@endora-commerce/mod-organizations 0.100.0

package/dist/backend/routes.public.js

@@ -0,0 +1,220 @@
+import { SESSION_COOKIE_NAME, customerLoginRequestSchema, emailVerificationRequestSchema, normalizeEmailAddress, passwordResetConfirmSchema, passwordResetRequestSchema, registerOrganizationRequestSchema, } from '@endora-commerce/contracts';
+import { currentSalesChannel } from '@endora-commerce/platform/kernel';
+import { buildVerificationEmail } from './email-templates/verification.js';
+export async function registerOrganizationsPublicRoutes(app, deps) {
+    const { registrationService, verificationService, customerAuthService, passwordResetService } = deps;
+    app.post('/api/v1/organizations/register', { schema: { body: registerOrganizationRequestSchema } }, async (request, reply) => {
+        const body = registerOrganizationRequestSchema.parse(request.body);
+        const result = await registrationService.registerOrganization(body);
+        // Stash the raw token for the test-only probe so integration tests can
+        // complete the verify step without reading the mail.
+        if (deps.latestTokenByEmail) {
+            deps.latestTokenByEmail.set(result.customerAccount.email, result.verificationToken);
+            deps.latestTokenByEmail.set('__latest__', result.verificationToken);
+        }
+        let emailVerificationSent = false;
+        try {
+            const message = buildVerificationEmail({
+                customerAccountId: result.customerAccount.id,
+                rawToken: result.verificationToken,
+                recipientEmail: result.customerAccount.email,
+                organizationName: result.organization.name,
+                storefrontBaseUrl: deps.storefrontBaseUrl,
+            });
+            const verifyUrl = message.meta?.verifyUrl ?? '';
+            const sentViaTemplate = deps.templateEmail
+                ? await deps.templateEmail.trySend({
+                    code: 'email_verification',
+                    to: result.customerAccount.email,
+                    messageId: message.messageId,
+                    variables: { organizationName: result.organization.name, verifyUrl },
+                    meta: message.meta,
+                })
+                : false;
+            // The flag is in the response body, so it answers what the transport
+            // answered rather than "we reached this line" (D-59).
+            const outcome = sentViaTemplate
+                ? { status: 'sent' }
+                : await deps.mailer.send(message);
+            emailVerificationSent = outcome.status === 'sent';
+        }
+        catch (err) {
+            request.log.error({ err }, 'Failed to send verification email');
+        }
+        reply.status(201);
+        return {
+            data: {
+                organization: serializeOrganization(result.organization),
+                customerAccount: serializeCustomerAccount(result.customerAccount),
+                emailVerificationSent,
+            },
+        };
+    });
+    app.post('/api/v1/auth/email-verification/verify', { schema: { body: emailVerificationRequestSchema } }, async (request) => {
+        const body = emailVerificationRequestSchema.parse(request.body);
+        const result = await verificationService.verify(body.token);
+        return {
+            data: {
+                organizationId: result.organizationId,
+                customerAccountId: result.customerAccountId,
+                verifiedAt: result.verifiedAt.toISOString(),
+            },
+        };
+    });
+    app.post('/api/v1/auth/customer/login', { schema: { body: customerLoginRequestSchema } }, async (request, reply) => {
+        const body = customerLoginRequestSchema.parse(request.body);
+        const channelId = currentSalesChannel()?.id ?? null;
+        const result = await customerAuthService.login({
+            email: body.email,
+            password: body.password,
+            salesChannelId: channelId,
+            ...(request.ip ? { ip: request.ip } : {}),
+            ...(typeof request.headers['user-agent'] === 'string'
+                ? { userAgent: request.headers['user-agent'] }
+                : {}),
+        });
+        // Feature 042 — two-step login. The MFA cases carry no session cookie;
+        // the client completes the second step at the MFA verify endpoint.
+        if (result.status === 'mfaRequired') {
+            return { data: { status: 'mfaRequired', challengeId: result.challengeId } };
+        }
+        if (result.status === 'mfaSetupRequired') {
+            return { data: { status: 'mfaSetupRequired', setupTicket: result.setupTicket } };
+        }
+        setSessionCookie(reply, result.sessionCookieValue, result.sessionExpiresAt);
+        // Merge any anonymous cart the caller was carrying into the authenticated
+        // cart (feature 027 R-09 / feature 037-cart-merge-on-login). The hook is
+        // best-effort: a thrown error MUST NOT break login (037 FR-007/FR-008).
+        let cartMerge;
+        if (deps.onLogin) {
+            const cookies = request.cookies;
+            const anon = cookies?.['b2b_cart_anon'];
+            const compareAnon = cookies?.['compare_token'];
+            try {
+                const hookResult = await deps.onLogin({
+                    customerAccountId: result.customerAccount.id,
+                    organizationId: result.customerAccount.organizationId ?? null,
