@endora-commerce/mod-organizations 0.100.0

package/dist/backend/integrations/ministerstwo-finansow-client.js

@@ -0,0 +1,172 @@
+import { z } from 'zod';
+/**
+ * Ministerstwo Finansów ("Biała lista podatników VAT") REST client.
+ * Feature 026 US7.
+ *
+ * Hits `GET https://wl-api.mf.gov.pl/api/search/nip/{nip}?date=YYYY-MM-DD`.
+ * Times out at 5 s; degrades to `deferred` on network errors or 5xx
+ * responses. A clean "not registered" becomes `failed` / `not_found`.
+ *
+ * MF rate-limits to ~10 req/sec per source IP. The simple in-process
+ * token bucket here enforces a conservative 1 req/sec; production
+ * traffic for this feature is < 100/day so the bucket will rarely
+ * throttle.
+ */
+const MF_RESPONSE_SCHEMA = z.object({
+    result: z
+        .object({
+        subject: z
+            .object({
+            name: z.string().nullable().optional(),
+            nip: z.string().nullable().optional(),
+            statusVat: z.string().nullable().optional(),
+            regon: z.string().nullable().optional(),
+            workingAddress: z.string().nullable().optional(),
+            residenceAddress: z.string().nullable().optional(),
+        })
+            .nullable()
+            .optional(),
+    })
+        .nullable()
+        .optional(),
+    code: z.string().nullable().optional(),
+    message: z.string().nullable().optional(),
+});
+export class MinisterstwoFinansowClient {
+    provider = 'mf_pl';
+    baseUrl;
+    timeoutMs;
+    fetchImpl;
+    minIntervalMs;
+    lastRequestAt = 0;
+    constructor(options = {}) {
+        this.baseUrl = options.baseUrl ?? 'https://wl-api.mf.gov.pl';
+        this.timeoutMs = options.timeoutMs ?? 5000;
+        this.fetchImpl = options.fetchImpl ?? globalThis.fetch.bind(globalThis);
+        this.minIntervalMs = options.minIntervalMs ?? 100;
+    }
+    async validate(input) {
+        const nip = input.taxId.replace(/^PL/i, '').replace(/[\s-]+/g, '');
+        if (!/^[0-9]{10}$/.test(nip)) {
+            return {
+                outcome: 'unverified',
+                legalName: null,
+                address: null,
+                errorKind: 'invalid_format',
+            };
+        }
+        await this.throttle();
+        const date = todayIsoDate();
+        const url = `${this.baseUrl}/api/search/nip/${nip}?date=${date}`;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+        try {
+            const res = await this.fetchImpl(url, {
+                method: 'GET',
+                headers: { accept: 'application/json' },
+                signal: controller.signal,
+            });
+            if (res.status === 429) {
+                return {
+                    outcome: 'deferred',
+                    legalName: null,
+                    address: null,
+                    errorKind: 'rate_limited',
+                };
+            }
+            if (res.status >= 500) {
+                return {
+                    outcome: 'deferred',
+                    legalName: null,
+                    address: null,
+                    errorKind: `provider_${res.status}`,
+                };
+            }
+            if (res.status === 404) {
+                return {
+                    outcome: 'failed',
+                    legalName: null,
+                    address: null,
+                    errorKind: 'not_found',
+                };
+            }
+            if (!res.ok) {
+                return {
+                    outcome: 'failed',
+                    legalName: null,
+                    address: null,
+                    errorKind: `http_${res.status}`,
+                };
+            }
+            const json = await res.json().catch(() => null);
+            const parsed = MF_RESPONSE_SCHEMA.safeParse(json);
+            if (!parsed.success) {
+                return {
+                    outcome: 'deferred',
+                    legalName: null,
+                    address: null,
+                    errorKind: 'invalid_response_shape',
+                };
+            }
+            const subject = parsed.data.result?.subject ?? null;
+            if (!subject) {
+                return {
+                    outcome: 'failed',
+                    legalName: null,
+                    address: null,
+                    errorKind: 'not_found',
+                };
+            }
+            // Active VAT-payer statuses on MF: 'Czynny' (active) is the green
+            // light; everything else means the taxpayer is registered but
+            // suspended / cancelled. We surface those as `failed` rather than
+            // `validated` because they generally shouldn't trade.
