@endora-commerce/mod-organizations 0.100.0

package/dist/backend/entities/organization.entity.js

@@ -0,0 +1,282 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { BeforeCreate, BeforeUpdate, Entity, Index, OptionalProps, PrimaryKey, Property, Unique, } from '@mikro-orm/core';
+import { GlobalEntity } from '@endora-commerce/platform/tenancy';
+import { randomUUID } from 'crypto';
+import { normalizeOrganizationName } from '../services/normalize-name.js';
+/**
+ * Organization — the buyer-side legal entity. Owns Customer Accounts,
+ * Addresses, and (via FKs that land with later US) Quote Requests, Orders,
+ * and Credit Limits.
+ *
+ * `taxId` is globally unique in the installation (Polish NIP by default; the
+ * exact format is spec-validated at the Zod boundary).
+ *
+ * Status lifecycle (feature 026):
+ *   pending_verification -> active   (moderation approve, or auto-approve)
+ *   pending_verification -> rejected (moderation reject; terminal)
+ *   active               -> blocked  (operator-driven; reversible)
+ *   blocked              -> active   (unblock)
+ *
+ * Legacy `suspended` is migrated to `blocked` by migration 047 and is no
+ * longer a valid runtime value.
+ *
+ * `version` is the optimistic-lock token used by every moderation /
+ * restriction / VAT-fill write — see OrganizationModerationService for the
+ * conflict handling.
+ *
+ * `nameSearch` is a denormalized lowercased + diacritic-stripped copy of
+ * `name`, kept in sync by the BeforeCreate / BeforeUpdate hooks below. It
+ * backs the admin OrganizationPicker's diacritic-insensitive typeahead
+ * without needing pg_trgm/unaccent extensions.
+ */
+let Organization = class Organization {
+    [OptionalProps];
+    id = randomUUID();
+    name;
+    legalName;
+    taxId;
+    status = 'pending_verification';
+    vatStatus = 'vat_payer';
+    /**
+     * Feature 051 — `true` for a single-member Personal Organization backing a B2C
+     * (individual) customer; `false` for a company organization. Personal orgs are
+     * auto-provisioned, created `active`, and excluded from B2B admin surfaces.
+     */
+    isPersonal = false;
+    /**
+     * Optional pricing bucket. Feeds the feature 011 Application Rule
+     * evaluator's `customerGroup` criterion — a Sale or Base list with a
+     * `customerGroup ∈ {…}` rule applies to every Organization carrying
+     * that `customerGroupId`.
+     */
+    customerGroupId;
+    /** JSONB snapshot of { street, city, postalCode, country }. */
+    registeredAddress;
+    /**
+     * Feature 038 (US4) — additional email addresses that also receive an order
+     * confirmation for every order placed by a Customer of this Organization.
+     * Read by the orders module through OrganizationConfirmationEmailsPort.
+     */
+    orderConfirmationEmails = [];
+    // ── feature 026: moderation + VAT validation tracking ───────────────────
+    vatValidatedAt;
+    vatValidationProvider;
+    vatValidationOutcome;
+    blockedReason;
+    blockedAt;
+    rejectedReason;
+    rejectedAt;
+    approvedAt;
+    approvedByAdminUserId;
+    /**
+     * Per-Organization policy flag (feature 027 US4). When `true`, ordinary
+     * Customer members of this Organization must submit their cart for
+     * approval by an Organization Administrator before checkout. Carts
+     * created by an Organization Administrator are exempt from the gate
+     * (self-approval exemption — see research.md §R11 for feature 027).
+     */
+    requiresCartApproval = false;
+    /**
+     * Organization-level override of the warehouse-picking (fulfilment) strategy
+     * applied when reserving stock at order placement (precedence: Product →
+     * Organization → Sales Channel setting → platform default). `null` ⇒ inherit.
+     * Mirrors the per-product columns on `Product`. When `defined_order`,
+     * `fulfilmentStrategyWarehouseOrder` carries the ordered warehouse-id walk.
+     */
+    fulfilmentStrategy;
+    fulfilmentStrategyWarehouseOrder;
+    // ── feature 056: organization hierarchy ────────────────────────────────
+    /**
+     * Nullable self-referential parent (`parent_id`). NULL ⇒ this org is a root.
+     * The FK (`REFERENCES organizations(id) ON DELETE RESTRICT`) is enforced at
+     * the DB level (migration 097); writes go through the tree Commands only, so
+     * `path` and cycle/depth invariants stay consistent.
