@endora-commerce/mod-organizations 0.100.0

package/dist/backend/schemas/settings.d.ts

@@ -0,0 +1,30 @@
+import { z } from 'zod';
+/**
+ * Zod schemas for the two settings keys this feature introduces.
+ *
+ * The Settings module persists values as `unknown` (it's a generic
+ * key-value store); these schemas are how the moderation service +
+ * notification dispatcher coerce + validate at the read-side.
+ */
+export declare const moderationModeSchema: z.ZodEnum<{
+    manual: "manual";
+    auto: "auto";
+}>;
+export type ModerationMode = z.infer<typeof moderationModeSchema>;
+export declare const notificationRecipientsSchema: z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>;
+export type NotificationRecipients = z.infer<typeof notificationRecipientsSchema>;
+/**
+ * Feature 056 — how a parent Organization's credit limit is consumed by
+ * sub-organizations with no own limit.
+ *
+ * Feature 072 (T138) moved this here. Both composition roots spelled it as an
+ * inline `z.enum([…])` behind a dynamic `import('zod')`, once each — the only
+ * one of this module's three setting schemas that did not live beside its two
+ * siblings, which is why the duplication went unnoticed.
+ */
+export declare const creditInheritanceModeSchema: z.ZodEnum<{
+    shared_pool: "shared_pool";
+    independent_default: "independent_default";
+}>;
+export type CreditInheritanceMode = z.infer<typeof creditInheritanceModeSchema>;
+//# sourceMappingURL=settings.d.ts.map

package/dist/backend/schemas/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../../src/backend/schemas/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,eAAO,MAAM,oBAAoB;;;EAA6B,CAAC;AAC/D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,4BAA4B,wEAarC,CAAC;AACL,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B;;;EAAiD,CAAC;AAC1F,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/backend/schemas/settings.js

@@ -0,0 +1,35 @@
+import { z } from 'zod';
+/**
+ * Zod schemas for the two settings keys this feature introduces.
+ *
+ * The Settings module persists values as `unknown` (it's a generic
+ * key-value store); these schemas are how the moderation service +
+ * notification dispatcher coerce + validate at the read-side.
+ */
+export const moderationModeSchema = z.enum(['manual', 'auto']);
+export const notificationRecipientsSchema = z
+    .array(z.string().email().max(320))
+    .max(50)
+    .transform((entries) => {
+    const seen = new Set();
+    const out = [];
+    for (const raw of entries) {
+        const key = raw.trim().toLowerCase();
+        if (!key || seen.has(key))
+            continue;
+        seen.add(key);
+        out.push(raw.trim());
+    }
+    return out;
+});
+/**
+ * Feature 056 — how a parent Organization's credit limit is consumed by
+ * sub-organizations with no own limit.
+ *
+ * Feature 072 (T138) moved this here. Both composition roots spelled it as an
+ * inline `z.enum([…])` behind a dynamic `import('zod')`, once each — the only
+ * one of this module's three setting schemas that did not live beside its two
+ * siblings, which is why the duplication went unnoticed.
+ */
+export const creditInheritanceModeSchema = z.enum(['shared_pool', 'independent_default']);
+//# sourceMappingURL=settings.js.map

package/dist/backend/schemas/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../src/backend/schemas/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAG/D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;KAClC,GAAG,CAAC,EAAE,CAAC;KACP,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;IACrB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC,CAAC;AAGL;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC,CAAC"}

package/dist/backend/services/email-verification-service.d.ts

@@ -0,0 +1,45 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type CustomerAccountMemberWritePort, type CustomerAccountReadPort } from '@endora-commerce/contracts';
+import type { OrganizationEventBus } from './registration-service.js';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+/**
+ * Email verification flow (T118).
+ *
+ * Consumes a raw token, looks up the matching EmailVerificationToken row by
+ * sha256 hash, marks it consumed (one-shot), sets CustomerAccount.emailVerifiedAt,
+ * and transitions the Organization to `active`. Emits organization.verified.v1.
+ */
+export interface EmailVerificationAccountPorts {
+    /**
+     * `customer_accounts`' published read and write (feature 075, Phase C).
+     * Verifying an address stamps a column on *that* module's row; this service
+     * used to load the entity and assign to it.
+     *
+     * With `customer_accounts` off the verification fails closed, which is the
+     * only coherent answer for a flow whose whole subject is an account.
+     */
+    read: CustomerAccountReadPort;
+    write: CustomerAccountMemberWritePort;
+}
+export declare class EmailVerificationService {
+    private readonly emFactory;
+    private readonly events;
+    private readonly accounts;
+    private readonly auditLog?;
+    constructor(emFactory: () => EntityManager, events: OrganizationEventBus, accounts: EmailVerificationAccountPorts, auditLog?: AuditPort | undefined);
+    verify(rawToken: string): Promise<{
+        organizationId: string;
+        customerAccountId: string;
+        verifiedAt: Date;
+    }>;
+    /**
+     * Test-only helper used by the `/api/v1/_test/latest-verification-token`
+     * probe — exposes the most recent UNCONSUMED, unexpired token so integration
+     * tests can complete the verification step without touching Mailhog.
+     *
+     * Returns null if no such token exists. Callers gate this behind an env
+     * check so the probe is never exposed outside of tests.
+     */
+    latestUnconsumedTokenId(): Promise<string | null>;
+}
+//# sourceMappingURL=email-verification-service.d.ts.map