+            const statusOk = (subject.statusVat ?? '').toLowerCase().includes('czynn');
+            return {
+                outcome: statusOk ? 'validated' : 'failed',
+                legalName: subject.name ?? null,
+                address: subject.workingAddress
+                    ? { line1: subject.workingAddress, countryCode: 'PL' }
+                    : subject.residenceAddress
+                        ? { line1: subject.residenceAddress, countryCode: 'PL' }
+                        : { countryCode: 'PL' },
+                errorKind: statusOk ? null : 'not_active_vat_payer',
+            };
+        }
+        catch (err) {
+            if (err.name === 'AbortError') {
+                return {
+                    outcome: 'deferred',
+                    legalName: null,
+                    address: null,
+                    errorKind: 'network_timeout',
+                };
+            }
+            return {
+                outcome: 'deferred',
+                legalName: null,
+                address: null,
+                errorKind: 'network_error',
+            };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    async throttle() {
+        const now = Date.now();
+        const elapsed = now - this.lastRequestAt;
+        if (elapsed < this.minIntervalMs) {
+            await new Promise((resolve) => setTimeout(resolve, this.minIntervalMs - elapsed));
+        }
+        this.lastRequestAt = Date.now();
+    }
+}
+function todayIsoDate() {
+    const d = new Date();
+    const yyyy = d.getUTCFullYear();
+    const mm = String(d.getUTCMonth() + 1).padStart(2, '0');
+    const dd = String(d.getUTCDate()).padStart(2, '0');
+    return `${yyyy}-${mm}-${dd}`;
+}
+//# sourceMappingURL=ministerstwo-finansow-client.js.map

package/dist/backend/integrations/ministerstwo-finansow-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ministerstwo-finansow-client.js","sourceRoot":"","sources":["../../../src/backend/integrations/ministerstwo-finansow-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;;;;;;;;GAYG;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,OAAO,EAAE,CAAC;aACP,MAAM,CAAC;YACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YAChD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SACnD,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,EAAE;KACd,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,EAAE;IACb,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAUH,MAAM,OAAO,0BAA0B;IAC5B,QAAQ,GAAG,OAAgB,CAAC;IACpB,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,SAAS,CAA0B;IACnC,aAAa,CAAS;IAC/B,aAAa,GAAG,CAAC,CAAC;IAE1B,YAAY,UAA6C,EAAE;QACzD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,0BAA0B,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxE,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAwB;QACrC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,YAAY;gBACrB,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,gBAAgB;aAC5B,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAEtB,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,mBAAmB,GAAG,SAAS,IAAI,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;gBACpC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO;oBACL,OAAO,EAAE,UAAU;oBACnB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,cAAc;iBAC1B,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBACtB,OAAO;oBACL,OAAO,EAAE,UAAU;oBACnB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,YAAY,GAAG,CAAC,MAAM,EAAE;iBACpC,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,WAAW;iBACvB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE;iBAChC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EAAE,UAAU;oBACnB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,wBAAwB;iBACpC,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC;YACpD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,WAAW;iBACvB,CAAC;YACJ,CAAC;YACD,kEAAkE;YAClE,8DAA8D;YAC9D,kEAAkE;YAClE,sDAAsD;YACtD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3E,OAAO;gBACL,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;gBAC1C,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;gBAC/B,OAAO,EAAE,OAAO,CAAC,cAAc;oBAC7B,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE;oBACtD,CAAC,CAAC,OAAO,CAAC,gBAAgB;wBACxB,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,gBAAgB,EAAE,WAAW,EAAE,IAAI,EAAE;wBACxD,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE;gBAC3B,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB;aACpD,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAyB,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACrD,OAAO;oBACL,OAAO,EAAE,UAAU;oBACnB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,iBAAiB;iBAC7B,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,eAAe;aAC3B,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC;QACzC,IAAI,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACjC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,CAAC;CACF;AAED,SAAS,YAAY;IACnB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,MAAM,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC;IAChC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,GAAG,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AAC/B,CAAC"}

package/dist/backend/integrations/vies-client.d.ts

@@ -0,0 +1,18 @@
+import type { VatValidationResult, VatValidator } from '../services/vat-validator-port.js';
+export interface ViesClientOptions {
+    baseUrl?: string;
+    timeoutMs?: number;
+    fetchImpl?: typeof globalThis.fetch;
+}
+export declare class ViesClient implements VatValidator {
+    readonly provider: "vies";
+    private readonly baseUrl;
+    private readonly timeoutMs;
+    private readonly fetchImpl;
+    constructor(options?: ViesClientOptions);
+    validate(input: {
+        taxId: string;
+        countryCode?: string | undefined;
+    }): Promise<VatValidationResult>;
+}
+//# sourceMappingURL=vies-client.d.ts.map

package/dist/backend/integrations/vies-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vies-client.d.ts","sourceRoot":"","sources":["../../../src/backend/integrations/vies-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,mBAAmB,EACnB,YAAY,EACb,MAAM,mCAAmC,CAAC;AAqB3C,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACrC;AAED,qBAAa,UAAW,YAAW,YAAY;IAC7C,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;gBAExC,OAAO,GAAE,iBAAsB;IAOrC,QAAQ,CAAC,KAAK,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAClC,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAkFjC"}

package/dist/backend/integrations/vies-client.js

@@ -0,0 +1,133 @@
+import { z } from 'zod';
+/**
+ * VIES REST client (feature 026 US7).
