@endora-commerce/mod-inventory 0.100.0

package/dist/backend/routes.js

@@ -0,0 +1,263 @@
+import { z } from 'zod';
+import { availabilityNotificationRequestSchema, inventoryDisplayModeSchema, isProductVisibleTo, } from '@endora-commerce/contracts';
+import { getResolvedChannel } from '@endora-commerce/platform/kernel';
+import { productAudienceOf } from '@endora-commerce/platform/http';
+import { StockLevel } from './entities/stock-level.entity.js';
+import { resolveDisplayBand } from './services/display-band-resolver.js';
+import { resolveThresholds } from './services/threshold-resolver.js';
+import { InventoryThreshold } from './entities/inventory-threshold.entity.js';
+import { INVENTORY_SETTING_CODES } from '../manifest.js';
+export async function registerInventoryRoutes(app, deps) {
+    const { emFactory, catalogProducts, catalogCategories, customerAccounts, availabilityService, requireCustomer, resolveCustomerContext, channelResolver, warehouseChannelService, settingsService, } = deps;
+    // ---------------------------------------------------------------------------
+    // Notify-when-available (foundation 001 backward-compat)
+    // ---------------------------------------------------------------------------
+    // Foundation 001 path — customer-only, pre-fills email from the
+    // customer account. Kept for backwards compatibility with any
+    // existing storefront/admin callers.
+    app.post('/api/v1/catalog/products/:id/notify-when-available', {
+        preHandler: requireCustomer,
+        schema: { body: availabilityNotificationRequestSchema.optional() },
+    }, async (request, reply) => {
+        const ctx = resolveCustomerContext(request);
+        const body = availabilityNotificationRequestSchema.parse(request.body ?? {});
+        const customerAccount = await customerAccounts.findById(ctx.customerAccountId);
+        if (!customerAccount) {
+            reply.status(403);
+            return {
+                error: { code: 'FORBIDDEN', message: 'Unknown customer account', requestId: request.id },
+            };
+        }
+        const subscription = await availabilityService.subscribe({
+            customerAccountId: ctx.customerAccountId,
+            email: customerAccount.email,
+            productId: request.params.id,
+            variantId: body.variantId ?? null,
+            // Issue #227 — off the actor the auth plugin resolved rather than off
+            // the customer context above: `productAudienceOf` is the one helper the
+            // six modules that serve a product to a buyer share, so an account with
+            // no organisation cannot be answered differently here than next door.
+            audience: productAudienceOf(request),
+        });
+        reply.status(202);
+        return {
+            data: {
+                subscriptionId: subscription.id,
+                requestedAt: subscription.requestedAt.toISOString(),
+            },
+        };
+    });
+    // Feature 010 / US6 — public path that accepts both anonymous and
+    // authenticated callers. Email is supplied by the body; the storefront
+    // pre-fills it from the customer account on the client side when a
+    // session exists. Threaded auth is intentionally optional so the
+    // anonymous Notify-when-available flow does not require a sign-in.
+    app.post('/api/v1/storefront/inventory/notify-when-available', {
+        schema: {
+            body: z.object({
+                productId: z.string().uuid(),
+                email: z.string().email(),
+                variantId: z.string().uuid().nullable().optional(),
+            }),
+        },
+    }, async (request, reply) => {
+        const body = request.body;
+        // Best-effort customer-account binding: when the request happens
+        // to carry a valid customer context, link the row so the admin
+        // queue browser shows the customer id alongside the email.
+        let customerAccountId = null;
+        try {
+            const ctx = resolveCustomerContext(request);
+            customerAccountId = ctx.customerAccountId;
+        }
+        catch {
+            customerAccountId = null;
+        }
+        const subscription = await availabilityService.subscribe({
+            productId: body.productId,
+            email: body.email,
+            variantId: body.variantId ?? null,
+            customerAccountId,
+            // Issue #227 — and deliberately **not** derived from the `try` above.
+            // That block answers "which account owns the row", and it swallows its
+            // failure; an audience derived from it would read as anonymous for a
+            // caller the platform did in fact identify, and worse, would silently
+            // become whatever a future edit to that `catch` made it.
+            // `productAudienceOf` reads the actor and nothing else.
