@endora-commerce/mod-credit-limits 0.100.0

package/dist/backend/entities/credit-limit.entity.js

@@ -0,0 +1,66 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Entity, Index, OptionalProps, PrimaryKey, Property } from '@mikro-orm/core';
+import { randomUUID } from 'crypto';
+import { OrgScoped } from '@endora-commerce/platform/tenancy';
+/**
+ * Per-Organization credit limit grant. One row per organization (enforced by
+ * the migration's unique index). `grantedAmount = 0` is the soft-revoke shape;
+ * the row is preserved for audit history.
+ *
+ * `@OrgScoped` (feature 050): reads are auto-confined to the ambient tenant. The
+ * grant/adjust routes additionally gate on org membership because inserts are not
+ * reachable by the column filter.
+ */
+let CreditLimit = class CreditLimit {
+    [OptionalProps];
+    id = randomUUID();
+    organizationId;
+    grantedAmount;
+    currency;
+    grantedByAdminUserId;
+    createdAt = new Date();
+    updatedAt = new Date();
+};
+__decorate([
+    PrimaryKey({ type: 'uuid' }),
+    __metadata("design:type", String)
+], CreditLimit.prototype, "id", void 0);
+__decorate([
+    Property({ type: 'uuid' }),
+    Index(),
+    __metadata("design:type", String)
+], CreditLimit.prototype, "organizationId", void 0);
+__decorate([
+    Property({ type: 'decimal', precision: 14, scale: 2 }),
+    __metadata("design:type", String)
+], CreditLimit.prototype, "grantedAmount", void 0);
+__decorate([
+    Property({ type: 'string', length: 3 }),
+    __metadata("design:type", String)
+], CreditLimit.prototype, "currency", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    __metadata("design:type", Object)
+], CreditLimit.prototype, "grantedByAdminUserId", void 0);
+__decorate([
+    Property({ type: 'datetime', onCreate: () => new Date() }),
+    __metadata("design:type", Date)
+], CreditLimit.prototype, "createdAt", void 0);
+__decorate([
+    Property({ type: 'datetime', onUpdate: () => new Date() }),
+    __metadata("design:type", Date)
+], CreditLimit.prototype, "updatedAt", void 0);
+CreditLimit = __decorate([
+    OrgScoped(),
+    Entity({ tableName: 'credit_limits' })
+], CreditLimit);
+export { CreditLimit };
+//# sourceMappingURL=credit-limit.entity.js.map

package/dist/backend/entities/credit-limit.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credit-limit.entity.js","sourceRoot":"","sources":["../../../src/backend/entities/credit-limit.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAE9D;;;;;;;;GAQG;AAGI,IAAM,WAAW,GAAjB,MAAM,WAAW;IACtB,CAAC,aAAa,CAAC,CAA6D;IAG5E,EAAE,GAAW,UAAU,EAAE,CAAC;IAI1B,cAAc,CAAU;IAGxB,aAAa,CAAU;IAGvB,QAAQ,CAAU;IAGlB,oBAAoB,CAAiB;IAGrC,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAG7B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;CAC9B,CAAA;AApBC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;uCACH;AAI1B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,KAAK,EAAE;;mDACgB;AAGxB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;;kDAChC;AAGvB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;;6CACtB;AAGlB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACN;AAGrC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;8CAAc;AAG7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;8CAAc;AAvBlB,WAAW;IAFvB,SAAS,EAAE;IACX,MAAM,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;GAC1B,WAAW,CAwBvB"}

