@endora-commerce/mod-quick-order 0.100.0

package/dist/backend/routes.preferences.d.ts

@@ -0,0 +1,21 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import { type CustomerAccountReadPort } from '@endora-commerce/contracts';
+import type { DefaultPreferenceService } from './services/default-preference-service.js';
+/**
+ * Storefront default-preferences routes (feature 039, US2). The caller manages
+ * their own customer scope, and — when they hold the organization-admin role —
+ * their organization scope and its customers. Checkout reads the resolved
+ * defaults via `/resolved`.
+ */
+export interface QuickOrderPreferenceRoutesDeps {
+    service: DefaultPreferenceService;
+    /** `customer_accounts`' read model — the caller's organisation and role. */
+    customerAccounts: CustomerAccountReadPort;
+    requireCustomer: (req: FastifyRequest, reply: unknown) => Promise<void>;
+    resolveCustomerContext: (req: FastifyRequest) => {
+        customerAccountId: string;
+        organizationId: string;
+    };
+}
+export declare function registerQuickOrderPreferenceRoutes(app: FastifyInstance, deps: QuickOrderPreferenceRoutesDeps): Promise<void>;
+//# sourceMappingURL=routes.preferences.d.ts.map

package/dist/backend/routes.preferences.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.preferences.d.ts","sourceRoot":"","sources":["../../src/backend/routes.preferences.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAGzF;;;;;GAKG;AACH,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,wBAAwB,CAAC;IAClC,4EAA4E;IAC5E,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C,eAAe,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,sBAAsB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK;QAC/C,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAcD,wBAAsB,kCAAkC,CACtD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,8BAA8B,GACnC,OAAO,CAAC,IAAI,CAAC,CA0Cf"}

package/dist/backend/routes.preferences.js

@@ -0,0 +1,42 @@
+import { ERROR_CODES, quickOrderPreferenceScopeSchema, quickOrderPreferenceUpsertSchema, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { canManagePreference } from './services/default-preference-authz.js';
+async function resolveActor(customerAccounts, customerAccountId) {
+    const account = await customerAccounts.findById(customerAccountId);
+    const organizationId = account?.organizationId ?? null;
+    if (account?.role === 'organization_admin' && organizationId) {
+        return { actor: { kind: 'org_admin', organizationId }, organizationId };
+    }
+    return { actor: { kind: 'customer', customerAccountId }, organizationId };
+}
+export async function registerQuickOrderPreferenceRoutes(app, deps) {
+    const { service, customerAccounts, requireCustomer, resolveCustomerContext } = deps;
+    app.get('/api/v1/quick-order/preferences/resolved', { preHandler: requireCustomer }, async (request) => {
+        const ctx = resolveCustomerContext(request);
+        return { data: await service.resolveForCustomer(ctx.customerAccountId) };
+    });
+    app.get('/api/v1/quick-order/preferences', { preHandler: requireCustomer }, async (request) => {
+        const query = request.query;
+        const scope = quickOrderPreferenceScopeSchema.parse(query.scope);
+        const scopeId = query.scopeId ?? '';
+        const ctx = resolveCustomerContext(request);
+        const { actor } = await resolveActor(customerAccounts, ctx.customerAccountId);
+        const targetCustomerOrgId = scope === 'customer'
+            ? ((await customerAccounts.findById(scopeId))?.organizationId ?? null)
+            : null;
+        if (!canManagePreference(actor, { scope, scopeId }, targetCustomerOrgId)) {
+            throw new HttpError(403, ERROR_CODES.FORBIDDEN, 'Not allowed to read these defaults.');
+        }
+        return { data: await service.readRaw(scope, scopeId) };
+    });
+    app.put('/api/v1/quick-order/preferences', { preHandler: requireCustomer, schema: { body: quickOrderPreferenceUpsertSchema } }, async (request) => {
+        const body = quickOrderPreferenceUpsertSchema.parse(request.body);
+        const ctx = resolveCustomerContext(request);
+        const { actor } = await resolveActor(customerAccounts, ctx.customerAccountId);
+        const result = await service.upsert(actor, body, {
+            customerAccountId: ctx.customerAccountId,
+        });
+        return { data: result };
+    });
+}
+//# sourceMappingURL=routes.preferences.js.map

package/dist/backend/routes.preferences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.preferences.js","sourceRoot":"","sources":["../../src/backend/routes.preferences.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,+BAA+B,EAC/B,gCAAgC,GAEjC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAE3D,OAAO,EAAE,mBAAmB,EAAwB,MAAM,wCAAwC,CAAC;AAmBnG,KAAK,UAAU,YAAY,CACzB,gBAAyC,EACzC,iBAAyB;IAEzB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC;IACvD,IAAI,OAAO,EAAE,IAAI,KAAK,oBAAoB,IAAI,cAAc,EAAE,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,cAAc,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,cAAc,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,GAAoB,EACpB,IAAoC;IAEpC,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,sBAAsB,EAAE,GAAG,IAAI,CAAC;IAEpF,GAAG,CAAC,GAAG,CACL,0CAA0C,EAC1C,EAAE,UAAU,EAAE,eAAe,EAAE,EAC/B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;IAC3E,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC5F,MAAM,KAAK,GAAG,OAAO,CAAC,KAA6C,CAAC;QACpE,MAAM,KAAK,GAAG,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,gBAAgB,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAE9E,MAAM,mBAAmB,GACvB,KAAK,KAAK,UAAU;YAClB,CAAC,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,cAAc,IAAI,IAAI,CAAC;YACtE,CAAC,CAAC,IAAI,CAAC;QACX,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,mBAAmB,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,iCAAiC,EACjC,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE,EAAE,EACnF,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,gCAAgC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,gBAAgB,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE;YAC/C,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;SACzC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/services/catalog-lookup.d.ts