+     */
+    parentId;
+    /**
+     * Materialized ancestor-chain path `'/<rootId>/…/<thisId>/'`. Backfilled to
+     * `'/<id>/'` (a root) for every pre-feature org. A `text_pattern_ops` prefix
+     * index backs single-query subtree (`path LIKE :selfPath || '%'`) traversal.
+     */
+    path = '';
+    /**
+     * Per-org platform-admin override of the credit-inheritance mode. NULL ⇒ use
+     * the Settings global default. Set only through the `organization.set_credit_mode`
+     * Command (platform-admin gated).
+     */
+    creditInheritanceMode;
+    /**
+     * Lowercased + diacritic-stripped copy of `name`. Kept in sync by the
+     * BeforeCreate / BeforeUpdate hooks; never read or written by callers
+     * directly.
+     */
+    nameSearch = '';
+    /** Optimistic-lock token (auto-incremented by MikroORM on every update). */
+    version;
+    createdAt = new Date();
+    updatedAt = new Date();
+    // Feature 055 — Custom Fields Layer value bag (inherits host tenant scope).
+    customFieldValues = {};
+    deletedAt;
+    // ── lifecycle hooks ────────────────────────────────────────────────────
+    syncNameSearch(_args) {
+        this.nameSearch = normalizeOrganizationName(this.name);
+    }
+};
+__decorate([
+    PrimaryKey({ type: 'uuid' }),
+    __metadata("design:type", String)
+], Organization.prototype, "id", void 0);
+__decorate([
+    Property({ type: 'string', length: 255 }),
+    Index(),
+    __metadata("design:type", String)
+], Organization.prototype, "name", void 0);
+__decorate([
+    Property({ type: 'string', length: 255, nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "legalName", void 0);
+__decorate([
+    Property({ type: 'string', length: 32 }),
+    Unique(),
+    __metadata("design:type", String)
+], Organization.prototype, "taxId", void 0);
+__decorate([
+    Property({ type: 'string', length: 32 }),
+    Index(),
+    __metadata("design:type", String)
+], Organization.prototype, "status", void 0);
+__decorate([
+    Property({ type: 'string', length: 16 }),
+    __metadata("design:type", String)
+], Organization.prototype, "vatStatus", void 0);
+__decorate([
+    Property({ type: 'boolean' }),
+    Index(),
+    __metadata("design:type", Boolean)
+], Organization.prototype, "isPersonal", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    Index(),
+    __metadata("design:type", Object)
+], Organization.prototype, "customerGroupId", void 0);
+__decorate([
+    Property({ type: 'json' }),
+    __metadata("design:type", Object)
+], Organization.prototype, "registeredAddress", void 0);
+__decorate([
+    Property({ type: 'json' }),
+    __metadata("design:type", Array)
+], Organization.prototype, "orderConfirmationEmails", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "vatValidatedAt", void 0);
+__decorate([
+    Property({ type: 'string', length: 32, nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "vatValidationProvider", void 0);
+__decorate([
+    Property({ type: 'string', length: 16, nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "vatValidationOutcome", void 0);
+__decorate([
+    Property({ type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "blockedReason", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "blockedAt", void 0);
+__decorate([
+    Property({ type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "rejectedReason", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "rejectedAt", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "approvedAt", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "approvedByAdminUserId", void 0);
+__decorate([
+    Property({ type: 'boolean' }),
+    __metadata("design:type", Boolean)
+], Organization.prototype, "requiresCartApproval", void 0);
+__decorate([
+    Property({ type: 'string', length: 32, nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "fulfilmentStrategy", void 0);
+__decorate([
+    Property({ type: 'json', nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "fulfilmentStrategyWarehouseOrder", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    Index(),
+    __metadata("design:type", Object)
+], Organization.prototype, "parentId", void 0);
+__decorate([
+    Property({ type: 'text' }),
+    __metadata("design:type", String)
+], Organization.prototype, "path", void 0);
+__decorate([
+    Property({ type: 'string', length: 20, nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "creditInheritanceMode", void 0);
+__decorate([
+    Property({ type: 'string', length: 255 }),
