@endora-commerce/mod-organizations 0.100.0

package/dist/backend/commands/set-cart-approval-policy.command.js

@@ -0,0 +1,56 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { Organization } from '../entities/organization.entity.js';
+import { toOrganizationRecord } from '../services/organization-details-port.js';
+/**
+ * `organization.set_cart_approval_policy` (issue #175, Principle XIII).
+ *
+ * Flips `organizations.requires_cart_approval` — the per-organisation "an Org
+ * Admin must approve a cart before checkout" policy of feature 027 US4.
+ *
+ * The write used to live in `carts` (`CartApprovalService.setPolicy*`), which
+ * held this module's entity to do it. Moving it here is what D-78 step 1 asks
+ * for, and it settles the question the direct write had been ducking: the flip
+ * has never carried an audit row on the `organizations` side, and under
+ * Constitution XIII it must. Hence a Command rather than a plain service
+ * method — the actor is derived from the caller's ambient context by the bus,
+ * never passed in, so the same Command serves the platform-admin route and the
+ * Org-Admin self-service one and records which of them it was.
+ *
+ * Idempotent: a write of the value the row already carries mutates nothing and
+ * records nothing (`skipAudit`), because an audit row saying a change happened
+ * when none did is worse than no row. That is also the behaviour `carts` had,
+ * and its cascade keys off `changed`.
+ *
+ * The lookup is `{ id }` with no `deletedAt` filter, deliberately: it is the
+ * predicate the two `setPolicy*` methods used, and narrowing it here would be a
+ * behaviour change riding along with a relocation.
+ */
+export function makeSetCartApprovalPolicyCommand(input) {
+    return {
+        action: 'organization.set_cart_approval_policy',
+        objectType: 'organization',
+        objectId: input.organizationId,
+        run: async ({ em }) => {
+            const org = await em.findOne(Organization, { id: input.organizationId });
+            if (!org) {
+                throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'organization_not_found');
+            }
+            if (org.requiresCartApproval === input.requiresCartApproval) {
+                return {
+                    result: { organization: toOrganizationRecord(org), changed: false },
+                    skipAudit: true,
+                };
+            }
+            const before = { requiresCartApproval: org.requiresCartApproval };
+            org.requiresCartApproval = input.requiresCartApproval;
+            await em.flush();
+            return {
+                result: { organization: toOrganizationRecord(org), changed: true },
+                before,
+                after: { requiresCartApproval: input.requiresCartApproval },
+            };
+        },
+    };
+}
+//# sourceMappingURL=set-cart-approval-policy.command.js.map

package/dist/backend/commands/set-cart-approval-policy.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-cart-approval-policy.command.js","sourceRoot":"","sources":["../../../src/backend/commands/set-cart-approval-policy.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAsC,MAAM,4BAA4B,CAAC;AAE7F,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,gCAAgC,CAAC,KAGhD;IACC,OAAO;QACL,MAAM,EAAE,uCAAuC;QAC/C,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE,KAAK,CAAC,cAAc;QAC9B,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YACpB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,GAAG,CAAC,oBAAoB,KAAK,KAAK,CAAC,oBAAoB,EAAE,CAAC;gBAC5D,OAAO;oBACL,MAAM,EAAE,EAAE,YAAY,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;oBACnE,SAAS,EAAE,IAAI;iBAChB,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,oBAAoB,EAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC;YAClE,GAAG,CAAC,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;YACtD,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO;gBACL,MAAM,EAAE,EAAE,YAAY,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;gBAClE,MAAM;gBACN,KAAK,EAAE,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;aAC5D,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/commands/set-credit-mode.command.d.ts

@@ -0,0 +1,16 @@
+import type { Command } from '@endora-commerce/platform/commands';
+import { Organization } from '../entities/organization.entity.js';
+/**
+ * `organization.set_credit_mode` (feature 056 US3, Principle XIII).
+ *
+ * Platform-admin-only change of a per-organization credit-inheritance mode
+ * override (`shared_pool` | `independent_default` | `null` ⇒ Settings global
+ * default). This is a money-behavior switch, so the route rejects any scoped /
+ * roll-up actor (403) before running the Command; the Command owns the audit.
+ */
+export type CreditInheritanceModeValue = 'shared_pool' | 'independent_default' | null;
+export declare function makeSetCreditModeCommand(input: {
+    organizationId: string;
+    mode: CreditInheritanceModeValue;
+}): Command<Organization>;
+//# sourceMappingURL=set-credit-mode.command.d.ts.map

