@endora-commerce/mod-comparisons 0.0.0-stage → 0.100.0

package/dist/backend/services/comparison-service.js

@@ -0,0 +1,588 @@
+import { z } from 'zod';
+import { listingPriceMoney, ANONYMOUS_PRODUCT_AUDIENCE, isProductVisibleTo, } from '@endora-commerce/contracts';
+import { withSystemScope } from '@endora-commerce/platform/tenancy';
+import { SalesChannel } from '@endora-commerce/platform/kernel';
+import { Comparison } from '../entities/comparison.entity.js';
+import { ComparisonProduct } from '../entities/comparison-product.entity.js';
+import { COMPARE_SETTING_CODES, DEFAULT_COMPARE_MAX_PRODUCTS, } from '../../manifest.js';
+/**
+ * The most restrictive viewer there is — the public. The right default for a
+ * caller that has not been taught to resolve its reader, for the same reason
+ * {@link ANONYMOUS_PRODUCT_AUDIENCE} is: everything it may see, every other
+ * viewer may see too.
+ */
+export const ANONYMOUS_COMPARISON_VIEWER = {
+    kind: 'buyer',
+    audience: ANONYMOUS_PRODUCT_AUDIENCE,
+};
+export class ComparisonService {
+    emFactory;
+    projection;
+    tokens;
+    catalogProducts;
+    channelMembership;
+    catalogGallery;
+    settingsService;
+    catalogAttributes;
+    listingPrices;
+    organizationDetails;
+    customerAccounts;
+    constructor(emFactory, projection, tokens, 
+    /**
+     * `catalog`'s product read model. Not optional: a comparison is a list of
+     * products, so a service that cannot read one has nothing to answer with —
+     * where the settings and pricing arguments below have a defined fallback,
+     * this has none.
+     */
+    catalogProducts, 
+    /**
+     * The sanctioned bridge accessor (Constitution XII), for the assortment
+     * gate `addProduct` owes (issue #259). Required for the same reason
+     * `catalogProducts` is: an optional one would spell "this rig wired no
+     * membership service" and "this channel publishes the product" as the same
+     * answer.
+     */
+    channelMembership, 
+    /**
+     * Feature 075 / D-87 — `catalog`'s gallery read model, for the base image
+     * of each column. Required for the same reason `catalogProducts` is: the
+     * alternative to a wired port is not "a comparison without pictures", it is
+     * a service that cannot tell an operator who set no base image from a rig
+     * that wired no owner.
+     *
+     * `baseImageUrls`, not `list`: the read is a batch, it must tolerate an id
+     * whose product has since been removed, and the value a column renders is a
+     * **url**, which `catalog` resolves through the asset port it holds. Those
+     * three are exactly why the single join this replaced could not be swapped
+     * for the per-product port that already existed.
+     */
+    catalogGallery, 
+    /**
+     * Optional settings service. When undefined, `compare.max_products`
+     * defaults to {@link DEFAULT_COMPARE_MAX_PRODUCTS} on every call —
+     * useful for foundation tests that pre-date Settings wiring.
+     */
+    settingsService, 
+    /**
+     * Feature 061 — the catalog's composed attribute read model (Principle I:
+     * replaces the former direct `ProductAttribute` entity find).
+     */
+    catalogAttributes, 
+    /**
+     * Issue #132 — the pricing engine, through the `pricingService` port. A
+     * comparison exists so a buyer can put prices side by side, so the figures
+     * in its columns have to be the ones a price list stands behind.
+     */
+    listingPrices, 
+    /**
+     * `organizations`' read model, for the one field the pricing engine needs
+     * beyond the viewer's organisation id: the customer group it belongs to,
+     * which a group-targeted price list is selected by. Without it a buyer's
+     * comparison column and their own cart line would resolve against
+     * different lists and quote different figures for one product.
+     */
+    organizationDetails, 
+    /**
+     * Feature 087 Group B / D-187 — `customer_accounts`' read model, for the
+     * one field the owner stamp needs: the organisation the owning account
+     * belongs to.
+     *
+     * The organisation is derived from the **row**, never from the ambient
+     * request context, and that is what makes one implementation serve both
+     * write paths: `addProduct` runs on a storefront request and
+     * `adoptAnonymousComparison` runs inside another module's login hook, where
+     * there is no comparison caller to read a context from.
+     *
+     * Optional in the constructor and required at the two call sites, in the
+     * shape {@link organizationDetails} already takes here. A rig that wired no
+     * port cannot stamp, and the honest answer to that is a refusal at the
+     * write rather than a row `comparisons_organization_attribution_chk` will
+     * reject with a message about a constraint the caller never heard of.