+    __metadata("design:type", String)
+], Organization.prototype, "nameSearch", void 0);
+__decorate([
+    Property({ type: 'integer', version: true }),
+    __metadata("design:type", Number)
+], Organization.prototype, "version", void 0);
+__decorate([
+    Property({ type: 'datetime', onCreate: () => new Date() }),
+    __metadata("design:type", Date)
+], Organization.prototype, "createdAt", void 0);
+__decorate([
+    Property({ type: 'datetime', onUpdate: () => new Date() }),
+    __metadata("design:type", Date)
+], Organization.prototype, "updatedAt", void 0);
+__decorate([
+    Property({ type: 'json' }),
+    __metadata("design:type", Object)
+], Organization.prototype, "customFieldValues", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], Organization.prototype, "deletedAt", void 0);
+__decorate([
+    BeforeCreate(),
+    BeforeUpdate(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], Organization.prototype, "syncNameSearch", null);
+Organization = __decorate([
+    GlobalEntity(),
+    Entity({ tableName: 'organizations' })
+], Organization);
+export { Organization };
+export const ORGANIZATION_STATUSES = [
+    'pending_verification',
+    'active',
+    'blocked',
+    'rejected',
+];
+//# sourceMappingURL=organization.entity.js.map

package/dist/backend/entities/organization.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.entity.js","sourceRoot":"","sources":["../../../src/backend/entities/organization.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,KAAK,EACL,aAAa,EACb,UAAU,EACV,QAAQ,EACR,MAAM,GAEP,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGI,IAAM,YAAY,GAAlB,MAAM,YAAY;IACvB,CAAC,aAAa,CAAC,CA4BD;IAGd,EAAE,GAAW,UAAU,EAAE,CAAC;IAI1B,IAAI,CAAU;IAGd,SAAS,CAAiB;IAI1B,KAAK,CAAU;IAIf,MAAM,GAAuB,sBAAsB,CAAC;IAGpD,SAAS,GAAkD,WAAW,CAAC;IAEvE;;;;OAIG;IAGH,UAAU,GAAY,KAAK,CAAC;IAE5B;;;;;OAKG;IAGH,eAAe,CAAiB;IAEhC,+DAA+D;IAE/D,iBAAiB,CAKf;IAEF;;;;OAIG;IAEH,uBAAuB,GAAa,EAAE,CAAC;IAEvC,2EAA2E;IAG3E,cAAc,CAAe;IAG7B,qBAAqB,CAAgC;IAGrD,oBAAoB,CAA+B;IAGnD,aAAa,CAAiB;IAG9B,SAAS,CAAe;IAGxB,cAAc,CAAiB;IAG/B,UAAU,CAAe;IAGzB,UAAU,CAAe;IAGzB,qBAAqB,CAAiB;IAEtC;;;;;;OAMG;IAEH,oBAAoB,GAAY,KAAK,CAAC;IAEtC;;;;;;OAMG;IAEH,kBAAkB,CAMT;IAGT,gCAAgC,CAAmB;IAEnD,0EAA0E;IAE1E;;;;;OAKG;IAGH,QAAQ,CAAiB;IAEzB;;;;OAIG;IAEH,IAAI,GAAW,EAAE,CAAC;IAElB;;;;OAIG;IAEH,qBAAqB,CAAgD;IAErE;;;;OAIG;IAEH,UAAU,GAAW,EAAE,CAAC;IAExB,4EAA4E;IAE5E,OAAO,CAAU;IAGjB,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAG7B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAE7B,4EAA4E;IAE5E,iBAAiB,GAA4B,EAAE,CAAC;IAGhD,SAAS,CAAe;IAExB,0EAA0E;IAI1E,cAAc,CAAC,KAA8B;QAC3C,IAAI,CAAC,UAAU,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;CACF,CAAA;AA9KC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;wCACH;AAI1B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACzC,KAAK,EAAE;;0CACM;AAGd;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CAChC;AAI1B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxC,MAAM,EAAE;;2CACM;AAIf;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxC,KAAK,EAAE;;4CAC4C;AAGpD;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;+CAC8B;AASvE;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,KAAK,EAAE;;gDACoB;AAU5B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,KAAK,EAAE;;qDACwB;AAIhC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;uDAMzB;AAQF;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;6DACY;AAKvC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDAClB;AAG7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2DACJ;AAGrD;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0DACN;AAGnD;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDACb;AAG9B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CACvB;AAGxB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACZ;AAG/B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;gDACtB;AAGzB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;gDACtB;AAGzB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2DACL;AAUtC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;0DACQ;AAUtC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wDAOhD;AAGT;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sEACQ;AAYnD;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,KAAK,EAAE;;8CACiB;AAQzB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;0CACT;AAQlB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2DACY;AAQrE;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;gDAClB;AAIxB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;6CAC5B;AAGjB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;+CAAc;AAG7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;+CAAc;AAI7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;uDACqB;AAGhD;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CACvB;AAMxB;IAFC,YAAY,EAAE;IACd,YAAY,EAAE;;;;kDAGd;AA7MU,YAAY;IAFxB,YAAY,EAAE;IACd,MAAM,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;GAC1B,YAAY,CA8MxB;;AAQD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,sBAAsB;IACtB,QAAQ;IACR,SAAS;IACT,UAAU;CACF,CAAC"}

