@endora-commerce/mod-cms 0.0.0-stage → 0.100.0

package/dist/backend/routes.admin.js

@@ -0,0 +1,164 @@
+import { createCmsBlockRequestSchema, createCmsHookRequestSchema, createCmsPageRequestSchema, createCmsTemplateRequestSchema, cmsHookAttachmentRequestSchema, patchCmsBlockRequestSchema, patchCmsHookRequestSchema, patchCmsPageRequestSchema, patchCmsTemplateRequestSchema, putCmsColorPaletteRequestSchema, putCmsPageContentRequestSchema, } from '@endora-commerce/contracts';
+export async function registerCmsAdminRoutes(app, deps) {
+    const requireRead = deps.requireAdmin('cms.read');
+    const requireWrite = deps.requireAdmin('cms.write');
+    app.get('/api/v1/admin/cms/pages', { preHandler: requireRead }, async (request) => {
+        const query = (request.query ?? {});
+        return deps.pageService.list({
+            ...(query['salesChannelId'] ? { salesChannelId: query['salesChannelId'] } : {}),
+            ...(query['status'] ? { status: query['status'] } : {}),
+            ...(query['q'] ? { q: query['q'] } : {}),
+        });
+    });
+    /**
+     * The deployment's reserved first path segments, for the page editor's inline
+     * warning (feature 105, FR-033; `contracts/cms-page-url.md` §5.3).
+     *
+     * **One source, two readers.** This answers from `CmsPageService`, off the
+     * same Setting the save-time refusal enforces, so the warning an operator
+     * reads while typing and the refusal they meet on Save cannot disagree.
+     *
+     * It is this module's endpoint rather than `GET /api/v1/admin/settings/:code`
+     * for a reason that is about the operator and not about layering: that route
+     * is gated `settings:read`, and a content editor holding `cms.write` without
+     * it would get a warning that silently never fires — the exact silence this
+     * phase exists to remove, reintroduced one permission over.
+     *
+     * `/pages/:id` below is no hazard: Fastify's radix router prefers a static
+     * segment over a parametric one whatever the registration order, so
+     * `reserved-segments` is never read as a page id.
+     */
+    app.get('/api/v1/admin/cms/pages/reserved-segments', { preHandler: requireRead }, async () => ({ data: { segments: await deps.pageService.reservedSegments() } }));
+    app.get('/api/v1/admin/cms/page-builder/config', { preHandler: requireRead }, async () => ({
+        data: await deps.pageBuilderRegistry.describe(),
+    }));
+    app.put('/api/v1/admin/cms/page-builder/color-palette', { preHandler: requireWrite }, async (request) => {
+        const writer = deps.getColorPaletteWriter?.();
+        if (!writer) {
+            throw new Error('Color palette writer is not configured.');
+        }
+        const body = putCmsColorPaletteRequestSchema.parse(request.body);
+        const rid = request.headers['x-request-id'];
+        const actor = deps.resolveAdminAuditContext?.(request) ?? {
+            actorAdminUserId: null,
+            requestId: typeof rid === 'string' ? rid : null,
+        };
+        const entries = await writer(body.entries, body.expectedVersion ?? null, actor);
+        return { data: { entries } };
+    });
+    app.post('/api/v1/admin/cms/pages', { preHandler: requireWrite }, async (request, reply) => {
+        const body = createCmsPageRequestSchema.parse(request.body);
+        const page = await deps.pageService.create(body);
+        return reply.code(201).send({ data: page });
+    });
+    app.get('/api/v1/admin/cms/pages/:id', { preHandler: requireRead }, async (request) => ({ data: await deps.pageService.get(request.params.id) }));
+    app.patch('/api/v1/admin/cms/pages/:id', { preHandler: requireWrite }, async (request) => {
+        const body = patchCmsPageRequestSchema.parse(request.body);
+        return { data: await deps.pageService.patch(request.params.id, body) };
+    });
+    app.put('/api/v1/admin/cms/pages/:id/content/:language', { preHandler: requireWrite }, async (request) => {
+        const body = putCmsPageContentRequestSchema.parse(request.body);
+        return {
+            data: await deps.pageService.setContent(request.params.id, request.params.language, body.data, body.version),
+        };
+    });
+    app.post('/api/v1/admin/cms/pages/:id/publish', { preHandler: requireWrite }, async (request) => ({ data: await deps.pageService.publish(request.params.id) }));
+    app.post('/api/v1/admin/cms/pages/:id/archive', { preHandler: requireWrite }, async (request) => ({ data: await deps.pageService.archive(request.params.id) }));
+    app.post('/api/v1/admin/cms/pages/:id/unarchive', { preHandler: requireWrite }, async (request) => ({ data: await deps.pageService.unarchive(request.params.id) }));
+    app.delete('/api/v1/admin/cms/pages/:id', { preHandler: requireWrite }, async (request, reply) => {
+        await deps.pageService.delete(request.params.id);
+        return reply.code(204).send();
+    });
+    app.get('/api/v1/admin/cms/blocks', { preHandler: requireRead }, async (request) => {
+        const query = (request.query ?? {});
+        return deps.blockService.list({
+            ...(query['salesChannelId'] ? { salesChannelId: query['salesChannelId'] } : {}),
+        });
+    });
+    app.post('/api/v1/admin/cms/blocks', { preHandler: requireWrite }, async (request, reply) => {