package/dist/backend/services/email-verification-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-verification-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/email-verification-service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAEL,KAAK,8BAA8B,EACnC,KAAK,uBAAuB,EAC7B,MAAM,4BAA4B,CAAC;AAIpC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;;;;OAOG;IACH,IAAI,EAAE,uBAAuB,CAAC;IAC9B,KAAK,EAAE,8BAA8B,CAAC;CACvC;AAED,qBAAa,wBAAwB;IAEjC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAHT,SAAS,EAAE,MAAM,aAAa,EAC9B,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,EAAE,6BAA6B,EACvC,QAAQ,CAAC,EAAE,SAAS,YAAA;IAGjC,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QACtC,cAAc,EAAE,MAAM,CAAC;QACvB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,UAAU,EAAE,IAAI,CAAC;KAClB,CAAC;IAyFF;;;;;;;OAOG;IACG,uBAAuB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CASxD"}

package/dist/backend/services/email-verification-service.js

@@ -0,0 +1,95 @@
+import { createHash, randomUUID } from 'crypto';
+import { ERROR_CODES, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { Organization } from '../entities/organization.entity.js';
+import { EmailVerificationToken } from '../entities/email-verification-token.entity.js';
+import { recordAuditFromContext } from '@endora-commerce/platform/commands';
+export class EmailVerificationService {
+    emFactory;
+    events;
+    accounts;
+    auditLog;
+    constructor(emFactory, events, accounts, auditLog) {
+        this.emFactory = emFactory;
+        this.events = events;
+        this.accounts = accounts;
+        this.auditLog = auditLog;
+    }
+    async verify(rawToken) {
+        const em = this.emFactory();
+        const tokenHash = sha256Hex(rawToken);
+        const token = await em.findOne(EmailVerificationToken, { tokenHash });
+        if (!token) {
+            throw new HttpError(400, ERROR_CODES.TOKEN_INVALID_OR_EXPIRED, 'Verification token is invalid or expired.');
+        }
+        if (token.consumedAt) {
+            throw new HttpError(400, ERROR_CODES.TOKEN_INVALID_OR_EXPIRED, 'Verification token has already been consumed.');
+        }
+        if (token.expiresAt.getTime() <= Date.now()) {
+            throw new HttpError(400, ERROR_CODES.TOKEN_INVALID_OR_EXPIRED, 'Verification token has expired.');
+        }
+        const customer = await this.accounts.read.findById(token.customerAccountId);
+        if (!customer) {
+            throw new HttpError(400, ERROR_CODES.TOKEN_INVALID_OR_EXPIRED, 'Associated account was removed.');
+        }
+        // Feature 026 US2 — Customer may have no Organization (post-026 schema).
+        // Verification through this flow always carries an org today
+        // (RegistrationService.registerOrganization always creates the pair),
+        // but guard defensively in case a no-org Customer ever lands here.
+        if (!customer.organizationId) {
+            throw new HttpError(400, ERROR_CODES.TOKEN_INVALID_OR_EXPIRED, 'Verification flow requires an Organization.');
+        }
+        const organization = await em.findOne(Organization, { id: customer.organizationId });
+        if (!organization) {
+            throw new HttpError(400, ERROR_CODES.TOKEN_INVALID_OR_EXPIRED, 'Associated organization was removed.');
+        }
+        const now = new Date();
+        // Two units of work rather than one since the boundary cut: the account
+        // column belongs to `customer_accounts`, the Organization status and the
+        // token to this module. The account is stamped **first** because that half
+        // is the recoverable one — the token is still unconsumed if the second
+        // flush fails, so a retried verification re-runs the whole flow, and
+        // `markEmailVerified` keeps the first timestamp rather than moving it.
+        await this.accounts.write.markEmailVerified(customer.id, now);
+        organization.status = 'active';
+        token.consumedAt = now;
+        if (this.auditLog) {
+            recordAuditFromContext(this.auditLog, em, {
+                action: 'organization.email_verified',
+                objectType: 'organization',
+                objectId: organization.id,
+                stateBefore: { status: 'pending' },
+                stateAfter: { status: 'active', customerAccountId: customer.id },
+            });
+        }
+        await em.flush();
+        this.events.emit('organization.verified.v1', {
+            eventId: randomUUID(),
+            occurredAt: now.toISOString(),
+            organizationId: organization.id,
+            customerAccountId: customer.id,
+        });
+        return {
+            organizationId: organization.id,
+            customerAccountId: customer.id,
+            verifiedAt: now,
+        };
+    }
+    /**
+     * Test-only helper used by the `/api/v1/_test/latest-verification-token`
+     * probe — exposes the most recent UNCONSUMED, unexpired token so integration
+     * tests can complete the verification step without touching Mailhog.
+     *
+     * Returns null if no such token exists. Callers gate this behind an env
+     * check so the probe is never exposed outside of tests.
+     */
+    async latestUnconsumedTokenId() {
+        const em = this.emFactory();
+        const row = await em.findOne(EmailVerificationToken, { consumedAt: null }, { orderBy: { createdAt: 'desc' } });
+        return row?.id ?? null;
+    }
+}
+function sha256Hex(input) {
+    return createHash('sha256').update(input, 'utf8').digest('hex');
+}
+//# sourceMappingURL=email-verification-service.js.map

