@endora-commerce/mod-catalog 0.100.0

package/dist/backend/routes.public.js

@@ -0,0 +1,318 @@
+import { z } from 'zod';
+import { ERROR_CODES, isPriceSort, productLinkKindSchema, productListSortSchema, validateBundleConfigurationRequestSchema, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { effectiveState } from '@endora-commerce/platform/kernel';
+import { getResolvedChannel } from '@endora-commerce/platform/kernel';
+import { markPersonalisedPricing, productAudienceOf } from '@endora-commerce/platform/http';
+/**
+ * Public catalog routes (US1 read surface).
+ * Storefront SSR + crawlers + anonymous API consumers. No auth.
+ *
+ * Read-backend selection (T067/T068):
+ *   - When `CATALOG_SEARCH_BACKEND=meilisearch` AND a read backend was wired
+ *     AND `search` is effectively present, list-products is served from
+ *     Meilisearch.
+ *   - When the index is unreachable, `searchQueryPort` answers
+ *     `{ status: 'index-unavailable' }` and the route degrades to the Postgres
+ *     path (R-08 reserved-fallback, so search is never fully broken).
+ *   - The `changedSince` query param stays on Postgres because it has no
+ *     equivalent in the Meilisearch index today.
+ *   - Default backend remains Postgres so existing tests + deployments
+ *     keep their behaviour without an opt-in.
+ */
+const acceptLanguageHeaderSchema = z.string().optional();
+export async function registerCatalogPublicRoutes(app, deps) {
+    const { queryService, searchQueryService } = deps;
+    const resolvePlaceholder = deps.resolveProductImagePlaceholderUrl;
+    // Fills `primaryAssetUrl` on imageless summaries with the configured
+    // placeholder (resolved once per request, only when at least one item needs
+    // it). Leaves products that already have an image untouched.
+    async function withListPlaceholder(result, salesChannelCode) {
+        if (!resolvePlaceholder)
+            return result;
+        if (!result.data.some((p) => !p.primaryAssetUrl))
+            return result;
+        const url = await resolvePlaceholder(salesChannelCode);
+        if (!url)
+            return result;
+        return {
+            ...result,
+            data: result.data.map((p) => p.primaryAssetUrl ? p : { ...p, primaryAssetUrl: url }),
+        };
+    }
+    /**
+     * Feature 086 / FR-016 — may this page order or filter by price at all?
+     *
+     * Two conditions, and both are refusals rather than degradations: an ordering
+     * by a number the page may not show discloses that number's rank, which is
+     * most of what a competitor wants, and it is cheap to get right and expensive
+     * to retrofit.
+     *
+     *  - a **non-public sales channel** withholds prices wholesale — `CatalogQueryService`
+     *    resolves none at all on one — so there is nothing to order by;
+     *  - a **page-level display mode of `none`** is the supported "hide prices
+     *    until login" configuration. Page-level, deliberately: a single product
+     *    overridden to `none` keeps its position (spec clarification 2), because
+     *    a per-product override reads as "ask us for a quote" rather than "this
+     *    price is secret", and withdrawing the control for it would make the sort
+     *    appear and disappear as a buyer walks the catalogue.
+     *
+     * The mode is resolved for **this viewer**, so the same shop refuses an
+     * anonymous visitor and serves a signed-in buyer where the two `pricing.*`
+     * settings keys differ, which is exactly what the configuration means.
+     */
+    async function priceControlsAvailable(ctx) {
+        if (!ctx.resolvedChannel.isPublic) {
+            return {
+                available: false,
+                reason: 'This sales channel does not publish prices, so the catalogue cannot be ordered or filtered by price.',
+            };
+        }
+        if (!deps.listingPriceOrder)
+            return { available: true };
+        const organization = ctx.audience.organizationId === null ? null : { id: ctx.audience.organizationId };
+        const mode = await deps.listingPriceOrder.pageDisplayMode({
+            context: {
+                salesChannel: {
+                    id: ctx.resolvedChannel.id,
+                    defaultCurrency: ctx.resolvedChannel.defaultCurrency,
+                },
+                organization,
+            },
+        });
+        if (mode === 'none') {
+            return {
+                available: false,
+                reason: 'Prices are not displayed on this page, so the catalogue cannot be ordered or filtered by price.',
+            };
+        }
+        return { available: true };
+    }
+    // GET /api/v1/catalog/products
+    app.get('/api/v1/catalog/products', async (request, reply) => {
+        const { q, limit, cursor, sort, categorySlug, attributeFilters, changedSince, minPrice, maxPrice } = parseListQuery(request);
+        const ctx = readContext(request);
+        // The page's prices are resolved for this caller, so a page resolved for a
+        // buying organisation must not enter a shared cache.
