@endora-commerce/mod-customers 0.100.0

package/dist/backend/index.js

@@ -0,0 +1,201 @@
+import { z } from 'zod';
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { CustomerAddressReadService } from './services/customer-address-read-port.js';
+import { lazyPort } from '@endora-commerce/platform/kernel';
+import { CUSTOMERS_SETTING_CODES } from '../manifest.js';
+import { customersModule } from './plugin.js';
+import { CustomerAddress } from './entities/customer-address.entity.js';
+/**
+ * Who is moderating, and which organizations they may act on — defaulted here
+ * (`specs/117-instance-bring-up/` Phase 6, FR-033).
+ *
+ * It was contributed by `backend/src/composition.ts` and by
+ * `backend/test/helpers/test-server.ts` and by nothing else, so a composition
+ * that is neither — which is every client instance — could not resolve it, and
+ * met that fact as a 500 on the first admin customer screen rather than at
+ * boot.
+ *
+ * The production root wrote the role lookup as `knex.raw` over `admin_users`
+ * and `admin_roles`, which is two modules' tables read on this module's
+ * `EntityManager`, outside either owner's gate. The two ports say the same
+ * thing and are already this manifest's declared `dependencies`; the test
+ * harness had been written this way since T140, so the port shape is the one
+ * with the prior art and the SQL is what goes.
+ */
+function registerModerationActor(ctx) {
+    ctx.di.register({
+        customerModerationActorResolver: ctx
+            .asFunction(() => {
+            const admins = lazyPort(ctx, 'adminUserReadPort');
+            const roles = lazyPort(ctx, 'adminRolePort');
+            const salesRepScope = lazyPort(ctx, 'organizationSalesRepScopePort');
+            return async (request) => {
+                const actor = request.actor;
+                if (actor?.kind !== 'admin') {
+                    throw new HttpError(401, ERROR_CODES.UNAUTHORIZED, 'Admin session required.');
+                }
+                const adminUser = await admins.findById(actor.adminUserId);
+                // `getById` cannot 404 here: `admin_users_admin_role_fk` is
+                // `on delete restrict`, so a non-null `adminRoleId` names a row.
+                const role = adminUser?.adminRoleId ? await roles.getById(adminUser.adminRoleId) : null;
+                const isPlatformAdmin = role?.code !== 'sales_representative';
+                // Feature 056 — subtree-expanded when the rep holds
+                // `organizations:rollup`, which is `organizations`' decision and the
+                // reason this reads an assembled port rather than the tree.
+                const allowedOrganizationIds = isPlatformAdmin
+                    ? []
+                    : await salesRepScope.listAssignedOrganizationIds(actor.adminUserId);
+                return { adminUserId: actor.adminUserId, isPlatformAdmin, allowedOrganizationIds };
+            };
+        })
+            .singleton(),
+    });
+}
+export function registerModule(ctx) {
+    const cradle = () => ctx.cradle();
+    registerModerationActor(ctx);
+    /**
+     * This module's own settings, read against the system-default channel. Each
+     * degrades to the manifest default rather than failing the request — the
+     * identical try/catch stood in the production root, three times over.
+     *
+     * D-48 removed an `if (!channel) return fallback;` from between the two: on
+     * the impossible no-channel branch it returned the compiled-in constant
+     * without reading the setting at all, which is worse than switching tier.
+     */
+    const readChannelSetting = async (code, schema, fallback) => {
+        try {
+            const channel = await cradle().salesChannelResolutionPort.getSystemDefault();
+            return (await cradle().settingsReadPort.get(code, channel.id, schema));
+        }
+        catch {
+            return fallback;
+        }
+    };
+    /**
+     * Feature 075, Phase P — the customer's own saved addresses.
+     *
+     * `quick_order` reads one when it fills in a buyer's one-click defaults. The
+     * table is distinct from `addresses`' on purpose and the port keeps them
+     * distinct: this one hangs off a customer account, that one off an
+     * organisation, and a B2C buyer keeps addresses that are theirs rather than
+     * their personal organisation's.
+     */
+    ctx.di.providePort('customerAddressReadPort', ctx
+        .asFunction(({ emFactory }) => new CustomerAddressReadService(emFactory))
+        .singleton());
+    ctx.di.register({
+        customers: ctx
+            .asFunction(({ emFactory, auditLogService }) => customersModule({
+            emFactory,
+            auditLogService,
+            // Every one of these is another module's gated port and is stored by
+            // the constructor, so a singleton may not hold one directly.
+            // Feature 075, Phase C (issue #195) — `customerAuthPort` rather
+            // than the `customerAuthService` class registration. Unlike the
+            // address pair this was never a record type over a class: the
+            // cradle field resolved to a direct class-type import, an ordinary
+            // FR-011 edge that happened to share the container name.
+            customerAuthService: lazyPort(ctx, 'customerAuthPort'),
+            passwordResetService: lazyPort(ctx, 'passwordResetService'),
+            // D-98.2 / issue #196 — `authSessionPort` is the name the contract
+            // publishes; `sessionService` is `auth`'s class registration, and
+            // resolving it here was the leak D-98.1 repaired for `addressService`.
+            sessionService: lazyPort(ctx, 'authSessionPort'),
+            customerAccountReadPort: lazyPort(ctx, 'customerAccountReadPort'),
+            // Feature 075, Phase C — the rest of `customer_accounts`' surface
+            // this module's screens run on. Every one of these replaced a
+            // direct load or mutation of that module's `CustomerAccount`
+            // entity: the block/unblock/delete/restore/assign writes, the
+            // retention scrub, the admin list's paginated query, and the
+            // customer-group names beside it.