+        const body = createCmsBlockRequestSchema.parse(request.body);
+        const block = await deps.blockService.create(body);
+        return reply.code(201).send({ data: block });
+    });
+    app.get('/api/v1/admin/cms/blocks/:id', { preHandler: requireRead }, async (request) => ({ data: await deps.blockService.get(request.params.id) }));
+    app.patch('/api/v1/admin/cms/blocks/:id', { preHandler: requireWrite }, async (request) => {
+        const body = patchCmsBlockRequestSchema.parse(request.body);
+        return { data: await deps.blockService.patch(request.params.id, body) };
+    });
+    app.put('/api/v1/admin/cms/blocks/:id/content/:language', { preHandler: requireWrite }, async (request) => {
+        const body = putCmsPageContentRequestSchema.parse(request.body);
+        return {
+            data: await deps.blockService.setContent(request.params.id, request.params.language, body.data, body.version),
+        };
+    });
+    app.delete('/api/v1/admin/cms/blocks/:id', { preHandler: requireWrite }, async (request, reply) => {
+        await deps.blockService.delete(request.params.id);
+        return reply.code(204).send();
+    });
+    app.get('/api/v1/admin/cms/templates', { preHandler: requireRead }, async (request) => {
+        const query = (request.query ?? {});
+        return deps.templateService.list({
+            ...(query['salesChannelId'] ? { salesChannelId: query['salesChannelId'] } : {}),
+        });
+    });
+    app.post('/api/v1/admin/cms/templates', { preHandler: requireWrite }, async (request, reply) => {
+        const body = createCmsTemplateRequestSchema.parse(request.body);
+        const template = await deps.templateService.create(body);
+        return reply.code(201).send({ data: template });
+    });
+    app.get('/api/v1/admin/cms/templates/:id', { preHandler: requireRead }, async (request) => ({ data: await deps.templateService.get(request.params.id) }));
+    app.patch('/api/v1/admin/cms/templates/:id', { preHandler: requireWrite }, async (request) => {
+        const body = patchCmsTemplateRequestSchema.parse(request.body);
+        return { data: await deps.templateService.patch(request.params.id, body) };
+    });
+    app.put('/api/v1/admin/cms/templates/:id/content/:language', { preHandler: requireWrite }, async (request) => {
+        const body = putCmsPageContentRequestSchema.parse(request.body);
+        return {
+            data: await deps.templateService.setContent(request.params.id, request.params.language, body.data, body.version),
+        };
+    });
+    app.delete('/api/v1/admin/cms/templates/:id', { preHandler: requireWrite }, async (request, reply) => {
+        await deps.templateService.delete(request.params.id);
+        return reply.code(204).send();
+    });
+    app.get('/api/v1/admin/cms/hooks', { preHandler: requireRead }, async (request) => {
+        const query = (request.query ?? {});
+        return deps.hookService.list({
+            ...(query['salesChannelId'] ? { salesChannelId: query['salesChannelId'] } : {}),
+        });
+    });
+    app.post('/api/v1/admin/cms/hooks', { preHandler: requireWrite }, async (request, reply) => {
+        const body = createCmsHookRequestSchema.parse(request.body);
+        const hook = await deps.hookService.create(body);
+        return reply.code(201).send({ data: hook });
+    });
+    app.get('/api/v1/admin/cms/hooks/:id', { preHandler: requireRead }, async (request) => ({ data: await deps.hookService.get(request.params.id) }));
+    app.patch('/api/v1/admin/cms/hooks/:id', { preHandler: requireWrite }, async (request) => {
+        const body = patchCmsHookRequestSchema.parse(request.body);
+        return { data: await deps.hookService.patch(request.params.id, body) };
+    });
+    app.delete('/api/v1/admin/cms/hooks/:id', { preHandler: requireWrite }, async (request, reply) => {
+        await deps.hookService.delete(request.params.id);
+        return reply.code(204).send();
+    });
+    app.get('/api/v1/admin/cms/hooks/:id/attachments', { preHandler: requireRead }, async (request) => ({ data: await deps.hookService.listAttachments(request.params.id) }));
+    app.post('/api/v1/admin/cms/hooks/:id/attachments', { preHandler: requireWrite }, async (request, reply) => {
+        const body = cmsHookAttachmentRequestSchema.parse(request.body);
+        const attachments = await deps.hookService.addAttachment(request.params.id, body.blockId, body.position);
+        return reply.code(201).send({ data: attachments });
+    });
+    app.patch('/api/v1/admin/cms/hooks/:id/attachments/:blockId', { preHandler: requireWrite }, async (request) => {
+        const body = cmsHookAttachmentRequestSchema.parse({
+            ...request.body,
+            blockId: request.params.blockId,
+        });
+        return {
+            data: await deps.hookService.reorderAttachment(request.params.id, request.params.blockId, body.position),
+        };
+    });
+    app.delete('/api/v1/admin/cms/hooks/:id/attachments/:blockId', { preHandler: requireWrite }, async (request, reply) => {
+        await deps.hookService.removeAttachment(request.params.id, request.params.blockId);
+        return reply.code(204).send();
+    });
+}
+//# sourceMappingURL=routes.admin.js.map