+ *
+ * Hits `POST https://ec.europa.eu/taxation_customs/vies/rest-api/check-vat-number`.
+ * Times out at 5 s; degrades to `deferred` on network errors or 5xx
+ * responses. A clean `valid=false` becomes `failed` / `not_found`.
+ *
+ * The response shape is validated by Zod — if VIES ever surfaces a
+ * different schema we degrade to `deferred` rather than crashing.
+ */
+const VIES_RESPONSE_SCHEMA = z.object({
+    valid: z.boolean().optional(),
+    isValid: z.boolean().optional(),
+    countryCode: z.string().optional(),
+    vatNumber: z.string().optional(),
+    name: z.string().nullable().optional(),
+    address: z.string().nullable().optional(),
+});
+export class ViesClient {
+    provider = 'vies';
+    baseUrl;
+    timeoutMs;
+    fetchImpl;
+    constructor(options = {}) {
+        this.baseUrl =
+            options.baseUrl ?? 'https://ec.europa.eu/taxation_customs/vies/rest-api/check-vat-number';
+        this.timeoutMs = options.timeoutMs ?? 5000;
+        this.fetchImpl = options.fetchImpl ?? globalThis.fetch.bind(globalThis);
+    }
+    async validate(input) {
+        const { countryCode, number } = splitEuVatId(input.taxId, input.countryCode);
+        if (!countryCode || !number) {
+            return {
+                outcome: 'unverified',
+                legalName: null,
+                address: null,
+                errorKind: 'invalid_format',
+            };
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+        try {
+            const res = await this.fetchImpl(this.baseUrl, {
+                method: 'POST',
+                headers: { 'content-type': 'application/json' },
+                body: JSON.stringify({ countryCode, vatNumber: number }),
+                signal: controller.signal,
+            });
+            if (res.status >= 500) {
+                return {
+                    outcome: 'deferred',
+                    legalName: null,
+                    address: null,
+                    errorKind: `provider_${res.status}`,
+                };
+            }
+            if (!res.ok) {
+                return {
+                    outcome: 'failed',
+                    legalName: null,
+                    address: null,
+                    errorKind: `http_${res.status}`,
+                };
+            }
+            const json = await res.json().catch(() => null);
+            const parsed = VIES_RESPONSE_SCHEMA.safeParse(json);
+            if (!parsed.success) {
+                return {
+                    outcome: 'deferred',
+                    legalName: null,
+                    address: null,
+                    errorKind: 'invalid_response_shape',
+                };
+            }
+            const valid = parsed.data.valid ?? parsed.data.isValid ?? false;
+            if (!valid) {
+                return {
+                    outcome: 'failed',
+                    legalName: null,
+                    address: null,
+                    errorKind: 'not_found',
+                };
+            }
+            return {
+                outcome: 'validated',
+                legalName: parsed.data.name ?? null,
+                address: parsed.data.address
+                    ? { line1: parsed.data.address, countryCode }
+                    : { countryCode },
+                errorKind: null,
+            };
+        }
+        catch (err) {
+            if (err.name === 'AbortError') {
+                return {
+                    outcome: 'deferred',
+                    legalName: null,
+                    address: null,
+                    errorKind: 'network_timeout',
+                };
+            }
+            return {
+                outcome: 'deferred',
+                legalName: null,
+                address: null,
+                errorKind: 'network_error',
+            };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+/**
+ * VIES expects the country code split from the digits. Accept either
+ * `'PL1234567890'`, `'PL 123-456-78-90'`, or a separate country hint +
+ * a digit-only tax id. The function strips whitespace and dashes
+ * defensively (the Zod boundary already does this for new orgs but the
+ * service-side path also accepts historical inputs).