+                    ...(anon ? { anonymousCartToken: anon } : {}),
+                    ...(compareAnon ? { anonymousCompareToken: compareAnon } : {}),
+                });
+                cartMerge = hookResult.cartMerge;
+            }
+            catch (err) {
+                request.log.error({
+                    err,
+                    customerAccountId: result.customerAccount.id,
+                    hadAnonToken: Boolean(anon),
+                }, 'cart_merge_on_login_failed');
+            }
+        }
+        // Clear the stale anon-cart cookie when the source token has been
+        // consumed (adopted/merged) or pointed at an empty cart (noop_empty).
+        // Failure and noop_no_anon both leave the cookie alone — failure so the
+        // buyer can retry on the next login, noop_no_anon because there was
+        // nothing to clear in the first place. See spec R-06.
+        if (cartMerge && cartMerge.outcome !== 'noop_no_anon') {
+            reply.clearCookie('b2b_cart_anon', { path: '/' });
+        }
+        return {
+            data: {
+                status: 'authenticated',
+                customerAccount: serializeCustomerAccount(result.customerAccount),
+                ...(cartMerge ? { cartMerge: narrowCartMergeForHttp(cartMerge) } : {}),
+            },
+        };
+    });
+    app.post('/api/v1/auth/password-reset/request', { schema: { body: passwordResetRequestSchema } }, async (request, reply) => {
+        const body = passwordResetRequestSchema.parse(request.body);
+        // The address is handed over as typed — the port folds it, as every
+        // other lookup on that table does. The probe key below is the one place
+        // the folded form is needed here, and it uses the same function so the
+        // key cannot drift from what the lookup matched.
+        const result = await passwordResetService.requestReset(body.email);
+        if (deps.latestTokenByEmail && result.rawToken) {
+            deps.latestTokenByEmail.set(`reset:${normalizeEmailAddress(body.email)}`, result.rawToken);
+            deps.latestTokenByEmail.set('__latest_reset__', result.rawToken);
+        }
+        // Always 202 — defends against account enumeration.
+        return reply.status(202).send();
+    });
+    app.post('/api/v1/auth/password-reset/confirm', { schema: { body: passwordResetConfirmSchema } }, async (request, reply) => {
+        const body = passwordResetConfirmSchema.parse(request.body);
+        await passwordResetService.confirmReset(body.token, body.newPassword);
+        return reply.status(200).send({ data: { ok: true } });
+    });
+    app.post('/api/v1/auth/customer/logout', async (request, reply) => {
+        const cookies = request.cookies;
+        const raw = cookies?.[SESSION_COOKIE_NAME];
+        if (raw) {
+            const dot = raw.indexOf('.');
+            if (dot !== -1) {
+                const sessionId = raw.slice(0, dot);
+                if (sessionId) {
+                    await customerAuthService.logout(sessionId);
+                }
+            }
+        }
+        reply.clearCookie(SESSION_COOKIE_NAME, { path: '/' });
+        return reply.status(204).send();
+    });
+    // Test-only probe for the register→verify integration test.
+    if (deps.exposeTestProbe && deps.latestTokenByEmail) {
+        app.get('/api/v1/_test/latest-verification-token', async () => {
+            const token = deps.latestTokenByEmail.get('__latest__');
+            if (!token)
+                return { token: null };
+            return { token };
+        });
+    }
+}
+function setSessionCookie(reply, value, expiresAt) {
+    reply.setCookie(SESSION_COOKIE_NAME, value, {
+        path: '/',
+        httpOnly: true,
+        sameSite: 'lax',
+        secure: process.env['NODE_ENV'] === 'production',
+        expires: expiresAt,
+        signed: false,
+    });
+}
+function serializeOrganization(o) {
+    return {
+        id: o.id,
+        name: o.name,
+        taxId: o.taxId,
+        status: o.status,
+        vatStatus: o.vatStatus,
+        registeredAddress: o.registeredAddress,
+        createdAt: o.createdAt.toISOString(),
+        updatedAt: o.updatedAt.toISOString(),
+    };
+}
+function serializeCustomerAccount(c) {
+    return {
+        id: c.id,
+        organizationId: c.organizationId ?? null,
+        email: c.email,
+        firstName: c.firstName,
+        lastName: c.lastName,
+        role: c.role,
+        emailVerifiedAt: c.emailVerifiedAt?.toISOString() ?? null,
+        // The record already answers this; the entity carried the secret's
+        // confirmation timestamp and every caller derived the same boolean from it.
+        twoFactorEnabled: c.twoFactorEnabled,
+        createdAt: c.createdAt.toISOString(),
+        updatedAt: c.updatedAt.toISOString(),
+    };
+}
+/**
+ * Collapse the internal `CartMergeOutcome` (with the two `noop_*` variants
+ * and the line-count diagnostics) into the storefront-facing shape that
+ * exposes only `outcome ∈ {adopted, merged, noop}` and the destination
+ * cart id. See specs/037-cart-merge-on-login/contracts/cart-merge.md § 1.
+ */
+function narrowCartMergeForHttp(internal) {
+    const outcome = internal.outcome === 'noop_empty' || internal.outcome === 'noop_no_anon'
+        ? 'noop'
+        : internal.outcome;
+    return { outcome, destinationCartId: internal.destinationCartId };
+}
+//# sourceMappingURL=routes.public.js.map

