@endora-commerce/mod-catalog 0.100.0

package/dist/backend/services/attachment.service.js

@@ -0,0 +1,268 @@
+/**
+ * AttachmentService — admin-only CRUD for AttachmentTypes (global
+ * dictionary) and ProductAttachments (per-product wrappers around an
+ * Asset). Feature 002 US3, data-model.md §2.5, §2.6.
+ *
+ * Foundation has no public AssetsService — Asset is imported as an
+ * entity directly (research.md R-9 + foundation pattern), and the
+ * service layer guards `kind ∈ {pdf, certificate, other}` for
+ * attachments (image / video are reserved for the gallery).
+ */
+import { randomUUID } from 'node:crypto';
+import { UniqueConstraintViolationException } from '@mikro-orm/core';
+import { ERROR_CODES, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { Product } from '../entities/product.entity.js';
+import { AttachmentType } from '../entities/attachment-type.entity.js';
+import { ProductAttachment } from '../entities/product-attachment.entity.js';
+const ASSET_KINDS_ATTACHMENT = new Set(['pdf', 'certificate', 'other']);
+export class AttachmentService {
+    emFactory;
+    commandBus;
+    assets;
+    constructor(emFactory, 
+    /** Feature 054 — audits attachment writes co-transactionally when provided. */
+    commandBus, 
+    /**
+     * Feature 075 — `assets_library`'s read port, where `em.findOne(Asset, …)`
+     * used to be. The check below is the reason this read exists: an attach
+     * that cannot verify the asset would store a dangling id, so with
+     * `assets_library` off the port fails closed and the attach is refused.
+     */
+    assets) {
+        this.emFactory = emFactory;
+        this.commandBus = commandBus;
+        this.assets = assets;
+    }
+    #requireAssets() {
+        if (!this.assets) {
+            throw new Error('AttachmentService: the asset read port is not wired — an attachment cannot be verified.');
+        }
+        return this.assets;
+    }
+    /** Feature 054 — run an attachment write through the Command Bus. */
+    async #audited(action, objectType, objectId, write) {
+        if (this.commandBus) {
+            return this.commandBus.run({ action, objectType, objectId, run: ({ em }) => write(em) });
+        }
+        const em = this.emFactory();
+        const w = await write(em);
+        await em.flush();
+        return w.result;
+    }
+    // -- Attachment Types -----------------------------------------------------
+    async listTypes() {
+        const em = this.emFactory();
+        const rows = (await em.execute(`select t.id, t.code, t.name, t.position, t.created_at, t.updated_at,
+              (select count(*)::int from product_attachments pa where pa.attachment_type_id = t.id) as usage_count
+       from attachment_types t
+       order by t.position asc, t.code asc`));
+        return rows.map((r) => ({
+            id: r.id,
+            code: r.code,
+            name: r.name,
+            position: r.position,
+            usageCount: r.usage_count,
+            createdAt: new Date(r.created_at).toISOString(),
+            updatedAt: new Date(r.updated_at).toISOString(),
+        }));
+    }
+    async createType(req) {
+        const id = randomUUID();
+        const t = await this.#audited('attachment_type.create', 'attachment_type', id, async (em) => {
+            const created = em.create(AttachmentType, {
+                id,
+                code: req.code,
+                name: req.name,
+                ...(req.position !== undefined ? { position: req.position } : {}),
+            });
+            try {
+                await em.flush();
+            }
+            catch (err) {
+                if (err instanceof UniqueConstraintViolationException) {
+                    throw new HttpError(409, ERROR_CODES.ATTACHMENT_TYPE_CODE_TAKEN, `AttachmentType "${req.code}" already exists.`);
+                }
+                throw err;
+            }
+            return { result: created, before: null, after: { code: created.code, name: created.name, position: created.position } };
+        });
+        return {
+            id: t.id,
+            code: t.code,
+            name: t.name,
+            position: t.position,
+            usageCount: 0,
+            createdAt: t.createdAt.toISOString(),
+            updatedAt: t.updatedAt.toISOString(),
+        };
+    }
+    async updateType(id, req) {
+        const t = await this.#audited('attachment_type.update', 'attachment_type', id, async (em) => {
+            const row = await em.findOne(AttachmentType, { id });
+            if (!row) {
+                throw new HttpError(404, ERROR_CODES.ATTACHMENT_TYPE_NOT_FOUND, `AttachmentType ${id} not found.`);
+            }
+            const before = { code: row.code, name: row.name, position: row.position };
+            if (req.code !== undefined)
+                row.code = req.code;
+            if (req.name !== undefined)
+                row.name = req.name;
+            if (req.position !== undefined)
+                row.position = req.position;
+            try {
+                await em.flush();
+            }
+            catch (err) {
+                if (err instanceof UniqueConstraintViolationException) {
+                    throw new HttpError(409, ERROR_CODES.ATTACHMENT_TYPE_CODE_TAKEN, `AttachmentType "${req.code}" already exists.`);
+                }
+                throw err;
+            }
+            return { result: row, before, after: { code: row.code, name: row.name, position: row.position } };
+        });
+        const usageCount = await this.#computeTypeUsage(this.emFactory(), id);
+        return {
+            id: t.id,
+            code: t.code,
+            name: t.name,
+            position: t.position,
+            usageCount,
+            createdAt: t.createdAt.toISOString(),
+            updatedAt: t.updatedAt.toISOString(),
+        };
+    }
+    async deleteType(id) {
+        await this.#audited('attachment_type.delete', 'attachment_type', id, async (em) => {
+            const t = await em.findOne(AttachmentType, { id });
+            if (!t) {
+                throw new HttpError(404, ERROR_CODES.ATTACHMENT_TYPE_NOT_FOUND, `AttachmentType ${id} not found.`);
+            }
+            const usageCount = await this.#computeTypeUsage(em, id);
+            if (usageCount > 0) {
