@endora-commerce/mod-delivery-methods 0.100.0

package/dist/backend/index.js

@@ -0,0 +1,144 @@
+import { lazyPort } from '@endora-commerce/platform/kernel';
+import { effectiveState } from '@endora-commerce/platform/kernel';
+import { builtInShippingAdapters } from './adapters/built-in-adapters.js';
+import { registerDeliveryMethodsAdminRoutes, registerDeliveryMethodsPublicRoutes, } from './routes.js';
+import { EnumOrderStatusRegistry } from './services/order-status-registry.port.js';
+import { shippingAdapterRegistry } from './services/registry-singleton.js';
+import { DeliveryMethodReadService } from './services/delivery-method-read-port.js';
+import { ShippingMethodEligibilityService } from './services/shipping-method-eligibility.js';
+import { makeShipmentUsageCounter } from './services/shipment-usage-guard.js';
+import { DeliveryMethod } from './entities/delivery-method.entity.js';
+export function registerModule(ctx) {
+    /**
+     * Feature 120 (FR-015) — the sales-channel membership bridge this module owns.
+     *
+     * The platform used to hold a map **total** over
+     * `ChannelMemberEntityTypeSchema`, naming this module's bridge table from
+     * inside the kernel. That is D-52/D-53's prohibition expressed in a contract
+     * instead of an import, and it meant a membership call for 'delivery-method' on an
+     * instance that never installed this module executed SQL against a relation
+     * that is not there (D-226). The module whose migration creates the table is
+     * the one that says where it is; a member nothing registers now refuses at
+     * the call instead.
+     *
+     * A **contribution** hook and deliberately **unprobed** (D-62/D-68): a
+     * registration is an inert statement about the schema rather than a
+     * capability, the rows outlive an operator switching this module off, and
+     * probing would make a runtime activation flip require a restart. It is
+     * declared first in this module so any later hook of its own that binds a
+     * membership finds the bridge already there.
+     */
+    ctx.onBoot(() => {
+        const { salesChannelBridgeRegistry } = ctx.cradle();
+        for (const bridge of salesChannelBridges)
+            salesChannelBridgeRegistry.register(bridge);
+    });
+    ctx.di.register({
+        shippingAdapterRegistry: ctx.asFunction(() => shippingAdapterRegistry).singleton(),
+        shippingMethodEligibility: ctx
+            .asFunction((cradle) => new ShippingMethodEligibilityService(cradle.shippingAdapterRegistry))
+            .singleton(),
+        shippingOrderStatusRegistry: ctx.asFunction(() => new EnumOrderStatusRegistry()).singleton(),
+    });
+    /**
+     * Feature 075, Phase P — the row-level read model.
+     *
+     * A **port**, unlike the registry registrations above. The distinction is
+     * the deactivation-consequence one: `shippingAdapterRegistry` is a
+     * contribution seam whose absent-owner policy lives inside it and whose
+     * edges classify as `contributes`, so a gate over the registration would
+     * withdraw the table rather than one contributor's entry. A read of this
+     * module's own table is nothing of the kind — with `delivery_methods` off, a
+     * caller asking which methods exist should be told the module is off.
+     */
+    ctx.di.providePort('deliveryMethodReadPort', ctx
+        .asFunction(({ emFactory }) => new DeliveryMethodReadService(emFactory))
+        .singleton());
+    ctx.routes(async (app) => {
+        const { emFactory, requireAdmin, shippingAdapterRegistry: registry, shippingMethodEligibility, shippingOrderStatusRegistry, } = ctx.cradle();
+        const membership = ctx.cradle().salesChannelMembershipPort;
+        /** Composed from the two halves, without a `catch` — see the payment twin. */
+        const resolveAllowList = async (req) => {
+            const cradle = ctx.cradle();
+            const organizationId = cradle.customerOrganizationIdResolver(req);
+            if (organizationId === null)
+                return null;
+            return cradle.organizationRestrictionPort.allowedIdsFor(organizationId, 'deliveryMethodIds');
+        };
+        await registerDeliveryMethodsPublicRoutes(app, {
+            emFactory,
+            registry,
+            eligibility: shippingMethodEligibility,
+            resolveOrganizationDeliveryMethodAllowList: resolveAllowList,
+        });
+        await registerDeliveryMethodsAdminRoutes(app, {
+            emFactory,
+            requireAdmin,
+            commandBus: ctx.cradle().commandBus,
+            registry,
+            orderStatusRegistry: shippingOrderStatusRegistry,
+            /**
+             * Feature 075 — the FR-003 delete guard, asked of the module that owns
+             * the rows instead of counting its table in raw SQL.
+             *
+             * The port is resolved **per call**, inside the counter, and only after
+             * `effectiveState` has answered: `lazyPort`'s proxy may not be captured