package/dist/backend/routes.admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.js","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AACA,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,8BAA8B,EAC9B,8BAA8B,EAC9B,0BAA0B,EAC1B,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AASpC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAoB,EACpB,IASC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IAEpD,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChF,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAuC,CAAC;QAC1E,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAC3B,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;;;;;;;;;;;;;;OAiBG;IACH,GAAG,CAAC,GAAG,CACL,2CAA2C,EAC3C,EAAE,UAAU,EAAE,WAAW,EAAE,EAC3B,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAChF,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACzF,IAAI,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE;KAChD,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,GAAG,CAAC,8CAA8C,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACtG,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,IAAI,GAAG,+BAA+B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,KAAK,GACT,IAAI,CAAC,wBAAwB,EAAE,CAAC,OAAO,CAAC,IAAI;YAC1C,gBAAgB,EAAE,IAAI;YACtB,SAAS,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;SAChD,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC;QAChF,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACzF,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,6BAA6B,EAC7B,EAAE,UAAU,EAAE,WAAW,EAAE,EAC3B,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAC7E,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,6BAA6B,EAC7B,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IACzE,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,+CAA+C,EAC/C,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO;YACL,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CACrC,OAAO,CAAC,MAAM,CAAC,EAAE,EACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,EACvB,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,CACb;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,qCAAqC,EACrC,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CACjF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,qCAAqC,EACrC,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CACjF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,uCAAuC,EACvC,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CACnF,CAAC;IAEF,GAAG,CAAC,MAAM,CACR,6BAA6B,EAC7B,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACjF,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAuC,CAAC;QAC1E,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAC5B,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1F,MAAM,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,8BAA8B,EAC9B,EAAE,UAAU,EAAE,WAAW,EAAE,EAC3B,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAC9E,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,8BAA8B,EAC9B,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IAC1E,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,gDAAgD,EAChD,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO;YACL,IAAI,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CACtC,OAAO,CAAC,MAAM,CAAC,EAAE,EACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,EACvB,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,CACb;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CACR,8BAA8B,EAC9B,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpF,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAuC,CAAC;QAC1E,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAC/B,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC7F,MAAM,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,iCAAiC,EACjC,EAAE,UAAU,EAAE,WAAW,EAAE,EAC3B,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CACjF,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,iCAAiC,EACjC,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IAC7E,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,mDAAmD,EACnD,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO;YACL,IAAI,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CACzC,OAAO,CAAC,MAAM,CAAC,EAAE,EACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,EACvB,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,CACb;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CACR,iCAAiC,EACjC,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChF,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAuC,CAAC;QAC1E,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAC3B,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACzF,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,6BAA6B,EAC7B,EAAE,UAAU,EAAE,WAAW,EAAE,EAC3B,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAC7E,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,6BAA6B,EAC7B,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IACzE,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CACR,6BAA6B,EAC7B,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,yCAAyC,EACzC,EAAE,UAAU,EAAE,WAAW,EAAE,EAC3B,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CACzF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,yCAAyC,EACzC,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CACtD,OAAO,CAAC,MAAM,CAAC,EAAE,EACjB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACrD,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,kDAAkD,EAClD,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC;YAChD,GAAI,OAAO,CAAC,IAAmD;YAC/D,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;SAChC,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAC5C,OAAO,CAAC,MAAM,CAAC,EAAE,EACjB,OAAO,CAAC,MAAM,CAAC,OAAO,EACtB,IAAI,CAAC,QAAQ,CACd;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CACR,kDAAkD,EAClD,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/routes.storefront.d.ts