+                throw new HttpError(409, ERROR_CODES.ATTACHMENT_TYPE_IN_USE, `AttachmentType "${t.code}" is referenced by ${usageCount} attachment(s); reassign them first.`, [{ path: 'usageCount', issue: String(usageCount) }]);
+            }
+            const before = { code: t.code, name: t.name };
+            em.remove(t);
+            return { result: undefined, before, after: null };
+        });
+    }
+    // -- Product Attachments --------------------------------------------------
+    async listAttachments(productId) {
+        const em = this.emFactory();
+        await this.#assertProductExists(em, productId);
+        const items = await em.find(ProductAttachment, { productId }, { orderBy: { position: 'asc', id: 'asc' } });
+        return items.map((i) => this.#attachmentDto(i));
+    }
+    async createAttachment(productId, req) {
+        const em = this.emFactory();
+        await this.#assertProductExists(em, productId);
+        const asset = await this.#requireAssets().findById(req.assetId);
+        if (!asset) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, `Asset ${req.assetId} not found.`);
+        }
+        if (!ASSET_KINDS_ATTACHMENT.has(asset.kind)) {
+            throw new HttpError(400, ERROR_CODES.ASSET_KIND_NOT_SUPPORTED, `Attachments require asset.kind ∈ {pdf, certificate, other}; got "${asset.kind}".`);
+        }
+        const type = await em.findOne(AttachmentType, { id: req.attachmentTypeId });
+        if (!type) {
+            throw new HttpError(404, ERROR_CODES.ATTACHMENT_TYPE_NOT_FOUND, `AttachmentType ${req.attachmentTypeId} not found.`);
+        }
+        const position = req.position ?? (await this.#nextPosition(em, productId));
+        const id = randomUUID();
+        const attachment = await this.#audited('product_attachment.create', 'product_attachment', id, async (cem) => {
+            const created = cem.create(ProductAttachment, {
+                id,
+                productId,
+                assetId: req.assetId,
+                attachmentTypeId: req.attachmentTypeId,
+                name: req.name,
+                description: req.description ?? null,
+                position,
+            });
+            await cem.flush();
+            return {
+                result: created,
+                before: null,
+                after: { productId, assetId: req.assetId, attachmentTypeId: req.attachmentTypeId, name: req.name, position },
+            };
+        });
+        return this.#attachmentDto(attachment);
+    }
+    async updateAttachment(productId, attachmentId, req) {
+        const a = await this.#audited('product_attachment.update', 'product_attachment', attachmentId, async (em) => {
+            const row = await em.findOne(ProductAttachment, { id: attachmentId, productId });
+            if (!row) {
+                throw new HttpError(404, ERROR_CODES.ATTACHMENT_NOT_FOUND, `Attachment ${attachmentId} not found under Product ${productId}.`);
+            }
+            const before = { attachmentTypeId: row.attachmentTypeId, name: row.name, position: row.position };
+            if (req.attachmentTypeId !== undefined) {
+                const type = await em.findOne(AttachmentType, { id: req.attachmentTypeId });
+                if (!type) {
+                    throw new HttpError(404, ERROR_CODES.ATTACHMENT_TYPE_NOT_FOUND, `AttachmentType ${req.attachmentTypeId} not found.`);
+                }
+                row.attachmentTypeId = req.attachmentTypeId;
+            }
+            if (req.name !== undefined)
+                row.name = req.name;
+            if (req.description !== undefined)
+                row.description = req.description;
+            if (req.position !== undefined)
+                row.position = req.position;
+            return {
+                result: row,
+                before,
+                after: { attachmentTypeId: row.attachmentTypeId, name: row.name, position: row.position },
+            };
+        });
+        return this.#attachmentDto(a);
+    }
+    async deleteAttachment(productId, attachmentId) {
+        await this.#audited('product_attachment.delete', 'product_attachment', attachmentId, async (em) => {
+            const a = await em.findOne(ProductAttachment, { id: attachmentId, productId });
+            if (!a) {
+                throw new HttpError(404, ERROR_CODES.ATTACHMENT_NOT_FOUND, `Attachment ${attachmentId} not found under Product ${productId}.`);
+            }
+            const before = { productId, assetId: a.assetId };
+            // Asset is FK RESTRICT; the row stays. Whoever uploaded it owns the
+            // asset's lifecycle (research.md R-9).
+            em.remove(a);
+            return { result: undefined, before, after: null };
+        });
+    }
+    // -- INTERNALS ------------------------------------------------------------
+    async #assertProductExists(em, productId) {
+        const product = await em.findOne(Product, { id: productId });
+        if (!product) {
+            throw new HttpError(404, ERROR_CODES.PRODUCT_NOT_FOUND, `Product ${productId} not found.`);
+        }
+    }
+    /**
+     * `em.execute`, not `em.getConnection().execute`: the delete path calls this
+     * on the Command's `em` to refuse a type that is still referenced, so read on
+     * a pooled connection the guard answered from outside the transaction it is
+     * guarding (issue #207).
+     */
+    async #computeTypeUsage(em, typeId) {
+        const rows = (await em.execute(`select count(*)::int as n from product_attachments where attachment_type_id = ?`, [typeId]));
+        return rows[0]?.n ?? 0;
+    }
+    async #nextPosition(em, productId) {
+        const rows = (await em.execute(`select coalesce(max(position), -1) + 1 as next_position from product_attachments where product_id = ?`, [productId]));
+        return rows[0]?.next_position ?? 0;
+    }
+    #attachmentDto(a) {
+        return {
+            id: a.id,
+            productId: a.productId,
+            assetId: a.assetId,
+            attachmentTypeId: a.attachmentTypeId,
+            name: a.name,
+            description: a.description ?? null,
+            position: a.position,
+            createdAt: a.createdAt.toISOString(),
+            updatedAt: a.updatedAt.toISOString(),
+        };
+    }
+}
+//# sourceMappingURL=attachment.service.js.map