package/dist/backend/services/email-verification-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-verification-service.js","sourceRoot":"","sources":["../../../src/backend/services/email-verification-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,EACL,WAAW,GAGZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AAExF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAuB5E,MAAM,OAAO,wBAAwB;IAEhB;IACA;IACA;IACA;IAJnB,YACmB,SAA8B,EAC9B,MAA4B,EAC5B,QAAuC,EACvC,QAAoB;QAHpB,cAAS,GAAT,SAAS,CAAqB;QAC9B,WAAM,GAAN,MAAM,CAAsB;QAC5B,aAAQ,GAAR,QAAQ,CAA+B;QACvC,aAAQ,GAAR,QAAQ,CAAY;IACpC,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,QAAgB;QAK3B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,2CAA2C,CAC5C,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,+CAA+C,CAChD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,iCAAiC,CAClC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,iCAAiC,CAClC,CAAC;QACJ,CAAC;QACD,yEAAyE;QACzE,6DAA6D;QAC7D,sEAAsE;QACtE,mEAAmE;QACnE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,6CAA6C,CAC9C,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,sCAAsC,CACvC,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,wEAAwE;QACxE,yEAAyE;QACzE,2EAA2E;QAC3E,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9D,YAAY,CAAC,MAAM,GAAG,QAAQ,CAAC;QAC/B,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;QACvB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE;gBACxC,MAAM,EAAE,6BAA6B;gBACrC,UAAU,EAAE,cAAc;gBAC1B,QAAQ,EAAE,YAAY,CAAC,EAAE;gBACzB,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;gBAClC,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QAEjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;YAC3C,OAAO,EAAE,UAAU,EAAE;YACrB,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;YAC7B,cAAc,EAAE,YAAY,CAAC,EAAE;YAC/B,iBAAiB,EAAE,QAAQ,CAAC,EAAE;SAC/B,CAAC,CAAC;QAEH,OAAO;YACL,cAAc,EAAE,YAAY,CAAC,EAAE;YAC/B,iBAAiB,EAAE,QAAQ,CAAC,EAAE;YAC9B,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,uBAAuB;QAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAC1B,sBAAsB,EACtB,EAAE,UAAU,EAAE,IAAI,EAAE,EACpB,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CACnC,CAAC;QACF,OAAO,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;IACzB,CAAC;CACF;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC"}

