@endora-commerce/mod-quick-order 0.100.0

package/dist/backend/services/excel-importer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"excel-importer.d.ts","sourceRoot":"","sources":["../../../src/backend/services/excel-importer.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEpE;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAsC1E"}

package/dist/backend/services/excel-importer.js

@@ -0,0 +1,47 @@
+import exceljs from 'exceljs';
+import { rowsFromTable } from './import-rows.js';
+/**
+ * Parse an `.xlsx` workbook into the shared `NormalizedRow[]` (feature 039,
+ * FR-001). Only the first worksheet is read (research §R1); the header +
+ * column semantics are identical to the CSV path via `rowsFromTable`.
+ *
+ * The dependency on `exceljs` is isolated to this adapter — the rest of the
+ * import pipeline only ever sees normalized rows.
+ */
+export async function parseXlsxRows(content) {
+    const workbook = new exceljs.Workbook();
+    // Hand exceljs a plain ArrayBuffer slice: @types/node now types Buffer as
+    // the generic `Buffer<ArrayBufferLike>`, which is not assignable to the
+    // `Buffer<ArrayBuffer>` exceljs's bundled typings expect.
+    const arrayBuffer = content.buffer.slice(content.byteOffset, content.byteOffset + content.byteLength);
+    await workbook.xlsx.load(arrayBuffer);
+    const worksheet = workbook.worksheets[0];
+    if (!worksheet)
+        return { headerOk: false, rows: [] };
+    // exceljs rows + cells are 1-based; row.values[0] is unused.
+    const cellText = (cell) => {
+        if (!cell)
+            return '';
+        const text = cell.text;
+        return typeof text === 'string' ? text.trim() : String(cell.value ?? '').trim();
+    };
+    let header = [];
+    let headerColumnCount = 0;
+    const dataRows = [];
+    worksheet.eachRow({ includeEmpty: false }, (row, rowNumber) => {
+        if (rowNumber === 1) {
+            headerColumnCount = row.cellCount;
+            header = Array.from({ length: headerColumnCount }, (_, i) => cellText(row.getCell(i + 1)));
+            return;
+        }
+        const columnCount = Math.max(headerColumnCount, row.cellCount);
+        const cells = Array.from({ length: columnCount }, (_, i) => cellText(row.getCell(i + 1)));
+        if (cells.every((c) => c.length === 0))
+            return;
+        dataRows.push({ rowNumber, raw: cells.join(','), cells });
+    });
+    if (header.length === 0)
+        return { headerOk: false, rows: [] };
+    return rowsFromTable(header, dataRows);
+}
+//# sourceMappingURL=excel-importer.js.map

package/dist/backend/services/excel-importer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"excel-importer.js","sourceRoot":"","sources":["../../../src/backend/services/excel-importer.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAqB,MAAM,kBAAkB,CAAC;AAEpE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IACxC,0EAA0E;IAC1E,wEAAwE;IACxE,0DAA0D;IAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CACtC,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CACzB,CAAC;IACjB,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAErD,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,CAAC,IAA8B,EAAU,EAAE;QAC1D,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClF,CAAC,CAAC;IAEF,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAA+D,EAAE,CAAC;IAEhF,SAAS,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE;QAC5D,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACpB,iBAAiB,GAAG,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,OAAO;QAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC9D,OAAO,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC"}

package/dist/backend/services/import-from-request.d.ts

@@ -0,0 +1,9 @@
+import type { QuickOrderImportRequest } from '@endora-commerce/contracts';
+import { type ParseOutcome } from './import-rows.js';
+/**
+ * Turn an import request body (pasted CSV or an uploaded CSV / .xlsx file)
+ * into normalized rows. Shared by the storefront and admin import routes so
+ * both branch on format identically (feature 039).
+ */
+export declare function parseImportRequest(body: Pick<QuickOrderImportRequest, 'csv' | 'file'>): Promise<ParseOutcome>;
+//# sourceMappingURL=import-from-request.d.ts.map