package/dist/backend/commands/set-credit-mode.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-credit-mode.command.d.ts","sourceRoot":"","sources":["../../../src/backend/commands/set-credit-mode.command.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAElE,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,MAAM,0BAA0B,GAAG,aAAa,GAAG,qBAAqB,GAAG,IAAI,CAAC;AAEtF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,0BAA0B,CAAC;CAClC,GAAG,OAAO,CAAC,YAAY,CAAC,CAoBxB"}

package/dist/backend/commands/set-credit-mode.command.js

@@ -0,0 +1,25 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { Organization } from '../entities/organization.entity.js';
+export function makeSetCreditModeCommand(input) {
+    return {
+        action: 'organization.set_credit_mode',
+        objectType: 'organization',
+        objectId: input.organizationId,
+        run: async ({ em }) => {
+            const org = await em.findOne(Organization, { id: input.organizationId, deletedAt: null });
+            if (!org) {
+                throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Organization not found.');
+            }
+            const before = { creditInheritanceMode: org.creditInheritanceMode ?? null };
+            org.creditInheritanceMode = input.mode;
+            await em.flush();
+            return {
+                result: org,
+                before,
+                after: { creditInheritanceMode: input.mode },
+            };
+        },
+    };
+}
+//# sourceMappingURL=set-credit-mode.command.js.map

package/dist/backend/commands/set-credit-mode.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-credit-mode.command.js","sourceRoot":"","sources":["../../../src/backend/commands/set-credit-mode.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAYlE,MAAM,UAAU,wBAAwB,CAAC,KAGxC;IACC,OAAO;QACL,MAAM,EAAE,8BAA8B;QACtC,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE,KAAK,CAAC,cAAc;QAC9B,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YACpB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1F,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,qBAAqB,EAAE,GAAG,CAAC,qBAAqB,IAAI,IAAI,EAAE,CAAC;YAC5E,GAAG,CAAC,qBAAqB,GAAG,KAAK,CAAC,IAAI,CAAC;YACvC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,MAAM;gBACN,KAAK,EAAE,EAAE,qBAAqB,EAAE,KAAK,CAAC,IAAI,EAAE;aAC7C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/commands/set-parent.command.d.ts

@@ -0,0 +1,26 @@
+import type { Command } from '@endora-commerce/platform/commands';
+import { Organization } from '../entities/organization.entity.js';
+import type { OrganizationTreeService } from '../services/organization-tree-service.js';
+/**
+ * Tree re-parent Commands (feature 056 US1, Principle XIII).
+ *
+ * `organization.set_parent` (first-assign / detach) and `organization.move`
+ * (re-parent an existing child) share the same mechanism — cycle + depth
+ * checks, then a single-UPDATE subtree path rewrite via the tree service. Both
+ * are **reversible**: the audit `stateBefore` captures the node's prior
+ * `parent_id` + the moved subtree's prior `path` values, so a mis-move can be
+ * undone.
+ */
+export interface ReparentCommandDeps {
+    tree: OrganizationTreeService;
+}
+export interface ReparentCommandInput {
+    organizationId: string;
+    /** `null` ⇒ detach `:id` to a root. */
+    parentId: string | null;
+}
+/** Shared factory for the two re-parent actions. */
+export declare function makeReparentCommand(action: 'organization.set_parent' | 'organization.move', deps: ReparentCommandDeps, input: ReparentCommandInput): Command<Organization>;
+/** `organization.set_parent` — assign a first parent or detach to a root. */
+export declare function makeSetParentCommand(deps: ReparentCommandDeps, input: ReparentCommandInput): Command<Organization>;
+//# sourceMappingURL=set-parent.command.d.ts.map

package/dist/backend/commands/set-parent.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-parent.command.d.ts","sourceRoot":"","sources":["../../../src/backend/commands/set-parent.command.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAElE,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAExF;;;;;;;;;GASG;AAEH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,uBAAuB,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,oDAAoD;AACpD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,yBAAyB,GAAG,mBAAmB,EACvD,IAAI,EAAE,mBAAmB,EACzB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,YAAY,CAAC,CA6CvB;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,mBAAmB,EACzB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAEvB"}