package/dist/backend/services/invitation-service.d.ts

@@ -0,0 +1,85 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type CustomerAccountMemberWritePort, type CustomerAccountReadPort, type CustomerAccountRecord, type EmailMailerPort } from '@endora-commerce/contracts';
+import { OrganizationInvitation } from '../entities/organization-invitation.entity.js';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import { type OrgTemplateEmail } from './org-template-email.js';
+import { type OrganizationEventBus } from './registration-service.js';
+export interface InvitationResult {
+    invitation: OrganizationInvitation;
+    rawToken: string;
+}
+export interface InvitationServiceOptions {
+    /** Storefront base used when building the redemption link. */
+    acceptBaseUrl?: string;
+}
+/**
+ * `customer_accounts`' published read and write (feature 075, Phase C).
+ *
+ * An invitation is this module's row; the member it creates is that module's.
+ * The membership pre-checks used to be `em.findOne`/`em.count` on its entity
+ * and the accept used to `em.create` one, with a `hashPassword` imported from
+ * `auth`.
+ *
+ * With `customer_accounts` off every invitation path fails closed — inviting a
+ * member the platform cannot see, or accepting into an account it cannot
+ * create, are both incoherent rather than degraded.
+ */
+export interface InvitationAccountPorts {
+    read: CustomerAccountReadPort;
+    write: CustomerAccountMemberWritePort;
+}
+export declare class InvitationService {
+    private readonly emFactory;
+    private readonly accounts;
+    private readonly events?;
+    private readonly auditLog?;
+    private readonly mailer;
+    private readonly acceptBaseUrl;
+    private readonly templateEmail;
+    constructor(emFactory: () => EntityManager, accounts: InvitationAccountPorts, mailer?: EmailMailerPort | null, options?: InvitationServiceOptions, events?: OrganizationEventBus | undefined, templateEmail?: OrgTemplateEmail, auditLog?: AuditPort | undefined);
+    invite(actor: {
+        organizationId: string;
+        customerAccountId?: string | null;
+    }, input: {
+        email: string;
+        role?: 'organization_admin' | 'regular_user';
+    }): Promise<InvitationResult>;
+    /**
+     * Lists every pending invitation on the actor's organization. "Pending"
+     * means not yet consumed and not revoked; expired rows are intentionally
+     * still surfaced so the admin can see what needs cleaning up.
+     */
+    listPending(actor: {
+        organizationId: string;
+    }): Promise<OrganizationInvitation[]>;
+    revoke(actor: {
+        organizationId: string;
+    }, invitationId: string): Promise<void>;
+    /**
+     * The account insert and the invitation's `consumedAt` were one flush until
+     * feature 075's Phase C, and they are two units of work now: the account is
+     * `customer_accounts`' row, the invitation is this module's, and no port
+     * parameter may be a unit of work (D-78). The two modules share no foreign
+     * key between *these* two rows, so D-78's second answer does not apply and
+     * the seam is split rather than declared.
+     *
+     * The account is created **first**, deliberately. If the consume then fails,
+     * the buyer has the account they just set a password for and can sign in;
+     * what is left behind is a pending invitation an org admin can revoke. The
+     * other order loses the account instead, which is the half that cannot be
+     * recovered from the screen the buyer is looking at.
+     */
+    acceptByToken(rawToken: string, input: {
+        password: string;
+        firstName: string;
+        lastName: string;
+    }): Promise<{
+        customerAccount: CustomerAccountRecord;
+    }>;
+    /**
+     * Latest unconsumed token id — exposed only by the test probe so
+     * integration tests can complete the accept step without the email.
+     */
+    latestUnconsumedTokenInvitationId(): Promise<string | null>;
+}
+//# sourceMappingURL=invitation-service.d.ts.map

package/dist/backend/services/invitation-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/invitation-service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAGL,KAAK,8BAA8B,EACnC,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAEvF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElE,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,2BAA2B,CAAC;AAmBnC,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,sBAAsB,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,KAAK,EAAE,8BAA8B,CAAC;CACvC;AAED,qBAAa,iBAAiB;IAO1B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAGzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAExB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAZ5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmB;gBAG9B,SAAS,EAAE,MAAM,aAAa,EAC9B,QAAQ,EAAE,sBAAsB,EACjD,MAAM,CAAC,EAAE,eAAe,GAAG,IAAI,EAC/B,OAAO,CAAC,EAAE,wBAAwB,EACjB,MAAM,CAAC,EAAE,oBAAoB,YAAA,EAC9C,aAAa,CAAC,EAAE,gBAAgB,EACf,QAAQ,CAAC,EAAE,SAAS,YAAA;IAOjC,MAAM,CACV,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EACpE,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,cAAc,CAAA;KAAE,GACrE,OAAO,CAAC,gBAAgB,CAAC;IAoH5B;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAajF,MAAM,CACV,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,EACjC,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAgDhB;;;;;;;;;;;;;OAaG;IACG,aAAa,CACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAC/D,OAAO,CAAC;QAAE,eAAe,EAAE,qBAAqB,CAAA;KAAE,CAAC;IAiEtD;;;OAGG;IACG,iCAAiC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CASlE"}