package/dist/backend/services/import-from-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-from-request.d.ts","sourceRoot":"","sources":["../../../src/backend/services/import-from-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGnE;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,MAAM,CAAC,GAClD,OAAO,CAAC,YAAY,CAAC,CAQvB"}

package/dist/backend/services/import-from-request.js

@@ -0,0 +1,17 @@
+import { parseCsvRows } from './import-rows.js';
+import { parseXlsxRows } from './excel-importer.js';
+/**
+ * Turn an import request body (pasted CSV or an uploaded CSV / .xlsx file)
+ * into normalized rows. Shared by the storefront and admin import routes so
+ * both branch on format identically (feature 039).
+ */
+export async function parseImportRequest(body) {
+    if (body.file) {
+        const buffer = Buffer.from(body.file.contentBase64, 'base64');
+        return body.file.filename.toLowerCase().endsWith('.xlsx')
+            ? parseXlsxRows(buffer)
+            : parseCsvRows(buffer.toString('utf8'));
+    }
+    return parseCsvRows(body.csv ?? '');
+}
+//# sourceMappingURL=import-from-request.js.map

package/dist/backend/services/import-from-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-from-request.js","sourceRoot":"","sources":["../../../src/backend/services/import-from-request.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAqB,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAmD;IAEnD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvD,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;YACvB,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;AACtC,CAAC"}

package/dist/backend/services/import-pipeline.d.ts

@@ -0,0 +1,89 @@
+import type { ProductAudience, QuickOrderImportResponse } from '@endora-commerce/contracts';
+import { type VariantLike } from './variant-resolver.js';
+import type { ParseOutcome } from './import-rows.js';
+/**
+ * Catalog lookups the pipeline needs, injected so the row-resolution logic
+ * stays unit-testable without a database (mirrors the repo's injected-draw
+ * pattern, e.g. BusinessIdGenerator). The DB-backed implementation lives in
+ * `catalog-lookup.ts`.
+ */
+export interface ProductLike {
+    id: string;
+    sku: string;
+    status: string;
+    deletedAt?: Date | null;
+}
+export interface VariantBySku {
+    id: string;
+    sku: string;
+    parentProductId: string;
+}
+/**
+ * Who an import run answers for (issue #227) — a buyer's audience, or the
+ * operator surface `'unrestricted'`.
+ *
+ * The second arm is not a bypass looking for a home: `POST
+ * /api/v1/admin/quick-order/import` is gated by `orders:write` and the operator
+ * names the organisation on the *build* call, one step later, so at import time
+ * there is no buyer to answer for and the permission is the enforcement. It is
+ * spelled as a literal rather than as an optional argument because an optional
+ * one is the same bypass with nothing to grep for.
+ *
+ * **`'unrestricted'` waives the sales-channel narrowing too** (issue #259), and