+     */
+    customerAccounts) {
+        this.emFactory = emFactory;
+        this.projection = projection;
+        this.tokens = tokens;
+        this.catalogProducts = catalogProducts;
+        this.channelMembership = channelMembership;
+        this.catalogGallery = catalogGallery;
+        this.settingsService = settingsService;
+        this.catalogAttributes = catalogAttributes;
+        this.listingPrices = listingPrices;
+        this.organizationDetails = organizationDetails;
+        this.customerAccounts = customerAccounts;
+    }
+    #requireListingPrices() {
+        if (!this.listingPrices) {
+            throw new Error('ComparisonService: the pricing port is not wired — a comparison cannot be priced.');
+        }
+        return this.listingPrices;
+    }
+    #requireOrganizationDetails() {
+        if (!this.organizationDetails) {
+            throw new Error('ComparisonService: the organization read port is not wired — a signed-in buyer cannot be priced.');
+        }
+        return this.organizationDetails;
+    }
+    /**
+     * The organisation that owns a comparison belonging to this account — feature
+     * 087 Group B, D-187.
+     *
+     * Total, and refuses rather than returning `null`: `customer_accounts.organization_id`
+     * is `NOT NULL` (D-178), so an account that resolves always has one, and an
+     * account that does not resolve is a caller naming a row that is not there.
+     * Either way there is no organisation to stamp, and a comparison written
+     * without one is a row hidden from the representative who serves its buyer —
+     * which is the whole defect this column exists to close. So the write stops
+     * here, where the message can name the account, instead of at the constraint.
+     */
+    async #organizationOf(customerAccountId) {
+        if (!this.customerAccounts) {
+            throw new Error('ComparisonService: the customer-account read port is not wired — an owned comparison cannot be attributed to an organisation.');
+        }
+        const account = await this.customerAccounts.findById(customerAccountId);
+        if (!account) {
+            throw new Error(`ComparisonService: customer account ${customerAccountId} does not resolve, so the comparison it would own has no organisation to carry.`);
+        }
+        return account.organizationId;
+    }
+    /**
+     * The owner identity a row can be written from — the caller's, plus the
+     * organisation a customer owner's account belongs to (D-187).
+     */
+    async #resolveOwner(owner) {
+        if (owner.kind === 'anonymous')
+            return owner;
+        return {
+            kind: 'customer',
+            customerAccountId: owner.customerAccountId,
+            organizationId: await this.#organizationOf(owner.customerAccountId),
+        };
+    }
+    /**
+     * The buying organisation the pricing engine should resolve against, for the
+     * viewer in front of this comparison — or `null` when there is none, which is
+     * the anonymous reader, the signed-in buyer whose account carries no
+     * Organization, and the buyer whose organisation has since been removed.
+     *
+     * The last of those three deserves saying: it answers with the channel price
+     * rather than throwing, and the view says `pricedFor: 'channel'`, so a figure
+     * is never labelled as the reader's own when it is not.
+     */
+    async #viewerOrganization(viewer) {
+        if (viewer.organizationId === null)
+            return null;
+        const record = await this.#requireOrganizationDetails().findById(viewer.organizationId);
+        if (!record)
+            return null;
+        return { id: record.id, customerGroupId: record.customerGroupId };
+    }
+    // ------------------------------------------------------------------
+    // Reads
+    // ------------------------------------------------------------------
+    async getForOwner(owner) {
+        const em = this.emFactory();
+        return em.findOne(Comparison, ownerWhere(owner));
+    }
+    /**
+     * Resolve a share token to its comparison, across customers.
+     *
+     * `Comparison` is `@CustomerScoped`, so the ambient filter confines this read
+     * to the caller's own rows — which is right for every other method here and
+     * is the one thing a share link has to cross. An **anonymous** recipient
+     * already crossed it by accident: the composition roots run anonymous
+     * requests under `systemTenantContext('actor:anonymous')`, so the filter is a
+     * no-op for them, while a *signed-in* recipient got a 404 on a link that
+     * worked when they were logged out. That is the shape a guard takes when a
+     * deliberate cross-tenant grant is left implicit.
+     *
+     * So it is explicit, through the one sanctioned crossing (feature 050,
+     * FR-005): the token is the authorization, exactly as it is on the public
+     * product-feed endpoint, and the widening covers this single lookup by a
+     * unique index and nothing after it. **What the recipient then sees is not
+     * widened at all** — `buildOwnerView` filters the products by their own
+     * audience and prices them for their own organisation.
+     */
+    async findByShareToken(token) {
+        const em = this.emFactory();
+        return withSystemScope('comparisons: share-token lookup — a share link is a cross-customer grant, and the token is the authorization', async () => em.findOne(Comparison, { shareToken: token }));
+    }
+    /**
+     * Anonymous → authenticated merge (research.md R-2 / spec FR-005).