package/dist/backend/services/invitation-service.js

@@ -0,0 +1,266 @@
+import { createHash, randomBytes, randomUUID } from 'crypto';
+import { UniqueConstraintViolationException } from '@mikro-orm/core';
+import { ERROR_CODES, normalizeEmailAddress, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { Organization } from '../entities/organization.entity.js';
+import { OrganizationInvitation } from '../entities/organization-invitation.entity.js';
+import { recordAuditFromContext } from '@endora-commerce/platform/commands';
+import { buildInvitationEmail } from '../email-templates/invitation.js';
+import { noopOrgTemplateEmail } from './org-template-email.js';
+import { emitCustomerAccountCreated, } from './registration-service.js';
+/**
+ * InvitationService (T173, FR-043).
+ *
+ * Rules:
+ *   - Org Admin invites by email + role. Existing CustomerAccount with that
+ *     email rejects with EMAIL_ALREADY_IN_ORGANIZATION (same org) or
+ *     EMAIL_BELONGS_TO_ANOTHER_ORGANIZATION (different org).
+ *   - One pending invitation per (org, email) — partial unique index in
+ *     migration 005 enforces this.
+ *   - acceptByToken: anonymous flow that needs password + first/last name.
+ *     Creates the CustomerAccount with role from the invitation, marks the
+ *     invitation consumed.
+ *   - revoke: soft-clears the pending invitation.
+ */
+const INVITATION_TTL_DAYS = 14;
+export class InvitationService {
+    emFactory;
+    accounts;
+    events;
+    auditLog;
+    mailer;
+    acceptBaseUrl;
+    templateEmail;
+    constructor(emFactory, accounts, mailer, options, events, templateEmail, auditLog) {
+        this.emFactory = emFactory;
+        this.accounts = accounts;
+        this.events = events;
+        this.auditLog = auditLog;
+        this.mailer = mailer ?? null;
+        this.acceptBaseUrl = options?.acceptBaseUrl ?? 'https://storefront.local';
+        this.templateEmail = templateEmail ?? noopOrgTemplateEmail;
+    }
+    async invite(actor, input) {
+        const em = this.emFactory();
+        const role = input.role ?? 'regular_user';
+        // This module keeps a row of its own on the same address, so it folds it
+        // the same way the account table does rather than by a private rule.
+        const invitedEmail = normalizeEmailAddress(input.email);
+        // Feature 051 — a personal (B2C) organization is single-member by
+        // definition; it cannot invite additional members.
+        const actorOrg = await em.findOne(Organization, { id: actor.organizationId });
+        if (actorOrg?.isPersonal) {
+            throw new HttpError(422, ERROR_CODES.VALIDATION_FAILED, 'A personal (individual) account cannot invite members.');
+        }
+        // Pre-check existing membership.
+        const existingByEmail = await this.accounts.read.findByEmail(invitedEmail);
+        if (existingByEmail) {
+            if (existingByEmail.organizationId === actor.organizationId) {
+                throw new HttpError(409, ERROR_CODES.EMAIL_ALREADY_IN_ORGANIZATION, 'This email already belongs to a member of your organization.');
+            }
+            throw new HttpError(409, ERROR_CODES.EMAIL_BELONGS_TO_ANOTHER_ORGANIZATION, 'This email belongs to a member of another organization.');
+        }
+        const rawToken = randomBytes(32).toString('base64url');
+        const invitation = em.create(OrganizationInvitation, {
+            organizationId: actor.organizationId,
+            invitedByCustomerAccountId: actor.customerAccountId ?? null,
+            email: invitedEmail,
+            role,
+            tokenHash: sha256Hex(rawToken),
+            expiresAt: new Date(Date.now() + INVITATION_TTL_DAYS * 24 * 60 * 60 * 1_000),
+        });
+        if (this.auditLog) {
+            recordAuditFromContext(this.auditLog, em, {
+                action: 'organization.invite',
+                objectType: 'organization',
+                objectId: actor.organizationId,
+                stateBefore: null,
+                stateAfter: { email: invitedEmail, role },
+            });
+        }
+        try {
+            await em.persistAndFlush(invitation);
+        }
+        catch (err) {
+            if (err instanceof UniqueConstraintViolationException) {
+                throw new HttpError(409, ERROR_CODES.EMAIL_ALREADY_IN_ORGANIZATION, 'A pending invitation for this email already exists.');
+            }
+            throw err;
+        }
+        if (this.mailer || this.templateEmail !== noopOrgTemplateEmail) {
+            const organization = await em.findOne(Organization, { id: actor.organizationId });
+            const inviter = actor.customerAccountId
+                ? await this.accounts.read.findById(actor.customerAccountId)
+                : null;
+            const inviterName = inviter
+                ? [inviter.firstName, inviter.lastName].filter(Boolean).join(' ').trim() || inviter.email
+                : 'Platform support';
+            const organizationName = organization?.name ?? 'your organization';
+            const message = buildInvitationEmail({
+                invitationId: invitation.id,
+                rawToken,
+                inviteeEmail: invitation.email,
+                inviterName,
+                organizationName,
+                role: invitation.role,
+                expiresAt: invitation.expiresAt,
+                acceptBaseUrl: this.acceptBaseUrl,
+            });
+            const acceptUrl = message.meta?.acceptUrl ?? '';
+            const sentViaTemplate = await this.templateEmail.trySend({
+                code: 'organization_invitation',
+                to: invitation.email,
+                messageId: message.messageId,
+                variables: {
+                    organizationName,
+                    inviterName,
+                    roleLabel: invitation.role === 'organization_admin' ? 'Organization Admin' : 'Member',
+                    acceptUrl,
+                    expiresOn: invitation.expiresAt.toISOString().slice(0, 10),
+                },
+                meta: message.meta,
+            });
+            if (!sentViaTemplate && this.mailer) {
+                const outcome = await this.mailer.send(message);
+                if (outcome.status !== 'sent') {
+                    // This method answers the invitation, not the message, so the
+                    // non-send is named rather than returned — and since D-59 the same
+                    // fact is a row an operator can read after the log has rotated.