package/dist/backend/commands/set-parent.command.js

@@ -0,0 +1,51 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { Organization } from '../entities/organization.entity.js';
+/** Shared factory for the two re-parent actions. */
+export function makeReparentCommand(action, deps, input) {
+    return {
+        action,
+        objectType: 'organization',
+        objectId: input.organizationId,
+        run: async ({ em }) => {
+            const node = await em.findOne(Organization, {
+                id: input.organizationId,
+                deletedAt: null,
+            });
+            if (!node) {
+                // 404 is indistinguishable from out-of-scope (Principle XI).
+                throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Organization not found.');
+            }
+            let newParent = null;
+            if (input.parentId !== null) {
+                newParent = await em.findOne(Organization, { id: input.parentId, deletedAt: null });
+                if (!newParent) {
+                    throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Parent organization not found.');
+                }
+            }
+            const beforeParentId = node.parentId ?? null;
+            const beforePath = node.path;
+            deps.tree.assertNoCycle(node, newParent);
+            await deps.tree.assertMaxDepth(em, node, newParent);
+            const { affected } = await deps.tree.applyReparentPaths(em, node, newParent);
+            await em.flush();
+            return {
+                result: node,
+                before: {
+                    parentId: beforeParentId,
+                    path: beforePath,
+                    subtreePaths: affected,
+                },
+                after: {
+                    parentId: node.parentId ?? null,
+                    path: node.path,
+                },
+            };
+        },
+    };
+}
+/** `organization.set_parent` — assign a first parent or detach to a root. */
+export function makeSetParentCommand(deps, input) {
+    return makeReparentCommand('organization.set_parent', deps, input);
+}
+//# sourceMappingURL=set-parent.command.js.map

package/dist/backend/commands/set-parent.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-parent.command.js","sourceRoot":"","sources":["../../../src/backend/commands/set-parent.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAwBlE,oDAAoD;AACpD,MAAM,UAAU,mBAAmB,CACjC,MAAuD,EACvD,IAAyB,EACzB,KAA2B;IAE3B,OAAO;QACL,MAAM;QACN,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE,KAAK,CAAC,cAAc;QAC9B,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YACpB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE;gBAC1C,EAAE,EAAE,KAAK,CAAC,cAAc;gBACxB,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,6DAA6D;gBAC7D,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;YAC7E,CAAC;YAED,IAAI,SAAS,GAAwB,IAAI,CAAC;YAC1C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC5B,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;YAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;YAE7B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACzC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YACpD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC7E,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YAEjB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE;oBACN,QAAQ,EAAE,cAAc;oBACxB,IAAI,EAAE,UAAU;oBAChB,YAAY,EAAE,QAAQ;iBACvB;gBACD,KAAK,EAAE;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;oBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;iBAChB;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAClC,IAAyB,EACzB,KAA2B;IAE3B,OAAO,mBAAmB,CAAC,yBAAyB,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC"}

package/dist/backend/demo/reset.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Withdraw `organizations`' demo data (feature 113, T222 — contract §2.5).
+ *
+ * By the fixed tax id `seed` assigns, never by a predicate over the table. This
+ * is the withdrawal that replaces `organizations`' line in the host's
+ * `truncate … cascade`, and the replacement is a repair rather than a
+ * relocation: an organisation is the tenant every buyer, address, cart, quote
+ * request and order hangs off (Principle XI), so that one word took a
+ * developer's entire test tenancy with it through the cascade, silently, on
+ * every `seed:dev`.
+ *
+ * The buyer who belongs to this organisation and the credit limit granted to it
+ * are withdrawn first, by the composition: `reset` runs the composition's
+ * withdrawal before any module's (§5.5), which is also what leaves no row
+ * referencing the organisation deleted below.
+ */
+import type { DemoResetResult, ModuleDemoContext } from '@endora-commerce/contracts';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+export declare function resetDemo(context: ModuleDemoContext<ModuleContext>): Promise<DemoResetResult>;
+//# sourceMappingURL=reset.d.ts.map

package/dist/backend/demo/reset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset.d.ts","sourceRoot":"","sources":["../../../src/backend/demo/reset.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAStE,wBAAsB,SAAS,CAC7B,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,GACxC,OAAO,CAAC,eAAe,CAAC,CAO1B"}