+     * Called from the post-login hook with the cookie-bound
+     * `anonymousToken` the caller was carrying. Behaviour:
+     *
+     *   - customer has no Comparison → reassign the anonymous one
+     *     (set customer_account_id, clear anonymous_token).
+     *   - customer already has a Comparison → discard the anonymous one
+     *     (the customer's existing curated set wins, per R-2 — merging
+     *     two sets is more surprising than honouring the persistent
+     *     identity).
+     *
+     * No-op when neither side resolves.
+     *
+     * **This is the one place in the platform where a comparison becomes owned**
+     * — `Cart` has no counterpart, because its anonymous merge *completes* the
+     * anonymous cart rather than re-owning it. So it is the write feature 087's
+     * invariant would have been forgotten at: the row arrives here with a null
+     * `organization_id` that was correct while it was anonymous, and the
+     * organisation is set in the same unit of work as the account, from the same
+     * account. Nothing here is conditional on the column being null — an
+     * anonymous row's organisation is null by construction, and if it ever is
+     * not, the account it is being handed to is the truth.
+     */
+    async adoptAnonymousComparison(customerAccountId, anonymousToken) {
+        // command-coverage-ignore: transient customer working state (like carts) —
+        // self-service convenience data, not an audited domain-state mutation.
+        const em = this.emFactory();
+        const anon = await em.findOne(Comparison, { anonymousToken });
+        if (!anon)
+            return;
+        const existing = await em.findOne(Comparison, { customerAccountId });
+        if (existing) {
+            await em.removeAndFlush(anon);
+            return;
+        }
+        // D-187 — resolved **before** the row is touched, not between the account
+        // and the flush. The entity is managed, so a throw after the assignment
+        // would leave an owned, unattributed comparison in the unit of work for
+        // whatever flushes this request next.
+        const organizationId = await this.#organizationOf(customerAccountId);
+        anon.customerAccountId = customerAccountId;
+        anon.organizationId = organizationId;
+        anon.anonymousToken = null;
+        anon.updatedAt = new Date();
+        await em.flush();
+    }
+    /**
+     * True when the supplied owner identity matches the Comparison's
+     * stored owner. Used by the share-token endpoint to populate
+     * `meta.viewerIsOwner`.
+     */
+    isOwnedBy(comparison, owner) {
+        if (!owner)
+            return false;
+        if (owner.kind === 'customer') {
+            return comparison.customerAccountId === owner.customerAccountId;
+        }
+        return comparison.anonymousToken === owner.anonymousToken;
+    }
+    // ------------------------------------------------------------------
+    // Writes
+    // ------------------------------------------------------------------
+    async addProduct(owner, salesChannelId, productId, 
+    /**
+     * Who is comparing (issue #227). Defaulted to the anonymous audience so a
+     * composition that has not been taught to resolve its caller refuses a
+     * restricted product rather than adding it — the fail-closed end. The
+     * public route passes the real one.
+     */
+    audience = ANONYMOUS_PRODUCT_AUDIENCE) {
+        // command-coverage-ignore: transient customer working state (like carts) —
+        // self-service convenience data, not an audited domain-state mutation.
+        const em = this.emFactory();
+        const product = await this.catalogProducts.findById(productId);
+        // Issue #227 — a comparison row discloses the product's name, SKU, price
+        // and every comparable attribute value, so a product this shopper may not
+        // see may not enter their comparison. Same answer as a product that does
+        // not exist: `ProductNotFoundError` is what the route turns into a 404.
+        if (!product || !isProductVisibleTo(product, audience)) {
+            throw new ProductNotFoundError(productId);
+        }
+        // Issue #259 — the channel axis, which the predicate above states in
+        // writing that it is not. `salesChannelId` is the channel the caller
+        // resolved for this request and stamps on the row below, so the comparison
+        // a buyer builds on one channel can only ever hold products that channel
+        // publishes. Same `ProductNotFoundError` as the line above: "sold on
+        // another channel" must be indistinguishable from "restricted" and from
+        // "does not exist", or the three together enumerate the assortment.
+        const publishedHere = await this.channelMembership.filterEntityIdsInChannel(salesChannelId, 'product', [product.id]);
+        if (publishedHere.length === 0) {
+            throw new ProductNotFoundError(productId);
+        }
+        let comparison = await em.findOne(Comparison, ownerWhere(owner));
+        if (!comparison) {
+            // D-187 — the only place a comparison is inserted, and the organisation
+            // goes in with the account. `ownerColumns` takes a *resolved* owner, so
+            // the customer branch has no shape in which the organisation could be
+            // omitted; the anonymous branch has none to carry (FR-011).
+            comparison = em.create(Comparison, {
+                shareToken: this.tokens.generate(),
+                ...ownerColumns(await this.#resolveOwner(owner)),
+                salesChannelId,
+                displayMode: 'all',
+            });
+            await em.persistAndFlush(comparison);
+        }
+        const existingRows = await em.find(ComparisonProduct, {
+            comparisonId: comparison.id,
+        });
+        // Idempotent on duplicate add — caller's earlier click is honoured.