+        markPersonalisedPricing(reply, ctx.audience);
+        // FR-008 — a minimum above a maximum is a 400 naming both parameters, not
+        // an empty page. An empty page for a contradictory range is
+        // indistinguishable from an empty page for a genuine one.
+        if (minPrice !== undefined && maxPrice !== undefined && minPrice > maxPrice) {
+            throw new HttpError(400, ERROR_CODES.PRICE_RANGE_INVALID, 'The minimum price must not exceed the maximum price.', [
+                { path: 'minPrice', issue: 'must not exceed maxPrice' },
+                { path: 'maxPrice', issue: 'must not be below minPrice' },
+            ]);
+        }
+        // Resolved once and used twice: to refuse the request, and to tell the
+        // storefront whether to render the controls at all (FR-023). One answer, so
+        // a page cannot advertise a control the next request refuses.
+        const priceControls = await priceControlsAvailable(ctx);
+        const wantsPrice = isPriceSort(sort) || minPrice !== undefined || maxPrice !== undefined;
+        if (wantsPrice && !priceControls.available) {
+            request.log.info({ channel: ctx.resolvedChannel.code }, 'catalog: price ordering refused — this page does not display prices');
+            throw new HttpError(400, ERROR_CODES.PRICE_ORDERING_UNAVAILABLE, priceControls.reason);
+        }
+        const capabilities = { priceOrdering: priceControls.available };
+        // Issue #144 — the presence answer is *decided* here, before the query, and
+        // never caught after it. Constitution XVII: a module that is off behaves as
+        // if never installed, and with `search` never installed this listing is the
+        // Postgres query below.
+        //
+        // A degrade rather than a refusal, deliberately: `catalog` is
+        // non-deactivatable, Postgres is this route's default backend, and 503-ing a
+        // public catalogue because an optional search module is off would take the
+        // storefront down for a capability it never required. The manifest declares
+        // it, in `nonBindingDependencies`, so the operator's confirmation dialog
+        // says so before they flip `search` off.
+        //
+        // Issue #153 — `searchQueryService` is `search`'s **port** now, not a
+        // `SearchQueryService` this module constructed out of `search`'s class. The
+        // two facts that follow are why the code below looks different:
+        //
+        //  - the presence probe is load-bearing rather than belt-and-braces. A
+        //    port resolution is gated, so calling it with `search` off throws
+        //    `ModuleDisabledError` — which is exactly what must not reach a public
+        //    catalogue listing;
+        //  - the unreachable-index fallback is read off the return type. It used to
+        //    be `catch (err) { if (err instanceof SearchBackendUnavailable) … else
+        //    throw err }`, which is the conditional re-throw `check:port-catches`
+        //    refuses around a port call, and refuses because a status test lets a
+        //    switched-off module through by accident. `SearchListOutcome` states
+        //    the two answers, and the conversion happens inside `search`.
+        //
+        // Feature 086 adds one conjunct: **and no price ordering or price range was
+        // requested.** Not because Meilisearch cannot sort — issue #287 repaired
+        // that, and `name` and `-createdAt` are answered by the index now — but
+        // because the index has never carried a price, deliberately: one document
+        // per product per channel, and per-buyer pricing would multiply the corpus
+        // by the customer base. Nor could it express the resolution even if the
+        // fields were there: its `sort` is a tie-break *sequence*, not a coalesce,
+        // so `[priceOnListA, priceOnListB]` orders every product A prices above
+        // every product it does not and only then consults B — a different relation
+        // from "A's price if A prices it, else B's".
+        //
+        // `IndexedDocument.price` is not the exception it looks like. It carries
+        // the legacy `defaultPrice` attribute, is read by nothing on the query
+        // path, and is not any price list's figure.