package/dist/backend/demo/reset.js

@@ -0,0 +1,11 @@
+import { Organization } from '../entities/organization.entity.js';
+import { DEMO_ORGANIZATION } from './rows.js';
+export async function resetDemo(context) {
+    // command-coverage-ignore: the withdrawal half of the demo data above. Same
+    // entry point, same `mustBeNonProduction()` guard, same absence of an
+    // operator to attribute the write to (contract §2.7).
+    const em = context.ctx.cradle().emFactory();
+    const removed = await em.nativeDelete(Organization, { taxId: DEMO_ORGANIZATION.taxId });
+    return { removed: [{ entity: 'Organization', count: removed }] };
+}
+//# sourceMappingURL=reset.js.map

package/dist/backend/demo/reset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset.js","sourceRoot":"","sources":["../../../src/backend/demo/reset.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAM9C,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAyC;IAEzC,4EAA4E;IAC5E,sEAAsE;IACtE,sDAAsD;IACtD,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAA2B,CAAC,SAAS,EAAE,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;IACxF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACnE,CAAC"}

package/dist/backend/demo/rows.d.ts

@@ -0,0 +1,44 @@
+/**
+ * The organisation this module's demo data creates (feature 113, T222).
+ *
+ * One place holding the data, imported by both bodies: `seed.ts` creates this
+ * row and `reset.ts` withdraws exactly it, by the `taxId` it is keyed on
+ * (contract §2.5) — the column the installation declares unique, and the one the
+ * instance composition already resolves the demo organisation by.
+ *
+ * The values are the host seed's verbatim, moved rather than rewritten. The
+ * frozen copy the parity comparison read them against is deleted with that
+ * comparison (T226); what holds them now is
+ * `test/integration/demo/demo-shop.test.ts`' recorded delta.
+ *
+ * ## What is not here
+ *
+ * The demo **buyer** and the demo **credit limit**. Both are another module's
+ * row against this one's and are therefore composition steps (§5.1):
+ * `customer_accounts.organization_id` is `NOT NULL`, so the buyer cannot even be
+ * created before it has an organisation, and a grant is `credit_limits`' row
+ * whose whole content is a reference to this one.
+ *
+ * ## §2.6 and the address
+ *
+ * `Organization.name` is a `varchar(255)` and `registeredAddress` a JSONB
+ * snapshot of four scalars, so the per-language shape §2.6 asks for has nowhere
+ * to go and putting it there would be a migration this feature does not take
+ * (contract §8). None of these values is prose in any case: a company name, a
+ * street, a city and a NIP are operator content that reads the same in both
+ * shipped languages.
+ */
+/** The demo organisation, in `Organization`'s own field names. */
+export declare const DEMO_ORGANIZATION: {
+    readonly name: "Acme B2B (demo)";
+    readonly taxId: "PL5210000099";
+    readonly status: "active";
+    readonly vatStatus: "vat_payer";
+    readonly registeredAddress: {
+        readonly street: "ul. Demo 1";
+        readonly city: "Warszawa";
+        readonly postalCode: "00-001";
+        readonly country: "PL";
+    };
+};
+//# sourceMappingURL=rows.d.ts.map

package/dist/backend/demo/rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.d.ts","sourceRoot":"","sources":["../../../src/backend/demo/rows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,kEAAkE;AAClE,eAAO,MAAM,iBAAiB;;;;;;;;;;;CAWpB,CAAC"}