+            customerAccountLifecycleWritePort: lazyPort(ctx, 'customerAccountLifecycleWritePort'),
+            customerAccountAdminSearchPort: lazyPort(ctx, 'customerAccountAdminSearchPort'),
+            customerGroupReadPort: lazyPort(ctx, 'customerGroupReadPort'),
+            // `organizations`' row-level read (names on the admin list, the
+            // existence check on the assignment screen) and its personal-org
+            // provisioner, which the B2C registration and the retention sweep
+            // both go through. Both replaced an `em.findOne(Organization, …)`
+            // — and the sweep's three-field scrub of that row — here.
+            organizationDetailsPort: lazyPort(ctx, 'organizationDetailsPort'),
+            personalOrganizationPort: lazyPort(ctx, 'personalOrganizationPort'),
+            // `addresses`' read: the org-shared book a customer may pick a
+            // delivery address from, which this module used to query directly.
+            addressReadPort: lazyPort(ctx, 'addressReadPort'),
+            customFieldValues: lazyPort(ctx, 'customFieldValueService'),
+            rfqService: lazyPort(ctx, 'rfqService'),
+            // Issue #108 — `organizations`' scope, not a private copy of its
+            // wiring. The copy this replaces omitted the optional subtree deps,
+            // so feature 056's roll-up was skipped for every block / unblock /
+            // delete / org-assign decision, and `tsc` had nothing to say about
+            // it.
+            salesRepVisibility: lazyPort(ctx, 'organizationSalesRepScopePort'),
+            mailer: lazyPort(ctx, 'emailMailer'),
+            // Feature 075 — `carts`' reporting read and `admin_users`'
+            // impersonation seam, where this module built a second instance of
+            // each from an import of the owner's directory. Both are gated
+            // ports, so a singleton may not hold one directly.
+            cartQueryPort: lazyPort(ctx, 'cartQueryPort'),
+            impersonationPort: lazyPort(ctx, 'impersonationPort'),
+            // `auth`'s read over the session table, for the online-customers
+            // panel — the last thing in this module that named `Session`.
+            authSessionReadPort: lazyPort(ctx, 'authSessionReadPort'),
+            // `orders`' published list, replacing the late-bound accessor and
+            // the `Pick<OrderListService, 'list'>` that typed it. `orders` is
+            // non-deactivatable, so the edge is an ordinary binding dependency
+            // and the panels have no absent state to degrade into: the port's
+            // own 503 covers the window before `orders` registers its routes.
+            orderList: lazyPort(ctx, 'orderListPort'),
+            // Feature 080, T048 (D-169) — `orders`' row-level read, for the
+            // customer-detail header's sales-channel list. That list was an
+            // `em.find(Order, …)` inside this module: a plain read of another
+            // module's table, which kept answering out of an `orders` the
+            // platform was not serving. A read takes a read-port method, never
+            // an `EntityManager`-taking apply port. Same binding edge as
+            // `orderListPort` above and the same manifest `dependencies` entry.
+            orderReadPort: lazyPort(ctx, 'orderReadPort'),
+            // Feature 076 (D-86) — `organizations`' port, resolved lazily: the
+            // factory below is a singleton and stores what it is handed, and a
+            // captured gate keeps answering after its owner is switched off.
+            vatValidator: lazyPort(ctx, 'vatValidatorPort'),
+            // Issue #216 — the ordering defaults this module renders and edits
+            // belong to `quick_order`. Until now it built a **second instance**
+            // of that module's `DefaultPreferenceService` from an import of its
+            // directory, so the two holders had to be converted together and
+            // the port published for this consumer went unreached. Binding, per
+            // the port's own contract: a switched-off `quick_order` answers 503
+            // `MODULE_DISABLED` at the seam rather than half a set of defaults.
+            defaultPreferencePort: lazyPort(ctx, 'defaultPreferencePort'),
+            storefrontBaseUrl: cradle().storefrontBaseUrl,
+            requireAdmin: (permission) => async (req, reply) => cradle().requireAdmin(permission)(req, reply),
+            requireCustomer: (req, reply) => cradle().requireCustomer(req, reply),
+            resolveCustomerActor: (req) => cradle().customerActorResolver(req),
+            resolveModerationActor: (req) => cradle().customerModerationActorResolver(req),
+            // The three reads that used to be a root's, one of them exercised
+            // by no test at all — see the note above.