+        if (existingRows.some((r) => r.productId === productId)) {
+            return comparison;
+        }
+        const max = await this.resolveMaxProducts(salesChannelId);
+        if (existingRows.length >= max) {
+            throw new ComparisonFullError(max);
+        }
+        const next = em.create(ComparisonProduct, {
+            comparisonId: comparison.id,
+            productId,
+            position: existingRows.length,
+        });
+        comparison.updatedAt = new Date();
+        await em.persistAndFlush(next);
+        return comparison;
+    }
+    async removeProduct(owner, productId) {
+        // command-coverage-ignore: transient customer working state (like carts) —
+        // self-service convenience data, not an audited domain-state mutation.
+        const em = this.emFactory();
+        const comparison = await em.findOne(Comparison, ownerWhere(owner));
+        if (!comparison)
+            throw new ComparisonNotFoundError();
+        const row = await em.findOne(ComparisonProduct, {
+            comparisonId: comparison.id,
+            productId,
+        });
+        if (!row)
+            throw new ProductNotInComparisonError(productId);
+        await em.removeAndFlush(row);
+        comparison.updatedAt = new Date();
+        await em.flush();
+        return comparison;
+    }
+    async setDisplayMode(owner, mode) {
+        // command-coverage-ignore: transient customer working state (like carts) —
+        // self-service convenience data, not an audited domain-state mutation.
+        const em = this.emFactory();
+        const comparison = await em.findOne(Comparison, ownerWhere(owner));
+        if (!comparison)
+            throw new ComparisonNotFoundError();
+        comparison.displayMode = mode;
+        comparison.updatedAt = new Date();
+        await em.flush();
+        return comparison;
+    }
+    async deleteForOwner(owner) {
+        // command-coverage-ignore: transient customer working state (like carts) —
+        // self-service convenience data, not an audited domain-state mutation.
+        const em = this.emFactory();
+        const comparison = await em.findOne(Comparison, ownerWhere(owner));
+        if (!comparison)
+            throw new ComparisonNotFoundError();
+        // FK on comparison_products cascades; we can simply remove the row.
+        await em.removeAndFlush(comparison);
+    }
+    // ------------------------------------------------------------------
+    // Read-side projection (consumed by GET /me + US2 share + US5 admin)
+    // ------------------------------------------------------------------
+    /**
+     * Build the wire-format `ComparisonOwnerView` for the given comparison
+     * in the viewer's sales-channel context. Reusable across the three
+     * consumers (owner / recipient / admin); the recipient + admin views
+     * pass `viewerIsOwner=false` and consume only the slice they need.
+     *
+     * **The viewer's identity decides what the viewer sees. Always.** A share
+     * token grants access to the *comparison*, never to anything in it, so it
+     * settles two questions the same way:
+     *
+     *  - **the prices** — the owner sees their organisation's figures, a
+     *    signed-in recipient from another organisation sees **theirs**, and an
+     *    anonymous recipient sees the channel's. That is what makes a shared
+     *    link trustworthy: the numbers are true for whoever is looking, and a
+     *    recipient who acted on the sender's negotiated price would be acting on
+     *    a price nobody will sell them at.
+     *  - **the products** — a row restricted to the sender's organisation is not
+     *    disclosed to a recipient outside it, while a recipient who *is* on the
+     *    allow-list sees it. The owner was entitled to add it (`addProduct`
+     *    enforces that, issue #227); a second reader has an entitlement of their
+     *    own, and a product may be restricted after it was added.
+     *
+     * The two run in that order — filter, then price — because a price resolved
+     * for a row the reader may not see is work done to produce a figure that must
+     * not be sent.
+     */
+    async buildOwnerView(comparison, viewerSalesChannelId, 
+    /**
+     * Who is looking. Defaulted to the anonymous buyer so a caller that has not
+     * been taught to resolve its reader shows the public set at the channel
+     * price — the answer every reader may see — rather than one buyer's.
+     */
+    viewer = ANONYMOUS_COMPARISON_VIEWER) {
+        const em = this.emFactory();
+        const bridgeRows = await em.find(ComparisonProduct, { comparisonId: comparison.id }, { orderBy: { position: 'asc', addedAt: 'asc' } });
+        const productIds = bridgeRows.map((r) => r.productId);
+        const stored = productIds.length > 0 ? await this.catalogProducts.findByIds(productIds) : [];
+        // Issue #227's predicate, over this reader. A product the reader may not
+        // see leaves the view entirely — it is not a `(removed product)` column,
+        // which would disclose that the sender holds something.