package/dist/backend/index.d.ts

@@ -0,0 +1,250 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { ChannelMemberEntityType } from '@endora-commerce/contracts';
+import type { AddressServicePort, AdminNotificationRecordPort, CustomFieldValuePort, CustomerAccountMemberWritePort, CustomerAccountReadPort, CustomerAuthPort, CustomerPasswordResetPort, CustomerRolePort, DictionaryValidator, EmailDefaultsRegistryPort, EmailMailerPort, PriceListReadPort, TemplateEmailPort, TransactionalEmailSender, VatValidator } from '@endora-commerce/contracts';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import type { CommandBus } from '@endora-commerce/platform/commands';
+import type { EventBus } from '@endora-commerce/platform/events';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+import type { OrganizationReadPort } from '@endora-commerce/platform/kernel';
+import type { RequireAdminAnyFactory, RequireAdminFactory } from '@endora-commerce/platform/kernel';
+import type { SalesChannelResolutionPort } from '@endora-commerce/platform/kernel';
+import type { SettingsReadPort } from '@endora-commerce/platform/kernel';
+import { OrganizationRestrictionService } from './services/organization-restriction-service.js';
+import { OrganizationTreeService } from './services/organization-tree-service.js';
+import { OrganizationInheritanceService } from './services/organization-inheritance-service.js';
+import { OrganizationModerationService } from './services/organization-moderation-service.js';
+import { type SalesRepAssignmentPort } from './services/sales-rep-assignment-service.js';
+import { OrgRegistrationNotifier } from './services/org-registration-notifier.js';
+import { Organization } from './entities/organization.entity.js';
+import { organizationsModule, type OrganizationsModuleOptions } from './plugin.js';
+import { EmailVerificationToken } from './entities/email-verification-token.entity.js';
+import { OrganizationDeliveryMethodLink } from './entities/organization-delivery-method-link.entity.js';
+import { OrganizationInvitation } from './entities/organization-invitation.entity.js';
+import { OrganizationPaymentMethodLink } from './entities/organization-payment-method-link.entity.js';
+import { OrganizationSalesRepAssignment } from './entities/organization-sales-rep-assignment.entity.js';
+import { OrganizationTaxIdValidation } from './entities/organization-tax-id-validation.entity.js';
+import { OrganizationWarehouseLink } from './entities/organization-warehouse-link.entity.js';
+/**
+ * `organizations` — the tenancy root, and seven container names claimed by a
+ * table that nobody was registering (feature 072, wave 4, T138).
+ *
+ * This module owns more root-built machinery than any other converted so far:
+ * eight services, two EventBus subscriptions, and the four closures that turn a
+ * request actor into a per-Organization allow-list. Converting it drains all
+ * seven `HOST_REGISTERED_PORTS` entries declared `'organizations'`.
+ *
+ * **The allow-lists are the interesting part.** `buildOrgAllowListResolver` in
+ * each root fused two unrelated reads into one closure: *actor → organization
+ * id* (composition-shaped — production reads `request.actor`, the harness
+ * `request.testActor`) and *organization id → allowed ids* (this module's
+ * domain knowledge). Fused, it could only be a root contribution, which is why
+ * `payment_methods`, `delivery_methods` and `inventory` each declared a
+ * contribution point for it. Split, neither half is a contribution point: the
+ * first is `customerOrganizationIdResolver`, which the **platform** registers
+ * once in `composeApp` — a deployment input the roots each wrote out until
+ * `specs/117-instance-bring-up/` Phase 6, where it turned out that no
+ * composition other than those two had it at all — the second is
+ * {@link OrganizationRestrictionService.allowedIdsFor} behind a gated port, and
+ * each consumer composes the two itself.