+            audience: productAudienceOf(request),
+        });
+        reply.status(202);
+        return {
+            data: {
+                subscriptionId: subscription.id,
+                requestedAt: subscription.requestedAt.toISOString(),
+            },
+        };
+    });
+    // ---------------------------------------------------------------------------
+    // Storefront-public display-mode (US5)
+    // ---------------------------------------------------------------------------
+    app.get('/api/v1/storefront/inventory/display-mode', async (request) => {
+        const channelId = await resolveChannelId(request, channelResolver);
+        const mode = await readDisplayMode(channelId, settingsService);
+        return { data: { displayMode: mode } };
+    });
+    // ---------------------------------------------------------------------------
+    // Storefront-public per-product stock (US3 + US5)
+    // ---------------------------------------------------------------------------
+    app.get('/api/v1/storefront/inventory/stock/:id', async (request, reply) => {
+        const productId = request.params.id;
+        const em = emFactory();
+        const product = await catalogProducts.findById(productId);
+        // Issue #227 — this route is anonymous and answers "how many of this
+        // product are there". Both halves of that are a disclosure about a
+        // product an operator restricted: that it exists, and how it is selling.
+        if (!product || !isProductVisibleTo(product, productAudienceOf(request))) {
+            reply.status(404);
+            return {
+                error: {
+                    code: 'PRODUCT_NOT_FOUND',
+                    message: 'Product not found',
+                    requestId: request.id,
+                },
+            };
+        }
+        const channelId = await resolveChannelId(request, channelResolver);
+        let candidateWarehouseIds = warehouseChannelService
+            ? await warehouseChannelService.resolveCandidateWarehouseIds(channelId)
+            : [];
+        // Feature 026 US4 — intersect with the caller's Organization allow-
+        // list when one is configured. Empty per-org assignment (or no
+        // resolver wired) falls through to the platform defaults above.
+        if (deps.resolveOrganizationWarehouseAllowList) {
+            const allowList = await deps.resolveOrganizationWarehouseAllowList(request);
+            if (allowList && allowList.length > 0) {
+                const allowSet = new Set(allowList);
+                if (candidateWarehouseIds.length === 0) {
+                    candidateWarehouseIds = [...allowSet];
+                }
+                else {
+                    candidateWarehouseIds = candidateWarehouseIds.filter((id) => allowSet.has(id));
+                }
+            }
+        }
+        let cumulativeOnHand = 0;
+        if (candidateWarehouseIds.length > 0) {
+            // `em.execute`, not `em.getKnex()`: a knex handle takes its own pooled
+            // connection, so this sum would answer from outside any transaction a
+            // caller holds open while the `em.find` fallback below answers from
+            // inside it — one route, two views of `stock_levels` (issue #207).
+            const placeholders = candidateWarehouseIds.map(() => '?').join(', ');
+            const sumRows = (await em.execute(`select sum(on_hand) as on_hand
+             from stock_levels
+            where product_id = ? and warehouse_id in (${placeholders})`, [productId, ...candidateWarehouseIds]));
+            cumulativeOnHand = Number(sumRows[0]?.on_hand ?? 0);
+        }
+        else {
+            // Fallback when no channel binding is wired yet.
+            const rows = await em.find(StockLevel, { productId });
+            cumulativeOnHand = rows.reduce((s, r) => s + r.onHand, 0);
+        }
+        const displayMode = await readDisplayMode(channelId, settingsService);
+        const globalThresholds = await loadGlobalThresholds(em);
+        const productThresholds = await loadProductThresholdsRow(em, productId);
+        // Asked of `catalog`, not joined out of its `product_categories` table:
+        // the bridge row is the owner's and the port has answered for it since
+        // D-87 (feature 075, the `inventory` shard). The `findByIds` on the next
+        // line was already going to the owner for the threshold columns — this is
+        // the first half of the same question arriving at the same place.
+        const assignments = await catalogCategories.listAssignmentsForProducts([productId]);
+        const categoryIds = assignments.map((a) => a.categoryId);
+        const categories = await catalogCategories.findByIds(categoryIds);
+        const categoryThresholds = categories.map((c) => ({
+            high: c.inventoryThresholdHigh,
+            medium: c.inventoryThresholdMedium,
+            low: c.inventoryThresholdLow,
+        }));
+        const thresholds = resolveThresholds({
+            productThresholds,
+            categoryThresholds,
+            globalThresholds,
+        });
+        const displayBand = resolveDisplayBand({
+            manageStock: product.manageStock,
+            cumulativeOnHand,
+            thresholds,
+        });
+        // Effective backorder = per-product flag AND the global negative-stock
+        // gate; this is what order placement enforces, so the storefront must
+        // not advertise backorder when the global gate is off.