+             * into a singleton, and a gate resolved before the first request is one
+             * of the three fail-open shapes the deactivation-consequence ledger
+             * refuses. The edge is `nonBindingDependencies` rather than a
+             * dependency — see the manifest for why the cycle forbids the ordinary
+             * declaration, and `shipment-usage-guard.ts` for what absence means.
+             */
+            countShipmentsForMethod: makeShipmentUsageCounter({
+                isShipmentsPresent: () => effectiveState.isPresent('shipments'),
+                shipmentUsage: () => lazyPort(ctx, 'shipmentUsagePort'),
+            }),
+            ...(membership === undefined ? {} : { salesChannelMembership: membership }),
+        });
+    });
+    /**
+     * The two shipping kinds this module implements, pushed into the registry it
+     * holds — from a boot hook rather than from the registry's own factory
+     * (issue #96).
+     *
+     * Seeding inside the factory tied "which adapters exist" to whoever resolved
+     * the name first, and left the entries unowned: nothing recorded that these
+     * two came from this module, so the enumeration had nothing to filter on when
+     * an operator switched a contributor off. A boot hook runs once per
+     * composition, regardless of effective state, which is exactly the D-39
+     * contract — the push is ungated, the *enumeration* answers presence.
+     */
+    ctx.onBoot(() => {
+        const registry = ctx.cradle().shippingAdapterRegistry;
+        for (const adapter of builtInShippingAdapters()) {
+            registry.register(adapter, 'delivery_methods');
+        }
+    });
+}
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export const entities = [
+    DeliveryMethod,
+];
+/**
+ * The sales-channel membership bridge this module owns (feature 120, FR-015).
+ *
+ * Exported as well as registered because the owning module is the only honest
+ * source for it: a caller that composes no platform — the bare-database test
+ * harness, which constructs the kernel's membership service directly — declares
+ * these from here rather than from a list of nine it keeps itself, which is
+ * exactly the total map this feature deleted.
+ */
+export const salesChannelBridges = [
+    { entityType: 'delivery-method', table: 'sales_channel_delivery_methods', entityIdColumn: 'delivery_method_id' },
+];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAIlE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EACL,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAwDtE,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C;;;;;;;;;;;;;;;;;;OAkBG;IACH,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,MAAM,EAAE,0BAA0B,EAAE,GAAG,GAAG,CAAC,MAAM,EAAyB,CAAC;QAC3E,KAAK,MAAM,MAAM,IAAI,mBAAmB;YAAE,0BAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACd,uBAAuB,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,CAAC,SAAS,EAAE;QAElF,yBAAyB,EAAE,GAAG;aAC3B,UAAU,CACT,CAAC,MAA6B,EAAE,EAAE,CAChC,IAAI,gCAAgC,CAAC,MAAM,CAAC,uBAAuB,CAAC,CACvE;aACA,SAAS,EAAE;QAEd,2BAA2B,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,uBAAuB,EAAE,CAAC,CAAC,SAAS,EAAE;KAE7F,CAAC,CAAC;IAEH;;;;;;;;;;OAUG;IACH,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,wBAAwB,EACxB,GAAG;SACA,UAAU,CACT,CAAC,EAAE,SAAS,EAAyB,EAAE,EAAE,CAAC,IAAI,yBAAyB,CAAC,SAAS,CAAC,CACnF;SACA,SAAS,EAAE,CACf,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,EACJ,SAAS,EACT,YAAY,EACZ,uBAAuB,EAAE,QAAQ,EACjC,yBAAyB,EACzB,2BAA2B,GAC5B,GAAG,GAAG,CAAC,MAAM,EAAyB,CAAC;QACxC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,EAAyB,CAAC,0BAA0B,CAAC;QAElF,8EAA8E;QAC9E,MAAM,gBAAgB,GAAG,KAAK,EAAE,GAAmB,EAA4B,EAAE;YAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAyB,CAAC;YACnD,MAAM,cAAc,GAAG,MAAM,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC;YAClE,IAAI,cAAc,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACzC,OAAO,MAAM,CAAC,2BAA2B,CAAC,aAAa,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;QAC/F,CAAC,CAAC;QAEF,MAAM,mCAAmC,CAAC,GAAG,EAAE;YAC7C,SAAS;YACT,QAAQ;YACR,WAAW,EAAE,yBAAyB;YACtC,0CAA0C,EAAE,gBAAgB;SAC7D,CAAC,CAAC;QAEH,MAAM,kCAAkC,CAAC,GAAG,EAAE;YAC5C,SAAS;YACT,YAAY;YACZ,UAAU,EAAE,GAAG,CAAC,MAAM,EAAyB,CAAC,UAAU;YAC1D,QAAQ;YACR,mBAAmB,EAAE,2BAA2B;YAChD;;;;;;;;;;;eAWG;YACH,uBAAuB,EAAE,wBAAwB,CAAC;gBAChD,kBAAkB,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,WAAW,CAAC;gBAC/D,aAAa,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAoB,GAAG,EAAE,mBAAmB,CAAC;aAC3E,CAAC;YACF,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,UAAU,EAAE,CAAC;SAC5E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;;;;;;;;OAWG;IACH,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAyB,CAAC,uBAAuB,CAAC;QAC7E,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,EAAE,CAAC;YAChD,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,cAAc;CACf,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAI3B;IACH,EAAE,UAAU,EAAE,iBAAiB,EAAE,KAAK,EAAE,gCAAgC,EAAE,cAAc,EAAE,oBAAoB,EAAE;CACjH,CAAC"}