@@ -0,0 +1,39 @@
+import { type CatalogProductReadPort } from '@endora-commerce/contracts';
+import type { SalesChannelMembershipPort } from '@endora-commerce/platform/kernel';
+import type { ProductLike, QuickOrderCatalogLookup, QuickOrderImportAudience, VariantBySku } from './import-pipeline.js';
+import type { VariantLike } from './variant-resolver.js';
+/**
+ * {@link QuickOrderCatalogLookup} over `catalog`'s published read port
+ * (feature 075, Phase C).
+ *
+ * It used to run three `em.find` calls against `Product` and `ProductVariant`
+ * — two tables `catalog` owns — so a switched-off `catalog` still resolved
+ * SKUs out of rows deactivation leaves in place, and a CSV import went on
+ * recognising products the platform had stopped serving. Each call is now the
+ * port's own batched equivalent, and an absent owner refuses at the seam.
+ *
+ * The three mappings stay here: the pipeline owns the resolution logic and
+ * wants only the four or five fields below, so what crosses is narrower than
+ * the record.
+ */
+export declare class CatalogPortLookup implements QuickOrderCatalogLookup {
+    #private;
+    private readonly catalogProducts;
+    /**
+     * The sanctioned bridge accessor (Constitution XII), for the channel half
+     * of the same answer (issue #259).
+     */
+    private readonly channelMembership;
+    constructor(catalogProducts: CatalogProductReadPort, 
+    /**
+     * The sanctioned bridge accessor (Constitution XII), for the channel half
+     * of the same answer (issue #259).
+     */
+    channelMembership: SalesChannelMembershipPort);
+    findProductsBySku(skus: string[], audience: QuickOrderImportAudience): Promise<ProductLike[]>;
+    findVariantsBySku(skus: string[], audience: QuickOrderImportAudience): Promise<VariantBySku[]>;
+    findVariantsByParent(productIds: string[]): Promise<Array<VariantLike & {
+        parentProductId: string;
+    }>>;
+}
+//# sourceMappingURL=catalog-lookup.d.ts.map

package/dist/backend/services/catalog-lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-lookup.d.ts","sourceRoot":"","sources":["../../../src/backend/services/catalog-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAEnF,OAAO,KAAK,EACV,WAAW,EACX,uBAAuB,EACvB,wBAAwB,EACxB,YAAY,EACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD;;;;;;;;;;;;;GAaG;AACH,qBAAa,iBAAkB,YAAW,uBAAuB;;IAE7D,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBALjB,eAAe,EAAE,sBAAsB;IACxD;;;OAGG;IACc,iBAAiB,EAAE,0BAA0B;IA0B1D,iBAAiB,CACrB,IAAI,EAAE,MAAM,EAAE,EACd,QAAQ,EAAE,wBAAwB,GACjC,OAAO,CAAC,WAAW,EAAE,CAAC;IAmBnB,iBAAiB,CACrB,IAAI,EAAE,MAAM,EAAE,EACd,QAAQ,EAAE,wBAAwB,GACjC,OAAO,CAAC,YAAY,EAAE,CAAC;IAoCpB,oBAAoB,CACxB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAU7D"}