+            resolveAllowRegistrationWithoutOrganization: () => readChannelSetting(CUSTOMERS_SETTING_CODES.ALLOW_REGISTRATION_WITHOUT_ORGANIZATION, z.boolean(), false),
+            resolveDeletionRetentionDays: () => readChannelSetting(CUSTOMERS_SETTING_CODES.DELETION_RETENTION_DAYS, z.number(), 365),
+            resolvePresenceFreshnessMinutes: () => readChannelSetting(CUSTOMERS_SETTING_CODES.PRESENCE_FRESHNESS_MINUTES, z.number(), 10),
+        }))
+            .singleton(),
+    });
+    ctx.routes(async (app) => {
+        await cradle().customers.plugin(app);
+    });
+}
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export const entities = [
+    CustomerAddress,
+];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AA4B3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AAEtF,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAI5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,eAAe,EAA+B,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAwExE;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,uBAAuB,CAAC,GAAkB;IACjD,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACd,+BAA+B,EAAE,GAAG;aACjC,UAAU,CAAC,GAAG,EAAE;YACf,MAAM,MAAM,GAAG,QAAQ,CAAoB,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACrE,MAAM,KAAK,GAAG,QAAQ,CAAgB,GAAG,EAAE,eAAe,CAAC,CAAC;YAC5D,MAAM,aAAa,GAAG,QAAQ,CAC5B,GAAG,EACH,+BAA+B,CAChC,CAAC;YACF,OAAO,KAAK,EAAE,OAAuB,EAAE,EAAE;gBACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAA0B,CAAC;gBACjD,IAAI,KAAK,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC5B,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;gBAChF,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC3D,4DAA4D;gBAC5D,iEAAiE;gBACjE,MAAM,IAAI,GAAG,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxF,MAAM,eAAe,GAAG,IAAI,EAAE,IAAI,KAAK,sBAAsB,CAAC;gBAC9D,oDAAoD;gBACpD,qEAAqE;gBACrE,4DAA4D;gBAC5D,MAAM,sBAAsB,GAAG,eAAe;oBAC5C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,MAAM,aAAa,CAAC,2BAA2B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBACvE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,EAAE,sBAAsB,EAAE,CAAC;YACrF,CAAC,CAAC;QACJ,CAAC,CAAC;aACD,SAAS,EAAE;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C,MAAM,MAAM,GAAG,GAAoB,EAAE,CAAC,GAAG,CAAC,MAAM,EAAmB,CAAC;IACpE,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAE7B;;;;;;;;OAQG;IACH,MAAM,kBAAkB,GAAG,KAAK,EAC9B,IAAY,EACZ,MAA8C,EAC9C,QAAW,EACC,EAAE;QACd,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,MAAM,EAAE,CAAC,0BAA0B,CAAC,gBAAgB,EAAE,CAAC;YAC7E,OAAO,CAAC,MAAM,MAAM,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAM,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IAEF;;;;;;;;OAQG;IACH,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,yBAAyB,EACzB,GAAG;SACA,UAAU,CAAC,CAAC,EAAE,SAAS,EAAmB,EAAE,EAAE,CAAC,IAAI,0BAA0B,CAAC,SAAS,CAAC,CAAC;SACzF,SAAS,EAAE,CACf,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACd,SAAS,EAAE,GAAG;aACX,UAAU,CACT,CAAC,EAAE,SAAS,EAAE,eAAe,EAAmB,EAAE,EAAE,CAClD,eAAe,CAAC;YACd,SAAS;YACT,eAAe;YACf,qEAAqE;YACrE,6DAA6D;YAC7D,gEAAgE;YAChE,gEAAgE;YAChE,8DAA8D;YAC9D,mEAAmE;YACnE,yDAAyD;YACzD,mBAAmB,EAAE,QAAQ,CAAmB,GAAG,EAAE,kBAAkB,CAAC;YACxE,oBAAoB,EAAE,QAAQ,CAC5B,GAAG,EACH,sBAAsB,CACvB;YACD,mEAAmE;YACnE,kEAAkE;YAClE,uEAAuE;YACvE,cAAc,EAAE,QAAQ,CAAkB,GAAG,EAAE,iBAAiB,CAAC;YACjE,uBAAuB,EAAE,QAAQ,CAC/B,GAAG,EACH,yBAAyB,CAC1B;YACD,kEAAkE;YAClE,8DAA8D;YAC9D,6DAA6D;YAC7D,8DAA8D;YAC9D,6DAA6D;YAC7D,kCAAkC;YAClC,iCAAiC,EAAE,QAAQ,CACzC,GAAG,EACH,mCAAmC,CACpC;YACD,8BAA8B,EAAE,QAAQ,CACtC,GAAG,EACH,gCAAgC,CACjC;YACD,qBAAqB,EAAE,QAAQ,CAAwB,GAAG,EAAE,uBAAuB,CAAC;YACpF,gEAAgE;YAChE,iEAAiE;YACjE,kEAAkE;YAClE,kEAAkE;YAClE,0DAA0D;YAC1D,uBAAuB,EAAE,QAAQ,CAC/B,GAAG,EACH,yBAAyB,CAC1B;YACD,wBAAwB,EAAE,QAAQ,CAChC,GAAG,EACH,0BAA0B,CAC3B;YACD,+DAA+D;YAC/D,mEAAmE;YACnE,eAAe,EAAE,QAAQ,CAAkB,GAAG,EAAE,iBAAiB,CAAC;YAClE,iBAAiB,EAAE,QAAQ,CAAuB,GAAG,EAAE,yBAAyB,CAAC;YACjF,UAAU,EAAE,QAAQ,CAAkB,GAAG,EAAE,YAAY,CAAC;YACxD,iEAAiE;YACjE,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,MAAM;YACN,kBAAkB,EAAE,QAAQ,CAC1B,GAAG,EACH,+BAA+B,CAChC;YACD,MAAM,EAAE,QAAQ,CAAkB,GAAG,EAAE,aAAa,CAAC;YACrD,2DAA2D;YAC3D,mEAAmE;YACnE,+DAA+D;YAC/D,mDAAmD;YACnD,aAAa,EAAE,QAAQ,CAAgB,GAAG,EAAE,eAAe,CAAC;YAC5D,iBAAiB,EAAE,QAAQ,CAAoB,GAAG,EAAE,mBAAmB,CAAC;YACxE,iEAAiE;YACjE,8DAA8D;YAC9D,mBAAmB,EAAE,QAAQ,CAAsB,GAAG,EAAE,qBAAqB,CAAC;YAC9E,kEAAkE;YAClE,kEAAkE;YAClE,mEAAmE;YACnE,kEAAkE;YAClE,kEAAkE;YAClE,SAAS,EAAE,QAAQ,CAAgB,GAAG,EAAE,eAAe,CAAC;YACxD,gEAAgE;YAChE,gEAAgE;YAChE,kEAAkE;YAClE,8DAA8D;YAC9D,mEAAmE;YACnE,6DAA6D;YAC7D,oEAAoE;YACpE,aAAa,EAAE,QAAQ,CAAgB,GAAG,EAAE,eAAe,CAAC;YAC5D,mEAAmE;YACnE,mEAAmE;YACnE,iEAAiE;YACjE,YAAY,EAAE,QAAQ,CAAe,GAAG,EAAE,kBAAkB,CAAC;YAC7D,mEAAmE;YACnE,oEAAoE;YACpE,oEAAoE;YACpE,iEAAiE;YACjE,oEAAoE;YACpE,oEAAoE;YACpE,oEAAoE;YACpE,qBAAqB,EAAE,QAAQ,CAAwB,GAAG,EAAE,uBAAuB,CAAC;YACpF,iBAAiB,EAAE,MAAM,EAAE,CAAC,iBAAiB;YAC7C,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CACjD,MAAM,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC;YAC/C,eAAe,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC;YACrE,oBAAoB,EAAE,CAAC,GAAmB,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC;YAClF,sBAAsB,EAAE,CAAC,GAAmB,EAAE,EAAE,CAC9C,MAAM,EAAE,CAAC,+BAA+B,CAAC,GAAG,CAAC;YAC/C,kEAAkE;YAClE,0CAA0C;YAC1C,2CAA2C,EAAE,GAAG,EAAE,CAChD,kBAAkB,CAChB,uBAAuB,CAAC,uCAAuC,EAC/D,CAAC,CAAC,OAAO,EAAE,EACX,KAAK,CACN;YACH,4BAA4B,EAAE,GAAG,EAAE,CACjC,kBAAkB,CAAC,uBAAuB,CAAC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC;YACtF,+BAA+B,EAAE,GAAG,EAAE,CACpC,kBAAkB,CAChB,uBAAuB,CAAC,0BAA0B,EAClD,CAAC,CAAC,MAAM,EAAE,EACV,EAAE,CACH;SACJ,CAAC,CACL;aACA,SAAS,EAAE;KACf,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,eAAe;CAChB,CAAC"}

package/dist/backend/plugin.d.ts

@@ -0,0 +1,168 @@
+import type { FastifyInstance } from 'fastify';
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import { CustomerRegistrationService } from './services/customer-registration-service.js';
+import { CustomerAuthorityService, type SalesRepVisibility } from './services/customer-authority-service.js';
+import { AnonymizationSweepWorker } from './workers/anonymization-sweep-worker.js';
+import type { AddressReadPort, AuthSessionPort, AuthSessionReadPort, CartQueryPort, CustomFieldValuePort, CustomerAccountAdminSearchPort, CustomerAccountLifecycleWritePort, CustomerAccountReadPort, CustomerAuthPort, CustomerGroupReadPort, CustomerPasswordResetPort, DefaultPreferencePort, EmailMailerPort, ImpersonationPort, OrderListPort, OrderReadPort, OrganizationDetailsPort, PersonalOrganizationPort, RfqCustomerPort, VatValidator } from '@endora-commerce/contracts';
+import { type RequireCustomerGuard, type ResolveCustomerActor } from './routes.self.js';
+import { type RequireAdminGuard, type ResolveModerationActor } from './routes.admin.js';
+/**
+ * The attach function this module hands its composition root.
+ *
+ * Typed on `fastify`'s own `FastifyInstance` rather than on the platform's
+ * `ModulePlugin`, which `contracts/host-package.md` §1.4g classifies **A**: the
+ * host does not publish it, so a packaged module cannot name it. The
+ * already-packaged `quote_requests` types its attach function the same way.
+ */
+type ModuleAttach = (app: FastifyInstance) => Promise<void>;
+/**
+ * Customers module composition root (feature 040).
+ *
+ * Orchestrates the customer-lifecycle surfaces over the existing data
+ * modules. Sibling services are injected from `composition.ts` so the module
+ * never imports another module's internals (Constitution Principle I).
+ */
+export interface CustomersModuleOptions {
+    /**
+     * Feature 072 (T094) — `customer_accounts` owns these now. Injected rather
+     * than built here, because this host and `organizations` each built their own and the
+     * MFA argument differed between them.
+     */
+    customerAuthService: CustomerAuthPort;
+    passwordResetService: CustomerPasswordResetPort;
+    emFactory: () => EntityManager;
+    /**
+     * `auth`'s published session port, resolved under the name the contract
+     * publishes (D-98.2 / issue #196). It used to be the `SessionService`
+     * class, resolved as `sessionService`: the three calls this host makes —
+     * `createSession`, `destroyAllForCustomer`, `listRecentlyActiveCustomers`
+     * — are all on {@link AuthSessionPort}, so nothing needed the class.
+     *
+     * It was one of two options over the same port until this module's Phase-C
+     * cut: the duplicate existed only to feed the `ImpersonationService` this
+     * host built itself, and that instance is now `admin_users`' port.
+     */
+    sessionService: AuthSessionPort;
+    /**
+     * `admin_users`' published impersonation seam (feature 075). This host used
+     * to construct a **second** `ImpersonationService` from an import of that
+     * module's directory, over the port `admin_users`' own Phase-C cut published
+     * for it — so the machinery ran here whether its owner was present or not.
+     * The port is gated: a switched-off `admin_users` answers 503
+     * `MODULE_DISABLED` at the seam instead of minting a session.
+     */
+    impersonationPort: ImpersonationPort;
+    /**
+     * `auth`'s published read over the session table, for the online-customers
+     * panel. The panel *reports* on sessions rather than managing them, which is
+     * why it is a separate port from {@link AuthSessionPort} — and why this
+     * module no longer needs `Session` to answer "when was this account last
+     * seen".