package/dist/backend/index.d.ts

@@ -0,0 +1,80 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { FastifyRequest } from 'fastify';
+import type { CommandBus } from '@endora-commerce/platform/commands';
+import type { EventBus } from '@endora-commerce/platform/events';
+import type { ModuleContext, RequireAdminFactory } from '@endora-commerce/platform/kernel';
+import type { OrganizationInheritancePort } from '@endora-commerce/contracts';
+import { CreditLimitService } from './services/credit-limit-service.js';
+import { CreditLimit } from './entities/credit-limit.entity.js';
+import { CreditLimitReservation } from './entities/credit-limit-reservation.entity.js';
+import { CreditLimitReturnTopup } from './entities/credit-limit-return-topup.entity.js';
+/**
+ * `credit_limits` — an optional Command Bus on the one write that must be
+ * audited (feature 072, wave 2, T101).
+ *
+ * `CreditLimitService` took `commandBus` as an optional constructor argument,
+ * documented as "audits `adjust` co-transactionally when provided". Adjusting a
+ * customer's credit limit is precisely the class of write Constitution XIII
+ * exists for — an admin moving how much money an organization may spend before
+ * paying — and the optional form means the audited path is the one you get by
+ * remembering. Both roots passed it, so nothing was unaudited; the shape goes
+ * anyway, for the same reason as the twelve before it.
+ *
+ * `inheritance` was optional too, and its absence is quieter and stranger:
+ * "Absent ⇒ flat behavior", meaning a descendant organization with no own limit
+ * transacts against nothing instead of against its nearest ancestor's. Not an
+ * error, not a refusal — a different and more permissive credit policy, chosen
+ * by omission.
+ *
+ * `creditLimitService` is a **port**: `orders` reserves against it and the
+ * credit-topup payment provider draws on it, both across a module boundary, so
+ * an operator switching credit limits off should get the explicit 503 rather
+ * than a service that reports no limit — which on a checkout path means
+ * unlimited credit.
+ */
+export interface CreditLimitsCradle {
+    readonly emFactory: () => EntityManager;
+    readonly eventBus: EventBus;
+    readonly commandBus: CommandBus;
+    readonly requireAdmin: RequireAdminFactory;
+    readonly requireCustomer: (request: FastifyRequest) => Promise<void>;
+    /** How this composition resolves the calling customer; root-shaped. */
+    readonly customerContextResolver: (request: FastifyRequest) => {
+        customerAccountId: string;
+        organizationId: string;
+    };
+    /**
+     * Who the acting admin is, from the production actor (feature 080, T051).
+     * Root-supplied, like the other request resolvers; both roots answer it from
+     * `request.actor` and throw 401 for a non-admin.
+     */
+    readonly adminContextResolver: (req: FastifyRequest) => {
+        adminUserId: string;
+    };
+    /** A port `organizations` provides — read it per call, never captured. */
+    readonly organizationInheritancePort: OrganizationInheritancePort;
+    readonly creditLimitService: CreditLimitService;
+}
+export declare function registerModule(ctx: ModuleContext): void;
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ *
+ * Three classes, and this module is where the absent named export and a foreign
+ * key had to be shown to coexist (D-169): `credit_limit_reservations` carries
+ * `credit_limit_reservations_order_fk` into `orders.id`, and a constraint is
+ * between two column names — it needs the **table**, never the class. Nothing
+ * another module can legitimately do with `CreditLimitReservation` is lost.
+ * D-32 forbids an ORM relation into it; what `orders` actually needs is the
+ * *method* placement calls, which leaves this package as `CreditLimitPort` on
+ * the type-only `./ports` subpath.
+ */
+export declare const entities: (typeof CreditLimit | typeof CreditLimitReservation | typeof CreditLimitReturnTopup)[];
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE3F,OAAO,KAAK,EAGV,2BAA2B,EAC5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAA4B,MAAM,oCAAoC,CAAC;AAIlG,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AAExF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,uEAAuE;IACvE,QAAQ,CAAC,uBAAuB,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK;QAC7D,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAChF,0EAA0E;IAC1E,QAAQ,CAAC,2BAA2B,EAAE,2BAA2B,CAAC;IAClE,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;CACjD;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAyGvD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,QAAQ,wFAAgE,CAAC"}