+        const useMeili = process.env['CATALOG_SEARCH_BACKEND'] === 'meilisearch' &&
+            searchQueryService !== undefined &&
+            effectiveState.isPresent('search') &&
+            changedSince === undefined &&
+            !wantsPrice;
+        if (useMeili) {
+            const outcome = await searchQueryService.listProducts({
+                ...(q !== undefined ? { q } : {}),
+                limit,
+                ...(cursor !== undefined ? { cursor } : {}),
+                ...(sort !== undefined ? { sort } : {}),
+                ...(categorySlug !== undefined ? { categorySlug } : {}),
+                ...(attributeFilters !== undefined ? { attributeFilters } : {}),
+            }, ctx);
+            if (outcome.status === 'ok') {
+                reply.header('x-search-backend', 'meilisearch');
+                return {
+                    ...(await withListPlaceholder(outcome.result, ctx.resolvedChannel.code)),
+                    capabilities,
+                };
+            }
+            request.log.warn({ err: outcome.reason }, 'meilisearch unavailable; falling back to postgres');
+        }
+        const result = await queryService.listProducts({ q, limit, cursor, sort, categorySlug, attributeFilters, changedSince, minPrice, maxPrice }, ctx);
+        reply.header('x-search-backend', 'postgres');
+        return { ...(await withListPlaceholder(result, ctx.resolvedChannel.code)), capabilities };
+    });
+    // GET /api/v1/catalog/products/:idOrSlug
+    app.get('/api/v1/catalog/products/:idOrSlug', async (request, reply) => {
+        const ctx = readContext(request);
+        markPersonalisedPricing(reply, ctx.audience);
+        const product = await queryService.getProductByIdOrSlug(request.params.idOrSlug, ctx);
+        // Imageless product → fall back to the configured placeholder so the PDP
+        // hero/card renders something instead of an empty box.
+        if (resolvePlaceholder &&
+            !product.primaryAssetUrl &&
+            product.assets.length === 0) {
+            const url = await resolvePlaceholder(ctx.resolvedChannel.code);
+            if (url)
+                product.primaryAssetUrl = url;
+        }
+        return { data: product };
+    });
+    // Feature 002 US4 — public Product Links read.
+    if (deps.productLinkService) {
+        const links = deps.productLinkService;
+        app.get('/api/v1/catalog/products/:idOrSlug/links', async (request, reply) => {
+            const ctx = readContext(request);
+            markPersonalisedPricing(reply, ctx.audience);
+            const product = await queryService.getProductByIdOrSlug(request.params.idOrSlug, ctx);
+            const kind = request.query.kind
+                ? productLinkKindSchema.parse(request.query.kind)
+                : undefined;
+            const rows = await links.listForStorefront(product.id, ctx, kind);
+            return { data: rows };
+        });
+    }
+    // Feature 002 US5 — public bundle-configuration validation. Pure
+    // compute, no state mutation; only POST on the public surface. Errors
+    // are returned inside the data envelope so the storefront can highlight
+    // each offending slot — except PRODUCT_TYPE_MISMATCH (400) and
+    // PRODUCT_NOT_FOUND (404), which are HTTP-level rejections.
+    if (deps.bundleService) {
+        const bundle = deps.bundleService;
+        app.post('/api/v1/catalog/products/:idOrSlug/bundle-configuration/validate', {
+            schema: { body: validateBundleConfigurationRequestSchema },
+        }, async (request) => {
+            const ctx = readContext(request);
+            const product = await queryService.getProductByIdOrSlug(request.params.idOrSlug, ctx);
+            const body = validateBundleConfigurationRequestSchema.parse(request.body);
+            const result = await bundle.validateConfiguration(product.id, body.selections);
+            return { data: result };
+        });
+    }
+    // GET /api/v1/catalog/categories
+    app.get('/api/v1/catalog/categories', async (request) => {
+        const ctx = readContext(request);
+        const tree = await queryService.getCategoryTree(ctx);
+        return { data: tree };
+    });
+    // GET /api/v1/catalog/filters
+    app.get('/api/v1/catalog/filters', async (request) => {
+        const ctx = readContext(request);
+        const filters = await queryService.getFilterDefinitions(ctx);
+        return { data: filters };
+    });
+}
+function readContext(request) {
+    // Feature 053 / FR-002: the sales channel is resolved once by the canonical
+    // middleware. Read it here instead of re-parsing the `x-sales-channel` header.