+ *
+ * That split is forced, not stylistic. A module may not write a name another
+ * module owns — `ctx.di.register` claims every key and the kernel throws
+ * `DuplicateRegistrationError` on the second writer — so "`organizations`
+ * contributes to `payment_methods`' contribution point" was never available.
+ * Contribution points are a root↔module seam because a root sits outside the
+ * manifest graph and has no `dependencies` array that could record the edge; a
+ * module↔module edge always can be expressed as the dependent resolving the
+ * provider's port, and therefore must be.
+ *
+ * **The degrade moved with it.** The old closure wrapped the read in a bare
+ * `catch` that returned "no restriction". Around a *port* call that also
+ * swallows `ModuleDisabledError`, turning a fail-closed gate into a fail-open
+ * restriction check — on the one path whose whole job is to restrict. The
+ * "organization unknown or soft-deleted ⇒ unrestricted" policy now lives in
+ * `allowedIdsFor`'s return type, where it belongs, and no consumer needs a
+ * `catch` at all.
+ *
+ * **Two EventBus subscriptions stop being ungated.** Both roots called
+ * `eventBus.on('organization.registered.v1', …)` directly, so the admin
+ * notification and the moderation reactor fired even with the module switched
+ * off — the defect `shipments` and `payments` produced in wave 2. They are
+ * `ctx.subscribe` now (Constitution XVII item 2).
+ *
+ * **`dictionaryValidator` is passed for the first time.** `RegistrationService`
+ * has always taken one and `validateCountry` returns early without it; neither
+ * root ever passed one, so organization registration accepted any country
+ * string, including a code an operator had deactivated. Third instance of that
+ * exact shape after `sales_channels` and `inventory`.
+ *
+ * This module is **non-deactivatable**, and `customer_accounts` and
+ * `credit_limits` both declare it as a dependency. Where it sits in the
+ * composer's emitted order buys nothing on top of that: since D-45 there is one
+ * registration pass and registration resolves nothing, so the manifest edge is
+ * what the lifecycle, the migration order and an operator's switch all read.
+ *
+ * **The sales-rep scope came home in T143a cluster 6, and the two roots did not
+ * agree on it.** Production built `SalesRepAssignmentService` *with* the
+ * feature-056 subtree deps — the org tree and the `organizations:rollup`
+ * capability check — so a rep holding the capability saw the subtree of each
+ * assignment. The harness built the same class with neither, and its
+ * orders/RFQ scope resolver did not use even that: it ran its own raw SQL over
+ * `organization_sales_rep_assignments`. So the roll-up rule was exercised by no
+ * test through either path, and a flat list is what every test asserted
+ * against. `organizationSalesRepScopePort` is one implementation for both
+ * compositions, and it is `quote_requests`' `salesRepSubtree` wiring spelled
+ * once instead of a fourth time.
+ */
+/** What `organizations` resolves from the container, and the names it owns. */
+/**
+ * `OrganizationTaxProfilePort` was declared here and is
+ * `@endora-commerce/contracts`' since `specs/110-instance-repository/` T118.
+ * That is a correction rather than a relocation: it is a `providePort` name, so
+ * its type argument is a contract type and never the provider's own file
+ * (composition checklist item 3), and every consumer of the port had to name
+ * this package to spell the type it resolves.
+ *
+ * It is deliberately **not** re-exported from here. A transitional
+ * `export type { … }` was written and withdrawn: the barrel then re-exports a
+ * name whose source is another package, and
+ * `test/unit/packages/module-package-entity-surface.test.ts` refuses that as
+ * `unresolvable-reexport` — whether the barrel carries an entity class by name
+ * becomes *unknown* rather than false, which is the direction D-168 may not be
+ * wrong in. Two spellings for one type was the wrong shape anyway.
+ */
+export interface OrganizationsCradle {
+    /**
+     * Feature 120 (FR-015) — the platform's channel-bridge registry, resolved by
+     * **container name** rather than imported. The shape is the narrow one this
+     * module needs, which is what `ctx.cradle<C>()` asks an author to declare;
+     * the registry itself is the kernel's and is published on no barrel.