+     */
+    authSessionReadPort: AuthSessionReadPort;
+    customerAccountReadPort: CustomerAccountReadPort;
+    /**
+     * Feature 075, Phase C — the rest of `customer_accounts`' published surface
+     * this module's own screens run on: the lifecycle writes it used to perform
+     * by mutating that module's entity, the admin list's query, and the group
+     * names beside it.
+     */
+    customerAccountLifecycleWritePort: CustomerAccountLifecycleWritePort;
+    customerAccountAdminSearchPort: CustomerAccountAdminSearchPort;
+    customerGroupReadPort: CustomerGroupReadPort;
+    /**
+     * `organizations`' published surface: the row-level read the admin list and
+     * the assignment screen ask for names and existence with, and the personal
+     * organisation a B2C registration provisions — which is also what the
+     * retention sweep cascades onto.
+     */
+    organizationDetailsPort: OrganizationDetailsPort;
+    personalOrganizationPort: PersonalOrganizationPort;
+    /** `addresses`' published read: the org-shared book a customer may pick from. */
+    addressReadPort: AddressReadPort;
+    /**
+     * Which organizations the acting staff member may see —
+     * `organizations`' `organizationSalesRepScopePort` (issue #108).
+     *
+     * Injected rather than built here. This module used to construct its own
+     * `SalesRepAssignmentService` from an entity-manager factory and an audit log,
+     * and that class's third argument — the feature-056 subtree deps — is
+     * optional, so omitting it compiled and quietly reverted every
+     * staff-authority decision to the flat pre-056 rule: a rep holding
+     * `organizations:rollup` could not act on a customer belonging to a
+     * descendant of an organization assigned to them.
+     */
+    salesRepVisibility: SalesRepVisibility;
+    requireCustomer: RequireCustomerGuard;
+    resolveCustomerActor: ResolveCustomerActor;
+    /** Reads `customers.allow_registration_without_organization`. */
+    resolveAllowRegistrationWithoutOrganization: () => Promise<boolean>;
+    /**
+     * `orders`' published list, which the self-service history panel and the
+     * admin customer-detail orders panel both read (feature 075). It replaces
+     * `Pick<OrderListService, 'list'>` over a late-bound accessor: the port keeps
+     * the accessor's timing, because `orders` builds the service inside its
+     * plugin body, and answers a call made before that with a 503 rather than a
+     * `null` two route files had to remember to check.
+     */
+    orderList: OrderListPort;
+    /**
+     * `orders`' row-level read. Only the customer-detail header's sales-channel
+     * list uses it, and that list was an `em.find(Order, …)` in this module until
+     * feature 080's T048 (D-169) — a plain read of another module's table, so a
+     * read-port method rather than an `EntityManager`-taking apply port.
+     */
+    orderReadPort: OrderReadPort;
+    rfqService: RfqCustomerPort;
+    auditLogService: AuditPort;
+    /**
+     * `quick_order`'s ordering defaults, which the customer-detail screen and
+     * self-service profile render and edit (issue #216).
+     *
+     * A **binding** dependency: the port's own contract says the seam fails
+     * closed when `quick_order` is off, and this module used to answer the same
+     * question out of a second instance it constructed itself — which read the
+     * table whether the owner was present or not.
+     */
+    defaultPreferencePort: DefaultPreferencePort;
+    requireAdmin: RequireAdminGuard;
+    resolveModerationActor: ResolveModerationActor;
+    /** VAT/NIP validator port (VIES / Biała lista in production). */
+    vatValidator: VatValidator;
+    mailer: EmailMailerPort;
+    /**
+     * `carts`' reporting read: the account's current cart and its abandoned ones,
+     * for the customer-detail panel. This host used to build a second
+     * `CartQueryService` from an import of that module's directory (feature 075).
+     */
+    cartQueryPort: CartQueryPort;
+    /** Base URL for the storefront set-password link in reset emails. */
+    storefrontBaseUrl: string;
+    /** Reads `customers.deletion_retention_days`. */
+    resolveDeletionRetentionDays: () => Promise<number>;
+    /** Reads `customers.presence_freshness_minutes`. */
+    resolvePresenceFreshnessMinutes: () => Promise<number>;
+    /**
+     * Feature 055 — validates Customer custom-field values on the admin edit
+     * path. The persistence is `customer_accounts`': its lifecycle port runs the
+     * Command and takes this validator as the merge (feature 075).
+     */
+    customFieldValues?: CustomFieldValuePort;
+}
+export interface CustomersModuleHandle {
+    registrationService: CustomerRegistrationService;
+    anonymizationSweepWorker: AnonymizationSweepWorker;
+    /**
+     * Exposed so the sales-rep scope this module *uses* can be asserted (issue
+     * #108). The defect it closes was invisible to `tsc` and to every route test,
+     * because a flat scope answers plausibly — just not with the roll-up.