package/dist/backend/index.js

@@ -0,0 +1,112 @@
+import { lazyPort } from '@endora-commerce/platform/kernel';
+import { CreditLimitService } from './services/credit-limit-service.js';
+import { CreditLimitReadService } from './services/credit-limit-read.js';
+import { CreditTopupProvider } from './services/credit-topup.js';
+import { registerCreditLimitsRoutes } from './routes.js';
+import { CreditLimit } from './entities/credit-limit.entity.js';
+import { CreditLimitReservation } from './entities/credit-limit-reservation.entity.js';
+import { CreditLimitReturnTopup } from './entities/credit-limit-return-topup.entity.js';
+export function registerModule(ctx) {
+    ctx.di.providePort('creditLimitService', ctx
+        .asFunction(({ emFactory, eventBus, commandBus }) => new CreditLimitService(emFactory, eventBus, commandBus, 
+    // Resolved per call, not destructured. `organizationInheritancePort`
+    // is a port `organizations` provides, which makes it a transient gate
+    // on that module's effective state: capturing it in this singleton's
+    // factory is refused by awilix strict mode, and a captured gate would
+    // keep answering after an operator switched `organizations` off.
+    // Resolving at the point of use also means this registration does not
+    // care which module registered first — registration resolves nothing.
+    // `creditOwner` is the only method reached, and since Phase C the
+    // delegate is typed by `organizations`' published contract rather
+    // than cast onto its service class, so this module names nothing in
+    // that module's directory.
+    {
+        creditOwner: (orgId) => ctx.cradle().organizationInheritancePort.creditOwner(orgId),
+    }))
+        .singleton());
+    /**
+     * The membership read `organizations` needs to resolve an inherited limit
+     * (feature 077, D-87).
+     *
+     * `OrganizationInheritanceService.creditOwner` walks an ancestor chain and
+     * has to know which of those organisations hold a row here. It selected from
+     * this module's table to find out — a statement naming no import specifier,
+     * so the boundary compiled and nothing gated it, and the answer stayed the
+     * same after an operator switched credit limits off.
+     *
+     * A **read** port and deliberately not a method on `creditLimitService`: that
+     * service is the gated write seam whose `getForOrganization` asks
+     * `organizations` the very question this answers, so widening it would put
+     * both directions on one name. Separate names keep the two hops legible —
+     * this module asks who the owner is, `organizations` asks who holds a row —
+     * and neither recurses.
+     *
+     * `filters: { org: false }` is load-bearing rather than defensive: the holder
+     * is by definition an ancestor outside the caller's tenant scope, which is
+     * the whole point of the inheritance, so the org filter would answer the
+     * empty set for every descendant.
+     */
+    ctx.di.providePort('creditLimitReadPort', ctx
+        .asFunction(({ emFactory }) => new CreditLimitReadService(emFactory))
+        .singleton());
+    /**
+     * How a return settlement credits an organization (feature 046 R7), as this
+     * module's port instead of a class both roots constructed (T143c).
+     *
+     * The provider is a thin rule over `CreditLimitService` and lives in this
+     * module already; what a root added was a second, ungated way to reach it, so
+     * a settlement kept topping up a grant with `credit_limits` switched off. The
+     * service is still handed in as an accessor, for the reason the routes below
+     * take it lazily: it is this module's own gated port, and resolving it while
+     * this registration is built asks the gate at composition time.
+     */
+    ctx.di.providePort('creditTopupPort', ctx
+        .asFunction(() => {
+        const creditLimitService = lazyPort(ctx, 'creditLimitService');