+        const products = viewer.kind === 'administrator'
+            ? stored
+            : stored.filter((product) => isProductVisibleTo(product, viewer.audience));
+        const hiddenProductCount = stored.length - products.length;
+        const productById = new Map(products.map((p) => [p.id, p]));
+        const channel = await em.findOne(SalesChannel, { id: viewerSalesChannelId });
+        const currency = channel?.defaultCurrency ?? 'PLN';
+        const isPublic = channel?.isPublic ?? true;
+        const viewerOrganization = viewer.kind === 'buyer' ? await this.#viewerOrganization(viewer.audience) : null;
+        // The pricing engine's answer per product (issue #132), resolved for the
+        // viewer. A channel that withholds prices is not asked for them, so the map
+        // stays empty and every column renders `null`.
+        const resolvedPrices = isPublic && products.length > 0
+            ? await this.#requireListingPrices().resolveListingPrices({
+                products,
+                context: {
+                    salesChannel: { id: viewerSalesChannelId, defaultCurrency: currency },
+                    organization: viewerOrganization,
+                },
+            })
+            : new Map();
+        const pricedFor = viewerOrganization !== null ? 'organization' : 'channel';
+        // Base-image lookup per product (label='base_image' only — spec FR-006
+        // names *base image* explicitly; no fallback to other labels, which is why
+        // `catalog`'s own `resolvePrimaryAssetUrls` — thumbnail → base_image →
+        // first — is not what this asks for).
+        //
+        // Feature 075 / D-87: this was one statement joining `gallery_item_labels`
+        // and `gallery_items` to `assets_library`'s `assets`, three cross-module
+        // reaches in a single join and invisible to every import check in the tree.
+        // The owner answers it now, from its own two tables plus the asset port it
+        // already holds.
+        const visibleProductIds = products.map((p) => p.id);
+        const baseImageByProduct = visibleProductIds.length > 0
+            ? await this.catalogGallery.baseImageUrls(visibleProductIds)
+            : new Map();
+        // Comparable attribute definitions (catalog adapter port — Constitution I).
+        // `listByFlag` orders by key ASC, matching the pre-061 entity query.
+        const attributeDefs = this.catalogAttributes
+            ? await this.catalogAttributes.listByFlag('isComparable')
+            : [];
+        // A row this reader may not see is dropped; a row whose product is *gone*
+        // still renders as `(removed product)`, which is the owner's own history
+        // and says nothing about anybody's entitlement.
+        const withheldIds = new Set(stored.filter((p) => !productById.has(p.id)).map((p) => p.id));
+        const visibleRows = bridgeRows.filter((row) => !withheldIds.has(row.productId));
+        const productSummaries = visibleRows.map((row) => {
+            const p = productById.get(row.productId);
+            if (!p) {
+                return {
+                    id: row.productId,
+                    sku: '',
+                    name: { en: '(removed product)' },
+                    slug: '',
+                    type: 'simple',
+                    primaryAssetUrl: null,
+                    price: null,
+                    available: false,
+                    addedAt: row.addedAt.toISOString(),
+                };
+            }
+            const resolved = resolvedPrices.get(p.id);
+            const price = resolved === undefined ? null : listingPriceMoney(resolved);
+            return {
+                id: p.id,
+                sku: p.sku,
+                name: p.name,
+                slug: p.slug,
+                type: p.type,
+                primaryAssetUrl: baseImageByProduct.get(p.id) ?? null,
+                price,
+                available: p.deletedAt == null && p.archivedAt == null && p.status === 'active',
+                addedAt: row.addedAt.toISOString(),
+            };
+        });
+        const comparableAttributes = this.projection.projectRows(productSummaries.map((s) => {
+            const p = productById.get(s.id);
+            return { attributeValues: p?.attributeValues ?? {} };
+        }), attributeDefs);
+        const max = await this.resolveMaxProducts(viewerSalesChannelId);
+        return {
+            id: comparison.id,
+            shareToken: comparison.shareToken,
+            displayMode: comparison.displayMode,
+            maxProducts: max,
+            products: productSummaries,
+            comparableAttributes,
+            pricedFor,
+            hiddenProductCount,
+            createdAt: comparison.createdAt.toISOString(),
+            updatedAt: comparison.updatedAt.toISOString(),
+        };
+    }
+    // ------------------------------------------------------------------
+    // Helpers
+    // ------------------------------------------------------------------
+    /**
+     * Read `compare.max_products` from Settings; fall back to the manifest
+     * default on any error (Settings hiccup must not break the storefront).
+     */
+    async resolveMaxProducts(salesChannelId) {
+        if (!this.settingsService)
+            return DEFAULT_COMPARE_MAX_PRODUCTS;
+        try {
+            const value = await this.settingsService.get(COMPARE_SETTING_CODES.MAX_PRODUCTS, salesChannelId, z.number().int().positive());
+            // Defensive bounds — operator could set anything via CLI; the
+            // service still must not allow zero or negative caps.