+ * on the same ground rather than as a second exemption: the operator names the
+ * organisation one step later, so at import time there is no buyer *and*
+ * therefore no storefront this paste is happening on. The channel the admin's
+ * own request resolved to is the resolver's step-4 default unless the SPA sent
+ * `X-Sales-Channel`, and narrowing an operator's paste against a channel nobody
+ * chose would refuse SKUs the operator can see on every admin screen. The waiver
+ * lives in one place — `CatalogPortLookup.#publishedHere`, which reads this
+ * literal — so it cannot drift apart from the audience half it travels with.
+ */
+export type QuickOrderImportAudience = ProductAudience | 'unrestricted';
+export interface QuickOrderCatalogLookup {
+    /**
+     * Products whose own SKU matches one of `skus`, **and that this buyer may
+     * see** (issue #227).
+     *
+     * The audience is a parameter rather than a filter the pipeline applies
+     * afterwards because that is what keeps the two answers identical: a SKU
+     * nobody sells and a SKU restricted to another distributor both come back
+     * absent, and the pipeline rejects both as `product_not_found` without
+     * knowing there was a difference. A pasted SKU list is otherwise an
+     * enumeration oracle over an operator's private assortment — the same defect
+     * as issue #174's type-ahead, on the surface next to it.
+     */
+    findProductsBySku(skus: string[], audience: QuickOrderImportAudience): Promise<ProductLike[]>;
+    /**
+     * Variants whose own SKU matches one of `skus` (row referenced a variant
+     * directly), restricted by the **parent** product's answer — a variant has no
+     * visibility of its own.
+     */
+    findVariantsBySku(skus: string[], audience: QuickOrderImportAudience): Promise<VariantBySku[]>;
+    /** All variants under the given parent products (for attribute-column resolution). */
+    findVariantsByParent(productIds: string[]): Promise<Array<VariantLike & {
+        parentProductId: string;
+    }>>;
+}
+/**
+ * QuickOrderImportPipeline (feature 039, FR-004/FR-009/FR-010). Turns parsed
+ * rows into the recognized/rejected partition + summary:
+ *   - validates sku + integer quantity,
+ *   - resolves a concrete variant from attribute columns (or a direct variant SKU),
+ *   - merges duplicate (product, variant) lines summing quantity,
+ *   - caps the row count and reports overflow as `row_limit_exceeded`.
+ */
+export declare class QuickOrderImportPipeline {
+    private readonly lookup;
+    constructor(lookup: QuickOrderCatalogLookup);
+    run(parse: ParseOutcome, opts: {
+        maxRows?: number;
+        audience: QuickOrderImportAudience;
+    }): Promise<QuickOrderImportResponse>;
+    /** Validate sku + integer quantity, rejecting malformed rows with a reason. */
+    private toCandidates;
+    /** Merge duplicate (productId, variantId) lines, summing quantity (FR-009). */
+    private mergeDuplicates;
+    private finalize;
+}
+//# sourceMappingURL=import-pipeline.d.ts.map