+        return new CreditTopupProvider(() => creditLimitService);
+    })
+        .singleton());
+    ctx.routes(async (app) => {
+        const { requireCustomer, requireAdmin, customerContextResolver } = ctx.cradle();
+        await registerCreditLimitsRoutes(app, {
+            // Lazily, even though the module owns this port: `providePort` gates on
+            // the module's effective state and route *registration* happens whatever
+            // that state is — only requests are gated. Destructuring it here asked
+            // the gate while `buildServer` was wiring the app, so an operator who had
+            // switched `credit_limits` off stopped the backend from starting instead
+            // of stopping its routes. Inside a handler the gate is open by
+            // construction, so nothing else changes.
+            creditLimitService: lazyPort(ctx, 'creditLimitService'),
+            // `organizations`' port, lazily for the same reason and one more: it is
+            // another module's gate, so a captured reference would keep answering
+            // after an operator switched that module off.
+            organizationDetailsPort: lazyPort(ctx, 'organizationDetailsPort'),
+            requireCustomer,
+            requireAdmin,
+            resolveCustomerContext: customerContextResolver,
+            resolveAdminUserId: (request) => ctx.cradle().adminContextResolver(request).adminUserId,
+        });
+    });
+}
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ *
+ * Three classes, and this module is where the absent named export and a foreign
+ * key had to be shown to coexist (D-169): `credit_limit_reservations` carries
+ * `credit_limit_reservations_order_fk` into `orders.id`, and a constraint is
+ * between two column names — it needs the **table**, never the class. Nothing
+ * another module can legitimately do with `CreditLimitReservation` is lost.
+ * D-32 forbids an ORM relation into it; what `orders` actually needs is the
+ * *method* placement calls, which leaves this package as `CreditLimitPort` on
+ * the type-only `./ports` subpath.
+ */
+export const entities = [CreditLimit, CreditLimitReservation, CreditLimitReturnTopup];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAM5D,OAAO,EAAE,kBAAkB,EAA4B,MAAM,oCAAoC,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AAiDxF,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,oBAAoB,EACpB,GAAG;SACA,UAAU,CACT,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAsB,EAAE,EAAE,CAC1D,IAAI,kBAAkB,CACpB,SAAS,EACT,QAA0C,EAC1C,UAAU;IACV,qEAAqE;IACrE,sEAAsE;IACtE,qEAAqE;IACrE,sEAAsE;IACtE,iEAAiE;IACjE,sEAAsE;IACtE,sEAAsE;IACtE,kEAAkE;IAClE,kEAAkE;IAClE,oEAAoE;IACpE,2BAA2B;IAC3B;QACE,WAAW,EAAE,CAAC,KAAa,EAAE,EAAE,CAC7B,GAAG,CAAC,MAAM,EAAsB,CAAC,2BAA2B,CAAC,WAAW,CAAC,KAAK,CAAC;KAClF,CACF,CACJ;SACA,SAAS,EAAE,CACf,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,qBAAqB,EACrB,GAAG;SACA,UAAU,CACT,CAAC,EAAE,SAAS,EAAsB,EAAE,EAAE,CAAC,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAC7E;SACA,SAAS,EAAE,CACf,CAAC;IAEF;;;;;;;;;;OAUG;IACH,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,iBAAiB,EACjB,GAAG;SACA,UAAU,CAAC,GAAG,EAAE;QACf,MAAM,kBAAkB,GAAG,QAAQ,CAAqB,GAAG,EAAE,oBAAoB,CAAC,CAAC;QACnF,OAAO,IAAI,mBAAmB,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC;IAC3D,CAAC,CAAC;SACD,SAAS,EAAE,CACf,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,uBAAuB,EAAE,GAC9D,GAAG,CAAC,MAAM,EAAsB,CAAC;QACnC,MAAM,0BAA0B,CAAC,GAAG,EAAE;YACpC,wEAAwE;YACxE,yEAAyE;YACzE,uEAAuE;YACvE,0EAA0E;YAC1E,yEAAyE;YACzE,+DAA+D;YAC/D,yCAAyC;YACzC,kBAAkB,EAAE,QAAQ,CAAqB,GAAG,EAAE,oBAAoB,CAAC;YAC3E,wEAAwE;YACxE,sEAAsE;YACtE,8CAA8C;YAC9C,uBAAuB,EAAE,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC;YAC1F,eAAe;YACf,YAAY;YACZ,sBAAsB,EAAE,uBAAuB;YAC/C,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9B,GAAG,CAAC,MAAM,EAAsB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,WAAW;SAC7E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,sBAAsB,EAAE,sBAAsB,CAAC,CAAC"}