package/dist/backend/demo/rows.js

@@ -0,0 +1,44 @@
+/**
+ * The organisation this module's demo data creates (feature 113, T222).
+ *
+ * One place holding the data, imported by both bodies: `seed.ts` creates this
+ * row and `reset.ts` withdraws exactly it, by the `taxId` it is keyed on
+ * (contract §2.5) — the column the installation declares unique, and the one the
+ * instance composition already resolves the demo organisation by.
+ *
+ * The values are the host seed's verbatim, moved rather than rewritten. The
+ * frozen copy the parity comparison read them against is deleted with that
+ * comparison (T226); what holds them now is
+ * `test/integration/demo/demo-shop.test.ts`' recorded delta.
+ *
+ * ## What is not here
+ *
+ * The demo **buyer** and the demo **credit limit**. Both are another module's
+ * row against this one's and are therefore composition steps (§5.1):
+ * `customer_accounts.organization_id` is `NOT NULL`, so the buyer cannot even be
+ * created before it has an organisation, and a grant is `credit_limits`' row
+ * whose whole content is a reference to this one.
+ *
+ * ## §2.6 and the address
+ *
+ * `Organization.name` is a `varchar(255)` and `registeredAddress` a JSONB
+ * snapshot of four scalars, so the per-language shape §2.6 asks for has nowhere
+ * to go and putting it there would be a migration this feature does not take
+ * (contract §8). None of these values is prose in any case: a company name, a
+ * street, a city and a NIP are operator content that reads the same in both
+ * shipped languages.
+ */
+/** The demo organisation, in `Organization`'s own field names. */
+export const DEMO_ORGANIZATION = {
+    name: 'Acme B2B (demo)',
+    taxId: 'PL5210000099',
+    status: 'active',
+    vatStatus: 'vat_payer',
+    registeredAddress: {
+        street: 'ul. Demo 1',
+        city: 'Warszawa',
+        postalCode: '00-001',
+        country: 'PL',
+    },
+};
+//# sourceMappingURL=rows.js.map

package/dist/backend/demo/rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.js","sourceRoot":"","sources":["../../../src/backend/demo/rows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,kEAAkE;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,iBAAiB;IACvB,KAAK,EAAE,cAAc;IACrB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,iBAAiB,EAAE;QACjB,MAAM,EAAE,YAAY;QACpB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,IAAI;KACd;CACO,CAAC"}

package/dist/backend/demo/seed.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `organizations`' demo data (feature 113, T222 — contract §2).
+ *
+ * The buying organisation the demo shop trades with, in the module that owns the
+ * table. It writes `organizations` and nothing else (§2.1), reads no other
+ * module's table and resolves no port (§2.2), so declaring it added no entry to
+ * this module's manifest `dependencies` (§2.3).
+ *
+ * **The buyer who belongs to it and the credit limit granted to it are not
+ * here.** Each is another module's row against this one's, so each is a
+ * composition step (§5.1) in `backend/src/seeds/demo-composition.ts`, which runs
+ * after every module's `seed` and finds this organisation waiting.
+ *
+ * Idempotent by an existence probe on the natural key (§2.4): a second run
+ * creates nothing and reports the same count.
+ */
+import type { DemoSeedResult, ModuleDemoContext } from '@endora-commerce/contracts';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+export declare function seedDemo(context: ModuleDemoContext<ModuleContext>): Promise<DemoSeedResult>;
+//# sourceMappingURL=seed.d.ts.map

package/dist/backend/demo/seed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../../src/backend/demo/seed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAUtE,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,GACxC,OAAO,CAAC,cAAc,CAAC,CA0BzB"}

package/dist/backend/demo/seed.js

@@ -0,0 +1,28 @@
+import { Organization } from '../entities/organization.entity.js';
+import { DEMO_ORGANIZATION } from './rows.js';
+export async function seedDemo(context) {
+    // command-coverage-ignore: demo data, reached only by `endora demo seed`,
+    // whose entry point calls `mustBeNonProduction()` as its first statement and
+    // outside every `try` (contract §2.7, §3.3). The guard is the enforcement:
+    // this write has no operator, no tenant and no audit reader, and the command
+    // refuses to run against a production database at all.
+    const em = context.ctx.cradle().emFactory();
+    const existing = await em.findOne(Organization, { taxId: DEMO_ORGANIZATION.taxId });
+    // Present already: left exactly as it is. An operator may have renamed it or
+    // moved it through moderation, and overwriting that here would be this body
+    // deciding its own literal outranks their change.
+    if (!existing) {
+        em.create(Organization, {
+            name: DEMO_ORGANIZATION.name,
+            taxId: DEMO_ORGANIZATION.taxId,
+            status: DEMO_ORGANIZATION.status,
+            vatStatus: DEMO_ORGANIZATION.vatStatus,
+            registeredAddress: { ...DEMO_ORGANIZATION.registeredAddress },
+        });
+        await em.flush();
+    }
+    // What the demo *holds* after the run, not what this call inserted: seeding
+    // twice must report the same counts (`DemoEntityCount`).
+    return { created: [{ entity: 'Organization', count: 1 }] };
+}
+//# sourceMappingURL=seed.js.map