+            return Math.max(1, Math.floor(value));
+        }
+        catch {
+            return DEFAULT_COMPARE_MAX_PRODUCTS;
+        }
+    }
+}
+function ownerWhere(owner) {
+    return owner.kind === 'customer'
+        ? { customerAccountId: owner.customerAccountId }
+        : { anonymousToken: owner.anonymousToken };
+}
+function ownerColumns(owner) {
+    return owner.kind === 'customer'
+        ? {
+            customerAccountId: owner.customerAccountId,
+            organizationId: owner.organizationId,
+            anonymousToken: null,
+        }
+        : {
+            customerAccountId: null,
+            // FR-011 — an anonymous comparison belongs to no organisation, and the
+            // constraint says nothing about it. Who it *should* belong to is R-6's
+            // open question and is not answered here.
+            organizationId: null,
+            anonymousToken: owner.anonymousToken,
+        };
+}
+// ---------------------------------------------------------------------------
+// Typed exceptions — translated to HTTP status codes by routes.public.ts.
+// ---------------------------------------------------------------------------
+export class ComparisonFullError extends Error {
+    max;
+    constructor(max) {
+        super(`Comparison already holds the maximum of ${max} products.`);
+        this.max = max;
+        this.name = 'ComparisonFullError';
+    }
+}
+export class ComparisonNotFoundError extends Error {
+    constructor() {
+        super('Comparison not found.');
+        this.name = 'ComparisonNotFoundError';
+    }
+}
+export class ProductNotInComparisonError extends Error {
+    productId;
+    constructor(productId) {
+        super(`Product ${productId} is not in the comparison.`);
+        this.productId = productId;
+        this.name = 'ProductNotInComparisonError';
+    }
+}
+export class ProductNotFoundError extends Error {
+    productId;
+    constructor(productId) {
+        super(`Product ${productId} not found.`);
+        this.productId = productId;
+        this.name = 'ProductNotFoundError';
+    }
+}
+//# sourceMappingURL=comparison-service.js.map

package/dist/backend/services/comparison-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comparison-service.js","sourceRoot":"","sources":["../../../src/backend/services/comparison-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EAIjB,0BAA0B,EAC1B,kBAAkB,GAUnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAGhE,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAG7E,OAAO,EACL,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAkD3B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAqB;IAC3D,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,0BAA0B;CACrC,CAAC;AAEF,MAAM,OAAO,iBAAiB;IAET;IACA;IACA;IAOA;IAQA;IAcA;IAMA;IAKA;IAMA;IAQA;IAkBA;IA3EnB,YACmB,SAA8B,EAC9B,UAAyC,EACzC,MAA2B;IAC5C;;;;;OAKG;IACc,eAAuC;IACxD;;;;;;OAMG;IACc,iBAA6C;IAC9D;;;;;;;;;;;;OAYG;IACc,cAAkC;IACnD;;;;OAIG;IACc,eAAkC;IACnD;;;OAGG;IACc,iBAA4C;IAC7D;;;;OAIG;IACc,aAAgC;IACjD;;;;;;OAMG;IACc,mBAA6C;IAC9D;;;;;;;;;;;;;;;;OAgBG;IACc,gBAA0C;QA1E1C,cAAS,GAAT,SAAS,CAAqB;QAC9B,eAAU,GAAV,UAAU,CAA+B;QACzC,WAAM,GAAN,MAAM,CAAqB;QAO3B,oBAAe,GAAf,eAAe,CAAwB;QAQvC,sBAAiB,GAAjB,iBAAiB,CAA4B;QAc7C,mBAAc,GAAd,cAAc,CAAoB;QAMlC,oBAAe,GAAf,eAAe,CAAmB;QAKlC,sBAAiB,GAAjB,iBAAiB,CAA2B;QAM5C,kBAAa,GAAb,aAAa,CAAmB;QAQhC,wBAAmB,GAAnB,mBAAmB,CAA0B;QAkB7C,qBAAgB,GAAhB,gBAAgB,CAA0B;IAC1D,CAAC;IAEJ,qBAAqB;QACnB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,2BAA2B;QACzB,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,eAAe,CAAC,iBAAyB;QAC7C,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,+HAA+H,CAChI,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,uCAAuC,iBAAiB,iFAAiF,CAC1I,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC,cAAc,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,KAAsB;QACxC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QAC7C,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,cAAc,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,iBAAiB,CAAC;SACpE,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,mBAAmB,CAAC,MAAuB;QAC/C,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,2BAA2B,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;IACpE,CAAC;IAED,qEAAqE;IACrE,QAAQ;IACR,qEAAqE;IAErE,KAAK,CAAC,WAAW,CAAC,KAAsB;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,eAAe,CACpB,8GAA8G,EAC9G,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAC1D,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,KAAK,CAAC,wBAAwB,CAC5B,iBAAyB,EACzB,cAAsB;QAEtB,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACrE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,sCAAsC;QACtC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;QAErE,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