package/dist/backend/routes.d.ts

@@ -0,0 +1,59 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import { type OrganizationDetailsPort } from '@endora-commerce/contracts';
+import type { CreditLimitService } from './services/credit-limit-service.js';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+/**
+ * `grantedByAdminUserId` is supplied by the host through `resolveAdminUserId`,
+ * not read off the request here.
+ *
+ * This module used to import `testAdminUserId` from the host's
+ * `test-actor-carrier.ts`, which `host-package.md` §1.4j classifies **A** —
+ * host-internal, deliberately absent from `@endora-commerce/platform/http`'s
+ * barrel, because it exists to narrow *this repository's* test-harness Fastify
+ * augmentation and an installed package has no relationship to it. Packaging
+ * this module is the first time that classification had to bite.
+ *
+ * The repair is not the carrier-declared-locally idiom §1.4n used for
+ * `productAudienceOf`, because that would have preserved a live defect: nothing
+ * under `src/` ever writes `request.testActor`, so a production grant recorded
+ * **no** `grantedByAdminUserId` at all — the audit trail for a financial grant,
+ * empty, with every harness test green because the harness mirrors its actor
+ * onto both fields. The host now injects the resolver, so the production path
+ * and the harness path read the same thing.
+ */
+export interface CreditLimitsDeps {
+    creditLimitService: CreditLimitService;
+    /**
+     * `organizationDetailsPort`, owned by `organizations` — the roster's one
+     * question about that table (feature 075, Phase C). It replaces an
+     * `em.find(Organization, …)`, which linked this module against another
+     * module's entity class at build time and kept answering with `organizations`
+     * switched off. The port fails the request closed instead.
+     */
+    organizationDetailsPort: OrganizationDetailsPort;
+    requireCustomer: (req: FastifyRequest, reply: unknown) => Promise<void>;
+    requireAdmin: RequireAdminFactory;
+    resolveCustomerContext: (req: FastifyRequest) => {
+        customerAccountId: string;
+        organizationId: string;
+    };
+    /**
+     * The acting admin's id, resolved from the request the guard in front of
+     * these routes has already accepted.
+     *
+     * Injected rather than read here, because the read used to be
+     * `testAdminUserId(request)` — `http/test-actor-carrier`, which
+     * `contracts/host-package.md` §1.4j classifies **A**: the file exists to
+     * narrow this repository's test-harness Fastify augmentation, and an
+     * installed package has no relationship to that harness. It also answered
+     * `undefined` in production for every request, because nothing under `src/`
+     * writes `request.testActor`.
+     *
+     * Both composition roots supply it from `adminContextResolver`, which reads
+     * the production actor and throws 401 for a non-admin. Every call site sits
+     * behind `requireAdmin(...)`, so the actor is an admin by the time it runs.
+     */
+    resolveAdminUserId: (request: FastifyRequest) => string;
+}
+export declare function registerCreditLimitsRoutes(app: FastifyInstance, deps: CreditLimitsDeps): Promise<void>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/backend/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/backend/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAG7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC;;;;;;OAMG;IACH,uBAAuB,EAAE,uBAAuB,CAAC;IACjD,eAAe,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,YAAY,EAAE,mBAAmB,CAAC;IAClC,sBAAsB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK;QAC/C,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF;;;;;;;;;;;;;;;OAeG;IACH,kBAAkB,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,MAAM,CAAC;CACzD;AAED,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CAyJf"}