+        const allowNegativeStock = await readAllowNegativeStock(channelId, settingsService);
+        const effectiveBackorderEnabled = product.backorderEnabled && allowNegativeStock;
+        const isOutOfStock = product.manageStock && cumulativeOnHand <= 0;
+        const showNotifyButton = product.manageStock &&
+            !effectiveBackorderEnabled &&
+            cumulativeOnHand <= 0;
+        const payload = {
+            productId,
+            manageStock: product.manageStock,
+            backorderEnabled: effectiveBackorderEnabled,
+            displayMode,
+            displayBand,
+            exactOnHand: displayMode === 'exact' ? cumulativeOnHand : null,
+            isOutOfStock,
+            showNotifyButton,
+        };
+        return { data: payload };
+    });
+}
+async function resolveChannelId(request, _resolver) {
+    // The canonical sales-channel resolver middleware already performed
+    // header/host/system-default resolution and active-channel validation on
+    // this request path, so simply read the resolved channel's id.
+    return getResolvedChannel(request).id;
+}
+async function readDisplayMode(channelId, settingsService) {
+    if (settingsService && channelId) {
+        try {
+            const value = await settingsService.get(INVENTORY_SETTING_CODES.DISPLAY_MODE, channelId, inventoryDisplayModeSchema);
+            return value;
+        }
+        catch {
+            // fall through
+        }
+    }
+    return 'band';
+}
+/**
+ * Global backorder gate (`inventory.allow_negative_stock`) for a channel.
+ * Mirrors `readDisplayMode`: per-channel value → global value → manifest
+ * default (false). Failures degrade to false so the storefront never
+ * promises a backorder the order placement would reject.
+ */
+async function readAllowNegativeStock(channelId, settingsService) {
+    if (settingsService && channelId) {
+        try {
+            const { z } = await import('zod');
+            return await settingsService.get(INVENTORY_SETTING_CODES.ALLOW_NEGATIVE_STOCK, channelId, z.boolean());
+        }
+        catch {
+            // fall through
+        }
+    }
+    return false;
+}
+async function loadGlobalThresholds(em) {
+    const row = await em.findOne(InventoryThreshold, { scopeKind: 'global', scopeId: null });
+    return {
+        high: row?.thresholdHigh ?? 100,
+        medium: row?.thresholdMedium ?? 20,
+        low: row?.thresholdLow ?? 1,
+    };
+}
+async function loadProductThresholdsRow(em, productId) {
+    const row = await em.findOne(InventoryThreshold, { scopeKind: 'product', scopeId: productId });
+    if (!row)
+        return null;
+    return {
+        high: row.thresholdHigh ?? null,
+        medium: row.thresholdMedium ?? null,
+        low: row.thresholdLow ?? null,
+    };
+}
+//# sourceMappingURL=routes.js.map

package/dist/backend/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/backend/routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,qCAAqC,EACrC,0BAA0B,EAC1B,kBAAkB,GAMnB,MAAM,4BAA4B,CAAC;AAMpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAkCzD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAoB,EACpB,IAAyB;IAEzB,MAAM,EACJ,SAAS,EACT,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,uBAAuB,EACvB,eAAe,GAChB,GAAG,IAAI,CAAC;IAET,8EAA8E;IAC9E,yDAAyD;IACzD,8EAA8E;IAE9E,gEAAgE;IAChE,8DAA8D;IAC9D,qCAAqC;IACrC,GAAG,CAAC,IAAI,CACN,oDAAoD,EACpD;QACE,UAAU,EAAE,eAAe;QAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,qCAAqC,CAAC,QAAQ,EAAE,EAAE;KACnE,EACD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,qCAAqC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7E,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/E,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClB,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,0BAA0B,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE;aACzF,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC;YACvD,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,KAAK,EAAE,eAAe,CAAC,KAAK;YAC5B,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;YACjC,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,sEAAsE;YACtE,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO;YACL,IAAI,EAAE;gBACJ,cAAc,EAAE,YAAY,CAAC,EAAE;gBAC/B,WAAW,EAAE,YAAY,CAAC,WAAW,CAAC,WAAW,EAAE;aACpD;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,kEAAkE;IAClE,uEAAuE;IACvE,mEAAmE;IACnE,iEAAiE;IACjE,mEAAmE;IACnE,GAAG,CAAC,IAAI,CACN,oDAAoD,EACpD;QACE,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBACb,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;gBAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;gBACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;aACnD,CAAC;SACH;KACF,EACD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAuE,CAAC;QAC7F,iEAAiE;QACjE,+DAA+D;QAC/D,2DAA2D;QAC3D,IAAI,iBAAiB,GAAkB,IAAI,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAC5C,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC;YACvD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;YACjC,iBAAiB;YACjB,sEAAsE;YACtE,uEAAuE;YACvE,qEAAqE;YACrE,sEAAsE;YACtE,yDAAyD;YACzD,wDAAwD;YACxD,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO;YACL,IAAI,EAAE;gBACJ,cAAc,EAAE,YAAY,CAAC,EAAE;gBAC/B,WAAW,EAAE,YAAY,CAAC,WAAW,CAAC,WAAW,EAAE;aACpD;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,8EAA8E;IAC9E,uCAAuC;IACvC,8EAA8E;IAE9E,GAAG,CAAC,GAAG,CAAC,2CAA2C,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACrE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,kDAAkD;IAClD,8EAA8E;IAE9E,GAAG,CAAC,GAAG,CACL,wCAAwC,EACxC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1D,qEAAqE;QACrE,mEAAmE;QACnE,yEAAyE;QACzE,IAAI,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACzE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClB,OAAO;gBACL,KAAK,EAAE;oBACL,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,mBAAmB;oBAC5B,SAAS,EAAE,OAAO,CAAC,EAAE;iBACtB;aACF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACnE,IAAI,qBAAqB,GAAG,uBAAuB;YACjD,CAAC,CAAC,MAAM,uBAAuB,CAAC,4BAA4B,CAAC,SAAS,CAAC;YACvE,CAAC,CAAC,EAAE,CAAC;QAEP,oEAAoE;QACpE,+DAA+D;QAC/D,gEAAgE;QAChE,IAAI,IAAI,CAAC,qCAAqC,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,OAAO,CAAC,CAAC;YAC5E,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;gBACpC,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvC,qBAAqB,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;gBACxC,CAAC;qBAAM,CAAC;oBACN,qBAAqB,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,uEAAuE;YACvE,sEAAsE;YACtE,oEAAoE;YACpE,mEAAmE;YACnE,MAAM,YAAY,GAAG,qBAAqB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC/B;;wDAE8C,YAAY,GAAG,EAC7D,CAAC,SAAS,EAAE,GAAG,qBAAqB,CAAC,CACtC,CAAsC,CAAC;YACxC,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,iDAAiD;YACjD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACtD,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAEtE,MAAM,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,iBAAiB,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,kEAAkE;QAClE,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACpF,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,kBAAkB,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,IAAI,EAAE,CAAC,CAAC,sBAAsB;YAC9B,MAAM,EAAE,CAAC,CAAC,wBAAwB;YAClC,GAAG,EAAE,CAAC,CAAC,qBAAqB;SAC7B,CAAC,CAAC,CAAC;QAEJ,MAAM,UAAU,GAAG,iBAAiB,CAAC;YACnC,iBAAiB;YACjB,kBAAkB;YAClB,gBAAgB;SACjB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,kBAAkB,CAAC;YACrC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,gBAAgB;YAChB,UAAU;SACX,CAAC,CAAC;QAEH,uEAAuE;QACvE,sEAAsE;QACtE,uDAAuD;QACvD,MAAM,kBAAkB,GAAG,MAAM,sBAAsB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACpF,MAAM,yBAAyB,GAAG,OAAO,CAAC,gBAAgB,IAAI,kBAAkB,CAAC;QAEjF,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,IAAI,gBAAgB,IAAI,CAAC,CAAC;QAClE,MAAM,gBAAgB,GACpB,OAAO,CAAC,WAAW;YACnB,CAAC,yBAAyB;YAC1B,gBAAgB,IAAI,CAAC,CAAC;QAExB,MAAM,OAAO,GAA2B;YACtC,SAAS;YACT,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,gBAAgB,EAAE,yBAAyB;YAC3C,WAAW;YACX,WAAW;YACX,WAAW,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI;YAC9D,YAAY;YACZ,gBAAgB;SACjB,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAuB,EACvB,SAAsC;IAEtC,oEAAoE;IACpE,yEAAyE;IACzE,+DAA+D;IAC/D,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,SAAiB,EACjB,eAAkC;IAElC,IAAI,eAAe,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CACrC,uBAAuB,CAAC,YAAY,EACpC,SAAS,EACT,0BAA0B,CAC3B,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,sBAAsB,CACnC,SAAiB,EACjB,eAAkC;IAElC,IAAI,eAAe,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,OAAO,MAAM,eAAe,CAAC,GAAG,CAC9B,uBAAuB,CAAC,oBAAoB,EAC5C,SAAS,EACT,CAAC,CAAC,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,EAAiB;IAKnD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACzF,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,aAAa,IAAI,GAAG;QAC/B,MAAM,EAAE,GAAG,EAAE,eAAe,IAAI,EAAE;QAClC,GAAG,EAAE,GAAG,EAAE,YAAY,IAAI,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,EAAiB,EACjB,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/F,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;QAC/B,MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI;QACnC,GAAG,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;KAC9B,CAAC;AACJ,CAAC"}

package/dist/backend/services/audit-references.d.ts

@@ -0,0 +1,15 @@
+import type { AuditReferenceRegistryPort } from '@endora-commerce/contracts';
+import type { EntityManager } from '@mikro-orm/postgresql';
+/**
+ * What a `warehouse` audit row is called, and where the admin app shows it
+ * (feature 075, D-87 drain).
+ *
+ * This is the contribution the inversion was chosen for. `inventory` is the one
+ * contributor to `auditReferenceRegistry` whose manifest declares no
+ * `activation.nonDeactivatable`, so it is the one an operator can switch off —
+ * and `audit_logs` is non-deactivatable, so had it declared this module as a
+ * dependency to read a warehouse name, the lifecycle would have refused every
+ * attempt to switch this one off. A push costs the operator nothing.
+ */
+export declare function registerInventoryAuditReferences(registry: AuditReferenceRegistryPort, emFactory: () => EntityManager): void;
+//# sourceMappingURL=audit-references.d.ts.map

package/dist/backend/services/audit-references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-references.d.ts","sourceRoot":"","sources":["../../../src/backend/services/audit-references.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D;;;;;;;;;;GAUG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,0BAA0B,EACpC,SAAS,EAAE,MAAM,aAAa,GAC7B,IAAI,CAiBN"}

package/dist/backend/services/audit-references.js

@@ -0,0 +1,27 @@
+import { Warehouse } from '../entities/warehouse.entity.js';
+/**
+ * What a `warehouse` audit row is called, and where the admin app shows it
+ * (feature 075, D-87 drain).
+ *
+ * This is the contribution the inversion was chosen for. `inventory` is the one
+ * contributor to `auditReferenceRegistry` whose manifest declares no
+ * `activation.nonDeactivatable`, so it is the one an operator can switch off —
+ * and `audit_logs` is non-deactivatable, so had it declared this module as a
+ * dependency to read a warehouse name, the lifecycle would have refused every
+ * attempt to switch this one off. A push costs the operator nothing.