+     */
+    authorityService: CustomerAuthorityService;
+}
+export declare function customersModule(options: CustomersModuleOptions): {
+    plugin: ModuleAttach;
+    handle: () => CustomersModuleHandle;
+};
+export {};
+//# sourceMappingURL=plugin.d.ts.map

package/dist/backend/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/backend/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAG1F,OAAO,EACL,wBAAwB,EACxB,KAAK,kBAAkB,EACxB,MAAM,0CAA0C,CAAC;AAMlD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,8BAA8B,EAC9B,iCAAiC,EACjC,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,YAAY,EACb,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;GAOG;AACH,KAAK,YAAY,GAAG,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,mBAAmB,EAAE,gBAAgB,CAAC;IACtC,oBAAoB,EAAE,yBAAyB,CAAC;IAChD,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,cAAc,EAAE,eAAe,CAAC;IAChC;;;;;;;OAOG;IACH,iBAAiB,EAAE,iBAAiB,CAAC;IACrC;;;;;;OAMG;IACH,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,uBAAuB,EAAE,uBAAuB,CAAC;IACjD;;;;;OAKG;IACH,iCAAiC,EAAE,iCAAiC,CAAC;IACrE,8BAA8B,EAAE,8BAA8B,CAAC;IAC/D,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C;;;;;OAKG;IACH,uBAAuB,EAAE,uBAAuB,CAAC;IACjD,wBAAwB,EAAE,wBAAwB,CAAC;IACnD,iFAAiF;IACjF,eAAe,EAAE,eAAe,CAAC;IACjC;;;;;;;;;;;OAWG;IACH,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,eAAe,EAAE,oBAAoB,CAAC;IACtC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,iEAAiE;IACjE,2CAA2C,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACpE;;;;;;;OAOG;IACH,SAAS,EAAE,aAAa,CAAC;IACzB;;;;;OAKG;IACH,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE,eAAe,CAAC;IAC5B,eAAe,EAAE,SAAS,CAAC;IAC3B;;;;;;;;OAQG;IACH,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,YAAY,EAAE,iBAAiB,CAAC;IAChC,sBAAsB,EAAE,sBAAsB,CAAC;IAC/C,iEAAiE;IACjE,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE,eAAe,CAAC;IACxB;;;;OAIG;IACH,aAAa,EAAE,aAAa,CAAC;IAC7B,qEAAqE;IACrE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iDAAiD;IACjD,4BAA4B,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,oDAAoD;IACpD,+BAA+B,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;CAC1C;AAED,MAAM,WAAW,qBAAqB;IACpC,mBAAmB,EAAE,2BAA2B,CAAC;IACjD,wBAAwB,EAAE,wBAAwB,CAAC;IACnD;;;;OAIG;IACH,gBAAgB,EAAE,wBAAwB,CAAC;CAC5C;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG;IAChE,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,MAAM,qBAAqB,CAAC;CACrC,CA4GA"}

package/dist/backend/plugin.js

@@ -0,0 +1,83 @@
+import { CustomerRegistrationService } from './services/customer-registration-service.js';
+import { CustomerAddressService } from './services/customer-address-service.js';
+import { CustomerDefaultsService } from './services/customer-defaults-service.js';
+import { CustomerAuthorityService, } from './services/customer-authority-service.js';
+import { CustomerModerationService } from './services/customer-moderation-service.js';
+import { CustomerAdminQueryService } from './services/customer-admin-query-service.js';
+import { CustomerOrgAssignmentService } from './services/customer-org-assignment-service.js';
+import { CustomerDeletionService } from './services/customer-deletion-service.js';
+import { CustomerPresenceService } from './services/customer-presence-service.js';
+import { AnonymizationSweepWorker } from './workers/anonymization-sweep-worker.js';
+import { registerCustomersRegisterRoutes } from './routes.register.js';
+import { registerCustomersSelfRoutes, } from './routes.self.js';
+import { registerCustomersAdminRoutes, } from './routes.admin.js';
+export function customersModule(options) {
+    const customerAuthService = options.customerAuthService;
+    const registrationService = new CustomerRegistrationService({
+        accounts: options.customerAccountLifecycleWritePort,
+        sessionService: options.sessionService,
+        resolveAllowRegistrationWithoutOrganization: options.resolveAllowRegistrationWithoutOrganization,
+    });
+    const customerAddressService = new CustomerAddressService(options.emFactory, options.addressReadPort, options.customerAccountReadPort, options.auditLogService);
+    const customerDefaultsService = new CustomerDefaultsService(options.emFactory, options.defaultPreferencePort, customerAddressService);
+    const authorityService = new CustomerAuthorityService(options.salesRepVisibility);
+    const moderationService = new CustomerModerationService(options.customerAccountReadPort, options.customerAccountLifecycleWritePort, authorityService, {
+        destroyAllForCustomer: (customerAccountId) => options.sessionService.destroyAllForCustomer(customerAccountId),
+    });
+    const queryService = new CustomerAdminQueryService(customerDefaultsService, {
+        accounts: options.customerAccountReadPort,
+        accountSearch: options.customerAccountAdminSearchPort,
+        organizations: options.organizationDetailsPort,
+        customerGroups: options.customerGroupReadPort,
+        orders: options.orderReadPort,
+    });
+    const orgAssignmentService = new CustomerOrgAssignmentService(options.customerAccountReadPort, options.customerAccountLifecycleWritePort, options.organizationDetailsPort, authorityService, options.personalOrganizationPort);
+    const deletionService = new CustomerDeletionService(options.customerAccountReadPort, options.customerAccountLifecycleWritePort, options.personalOrganizationPort, authorityService, {
+        destroyAllForCustomer: (customerAccountId) => options.sessionService.destroyAllForCustomer(customerAccountId),
+    });
+    const presenceService = new CustomerPresenceService({
+        listRecentlyActiveCustomers: (windowMinutes) => options.sessionService.listRecentlyActiveCustomers(windowMinutes),
+    }, options.authSessionReadPort, options.resolvePresenceFreshnessMinutes, options.customerAccountReadPort);
+    const passwordResetService = options.passwordResetService;
+    const anonymizationSweepWorker = new AnonymizationSweepWorker(deletionService, options.resolveDeletionRetentionDays);
+    const plugin = async (app) => {
+        await registerCustomersRegisterRoutes(app, { registrationService });
+        await registerCustomersSelfRoutes(app, {