package/dist/backend/routes.js

@@ -0,0 +1,114 @@
+import { ERROR_CODES, adjustCreditLimitRequestSchema, grantCreditLimitRequestSchema, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { isOrgInScope } from '@endora-commerce/platform/tenancy';
+export async function registerCreditLimitsRoutes(app, deps) {
+    const { creditLimitService, organizationDetailsPort, requireCustomer, requireAdmin, resolveCustomerContext, resolveAdminUserId, } = deps;
+    /** Resolve organization names for the given ids (read-only, missing ⇒ absent). */
+    const loadOrgNames = async (ids) => {
+        const unique = [...new Set(ids)].filter(Boolean);
+        if (unique.length === 0)
+            return new Map();
+        const orgs = await organizationDetailsPort.findByIds(unique);
+        return new Map(orgs.map((o) => [o.id, o.name]));
+    };
+    app.get('/api/v1/me/credit-limit', { preHandler: requireCustomer }, async (request) => {
+        const ctx = resolveCustomerContext(request);
+        const limit = await creditLimitService.getForOrganization(ctx.organizationId);
+        if (!limit) {
+            throw new HttpError(404, ERROR_CODES.CREDIT_LIMIT_NOT_GRANTED, 'Credit limit has not been granted for this organization.');
+        }
+        const reservations = await creditLimitService.listActiveReservations(limit.id);
+        return { data: serializeView(limit, reservations) };
+    });
+    app.get('/api/v1/admin/credit-limits', { preHandler: requireAdmin('credit_limits:manage') }, async () => {
+        const rows = await creditLimitService.listAll();
+        const names = await loadOrgNames(rows.map((l) => l.organizationId));
+        const data = await Promise.all(rows.map(async (l) => {
+            const reservations = await creditLimitService.listActiveReservations(l.id);
+            return serializeView(l, reservations, names.get(l.organizationId) ?? null);
+        }));
+        return { data };
+    });
+    app.post('/api/v1/admin/organizations/:id/credit-limit', {
+        preHandler: requireAdmin('credit_limits:manage'),
+        schema: { body: grantCreditLimitRequestSchema },
+    }, async (request, reply) => {
+        const body = grantCreditLimitRequestSchema.parse(request.body);
+        // Feature 050 — inserts are not reachable by the org column filter, so gate
+        // the target org explicitly; out-of-scope responds as "not granted" (FR-008).
+        if (!isOrgInScope(request.params.id)) {
+            throw new HttpError(404, ERROR_CODES.CREDIT_LIMIT_NOT_GRANTED, 'Credit limit has not been granted for this organization.');
+        }
+        const existing = await creditLimitService.getForOrganization(request.params.id);
+        if (existing) {
+            throw new HttpError(409, ERROR_CODES.CREDIT_LIMIT_ALREADY_GRANTED, 'A credit limit is already granted; use PATCH to adjust it.');
+        }
+        const limit = await creditLimitService.grant({
+            organizationId: request.params.id,
+            grantedAmount: body.grantedAmount,
+            currency: body.currency,
+            grantedByAdminUserId: resolveAdminUserId(request),
+        });
+        reply.status(201);
+        const names = await loadOrgNames([request.params.id]);
+        return { data: serializeView(limit, [], names.get(request.params.id) ?? null) };
+    });
+    app.get('/api/v1/admin/organizations/:id/credit-limit', { preHandler: requireAdmin('credit_limits:manage') }, async (request) => {
+        const limit = await creditLimitService.getForOrganization(request.params.id);
+        if (!limit) {
+            throw new HttpError(404, ERROR_CODES.CREDIT_LIMIT_NOT_GRANTED, 'Credit limit has not been granted for this organization.');
+        }
+        const reservations = await creditLimitService.listActiveReservations(limit.id);
+        const names = await loadOrgNames([request.params.id]);
+        return { data: serializeView(limit, reservations, names.get(request.params.id) ?? null) };
+    });
+    app.patch('/api/v1/admin/organizations/:id/credit-limit', {
+        preHandler: requireAdmin('credit_limits:manage'),
+        schema: { body: adjustCreditLimitRequestSchema },
+    }, async (request) => {
+        const body = adjustCreditLimitRequestSchema.parse(request.body);
+        // Feature 050 — gate the target org (see POST grant above).
+        if (!isOrgInScope(request.params.id)) {
+            throw new HttpError(404, ERROR_CODES.CREDIT_LIMIT_NOT_GRANTED, 'Credit limit has not been granted for this organization.');
+        }
+        try {
+            const result = await creditLimitService.adjust({
+                organizationId: request.params.id,
+                grantedAmount: body.grantedAmount,
+                ...(body.allowOverAllocation !== undefined
+                    ? { allowOverAllocation: body.allowOverAllocation }
+                    : {}),
+            });
+            if (!result.ok) {
+                throw new HttpError(409, ERROR_CODES.ADJUSTMENT_BELOW_ACTIVE, 'Cannot reduce credit limit below the sum of active reservations.');
+            }
+            const reservations = await creditLimitService.listActiveReservations(result.limit.id);
+            const names = await loadOrgNames([request.params.id]);
+            return { data: serializeView(result.limit, reservations, names.get(request.params.id) ?? null) };
+        }
+        catch (err) {
+            if (err instanceof Error && err.message === 'CREDIT_LIMIT_NOT_GRANTED') {
+                throw new HttpError(404, ERROR_CODES.CREDIT_LIMIT_NOT_GRANTED, 'Credit limit has not been granted for this organization.');
+            }
+            throw err;
+        }
+    });
+}
+function serializeView(limit, reservations, organizationName) {
+    const granted = Number(limit.grantedAmount);
+    const reservedSum = reservations.reduce((acc, r) => acc + Number(r.amount), 0);
+    return {
+        organizationId: limit.organizationId,
+        organizationName: organizationName ?? null,
+        grantedAmount: granted,
+        availableAmount: granted - reservedSum,
+        currency: limit.currency,
+        activeReservations: reservations.map((r) => ({
+            orderId: r.orderId,
+            amount: Number(r.amount),
+            createdAt: r.createdAt.toISOString(),
+        })),
+        grantedAt: limit.createdAt.toISOString(),
+    };
+}
+//# sourceMappingURL=routes.js.map