package/dist/backend/routes.d.ts

@@ -0,0 +1,51 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { CommandBus } from '@endora-commerce/platform/commands';
+import { type ShipmentUsageCounter } from './commands/delivery-method.commands.js';
+import type { SalesChannelMembershipPort } from '@endora-commerce/platform/kernel';
+import type { ShippingAdapterRegistry } from './services/shipping-adapter-registry.js';
+import type { ShippingMethodEligibilityService } from './services/shipping-method-eligibility.js';
+import { type OrderStatusRegistry } from './services/order-status-registry.port.js';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+/**
+ * Delivery-method catalog routes (feature 035 — adapter framework).
+ *
+ * Public read endpoint lists active, eligible methods for storefront checkout;
+ * admin mutation lives under `/api/v1/admin/delivery-methods`. Eligibility
+ * validators (validateUseOnStorefront) + registered-adapter filtering are
+ * layered on by the eligibility service; the org allow-list filter is retained.
+ */
+export interface DeliveryMethodsPublicDeps {
+    emFactory: () => EntityManager;
+    /**
+     * Feature 026 US4 — per-Organization allow-list of delivery-method IDs.
+     * Empty / null ⇒ platform defaults apply (every active method is offered).
+     */
+    resolveOrganizationDeliveryMethodAllowList?: (req: FastifyRequest) => Promise<string[] | null>;
+    /** Feature 035 — resolves a method's storefront renderer key. */
+    registry?: ShippingAdapterRegistry;
+    /** Feature 035 — applies adapter `validateUseOnStorefront` + registered-adapter filtering. */
+    eligibility?: ShippingMethodEligibilityService;
+}
+export interface DeliveryMethodsAdminDeps {
+    emFactory: () => EntityManager;
+    requireAdmin: RequireAdminFactory;
+    /** Issue #125 — the two admin writes run on the bus (Principle XIII). */
+    commandBus: CommandBus;
+    /** Feature 005 / T027b — new delivery methods auto-bind to the system default. */
+    salesChannelMembership?: SalesChannelMembershipPort;
+    /** Feature 035 — validates `adapter` against the registered adapters. */
+    registry?: ShippingAdapterRegistry;
+    /** Feature 035 — validates `statusOn*` references + powers /admin/order-statuses. */
+    orderStatusRegistry?: OrderStatusRegistry;
+    /**
+     * Feature 075 — the FR-003 delete guard's count, asked of `shipments` because
+     * the rows are its own. Required, not optional: a guard that can be left out
+     * is a guard that silently is, and it is the only thing protecting shipment
+     * history from a delete (there is no foreign key).
+     */
+    countShipmentsForMethod: ShipmentUsageCounter;
+}
+export declare function registerDeliveryMethodsPublicRoutes(app: FastifyInstance, deps: DeliveryMethodsPublicDeps): Promise<void>;
+export declare function registerDeliveryMethodsAdminRoutes(app: FastifyInstance, deps: DeliveryMethodsAdminDeps): Promise<void>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/backend/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/backend/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,wCAAwC,CAAC;AAEhD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAClG,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B;;;OAGG;IACH,0CAA0C,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/F,iEAAiE;IACjE,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,8FAA8F;IAC9F,WAAW,CAAC,EAAE,gCAAgC,CAAC;CAChD;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,YAAY,EAAE,mBAAmB,CAAC;IAClC,yEAAyE;IACzE,UAAU,EAAE,UAAU,CAAC;IACvB,kFAAkF;IAClF,sBAAsB,CAAC,EAAE,0BAA0B,CAAC;IACpD,yEAAyE;IACzE,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,qFAAqF;IACrF,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C;;;;;OAKG;IACH,uBAAuB,EAAE,oBAAoB,CAAC;CAC/C;AAMD,wBAAsB,mCAAmC,CACvD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA2Bf;AAED,wBAAsB,kCAAkC,CACtD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,IAAI,CAAC,CA2Ff"}