+ */
+function splitEuVatId(taxId, hint) {
+    const cleaned = taxId.replace(/[\s-]+/g, '').toUpperCase();
+    const m = cleaned.match(/^([A-Z]{2})(.+)$/);
+    if (m) {
+        return { countryCode: m[1], number: m[2] };
+    }
+    if (hint && /^[A-Z]{2}$/.test(hint)) {
+        return { countryCode: hint.toUpperCase(), number: cleaned };
+    }
+    return { countryCode: null, number: null };
+}
+//# sourceMappingURL=vies-client.js.map

package/dist/backend/integrations/vies-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vies-client.js","sourceRoot":"","sources":["../../../src/backend/integrations/vies-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;;;;;GASG;AACH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAQH,MAAM,OAAO,UAAU;IACZ,QAAQ,GAAG,MAAe,CAAC;IACnB,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,SAAS,CAA0B;IAEpD,YAAY,UAA6B,EAAE;QACzC,IAAI,CAAC,OAAO;YACV,OAAO,CAAC,OAAO,IAAI,sEAAsE,CAAC;QAC5F,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAGd;QACC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC7E,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,YAAY;gBACrB,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,gBAAgB;aAC5B,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE;gBAC7C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;gBACxD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBACtB,OAAO;oBACL,OAAO,EAAE,UAAU;oBACnB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,YAAY,GAAG,CAAC,MAAM,EAAE;iBACpC,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE;iBAChC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EAAE,UAAU;oBACnB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,wBAAwB;iBACpC,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;YAChE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,WAAW;iBACvB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI;gBACnC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;oBAC1B,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE;oBAC7C,CAAC,CAAC,EAAE,WAAW,EAAE;gBACnB,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAyB,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACrD,OAAO;oBACL,OAAO,EAAE,UAAU;oBACnB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,iBAAiB;iBAC7B,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,eAAe;aAC3B,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CACnB,KAAa,EACb,IAAwB;IAExB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC5C,IAAI,CAAC,EAAE,CAAC;QACN,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC"}

package/dist/backend/plugin.d.ts

@@ -0,0 +1,126 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { AddressServicePort, CartMergeOutcome, CustomFieldValuePort, CustomerAccountMemberWritePort, CustomerAccountReadPort, CustomerAuthPort, CustomerPasswordResetPort, CustomerRolePort, EmailMailerPort } from '@endora-commerce/contracts';
+import type { EventBus } from '@endora-commerce/platform/events';
+import type { OrganizationModerationService } from './services/organization-moderation-service.js';
+import type { OrganizationRestrictionService } from './services/organization-restriction-service.js';
+import type { OrganizationEffectivePriceListsService } from './services/organization-effective-pricelists-service.js';
+import type { OrganizationTaxIdValidationService } from './services/organization-tax-id-validation-service.js';
+import { type OrgTemplateEmail } from './services/org-template-email.js';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import type { CommandBus } from '@endora-commerce/platform/commands';
+import type { RequireAdminAnyFactory } from '@endora-commerce/platform/kernel';
+import type { DictionaryValidator } from '@endora-commerce/contracts';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+/**
+ * Composition root for the organizations + customer_accounts + addresses
+ * module family. One plugin registers all three because their routes share
+ * the same auth flow and serializers.
+ */
+export interface OrganizationsModuleOptions {
+    /**
+     * Feature 072 (T094) — `customer_accounts` owns these now. Injected rather
+     * than built here, because this host and `customers` each built their own and the
+     * MFA argument differed between them.
+     */
+    customerAuthService: CustomerAuthPort;
+    passwordResetService: CustomerPasswordResetPort;
+    customerRoleService: CustomerRolePort;
+    /**
+     * `customer_accounts`' published read and member write (feature 075, Phase
+     * C). Registration, invitation accept, the member panel, `GET /me` and the
+     * Org-Admin gate all reached this module's entity directly before the cut.