package/dist/backend/services/catalog-lookup.js

@@ -0,0 +1,104 @@
+import { isProductVisibleTo } from '@endora-commerce/contracts';
+import { productIdsInRequestChannel } from '@endora-commerce/platform/kernel';
+/**
+ * {@link QuickOrderCatalogLookup} over `catalog`'s published read port
+ * (feature 075, Phase C).
+ *
+ * It used to run three `em.find` calls against `Product` and `ProductVariant`
+ * — two tables `catalog` owns — so a switched-off `catalog` still resolved
+ * SKUs out of rows deactivation leaves in place, and a CSV import went on
+ * recognising products the platform had stopped serving. Each call is now the
+ * port's own batched equivalent, and an absent owner refuses at the seam.
+ *
+ * The three mappings stay here: the pipeline owns the resolution logic and
+ * wants only the four or five fields below, so what crosses is narrower than
+ * the record.
+ */
+export class CatalogPortLookup {
+    catalogProducts;
+    channelMembership;
+    constructor(catalogProducts, 
+    /**
+     * The sanctioned bridge accessor (Constitution XII), for the channel half
+     * of the same answer (issue #259).
+     */
+    channelMembership) {
+        this.catalogProducts = catalogProducts;
+        this.channelMembership = channelMembership;
+    }
+    /**
+     * Narrow to what the request's channel publishes — the second filter
+     * `isProductVisibleTo` says it is not (issue #259).
+     *
+     * A pasted SKU list is the cheapest enumeration oracle on the platform, which
+     * is why issue #227 gave this file an audience. The channel is the other axis
+     * of the same oracle: without it a buyer shopping one storefront could paste
+     * another's private assortment and have every line come back recognised.
+     *
+     * `'unrestricted'` skips it for the same reason it skips the audience filter:
+     * `POST /api/v1/admin/quick-order/import` is gated by `orders:write` and the
+     * operator names the organisation — and therefore the buyer, and therefore
+     * the channel — one step later on the *build* call. At import time there is
+     * nobody to answer for on either axis, and the permission is the enforcement.
+     */
+    async #publishedHere(audience, productIds) {
+        if (audience === 'unrestricted')
+            return null;
+        return productIdsInRequestChannel(this.channelMembership, productIds);
+    }
+    async findProductsBySku(skus, audience) {
+        if (skus.length === 0)
+            return [];
+        const products = (await this.catalogProducts.findBySkus(skus)).filter((p) => audience === 'unrestricted' || isProductVisibleTo(p, audience));
+        const publishedHere = await this.#publishedHere(audience, products.map((p) => p.id));
+        return products
+            .filter((p) => publishedHere === null || publishedHere.has(p.id))
+            .map((p) => ({
+            id: p.id,
+            sku: p.sku,
+            status: p.status,
+            deletedAt: p.deletedAt,
+        }));
+    }
+    async findVariantsBySku(skus, audience) {
+        if (skus.length === 0)
+            return [];
+        const variants = await this.catalogProducts.findVariantsBySkus(skus);
+        if (variants.length === 0 || audience === 'unrestricted') {
+            return variants.map((v) => ({
+                id: v.id,
+                sku: v.sku,
+                parentProductId: v.parentProductId,
+            }));
+        }
+        // A variant carries no visibility of its own — its parent's answer is the
+        // whole answer (issue #227). Without this pass a pasted *variant* SKU
+        // resolved a restricted parent's id, which is the same oracle by one more
+        // hop; the parents are fetched here rather than left to the pipeline
+        // because only the record carries the two columns.
+        const parents = await this.catalogProducts.findByIds(Array.from(new Set(variants.map((v) => v.parentProductId))));
+        const visibleParents = parents.filter((p) => isProductVisibleTo(p, audience));
+        // Issue #259 — and the channel answer is the parent's too. A variant SKU
+        // that resolved a parent this channel does not publish is the same oracle
+        // by one more hop, which is the reason the parents are fetched at all.
+        const publishedHere = await this.#publishedHere(audience, visibleParents.map((p) => p.id));
+        const acquirableParents = new Set(visibleParents
+            .filter((p) => publishedHere === null || publishedHere.has(p.id))
+            .map((p) => p.id));
+        return variants
+            .filter((v) => acquirableParents.has(v.parentProductId))
+            .map((v) => ({ id: v.id, sku: v.sku, parentProductId: v.parentProductId }));
+    }
+    async findVariantsByParent(productIds) {
+        if (productIds.length === 0)
+            return [];
+        const variants = await this.catalogProducts.listVariantsByProductIds(productIds);
+        return variants.map((v) => ({
+            id: v.id,
+            sku: v.sku,
+            parentProductId: v.parentProductId,
+            variantAttributeValues: v.variantAttributeValues,
+        }));
+    }
+}
+//# sourceMappingURL=catalog-lookup.js.map

package/dist/backend/services/catalog-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-lookup.js","sourceRoot":"","sources":["../../../src/backend/services/catalog-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAA+B,MAAM,4BAA4B,CAAC;AAE7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAS9E;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,iBAAiB;IAET;IAKA;IANnB,YACmB,eAAuC;IACxD;;;OAGG;IACc,iBAA6C;QAL7C,oBAAe,GAAf,eAAe,CAAwB;QAKvC,sBAAiB,GAAjB,iBAAiB,CAA4B;IAC7D,CAAC;IAEJ;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,cAAc,CAClB,QAAkC,EAClC,UAAoB;QAEpB,IAAI,QAAQ,KAAK,cAAc;YAAE,OAAO,IAAI,CAAC;QAC7C,OAAO,0BAA0B,CAAC,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,IAAc,EACd,QAAkC;QAElC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CACnE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,KAAK,cAAc,IAAI,kBAAkB,CAAC,CAAC,EAAE,QAAQ,CAAC,CACtE,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAC7C,QAAQ,EACR,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1B,CAAC;QACF,OAAO,QAAQ;aACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,KAAK,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAChE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;IACR,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,IAAc,EACd,QAAkC;QAElC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;YACzD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,eAAe,EAAE,CAAC,CAAC,eAAe;aACnC,CAAC,CAAC,CAAC;QACN,CAAC;QACD,0EAA0E;QAC1E,sEAAsE;QACtE,0EAA0E;QAC1E,qEAAqE;QACrE,mDAAmD;QACnD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAClD,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAC5D,CAAC;QACF,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9E,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAC7C,QAAQ,EACR,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAChC,CAAC;QACF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,cAAc;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,KAAK,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAChE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpB,CAAC;QACF,OAAO,QAAQ;aACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;aACvD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,UAAoB;QAEpB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QACjF,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,sBAAsB,EAAE,CAAC,CAAC,sBAAsB;SACjD,CAAC,CAAC,CAAC;IACN,CAAC;CACF"}