+     */
+    readonly salesChannelBridgeRegistry: {
+        register(bridge: {
+            entityType: ChannelMemberEntityType;
+            table: string;
+            entityIdColumn: string;
+        }): void;
+    };
+    readonly emFactory: () => EntityManager;
+    readonly eventBus: EventBus;
+    readonly commandBus: CommandBus;
+    readonly auditLogService: AuditPort;
+    readonly settingsReadPort: SettingsReadPort;
+    readonly salesChannelResolutionPort: SalesChannelResolutionPort;
+    readonly requireAdmin: RequireAdminFactory;
+    readonly requireAdminAny: RequireAdminAnyFactory;
+    readonly requireCustomer: OrganizationsModuleOptions['requireCustomer'];
+    readonly customerContextResolver: OrganizationsModuleOptions['resolveCustomerContext'];
+    readonly customerAuthPort: CustomerAuthPort;
+    readonly passwordResetService: CustomerPasswordResetPort;
+    readonly customerRolePort: CustomerRolePort;
+    /**
+     * The two halves of `customer_accounts`' published surface this module runs
+     * its member lifecycle over (feature 075, Phase C). Every route file and
+     * three services named that module's entity before the cut.
+     */
+    readonly customerAccountReadPort: CustomerAccountReadPort;
+    readonly customerAccountMemberWritePort: CustomerAccountMemberWritePort;
+    readonly addressService: AddressServicePort;
+    readonly customFieldValueService: CustomFieldValuePort;
+    readonly dictionaryValidator: DictionaryValidator;
+    readonly emailMailer: EmailMailerPort;
+    readonly adminNotificationRecordPort: AdminNotificationRecordPort;
+    /** `price_lists`' own answer to "which lists are active" (feature 075, Phase C). */
+    readonly priceListReadPort: PriceListReadPort;
+    /**
+     * `transactional_emails`' own accessors since T120. The sender is late-bound
+     * — that module publishes it at route registration — and the template adapter
+     * is the one this module used to build for itself from a helper it owned.
+     */
+    readonly transactionalEmailSenderAccessor: () => TransactionalEmailSender | undefined;
+    readonly templateEmailPort: TemplateEmailPort;
+    readonly emailDefaultsPort: EmailDefaultsRegistryPort;
+    /**
+     * Deployment inputs. The storefront origin an invitation link points at is an
+     * environment fact; the probe is a harness fact — a route that hands back the
+     * last verification token must never exist in production.
+     */
+    readonly storefrontBaseUrl: string;
+    readonly organizationsExposeTestProbe: boolean;
+    /**
+     * Contribution point: what else a login must do. `carts` merges the anonymous
+     * cart, `comparisons` adopts the anonymous comparison. Points *outward* from
+     * this module to two that depend on it, so it cannot be a port; defaulted to
+     * doing nothing, which is a coherent login.
+     */
+    readonly organizationsLoginHook: NonNullable<OrganizationsModuleOptions['onLogin']>;
+    /**
+     * Contribution point: the VAT-ID clients. Production contributes nothing and
+     * this module talks to VIES and Ministerstwo Finansów; the harness scripts
+     * both, because no test may open that socket.
+     */
+    /**
+     * The two tax-ID adapters. **Both required**, unlike the service's own
+     * optional constructor fields: this module always registers a default pair
+     * and every composition that overrides them overrides both, so an optional
+     * type here would only be a way for `vatValidatorPort` to hand out
+     * `undefined` for a state no composition can produce (feature 076, D-86).
+     */
+    readonly organizationsTaxIdClients: {
+        readonly vies: VatValidator;
+        readonly mfPl: VatValidator;
+    };
+    readonly organizationReadPort: OrganizationReadPort;
+    readonly organizationRestrictionPort: OrganizationRestrictionService;
+    readonly organizationTreeService: OrganizationTreeService;
+    /** Owned by `admin_roles`: whether this rep holds the roll-up capability. */
+    readonly permissionService: {
+        hasPermission(adminUserId: string, permission: string): Promise<boolean>;
+    };
+    /**
+     * Which organizations a sales-rep admin may see, subtree-expanded when the
+     * rep holds `organizations:rollup` (feature 056 / T143a).
+     */
+    readonly organizationSalesRepScopePort: SalesRepAssignmentPort;
+    readonly organizationInheritancePort: OrganizationInheritanceService;
+    readonly organizationModerationService: OrganizationModerationService;
+    readonly organizationRegistrationNotifier: OrgRegistrationNotifier;
+    readonly organizations: ReturnType<typeof organizationsModule>;
+}
+export declare function registerModule(ctx: ModuleContext): void;
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table->owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ *
+ * The order is the one `db/entities-registry.generated.ts` declared before this
+ * module became a package, so the registered set is the same list in the same
+ * sequence.