package/dist/backend/services/attachment.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.service.js","sourceRoot":"","sources":["../../../src/backend/services/attachment.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,kCAAkC,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,EACL,WAAW,GAQZ,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAE3D,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAE7E,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;AAExE,MAAM,OAAO,iBAAiB;IAET;IAEA;IAOA;IAVnB,YACmB,SAA8B;IAC/C,+EAA+E;IAC9D,UAAuB;IACxC;;;;;OAKG;IACc,MAAsB;QATtB,cAAS,GAAT,SAAS,CAAqB;QAE9B,eAAU,GAAV,UAAU,CAAa;QAOvB,WAAM,GAAN,MAAM,CAAgB;IACtC,CAAC;IAEJ,cAAc;QACZ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,QAAQ,CACZ,MAAc,EACd,UAAkB,EAClB,QAAgB,EAChB,KAIE;QAEF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,SAAS;QACb,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B;;;2CAGqC,CACtC,CAQC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;YAC/C,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;SAChD,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAgC;QAC/C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,wBAAwB,EAAE,iBAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC1F,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE;gBACxC,EAAE;gBACF,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClE,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,kCAAkC,EAAE,CAAC;oBACtD,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,0BAA0B,EACtC,mBAAmB,GAAG,CAAC,IAAI,mBAAmB,CAC/C,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC1H,CAAC,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,CAAC;YACb,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;SACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CACd,EAAU,EACV,GAAgC;QAEhC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,wBAAwB,EAAE,iBAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC1F,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,yBAAyB,EACrC,kBAAkB,EAAE,aAAa,CAClC,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC1E,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAChD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAChD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;gBAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,kCAAkC,EAAE,CAAC;oBACtD,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,0BAA0B,EACtC,mBAAmB,GAAG,CAAC,IAAI,mBAAmB,CAC/C,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;QACpG,CAAC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU;YACV,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;SACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,IAAI,CAAC,QAAQ,CAAC,wBAAwB,EAAE,iBAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAChF,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,yBAAyB,EACrC,kBAAkB,EAAE,aAAa,CAClC,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACxD,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,sBAAsB,EAClC,mBAAmB,CAAC,CAAC,IAAI,sBAAsB,UAAU,sCAAsC,EAC/F,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CACpD,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9C,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACb,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CACzB,iBAAiB,EACjB,EAAE,SAAS,EAAE,EACb,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAC5C,CAAC;QACF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,SAAiB,EACjB,GAA4B;QAE5B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAE/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,SAAS,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,oEAAoE,KAAK,CAAC,IAAI,IAAI,CACnF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,yBAAyB,EACrC,kBAAkB,GAAG,CAAC,gBAAgB,aAAa,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3E,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,2BAA2B,EAAE,oBAAoB,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1G,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE;gBAC5C,EAAE;gBACF,SAAS;gBACT,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;gBACpC,QAAQ;aACT,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE;aAC7G,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,SAAiB,EACjB,YAAoB,EACpB,GAA4B;QAE5B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,2BAA2B,EAAE,oBAAoB,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC1G,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;YACjF,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,oBAAoB,EAChC,cAAc,YAAY,4BAA4B,SAAS,GAAG,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;YAClG,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,yBAAyB,EACrC,kBAAkB,GAAG,CAAC,gBAAgB,aAAa,CACpD,CAAC;gBACJ,CAAC;gBACD,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;YAC9C,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAChD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;gBAAE,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;YACrE,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;gBAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC5D,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,MAAM;gBACN,KAAK,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;aAC1F,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,SAAiB,EAAE,YAAoB;QAC5D,MAAM,IAAI,CAAC,QAAQ,CAAC,2BAA2B,EAAE,oBAAoB,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAChG,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,oBAAoB,EAChC,cAAc,YAAY,4BAA4B,SAAS,GAAG,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACjD,oEAAoE;YACpE,uCAAuC;YACvC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACb,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,oBAAoB,CAAC,EAAiB,EAAE,SAAiB;QAC7D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,iBAAiB,EAC7B,WAAW,SAAS,aAAa,CAClC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CAAC,EAAiB,EAAE,MAAc;QACvD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B,iFAAiF,EACjF,CAAC,MAAM,CAAC,CACT,CAAyB,CAAC;QAC3B,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAiB,EAAE,SAAiB;QACtD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B,uGAAuG,EACvG,CAAC,SAAS,CAAC,CACZ,CAAqC,CAAC;QACvC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,cAAc,CAAC,CAAoB;QACjC,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACpC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;YAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;SACrC,CAAC;IACJ,CAAC;CACF"}