@@ -0,0 +1,6 @@
+import type { FastifyInstance } from 'fastify';
+import type { StorefrontResolver } from './services/storefront-resolver.js';
+export declare function registerCmsStorefrontRoutes(app: FastifyInstance, deps: {
+    storefrontResolver: StorefrontResolver;
+}): Promise<void>;
+//# sourceMappingURL=routes.storefront.d.ts.map

package/dist/backend/routes.storefront.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.storefront.d.ts","sourceRoot":"","sources":["../../src/backend/routes.storefront.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAkB,MAAM,SAAS,CAAC;AAI/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAgB5E,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE;IAAE,kBAAkB,EAAE,kBAAkB,CAAA;CAAE,GAC/C,OAAO,CAAC,IAAI,CAAC,CA8Ef"}

package/dist/backend/routes.storefront.js

@@ -0,0 +1,89 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { getResolvedChannel } from '@endora-commerce/platform/kernel';
+/**
+ * The request's sales channel, resolved once by the canonical resolver
+ * middleware (feature 053 / FR-002). Storefront modules read this instead of
+ * re-parsing the `x-sales-channel` header.
+ */
+function resolvedChannel(request) {
+    const ch = getResolvedChannel(request);
+    return { id: ch.id, code: ch.code, defaultLanguage: ch.defaultLanguage };
+}
+export async function registerCmsStorefrontRoutes(app, deps) {
+    app.get('/api/v1/cms/pages/by-slug', async (request) => {
+        const query = (request.query ?? {});
+        const slug = query['slug'];
+        if (!slug) {
+            throw new HttpError(400, ERROR_CODES.VALIDATION_FAILED, 'Missing CMS page slug.');
+        }
+        const page = await deps.storefrontResolver.resolvePageBySlug({
+            slug,
+            resolvedChannel: resolvedChannel(request),
+            language: query['language'] ?? readHeader(request.headers['accept-language'])?.split(',')[0],
+        });
+        if (!page) {
+            throw new HttpError(404, ERROR_CODES.CMS_PAGE_NOT_FOUND, 'CMS Page not found.');
+        }
+        return { data: page };
+    });
+    /**
+     * The published pages of this request's sales channel, so the shop can tell a
+     * crawler they exist (feature 105, FR-021; `contracts/cms-page-url.md` §4.1).
+     *
+     * Until this endpoint the storefront advertised **no CMS URL at all**: the
+     * sitemap's `SITEMAP_DYNAMIC_ROUTES` names `/[...slug]` as a route *pattern*
+     * for the check's reconciliation, and nothing enumerated the rows behind it.
+     *
+     * The admin listing is not the answer to that and could not be: it is
+     * `cms.read`-gated, is not scoped to the request's channel, and returns
+     * drafts and archived pages, so a sitemap built from it would advertise
+     * unpublished content (`research.md` D-6).
+     *
+     * It takes no language, unlike the three lookups around it. A sitemap carries
+     * addresses, and a page's address is the same in every language it is served
+     * in; the language is resolved when the document is fetched, by `by-slug`.
+     */
+    app.get('/api/v1/cms/pages/by-channel', async (request) => {
+        const pages = await deps.storefrontResolver.listPublishedPages({
+            resolvedChannel: resolvedChannel(request),
+        });
+        return { data: { pages } };
+    });
+    app.get('/api/v1/cms/blocks/by-code', async (request) => {
+        const query = (request.query ?? {});
+        const code = query['code'];
+        if (!code) {
+            throw new HttpError(400, ERROR_CODES.VALIDATION_FAILED, 'Missing CMS block code.');
+        }
+        const block = await deps.storefrontResolver.resolveBlockByCode({
+            code,
+            resolvedChannel: resolvedChannel(request),
+            language: query['language'] ?? readHeader(request.headers['accept-language'])?.split(',')[0],
+        });
+        if (!block) {
+            throw new HttpError(404, ERROR_CODES.CMS_BLOCK_NOT_FOUND, 'CMS Block not found.');
+        }
+        return { data: block };
+    });
+    app.get('/api/v1/cms/hooks/by-code', async (request) => {
+        const query = (request.query ?? {});
+        const code = query['code'];
+        if (!code) {
+            throw new HttpError(400, ERROR_CODES.VALIDATION_FAILED, 'Missing CMS hook code.');
+        }
+        const hook = await deps.storefrontResolver.resolveHookByCode({
+            code,
+            resolvedChannel: resolvedChannel(request),
+            language: query['language'] ?? readHeader(request.headers['accept-language'])?.split(',')[0],
+        });
+        if (!hook) {
+            throw new HttpError(404, ERROR_CODES.CMS_HOOK_NOT_FOUND, 'CMS Hook not found.');
+        }
+        return { data: hook };
+    });
+}
+function readHeader(value) {
+    return Array.isArray(value) ? value[0] : value;
+}
+//# sourceMappingURL=routes.storefront.js.map