package/dist/backend/routes.public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.public.js","sourceRoot":"","sources":["../../src/backend/routes.public.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,8BAA8B,EAC9B,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAC1B,iCAAiC,GAOlC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAGvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AA6C3E,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,GAAoB,EACpB,IAA6B;IAE7B,MAAM,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,GAC3F,IAAI,CAAC;IAEP,GAAG,CAAC,IAAI,CACN,gCAAgC,EAChC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,EAAE,EACvD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACpE,uEAAuE;QACvE,qDAAqD;QACrD,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACpF,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,sBAAsB,CAAC;gBACrC,iBAAiB,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE;gBAC5C,QAAQ,EAAE,MAAM,CAAC,iBAAiB;gBAClC,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK;gBAC5C,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI;gBAC1C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;aAC1C,CAAC,CAAC;YACH,MAAM,SAAS,GAAI,OAAO,CAAC,IAA2C,EAAE,SAAS,IAAI,EAAE,CAAC;YACxF,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa;gBACxC,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;oBAC/B,IAAI,EAAE,oBAAoB;oBAC1B,EAAE,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK;oBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,SAAS,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE;oBACpE,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB,CAAC;gBACJ,CAAC,CAAC,KAAK,CAAC;YACV,qEAAqE;YACrE,sDAAsD;YACtD,MAAM,OAAO,GAAG,eAAe;gBAC7B,CAAC,CAAE,EAAE,MAAM,EAAE,MAAM,EAAY;gBAC/B,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,qBAAqB,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAClE,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO;YACL,IAAI,EAAE;gBACJ,YAAY,EAAE,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC;gBACxD,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,eAAe,CAAC;gBACjE,qBAAqB;aACtB;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,wCAAwC,EACxC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO;YACL,IAAI,EAAE;gBACJ,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE;aAC5C;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,6BAA6B,EAC7B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAChD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,mBAAmB,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC;YAC7C,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,SAAS;YACzB,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,OAAO,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,QAAQ;gBACnD,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,uEAAuE;QACvE,mEAAmE;QACnE,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACpC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9E,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YACzC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QACnF,CAAC;QACD,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC5E,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,SAAuC,CAAC;QAC5C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,GAAI,OAA4D,CAAC,OAAO,CAAC;YACtF,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;YACxC,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;oBACpC,iBAAiB,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE;oBAC5C,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC,cAAc,IAAI,IAAI;oBAC7D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC/D,CAAC,CAAC;gBACH,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;YACnC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,KAAK,CACf;oBACE,GAAG;oBACH,iBAAiB,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE;oBAC5C,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC;iBAC5B,EACD,4BAA4B,CAC7B,CAAC;YACJ,CAAC;QACH,CAAC;QACD,kEAAkE;QAClE,sEAAsE;QACtE,wEAAwE;QACxE,oEAAoE;QACpE,sDAAsD;QACtD,IAAI,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;YACtD,KAAK,CAAC,WAAW,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO;YACL,IAAI,EAAE;gBACJ,MAAM,EAAE,eAAe;gBACvB,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,eAAe,CAAC;gBACjE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvE;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,qCAAqC,EACrC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAChD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,iDAAiD;QACjD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC/C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC3F,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC;QACD,oDAAoD;QACpD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,qCAAqC,EACrC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAChD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,oBAAoB,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChE,MAAM,OAAO,GAAI,OAA4D,CAAC,OAAO,CAAC;QACtF,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC;QAC3C,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACpC,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACpD,GAAG,CAAC,GAAG,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACzD,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACnC,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAmB,EAAE,KAAa,EAAE,SAAe;IAC3E,KAAK,CAAC,SAAS,CAAC,mBAAmB,EAAE,KAAK,EAAE;QAC1C,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY;QAChD,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,CAS9B;IACC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;QACtC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;QACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,CAAwB;IACxD,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;QACxC,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,IAAI;QACzD,mEAAmE;QACnE,4EAA4E;QAC5E,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;QACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;KACrC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,QAA0B;IACxD,MAAM,OAAO,GACX,QAAQ,CAAC,OAAO,KAAK,YAAY,IAAI,QAAQ,CAAC,OAAO,KAAK,cAAc;QACtE,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;IACvB,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,CAAC;AACpE,CAAC"}