package/dist/backend/services/attribute-option-validator.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Attribute / option-list validator (feature 012, retained by feature 061).
+ *
+ * Pure functions used by the attribute Commands
+ * (`catalog/commands/attribute-commands.ts`) to refuse bad input before it
+ * reaches the DB. Attribute-key format is enforced at the API boundary by
+ * the Zod schemas in `@endora-commerce/contracts`.
+ */
+/**
+ * Value types whose options live in `custom_field_options` (feature 061;
+ * previously the catalog-owned `attribute_options` table, FR-021 of 012).
+ */
+export declare const SELECT_STYLE_VALUE_TYPES: readonly ["select", "enum", "multiselect"];
+export type SelectStyleValueType = (typeof SELECT_STYLE_VALUE_TYPES)[number];
+export declare function isValidOptionValue(value: string): boolean;
+export interface OptionInput {
+    value: string;
+    label?: Record<string, string>;
+    labelDefault: string;
+    isDefault?: boolean;
+    sortOrder?: number;
+}
+export interface ValidationError {
+    code: 'duplicate_value' | 'default_option_ambiguous' | 'invalid_option_value' | 'attribute_type_unsupported';
+    /** The offending value (when applicable). */
+    value?: string;
+    message: string;
+}
+export type ValidationResult = {
+    ok: true;
+} | {
+    ok: false;
+    errors: ValidationError[];
+};
+/**
+ * Validate an option list against the parent attribute's value type.
+ *
+ *   - The parent type MUST be one of `select` / `enum` / `multiselect`,
+ *     otherwise the call returns `attribute_type_unsupported`.
+ *   - Every option `value` MUST match `OPTION_VALUE_REGEX`.
+ *   - Values MUST be unique within the list.
+ *   - For `select` / `enum` types: at most one option MAY carry
+ *     `isDefault = true` (FR-023). `multiselect` allows multiple
+ *     defaults (FR-024).
+ */
+export declare function validateOptionList(options: readonly OptionInput[], parentValueType: string): ValidationResult;
+//# sourceMappingURL=attribute-option-validator.d.ts.map