+            accounts: options.customerAccountReadPort,
+            requireCustomer: options.requireCustomer,
+            resolveCustomerActor: options.resolveCustomerActor,
+            customerAuthService,
+            orderList: options.orderList,
+            rfqService: options.rfqService,
+            customerAddressService,
+            customerDefaultsService,
+        });
+        await registerCustomersAdminRoutes(app, {
+            accounts: options.customerAccountReadPort,
+            accountWrites: options.customerAccountLifecycleWritePort,
+            requireAdmin: options.requireAdmin,
+            resolveModerationActor: options.resolveModerationActor,
+            moderationService,
+            queryService,
+            orgAssignmentService,
+            addressService: customerAddressService,
+            cartQueryService: options.cartQueryPort,
+            orderList: options.orderList,
+            rfqService: options.rfqService,
+            vatValidator: options.vatValidator,
+            impersonationService: options.impersonationPort,
+            deletionService,
+            presenceService,
+            passwordResetService,
+            mailer: options.mailer,
+            auditLogService: options.auditLogService,
+            storefrontBaseUrl: options.storefrontBaseUrl,
+            ...(options.customFieldValues ? { customFieldValues: options.customFieldValues } : {}),
+        });
+    };
+    return {
+        plugin,
+        handle: () => ({ registrationService, anonymizationSweepWorker, authorityService }),
+    };
+}
+//# sourceMappingURL=plugin.js.map

package/dist/backend/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/backend/plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EACL,wBAAwB,GAEzB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAuBnF,OAAO,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EACL,2BAA2B,GAG5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,4BAA4B,GAG7B,MAAM,mBAAmB,CAAC;AA8J3B,MAAM,UAAU,eAAe,CAAC,OAA+B;IAI7D,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IACxD,MAAM,mBAAmB,GAAG,IAAI,2BAA2B,CAAC;QAC1D,QAAQ,EAAE,OAAO,CAAC,iCAAiC;QACnD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,2CAA2C,EACzC,OAAO,CAAC,2CAA2C;KACtD,CAAC,CAAC;IACH,MAAM,sBAAsB,GAAG,IAAI,sBAAsB,CACvD,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,uBAAuB,EAC/B,OAAO,CAAC,eAAe,CACxB,CAAC;IACF,MAAM,uBAAuB,GAAG,IAAI,uBAAuB,CACzD,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,qBAAqB,EAC7B,sBAAsB,CACvB,CAAC;IACF,MAAM,gBAAgB,GAAG,IAAI,wBAAwB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClF,MAAM,iBAAiB,GAAG,IAAI,yBAAyB,CACrD,OAAO,CAAC,uBAAuB,EAC/B,OAAO,CAAC,iCAAiC,EACzC,gBAAgB,EAChB;QACE,qBAAqB,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAC3C,OAAO,CAAC,cAAc,CAAC,qBAAqB,CAAC,iBAAiB,CAAC;KAClE,CACF,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,yBAAyB,CAAC,uBAAuB,EAAE;QAC1E,QAAQ,EAAE,OAAO,CAAC,uBAAuB;QACzC,aAAa,EAAE,OAAO,CAAC,8BAA8B;QACrD,aAAa,EAAE,OAAO,CAAC,uBAAuB;QAC9C,cAAc,EAAE,OAAO,CAAC,qBAAqB;QAC7C,MAAM,EAAE,OAAO,CAAC,aAAa;KAC9B,CAAC,CAAC;IACH,MAAM,oBAAoB,GAAG,IAAI,4BAA4B,CAC3D,OAAO,CAAC,uBAAuB,EAC/B,OAAO,CAAC,iCAAiC,EACzC,OAAO,CAAC,uBAAuB,EAC/B,gBAAgB,EAChB,OAAO,CAAC,wBAAwB,CACjC,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,uBAAuB,CACjD,OAAO,CAAC,uBAAuB,EAC/B,OAAO,CAAC,iCAAiC,EACzC,OAAO,CAAC,wBAAwB,EAChC,gBAAgB,EAChB;QACE,qBAAqB,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAC3C,OAAO,CAAC,cAAc,CAAC,qBAAqB,CAAC,iBAAiB,CAAC;KAClE,CACF,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,uBAAuB,CACjD;QACE,2BAA2B,EAAE,CAAC,aAAa,EAAE,EAAE,CAC7C,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,aAAa,CAAC;KACpE,EACD,OAAO,CAAC,mBAAmB,EAC3B,OAAO,CAAC,+BAA+B,EACvC,OAAO,CAAC,uBAAuB,CAChC,CAAC;IACF,MAAM,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAC1D,MAAM,wBAAwB,GAAG,IAAI,wBAAwB,CAC3D,eAAe,EACf,OAAO,CAAC,4BAA4B,CACrC,CAAC;IAEF,MAAM,MAAM,GAAiB,KAAK,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,+BAA+B,CAAC,GAAG,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACpE,MAAM,2BAA2B,CAAC,GAAG,EAAE;YACrC,QAAQ,EAAE,OAAO,CAAC,uBAAuB;YACzC,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;YAClD,mBAAmB;YACnB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,sBAAsB;YACtB,uBAAuB;SACxB,CAAC,CAAC;QACH,MAAM,4BAA4B,CAAC,GAAG,EAAE;YACtC,QAAQ,EAAE,OAAO,CAAC,uBAAuB;YACzC,aAAa,EAAE,OAAO,CAAC,iCAAiC;YACxD,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;YACtD,iBAAiB;YACjB,YAAY;YACZ,oBAAoB;YACpB,cAAc,EAAE,sBAAsB;YACtC,gBAAgB,EAAE,OAAO,CAAC,aAAa;YACvC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,oBAAoB,EAAE,OAAO,CAAC,iBAAiB;YAC/C,eAAe;YACf,eAAe;YACf,oBAAoB;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;QACN,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,CAAC;KACpF,CAAC;AACJ,CAAC"}

package/dist/backend/routes.admin.d.ts

@@ -0,0 +1,70 @@
+import type { FastifyInstance, FastifyRequest, FastifyReply } from 'fastify';
+import { type CartQueryPort, type CustomerAccountLifecycleWritePort, type CustomerAccountReadPort, type CustomFieldValuePort, type EmailMailerPort, type ImpersonationPort, type OrderListPort, type RfqCustomerPort, type VatValidator } from '@endora-commerce/contracts';
+import type { CustomerModerationService } from './services/customer-moderation-service.js';
+import type { CustomerAdminQueryService } from './services/customer-admin-query-service.js';
+import type { CustomerOrgAssignmentService } from './services/customer-org-assignment-service.js';
+import type { CustomerDeletionService } from './services/customer-deletion-service.js';
+import type { CustomerPresenceService } from './services/customer-presence-service.js';
+import type { CustomerAddressService } from './services/customer-address-service.js';
+import type { CustomerPasswordResetPort } from '@endora-commerce/contracts';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+/**
+ * Admin customer-management routes (feature 040). Block/unblock land here in
+ * US3; later user stories extend this file (impersonate, detail, group,
+ * delete/restore, presence). Every route is gated by `requireAdmin`.