+     */
+    customerAccountRead: CustomerAccountReadPort;
+    customerAccountWrite: CustomerAccountMemberWritePort;
+    emFactory: () => EntityManager;
+    eventBus: EventBus;
+    requireCustomer: (req: FastifyRequest, reply: unknown) => Promise<void>;
+    resolveCustomerContext: (req: FastifyRequest) => {
+        customerAccountId: string;
+        organizationId: string;
+        impersonatorAdminUserId?: string | null;
+    };
+    /** Expose the /api/v1/_test/latest-verification-token probe (test-only). */
+    exposeTestProbe?: boolean;
+    /**
+     * Optional post-login hook — the commerce module uses this to merge
+     * carts; the comparisons module uses it to adopt the customer's
+     * anonymous Comparison (R-2). Each token is extracted from the request
+     * cookies if present and forwarded to the hook. The optional
+     * `cartMerge` return field carries the outcome of the cart-merge step
+     * back to the login route so it can serialise the result for the
+     * storefront (feature 037-cart-merge-on-login).
+     */
+    onLogin?: (ctx: {
+        customerAccountId: string;
+        /** Null for no-org Customer accounts (feature 026 US2). */
+        organizationId: string | null;
+        anonymousCartToken?: string;
+        /** `compare_token` cookie value, if the caller was building an anonymous comparison. */
+        anonymousCompareToken?: string;
+    }) => Promise<{
+        cartMerge?: CartMergeOutcome;
+    }>;
+    /** Admin gate for /admin/organizations routes. */
+    requireAdmin?: RequireAdminFactory;
+    /** Read-only org routes accept `customers:read` OR `customers:manage`. */
+    requireAdminAny?: RequireAdminAnyFactory;
+    /**
+     * Transport for the invitation and verification e-mails.
+     *
+     * Required since feature 075's Phase C. It defaulted to `new ConsoleMailer()`
+     * — a value import of `email`'s driver — and the default has had no reachable
+     * caller since the container started resolving `emailMailer` for every
+     * composition: an omitted mailer would mean an e-mail nobody receives and a
+     * registration that reports it as sent.
+     */
+    mailer: EmailMailerPort;
+    /**
+     * Feature 047 / 072 (T120) — the template-routed sender, supplied by
+     * `transactional_emails` through `templateEmailPort`. Absent, every
+     * template-routed send falls back to the legacy in-code builder.
+     */
+    templateEmail?: OrgTemplateEmail;
+    /** Storefront base URL for the invitation accept link. */
+    storefrontBaseUrl?: string;
+    /** Required when `requireAdmin` is set — audit trail for admin org mutations. */
+    auditLogService?: AuditPort;
+    dictionaryValidator?: DictionaryValidator;
+    /** Resolved from the container since feature 072 (T090) — one instance, always armed. */
+    addressService: AddressServicePort;
+    /**
+     * Feature 026 — moderation service that owns approve / reject / block /
+     * unblock. When provided alongside `requireAdmin`, the matching admin
+     * endpoints are mounted; otherwise only the legacy PATCH endpoint runs.
+     */
+    moderationService?: OrganizationModerationService;
+    /**
+     * Feature 026 US4 — restriction service that owns the per-Organization
+     * payment / delivery / warehouse allow-lists. When provided alongside
+     * `requireAdmin`, the matching admin endpoints are mounted.
+     */
+    restrictionService?: OrganizationRestrictionService;
+    /**
+     * Feature 026 US5 — service returning the Price Lists currently
+     * applicable to an Organization. Mounts the
+     * `/applicable-price-lists` admin endpoint when provided.
+     */
+    effectivePriceListsService?: OrganizationEffectivePriceListsService;
+    /**
+     * Feature 026 US7 — service that runs VAT-ID validation via VIES /
+     * Ministerstwo Finansów. Mounts the `/vat-validations` admin endpoints
+     * when provided.
+     */
+    taxIdValidationService?: OrganizationTaxIdValidationService;
+    /** Feature 055 — validates + reads organization custom-field values on the admin edit path. */
+    customFieldValues?: CustomFieldValuePort;
+    /**
+     * Feature 056 — Command Bus for the org-hierarchy tree mutations
+     * (`organization.set_parent` / `organization.move`). When present alongside
+     * `requireAdmin`, the hierarchy admin endpoints are mounted (Principle XIII).