package/dist/backend/routes.sales-reps.d.ts

@@ -0,0 +1,46 @@
+import type { FastifyInstance } from 'fastify';
+import { type AdminUserReadPort } from '@endora-commerce/contracts';
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { SalesRepAssignmentPort } from './services/sales-rep-assignment-service.js';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+/**
+ * Sales-rep ↔ organization assignment routes (feature 008 / T077).
+ *
+ * Owned **and registered** by `organizations` since D-166. Three of the four
+ * endpoints this file used to hold are here; the fourth —
+ * `GET /admin/sales-reps/:adminUserId/organizations`, the only one that reads a
+ * `QuoteRequest` — moved to `quote_requests/routes.sales-reps.ts`, which is the
+ * module that owns the fact it reports.
+ *
+ * The split is what makes the gate honest, and it is a consequence rather than
+ * a preference. The whole file used to be registered by `quote_requests`
+ * through a dynamic `import()`, so all four endpoints were gated by *that*
+ * module's effective state and permissioned `rfqs:handle`. Neither half of that
+ * arrangement survives inspection: assigning a sales representative qualifies an
+ * organisation and has nothing to do with quote requests, so switching quote
+ * requests off must not take the assignment screen with it — and registering the
+ * file here without splitting it would be worse, because `rfqs:handle` is
+ * declared `module: 'quote_requests'` and `organizations` is `nonDeactivatable`,
+ * which leaves a permanently mounted screen behind a permission that disappears
+ * from `/admin-roles` the moment quote requests is switched off. The gate travels
+ * with the routes.
+ *
+ * `organizations:assign-sales-rep` is the code, and it is the one this file has
+ * proposed in its own comment since feature 008 — the placeholder note said
+ * "a follow-up can add a dedicated `organizations:assign-sales-rep` permission",
+ * and this is that follow-up.
+ *
+ * Admins are read through `adminUserReadPort` rather than through the
+ * `AdminUser` entity, which is what retires this file's two entries in
+ * `organizations`' cross-module-import shard: the reads were always
+ * `findById`/`findByIds`, both published, and the only thing stopping the port
+ * from being injected was that another module built this file's `deps`.
+ */
+export interface SalesRepRoutesDeps {
+    emFactory: () => EntityManager;
+    requireAdmin: RequireAdminFactory;
+    salesRepAssignment: SalesRepAssignmentPort;
+    adminUsers: AdminUserReadPort;
+}
+export declare function registerOrganizationsSalesRepRoutes(app: FastifyInstance, deps: SalesRepRoutesDeps): Promise<void>;
+//# sourceMappingURL=routes.sales-reps.d.ts.map

package/dist/backend/routes.sales-reps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.sales-reps.d.ts","sourceRoot":"","sources":["../../src/backend/routes.sales-reps.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI3D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,YAAY,EAAE,mBAAmB,CAAC;IAClC,kBAAkB,EAAE,sBAAsB,CAAC;IAC3C,UAAU,EAAE,iBAAiB,CAAC;CAC/B;AAsCD,wBAAsB,mCAAmC,CACvD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CA2Ff"}