+ */
+export type RequireAdminGuard = (permission?: string) => (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+/**
+ * Resolves the acting admin's id, whether they are a Platform Administrator,
+ * and (for a scoped Salesperson) the Organizations they may act on.
+ */
+export type ResolveModerationActor = (request: FastifyRequest) => Promise<{
+    adminUserId: string;
+    isPlatformAdmin: boolean;
+    allowedOrganizationIds: string[];
+}>;
+export interface CustomersAdminDeps {
+    /**
+     * Feature 075 — `customer_accounts`' published read and lifecycle write,
+     * where this file used to load and patch that module's entity through an
+     * `EntityManager` it no longer needs at all.
+     */
+    accounts: CustomerAccountReadPort;
+    accountWrites: CustomerAccountLifecycleWritePort;
+    requireAdmin: RequireAdminGuard;
+    resolveModerationActor: ResolveModerationActor;
+    moderationService: CustomerModerationService;
+    queryService: CustomerAdminQueryService;
+    orgAssignmentService: CustomerOrgAssignmentService;
+    addressService: CustomerAddressService;
+    cartQueryService: CartQueryPort;
+    /**
+     * `orders`' published list (feature 075), where this surface used to hold
+     * `Pick<OrderListService, 'list'>` — a type operator in front of a
+     * cross-module import of the class.
+     */
+    orderList: OrderListPort;
+    rfqService: RfqCustomerPort;
+    vatValidator: VatValidator;
+    /**
+     * `admin_users`' published impersonation seam. The "view as this customer"
+     * control lives on this screen and the machinery lives in that module by
+     * design, so the surface holds the port rather than a second instance of the
+     * service (feature 075).
+     */
+    impersonationService: ImpersonationPort;
+    deletionService: CustomerDeletionService;
+    presenceService: CustomerPresenceService;
+    passwordResetService: CustomerPasswordResetPort;
+    mailer: EmailMailerPort;
+    auditLogService: AuditPort;
+    storefrontBaseUrl: string;
+    /**
+     * Feature 055 — validates Customer custom-field values. It no longer
+     * persists them: `customer_accounts` owns the row, so its lifecycle port
+     * runs the Command and this validator is the merge that port is handed.
+     */
+    customFieldValues?: CustomFieldValuePort;
+}
+export declare function registerCustomersAdminRoutes(app: FastifyInstance, deps: CustomersAdminDeps): Promise<void>;
+//# sourceMappingURL=routes.admin.d.ts.map

package/dist/backend/routes.admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.d.ts","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAYL,KAAK,aAAa,EAClB,KAAK,iCAAiC,EACtC,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,YAAY,EAClB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAmBlE;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAC9B,UAAU,CAAC,EAAE,MAAM,KAChB,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAErE;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,CACnC,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,sBAAsB,EAAE,MAAM,EAAE,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,QAAQ,EAAE,uBAAuB,CAAC;IAClC,aAAa,EAAE,iCAAiC,CAAC;IACjD,YAAY,EAAE,iBAAiB,CAAC;IAChC,sBAAsB,EAAE,sBAAsB,CAAC;IAC/C,iBAAiB,EAAE,yBAAyB,CAAC;IAC7C,YAAY,EAAE,yBAAyB,CAAC;IACxC,oBAAoB,EAAE,4BAA4B,CAAC;IACnD,cAAc,EAAE,sBAAsB,CAAC;IACvC,gBAAgB,EAAE,aAAa,CAAC;IAChC;;;;OAIG;IACH,SAAS,EAAE,aAAa,CAAC;IACzB,UAAU,EAAE,eAAe,CAAC;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B;;;;;OAKG;IACH,oBAAoB,EAAE,iBAAiB,CAAC;IACxC,eAAe,EAAE,uBAAuB,CAAC;IACzC,eAAe,EAAE,uBAAuB,CAAC;IACzC,oBAAoB,EAAE,yBAAyB,CAAC;IAChD,MAAM,EAAE,eAAe,CAAC;IACxB,eAAe,EAAE,SAAS,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;CAC1C;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CAgbf"}