package/dist/backend/services/attribute-option-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attribute-option-validator.d.ts","sourceRoot":"","sources":["../../../src/backend/services/attribute-option-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;GAGG;AACH,eAAO,MAAM,wBAAwB,4CAA6C,CAAC;AACnF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EACA,iBAAiB,GACjB,0BAA0B,GAC1B,sBAAsB,GACtB,4BAA4B,CAAC;IACjC,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC;AAE7C;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,SAAS,WAAW,EAAE,EAC/B,eAAe,EAAE,MAAM,GACtB,gBAAgB,CA0ClB"}

package/dist/backend/services/attribute-option-validator.js

@@ -0,0 +1,69 @@
+/**
+ * Attribute / option-list validator (feature 012, retained by feature 061).
+ *
+ * Pure functions used by the attribute Commands
+ * (`catalog/commands/attribute-commands.ts`) to refuse bad input before it
+ * reaches the DB. Attribute-key format is enforced at the API boundary by
+ * the Zod schemas in `@endora-commerce/contracts`.
+ */
+const OPTION_VALUE_REGEX = /^[a-z0-9_-]{1,200}$/;
+/**
+ * Value types whose options live in `custom_field_options` (feature 061;
+ * previously the catalog-owned `attribute_options` table, FR-021 of 012).
+ */
+export const SELECT_STYLE_VALUE_TYPES = ['select', 'enum', 'multiselect'];
+export function isValidOptionValue(value) {
+    return OPTION_VALUE_REGEX.test(value);
+}
+/**
+ * Validate an option list against the parent attribute's value type.
+ *
+ *   - The parent type MUST be one of `select` / `enum` / `multiselect`,
+ *     otherwise the call returns `attribute_type_unsupported`.
+ *   - Every option `value` MUST match `OPTION_VALUE_REGEX`.
+ *   - Values MUST be unique within the list.
+ *   - For `select` / `enum` types: at most one option MAY carry
+ *     `isDefault = true` (FR-023). `multiselect` allows multiple
+ *     defaults (FR-024).
+ */
+export function validateOptionList(options, parentValueType) {
+    const errors = [];
+    if (!SELECT_STYLE_VALUE_TYPES.includes(parentValueType)) {
+        errors.push({
+            code: 'attribute_type_unsupported',
+            message: `Options are only supported for ${SELECT_STYLE_VALUE_TYPES.join(' / ')} attributes (got '${parentValueType}').`,
+        });
+        return { ok: false, errors };
+    }
+    const seen = new Set();
+    let defaultCount = 0;
+    for (const opt of options) {
+        if (!isValidOptionValue(opt.value)) {
+            errors.push({
+                code: 'invalid_option_value',
+                value: opt.value,
+                message: `Option value '${opt.value}' must match /^[a-z0-9_-]{1,200}$/.`,
+            });
+            continue;
+        }
+        if (seen.has(opt.value)) {
+            errors.push({
+                code: 'duplicate_value',
+                value: opt.value,
+                message: `Duplicate option value '${opt.value}' within the attribute's option list.`,
+            });
+            continue;
+        }
+        seen.add(opt.value);
+        if (opt.isDefault)
+            defaultCount += 1;
+    }
+    if (defaultCount > 1 && parentValueType !== 'multiselect') {
+        errors.push({
+            code: 'default_option_ambiguous',
+            message: `Attribute of type '${parentValueType}' allows at most one default option.`,
+        });
+    }
+    return errors.length === 0 ? { ok: true } : { ok: false, errors };
+}
+//# sourceMappingURL=attribute-option-validator.js.map

package/dist/backend/services/attribute-option-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attribute-option-validator.js","sourceRoot":"","sources":["../../../src/backend/services/attribute-option-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAU,CAAC;AAGnF,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAyBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA+B,EAC/B,eAAuB;IAEvB,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,eAAuC,CAAC,EAAE,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,kCAAkC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,eAAe,KAAK;SACzH,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,sBAAsB;gBAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,iBAAiB,GAAG,CAAC,KAAK,qCAAqC;aACzE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,2BAA2B,GAAG,CAAC,KAAK,uCAAuC;aACrF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,GAAG,CAAC,SAAS;YAAE,YAAY,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,YAAY,GAAG,CAAC,IAAI,eAAe,KAAK,aAAa,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,sBAAsB,eAAe,sCAAsC;SACrF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACpE,CAAC"}