package/dist/backend/routes.sales-reps.js

@@ -0,0 +1,114 @@
+import { ERROR_CODES, assignSalesRepRequestSchema, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { getTenantContext } from '@endora-commerce/platform/tenancy';
+import { Organization } from './entities/organization.entity.js';
+/**
+ * D-260 — **a write that changes the acting principal's own authority cannot be
+ * authorised by that authority.**
+ *
+ * `OrganizationSalesRepAssignment` is the table that *defines* `allowed-set`, so
+ * a scoped admin holding `organizations:assign-sales-rep` could `POST` itself on
+ * to any organization and widen its own `allowedOrganizationIds` — measured at
+ * 201, `[orgA] → [orgA, orgB]`. No classification can save the write:
+ * `@OrgScoped` on this entity would be circular (D-259 category 2), and the id
+ * arrives from the path rather than from the actor, so no column filter reaches
+ * it. Nor is "the scoped role does not hold the code" a boundary —
+ * `PUT /admin/admin-roles/:code` upserts an arbitrary permission array onto any
+ * role, and the seed that grants this role its codes is a demo fixture.
+ *
+ * The refusal is therefore `mode: 'all'` / 403 and not the FR-008 not-found arm
+ * of the criterion: nothing about the organization's existence is being
+ * concealed, the actor is being told it may not write the graph at all. The
+ * idiom is `routes.admin.ts`'s credit-inheritance-mode handler, which already
+ * reaches for it on the weaker argument of a money-behaviour switch.
+ *
+ * It is categorical — the actor's *own* organization included. Assigning a
+ * second representative to an organization the actor holds still edits the graph
+ * that decides who holds what, and the graph is the boundary rather than an
+ * operation inside it.
+ */
+function requireUnscopedActor() {
+    const ctx = getTenantContext();
+    if (!ctx || ctx.mode !== 'all') {
+        throw new HttpError(403, ERROR_CODES.FORBIDDEN, 'Only a platform administrator can change sales-representative assignments.');
+    }
+}
+export async function registerOrganizationsSalesRepRoutes(app, deps) {
+    const { emFactory, requireAdmin, salesRepAssignment, adminUsers } = deps;
+    const guard = requireAdmin('organizations:assign-sales-rep');
+    // GET /api/v1/admin/organizations/:organizationId/sales-reps
+    app.get('/api/v1/admin/organizations/:organizationId/sales-reps', { preHandler: guard }, async (request) => {
+        const em = emFactory();
+        const org = await em.findOne(Organization, { id: request.params.organizationId });
+        if (!org)
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Organization not found.');
+        const assignments = await salesRepAssignment.listForOrganization(org.id);
+        const adminIds = assignments.map((a) => a.adminUserId);
+        const admins = adminIds.length > 0 ? await adminUsers.findByIds(adminIds) : [];
+        const adminById = new Map(admins.map((a) => [a.id, a]));
+        return {
+            data: assignments.map((a) => {
+                const u = adminById.get(a.adminUserId);
+                return {
+                    id: a.id,
+                    organizationId: a.organizationId,
+                    adminUserId: a.adminUserId,
+                    displayName: u ? `${u.firstName} ${u.lastName}` : 'Unknown',
+                    email: u?.email ?? '',
+                    assignedAt: a.createdAt.toISOString(),
+                    assignedByAdminUserId: a.assignedByAdminUserId ?? null,
+                };
+            }),
+        };
+    });
+    // POST /api/v1/admin/organizations/:organizationId/sales-reps
+    app.post('/api/v1/admin/organizations/:organizationId/sales-reps', { preHandler: guard, schema: { body: assignSalesRepRequestSchema } }, async (request, reply) => {
+        requireUnscopedActor(); // D-260 — the graph is the boundary.
+        const body = assignSalesRepRequestSchema.parse(request.body);
+        const em = emFactory();
+        const org = await em.findOne(Organization, { id: request.params.organizationId });
+        if (!org)
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Organization not found.');
+        const adminUser = await adminUsers.findById(body.adminUserId);
+        if (!adminUser) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Admin user not found.');
+        }
+        const actor = request;
+        const assignedBy = actor.actor?.kind === 'admin'
+            ? actor.actor.adminUserId ?? null
+            : actor.testActor?.kind === 'admin'
+                ? actor.testActor.adminUserId ?? null
+                : null;
+        const created = await salesRepAssignment.assign({
+            organizationId: org.id,
+            adminUserId: adminUser.id,
+            assignedByAdminUserId: assignedBy,
+        });
+        reply.code(201);
+        return {
+            data: {
+                id: created.id,
+                organizationId: created.organizationId,
+                adminUserId: created.adminUserId,
+                displayName: `${adminUser.firstName} ${adminUser.lastName}`,
+                email: adminUser.email,
+                assignedAt: created.createdAt.toISOString(),
+                assignedByAdminUserId: created.assignedByAdminUserId ?? null,
+            },
+        };
+    });
+    // DELETE /api/v1/admin/organizations/:organizationId/sales-reps/:adminUserId
+    app.delete('/api/v1/admin/organizations/:organizationId/sales-reps/:adminUserId', { preHandler: guard }, async (request, reply) => {
+        requireUnscopedActor(); // D-260 — the graph is the boundary.
+        const removed = await salesRepAssignment.unassign({
+            organizationId: request.params.organizationId,
+            adminUserId: request.params.adminUserId,
+        });
+        if (!removed) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Assignment not found.');
+        }
+        reply.code(204);
+        return null;
+    });
+}
+//# sourceMappingURL=routes.sales-reps.js.map