+                    console.warn('[organizations] the invitation e-mail was not sent', {
+                        invitationId: invitation.id,
+                        reason: outcome.reason,
+                    });
+                }
+            }
+        }
+        return { invitation, rawToken };
+    }
+    /**
+     * Lists every pending invitation on the actor's organization. "Pending"
+     * means not yet consumed and not revoked; expired rows are intentionally
+     * still surfaced so the admin can see what needs cleaning up.
+     */
+    async listPending(actor) {
+        const em = this.emFactory();
+        return em.find(OrganizationInvitation, {
+            organizationId: actor.organizationId,
+            consumedAt: null,
+            revokedAt: null,
+        }, { orderBy: { createdAt: 'desc' } });
+    }
+    async revoke(actor, invitationId) {
+        const em = this.emFactory();
+        const invitation = await em.findOne(OrganizationInvitation, {
+            id: invitationId,
+            organizationId: actor.organizationId,
+        });
+        if (!invitation) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Invitation not found.');
+        }
+        if (invitation.consumedAt || invitation.revokedAt)
+            return;
+        if (invitation.role === 'organization_admin') {
+            const adminCount = await this.accounts.read.countByOrganizationRole(actor.organizationId, 'organization_admin', { activeOnly: true });
+            if (adminCount === 0) {
+                const otherPending = await em.count(OrganizationInvitation, {
+                    organizationId: actor.organizationId,
+                    role: 'organization_admin',
+                    consumedAt: null,
+                    revokedAt: null,
+                    id: { $ne: invitation.id },
+                });
+                if (otherPending === 0) {
+                    throw new HttpError(409, ERROR_CODES.CANNOT_REVOKE_LAST_ADMIN_INVITE, 'Cannot revoke the only pending administrator invitation while the organization has no active administrator.');
+                }
+            }
+        }
+        invitation.revokedAt = new Date();
+        if (this.auditLog) {
+            recordAuditFromContext(this.auditLog, em, {
+                action: 'organization.invite_revoke',
+                objectType: 'organization',
+                objectId: invitation.organizationId,
+                stateBefore: { email: invitation.email, role: invitation.role },
+                stateAfter: null,
+            });
+        }
+        await em.flush();
+    }
+    /**
+     * The account insert and the invitation's `consumedAt` were one flush until
+     * feature 075's Phase C, and they are two units of work now: the account is
+     * `customer_accounts`' row, the invitation is this module's, and no port
+     * parameter may be a unit of work (D-78). The two modules share no foreign
+     * key between *these* two rows, so D-78's second answer does not apply and
+     * the seam is split rather than declared.
+     *
+     * The account is created **first**, deliberately. If the consume then fails,
+     * the buyer has the account they just set a password for and can sign in;
+     * what is left behind is a pending invitation an org admin can revoke. The
+     * other order loses the account instead, which is the half that cannot be
+     * recovered from the screen the buyer is looking at.
+     */
+    async acceptByToken(rawToken, input) {
+        const em = this.emFactory();
+        const tokenHash = sha256Hex(rawToken);
+        const invitation = await em.findOne(OrganizationInvitation, { tokenHash });
+        if (!invitation || invitation.consumedAt || invitation.revokedAt) {
+            throw new HttpError(400, ERROR_CODES.TOKEN_INVALID_OR_EXPIRED, 'Invitation is invalid or has already been consumed.');
+        }
+        if (invitation.expiresAt.getTime() <= Date.now()) {
+            throw new HttpError(400, ERROR_CODES.TOKEN_INVALID_OR_EXPIRED, 'Invitation has expired.');
+        }
+        // FR-041: at most one CustomerAccount per email installation-wide. The
+        // owner re-checks inside `create`; this one keeps the invitation
+        // unconsumed when the address is already taken.
+        const existing = await this.accounts.read.findByEmail(invitation.email);
+        if (existing) {
+            throw new HttpError(409, ERROR_CODES.EMAIL_ALREADY_REGISTERED, 'An account with this email already exists.');
+        }
+        const organization = await em.findOne(Organization, { id: invitation.organizationId });
+        if (!organization) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Organization no longer exists.');
+        }
+        const customer = await this.accounts.write.create({
+            organizationId: invitation.organizationId,
+            email: invitation.email,
+            password: input.password,
+            firstName: input.firstName,
+            lastName: input.lastName,
+            role: invitation.role,
+            // Accepting an invitation implies a confirmed address: it was delivered
+            // to that address.
+            emailVerified: true,
+        });
+        invitation.consumedAt = new Date();
+        if (this.auditLog) {
+            recordAuditFromContext(this.auditLog, em, {
+                action: 'organization.invite_accept',
+                objectType: 'organization',
+                objectId: invitation.organizationId,
+                stateBefore: null,
+                stateAfter: { email: invitation.email, role: invitation.role, customerAccountId: customer.id },
+            });
+        }
+        await em.flush();
+        if (this.events) {
+            emitCustomerAccountCreated(this.events, customer.id, invitation.organizationId);
+        }
+        return { customerAccount: customer };
+    }
+    /**
+     * Latest unconsumed token id — exposed only by the test probe so
+     * integration tests can complete the accept step without the email.
+     */
+    async latestUnconsumedTokenInvitationId() {
+        const em = this.emFactory();
+        const row = await em.findOne(OrganizationInvitation, { consumedAt: null, revokedAt: null }, { orderBy: { createdAt: 'desc' } });
+        return row?.id ?? null;
+    }
+}
+function sha256Hex(input) {
+    return createHash('sha256').update(input, 'utf8').digest('hex');
+}
+// silence unused — randomUUID may be needed by callers later
+void randomUUID;
+//# sourceMappingURL=invitation-service.js.map