package/dist/backend/services/default-preference-authz.d.ts

@@ -0,0 +1,31 @@
+import type { PreferenceActor } from '@endora-commerce/contracts';
+import type { QuickOrderPreferenceScope } from '@endora-commerce/contracts';
+/**
+ * Pure authorization for managing default ordering preferences (feature 039,
+ * FR-018). The actor's identity + (for a customer-scoped target) the target
+ * customer's organization are resolved by the service from the DB; this
+ * function only applies the rule, so it is unit-testable.
+ *
+ *   - Customer        → only their own customer scope.
+ *   - Org admin       → own organization scope + customers within that org.
+ *   - Salesperson     → assigned organizations + customers within them.
+ *   - Platform admin  → any scope.
+ */
+/**
+ * The union moved to `@endora-commerce/contracts` in feature 075's Phase P — `customers`
+ * writes a buyer's defaults through `defaultPreferencePort` and has to name
+ * the actor. Re-exported here for the length of Phase P, which cuts no
+ * consumer.
+ */
+export type { PreferenceActor };
+export interface PreferenceTarget {
+    scope: QuickOrderPreferenceScope;
+    scopeId: string;
+}
+/**
+ * @param targetCustomerOrganizationId for a customer-scoped target, the
+ *   organization that customer belongs to (null if none). Ignored for an
+ *   organization-scoped target.
+ */
+export declare function canManagePreference(actor: PreferenceActor, target: PreferenceTarget, targetCustomerOrganizationId: string | null): boolean;
+//# sourceMappingURL=default-preference-authz.d.ts.map

package/dist/backend/services/default-preference-authz.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-preference-authz.d.ts","sourceRoot":"","sources":["../../../src/backend/services/default-preference-authz.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAE5E;;;;;;;;;;GAUG;AACH;;;;;GAKG;AACH,YAAY,EAAE,eAAe,EAAE,CAAC;AAEhC,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,yBAAyB,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,gBAAgB,EACxB,4BAA4B,EAAE,MAAM,GAAG,IAAI,GAC1C,OAAO,CAwBT"}

package/dist/backend/services/default-preference-authz.js

@@ -0,0 +1,26 @@
+/**
+ * @param targetCustomerOrganizationId for a customer-scoped target, the
+ *   organization that customer belongs to (null if none). Ignored for an
+ *   organization-scoped target.
+ */
+export function canManagePreference(actor, target, targetCustomerOrganizationId) {
+    switch (actor.kind) {
+        case 'platform_admin':
+            return true;
+        case 'customer':
+            return target.scope === 'customer' && target.scopeId === actor.customerAccountId;
+        case 'org_admin':
+            if (target.scope === 'organization')
+                return target.scopeId === actor.organizationId;
+            return targetCustomerOrganizationId === actor.organizationId;
+        case 'salesperson':
+            if (target.scope === 'organization') {
+                return actor.assignedOrganizationIds.includes(target.scopeId);
+            }
+            return (targetCustomerOrganizationId !== null &&
+                actor.assignedOrganizationIds.includes(targetCustomerOrganizationId));
+        default:
+            return false;
+    }
+}
+//# sourceMappingURL=default-preference-authz.js.map

package/dist/backend/services/default-preference-authz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-preference-authz.js","sourceRoot":"","sources":["../../../src/backend/services/default-preference-authz.ts"],"names":[],"mappings":"AA2BA;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsB,EACtB,MAAwB,EACxB,4BAA2C;IAE3C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,gBAAgB;YACnB,OAAO,IAAI,CAAC;QAEd,KAAK,UAAU;YACb,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,iBAAiB,CAAC;QAEnF,KAAK,WAAW;YACd,IAAI,MAAM,CAAC,KAAK,KAAK,cAAc;gBAAE,OAAO,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,cAAc,CAAC;YACpF,OAAO,4BAA4B,KAAK,KAAK,CAAC,cAAc,CAAC;QAE/D,KAAK,aAAa;YAChB,IAAI,MAAM,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,CACL,4BAA4B,KAAK,IAAI;gBACrC,KAAK,CAAC,uBAAuB,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CACrE,CAAC;QAEJ;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/backend/services/default-preference-resolver.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Pure resolution of default ordering preferences (feature 039, US2 / R4).
+ *
+ * Most-specific-wins per field: a customer-level value overrides the
+ * organization-level value; otherwise the organization value is the fallback.
+ * Eligibility re-checking (active / org-allowed / address-exists) is applied
+ * by the service on top of this — kept separate so the inheritance rule is
+ * unit-testable without a database.
+ */
+export interface PreferenceRow {
+    defaultPaymentMethodId: string | null;
+    defaultDeliveryMethodId: string | null;
+    defaultBillingAddressId: string | null;
+    defaultShippingAddressId: string | null;
+}
+export type PreferenceFieldSource = 'customer' | 'organization' | null;
+export interface ResolvedField {
+    id: string | null;
+    source: PreferenceFieldSource;
+}
+export interface ResolvedPreferenceFields {
+    payment: ResolvedField;
+    delivery: ResolvedField;
+    billing: ResolvedField;
+    shipping: ResolvedField;
+}
+export declare function resolvePreferenceFields(customerRow: PreferenceRow | null, orgRow: PreferenceRow | null): ResolvedPreferenceFields;
+//# sourceMappingURL=default-preference-resolver.d.ts.map