package/dist/backend/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/backend/routes.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,8BAA8B,EAC9B,6BAA6B,GAE9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AA6DjE,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAoB,EACpB,IAAsB;IAEtB,MAAM,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,YAAY,EACZ,sBAAsB,EACtB,kBAAkB,GACnB,GAAG,IAAI,CAAC;IAET,kFAAkF;IAClF,MAAM,YAAY,GAAG,KAAK,EAAE,GAAa,EAAgC,EAAE;QACzE,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,yBAAyB,EACzB,EAAE,UAAU,EAAE,eAAe,EAAE,EAC/B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,kBAAkB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC9E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;IACtD,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,6BAA6B,EAC7B,EAAE,UAAU,EAAE,YAAY,CAAC,sBAAsB,CAAC,EAAE,EACpD,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACnB,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3E,OAAO,aAAa,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,CAAC;QAC7E,CAAC,CAAC,CACH,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,8CAA8C,EAC9C;QACE,UAAU,EAAE,YAAY,CAAC,sBAAsB,CAAC;QAChD,MAAM,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE;KAChD,EACD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/D,4EAA4E;QAC5E,8EAA8E;QAC9E,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,4BAA4B,EACxC,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC;YAC3C,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;YACjC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,oBAAoB,EAAE,kBAAkB,CAAC,OAAO,CAAC;SAClD,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;IAClF,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,8CAA8C,EAC9C,EAAE,UAAU,EAAE,YAAY,CAAC,sBAAsB,CAAC,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;IAC5F,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,8CAA8C,EAC9C;QACE,UAAU,EAAE,YAAY,CAAC,sBAAsB,CAAC;QAChD,MAAM,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE;KACjD,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChE,4DAA4D;QAC5D,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;gBAC7C,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBACjC,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS;oBACxC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE;oBACnD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,uBAAuB,EACnC,kEAAkE,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;QACnG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,KAAK,0BAA0B,EAAE,CAAC;gBACvE,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,KAAkB,EAClB,YAAsC,EACtC,gBAAgC;IAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,gBAAgB,EAAE,gBAAgB,IAAI,IAAI;QAC1C,aAAa,EAAE,OAAO;QACtB,eAAe,EAAE,OAAO,GAAG,WAAW;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,kBAAkB,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACxB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;QACH,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;KACzC,CAAC;AACJ,CAAC"}