package/dist/backend/routes.storefront.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.storefront.js","sourceRoot":"","sources":["../../src/backend/routes.storefront.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAGtE;;;;GAIG;AACH,SAAS,eAAe,CAAC,OAAuB;IAK9C,MAAM,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC,eAAe,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAAoB,EACpB,IAAgD;IAEhD,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACrD,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAuC,CAAC;QAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC;YAC3D,IAAI;YACJ,eAAe,EAAE,eAAe,CAAC,OAAO,CAAC;YACzC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAC7F,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH;;;;;;;;;;;;;;;;OAgBG;IACH,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC;YAC7D,eAAe,EAAE,eAAe,CAAC,OAAO,CAAC;SAC1C,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACtD,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAuC,CAAC;QAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC;YAC7D,IAAI;YACJ,eAAe,EAAE,eAAe,CAAC,OAAO,CAAC;YACzC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAC7F,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACrD,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAuC,CAAC;QAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC;YAC3D,IAAI;YACJ,eAAe,EAAE,eAAe,CAAC,OAAO,CAAC;YACzC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAC7F,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAoC;IACtD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACjD,CAAC"}

package/dist/backend/services/asset-embed-resolver.d.ts

@@ -0,0 +1,17 @@
+import type { AssetsLibraryPort } from '@endora-commerce/contracts';
+import type { CmsAssetResolver } from './storefront-resolver.js';
+/**
+ * How an asset id a page, block or template embeds becomes the detail the
+ * storefront response carries (`specs/110-instance-repository/` T118c).
+ *
+ * A function of the port rather than of a `ModuleContext`, so the mapping and its
+ * one tolerance are testable over a stubbed `AssetsLibraryPort` with no container
+ * composed. `backend/index.ts` supplies the real one as
+ * `lazyPort<AssetsLibraryPort>(ctx, 'assetsLibraryPort')`, whose proxy resolves
+ * per call, so nothing here captures a registration.
+ *
+ * `getAsset` is the whole demand: the four fields a storefront embed renders plus
+ * the visibility a consumer branches on.
+ */
+export declare function createAssetEmbedResolver(assets: Pick<AssetsLibraryPort, 'getAsset'>): CmsAssetResolver;
+//# sourceMappingURL=asset-embed-resolver.d.ts.map

package/dist/backend/services/asset-embed-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-embed-resolver.d.ts","sourceRoot":"","sources":["../../../src/backend/services/asset-embed-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,GAC1C,gBAAgB,CAuBlB"}

package/dist/backend/services/asset-embed-resolver.js

@@ -0,0 +1,40 @@
+import { rethrowIfModuleDisabled } from '@endora-commerce/platform/kernel';
+/**
+ * How an asset id a page, block or template embeds becomes the detail the
+ * storefront response carries (`specs/110-instance-repository/` T118c).
+ *
+ * A function of the port rather than of a `ModuleContext`, so the mapping and its
+ * one tolerance are testable over a stubbed `AssetsLibraryPort` with no container
+ * composed. `backend/index.ts` supplies the real one as
+ * `lazyPort<AssetsLibraryPort>(ctx, 'assetsLibraryPort')`, whose proxy resolves
+ * per call, so nothing here captures a registration.
+ *
+ * `getAsset` is the whole demand: the four fields a storefront embed renders plus
+ * the visibility a consumer branches on.
+ */
+export function createAssetEmbedResolver(assets) {
+    return async (assetId) => {
+        try {
+            const detail = await assets.getAsset(assetId);
+            return {
+                url: detail.url,
+                mimeType: detail.mimeType,
+                filename: detail.filename,
+                label: detail.label,
+                visibility: detail.visibility,
+            };
+        }
+        catch (err) {
+            // The narrow tolerance the composition root's closure already carried, kept
+            // deliberately: `getAsset` throws 404 for a row that is gone, and a page
+            // embedding a deleted asset renders without it rather than failing the whole
+            // response. `rethrowIfModuleDisabled` is what stops that tolerance from also
+            // absorbing an owner's refusal (composition checklist item 7) — unreachable
+            // while `assets_library` declares `nonDeactivatable`, and the line that keeps
+            // this fail-closed on the day that changes.
+            rethrowIfModuleDisabled(err);
+            return null;
+        }
+    };
+}
+//# sourceMappingURL=asset-embed-resolver.js.map

package/dist/backend/services/asset-embed-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-embed-resolver.js","sourceRoot":"","sources":["../../../src/backend/services/asset-embed-resolver.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAG3E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAA2C;IAE3C,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,OAAO;gBACL,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,4EAA4E;YAC5E,yEAAyE;YACzE,6EAA6E;YAC7E,6EAA6E;YAC7E,4EAA4E;YAC5E,8EAA8E;YAC9E,4CAA4C;YAC5C,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/backend/services/asset-references.d.ts