+ */
+export declare const entities: (typeof Organization | typeof OrganizationPaymentMethodLink | typeof OrganizationDeliveryMethodLink | typeof OrganizationWarehouseLink | typeof EmailVerificationToken | typeof OrganizationTaxIdValidation | typeof OrganizationSalesRepAssignment | typeof OrganizationInvitation)[];
+/**
+ * Published for the composition root, which contributes these shapes and must
+ * name their types. It reached the source files by relative path until
+ * 2026-08-26, which is `TS6059` under `backend/tsconfig.build.json`'s
+ * `rootDir` — even for an `import type`, because a type-only import still
+ * joins the program. Nothing in `backend/src` may name a package's source, so
+ * the type has to arrive through the published subpath.
+ */
+export type { OrganizationTreeService } from './services/organization-tree-service.js';
+/**
+ * The sales-channel membership bridge this module owns (feature 120, FR-015).
+ *
+ * Exported as well as registered because the owning module is the only honest
+ * source for it: a caller that composes no platform — the bare-database test
+ * harness, which constructs the kernel's membership service directly — declares
+ * these from here rather than from a list of nine it keeps itself, which is
+ * exactly the total map this feature deleted.
+ */
+export declare const salesChannelBridges: ReadonlyArray<{
+    readonly entityType: ChannelMemberEntityType;
+    readonly table: string;
+    readonly entityIdColumn: string;
+}>;
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,KAAK,EACV,kBAAkB,EAClB,2BAA2B,EAG3B,oBAAoB,EACpB,8BAA8B,EAC9B,uBAAuB,EACvB,gBAAgB,EAChB,yBAAyB,EACzB,gBAAgB,EAChB,mBAAmB,EACnB,yBAAyB,EACzB,eAAe,EAOf,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACxB,YAAY,EAEb,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAczE,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAG9F,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAElF,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAIjE,OAAO,EAAE,mBAAmB,EAAE,KAAK,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAUnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wDAAwD,CAAC;AACxG,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EAAE,8BAA8B,EAAE,MAAM,wDAAwD,CAAC;AACxG,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AAClG,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAE7F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AAEH,+EAA+E;AAC/E;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,mBAAmB;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,0BAA0B,EAAE;QACnC,QAAQ,CAAC,MAAM,EAAE;YACf,UAAU,EAAE,uBAAuB,CAAC;YACpC,KAAK,EAAE,MAAM,CAAC;YACd,cAAc,EAAE,MAAM,CAAC;SACxB,GAAG,IAAI,CAAC;KACV,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,0BAA0B,EAAE,0BAA0B,CAAC;IAChE,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,0BAA0B,CAAC,iBAAiB,CAAC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,wBAAwB,CAAC,CAAC;IACvF,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,oBAAoB,EAAE,yBAAyB,CAAC;IACzD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;IAC1D,QAAQ,CAAC,8BAA8B,EAAE,8BAA8B,CAAC;IACxE,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC;IAC5C,QAAQ,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;IACvD,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,2BAA2B,EAAE,2BAA2B,CAAC;IAClE,oFAAoF;IACpF,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,gCAAgC,EAAE,MAAM,wBAAwB,GAAG,SAAS,CAAC;IACtF,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;IACtD;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,4BAA4B,EAAE,OAAO,CAAC;IAC/C;;;;;OAKG;IACH,QAAQ,CAAC,sBAAsB,EAAE,WAAW,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC;IACpF;;;;OAIG;IACH;;;;;;OAMG;IACH,QAAQ,CAAC,yBAAyB,EAAE;QAClC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;QAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;KAC7B,CAAC;IACF,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD,QAAQ,CAAC,2BAA2B,EAAE,8BAA8B,CAAC;IACrE,QAAQ,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;IAC1D,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,EAAE;QAC1B,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KAC1E,CAAC;IACF;;;OAGG;IACH,QAAQ,CAAC,6BAA6B,EAAE,sBAAsB,CAAC;IAC/D,QAAQ,CAAC,2BAA2B,EAAE,8BAA8B,CAAC;IACrE,QAAQ,CAAC,6BAA6B,EAAE,6BAA6B,CAAC;IACtE,QAAQ,CAAC,gCAAgC,EAAE,uBAAuB,CAAC;IACnE,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CAChE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAolBvD;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,QAAQ,wRASpB,CAAC;AAEF;;;;;;;GAOG;AACH,YAAY,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAEvF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,aAAa,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,CAEA,CAAC"}