package/dist/backend/demo/seed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.js","sourceRoot":"","sources":["../../../src/backend/demo/seed.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAO9C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAyC;IAEzC,0EAA0E;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,uDAAuD;IACvD,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAA2B,CAAC,SAAS,EAAE,CAAC;IAErE,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;IACpF,6EAA6E;IAC7E,4EAA4E;IAC5E,kDAAkD;IAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE;YACtB,IAAI,EAAE,iBAAiB,CAAC,IAAI;YAC5B,KAAK,EAAE,iBAAiB,CAAC,KAAK;YAC9B,MAAM,EAAE,iBAAiB,CAAC,MAAM;YAChC,SAAS,EAAE,iBAAiB,CAAC,SAAS;YACtC,iBAAiB,EAAE,EAAE,GAAG,iBAAiB,CAAC,iBAAiB,EAAE;SAC9D,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,4EAA4E;IAC5E,yDAAyD;IACzD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7D,CAAC"}

package/dist/backend/email-templates/invitation.d.ts

@@ -0,0 +1,23 @@
+import type { EmailMailerSendInput } from '@endora-commerce/contracts';
+/**
+ * Invitation email template (T178 / FR-043).
+ *
+ * Pure builder — takes the raw token (returned by InvitationService.invite)
+ * plus the surrounding context, returns the EmailMailerSendInput an Org Admin
+ * can dispatch via any Mailer. Kept template-y on purpose: production can
+ * swap in an HTML renderer by widening Mailer; today the plain-text body
+ * is enough for the SMTP transport and the in-memory test mailer alike.
+ */
+export interface BuildInvitationEmailInput {
+    invitationId: string;
+    rawToken: string;
+    inviteeEmail: string;
+    inviterName: string;
+    organizationName: string;
+    role: 'organization_admin' | 'regular_user';
+    expiresAt: Date;
+    /** Storefront base URL used to build the redemption link. */
+    acceptBaseUrl: string;
+}
+export declare function buildInvitationEmail(input: BuildInvitationEmailInput): EmailMailerSendInput;
+//# sourceMappingURL=invitation.d.ts.map

package/dist/backend/email-templates/invitation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.d.ts","sourceRoot":"","sources":["../../../src/backend/email-templates/invitation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE;;;;;;;;GAQG;AAEH,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,oBAAoB,GAAG,cAAc,CAAC;IAC5C,SAAS,EAAE,IAAI,CAAC;IAChB,6DAA6D;IAC7D,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,GAAG,oBAAoB,CAgC3F"}

package/dist/backend/email-templates/invitation.js

@@ -0,0 +1,35 @@
+export function buildInvitationEmail(input) {
+    const acceptUrl = `${trimSlash(input.acceptBaseUrl)}/invitations/${input.rawToken}/accept`;
+    const roleLabel = input.role === 'organization_admin' ? 'Organization Admin' : 'Member';
+    const expiresOn = input.expiresAt.toISOString().slice(0, 10);
+    const text = [
+        `Hi,`,
+        ``,
+        `${input.inviterName} invited you to join "${input.organizationName}" on the B2B platform`,
+        `as ${roleLabel}.`,
+        ``,
+        `Accept the invitation here (link expires ${expiresOn}):`,
+        acceptUrl,
+        ``,
+        `If you did not expect this email, you can safely ignore it — the link will`,
+        `expire on its own and no account will be created.`,
+    ].join('\n');
+    return {
+        messageId: `invitation:${input.invitationId}`,
+        to: input.inviteeEmail,
+        subject: `You're invited to join ${input.organizationName}`,
+        text,
+        meta: {
+            kind: 'organization_invitation',
+            invitationId: input.invitationId,
+            organizationName: input.organizationName,
+            role: input.role,
+            expiresAt: input.expiresAt.toISOString(),
+            acceptUrl,
+        },
+    };
+}
+function trimSlash(s) {
+    return s.endsWith('/') ? s.slice(0, -1) : s;
+}
+//# sourceMappingURL=invitation.js.map