@@ -0,0 +1,4 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { AssetReferenceRegistryPort } from '@endora-commerce/contracts';
+export declare function registerCmsAssetReferences(registry: AssetReferenceRegistryPort, emFactory: () => EntityManager): void;
+//# sourceMappingURL=asset-references.d.ts.map

package/dist/backend/services/asset-references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-references.d.ts","sourceRoot":"","sources":["../../../src/backend/services/asset-references.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAGV,0BAA0B,EAC3B,MAAM,4BAA4B,CAAC;AAEpC,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,0BAA0B,EACpC,SAAS,EAAE,MAAM,aAAa,GAC7B,IAAI,CAEN"}

package/dist/backend/services/asset-references.js

@@ -0,0 +1,55 @@
+// CMS → AssetReferenceRegistry descriptor — feature 014 / R12 / T031.
+//
+// Replaces the feature-013 cms_pages descriptor. Scans every CMS column
+// that can carry asset embeds:
+//   - cms_pages.content
+//   - cms_blocks.content
+//   - cms_templates.content
+//
+// Match shape: any node whose `assetId` (or any `*assetId` key under
+// `props`) equals the requested id. Caught by jsonb_path_exists with a
+// wildcard-key match — handles components like LibraryImage,
+// Button.iconAssetId, Card.mainImageAssetId, etc.
+//
+// Asset id is validated upstream by Zod (UUID), so inlining it in the
+// jsonpath literal is safe; `?::text` parameter coercion confuses Knex
+// under MikroORM in some cases (carried over from feature 013).
+export function registerCmsAssetReferences(registry, emFactory) {
+    registry.register(cmsAssetReferenceDescriptor(emFactory));
+}
+function cmsAssetReferenceDescriptor(emFactory) {
+    return {
+        ownerModuleId: 'cms',
+        async findReferences(assetIds) {
+            if (assetIds.length === 0)
+                return [];
+            const em = emFactory();
+            const out = [];
+            for (const aidRaw of assetIds) {
+                const aid = aidRaw.replace(/[^0-9a-fA-F-]/g, '');
+                const path = `'$.** ? (@ == "${aid}")'::jsonpath`;
+                const rows = (await em.execute(`select id::text as id, name, 'cms_page' as kind
+           from cms_pages
+           where jsonb_path_exists(content, ${path})
+           union all
+           select id::text as id, name, 'cms_block' as kind
+           from cms_blocks
+           where jsonb_path_exists(content, ${path})
+           union all
+           select id::text as id, name, 'cms_template' as kind
+           from cms_templates
+           where jsonb_path_exists(content, ${path})`));
+                for (const r of rows) {
+                    const label = r.kind === 'cms_page'
+                        ? `CMS page "${r.name}"`
+                        : r.kind === 'cms_block'
+                            ? `CMS block "${r.name}"`
+                            : `CMS template "${r.name}"`;
+                    out.push({ kind: 'cms_body_embed', entityId: r.id, label });
+                }
+            }
+            return out;
+        },
+    };
+}
+//# sourceMappingURL=asset-references.js.map

package/dist/backend/services/asset-references.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-references.js","sourceRoot":"","sources":["../../../src/backend/services/asset-references.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,wEAAwE;AACxE,+BAA+B;AAC/B,wBAAwB;AACxB,yBAAyB;AACzB,4BAA4B;AAC5B,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,6DAA6D;AAC7D,kDAAkD;AAClD,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,gEAAgE;AAShE,MAAM,UAAU,0BAA0B,CACxC,QAAoC,EACpC,SAA8B;IAE9B,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,2BAA2B,CAClC,SAA8B;IAE9B,OAAO;QACL,aAAa,EAAE,KAAK;QACpB,KAAK,CAAC,cAAc,CAAC,QAAkB;YACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;YACvB,MAAM,GAAG,GAAqB,EAAE,CAAC;YACjC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;gBACjD,MAAM,IAAI,GAAG,kBAAkB,GAAG,eAAe,CAAC;gBAElD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B;;8CAEoC,IAAI;;;;8CAIJ,IAAI;;;;8CAIJ,IAAI,GAAG,CAC5C,CAAsD,CAAC;gBAExD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,MAAM,KAAK,GACT,CAAC,CAAC,IAAI,KAAK,UAAU;wBACnB,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,GAAG;wBACxB,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW;4BACtB,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,GAAG;4BACzB,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAI,GAAG,CAAC;oBACnC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/services/cms-block-read-port.d.ts

@@ -0,0 +1,27 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { CmsBlockReadPort, CmsBlockRecord, CmsLocalizedBlockRecord } from '@endora-commerce/contracts';
+/**
+ * The block read model `cms` publishes (`specs/110-instance-repository/` T118c).
+ *
+ * `megamenu` is the only consumer and it asks two questions: *does this block
+ * exist* (the admin-side target validator, which refuses a menu item pointing at
+ * a block that is not there) and *what does it render as in this language* (the
+ * storefront resolver, which inlines the tree into the menu payload). Both were
+ * a `select … from cms_blocks` written twice in composition roots — once in
+ * `backend/src/composition.ts` and once in `backend/test/helpers/test-server.ts`
+ * — so this module's table and this module's envelope layout were read by a file
+ * this module does not own.
+ *
+ * **The envelope stops here.** `content.languages[<code>]` is a storage decision:
+ * which key a language hangs off, that a legacy `schema_version` may ride along,
+ * and that an absent key means "nothing authored" are all facts about the column,
+ * and the localized record is what lets a consumer have the tree without them.
+ * The root closure knew every one of them.
+ */
+export declare class CmsBlockReadService implements CmsBlockReadPort {
+    private readonly emFactory;
+    constructor(emFactory: () => EntityManager);
+    findById(id: string): Promise<CmsBlockRecord | null>;
+    findLocalizedById(id: string, language: string): Promise<CmsLocalizedBlockRecord | null>;
+}
+//# sourceMappingURL=cms-block-read-port.d.ts.map

