admin-component-contribution.md` §10.5).
+     *
+     * The read half of {@link setPolicyByAdmin}, added because the admin
+     * contribution that renders the toggle has to know what to render it in.
+     * Until P7b that value crossed as a prop — `initialRequiresCartApproval`, out
+     * of `organizations`' detail payload — and a zone's props may not carry it:
+     * the other three contributors to `organization.detail.after` want neither
+     * the prop nor the request behind it.
+     *
+     * It reads through `organizations`' own port rather than this module's
+     * tables, which is the direction the write has taken since issue #175: the
+     * column belongs to that module.
+     */
+    getPolicyByAdmin(organizationId: string): Promise<OrganizationRecord>;
+    /**
+     * Platform-admin variant of {@link setPolicyForOrganization}. Same
+     * semantics (policy-off cascades a reset of every pending/approved
+     * cart in the Org) but the actor is a platform admin rather than an
+     * Org Admin — recorded as `actorType: 'platform_admin'` in the
+     * audit row.
+     */
+    setPolicyByAdmin(organizationId: string, adminUserId: string, requires: boolean): Promise<OrganizationRecord>;
+    /**
+     * Org Admin toggles the per-Organization `requires_cart_approval` policy.
+     * On `false`: every `pending` or `approved` cart in the Org returns to
+     * `not_required` and is audited as `approval_policy_reset`.
+     */
+    setPolicyForOrganization(organizationId: string, actor: ApproveActor, requires: boolean): Promise<OrganizationRecord>;
+    /**
+     * The half of a policy switch-off that belongs to this module: every
+     * `pending` or `approved` cart in the Organization returns to
+     * `not_required`, audited as `approval_policy_reset` in this module's own
+     * per-cart trail with the actor that switched the policy off.
+     */
+    private resetPendingApprovals;
+    /**
+     * Re-arm hook: any buyer-driven mutation on an `approved` cart drops
+     * it back to `pending`. Called by CartService.{addItem,updateItem,
+     * removeItem} and by CartCouponService.{apply,clear}.
+     */
+    maybeReArm(cart: Cart, actor: {
+        customerAccountId?: string;
+    }): Promise<void>;
+}
+//# sourceMappingURL=cart-approval-service.d.ts.map

package/dist/backend/services/cart-approval-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cart-approval-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/cart-approval-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAGlD,OAAO,KAAK,EACV,uBAAuB,EACvB,iCAAiC,EACjC,uBAAuB,EACvB,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,YAAY;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,iBAAiB;IAChC,sBAAsB,CAAC,KAAK,EAAE;QAC5B,IAAI,EAAE,IAAI,CAAC;QACX,SAAS,EAAE,YAAY,CAAC;KACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,UAAU,CAAC,KAAK,EAAE;QAChB,IAAI,EAAE,IAAI,CAAC;QACX,QAAQ,EAAE,YAAY,CAAC;KACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,UAAU,CAAC,KAAK,EAAE;QAChB,IAAI,EAAE,IAAI,CAAC;QACX,QAAQ,EAAE,YAAY,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAED,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAdd,SAAS,EAAE,MAAM,aAAa,EAC9B,gBAAgB,EAAE,gBAAgB;IACnD,2EAA2E;IAC1D,aAAa,EAAE,uBAAuB;IACvD;;;;;;OAMG;IACc,wBAAwB,EAAE,iCAAiC;IAC5E,qEAAqE;IACpD,gBAAgB,EAAE,uBAAuB,EACzC,aAAa,CAAC,EAAE,iBAAiB,YAAA;IAGpD;;;;;OAKG;YACW,QAAQ;IAStB;;;;;;OAMG;IACG,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CvE,yCAAyC;IACnC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BjE,sDAAsD;IAChD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BhF;;;;;;;;;;;;;;OAcG;IACG,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQ3E;;;;;;OAMG;IACG,gBAAgB,CACpB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,kBAAkB,CAAC;IAS9B;;;;OAIG;IACG,wBAAwB,CAC5B,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,kBAAkB,CAAC;IAY9B;;;;;OAKG;YACW,qBAAqB;IAyBnC;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAenF"}