+    const ch = getResolvedChannel(request);
+    const acceptLanguage = acceptLanguageHeaderSchema.parse(request.headers['accept-language']);
+    const preferredLanguage = acceptLanguage ? acceptLanguage.split(',')[0]?.trim() : undefined;
+    return {
+        resolvedChannel: {
+            id: ch.id,
+            code: ch.code,
+            isPublic: ch.isPublic,
+            defaultCurrency: ch.defaultCurrency,
+            defaultLanguage: ch.defaultLanguage,
+        },
+        audience: productAudienceOf(request),
+        preferredLanguage,
+    };
+}
+/**
+ * Parses list-query parameters out of the request URL, including the nested
+ * `filter[attr.<key>]=value` syntax. We hand-parse this because Fastify's
+ * default query parser flattens bracketed keys into strings.
+ */
+function parseListQuery(request) {
+    const raw = (request.query ?? {});
+    const q = typeof raw['q'] === 'string' ? raw['q'] : undefined;
+    const limitRaw = typeof raw['limit'] === 'string' ? Number(raw['limit']) : undefined;
+    const limit = Number.isFinite(limitRaw) && limitRaw > 0 ? Math.min(200, limitRaw) : 50;
+    const cursor = typeof raw['cursor'] === 'string' ? raw['cursor'] : undefined;
+    const changedSince = typeof raw['changedSince'] === 'string' ? raw['changedSince'] : undefined;
+    // The enum is the contract's, read once, so a member added there reaches this
+    // route without a second list to keep in step (feature 086 added two).
+    const sortRaw = typeof raw['sort'] === 'string' ? raw['sort'] : undefined;
+    const sortParsed = productListSortSchema.safeParse(sortRaw);
+    const sort = sortParsed.success ? sortParsed.data : undefined;
+    // Feature 086 — the range bounds. A non-numeric or negative bound is dropped
+    // rather than refused, which is what every other malformed parameter on this
+    // hand-parsed surface does; `minPrice > maxPrice` is the one the buyer is
+    // told about, because it is the one they typed on purpose.
+    const parseBound = (value) => {
+        if (typeof value !== 'string' || value.trim() === '')
+            return undefined;
+        const n = Number(value);
+        return Number.isFinite(n) && n >= 0 ? n : undefined;
+    };
+    const minPrice = parseBound(raw['minPrice']);
+    const maxPrice = parseBound(raw['maxPrice']);
+    const attributeFilters = {};
+    let categorySlug;
+    for (const [key, value] of Object.entries(raw)) {
+        const attrMatch = /^filter\[attr\.([^\]]+)\]$/.exec(key);
+        if (attrMatch && attrMatch[1]) {
+            const attrKey = attrMatch[1];
+            const values = Array.isArray(value) ? value.map(String) : [String(value)];
+            attributeFilters[attrKey] = values;
+            continue;
+        }
+        if (key === 'filter[category]' && typeof value === 'string') {
+            categorySlug = value;
+        }
+    }
+    return {
+        q,
+        limit,
+        cursor,
+        sort,
+        categorySlug,
+        ...(Object.keys(attributeFilters).length > 0 ? { attributeFilters } : {}),
+        changedSince,
+        minPrice,
+        maxPrice,
+    };
+}
+//# sourceMappingURL=routes.public.js.map

package/dist/backend/routes.public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.public.js","sourceRoot":"","sources":["../../src/backend/routes.public.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EACL,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,qBAAqB,EACrB,wCAAwC,GAMzC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAE5F;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AA4CzD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAAoB,EACpB,IAAuB;IAEvB,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAClD,MAAM,kBAAkB,GAAG,IAAI,CAAC,iCAAiC,CAAC;IAElE,qEAAqE;IACrE,4EAA4E;IAC5E,6DAA6D;IAC7D,KAAK,UAAU,mBAAmB,CAEhC,MAAS,EAAE,gBAAoC;QAC/C,IAAI,CAAC,kBAAkB;YAAE,OAAO,MAAM,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;YAAE,OAAO,MAAM,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG;YAAE,OAAO,MAAM,CAAC;QACxB,OAAO;YACL,GAAG,MAAM;YACT,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,CACvD;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,UAAU,sBAAsB,CACnC,GAAmC;QAEnC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;YAClC,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,MAAM,EACJ,sGAAsG;aACzG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACxD,MAAM,YAAY,GAChB,GAAG,CAAC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QACpF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC;YACxD,OAAO,EAAE;gBACP,YAAY,EAAE;oBACZ,EAAE,EAAE,GAAG,CAAC,eAAe,CAAC,EAAE;oBAC1B,eAAe,EAAE,GAAG,CAAC,eAAe,CAAC,eAAe;iBACrD;gBACD,YAAY;aACb;SACF,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,MAAM,EACJ,iGAAiG;aACpG,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,+BAA+B;IAC/B,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC3D,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAChG,cAAc,CAAC,OAAO,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACjC,2EAA2E;QAC3E,qDAAqD;QACrD,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE7C,0EAA0E;QAC1E,4DAA4D;QAC5D,0DAA0D;QAC1D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC;YAC5E,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,mBAAmB,EAC/B,sDAAsD,EACtD;gBACE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,0BAA0B,EAAE;gBACvD,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,4BAA4B,EAAE;aAC1D,CACF,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,4EAA4E;QAC5E,8DAA8D;QAC9D,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,CAAC;QACzF,IAAI,UAAU,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,EAAE,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,EACrC,qEAAqE,CACtE,CAAC;YACF,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,0BAA0B,EAAE,aAAa,CAAC,MAAO,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,YAAY,GAA4B,EAAE,aAAa,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC;QAEzF,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,wBAAwB;QACxB,EAAE;QACF,8DAA8D;QAC9D,6EAA6E;QAC7E,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,yCAAyC;QACzC,EAAE;QACF,sEAAsE;QACtE,4EAA4E;QAC5E,gEAAgE;QAChE,EAAE;QACF,uEAAuE;QACvE,sEAAsE;QACtE,2EAA2E;QAC3E,wBAAwB;QACxB,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,kEAAkE;QAClE,EAAE;QACF,4EAA4E;QAC5E,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,2EAA2E;QAC3E,wEAAwE;QACxE,4EAA4E;QAC5E,6CAA6C;QAC7C,EAAE;QACF,yEAAyE;QACzE,uEAAuE;QACvE,4CAA4C;QAC5C,MAAM,QAAQ,GACZ,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,aAAa;YACvD,kBAAkB,KAAK,SAAS;YAChC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC;YAClC,YAAY,KAAK,SAAS;YAC1B,CAAC,UAAU,CAAC;QACd,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,YAAY,CACnD;gBACE,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,KAAK;gBACL,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE,EACD,GAAG,CACJ,CAAC;YACF,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC5B,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;gBAChD,OAAO;oBACL,GAAG,CAAC,MAAM,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBACxE,YAAY;iBACb,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EACvB,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,CAC5C,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAC5F,GAAG,CACJ,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;QAC7C,OAAO,EAAE,GAAG,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,GAAG,CAAC,GAAG,CACL,oCAAoC,EACpC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACjC,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACtF,yEAAyE;QACzE,uDAAuD;QACvD,IACE,kBAAkB;YAClB,CAAC,OAAO,CAAC,eAAe;YACxB,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAC3B,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC/D,IAAI,GAAG;gBAAE,OAAO,CAAC,eAAe,GAAG,GAAG,CAAC;QACzC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC,CACF,CAAC;IAEF,+CAA+C;IAC/C,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACtC,GAAG,CAAC,GAAG,CACL,0CAA0C,EAC1C,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YACjC,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,oBAAoB,CACrD,OAAO,CAAC,MAAM,CAAC,QAAQ,EACvB,GAAG,CACJ,CAAC;YACF,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI;gBAC7B,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;gBACjD,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAClE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC,CACF,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,sEAAsE;IACtE,wEAAwE;IACxE,+DAA+D;IAC/D,4DAA4D;IAC5D,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC;QAClC,GAAG,CAAC,IAAI,CACN,kEAAkE,EAClE;YACE,MAAM,EAAE,EAAE,IAAI,EAAE,wCAAwC,EAAE;SAC3D,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,oBAAoB,CACrD,OAAO,CAAC,MAAM,CAAC,QAAQ,EACvB,GAAG,CACJ,CAAC;YACF,MAAM,IAAI,GAAG,wCAAwC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,CAAC,CACF,CAAC;IACJ,CAAC;IAED,iCAAiC;IACjC,GAAG,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACtD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,8BAA8B;IAC9B,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,OAAuB;IAW1C,