package/dist/backend/routes.js

@@ -0,0 +1,152 @@
+import { ERROR_CODES, deliveryMethodUpsertSchema } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { makeDeleteDeliveryMethodCommand, makeUpsertDeliveryMethodCommand, } from './commands/delivery-method.commands.js';
+import { DeliveryMethod } from './entities/delivery-method.entity.js';
+import { OrderStatusRegistryError, } from './services/order-status-registry.port.js';
+function rendererKeyFor(deps, adapter) {
+    return deps.registry?.get(adapter)?.renderers?.storefront ?? null;
+}
+export async function registerDeliveryMethodsPublicRoutes(app, deps) {
+    app.get('/api/v1/delivery-methods', async (request) => {
+        const em = deps.emFactory();
+        let rows = await em.find(DeliveryMethod, { status: 'active' }, { orderBy: { code: 'asc' } });
+        // Feature 026 US4 — intersect with the Organization's delivery-method
+        // allow-list when one is configured.
+        if (deps.resolveOrganizationDeliveryMethodAllowList) {
+            const allowList = await deps.resolveOrganizationDeliveryMethodAllowList(request);
+            if (allowList && allowList.length > 0) {
+                const allowSet = new Set(allowList);
+                rows = rows.filter((m) => allowSet.has(m.id));
+            }
+        }
+        // Feature 035 — adapter validateUseOnStorefront + registered-adapter filter.
+        if (deps.eligibility) {
+            rows = await deps.eligibility.filter(rows, {
+                salesChannelId: null,
+                organizationId: null,
+                customerAccountId: null,
+                surface: 'storefront',
+            });
+        }
+        return { data: rows.map((m) => serializeDeliveryMethod(m, deps)) };
+    });
+}
+export async function registerDeliveryMethodsAdminRoutes(app, deps) {
+    const requireAdmin = deps.requireAdmin;
+    app.get('/api/v1/admin/delivery-methods', { preHandler: requireAdmin('delivery_methods:read') }, async () => {
+        const em = deps.emFactory();
+        const rows = await em.find(DeliveryMethod, {}, { orderBy: { code: 'asc' } });
+        const data = await Promise.all(rows.map((m) => serializeAdmin(m, deps)));
+        return { data };
+    });
+    // Note: `GET /api/v1/admin/order-statuses` is registered once by the
+    // payment-methods admin routes (same OrderStatusRegistry data); the admin
+    // delivery-methods page reuses that endpoint for its status selectors. Since
+    // this module took its own codes it is gated
+    // `requireAdminAny(['payment_methods:read', 'delivery_methods:read'])` — an
+    // any-of over the two editors' read codes, so whichever screen an operator
+    // may open, the shared status list opens with it.
+    app.put('/api/v1/admin/delivery-methods/:code', {
+        preHandler: requireAdmin('delivery_methods:write'),
+        schema: { body: deliveryMethodUpsertSchema },
+    }, async (request) => {
+        const body = deliveryMethodUpsertSchema.parse(request.body);
+        const em = deps.emFactory();
+        // Only hard-reject an *explicitly* provided unknown adapter. A row whose
+        // derived adapter is not registered is retained but excluded from
+        // selection by the eligibility filter (FR-003), so admins can still
+        // manage catalog rows whose adapter module is currently disabled.
+        if (body.adapter !== undefined && deps.registry && !deps.registry.isRegistered(body.adapter)) {
+            throw new HttpError(400, ERROR_CODES.VALIDATION_FAILED, `Unknown shipping adapter "${body.adapter}". Register an adapter module first.`);
+        }
+        // Validate any explicitly-provided Order-status references (FR-008).
+        if (deps.orderStatusRegistry) {
+            for (const ref of [body.statusOnSuccess, body.statusOnFailure]) {
+                if (ref !== undefined)
+                    assertValidStatus(deps.orderStatusRegistry, ref);
+            }
+        }
+        // The read below only tells the Command whether this call creates or
+        // updates; the write itself happens inside the bus transaction, which is
+        // also where the adapter is resolved against the row it finds (#125).
+        const existing = await em.findOne(DeliveryMethod, { code: request.params.code });
+        const { method: row, created: isNew } = await deps.commandBus.run(makeUpsertDeliveryMethodCommand({
+            code: request.params.code,
+            body,
+            existingId: existing?.id ?? null,
+        }));
+        // Channel membership is the sales-channel bridge's own write, on its own
+        // EntityManager, so it stays outside the Command rather than pretending to
+        // share its transaction.
+        if (isNew && deps.salesChannelMembership) {
+            await deps.salesChannelMembership.bindToDefaultIfEmpty('delivery-method', row.id);
+        }
+        // Replace sales-channel membership when an explicit (non-empty) set is given.
+        if (body.salesChannelIds && body.salesChannelIds.length > 0 && deps.salesChannelMembership) {
+            await replaceChannelMembership(deps.salesChannelMembership, row.id, body.salesChannelIds);
+        }
+        return { data: await serializeAdmin(row, deps) };
+    });
+    app.delete('/api/v1/admin/delivery-methods/:id', { preHandler: requireAdmin('delivery_methods:write') }, async (request, reply) => {
+        // The 404 and the delete-guard (FR-003) live inside the Command, so a
+        // method that is gone is answered before another module is asked about
+        // it. The count itself comes from `shipments` — see the Command's
+        // `ShipmentUsageCounter` for why it no longer runs on this transaction.
+        await deps.commandBus.run(makeDeleteDeliveryMethodCommand(request.params.id, deps.countShipmentsForMethod));
+        return reply.status(204).send();
+    });
+}
+function assertValidStatus(registry, ref) {
+    try {
+        registry.assertValid(ref);
+    }
+    catch (err) {
+        if (err instanceof OrderStatusRegistryError) {
+            throw new HttpError(400, ERROR_CODES.VALIDATION_FAILED, `Unknown order status "${ref}".`);
+        }
+        throw err;
+    }
+}
+async function replaceChannelMembership(membership, methodId, desiredChannelIds) {
+    const current = await membership.listChannelsForEntity('delivery-method', methodId);
+    const currentIds = new Set(current.map((c) => c.id));
+    const desired = new Set(desiredChannelIds);
+    // Add first so a later removal never transiently leaves zero channels.
+    for (const id of desired) {
+        if (!currentIds.has(id))
+            await membership.addToChannel(id, 'delivery-method', methodId);
+    }
+    for (const id of currentIds) {
+        if (!desired.has(id))
+            await membership.removeFromChannel(id, 'delivery-method', methodId);
+    }
+}
+function serializeDeliveryMethod(m, deps) {
+    return {
+        id: m.id,
+        code: m.code,
+        name: m.name,
+        adapter: m.adapter,
+        cost: { amount: Number(m.cost), currency: m.currency },
+        status: m.status,
+        rendererKey: rendererKeyFor(deps, m.adapter),
+    };
+}
+async function serializeAdmin(m, deps) {
+    const channels = deps.salesChannelMembership
+        ? await deps.salesChannelMembership.listChannelsForEntity('delivery-method', m.id)
+        : [];
+    return {
+        id: m.id,
+        code: m.code,
+        adapter: m.adapter,
+        name: m.name,
+        cost: { amount: Number(m.cost), currency: m.currency },
+        status: m.status,
+        statusOnSuccess: m.statusOnSuccess,
+        statusOnFailure: m.statusOnFailure,
+        salesChannelIds: channels.map((c) => c.id),
+        rendererKey: deps.registry?.get(m.adapter)?.renderers?.admin ?? null,
+    };
+}
+//# sourceMappingURL=routes.js.map