package/dist/backend/email-templates/invitation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.js","sourceRoot":"","sources":["../../../src/backend/email-templates/invitation.ts"],"names":[],"mappings":"AAwBA,MAAM,UAAU,oBAAoB,CAAC,KAAgC;IACnE,MAAM,SAAS,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,gBAAgB,KAAK,CAAC,QAAQ,SAAS,CAAC;IAC3F,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxF,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE7D,MAAM,IAAI,GAAG;QACX,KAAK;QACL,EAAE;QACF,GAAG,KAAK,CAAC,WAAW,yBAAyB,KAAK,CAAC,gBAAgB,uBAAuB;QAC1F,MAAM,SAAS,GAAG;QAClB,EAAE;QACF,4CAA4C,SAAS,IAAI;QACzD,SAAS;QACT,EAAE;QACF,4EAA4E;QAC5E,mDAAmD;KACpD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO;QACL,SAAS,EAAE,cAAc,KAAK,CAAC,YAAY,EAAE;QAC7C,EAAE,EAAE,KAAK,CAAC,YAAY;QACtB,OAAO,EAAE,0BAA0B,KAAK,CAAC,gBAAgB,EAAE;QAC3D,IAAI;QACJ,IAAI,EAAE;YACJ,IAAI,EAAE,yBAAyB;YAC/B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;YACxC,SAAS;SACV;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/backend/email-templates/transactional-defaults.d.ts

@@ -0,0 +1,54 @@
+export declare const EMAIL_VERIFICATION_DEFAULT: {
+    defaultSubject: Record<string, string>;
+    defaultContent: Record<string, unknown>;
+    languages: string[];
+    nonDeactivatable: {
+        readonly reason: string;
+    };
+};
+export declare const ORGANIZATION_INVITATION_DEFAULT: {
+    defaultSubject: Record<string, string>;
+    defaultContent: Record<string, unknown>;
+    languages: string[];
+    nonDeactivatable: {
+        readonly reason: string;
+    };
+};
+export declare const NEW_ORG_REGISTRATION_DEFAULT: {
+    defaultSubject: Record<string, string>;
+    defaultContent: Record<string, unknown>;
+    languages: string[];
+};
+/**
+ * The two messages a moderated organisation's administrator receives
+ * (`specs/093-backend-delivered-prose/` § Out of scope — the seam-B carve-out).
+ *
+ * They were finished Polish sentences composed inside
+ * `OrganizationModerationService` and handed straight to the transport: no
+ * code, no template, no language. A buyer on an English sales channel received
+ * Polish unconditionally, and unlike an operator a buyer has no admin panel to
+ * go and check the facts in.
+ *
+ * English is the primary copy and `en-US` is first in {@link LANGS}, which is
+ * what `TransactionalEmailService` passes as the content resolver's
+ * `fallbackLanguage` — so a language with no content, and a language that could
+ * not be resolved at all, both read English (owner ruling, 2026-09-01). The
+ * Polish here is the copy these two e-mails already shipped, moved rather than
+ * retranslated.
+ *
+ * Neither is `nonDeactivatable`. The criterion the two above it meet is
+ * "required to create or regain access to an account"; a status notice is not
+ * that — the organisation's administrator can sign in and read the same status
+ * on their own screen — so switching it off stays an ordinary business choice.
+ */
+export declare const ORGANIZATION_APPROVED_DEFAULT: {
+    defaultSubject: Record<string, string>;
+    defaultContent: Record<string, unknown>;
+    languages: string[];
+};
+export declare const ORGANIZATION_REJECTED_DEFAULT: {
+    defaultSubject: Record<string, string>;
+    defaultContent: Record<string, unknown>;
+    languages: string[];
+};
+//# sourceMappingURL=transactional-defaults.d.ts.map

package/dist/backend/email-templates/transactional-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactional-defaults.d.ts","sourceRoot":"","sources":["../../../src/backend/email-templates/transactional-defaults.ts"],"names":[],"mappings":"AA4BA,eAAO,MAAM,0BAA0B;oBAIhC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;oBAmCtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;CAG7B,CAAC;AAEF,eAAO,MAAM,+BAA+B;oBAIrC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;oBAmCtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;CAG7B,CAAC;AAEF,eAAO,MAAM,4BAA4B;oBAIlC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;oBA+BtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;CAE7B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,6BAA6B;oBAInC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;oBA2BtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;CAE7B,CAAC;AAEF,eAAO,MAAM,6BAA6B;oBAInC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;oBA+BtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;CAE7B,CAAC"}