+     */
+    commandBus?: CommandBus;
+}
+export declare function organizationsModule(options: OrganizationsModuleOptions): (app: FastifyInstance) => Promise<void>;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/backend/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/backend/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,8BAA8B,EAC9B,uBAAuB,EACvB,gBAAgB,EAChB,yBAAyB,EACzB,gBAAgB,EAChB,eAAe,EAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AACnG,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AACrG,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,yDAAyD,CAAC;AACtH,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,sDAAsD,CAAC;AAO/G,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAC/F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAQlE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;GAIG;AAEH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,mBAAmB,EAAE,gBAAgB,CAAC;IACtC,oBAAoB,EAAE,yBAAyB,CAAC;IAChD,mBAAmB,EAAE,gBAAgB,CAAC;IACtC;;;;OAIG;IACH,mBAAmB,EAAE,uBAAuB,CAAC;IAC7C,oBAAoB,EAAE,8BAA8B,CAAC;IACrD,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,eAAe,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,sBAAsB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK;QAC/C,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;QACvB,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACzC,CAAC;IACF,4EAA4E;IAC5E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE;QACd,iBAAiB,EAAE,MAAM,CAAC;QAC1B,2DAA2D;QAC3D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,wFAAwF;QACxF,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC,KAAK,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IAChD,kDAAkD;IAClD,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,0EAA0E;IAC1E,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC;;;;;;;;OAQG;IACH,MAAM,EAAE,eAAe,CAAC;IACxB;;;;OAIG;IACH,aAAa,CAAC,EAAE,gBAAgB,CAAC;IAKjC,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,eAAe,CAAC,EAAE,SAAS,CAAC;IAC5B,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,yFAAyF;IACzF,cAAc,EAAE,kBAAkB,CAAC;IACnC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,6BAA6B,CAAC;IAClD;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,8BAA8B,CAAC;IACpD;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,sCAAsC,CAAC;IACpE;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,kCAAkC,CAAC;IAC5D,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;IACzC;;;;OAIG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,IACvD,KAAK,eAAe,KAAG,OAAO,CAAC,IAAI,CAAC,CAwHnD"}

package/dist/backend/plugin.js

@@ -0,0 +1,139 @@
+import { RegistrationService, } from './services/registration-service.js';
+import { EmailVerificationService } from './services/email-verification-service.js';
+import { InvitationService } from './services/invitation-service.js';
+import { noopOrgTemplateEmail } from './services/org-template-email.js';
+import { registerOrganizationsPublicRoutes } from './routes.public.js';
+import { registerOrganizationsCustomerRoutes } from './routes.customer.js';
+import { registerOrganizationsStorefrontRoutes } from './routes.storefront.js';
+import { OrganizationContextService } from './services/organization-context-service.js';
+import { registerMembersRoutes } from './routes.members.js';
+import { registerOrganizationsAdminRoutes } from './routes.admin.js';
+import { OrganizationTreeService } from './services/organization-tree-service.js';
+export function organizationsModule(options) {
+    return async (app) => {
+        const mailer = options.mailer;
+        // Feature 072 (T120) — supplied rather than assembled. This used to build
+        // its own adapter from three options; `transactional_emails` owns the
+        // implementation now and every module that sends template-routed mail
+        // resolves the same one.
+        const orgTemplateEmail = options.templateEmail ?? noopOrgTemplateEmail;
+        const storefrontBaseUrl = options.storefrontBaseUrl ?? 'http://localhost:3000';
+        const latestTokenByEmail = new Map();
+        const accountPorts = {
+            read: options.customerAccountRead,
+            write: options.customerAccountWrite,
+        };
+        const registrationService = new RegistrationService(options.emFactory, options.eventBus, accountPorts, options.dictionaryValidator, options.auditLogService);
+        const verificationService = new EmailVerificationService(options.emFactory, options.eventBus, accountPorts, options.auditLogService);
+        const customerAuthService = options.customerAuthService;
+        const invitationService = new InvitationService(options.emFactory, accountPorts, mailer, { acceptBaseUrl: storefrontBaseUrl }, options.eventBus, orgTemplateEmail, options.auditLogService);
+        const roleService = options.customerRoleService;
+        const passwordResetService = options.passwordResetService;
+        const addressService = options.addressService;
+        const latestInvitationToken = { value: null };
+        await registerOrganizationsPublicRoutes(app, {
+            registrationService,
+            verificationService,
+            customerAuthService,
+            passwordResetService,
+            exposeTestProbe: options.exposeTestProbe ?? false,
+            latestTokenByEmail,
+            mailer,
+            templateEmail: orgTemplateEmail,
+            storefrontBaseUrl,
+            ...(options.onLogin ? { onLogin: options.onLogin } : {}),
+        });
+        await registerOrganizationsCustomerRoutes(app, {
+            customerAuthService,
+            addressService,
+            customerAccountRead: options.customerAccountRead,
+            requireCustomer: options.requireCustomer,
+            resolveCustomerContext: options.resolveCustomerContext,
+            resolveCustomerActorOptionalOrg: resolveOptionalOrgContext,
+            emFactory: options.emFactory,
+        });
+        if (options.restrictionService) {
+            await registerOrganizationsStorefrontRoutes(app, {
+                contextService: new OrganizationContextService(options.emFactory),
+                restrictionService: options.restrictionService,
+                requireCustomer: options.requireCustomer,
+                // The preflight endpoint must accept no-org Customers (they receive
+                // platform defaults). We read the actor decoration directly rather
+                // than going through `resolveCustomerContext`, which throws 422 for
+                // no-org callers — that behavior is correct for order placement and
+                // RFQ submission but wrong here.