+ */
+export function registerInventoryAuditReferences(registry, emFactory) {
+    registry.register({
+        ownerModuleId: 'inventory',
+        referenceType: 'warehouse',
+        resolve: async (ids) => {
+            const rows = await emFactory().find(Warehouse, { id: { $in: [...ids] } }, { fields: ['id', 'name', 'code'] });
+            return rows.map((row) => ({
+                id: row.id,
+                label: row.name.length > 0 ? row.name : row.code,
+                url: `/warehouses/${row.id}`,
+            }));
+        },
+    });
+}
+//# sourceMappingURL=audit-references.js.map

package/dist/backend/services/audit-references.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-references.js","sourceRoot":"","sources":["../../../src/backend/services/audit-references.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAE5D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gCAAgC,CAC9C,QAAoC,EACpC,SAA8B;IAE9B,QAAQ,CAAC,QAAQ,CAAC;QAChB,aAAa,EAAE,WAAW;QAC1B,aAAa,EAAE,WAAW;QAC1B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,MAAM,IAAI,GAAG,MAAM,SAAS,EAAE,CAAC,IAAI,CACjC,SAAS,EACT,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,EAAE,EACzB,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACnC,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI;gBAChD,GAAG,EAAE,eAAe,GAAG,CAAC,EAAE,EAAE;aAC7B,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/backend/services/availability-notification-service.d.ts

@@ -0,0 +1,155 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type CatalogProductReadPort, type CustomerAccountReadPort, type EmailMailerPort, type ProductAudience } from '@endora-commerce/contracts';
+import { type SalesChannelMembershipPort } from '@endora-commerce/platform/kernel';
+import { AvailabilityNotification } from '../entities/availability-notification.entity.js';
+import { StockLevel } from '../entities/stock-level.entity.js';
+import type { InventoryTemplateEmailPort } from './low-stock-alert-service.js';
+export interface SubscribeInput {
+    productId: string;
+    variantId?: string | null;
+    email: string;
+    customerAccountId?: string | null;
+    /**
+     * Who is asking (issue #227). Defaulted to the anonymous audience so a
+     * composition that has not been taught to resolve its caller refuses a
+     * restricted product rather than queueing a subscription for it — the
+     * fail-closed end, and the same default `ComparisonService.addProduct` takes
+     * for the same reason. Both storefront routes pass the real one.
+     */
+    audience?: ProductAudience;
+}
+export interface AdminListFilter {
+    productId?: string;
+    status?: 'queued' | 'notified' | 'cancelled';
+    page?: number;
+    pageSize?: number;
+}
+export interface AdminListRow {
+    id: string;
+    productId: string;
+    productName: string;
+    productSku: string;
+    customerAccountId: string | null;
+    email: string;
+    status: 'queued' | 'notified' | 'cancelled';
+    queuedAt: string;
+    notifiedAt: string | null;
+}
+/**
+ * AvailabilityNotificationService — feature 010 / US6 surface.
+ *
+ * The original foundation 001 service had a single `subscribe(customerId,
+ * productId, variantId?)` entry point. Feature 010 extends it for the
+ * three customer paths spelled out in spec.md US6:
+ *
+ *   - storefront customer signed-in → email pre-filled from the account
+ *   - storefront anonymous → caller supplies the email
+ *   - admin browses + cancels any queued row
+ *
+ * The restock fan-out lives on `AvailabilityWorker.dispatchForStockIncrease`
+ * (already exists from foundation 001); the worker is rewired in US6 to
+ * subscribe to `inventory.adjusted.v1` events with `before === 0 &&
+ * after > 0` so a stock-bump fans out one email per queued row.
+ */
+export declare class AvailabilityNotificationService {
+    #private;
+    private readonly emFactory;
+    /** `catalogProductReadPort`, owned by `catalog` (feature 075, Phase C). */
+    private readonly catalogProducts;
+    /**
+     * `customerAccountReadPort`, owned by `customer_accounts` (feature 075).
+     *
+     * Feature 087 / D-187 gives it a second reader: the organisation an owned
+     * subscription carries. It was already **required** here before that
+     * ruling and stays so — this module has exactly one construction site
+     * (`plugin.ts`) and it holds the gated port, so a composition that cannot
+     * answer "which organisation owns this account" cannot build the service
+     * at all. Nothing had to be argued for; it is recorded because `pwa` had
+     * to widen its constructor for the same read and the two modules now sit
+     * in the same state.
+     *
+     * Resolved through `lazyPort`, so a switched-off `customer_accounts`
+     * refuses at the call with the 503 `MODULE_DISABLED` envelope rather than
+     * at composition time.
+     */
+    private readonly customerAccounts;
+    /**
+     * `salesChannelMembershipPort` — the sanctioned bridge accessor
+     * (Constitution XII), through which {@link subscribe} asks whether the
+     * request's channel publishes the product at all.
+     *
+     * Required rather than optional, and placed before the two optional
+     * transports so a construction site cannot leave it off by accident: an
+     * optional channel gate is a composition that silently answers without one,
+     * which is precisely the state this parameter was added to end. It is a
+     * kernel registration rather than a module's, so it adds no edge to this
+     * module's manifest.