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC5F,MAAM,iBAAiB,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,OAAO;QACL,eAAe,EAAE;YACf,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,eAAe,EAAE,EAAE,CAAC,eAAe;YACnC,eAAe,EAAE,EAAE,CAAC,eAAe;SACpC;QACD,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC;QACpC,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,OAAuB;IAW7C,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;IAE7D,MAAM,CAAC,GAAG,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE/F,8EAA8E;IAC9E,uEAAuE;IACvE,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAgC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAE3F,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,UAAU,GAAG,CAAC,KAAc,EAAsB,EAAE;QACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QACvE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAE7C,MAAM,gBAAgB,GAA6B,EAAE,CAAC;IACtD,IAAI,YAAgC,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1E,gBAAgB,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,kBAAkB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5D,YAAY,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO;QACL,CAAC;QACD,KAAK;QACL,MAAM;QACN,IAAI;QACJ,YAAY;QACZ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,YAAY;QACZ,QAAQ;QACR,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/backend/services/asset-references.d.ts

@@ -0,0 +1,4 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { AssetReferenceRegistryPort } from '@endora-commerce/contracts';
+export declare function registerCatalogAssetReferences(registry: AssetReferenceRegistryPort, emFactory: () => EntityManager): void;
+//# sourceMappingURL=asset-references.d.ts.map

package/dist/backend/services/asset-references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-references.d.ts","sourceRoot":"","sources":["../../../src/backend/services/asset-references.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAGV,0BAA0B,EAC3B,MAAM,4BAA4B,CAAC;AAEpC,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,0BAA0B,EACpC,SAAS,EAAE,MAAM,aAAa,GAC7B,IAAI,CAQN"}

package/dist/backend/services/asset-references.js

@@ -0,0 +1,104 @@
+// Catalog → Assets Library reference descriptors — feature 013 / US2 / T064.
+//
+// Registers four FK descriptors that the AssetReferenceRegistry consults
+// when an admin tries to delete an asset (FR-030). Each descriptor runs a
+// single batched query (`asset_id = ANY($1)`) and joins back to the parent
+// row's display info for the human-readable label rendered in the admin
+// "in use by" dialog.
+export function registerCatalogAssetReferences(registry, emFactory) {
+    const descriptors = [
+        productGalleryDescriptor(emFactory),
+        productAttachmentDescriptor(emFactory),
+        productVirtualDownloadDescriptor(emFactory),
+        categoryMainImageDescriptor(emFactory),
+    ];
+    for (const d of descriptors)
+        registry.register(d);
+}
+function productGalleryDescriptor(emFactory) {
+    return {
+        ownerModuleId: 'catalog',
+        async findReferences(assetIds) {
+            if (assetIds.length === 0)
+                return [];
+            const em = emFactory();
+            const rows = (await em.execute(`select gi.asset_id::text as asset_id,
+                gi.id::text as item_id,
+                gi.position,
+                p.id::text as product_id,
+                p.name as product_name
+         from gallery_items gi
+         join products p on p.id = gi.product_id
+         where gi.asset_id in (${assetIds.map(() => '?').join(',')})`, assetIds));
+            return rows.map((r) => ({
+                kind: 'product_gallery',
+                entityId: r.product_id,
+                label: `Product "${pickName(r.product_name)}" — gallery position ${r.position}`,
+            }));
+        },
+    };
+}
+function productAttachmentDescriptor(emFactory) {
+    return {
+        ownerModuleId: 'catalog',
+        async findReferences(assetIds) {
+            if (assetIds.length === 0)
+                return [];
+            const em = emFactory();
+            const rows = (await em.execute(`select pa.asset_id::text as asset_id,
+                pa.name as attachment_name,
+                p.id::text as product_id,
+                p.name as product_name
+         from product_attachments pa
+         join products p on p.id = pa.product_id
+         where pa.asset_id in (${assetIds.map(() => '?').join(',')})`, assetIds));
+            return rows.map((r) => ({
+                kind: 'product_attachment',