package/dist/backend/services/attribute-set-validations.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Pure validation helpers for the AttributeSet domain.
+ *
+ * Extracted so the rules can be unit-tested without spinning up Postgres
+ * (Constitution Principle III: integration tests hit the real DB; unit
+ * tests stay deterministic and fast).
+ *
+ * Implementation lands in T022; this file currently exposes the type
+ * surface and stubs that throw `not implemented` so the failing unit
+ * test (T010) compiles.
+ */
+export type AttributeSetValidationCode = 'SYSTEM_ATTRIBUTE_SET_IMMUTABLE' | 'ATTRIBUTE_SET_IN_USE';
+export declare class AttributeSetValidationError extends Error {
+    readonly code: AttributeSetValidationCode;
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(message: string, code: AttributeSetValidationCode, details?: Record<string, unknown> | undefined);
+}
+export interface SystemSetMarker {
+    isSystem: boolean;
+    code: string;
+}
+/**
+ * Reject any attempt to change the `code` of a system Attribute Set.
+ * Renaming the localized `name` of the Default set is permitted; only
+ * the `code` (a stable integration key) is immutable.
+ *
+ * Throws AttributeSetValidationError with code SYSTEM_ATTRIBUTE_SET_IMMUTABLE.
+ */
+export declare function assertCodeNotImmutable(currentSet: SystemSetMarker, newCode: string | undefined): void;
+/**
+ * Reject deletion of an Attribute Set that has at least one Product
+ * pointing to it. Caller passes `productCount` aggregated from a count
+ * query against `products.attribute_set_id`.
+ *
+ * Throws AttributeSetValidationError with code ATTRIBUTE_SET_IN_USE
+ * (and `details: { productCount }`) when productCount > 0.
+ *
+ * Defensive on negative or fractional inputs: anything other than
+ * exactly `0` is treated as "in use". A negative count is nonsense from
+ * the caller's side, but we'd rather refuse the delete than silently
+ * allow it.
+ */
+export declare function assertNotInUse(productCount: number): void;
+export interface AttributePartition {
+    /** Attribute keys preserved as live values (still in the new Set). */
+    preservedKeys: string[];
+    /** Attribute keys whose values are kept as archival (no longer editable). */
+    archivedKeys: string[];
+}
+/**
+ * Decide which attribute values on a Product survive a Set swap and which
+ * become archival. Spec §"Edge Cases" / §1.1 Assumptions:
+ *
+ *   - Keys present in BOTH old and new Set → preserved (still editable).
+ *   - Keys present ONLY in old Set → archived (not editable, not displayed,
+ *     but kept in `attribute_values` JSONB until either re-added or
+ *     explicitly cleared by the admin).
+ *   - Keys present ONLY in new Set → not in current values; product is
+ *     marked as needing backfill (out of scope for this helper — caller
+ *     handles).
+ *
+ * Returns the partition of currently-set keys into preserved vs archived.
+ */
+export declare function partitionAttributesForSetChange(currentValueKeys: string[], oldSetAttributeKeys: string[], newSetAttributeKeys: string[]): AttributePartition;
+//# sourceMappingURL=attribute-set-validations.d.ts.map

package/dist/backend/services/attribute-set-validations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attribute-set-validations.d.ts","sourceRoot":"","sources":["../../../src/backend/services/attribute-set-validations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,0BAA0B,GAClC,gCAAgC,GAChC,sBAAsB,CAAC;AAE3B,qBAAa,2BAA4B,SAAQ,KAAK;aAGlC,IAAI,EAAE,0BAA0B;aAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjD,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,0BAA0B,EAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,eAAe,EAC3B,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,IAAI,CAQN;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAOzD;AAED,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,6EAA6E;IAC7E,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,+BAA+B,CAC7C,gBAAgB,EAAE,MAAM,EAAE,EAC1B,mBAAmB,EAAE,MAAM,EAAE,EAC7B,mBAAmB,EAAE,MAAM,EAAE,GAC5B,kBAAkB,CAiBpB"}