,UAAsB,EAAE,KAA6B;QAC7D,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,CAAC;QAClE,CAAC;QACD,OAAO,UAAU,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAAC;IAC5D,CAAC;IAED,qEAAqE;IACrE,SAAS;IACT,qEAAqE;IAErE,KAAK,CAAC,UAAU,CACd,KAAsB,EACtB,cAAsB,EACtB,SAAiB;IACjB;;;;;OAKG;IACH,WAA4B,0BAA0B;QAEtD,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC/D,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QACD,qEAAqE;QACrE,qEAAqE;QACrE,2EAA2E;QAC3E,yEAAyE;QACzE,qEAAqE;QACrE,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CACzE,cAAc,EACd,SAAS,EACT,CAAC,OAAO,CAAC,EAAE,CAAC,CACb,CAAC;QACF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,wEAAwE;YACxE,wEAAwE;YACxE,sEAAsE;YACtE,4DAA4D;YAC5D,UAAU,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE;gBACjC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAClC,GAAG,YAAY,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;gBAChD,cAAc;gBACd,WAAW,EAAE,KAA8B;aAC5C,CAAC,CAAC;YACH,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpD,YAAY,EAAE,UAAU,CAAC,EAAE;SAC5B,CAAC,CAAC;QACH,oEAAoE;QACpE,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;YACxD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;QAC1D,IAAI,YAAY,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC/B,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE;YACxC,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,SAAS;YACT,QAAQ,EAAE,YAAY,CAAC,MAAM;SAC9B,CAAC,CAAC;QACH,UAAU,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAsB,EAAE,SAAiB;QAC3D,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,uBAAuB,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE;YAC9C,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7B,UAAU,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAsB,EACtB,IAA2B;QAE3B,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,uBAAuB,EAAE,CAAC;QACrD,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC;QAC9B,UAAU,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAsB;QACzC,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,uBAAuB,EAAE,CAAC;QACrD,oEAAoE;QACpE,MAAM,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IAErE;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,KAAK,CAAC,cAAc,CAClB,UAAsB,EACtB,oBAA4B;IAC5B;;;;OAIG;IACH,SAA2B,2BAA2B;QAEtD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,IAAI,CAC9B,iBAAiB,EACjB,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,EAC/B,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CACjD,CAAC;QAEF,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,MAAM,GACV,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,yEAAyE;QACzE,yEAAyE;QACzE,wDAAwD;QACxD,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,eAAe;YAC7B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/E,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC3D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,OAAO,EAAE,eAAe,IAAI,KAAK,CAAC;QACnD,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;QAE3C,MAAM,kBAAkB,GACtB,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEnF,yEAAyE;QACzE,4EAA4E;QAC5E,+CAA+C;QAC/C,MAAM,cAAc,GAClB,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC7B,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;gBACtD,QAAQ;gBACR,OAAO,EAAE;oBACP,YAAY,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,eAAe,EAAE,QAAQ,EAAE;oBACrE,YAAY,EAAE,kBAAkB;iBACjC;aACF,CAAC;YACJ,CAAC,CAAC,IAAI,GAAG,EAAwB,CAAC;QACtC,MAAM,SAAS,GACb,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QAE3D,uEAAuE;QACvE,2EAA2E;QAC3E,uEAAuE;QACvE,sCAAsC;QACtC,EAAE;QACF,2EAA2E;QAC3E,yEAAyE;QACzE,4EAA4E;QAC5E,2EAA2E;QAC3E,iBAAiB;QACjB,MAAM,iBAAiB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,kBAAkB,GACtB,iBAAiB,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,iBAAiB,CAAC;YAC5D,CAAC,CAAC,IAAI,GAAG,EAAyB,CAAC;QAEvC,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB;YAC1C,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,cAAc,CAAC;YACzD,CAAC,CAAC,EAAE,CAAC;QAEP,0EAA0E;QAC1E,yEAAyE;QACzE,gDAAgD;QAChD,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9D,CAAC;QACF,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QAChF,MAAM,gBAAgB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC/C,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO;oBACL,EAAE,EAAE,GAAG,CAAC,SAAS;oBACjB,GAAG,EAAE,EAAE;oBACP,IAAI,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE;oBACjC,IAAI,EAAE,EAAE;oBACR,IAAI,EAAE,QAAiB;oBACvB,eAAe,EAAE,IAAI;oBACrB,KAAK,EAAE,IAAI;oBACX,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE;iBACnC,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC1E,OAAO;gBACL,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,eAAe,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI;gBACrD,KAAK;gBACL,SAAS,EACP,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