package/dist/backend/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/backend/routes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAE3D,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,GAEhC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAItE,OAAO,EACL,wBAAwB,GAEzB,MAAM,0CAA0C,CAAC;AA4ClD,SAAS,cAAc,CAAC,IAA4C,EAAE,OAAe;IACnF,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,UAAU,IAAI,IAAI,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,GAAoB,EACpB,IAA+B;IAE/B,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAE7F,sEAAsE;QACtE,qCAAqC;QACrC,IAAI,IAAI,CAAC,0CAA0C,EAAE,CAAC;YACpD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0CAA0C,CAAC,OAAO,CAAC,CAAC;YACjF,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;gBACpC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE;gBACzC,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,IAAI;gBACpB,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE,YAAY;aACtB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,GAAoB,EACpB,IAA8B;IAE9B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IAEvC,GAAG,CAAC,GAAG,CACL,gCAAgC,EAChC,EAAE,UAAU,EAAE,YAAY,CAAC,uBAAuB,CAAC,EAAE,EACrD,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CACF,CAAC;IAEF,qEAAqE;IACrE,0EAA0E;IAC1E,6EAA6E;IAC7E,6CAA6C;IAC7C,4EAA4E;IAC5E,2EAA2E;IAC3E,kDAAkD;IAElD,GAAG,CAAC,GAAG,CACL,sCAAsC,EACtC;QACE,UAAU,EAAE,YAAY,CAAC,wBAAwB,CAAC;QAClD,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE;KAC7C,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,yEAAyE;QACzE,kEAAkE;QAClE,oEAAoE;QACpE,kEAAkE;QAClE,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,iBAAiB,EAC7B,6BAA6B,IAAI,CAAC,OAAO,sCAAsC,CAChF,CAAC;QACJ,CAAC;QACD,qEAAqE;QACrE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC/D,IAAI,GAAG,KAAK,SAAS;oBAAE,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAC/D,+BAA+B,CAAC;YAC9B,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;YACzB,IAAI;YACJ,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI;SACjC,CAAC,CACH,CAAC;QAEF,yEAAyE;QACzE,2EAA2E;QAC3E,yBAAyB;QACzB,IAAI,KAAK,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,8EAA8E;QAC9E,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC3F,MAAM,wBAAwB,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5F,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;IACnD,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CACR,oCAAoC,EACpC,EAAE,UAAU,EAAE,YAAY,CAAC,wBAAwB,CAAC,EAAE,EACtD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,sEAAsE;QACtE,uEAAuE;QACvE,kEAAkE;QAClE,wEAAwE;QACxE,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CACvB,+BAA+B,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,uBAAuB,CAAC,CACjF,CAAC;QACF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA6B,EAAE,GAAW;IACnE,IAAI,CAAC;QACH,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,yBAAyB,GAAG,IAAI,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,UAAsC,EACtC,QAAgB,EAChB,iBAA2B;IAE3B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,qBAAqB,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3C,uEAAuE;IACvE,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,UAAU,CAAC,YAAY,CAAC,EAAE,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAC1F,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,UAAU,CAAC,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,CAAiB,EAAE,IAA4C;IAC9F,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtD,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,CAAiB,EAAE,IAA8B;IAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB;QAC1C,CAAC,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,CAAC;QAClF,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtD,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI;KACrE,CAAC;AACJ,CAAC"}