+                entityId: r.product_id,
+                label: `Product "${pickName(r.product_name)}" — attachment "${r.attachment_name}"`,
+            }));
+        },
+    };
+}
+function productVirtualDownloadDescriptor(emFactory) {
+    return {
+        ownerModuleId: 'catalog',
+        async findReferences(assetIds) {
+            if (assetIds.length === 0)
+                return [];
+            const em = emFactory();
+            const rows = (await em.execute(`select p.id::text as product_id, p.name as product_name
+         from products p
+         where p.download_asset_id in (${assetIds.map(() => '?').join(',')})`, assetIds));
+            return rows.map((r) => ({
+                kind: 'product_virtual_download',
+                entityId: r.product_id,
+                label: `Product "${pickName(r.product_name)}" — virtual download`,
+            }));
+        },
+    };
+}
+function categoryMainImageDescriptor(emFactory) {
+    return {
+        ownerModuleId: 'catalog',
+        async findReferences(assetIds) {
+            if (assetIds.length === 0)
+                return [];
+            const em = emFactory();
+            const rows = (await em.execute(`select c.id::text as category_id, c.name as category_name
+         from categories c
+         where c.main_image_asset_id in (${assetIds.map(() => '?').join(',')})`, assetIds));
+            return rows.map((r) => ({
+                kind: 'category_main_image',
+                entityId: r.category_id,
+                label: `Category "${pickName(r.category_name)}" — main image`,
+            }));
+        },
+    };
+}
+function pickName(blob) {
+    if (typeof blob === 'string')
+        return blob;
+    return blob['en-US'] ?? blob['en'] ?? blob['pl'] ?? Object.values(blob)[0] ?? '(unnamed)';
+}
+//# sourceMappingURL=asset-references.js.map

package/dist/backend/services/asset-references.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-references.js","sourceRoot":"","sources":["../../../src/backend/services/asset-references.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,wEAAwE;AACxE,sBAAsB;AAStB,MAAM,UAAU,8BAA8B,CAC5C,QAAoC,EACpC,SAA8B;IAE9B,MAAM,WAAW,GAA+B;QAC9C,wBAAwB,CAAC,SAAS,CAAC;QACnC,2BAA2B,CAAC,SAAS,CAAC;QACtC,gCAAgC,CAAC,SAAS,CAAC;QAC3C,2BAA2B,CAAC,SAAS,CAAC;KACvC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,WAAW;QAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,wBAAwB,CAC/B,SAA8B;IAE9B,OAAO;QACL,aAAa,EAAE,SAAS;QACxB,KAAK,CAAC,cAAc,CAAC,QAAkB;YACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B;;;;;;;iCAOyB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAC7D,QAAQ,CACT,CAMC,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,CAAC,CAAC,UAAU;gBACtB,KAAK,EAAE,YAAY,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;aAChF,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,SAA8B;IAE9B,OAAO;QACL,aAAa,EAAE,SAAS;QACxB,KAAK,CAAC,cAAc,CAAC,QAAkB;YACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B;;;;;;iCAMyB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAC7D,QAAQ,CACT,CAKC,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,IAAI,EAAE,oBAAoB;gBAC1B,QAAQ,EAAE,CAAC,CAAC,UAAU;gBACtB,KAAK,EAAE,YAAY,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,eAAe,GAAG;aACnF,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,SAA8B;IAE9B,OAAO;QACL,aAAa,EAAE,SAAS;QACxB,KAAK,CAAC,cAAc,CAAC,QAAkB;YACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B;;yCAEiC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EACrE,QAAQ,CACT,CAAiF,CAAC;YACnF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,IAAI,EAAE,0BAA0B;gBAChC,QAAQ,EAAE,CAAC,CAAC,UAAU;gBACtB,KAAK,EAAE,YAAY,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,sBAAsB;aAClE,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,SAA8B;IAE9B,OAAO;QACL,aAAa,EAAE,SAAS;QACxB,KAAK,CAAC,cAAc,CAAC,QAAkB;YACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B;;2CAEmC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EACvE,QAAQ,CACT,CAAmF,CAAC;YACrF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,CAAC,CAAC,WAAW;gBACvB,KAAK,EAAE,aAAa,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,gBAAgB;aAC9D,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAqC;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;AAC5F,CAAC"}

package/dist/backend/services/attachment.service.d.ts

@@ -0,0 +1,45 @@
+/**
+ * AttachmentService — admin-only CRUD for AttachmentTypes (global
+ * dictionary) and ProductAttachments (per-product wrappers around an
+ * Asset). Feature 002 US3, data-model.md §2.5, §2.6.