package/dist/backend/services/default-preference-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-preference-resolver.d.ts","sourceRoot":"","sources":["../../../src/backend/services/default-preference-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,aAAa;IAC5B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,cAAc,GAAG,IAAI,CAAC;AAEvE,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,EAAE,qBAAqB,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,aAAa,CAAC;CACzB;AAgBD,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,aAAa,GAAG,IAAI,EACjC,MAAM,EAAE,aAAa,GAAG,IAAI,GAC3B,wBAAwB,CAO1B"}

package/dist/backend/services/default-preference-resolver.js

@@ -0,0 +1,27 @@
+/**
+ * Pure resolution of default ordering preferences (feature 039, US2 / R4).
+ *
+ * Most-specific-wins per field: a customer-level value overrides the
+ * organization-level value; otherwise the organization value is the fallback.
+ * Eligibility re-checking (active / org-allowed / address-exists) is applied
+ * by the service on top of this — kept separate so the inheritance rule is
+ * unit-testable without a database.
+ */
+function pick(field, customerRow, orgRow) {
+    const fromCustomer = customerRow?.[field] ?? null;
+    if (fromCustomer)
+        return { id: fromCustomer, source: 'customer' };
+    const fromOrg = orgRow?.[field] ?? null;
+    if (fromOrg)
+        return { id: fromOrg, source: 'organization' };
+    return { id: null, source: null };
+}
+export function resolvePreferenceFields(customerRow, orgRow) {
+    return {
+        payment: pick('defaultPaymentMethodId', customerRow, orgRow),
+        delivery: pick('defaultDeliveryMethodId', customerRow, orgRow),
+        billing: pick('defaultBillingAddressId', customerRow, orgRow),
+        shipping: pick('defaultShippingAddressId', customerRow, orgRow),
+    };
+}
+//# sourceMappingURL=default-preference-resolver.js.map

package/dist/backend/services/default-preference-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-preference-resolver.js","sourceRoot":"","sources":["../../../src/backend/services/default-preference-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAyBH,SAAS,IAAI,CACX,KAAsB,EACtB,WAAiC,EACjC,MAA4B;IAE5B,MAAM,YAAY,GAAG,WAAW,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IAClD,IAAI,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IACxC,IAAI,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,WAAiC,EACjC,MAA4B;IAE5B,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,WAAW,EAAE,MAAM,CAAC;QAC5D,QAAQ,EAAE,IAAI,CAAC,yBAAyB,EAAE,WAAW,EAAE,MAAM,CAAC;QAC9D,OAAO,EAAE,IAAI,CAAC,yBAAyB,EAAE,WAAW,EAAE,MAAM,CAAC;QAC7D,QAAQ,EAAE,IAAI,CAAC,0BAA0B,EAAE,WAAW,EAAE,MAAM,CAAC;KAChE,CAAC;AACJ,CAAC"}

package/dist/backend/services/default-preference-service.d.ts

@@ -0,0 +1,63 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type AddressReadPort, type CustomerAccountReadPort, type CustomerAddressReadPort, type DeliveryMethodReadPort, type OrganizationRestrictionPort, type PaymentMethodReadPort, type QuickOrderPreference, type QuickOrderPreferenceScope, type QuickOrderPreferenceUpsert, type QuickOrderResolvedDefaults } from '@endora-commerce/contracts';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import type { PreferenceAuditContext } from '@endora-commerce/contracts';
+import { type PreferenceActor } from './default-preference-authz.js';
+/**
+ * Moved to `@endora-commerce/contracts` in feature 075's Phase P — `customers` passes it
+ * when it writes a buyer's defaults. Re-exported here for the length of
+ * Phase P, which cuts no consumer.
+ */
+export type { PreferenceAuditContext };
+/**
+ * DefaultPreferenceService (feature 039, US2). Role-scoped CRUD over
+ * `quick_order_default_preferences`, plus the effective-defaults resolver
+ * (customer-over-org with use-time eligibility re-check). Every write is
+ * audited (FR-021).
+ */
+export interface DefaultPreferenceCollaborators {
+    /** `customer_accounts` — whose defaults these are. */
+    readonly customerAccounts: CustomerAccountReadPort;
+    /** `payment_methods` — is the stored default still a live method? */
+    readonly paymentMethods: PaymentMethodReadPort;
+    /** `delivery_methods` — the same question, delivery side. */
+    readonly deliveryMethods: DeliveryMethodReadPort;
+    /** `addresses` — the organisation's shared addresses. */
+    readonly addresses: AddressReadPort;
+    /**
+     * `customers` — the buyer's personal addresses (feature 040).
+     *
+     * The one collaborator whose owner may be absent without this service
+     * failing: see the null object in `backend.ts` and the module's
+     * `nonBindingDependencies` entry.
+     */
+    readonly customerAddresses: CustomerAddressReadPort;
+    /** `organizations` — the buyer organisation's method allow-lists. */
+    readonly restriction: OrganizationRestrictionPort;
+}
+export declare class DefaultPreferenceService {
+    private readonly emFactory;
+    private readonly auditLog;
+    private readonly ports;
+    constructor(emFactory: () => EntityManager, auditLog: AuditPort, ports: DefaultPreferenceCollaborators);
+    /** Raw stored row for a scope (null if unset). */
+    readRaw(scope: QuickOrderPreferenceScope, scopeId: string): Promise<QuickOrderPreference | null>;
+    /**
+     * Upsert a scope's defaults. Each field: `undefined` = leave unchanged;
+     * explicit `null` = clear. Authorization per FR-018.
+     */
+    upsert(actor: PreferenceActor, input: QuickOrderPreferenceUpsert, audit: PreferenceAuditContext): Promise<QuickOrderPreference>;
+    /**
+     * Effective defaults for a customer: customer-over-org per field, then each
+     * value is dropped to null if it is no longer eligible (FR-020).
+     */
+    resolveForCustomer(customerAccountId: string): Promise<QuickOrderResolvedDefaults>;
+    private keepIf;
+    private isPaymentEligible;
+    private isDeliveryEligible;
+    private isAddressEligible;
+    private customerOrganizationId;
+    private rowFields;
+    private toContract;
+}
+//# sourceMappingURL=default-preference-service.d.ts.map