package/dist/backend/services/delivery-method-read-port.d.ts

@@ -0,0 +1,25 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { DeliveryMethodReadPort, DeliveryMethodRecord } from '@endora-commerce/contracts';
+import { DeliveryMethod } from '../entities/delivery-method.entity.js';
+/**
+ * The row-level read model `delivery_methods` publishes (feature 075, Phase P).
+ *
+ * Five of the thirteen inbound sites read the entity: `orders` resolving the
+ * method at placement, `shipments` resolving it at dispatch and again in its
+ * receive handler, `quick_order` resolving a buyer's default, and the dev
+ * seed.
+ *
+ * `cost` stays a decimal string — it lands verbatim in the order's
+ * `deliveryMethodSnapshot`, and a `number` cannot round-trip it.
+ */
+export declare class DeliveryMethodReadService implements DeliveryMethodReadPort {
+    private readonly emFactory;
+    constructor(emFactory: () => EntityManager);
+    findById(id: string): Promise<DeliveryMethodRecord | null>;
+    findByIds(ids: readonly string[]): Promise<DeliveryMethodRecord[]>;
+    findByCode(code: string): Promise<DeliveryMethodRecord | null>;
+    listAll(): Promise<DeliveryMethodRecord[]>;
+    listActive(): Promise<DeliveryMethodRecord[]>;
+}
+export declare function toDeliveryMethodRecord(method: DeliveryMethod): DeliveryMethodRecord;
+//# sourceMappingURL=delivery-method-read-port.d.ts.map

package/dist/backend/services/delivery-method-read-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-method-read-port.d.ts","sourceRoot":"","sources":["../../../src/backend/services/delivery-method-read-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAEvE;;;;;;;;;;GAUG;AACH,qBAAa,yBAA0B,YAAW,sBAAsB;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM,aAAa;IAErD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAK1D,SAAS,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAMlE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAK9D,OAAO,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAK1C,UAAU,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;CAQpD;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,oBAAoB,CAcnF"}