package/dist/backend/services/attribute-set-validations.js

@@ -0,0 +1,89 @@
+/**
+ * Pure validation helpers for the AttributeSet domain.
+ *
+ * Extracted so the rules can be unit-tested without spinning up Postgres
+ * (Constitution Principle III: integration tests hit the real DB; unit
+ * tests stay deterministic and fast).
+ *
+ * Implementation lands in T022; this file currently exposes the type
+ * surface and stubs that throw `not implemented` so the failing unit
+ * test (T010) compiles.
+ */
+export class AttributeSetValidationError extends Error {
+    code;
+    details;
+    constructor(message, code, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = 'AttributeSetValidationError';
+    }
+}
+/**
+ * Reject any attempt to change the `code` of a system Attribute Set.
+ * Renaming the localized `name` of the Default set is permitted; only
+ * the `code` (a stable integration key) is immutable.
+ *
+ * Throws AttributeSetValidationError with code SYSTEM_ATTRIBUTE_SET_IMMUTABLE.
+ */
+export function assertCodeNotImmutable(currentSet, newCode) {
+    if (!currentSet.isSystem)
+        return;
+    if (newCode === undefined)
+        return;
+    if (newCode === currentSet.code)
+        return;
+    throw new AttributeSetValidationError(`Cannot change code of the system Attribute Set "${currentSet.code}".`, 'SYSTEM_ATTRIBUTE_SET_IMMUTABLE');
+}
+/**
+ * Reject deletion of an Attribute Set that has at least one Product
+ * pointing to it. Caller passes `productCount` aggregated from a count
+ * query against `products.attribute_set_id`.
+ *
+ * Throws AttributeSetValidationError with code ATTRIBUTE_SET_IN_USE
+ * (and `details: { productCount }`) when productCount > 0.
+ *
+ * Defensive on negative or fractional inputs: anything other than
+ * exactly `0` is treated as "in use". A negative count is nonsense from
+ * the caller's side, but we'd rather refuse the delete than silently
+ * allow it.
+ */
+export function assertNotInUse(productCount) {
+    if (productCount === 0)
+        return;
+    throw new AttributeSetValidationError(`Attribute Set is referenced by ${productCount} Product(s).`, 'ATTRIBUTE_SET_IN_USE', { productCount });
+}
+/**
+ * Decide which attribute values on a Product survive a Set swap and which
+ * become archival. Spec §"Edge Cases" / §1.1 Assumptions:
+ *
+ *   - Keys present in BOTH old and new Set → preserved (still editable).
+ *   - Keys present ONLY in old Set → archived (not editable, not displayed,
+ *     but kept in `attribute_values` JSONB until either re-added or
+ *     explicitly cleared by the admin).
+ *   - Keys present ONLY in new Set → not in current values; product is
+ *     marked as needing backfill (out of scope for this helper — caller
+ *     handles).
+ *
+ * Returns the partition of currently-set keys into preserved vs archived.
+ */
+export function partitionAttributesForSetChange(currentValueKeys, oldSetAttributeKeys, newSetAttributeKeys) {
+    const oldSet = new Set(oldSetAttributeKeys);
+    const newSet = new Set(newSetAttributeKeys);
+    const preservedKeys = [];
+    const archivedKeys = [];
+    for (const key of currentValueKeys) {
+        if (!oldSet.has(key)) {
+            // Orphan — wasn't in the old Set either; partition does not move it.
+            continue;
+        }
+        if (newSet.has(key)) {
+            preservedKeys.push(key);
+        }
+        else {
+            archivedKeys.push(key);
+        }
+    }
+    return { preservedKeys, archivedKeys };
+}
+//# sourceMappingURL=attribute-set-validations.js.map

package/dist/backend/services/attribute-set-validations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attribute-set-validations.js","sourceRoot":"","sources":["../../../src/backend/services/attribute-set-validations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAGlC;IACA;IAHlB,YACE,OAAe,EACC,IAAgC,EAChC,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAA4B;QAChC,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAA2B,EAC3B,OAA2B;IAE3B,IAAI,CAAC,UAAU,CAAC,QAAQ;QAAE,OAAO;IACjC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO;IAClC,IAAI,OAAO,KAAK,UAAU,CAAC,IAAI;QAAE,OAAO;IACxC,MAAM,IAAI,2BAA2B,CACnC,mDAAmD,UAAU,CAAC,IAAI,IAAI,EACtE,gCAAgC,CACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB;IACjD,IAAI,YAAY,KAAK,CAAC;QAAE,OAAO;IAC/B,MAAM,IAAI,2BAA2B,CACnC,kCAAkC,YAAY,cAAc,EAC5D,sBAAsB,EACtB,EAAE,YAAY,EAAE,CACjB,CAAC;AACJ,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,+BAA+B,CAC7C,gBAA0B,EAC1B,mBAA6B,EAC7B,mBAA6B;IAE7B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,qEAAqE;YACrE,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AACzC,CAAC"}