package/dist/backend/services/default-preference-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-preference-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/default-preference-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAChC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAuB,KAAK,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAO1F;;;;GAIG;AACH,YAAY,EAAE,sBAAsB,EAAE,CAAC;AAcvC;;;;;GAKG;AACH,MAAM,WAAW,8BAA8B;IAC7C,sDAAsD;IACtD,QAAQ,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;IACnD,qEAAqE;IACrE,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC;IAC/C,6DAA6D;IAC7D,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IACjD,yDAAyD;IACzD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IACpD,qEAAqE;IACrE,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC;CACnD;AAED,qBAAa,wBAAwB;IAEjC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAFL,SAAS,EAAE,MAAM,aAAa,EAC9B,QAAQ,EAAE,SAAS,EACnB,KAAK,EAAE,8BAA8B;IAGxD,kDAAkD;IAC5C,OAAO,CACX,KAAK,EAAE,yBAAyB,EAChC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAMvC;;;OAGG;IACG,MAAM,CACV,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,0BAA0B,EACjC,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,oBAAoB,CAAC;IAyChC;;;OAGG;IACG,kBAAkB,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;YA0D1E,MAAM;YAQN,iBAAiB;YAMjB,kBAAkB;YAMlB,iBAAiB;YAwBjB,sBAAsB;IAKpC,OAAO,CAAC,SAAS;IAUjB,OAAO,CAAC,UAAU;CAUnB"}