package/dist/backend/services/cms-block-read-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cms-block-read-port.d.ts","sourceRoot":"","sources":["../../../src/backend/services/cms-block-read-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACxB,MAAM,4BAA4B,CAAC;AAGpC;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,mBAAoB,YAAW,gBAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM,aAAa;IAErD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAKpD,iBAAiB,CACrB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;CAoB3C"}

package/dist/backend/services/cms-block-read-port.js

@@ -0,0 +1,50 @@
+import { CmsBlock } from '../entities/cms-block.entity.js';
+/**
+ * The block read model `cms` publishes (`specs/110-instance-repository/` T118c).
+ *
+ * `megamenu` is the only consumer and it asks two questions: *does this block
+ * exist* (the admin-side target validator, which refuses a menu item pointing at
+ * a block that is not there) and *what does it render as in this language* (the
+ * storefront resolver, which inlines the tree into the menu payload). Both were
+ * a `select … from cms_blocks` written twice in composition roots — once in
+ * `backend/src/composition.ts` and once in `backend/test/helpers/test-server.ts`
+ * — so this module's table and this module's envelope layout were read by a file
+ * this module does not own.
+ *
+ * **The envelope stops here.** `content.languages[<code>]` is a storage decision:
+ * which key a language hangs off, that a legacy `schema_version` may ride along,
+ * and that an absent key means "nothing authored" are all facts about the column,
+ * and the localized record is what lets a consumer have the tree without them.
+ * The root closure knew every one of them.
+ */
+export class CmsBlockReadService {
+    emFactory;
+    constructor(emFactory) {
+        this.emFactory = emFactory;
+    }
+    async findById(id) {
+        const block = await this.emFactory().findOne(CmsBlock, { id });
+        return block ? { id: block.id, code: block.code, active: block.active } : null;
+    }
+    async findLocalizedById(id, language) {
+        /**
+         * `active: true` in the predicate rather than after it, which is the
+         * narrowing the storefront closure carried and the validator's did not: a
+         * deactivated block is content an operator has withdrawn, and loading its
+         * tree to throw it away is a read nobody asked for.
+         */
+        const block = await this.emFactory().findOne(CmsBlock, { id, active: true });
+        if (!block)
+            return null;
+        const languages = block.content.languages;
+        const data = languages?.[language];
+        // No fallback language, deliberately. This module's *own* hook resolution
+        // falls back to `{}` so a page still renders; a consumer inlining a block
+        // into somebody else's payload wants to know there is nothing to inline, and
+        // both composition roots answered `null` here.
+        if (data === undefined)
+            return null;
+        return { id: block.id, code: block.code, language, data };
+    }
+}
+//# sourceMappingURL=cms-block-read-port.js.map

package/dist/backend/services/cms-block-read-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cms-block-read-port.js","sourceRoot":"","sources":["../../../src/backend/services/cms-block-read-port.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAE3D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,SAA8B;QAA9B,cAAS,GAAT,SAAS,CAAqB;IAAG,CAAC;IAE/D,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,EAAU,EACV,QAAgB;QAEhB;;;;;WAKG;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,MAAM,SAAS,GAAI,KAAK,CAAC,OAAmD,CAAC,SAAS,CAAC;QACvF,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC;QACnC,0EAA0E;QAC1E,0EAA0E;QAC1E,6EAA6E;QAC7E,+CAA+C;QAC/C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAEpC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;CACF"}