package/dist/backend/services/delivery-method-read-port.js

@@ -0,0 +1,56 @@
+import { DeliveryMethod } from '../entities/delivery-method.entity.js';
+/**
+ * The row-level read model `delivery_methods` publishes (feature 075, Phase P).
+ *
+ * Five of the thirteen inbound sites read the entity: `orders` resolving the
+ * method at placement, `shipments` resolving it at dispatch and again in its
+ * receive handler, `quick_order` resolving a buyer's default, and the dev
+ * seed.
+ *
+ * `cost` stays a decimal string — it lands verbatim in the order's
+ * `deliveryMethodSnapshot`, and a `number` cannot round-trip it.
+ */
+export class DeliveryMethodReadService {
+    emFactory;
+    constructor(emFactory) {
+        this.emFactory = emFactory;
+    }
+    async findById(id) {
+        const method = await this.emFactory().findOne(DeliveryMethod, { id });
+        return method ? toDeliveryMethodRecord(method) : null;
+    }
+    async findByIds(ids) {
+        if (ids.length === 0)
+            return [];
+        const methods = await this.emFactory().find(DeliveryMethod, { id: { $in: [...ids] } });
+        return methods.map(toDeliveryMethodRecord);
+    }
+    async findByCode(code) {
+        const method = await this.emFactory().findOne(DeliveryMethod, { code });
+        return method ? toDeliveryMethodRecord(method) : null;
+    }
+    async listAll() {
+        const methods = await this.emFactory().find(DeliveryMethod, {}, { orderBy: { code: 'asc' } });
+        return methods.map(toDeliveryMethodRecord);
+    }
+    async listActive() {
+        const methods = await this.emFactory().find(DeliveryMethod, { status: 'active' }, { orderBy: { code: 'asc' } });
+        return methods.map(toDeliveryMethodRecord);
+    }
+}
+export function toDeliveryMethodRecord(method) {
+    return {
+        id: method.id,
+        code: method.code,
+        name: method.name,
+        cost: method.cost,
+        currency: method.currency,
+        status: method.status,
+        adapter: method.adapter,
+        statusOnSuccess: method.statusOnSuccess,
+        statusOnFailure: method.statusOnFailure,
+        createdAt: method.createdAt,
+        updatedAt: method.updatedAt,
+    };
+}
+//# sourceMappingURL=delivery-method-read-port.js.map

package/dist/backend/services/delivery-method-read-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-method-read-port.js","sourceRoot":"","sources":["../../../src/backend/services/delivery-method-read-port.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAEvE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,yBAAyB;IACP;IAA7B,YAA6B,SAA8B;QAA9B,cAAS,GAAT,SAAS,CAAqB;IAAG,CAAC;IAE/D,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAsB;QACpC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACvF,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9F,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CACzC,cAAc,EACd,EAAE,MAAM,EAAE,QAAQ,EAAE,EACpB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAC7B,CAAC;QACF,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAsB;IAC3D,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC"}