;gBACtE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE;aACnC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,oBAAoB,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CACtD,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACzB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChC,OAAO,EAAE,eAAe,EAAE,CAAC,EAAE,eAAe,IAAI,EAAE,EAAE,CAAC;QACvD,CAAC,CAAC,EACF,aAAa,CACd,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;QAEhE,OAAO;YACL,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,WAAW,EAAE,GAAG;YAChB,QAAQ,EAAE,gBAAgB;YAC1B,oBAAoB;YACpB,SAAS;YACT,kBAAkB;YAClB,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YAC7C,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,UAAU;IACV,qEAAqE;IAErE;;;OAGG;IACK,KAAK,CAAC,kBAAkB,CAAC,cAAsB;QACrD,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO,4BAA4B,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAC1C,qBAAqB,CAAC,YAAY,EAClC,cAAc,EACd,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAC5B,CAAC;YACF,8DAA8D;YAC9D,sDAAsD;YACtD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,4BAA4B,CAAC;QACtC,CAAC;IACH,CAAC;CAEF;AA4BD,SAAS,UAAU,CAAC,KAAsB;IACxC,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU;QAC9B,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE;QAChD,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAKlD,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU;QAC9B,CAAC,CAAC;YACE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,cAAc,EAAE,IAAI;SACrB;QACH,CAAC,CAAC;YACE,iBAAiB,EAAE,IAAI;YACvB,uEAAuE;YACvE,uEAAuE;YACvE,0CAA0C;YAC1C,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC;AACR,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAChB;IAA5B,YAA4B,GAAW;QACrC,KAAK,CAAC,2CAA2C,GAAG,YAAY,CAAC,CAAC;QADxC,QAAG,GAAH,GAAG,CAAQ;QAErC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD;QACE,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACxB;IAA5B,YAA4B,SAAiB;QAC3C,KAAK,CAAC,WAAW,SAAS,4BAA4B,CAAC,CAAC;QAD9B,cAAS,GAAT,SAAS,CAAQ;QAE3C,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACjB;IAA5B,YAA4B,SAAiB;QAC3C,KAAK,CAAC,WAAW,SAAS,aAAa,CAAC,CAAC;QADf,cAAS,GAAT,SAAS,CAAQ;QAE3C,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF"}

package/dist/backend/services/share-token-generator.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Generates 22-char URL-safe base64 tokens (16 random bytes → base64url).
+ *
+ * Used for two distinct purposes inside the comparisons module:
+ *   - `Comparison.shareToken` — the public, sharable identifier consumed
+ *     by `GET /api/v1/comparisons/share/{token}` (US2).
+ *   - `Comparison.anonymousToken` — the cookie-bound owner identity for
+ *     anonymous customers (R-2).
+ *
+ * 128 bits of randomness from Node's stdlib (`crypto.randomBytes`) — no
+ * external dependency. The keyspace is large enough that enumeration is
+ * not a realistic threat (spec NFR-004).
+ *
+ * Constructor takes no DB; the class exists so the service layer can mock
+ * deterministic tokens in tests via dependency injection.
+ */
+export declare class ShareTokenGenerator {
+    generate(): string;
+}
+//# sourceMappingURL=share-token-generator.d.ts.map

package/dist/backend/services/share-token-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-token-generator.d.ts","sourceRoot":"","sources":["../../../src/backend/services/share-token-generator.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,mBAAmB;IAC9B,QAAQ,IAAI,MAAM;CAGnB"}

package/dist/backend/services/share-token-generator.js

@@ -0,0 +1,23 @@
+import { randomBytes } from 'node:crypto';
+/**
+ * Generates 22-char URL-safe base64 tokens (16 random bytes → base64url).
+ *
+ * Used for two distinct purposes inside the comparisons module:
+ *   - `Comparison.shareToken` — the public, sharable identifier consumed
+ *     by `GET /api/v1/comparisons/share/{token}` (US2).
+ *   - `Comparison.anonymousToken` — the cookie-bound owner identity for
+ *     anonymous customers (R-2).
+ *
+ * 128 bits of randomness from Node's stdlib (`crypto.randomBytes`) — no
+ * external dependency. The keyspace is large enough that enumeration is
+ * not a realistic threat (spec NFR-004).
+ *
+ * Constructor takes no DB; the class exists so the service layer can mock
+ * deterministic tokens in tests via dependency injection.
+ */
+export class ShareTokenGenerator {
+    generate() {
+        return randomBytes(16).toString('base64url');
+    }
+}
+//# sourceMappingURL=share-token-generator.js.map

package/dist/backend/services/share-token-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-token-generator.js","sourceRoot":"","sources":["../../../src/backend/services/share-token-generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,mBAAmB;IAC9B,QAAQ;QACN,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;CACF"}