package/dist/backend/routes.sales-reps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.sales-reps.js","sourceRoot":"","sources":["../../src/backend/routes.sales-reps.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,2BAA2B,GAE5B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AA6CjE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,oBAAoB;IAC3B,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,SAAS,EACrB,4EAA4E,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,GAAoB,EACpB,IAAwB;IAExB,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IACzE,MAAM,KAAK,GAAG,YAAY,CAAC,gCAAgC,CAAC,CAAC;IAE7D,6DAA6D;IAC7D,GAAG,CAAC,GAAG,CACL,wDAAwD,EACxD,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;QACrF,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO;YACL,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC1B,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBACvC,OAAO;oBACL,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,cAAc,EAAE,CAAC,CAAC,cAAc;oBAChC,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;oBAC3D,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE;oBACrB,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;oBACrC,qBAAqB,EAAE,CAAC,CAAC,qBAAqB,IAAI,IAAI;iBACvD,CAAC;YACJ,CAAC,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,8DAA8D;IAC9D,GAAG,CAAC,IAAI,CACN,wDAAwD,EACxD,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,EAAE,EACpE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,oBAAoB,EAAE,CAAC,CAAC,qCAAqC;QAC7D,MAAM,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,KAAK,GAAI,OAAoH,CAAC;QACpI,MAAM,UAAU,GACd,KAAK,CAAC,KAAK,EAAE,IAAI,KAAK,OAAO;YAC3B,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI;YACjC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,KAAK,OAAO;gBACjC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,IAAI,IAAI;gBACrC,CAAC,CAAC,IAAI,CAAC;QACb,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;YAC9C,cAAc,EAAE,GAAG,CAAC,EAAE;YACtB,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,qBAAqB,EAAE,UAAU;SAClC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO;YACL,IAAI,EAAE;gBACJ,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,WAAW,EAAE,GAAG,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,EAAE;gBAC3D,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC3C,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,IAAI;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,6EAA6E;IAC7E,GAAG,CAAC,MAAM,CACR,qEAAqE,EACrE,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,oBAAoB,EAAE,CAAC,CAAC,qCAAqC;QAC7D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC;YAChD,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc;YAC7C,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/routes.storefront.d.ts

@@ -0,0 +1,25 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import type { OrganizationContextService } from './services/organization-context-service.js';
+import type { OrganizationRestrictionService } from './services/organization-restriction-service.js';
+export interface OrganizationsStorefrontDeps {
+    contextService: OrganizationContextService;
+    restrictionService: OrganizationRestrictionService;
+    resolveCustomerContext: (req: FastifyRequest) => {
+        customerAccountId: string;
+        /** Null for no-org Customer accounts (feature 026 US2). */
+        organizationId: string | null;
+    };
+    requireCustomer: (req: FastifyRequest, reply: unknown) => Promise<void>;
+}
+/**
+ * Storefront-side organization endpoints introduced by feature 026 US4.
+ *
+ *   POST /api/v1/storefront/checkout/preflight
+ *     Called by the checkout SSR route. Returns 200 with the resolved
+ *     payment + delivery method allow-list IDs and assigned warehouse IDs
+ *     when the Customer's Organization is active; 423 with status +
+ *     localized reason when it cannot transact; 200 with empty allow-lists
+ *     for no-org Customer accounts (they get the platform defaults).
+ */
+export declare function registerOrganizationsStorefrontRoutes(app: FastifyInstance, deps: OrganizationsStorefrontDeps): Promise<void>;
+//# sourceMappingURL=routes.storefront.d.ts.map

package/dist/backend/routes.storefront.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.storefront.d.ts","sourceRoot":"","sources":["../../src/backend/routes.storefront.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAG/D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAC7F,OAAO,KAAK,EACV,8BAA8B,EAC/B,MAAM,gDAAgD,CAAC;AAExD,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,0BAA0B,CAAC;IAC3C,kBAAkB,EAAE,8BAA8B,CAAC;IACnD,sBAAsB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK;QAC/C,iBAAiB,EAAE,MAAM,CAAC;QAC1B,2DAA2D;QAC3D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,CAAC;IACF,eAAe,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzE;AAED;;;;;;;;;GASG;AACH,wBAAsB,qCAAqC,CACzD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,IAAI,CAAC,CA0Cf"}