package/dist/backend/services/credit-limit-read.d.ts

@@ -0,0 +1,23 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { CreditLimitReadPort } from '@endora-commerce/contracts';
+/**
+ * `creditLimitReadPort` — the membership read `organizations` needs to resolve
+ * an inherited limit (feature 077, D-87).
+ *
+ * `OrganizationInheritanceService.creditOwner` walks an ancestor chain and has
+ * to know which of those organisations hold a row here. It selected from this
+ * module's table to find out — a statement naming no import specifier, so the
+ * boundary compiled and returned rows whatever state this module was in.
+ *
+ * A class rather than a closure in `backend/index.ts` for the reason
+ * `OrganizationDetailsService` is one: several suites construct the consumer by
+ * hand and have to supply what the container supplies, and the point of a cut
+ * is that the **owner's own** implementation answers the question — a stub that
+ * agrees with the test's expectations cannot show it.
+ */
+export declare class CreditLimitReadService implements CreditLimitReadPort {
+    private readonly emFactory;
+    constructor(emFactory: () => EntityManager);
+    organizationsWithLimit(organizationIds: readonly string[]): Promise<string[]>;
+}
+//# sourceMappingURL=credit-limit-read.d.ts.map

package/dist/backend/services/credit-limit-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credit-limit-read.d.ts","sourceRoot":"","sources":["../../../src/backend/services/credit-limit-read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGtE;;;;;;;;;;;;;;GAcG;AACH,qBAAa,sBAAuB,YAAW,mBAAmB;IACpD,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM,aAAa;IAErD,sBAAsB,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAcpF"}

package/dist/backend/services/credit-limit-read.js

@@ -0,0 +1,35 @@
+import { CreditLimit } from '../entities/credit-limit.entity.js';
+/**
+ * `creditLimitReadPort` — the membership read `organizations` needs to resolve
+ * an inherited limit (feature 077, D-87).
+ *
+ * `OrganizationInheritanceService.creditOwner` walks an ancestor chain and has
+ * to know which of those organisations hold a row here. It selected from this
+ * module's table to find out — a statement naming no import specifier, so the
+ * boundary compiled and returned rows whatever state this module was in.
+ *
+ * A class rather than a closure in `backend/index.ts` for the reason
+ * `OrganizationDetailsService` is one: several suites construct the consumer by
+ * hand and have to supply what the container supplies, and the point of a cut
+ * is that the **owner's own** implementation answers the question — a stub that
+ * agrees with the test's expectations cannot show it.
+ */
+export class CreditLimitReadService {
+    emFactory;
+    constructor(emFactory) {
+        this.emFactory = emFactory;
+    }
+    async organizationsWithLimit(organizationIds) {
+        if (organizationIds.length === 0)
+            return [];
+        const rows = await this.emFactory().find(CreditLimit, { organizationId: { $in: [...organizationIds] } }, 
+        // Load-bearing rather than defensive: the holder is by definition an
+        // ancestor outside the caller's tenant scope, which is the whole point of
+        // the inheritance, so `@OrgScoped` would answer the empty set for every
+        // descendant and the feature would silently stop working.
+        { filters: { org: false } });
+        // Ids, not rows. The consumer gets a value it cannot mutate and flush.
+        return rows.map((row) => row.organizationId);
+    }
+}
+//# sourceMappingURL=credit-limit-read.js.map

package/dist/backend/services/credit-limit-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credit-limit-read.js","sourceRoot":"","sources":["../../../src/backend/services/credit-limit-read.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAEjE;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,sBAAsB;IACJ;IAA7B,YAA6B,SAA8B;QAA9B,cAAS,GAAT,SAAS,CAAqB;IAAG,CAAC;IAE/D,KAAK,CAAC,sBAAsB,CAAC,eAAkC;QAC7D,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CACtC,WAAW,EACX,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,eAAe,CAAC,EAAE,EAAE;QACjD,qEAAqE;QACrE,0EAA0E;QAC1E,wEAAwE;QACxE,0DAA0D;QAC1D,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAC5B,CAAC;QACF,uEAAuE;QACvE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC;CACF"}