+     */
+    private readonly channelMembership;
+    private readonly mailer?;
+    private readonly templateEmail?;
+    constructor(emFactory: () => EntityManager, 
+    /** `catalogProductReadPort`, owned by `catalog` (feature 075, Phase C). */
+    catalogProducts: CatalogProductReadPort, 
+    /**
+     * `customerAccountReadPort`, owned by `customer_accounts` (feature 075).
+     *
+     * Feature 087 / D-187 gives it a second reader: the organisation an owned
+     * subscription carries. It was already **required** here before that
+     * ruling and stays so — this module has exactly one construction site
+     * (`plugin.ts`) and it holds the gated port, so a composition that cannot
+     * answer "which organisation owns this account" cannot build the service
+     * at all. Nothing had to be argued for; it is recorded because `pwa` had
+     * to widen its constructor for the same read and the two modules now sit
+     * in the same state.
+     *
+     * Resolved through `lazyPort`, so a switched-off `customer_accounts`
+     * refuses at the call with the 503 `MODULE_DISABLED` envelope rather than
+     * at composition time.
+     */
+    customerAccounts: CustomerAccountReadPort, 
+    /**
+     * `salesChannelMembershipPort` — the sanctioned bridge accessor
+     * (Constitution XII), through which {@link subscribe} asks whether the
+     * request's channel publishes the product at all.
+     *
+     * Required rather than optional, and placed before the two optional
+     * transports so a construction site cannot leave it off by accident: an
+     * optional channel gate is a composition that silently answers without one,
+     * which is precisely the state this parameter was added to end. It is a
+     * kernel registration rather than a module's, so it adds no edge to this
+     * module's manifest.
+     */
+    channelMembership: SalesChannelMembershipPort, mailer?: EmailMailerPort | undefined, templateEmail?: InventoryTemplateEmailPort | undefined);
+    /**
+     * Subscribe a customer / anonymous email to a product's restock signal.
+     *
+     * Refuses with 404 PRODUCT_NOT_FOUND for every product this caller may not
+     * acquire — see {@link #mayAcquire}; with 422 PRODUCT_IN_STOCK when
+     * cumulative on-hand > 0; with 409 PRODUCT_UNMANAGED_STOCK when the product
+     * opted out of stock tracking; and idempotently returns the existing row on a
+     * re-subscribe.
+     */
+    subscribe(input: SubscribeInput): Promise<AvailabilityNotification>;
+    cancel(id: string): Promise<void>;
+    listForAdmin(filter?: AdminListFilter): Promise<{
+        items: AdminListRow[];
+        page: number;
+        pageSize: number;
+        total: number;
+    }>;
+    /**
+     * Restock fan-out — invoked by AvailabilityWorker when cumulative on-hand
+     * crosses from 0 to > 0 for a (product, variant) pair. Emits one mail
+     * per queued row and flips status → 'notified'.
+     */
+    processRestockedFanOut(input: {
+        productId: string;
+        variantId?: string | null;
+    }): Promise<{
+        notified: number;
+    }>;
+    /** Stand-in helper used to keep the unused entity import alive. */
+    static getStockLevelEntity(): typeof StockLevel;
+}
+//# sourceMappingURL=availability-notification-service.d.ts.map

package/dist/backend/services/availability-notification-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"availability-notification-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/availability-notification-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAIL,KAAK,sBAAsB,EAE3B,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE/E,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,WAAW,CAAC;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,WAAW,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAiDD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,+BAA+B;;IAExC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAlCd,SAAS,EAAE,MAAM,aAAa;IAC/C,2EAA2E;IAC1D,eAAe,EAAE,sBAAsB;IACxD;;;;;;;;;;;;;;;OAeG;IACc,gBAAgB,EAAE,uBAAuB;IAC1D;;;;;;;;;;;OAWG;IACc,iBAAiB,EAAE,0BAA0B,EAC7C,MAAM,CAAC,EAAE,eAAe,YAAA,EACxB,aAAa,CAAC,EAAE,0BAA0B,YAAA;IAqE7D;;;;;;;;OAQG;IACG,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAyEnE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBjC,YAAY,CAAC,MAAM,GAAE,eAAoB,GAAG,OAAO,CAAC;QACxD,KAAK,EAAE,YAAY,EAAE,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IAsDF;;;;OAIG;IACG,sBAAsB,CAAC,KAAK,EAAE;QAClC,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAiFjC,mEAAmE;IACnE,MAAM,CAAC,mBAAmB,IAAI,OAAO,UAAU;CAGhD"}