package/dist/backend/services/default-preference-service.js

@@ -0,0 +1,176 @@
+import { ERROR_CODES, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { QuickOrderDefaultPreference } from '../entities/quick-order-default-preference.entity.js';
+import { canManagePreference } from './default-preference-authz.js';
+import { resolvePreferenceFields, } from './default-preference-resolver.js';
+/** No allow-list at all, or an empty one: both mean every method is allowed. */
+function unrestricted(allowed) {
+    return allowed === null || allowed.length === 0;
+}
+const FIELDS = [
+    'defaultPaymentMethodId',
+    'defaultDeliveryMethodId',
+    'defaultBillingAddressId',
+    'defaultShippingAddressId',
+];
+export class DefaultPreferenceService {
+    emFactory;
+    auditLog;
+    ports;
+    constructor(emFactory, auditLog, ports) {
+        this.emFactory = emFactory;
+        this.auditLog = auditLog;
+        this.ports = ports;
+    }
+    /** Raw stored row for a scope (null if unset). */
+    async readRaw(scope, scopeId) {
+        const em = this.emFactory();
+        const row = await em.findOne(QuickOrderDefaultPreference, { scope, scopeId });
+        return row ? this.toContract(row) : null;
+    }
+    /**
+     * Upsert a scope's defaults. Each field: `undefined` = leave unchanged;
+     * explicit `null` = clear. Authorization per FR-018.
+     */
+    async upsert(actor, input, audit) {
+        const em = this.emFactory();
+        const targetCustomerOrgId = input.scope === 'customer' ? await this.customerOrganizationId(input.scopeId) : null;
+        if (!canManagePreference(actor, { scope: input.scope, scopeId: input.scopeId }, targetCustomerOrgId)) {
+            throw new HttpError(403, ERROR_CODES.FORBIDDEN, 'Not allowed to manage these defaults.');
+        }
+        let row = await em.findOne(QuickOrderDefaultPreference, {
+            scope: input.scope,
+            scopeId: input.scopeId,
+        });
+        const before = row ? this.toContract(row) : null;
+        if (!row) {
+            row = em.create(QuickOrderDefaultPreference, { scope: input.scope, scopeId: input.scopeId });
+        }
+        for (const field of FIELDS) {
+            if (field in input && input[field] !== undefined) {
+                row[field] = input[field] ?? null;
+            }
+        }
+        await em.persistAndFlush(row);
+        const after = this.toContract(row);
+        await this.auditLog.record({
+            actorAdminUserId: audit.actorAdminUserId ?? null,
+            impersonatedCustomerAccountId: audit.customerAccountId ?? null,
+            action: 'quick_order.default_preference.update',
+            objectType: 'QuickOrderDefaultPreference',
+            objectId: row.id,
+            stateBefore: before,
+            stateAfter: after,
+            ipAddress: audit.ipAddress ?? null,
+            userAgent: audit.userAgent ?? null,
+            requestId: audit.requestId ?? null,
+        });
+        return after;
+    }
+    /**
+     * Effective defaults for a customer: customer-over-org per field, then each
+     * value is dropped to null if it is no longer eligible (FR-020).
+     */
+    async resolveForCustomer(customerAccountId) {
+        const em = this.emFactory();
+        const organizationId = await this.customerOrganizationId(customerAccountId);
+        const customerRow = this.rowFields(await em.findOne(QuickOrderDefaultPreference, { scope: 'customer', scopeId: customerAccountId }));
+        const orgRow = organizationId
+            ? this.rowFields(await em.findOne(QuickOrderDefaultPreference, {
+                scope: 'organization',
+                scopeId: organizationId,
+            }))
+            : null;
+        const resolved = resolvePreferenceFields(customerRow, orgRow);
+        // Two spellings of "unrestricted", and both mean allow-everything. `null`
+        // is the degrade the owner put inside its own return type (composition
+        // checklist item 7) — an organisation the restriction module cannot find —
+        // and an **empty array** is an organisation with no link rows, which is the
+        // ordinary case. Reading either as "nothing is allowed" drops every stored
+        // default silently; see `isPaymentEligible`.
+        const allowedPayment = organizationId
+            ? await this.ports.restriction.allowedIdsFor(organizationId, 'paymentMethodIds')
+            : null;
+        const allowedDelivery = organizationId
+            ? await this.ports.restriction.allowedIdsFor(organizationId, 'deliveryMethodIds')
+            : null;
+        const payment = await this.keepIf(resolved.payment, (id) => this.isPaymentEligible(id, allowedPayment));
+        const delivery = await this.keepIf(resolved.delivery, (id) => this.isDeliveryEligible(id, allowedDelivery));
+        const billing = await this.keepIf(resolved.billing, (id) => this.isAddressEligible(id, organizationId, customerAccountId));
+        const shipping = await this.keepIf(resolved.shipping, (id) => this.isAddressEligible(id, organizationId, customerAccountId));
+        return {
+            paymentMethodId: payment.id,
+            deliveryMethodId: delivery.id,
+            billingAddressId: billing.id,
+            shippingAddressId: shipping.id,
+            source: {
+                payment: payment.source,
+                delivery: delivery.source,
+                billing: billing.source,
+                shipping: shipping.source,
+            },
+        };
+    }
+    async keepIf(field, eligible) {
+        if (!field.id)
+            return field;
+        return (await eligible(field.id)) ? field : { id: null, source: null };
+    }
+    async isPaymentEligible(id, allowed) {
+        const method = await this.ports.paymentMethods.findById(id);
+        if (!method || method.status !== 'active')
+            return false;
+        return unrestricted(allowed) || allowed.includes(id);
+    }
+    async isDeliveryEligible(id, allowed) {
+        const method = await this.ports.deliveryMethods.findById(id);
+        if (!method || method.status !== 'active')
+            return false;
+        return unrestricted(allowed) || allowed.includes(id);
+    }
+    async isAddressEligible(id, organizationId, customerAccountId) {
+        // Org-shared address belonging to the customer's organization. `liveOnly`
+        // because this answer feeds a choice rather than a rendering: without it
+        // `findById` returns soft-deleted rows and a deleted address becomes an
+        // eligible one-click default (AddressReadPort's doc block).
+        if (organizationId !== null) {
+            const orgAddress = await this.ports.addresses.findById(organizationId, id, {
+                liveOnly: true,
+            });
+            if (orgAddress)
+                return true;
+        }
+        // Feature 040 — personal address owned by the customer. Same `liveOnly`
+        // reason, and the port already scopes by account, so the ownership check
+        // cannot be forgotten.
+        const personal = await this.ports.customerAddresses.findById(customerAccountId, id, {
+            liveOnly: true,
+        });
+        return personal !== null;
+    }
+    async customerOrganizationId(customerAccountId) {
+        const customer = await this.ports.customerAccounts.findById(customerAccountId);
+        return customer?.organizationId ?? null;
+    }
+    rowFields(row) {
+        if (!row)
+            return null;
+        return {
+            defaultPaymentMethodId: row.defaultPaymentMethodId ?? null,
+            defaultDeliveryMethodId: row.defaultDeliveryMethodId ?? null,
+            defaultBillingAddressId: row.defaultBillingAddressId ?? null,
+            defaultShippingAddressId: row.defaultShippingAddressId ?? null,
+        };
+    }
+    toContract(row) {
+        return {
+            scope: row.scope,
+            scopeId: row.scopeId,
+            defaultPaymentMethodId: row.defaultPaymentMethodId ?? null,
+            defaultDeliveryMethodId: row.defaultDeliveryMethodId ?? null,
+            defaultBillingAddressId: row.defaultBillingAddressId ?? null,
+            defaultShippingAddressId: row.defaultShippingAddressId ?? null,
+        };
+    }
+}
+//# sourceMappingURL=default-preference-service.js.map