package/dist/backend/routes.storefront.js

@@ -0,0 +1,65 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+/**
+ * Storefront-side organization endpoints introduced by feature 026 US4.
+ *
+ *   POST /api/v1/storefront/checkout/preflight
+ *     Called by the checkout SSR route. Returns 200 with the resolved
+ *     payment + delivery method allow-list IDs and assigned warehouse IDs
+ *     when the Customer's Organization is active; 423 with status +
+ *     localized reason when it cannot transact; 200 with empty allow-lists
+ *     for no-org Customer accounts (they get the platform defaults).
+ */
+export async function registerOrganizationsStorefrontRoutes(app, deps) {
+    app.post('/api/v1/storefront/checkout/preflight', { preHandler: deps.requireCustomer }, async (request, reply) => {
+        const ctx = deps.resolveCustomerContext(request);
+        if (!ctx.organizationId) {
+            // No-org Customer — platform defaults apply (feature 026 US2).
+            reply.status(200);
+            return {
+                canTransact: true,
+                allowedPaymentMethodIds: [],
+                allowedDeliveryMethodIds: [],
+                assignedWarehouseIds: [],
+            };
+        }
+        const org = await deps.contextService.loadEffectiveOrganization(ctx.organizationId);
+        if (!org) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Organization not found.');
+        }
+        if (org.status !== 'active') {
+            reply.status(423);
+            return {
+                canTransact: false,
+                status: org.status,
+                reason: describeStatus(org.status),
+            };
+        }
+        const allowLists = await deps.restrictionService.readAllowLists(org.id);
+        reply.status(200);
+        return {
+            canTransact: true,
+            allowedPaymentMethodIds: allowLists.paymentMethodIds,
+            allowedDeliveryMethodIds: allowLists.deliveryMethodIds,
+            assignedWarehouseIds: allowLists.warehouseIds,
+        };
+    });
+}
+/**
+ * Customer-safe localization of the moderation status. The storefront
+ * displays this string verbatim; admin-only details (block-reason text)
+ * are intentionally NOT exposed here.
+ */
+function describeStatus(status) {
+    switch (status) {
+        case 'pending_verification':
+            return 'Twoja Organizacja oczekuje na weryfikację. Zamówienia będą dostępne po jej zakończeniu.';
+        case 'blocked':
+            return 'Składanie Zamówień jest obecnie wstrzymane. Prosimy o kontakt z opiekunem konta.';
+        case 'rejected':
+            return 'Rejestracja Twojej Organizacji została odrzucona. Prosimy o kontakt z administracją platformy.';
+        default:
+            return 'Składanie Zamówień obecnie niedostępne.';
+    }
+}
+//# sourceMappingURL=routes.storefront.js.map

package/dist/backend/routes.storefront.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.storefront.js","sourceRoot":"","sources":["../../src/backend/routes.storefront.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAiB3D;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,GAAoB,EACpB,IAAiC;IAEjC,GAAG,CAAC,IAAI,CACN,uCAAuC,EACvC,EAAE,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,EACpC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAEjD,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACxB,+DAA+D;YAC/D,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClB,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,uBAAuB,EAAE,EAAE;gBAC3B,wBAAwB,EAAE,EAAE;gBAC5B,oBAAoB,EAAE,EAAE;aACzB,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACpF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClB,OAAO;gBACL,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;aACnC,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,uBAAuB,EAAE,UAAU,CAAC,gBAAgB;YACpD,wBAAwB,EAAE,UAAU,CAAC,iBAAiB;YACtD,oBAAoB,EAAE,UAAU,CAAC,YAAY;SAC9C,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,MAAgE;IAEhE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,sBAAsB;YACzB,OAAO,yFAAyF,CAAC;QACnG,KAAK,SAAS;YACZ,OAAO,kFAAkF,CAAC;QAC5F,KAAK,UAAU;YACb,OAAO,gGAAgG,CAAC;QAC1G;YACE,OAAO,yCAAyC,CAAC;IACrD,CAAC;AACH,CAAC"}

package/dist/backend/schemas/organization.d.ts

@@ -0,0 +1,59 @@
+import { z } from 'zod';
+/**
+ * Zod schemas used by feature 026 — moderation, restrictions, and VAT
+ * validation. These live in the module (not in `@endora-commerce/contracts`) because
+ * they describe internal route bodies; the public contract for the
+ * Organization status enum is exported from `@endora-commerce/contracts` and
+ * re-imported here.
+ */
+export declare const organizationStatusSchema: z.ZodEnum<{
+    pending_verification: "pending_verification";
+    active: "active";
+    blocked: "blocked";
+    rejected: "rejected";
+}>;
+export type OrganizationStatusInput = z.infer<typeof organizationStatusSchema>;
+/** Tax ID — uppercased + stripped of whitespace and dashes at the Zod boundary. */
+export declare const taxIdSchema: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+export declare const approveOrganizationSchema: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+}, z.core.$strip>;
+export type ApproveOrganizationInput = z.infer<typeof approveOrganizationSchema>;
+export declare const rejectOrganizationSchema: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    reason: z.ZodString;
+    notifyCustomerEmail: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type RejectOrganizationInput = z.infer<typeof rejectOrganizationSchema>;
+export declare const blockOrganizationSchema: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    reason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export type BlockOrganizationInput = z.infer<typeof blockOrganizationSchema>;
+export declare const unblockOrganizationSchema: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+}, z.core.$strip>;
+export type UnblockOrganizationInput = z.infer<typeof unblockOrganizationSchema>;
+export declare const replaceOrgRestrictionsSchema: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    paymentMethodIds: z.ZodArray<z.ZodString>;
+    deliveryMethodIds: z.ZodArray<z.ZodString>;
+    warehouseIds: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type ReplaceOrgRestrictionsInput = z.infer<typeof replaceOrgRestrictionsSchema>;
+export declare const patchOrgRestrictionsSchema: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    add: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    remove: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type PatchOrgRestrictionsInput = z.infer<typeof patchOrgRestrictionsSchema>;
+export declare const triggerVatValidationSchema: z.ZodObject<{
+    providerHint: z.ZodDefault<z.ZodEnum<{
+        vies: "vies";
+        mf_pl: "mf_pl";
+        auto: "auto";
+    }>>;
+    applyAutoFill: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type TriggerVatValidationInput = z.infer<typeof triggerVatValidationSchema>;
+//# sourceMappingURL=organization.d.ts.map