package/dist/backend/services/invitation-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation-service.js","sourceRoot":"","sources":["../../../src/backend/services/invitation-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE7D,OAAO,EAAE,kCAAkC,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EACL,WAAW,EACX,qBAAqB,GAKtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAyB,MAAM,yBAAyB,CAAC;AACtF,OAAO,EACL,0BAA0B,GAE3B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;GAaG;AAEH,MAAM,mBAAmB,GAAG,EAAE,CAAC;AA6B/B,MAAM,OAAO,iBAAiB;IAOT;IACA;IAGA;IAEA;IAZF,MAAM,CAAyB;IAC/B,aAAa,CAAS;IAEtB,aAAa,CAAmB;IAEjD,YACmB,SAA8B,EAC9B,QAAgC,EACjD,MAA+B,EAC/B,OAAkC,EACjB,MAA6B,EAC9C,aAAgC,EACf,QAAoB;QANpB,cAAS,GAAT,SAAS,CAAqB;QAC9B,aAAQ,GAAR,QAAQ,CAAwB;QAGhC,WAAM,GAAN,MAAM,CAAuB;QAE7B,aAAQ,GAAR,QAAQ,CAAY;QAErC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,0BAA0B,CAAC;QAC1E,IAAI,CAAC,aAAa,GAAG,aAAa,IAAI,oBAAoB,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAoE,EACpE,KAAsE;QAEtE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,cAAc,CAAC;QAC1C,yEAAyE;QACzE,qEAAqE;QACrE,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAExD,kEAAkE;QAClE,mDAAmD;QACnD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;QAC9E,IAAI,QAAQ,EAAE,UAAU,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,iBAAiB,EAC7B,wDAAwD,CACzD,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAC3E,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,eAAe,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC5D,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,6BAA6B,EACzC,8DAA8D,CAC/D,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,qCAAqC,EACjD,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,EAAE,CAAC,MAAM,CAAC,sBAAsB,EAAE;YACnD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,0BAA0B,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;YAC3D,KAAK,EAAE,YAAY;YACnB,IAAI;YACJ,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;YAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;SAC7E,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE;gBACxC,MAAM,EAAE,qBAAqB;gBAC7B,UAAU,EAAE,cAAc;gBAC1B,QAAQ,EAAE,KAAK,CAAC,cAAc;gBAC9B,WAAW,EAAE,IAAI;gBACjB,UAAU,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,kCAAkC,EAAE,CAAC;gBACtD,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,6BAA6B,EACzC,qDAAqD,CACtD,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,KAAK,oBAAoB,EAAE,CAAC;YAC/D,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YAClF,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB;gBACrC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAC5D,CAAC,CAAC,IAAI,CAAC;YACT,MAAM,WAAW,GAAG,OAAO;gBACzB,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,KAAK;gBACzF,CAAC,CAAC,kBAAkB,CAAC;YACvB,MAAM,gBAAgB,GAAG,YAAY,EAAE,IAAI,IAAI,mBAAmB,CAAC;YACnE,MAAM,OAAO,GAAG,oBAAoB,CAAC;gBACnC,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,QAAQ;gBACR,YAAY,EAAE,UAAU,CAAC,KAAK;gBAC9B,WAAW;gBACX,gBAAgB;gBAChB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;YACH,MAAM,SAAS,GAAI,OAAO,CAAC,IAA2C,EAAE,SAAS,IAAI,EAAE,CAAC;YACxF,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;gBACvD,IAAI,EAAE,yBAAyB;gBAC/B,EAAE,EAAE,UAAU,CAAC,KAAK;gBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE;oBACT,gBAAgB;oBAChB,WAAW;oBACX,SAAS,EAAE,UAAU,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ;oBACrF,SAAS;oBACT,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBAC3D;gBACD,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAChD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC9B,8DAA8D;oBAC9D,mEAAmE;oBACnE,gEAAgE;oBAChE,OAAO,CAAC,IAAI,CAAC,oDAAoD,EAAE;wBACjE,YAAY,EAAE,UAAU,CAAC,EAAE;wBAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,KAAiC;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC,IAAI,CACZ,sBAAsB,EACtB;YACE,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;SAChB,EACD,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAiC,EACjC,YAAoB;QAEpB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,sBAAsB,EAAE;YAC1D,EAAE,EAAE,YAAY;YAChB,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS;YAAE,OAAO;QAE1D,IAAI,UAAU,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CACjE,KAAK,CAAC,cAAc,EACpB,oBAAoB,EACpB,EAAE,UAAU,EAAE,IAAI,EAAE,CACrB,CAAC;YACF,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,sBAAsB,EAAE;oBAC1D,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,IAAI,EAAE,oBAAoB;oBAC1B,UAAU,EAAE,IAAI;oBAChB,SAAS,EAAE,IAAI;oBACf,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE;iBAC3B,CAAC,CAAC;gBACH,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,+BAA+B,EAC3C,6GAA6G,CAC9G,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,UAAU,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE;gBACxC,MAAM,EAAE,4BAA4B;gBACpC,UAAU,EAAE,cAAc;gBAC1B,QAAQ,EAAE,UAAU,CAAC,cAAc;gBACnC,WAAW,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE;gBAC/D,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,aAAa,CACjB,QAAgB,EAChB,KAAgE;QAEhE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YACjE,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,qDAAqD,CACtD,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,yBAAyB,CAC1B,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,iEAAiE;QACjE,gDAAgD;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;YAChD,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,wEAAwE;YACxE,mBAAmB;YACnB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,UAAU,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE;gBACxC,MAAM,EAAE,4BAA4B;gBACpC,UAAU,EAAE,cAAc;gBAC1B,QAAQ,EAAE,UAAU,CAAC,cAAc;gBACnC,WAAW,EAAE,IAAI;gBACjB,UAAU,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE,EAAE;aAC/F,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QAEjB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,0BAA0B,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iCAAiC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAC1B,sBAAsB,EACtB,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EACrC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CACnC,CAAC;QACF,OAAO,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;IACzB,CAAC;CACF;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,6DAA6D;AAC7D,KAAK,UAAU,CAAC"}