package/dist/backend/services/cms-block-seed-port.d.ts

@@ -0,0 +1,31 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { CmsBlockSeedPort, CmsSeededBlock } from '@endora-commerce/contracts';
+/**
+ * `cmsBlockSeedPort` — feature 075 / D-87.
+ *
+ * `newsletter` and `google_analytics` each ship a predefined block: the
+ * registration-form consent label and the cookie-banner message. Both used to
+ * insert it themselves, with raw SQL naming `cms_blocks` and
+ * `cms_block_sales_channels` — four ledgered reaches that no import specifier
+ * made visible, so the boundary they crossed compiled and returned rows.
+ *
+ * The statements are unchanged; only their owner is. That is deliberate: this
+ * cut is a boundary repair, and rewriting the SQL at the same time would put a
+ * behavioural change behind a move nobody would look at twice. So both halves
+ * stay `insert … where not exists`, which is what makes a re-run insert nothing
+ * and an operator's edit of the seeded text survive every restart.
+ *
+ * `em.execute`, not `em.getConnection().execute` (issue #200). A connection is
+ * not a transaction: these statements used to take their own pooled connection
+ * and commit immediately, so a caller holding a transaction open could neither
+ * roll them back nor have them see its own uncommitted rows — a channel created
+ * in that transaction was invisible here and binding it failed on
+ * `cms_block_sales_channels_channel_fk`. Identical outside a transaction, which
+ * is where the seeding caller normally runs.
+ */
+export declare class CmsBlockSeedService implements CmsBlockSeedPort {
+    private readonly emFactory;
+    constructor(emFactory: () => EntityManager);
+    ensureSeededBlock(block: CmsSeededBlock): Promise<void>;
+}
+//# sourceMappingURL=cms-block-seed-port.d.ts.map

package/dist/backend/services/cms-block-seed-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cms-block-seed-port.d.ts","sourceRoot":"","sources":["../../../src/backend/services/cms-block-seed-port.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAGnF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,mBAAoB,YAAW,gBAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM,aAAa;IAErD,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;CA4C9D"}

package/dist/backend/services/cms-block-seed-port.js

@@ -0,0 +1,68 @@
+import { randomUUID } from 'node:crypto';
+import { SalesChannel } from '@endora-commerce/platform/kernel';
+/**
+ * `cmsBlockSeedPort` — feature 075 / D-87.
+ *
+ * `newsletter` and `google_analytics` each ship a predefined block: the
+ * registration-form consent label and the cookie-banner message. Both used to
+ * insert it themselves, with raw SQL naming `cms_blocks` and
+ * `cms_block_sales_channels` — four ledgered reaches that no import specifier
+ * made visible, so the boundary they crossed compiled and returned rows.
+ *
+ * The statements are unchanged; only their owner is. That is deliberate: this
+ * cut is a boundary repair, and rewriting the SQL at the same time would put a
+ * behavioural change behind a move nobody would look at twice. So both halves
+ * stay `insert … where not exists`, which is what makes a re-run insert nothing
+ * and an operator's edit of the seeded text survive every restart.
+ *
+ * `em.execute`, not `em.getConnection().execute` (issue #200). A connection is
+ * not a transaction: these statements used to take their own pooled connection
+ * and commit immediately, so a caller holding a transaction open could neither
+ * roll them back nor have them see its own uncommitted rows — a channel created
+ * in that transaction was invisible here and binding it failed on
+ * `cms_block_sales_channels_channel_fk`. Identical outside a transaction, which
+ * is where the seeding caller normally runs.
+ */
+export class CmsBlockSeedService {
+    emFactory;
+    constructor(emFactory) {
+        this.emFactory = emFactory;
+    }
+    async ensureSeededBlock(block) {
+        const em = this.emFactory();
+        await em.execute(`insert into cms_blocks (id, name, code, active, description, content, languages, version, created_at, updated_at)
+       select ?, ?, ?, true, null, ?::jsonb, ?::jsonb, 1, now(), now()
+       where not exists (select 1 from cms_blocks where code = ?)`, [
+            randomUUID(),
+            block.name,
+            block.code,
+            JSON.stringify(block.content),
+            JSON.stringify([...block.languages]),
+            block.code,
+        ]);
+        const rows = (await em.execute(`select id from cms_blocks where code = ? limit 1`, [
+            block.code,
+        ]));
+        const blockId = rows[0]?.id;
+        if (blockId === undefined)
+            return;
+        /**
+         * The channel ids come from the kernel's own entity, not from
+         * `select … from sales_channels sc` (feature 075, D-87). `sales_channels`
+         * is the kernel's table since feature 072 moved the resolution machinery
+         * there, and a module relating into the kernel by ORM is the sanctioned
+         * access. The binding insert stays one `not exists`-guarded statement, with
+         * one ordinary binding per channel id, so a re-run binds nothing new.
+         */
+        const channelIds = (await em.find(SalesChannel, {}, { fields: ['id'] })).map((c) => c.id);
+        if (channelIds.length === 0)
+            return;
+        const channelValues = channelIds.map(() => '(?::uuid)').join(', ');
+        await em.execute(`insert into cms_block_sales_channels (block_id, sales_channel_id, code)
+       select ?, sc.id, ? from (values ${channelValues}) as sc(id)
+       where not exists (
+         select 1 from cms_block_sales_channels c where c.sales_channel_id = sc.id and c.code = ?
+       )`, [blockId, block.code, ...channelIds, block.code]);
+    }
+}
+//# sourceMappingURL=cms-block-seed-port.js.map