+ *
+ * Foundation has no public AssetsService — Asset is imported as an
+ * entity directly (research.md R-9 + foundation pattern), and the
+ * service layer guards `kind ∈ {pdf, certificate, other}` for
+ * attachments (image / video are reserved for the gallery).
+ */
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type AssetReadPort, type AttachmentType as AttachmentTypeDto, type CreateAttachmentTypeRequest, type UpdateAttachmentTypeRequest, type ProductAttachment as ProductAttachmentDto, type CreateAttachmentRequest, type UpdateAttachmentRequest } from '@endora-commerce/contracts';
+import type { CommandBus } from '@endora-commerce/platform/commands';
+export declare class AttachmentService {
+    #private;
+    private readonly emFactory;
+    /** Feature 054 — audits attachment writes co-transactionally when provided. */
+    private readonly commandBus?;
+    /**
+     * Feature 075 — `assets_library`'s read port, where `em.findOne(Asset, …)`
+     * used to be. The check below is the reason this read exists: an attach
+     * that cannot verify the asset would store a dangling id, so with
+     * `assets_library` off the port fails closed and the attach is refused.
+     */
+    private readonly assets?;
+    constructor(emFactory: () => EntityManager, 
+    /** Feature 054 — audits attachment writes co-transactionally when provided. */
+    commandBus?: CommandBus | undefined, 
+    /**
+     * Feature 075 — `assets_library`'s read port, where `em.findOne(Asset, …)`
+     * used to be. The check below is the reason this read exists: an attach
+     * that cannot verify the asset would store a dangling id, so with
+     * `assets_library` off the port fails closed and the attach is refused.
+     */
+    assets?: AssetReadPort | undefined);
+    listTypes(): Promise<AttachmentTypeDto[]>;
+    createType(req: CreateAttachmentTypeRequest): Promise<AttachmentTypeDto>;
+    updateType(id: string, req: UpdateAttachmentTypeRequest): Promise<AttachmentTypeDto>;
+    deleteType(id: string): Promise<void>;
+    listAttachments(productId: string): Promise<ProductAttachmentDto[]>;
+    createAttachment(productId: string, req: CreateAttachmentRequest): Promise<ProductAttachmentDto>;
+    updateAttachment(productId: string, attachmentId: string, req: UpdateAttachmentRequest): Promise<ProductAttachmentDto>;
+    deleteAttachment(productId: string, attachmentId: string): Promise<void>;
+}
+//# sourceMappingURL=attachment.service.d.ts.map

package/dist/backend/services/attachment.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/attachment.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,cAAc,IAAI,iBAAiB,EACxC,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,IAAI,oBAAoB,EAC9C,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC7B,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAOrE,qBAAa,iBAAiB;;IAE1B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC5B;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBATP,SAAS,EAAE,MAAM,aAAa;IAC/C,+EAA+E;IAC9D,UAAU,CAAC,EAAE,UAAU,YAAA;IACxC;;;;;OAKG;IACc,MAAM,CAAC,EAAE,aAAa,YAAA;IAkCnC,SAAS,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IA2BzC,UAAU,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAkCxE,UAAU,CACd,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,2BAA2B,GAC/B,OAAO,CAAC,iBAAiB,CAAC;IAwCvB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BrC,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAWnE,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,uBAAuB,GAC3B,OAAO,CAAC,oBAAoB,CAAC;IA+C1B,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,uBAAuB,GAC3B,OAAO,CAAC,oBAAoB,CAAC;IAkC1B,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAkE/E"}