package/dist/backend/services/normalize-name.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `normalizeOrganizationName` moved to `@endora-commerce/contracts` in feature 075's
+ * Phase P: it is pure over its argument, so a gated port answering 503 to
+ * "fold these diacritics" would be a bug rather than a degrade (FR-013).
+ *
+ * It has to be one implementation, not two — the entity's `@BeforeCreate` /
+ * `@BeforeUpdate` hooks write `name_search` with it and `orders`' list filter
+ * matches against that column with it, so a copy that drifted would make the
+ * filter stop matching silently.
+ *
+ * Re-exported here for the length of Phase P, which cuts no consumer.
+ */
+export { normalizeOrganizationName } from '@endora-commerce/contracts';
+//# sourceMappingURL=normalize-name.d.ts.map

package/dist/backend/services/normalize-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-name.d.ts","sourceRoot":"","sources":["../../../src/backend/services/normalize-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/backend/services/normalize-name.js

@@ -0,0 +1,14 @@
+/**
+ * `normalizeOrganizationName` moved to `@endora-commerce/contracts` in feature 075's
+ * Phase P: it is pure over its argument, so a gated port answering 503 to
+ * "fold these diacritics" would be a bug rather than a degrade (FR-013).
+ *
+ * It has to be one implementation, not two — the entity's `@BeforeCreate` /
+ * `@BeforeUpdate` hooks write `name_search` with it and `orders`' list filter
+ * matches against that column with it, so a copy that drifted would make the
+ * filter stop matching silently.
+ *
+ * Re-exported here for the length of Phase P, which cuts no consumer.
+ */
+export { normalizeOrganizationName } from '@endora-commerce/contracts';
+//# sourceMappingURL=normalize-name.js.map

package/dist/backend/services/normalize-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-name.js","sourceRoot":"","sources":["../../../src/backend/services/normalize-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC"}