package/dist/backend/services/default-preference-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-preference-service.js","sourceRoot":"","sources":["../../../src/backend/services/default-preference-service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,GAWZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAE3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,sDAAsD,CAAC;AAEnG,OAAO,EAAE,mBAAmB,EAAwB,MAAM,+BAA+B,CAAC;AAC1F,OAAO,EACL,uBAAuB,GAGxB,MAAM,kCAAkC,CAAC;AAS1C,gFAAgF;AAChF,SAAS,YAAY,CAAC,OAAwB;IAC5C,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,MAAM,GAAG;IACb,wBAAwB;IACxB,yBAAyB;IACzB,yBAAyB;IACzB,0BAA0B;CAClB,CAAC;AA6BX,MAAM,OAAO,wBAAwB;IAEhB;IACA;IACA;IAHnB,YACmB,SAA8B,EAC9B,QAAmB,EACnB,KAAqC;QAFrC,cAAS,GAAT,SAAS,CAAqB;QAC9B,aAAQ,GAAR,QAAQ,CAAW;QACnB,UAAK,GAAL,KAAK,CAAgC;IACrD,CAAC;IAEJ,kDAAkD;IAClD,KAAK,CAAC,OAAO,CACX,KAAgC,EAChC,OAAe;QAEf,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,KAAsB,EACtB,KAAiC,EACjC,KAA6B;QAE7B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,MAAM,mBAAmB,GACvB,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,mBAAmB,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,uCAAuC,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,2BAA2B,EAAE;YACtD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjD,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;YACpC,CAAC;QACH,CAAC;QACD,MAAM,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACzB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI;YAChD,6BAA6B,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;YAC9D,MAAM,EAAE,uCAAuC;YAC/C,UAAU,EAAE,6BAA6B;YACzC,QAAQ,EAAE,GAAG,CAAC,EAAE;YAChB,WAAW,EAAE,MAAwC;YACrD,UAAU,EAAE,KAAgC;YAC5C,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;SACnC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CAAC,iBAAyB;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;QAE5E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAChC,MAAM,EAAE,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CACjG,CAAC;QACF,MAAM,MAAM,GAAG,cAAc;YAC3B,CAAC,CAAC,IAAI,CAAC,SAAS,CACZ,MAAM,EAAE,CAAC,OAAO,CAAC,2BAA2B,EAAE;gBAC5C,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,cAAc;aACxB,CAAC,CACH;YACH,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,QAAQ,GAAG,uBAAuB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAE9D,0EAA0E;QAC1E,uEAAuE;QACvE,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,6CAA6C;QAC7C,MAAM,cAAc,GAAG,cAAc;YACnC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,kBAAkB,CAAC;YAChF,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,eAAe,GAAG,cAAc;YACpC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,mBAAmB,CAAC;YACjF,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CACzD,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,cAAc,CAAC,CAC3C,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAC3D,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,eAAe,CAAC,CAC7C,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CACzD,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAC9D,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAC3D,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAC9D,CAAC;QAEF,OAAO;YACL,eAAe,EAAE,OAAO,CAAC,EAAE;YAC3B,gBAAgB,EAAE,QAAQ,CAAC,EAAE;YAC7B,gBAAgB,EAAE,OAAO,CAAC,EAAE;YAC5B,iBAAiB,EAAE,QAAQ,CAAC,EAAE;YAC9B,MAAM,EAAE;gBACN,OAAO,EAAE,OAAO,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,OAAO,EAAE,OAAO,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,MAAM;aAC1B;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAAoB,EACpB,QAA0C;QAE1C,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC5B,OAAO,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACzE,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,EAAU,EAAE,OAAwB;QAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxD,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,EAAU,EAAE,OAAwB;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxD,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,EAAU,EACV,cAA6B,EAC7B,iBAAyB;QAEzB,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,4DAA4D;QAC5D,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,EAAE;gBACzE,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YACH,IAAI,UAAU;gBAAE,OAAO,IAAI,CAAC;QAC9B,CAAC;QACD,wEAAwE;QACxE,yEAAyE;QACzE,uBAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,EAAE;YAClF,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,OAAO,QAAQ,KAAK,IAAI,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,iBAAyB;QAC5D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QAC/E,OAAO,QAAQ,EAAE,cAAc,IAAI,IAAI,CAAC;IAC1C,CAAC;IAEO,SAAS,CAAC,GAAuC;QACvD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACL,sBAAsB,EAAE,GAAG,CAAC,sBAAsB,IAAI,IAAI;YAC1D,uBAAuB,EAAE,GAAG,CAAC,uBAAuB,IAAI,IAAI;YAC5D,uBAAuB,EAAE,GAAG,CAAC,uBAAuB,IAAI,IAAI;YAC5D,wBAAwB,EAAE,GAAG,CAAC,wBAAwB,IAAI,IAAI;SAC/D,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,GAAgC;QACjD,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,sBAAsB,EAAE,GAAG,CAAC,sBAAsB,IAAI,IAAI;YAC1D,uBAAuB,EAAE,GAAG,CAAC,uBAAuB,IAAI,IAAI;YAC5D,uBAAuB,EAAE,GAAG,CAAC,uBAAuB,IAAI,IAAI;YAC5D,wBAAwB,EAAE,GAAG,CAAC,wBAAwB,IAAI,IAAI;SAC/D,CAAC;IACJ,CAAC;CACF"}

package/dist/backend/services/excel-importer.d.ts

@@ -0,0 +1,11 @@
+import { type ParseOutcome } from './import-rows.js';
+/**
+ * Parse an `.xlsx` workbook into the shared `NormalizedRow[]` (feature 039,
+ * FR-001). Only the first worksheet is read (research §R1); the header +
+ * column semantics are identical to the CSV path via `rowsFromTable`.
+ *
+ * The dependency on `exceljs` is isolated to this adapter — the rest of the
+ * import pipeline only ever sees normalized rows.
+ */
+export declare function parseXlsxRows(content: Buffer): Promise<ParseOutcome>;
+//# sourceMappingURL=excel-importer.d.ts.map