package/dist/backend/services/attribute-set.service.d.ts

@@ -0,0 +1,50 @@
+/**
+ * AttributeSetService — admin-only CRUD for Attribute Sets and their
+ * relationship with Product Attributes (feature 002,
+ * data-model.md §2.1, §2.2; contracts/catalog-002.contract.md).
+ *
+ * Composition pattern matches `category-admin.service.ts`:
+ *   - constructor takes `emFactory: () => EntityManager`,
+ *   - each call forks a fresh EM,
+ *   - returns DTOs (matching the published Zod schemas) so route handlers
+ *     are a thin wrapper.
+ */
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type AttributeSet as AttributeSetDto, type AttributeSetDetail as AttributeSetDetailDto, type CreateAttributeSetRequest, type UpdateAttributeSetRequest, type AssignAttributesRequest } from '@endora-commerce/contracts';
+import type { CommandBus } from '@endora-commerce/platform/commands';
+import type { CatalogAttributeReadService } from './catalog-attribute-read.service.js';
+import { assertCodeNotImmutable, assertNotInUse, AttributeSetValidationError } from './attribute-set-validations.js';
+export declare class AttributeSetService {
+    #private;
+    private readonly emFactory;
+    /** Feature 054 — audits attribute-set writes co-transactionally when provided. */
+    private readonly commandBus?;
+    /**
+     * Feature 061 — composed attribute read model. Set membership is stored by
+     * definition id, but the API keeps accepting/returning attribute
+     * (extension) ids — this service maps between the two at the boundary.
+     */
+    private readonly attributeRead?;
+    constructor(emFactory: () => EntityManager, 
+    /** Feature 054 — audits attribute-set writes co-transactionally when provided. */
+    commandBus?: CommandBus | undefined, 
+    /**
+     * Feature 061 — composed attribute read model. Set membership is stored by
+     * definition id, but the API keeps accepting/returning attribute
+     * (extension) ids — this service maps between the two at the boundary.
+     */
+    attributeRead?: CatalogAttributeReadService | undefined);
+    listSets(): Promise<AttributeSetDto[]>;
+    getSetDetail(id: string): Promise<AttributeSetDetailDto>;
+    createSet(input: CreateAttributeSetRequest): Promise<AttributeSetDetailDto>;
+    updateSet(id: string, input: UpdateAttributeSetRequest): Promise<AttributeSetDto>;
+    deleteSet(id: string): Promise<void>;
+    assignAttributes(id: string, input: AssignAttributesRequest): Promise<AttributeSetDetailDto>;
+    unassignAttribute(id: string, attributeId: string): Promise<void>;
+    static readonly validations: {
+        assertCodeNotImmutable: typeof assertCodeNotImmutable;
+        assertNotInUse: typeof assertNotInUse;
+        isValidationError: (err: unknown) => err is AttributeSetValidationError;
+    };
+}
+//# sourceMappingURL=attribute-set.service.d.ts.map

package/dist/backend/services/attribute-set.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attribute-set.service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/attribute-set.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,OAAO,EAEL,KAAK,YAAY,IAAI,eAAe,EACpC,KAAK,kBAAkB,IAAI,qBAAqB,EAEhD,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC7B,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAErE,OAAO,KAAK,EACV,2BAA2B,EAE5B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,2BAA2B,EAC5B,MAAM,gCAAgC,CAAC;AAUxC,qBAAa,mBAAmB;;IAE5B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,kFAAkF;IAClF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC5B;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;gBARd,SAAS,EAAE,MAAM,aAAa;IAC/C,kFAAkF;IACjE,UAAU,CAAC,EAAE,UAAU,YAAA;IACxC;;;;OAIG;IACc,aAAa,CAAC,EAAE,2BAA2B,YAAA;IA+CxD,QAAQ,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAwCtC,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAmBxD,SAAS,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAwE3E,SAAS,CACb,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,eAAe,CAAC;IAyDrB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqCpC,gBAAgB,CACpB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,qBAAqB,CAAC;IAqE3B,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuIvE,MAAM,CAAC,QAAQ,CAAC,WAAW;;;iCAGA,OAAO,KAAG,GAAG,IAAI,2BAA2B;MAErE;CACH"}