+                resolveCustomerContext: resolveOptionalOrgContext,
+            });
+        }
+        await registerMembersRoutes(app, {
+            invitationService,
+            roleService,
+            customerAccountRead: options.customerAccountRead,
+            requireCustomer: options.requireCustomer,
+            resolveCustomerContext: options.resolveCustomerContext,
+            exposeTestProbe: options.exposeTestProbe ?? false,
+            latestInvitationToken,
+        });
+        if (options.requireAdmin) {
+            if (!options.auditLogService) {
+                throw new Error('organizationsModule: auditLogService is required when requireAdmin is set');
+            }
+            if (!options.requireAdminAny) {
+                throw new Error('organizationsModule: requireAdminAny is required when requireAdmin is set');
+            }
+            await registerOrganizationsAdminRoutes(app, {
+                emFactory: options.emFactory,
+                requireAdmin: options.requireAdmin,
+                requireAdminAny: options.requireAdminAny,
+                invitationService,
+                roleService,
+                customerAccountRead: options.customerAccountRead,
+                customerAccountWrite: options.customerAccountWrite,
+                auditLogService: options.auditLogService,
+                eventBus: options.eventBus,
+                addressService,
+                ...(options.moderationService ? { moderationService: options.moderationService } : {}),
+                ...(options.restrictionService ? { restrictionService: options.restrictionService } : {}),
+                ...(options.effectivePriceListsService
+                    ? { effectivePriceListsService: options.effectivePriceListsService }
+                    : {}),
+                ...(options.taxIdValidationService
+                    ? { taxIdValidationService: options.taxIdValidationService }
+                    : {}),
+                ...(options.customFieldValues ? { customFieldValues: options.customFieldValues } : {}),
+                ...(options.commandBus
+                    ? {
+                        commandBus: options.commandBus,
+                        treeService: new OrganizationTreeService(options.emFactory),
+                    }
+                    : {}),
+            });
+        }
+    };
+}
+/**
+ * Reads the customer context from whichever actor decoration is present —
+ * `request.actor` in production, `request.testActor` in the test harness.
+ * Returns `organizationId: null` for no-org Customer accounts (feature 026
+ * US2). Used by the storefront preflight endpoint which must accept both
+ * org-bound and no-org Customers.