package/dist/backend/schemas/organization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.d.ts","sourceRoot":"","sources":["../../../src/backend/schemas/organization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,eAAO,MAAM,wBAAwB;;;;;EAKnC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE/E,mFAAmF;AACnF,eAAO,MAAM,WAAW,wDAImC,CAAC;AAI5D,eAAO,MAAM,yBAAyB;;iBAEpC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAEjF,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE/E,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE7E,eAAO,MAAM,yBAAyB;;iBAEpC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAMjF,eAAO,MAAM,4BAA4B;;;;;iBAKvC,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEvF,eAAO,MAAM,0BAA0B;;;;iBAIrC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAInF,eAAO,MAAM,0BAA0B;;;;;;;iBAGrC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/backend/schemas/organization.js

@@ -0,0 +1,55 @@
+import { z } from 'zod';
+/**
+ * Zod schemas used by feature 026 — moderation, restrictions, and VAT
+ * validation. These live in the module (not in `@endora-commerce/contracts`) because
+ * they describe internal route bodies; the public contract for the
+ * Organization status enum is exported from `@endora-commerce/contracts` and
+ * re-imported here.
+ */
+export const organizationStatusSchema = z.enum([
+    'pending_verification',
+    'active',
+    'blocked',
+    'rejected',
+]);
+/** Tax ID — uppercased + stripped of whitespace and dashes at the Zod boundary. */
+export const taxIdSchema = z
+    .string()
+    .min(1)
+    .max(64)
+    .transform((s) => s.replace(/[\s-]+/g, '').toUpperCase());
+// ── Moderation ────────────────────────────────────────────────────────────
+export const approveOrganizationSchema = z.object({
+    expectedVersion: z.number().int().nonnegative(),
+});
+export const rejectOrganizationSchema = z.object({
+    expectedVersion: z.number().int().nonnegative(),
+    reason: z.string().min(1).max(2000),
+    notifyCustomerEmail: z.boolean().default(true),
+});
+export const blockOrganizationSchema = z.object({
+    expectedVersion: z.number().int().nonnegative(),
+    reason: z.string().max(2000).nullable().optional(),
+});
+export const unblockOrganizationSchema = z.object({
+    expectedVersion: z.number().int().nonnegative(),
+});
+// ── Restrictions (per-Organization allow-lists) ───────────────────────────
+const uuidList = z.array(z.string().uuid()).max(500);
+export const replaceOrgRestrictionsSchema = z.object({
+    expectedVersion: z.number().int().nonnegative(),
+    paymentMethodIds: uuidList,
+    deliveryMethodIds: uuidList,
+    warehouseIds: uuidList,
+});
+export const patchOrgRestrictionsSchema = z.object({
+    expectedVersion: z.number().int().nonnegative(),
+    add: uuidList.optional(),
+    remove: uuidList.optional(),
+});
+// ── VAT validation ────────────────────────────────────────────────────────
+export const triggerVatValidationSchema = z.object({
+    providerHint: z.enum(['auto', 'vies', 'mf_pl']).default('auto'),
+    applyAutoFill: z.boolean().default(false),
+});
+//# sourceMappingURL=organization.js.map

package/dist/backend/schemas/organization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.js","sourceRoot":"","sources":["../../../src/backend/schemas/organization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7C,sBAAsB;IACtB,QAAQ;IACR,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAGH,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAE5D,6EAA6E;AAE7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAChD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACnC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC/C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAChD,CAAC,CAAC;AAGH,6EAA6E;AAE7E,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,gBAAgB,EAAE,QAAQ;IAC1B,iBAAiB,EAAE,QAAQ;IAC3B,YAAY,EAAE,QAAQ;CACvB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE;IACxB,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH,6EAA6E;AAE7E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC/D,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC1C,CAAC,CAAC"}