package/dist/backend/services/delivery-method-reconciler.d.ts

@@ -0,0 +1,97 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { DeliveryMethodSeedApi, DeliveryMethodSeedDefaults, DeliveryMethodSeedOutcome } from '../../ports/index.js';
+/**
+ * DeliveryMethodReconciler (feature 035, FR-002) — the implementation behind
+ * `DeliveryMethodSeedApi`, this module's published install surface
+ * (`../../ports/index.ts`, `createDeliveryMethodSeeder` below).
+ *
+ * A module that must create its `delivery_methods` row from code calls
+ * `ensureMethodForAdapter` from its **install hook**, so installing a
+ * shipping-method module surfaces a configurable entry at `/delivery-methods`
+ * with no core change. Idempotent and prune-safe: an existing row (matched by
+ * `code`) keeps its admin-edited configuration; the reconciler only fills a
+ * missing `adapter` link.
+ *
+ * The row and the adapter are contributed at **different moments, on purpose**.
+ * This row is durable state and is written once, at install; the adapter is an
+ * in-memory entry in a per-process table and is pushed from the contributing
+ * module's boot hook, on every composition (see `shipping-adapter-registry.ts`).
+ * Neither waits for the other: a row whose `adapter` key nothing has contributed
+ * is simply not offered, and the registry is not read until a request reads it.
+ *
+ * **The `EntityManager` is a parameter of every method and is never held**
+ * (feature 134, FR-064; D-169). It used to be a constructor `emFactory`, which is
+ * the shape of a service resolved from a container — and the caller this class
+ * was written for has no container: `ModuleLifecycleContext` is
+ * `{ em, redis, log, module }` and `module:install` composes nothing (D-46). The
+ * hook's own `ctx.em` is therefore what every statement here runs on, handed in
+ * at the call, so the write lands in the transaction the orchestrator will
+ * commit or revert rather than on a fork of it.
+ *
+ * **It no longer rebinds sales-channel membership (issue #96)** — see the
+ * payment twin (`payment_methods/services/payment-method-reconciler.ts`).
+ * `bindToDefaultChannel` exists, and is the seed's own *once, for the rows it
+ * creates* half rather than a reconcile: the caller guards it on
+ * `created === true`. What issue #96 removed was the unconditional call, which
+ * brought a method an operator had deliberately unbound from every channel back
+ * to Default at the next boot, and nothing said so. "Unbound" is a state an
+ * operator is entitled to reach and to keep.
+ */
+export declare class DeliveryMethodReconciler implements DeliveryMethodSeedApi {
+    ensureMethodForAdapter(em: EntityManager, adapterKey: string, defaults: DeliveryMethodSeedDefaults): Promise<DeliveryMethodSeedOutcome>;
+    /**
+     * The seed's channel binding — one membership row in the system-default
+     * channel, written against **this module's own** bridge table.
+     *
+     * Not through `SalesChannelMembershipService`, and the reason is structural
+     * rather than a preference: that service needs the `EventBus`, the audit port
+     * and the channel-bridge registry, and the registry is contributed from a boot
+     * hook. An install composes nothing, so at this seam it holds no registration
+     * for `'delivery-method'` and `bridges.require` would refuse (FR-017) before
+     * the database was touched. `sales_channel_delivery_methods` is this module's
+     * since `specs/120-migration-closure-bridge-ownership/` Phase 2 (D-226), so the
+     * statement is the owner's own and crosses no boundary — which is what FR-064
+     * buys by putting the writer here instead of in the seeding module.
+     *
+     * The channel itself is read through the kernel's own `SalesChannel` entity
+     * rather than in SQL — `api_keys` reads it the same way — because a raw
+     * `select … from "sales_channels"` from a module is a `check:module-boundary`
+     * finding against a kernel-owned table, and correctly so: the table is not
+     * this module's and the entity is the platform's published name for it.
+     *
+     * `em.execute` for the insert rather than `em.getConnection().execute`, so the
+     * statement runs inside the caller's transaction (issue #200). The bridge has
+     * no entity class — the kernel's membership service writes it in SQL too.
+     *
+     * **No system-default channel answers `false` rather than raising, and that is
+     * measured rather than defensive.** The default channel is created by
+     * `DefaultChannelReconciler` at **boot**, from `composeApp` — not by a migration
+     * and not by an install — and `module:install` composes nothing (D-46). So a
+     * database that has been migrated and never booted has no default channel, and
+     * a seeding module installed there is the ordinary case, not a broken instance:
+     * `pnpm --filter backend run db:fresh && module:install dhl_parcel` is exactly
+     * it. The seed migration this replaced degraded the same way, silently — its
+     * `cross join "sales_channels" where "system_default"` produced no rows and
+     * inserted no membership — so answering `false` is what keeps a fresh install
+     * and an upgraded one at the same row state in that state too. Raising instead
+     * **aborts the install**, and the hook is not inside a database transaction:
+     * measured on a throwaway database, the first of two rows stayed and the second
+     * never arrived.
+     */
+    bindToDefaultChannel(em: EntityManager, deliveryMethodId: string): Promise<boolean>;
+    /**
+     * The hard-uninstall half. Channel memberships go with the row: the bridge's
+     * foreign key onto `delivery_methods` is `on delete cascade`.
+     */
+    removeMethodForAdapter(em: EntityManager, code: string): Promise<boolean>;
+}
+/**
+ * The runtime half of this module's install surface (feature 134, FR-064).
+ *
+ * A seeding module's `installHook` writes `createDeliveryMethodSeeder()` and
+ * hands `ctx.em` to each call. The factory takes no arguments because the `em`
+ * belongs to the call and not to the seeder: one `em`, named at every statement,
+ * with no second source of truth for which transaction the write lands in.
+ */
+export declare function createDeliveryMethodSeeder(): DeliveryMethodSeedApi;
+//# sourceMappingURL=delivery-method-reconciler.d.ts.map

package/dist/backend/services/delivery-method-reconciler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-method-reconciler.d.ts","sourceRoot":"","sources":["../../../src/backend/services/delivery-method-reconciler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EACV,qBAAqB,EACrB,0BAA0B,EAC1B,yBAAyB,EAE1B,MAAM,sBAAsB,CAAC;AAG9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,qBAAa,wBAAyB,YAAW,qBAAqB;IAC9D,sBAAsB,CAC1B,EAAE,EAAE,aAAa,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,0BAA0B,GACnC,OAAO,CAAC,yBAAyB,CAAC;IA4BrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACG,oBAAoB,CAAC,EAAE,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAezF;;;OAGG;IACG,sBAAsB,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAOhF;AAoBD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,IAAI,qBAAqB,CAElE"}