+ */
+function resolveOptionalOrgContext(request) {
+    const r = request;
+    if (r.testActor?.kind === 'customer' && r.testActor.customerAccountId) {
+        return {
+            customerAccountId: r.testActor.customerAccountId,
+            organizationId: r.testActor.organizationId ?? null,
+            impersonatorAdminUserId: r.testActor.impersonatorAdminUserId ?? null,
+        };
+    }
+    if (r.actor?.kind === 'customer' && r.actor.customerAccountId) {
+        return {
+            customerAccountId: r.actor.customerAccountId,
+            organizationId: r.actor.organizationId ?? null,
+            impersonatorAdminUserId: r.actor.impersonatorAdminUserId ?? null,
+        };
+    }
+    throw new Error('resolveOptionalOrgContext: no Customer actor on the request — requireCustomer preHandler should have rejected.');
+}
+//# sourceMappingURL=plugin.js.map

package/dist/backend/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/backend/plugin.ts"],"names":[],"mappings":"AAkBA,OAAO,EACL,mBAAmB,GAEpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAyB,MAAM,kCAAkC,CAAC;AAE/F,OAAO,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,mCAAmC,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,qCAAqC,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,gCAAgC,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAwHlF,MAAM,UAAU,mBAAmB,CAAC,OAAmC;IACrE,OAAO,KAAK,EAAE,GAAoB,EAAiB,EAAE;QACnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,0EAA0E;QAC1E,sEAAsE;QACtE,sEAAsE;QACtE,yBAAyB;QACzB,MAAM,gBAAgB,GAAG,OAAO,CAAC,aAAa,IAAI,oBAAoB,CAAC;QACvE,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,uBAAuB,CAAC;QAC/E,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;QACrD,MAAM,YAAY,GAAG;YACnB,IAAI,EAAE,OAAO,CAAC,mBAAmB;YACjC,KAAK,EAAE,OAAO,CAAC,oBAAoB;SACpC,CAAC;QACF,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,CACjD,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,QAAgC,EACxC,YAAY,EACZ,OAAO,CAAC,mBAAmB,EAC3B,OAAO,CAAC,eAAe,CACxB,CAAC;QACF,MAAM,mBAAmB,GAAG,IAAI,wBAAwB,CACtD,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,QAAgC,EACxC,YAAY,EACZ,OAAO,CAAC,eAAe,CACxB,CAAC;QACF,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACxD,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAC7C,OAAO,CAAC,SAAS,EACjB,YAAY,EACZ,MAAM,EACN,EAAE,aAAa,EAAE,iBAAiB,EAAE,EACpC,OAAO,CAAC,QAAgC,EACxC,gBAAgB,EAChB,OAAO,CAAC,eAAe,CACxB,CAAC;QACF,MAAM,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;QAChD,MAAM,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC9C,MAAM,qBAAqB,GAA6B,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAExE,MAAM,iCAAiC,CAAC,GAAG,EAAE;YAC3C,mBAAmB;YACnB,mBAAmB;YACnB,mBAAmB;YACnB,oBAAoB;YACpB,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,KAAK;YACjD,kBAAkB;YAClB,MAAM;YACN,aAAa,EAAE,gBAAgB;YAC/B,iBAAiB;YACjB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;QACH,MAAM,mCAAmC,CAAC,GAAG,EAAE;YAC7C,mBAAmB;YACnB,cAAc;YACd,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;YACtD,+BAA+B,EAAE,yBAAyB;YAC1D,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/B,MAAM,qCAAqC,CAAC,GAAG,EAAE;gBAC/C,cAAc,EAAE,IAAI,0BAA0B,CAAC,OAAO,CAAC,SAAS,CAAC;gBACjE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;gBAC9C,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,oEAAoE;gBACpE,mEAAmE;gBACnE,oEAAoE;gBACpE,oEAAoE;gBACpE,iCAAiC;gBACjC,sBAAsB,EAAE,yBAAyB;aAClD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,qBAAqB,CAAC,GAAG,EAAE;YAC/B,iBAAiB;YACjB,WAAW;YACX,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;YACtD,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,KAAK;YACjD,qBAAqB;SACtB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;YAC/F,CAAC;YACD,MAAM,gCAAgC,CAAC,GAAG,EAAE;gBAC1C,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,iBAAiB;gBACjB,WAAW;gBACX,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;gBAChD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;gBAClD,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,QAAQ,EAAE,OAAO,CAAC,QAAgC;gBAClD,cAAc;gBACd,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,GAAG,CAAC,OAAO,CAAC,0BAA0B;oBACpC,CAAC,CAAC,EAAE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B,EAAE;oBACpE,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,CAAC,sBAAsB;oBAChC,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE;oBAC5D,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,GAAG,CAAC,OAAO,CAAC,UAAU;oBACpB,CAAC,CAAC;wBACE,UAAU,EAAE,OAAO,CAAC,UAAU;wBAC9B,WAAW,EAAE,IAAI,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC;qBAC5D;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAChC,OAAuB;IAMvB,MAAM,CAAC,GAAG,OAaT,CAAC;IACF,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QACtE,OAAO;YACL,iBAAiB,EAAE,CAAC,CAAC,SAAS,CAAC,iBAAiB;YAChD,cAAc,EAAE,CAAC,CAAC,SAAS,CAAC,cAAc,IAAI,IAAI;YAClD,uBAAuB,EAAE,CAAC,CAAC,SAAS,CAAC,uBAAuB,IAAI,IAAI;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC9D,OAAO;YACL,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB;YAC5C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI;YAC9C,uBAAuB,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,IAAI,IAAI;SACjE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gHAAgH,CACjH,CAAC;AACJ,CAAC"}