package/dist/backend/services/import-pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-pipeline.d.ts","sourceRoot":"","sources":["../../../src/backend/services/import-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,wBAAwB,EAGzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,wBAAwB,GAAG,eAAe,GAAG,cAAc,CAAC;AAExE,MAAM,WAAW,uBAAuB;IACtC;;;;;;;;;;;OAWG;IACH,iBAAiB,CACf,IAAI,EAAE,MAAM,EAAE,EACd,QAAQ,EAAE,wBAAwB,GACjC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1B;;;;OAIG;IACH,iBAAiB,CACf,IAAI,EAAE,MAAM,EAAE,EACd,QAAQ,EAAE,wBAAwB,GACjC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3B,sFAAsF;IACtF,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CACvG;AAyBD;;;;;;;GAOG;AACH,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,uBAAuB;IAEtD,GAAG,CACP,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,wBAAwB,CAAA;KAAE,GAC7D,OAAO,CAAC,wBAAwB,CAAC;IA4GpC,+EAA+E;IAC/E,OAAO,CAAC,YAAY;IAuBpB,+EAA+E;IAC/E,OAAO,CAAC,eAAe;IAgCvB,OAAO,CAAC,QAAQ;CAiBjB"}

package/dist/backend/services/import-pipeline.js

@@ -0,0 +1,188 @@
+import { resolveVariant } from './variant-resolver.js';
+function isPurchasable(product) {
+    // Feature 032 renamed the withdrawn product status `archived` → `inactive`.
+    // The `product_archived` rejection reason code is kept for contract stability.
+    return product.status !== 'inactive' && !product.deletedAt;
+}
+/**
+ * QuickOrderImportPipeline (feature 039, FR-004/FR-009/FR-010). Turns parsed
+ * rows into the recognized/rejected partition + summary:
+ *   - validates sku + integer quantity,
+ *   - resolves a concrete variant from attribute columns (or a direct variant SKU),
+ *   - merges duplicate (product, variant) lines summing quantity,
+ *   - caps the row count and reports overflow as `row_limit_exceeded`.
+ */
+export class QuickOrderImportPipeline {
+    lookup;
+    constructor(lookup) {
+        this.lookup = lookup;
+    }
+    async run(parse, opts) {
+        const rejected = [];
+        if (!parse.headerOk) {
+            for (const row of parse.rows) {
+                rejected.push({ line: row.rowNumber, raw: row.raw, reason: 'malformed_row' });
+            }
+            return this.finalize([], rejected, 0, false);
+        }
+        // Row cap (FR-010): overflow rows are reported, not silently dropped.
+        let rows = parse.rows;
+        let truncated = false;
+        const maxRows = opts.maxRows;
+        if (typeof maxRows === 'number' && Number.isFinite(maxRows) && rows.length > maxRows) {
+            for (const row of rows.slice(maxRows)) {
+                rejected.push({ line: row.rowNumber, raw: row.raw, reason: 'row_limit_exceeded' });
+            }
+            rows = rows.slice(0, maxRows);
+            truncated = true;
+        }
+        const candidates = this.toCandidates(rows, rejected);
+        if (candidates.length === 0)
+            return this.finalize([], rejected, 0, truncated);
+        const skus = Array.from(new Set(candidates.map((c) => c.sku)));
+        const [products, variantsBySku] = await Promise.all([
+            this.lookup.findProductsBySku(skus, opts.audience),
+            this.lookup.findVariantsBySku(skus, opts.audience),
+        ]);
+        const productBySku = new Map(products.map((p) => [p.sku, p]));
+        const variantBySku = new Map(variantsBySku.map((v) => [v.sku, v]));
+        // Variants of every parent product referenced by SKU (for attribute resolution).
+        const parentIds = products.map((p) => p.id);
+        const variantsByParent = new Map();
+        if (parentIds.length > 0) {
+            for (const v of await this.lookup.findVariantsByParent(parentIds)) {
+                const list = variantsByParent.get(v.parentProductId) ?? [];
+                list.push(v);
+                variantsByParent.set(v.parentProductId, list);
+            }
+        }
+        // Parent products of variants referenced directly by their own SKU, for the
+        // purchasable check.
+        const productById = new Map(products.map((p) => [p.id, p]));
+        const resolvedLines = [];
+        for (const c of candidates) {
+            const product = productBySku.get(c.sku);
+            if (product) {
+                if (!isPurchasable(product)) {
+                    rejected.push({ line: c.line, raw: c.raw, reason: 'product_archived' });
+                    continue;
+                }
+                const variants = variantsByParent.get(product.id) ?? [];
+                const resolution = resolveVariant(variants, c.attributes);
+                if (resolution.kind === 'no_variants') {
+                    resolvedLines.push({
+                        line: c.line,
+                        sku: product.sku,
+                        productId: product.id,
+                        variantId: null,
+                        resolvedVariantSku: null,
+                        quantity: c.quantity,
+                    });
+                }
+                else if (resolution.kind === 'resolved') {
+                    resolvedLines.push({
+                        line: c.line,
+                        sku: product.sku,
+                        productId: product.id,
+                        variantId: resolution.variantId,
+                        resolvedVariantSku: resolution.variantSku,
+                        quantity: c.quantity,
+                    });
+                }
+                else if (resolution.kind === 'ambiguous') {
+                    rejected.push({ line: c.line, raw: c.raw, reason: 'variant_ambiguous' });
+                }
+                else {
+                    rejected.push({ line: c.line, raw: c.raw, reason: 'variant_not_resolved' });
+                }
+                continue;
+            }
+            const variant = variantBySku.get(c.sku);
+            if (variant) {
+                const parent = productById.get(variant.parentProductId);
+                if (parent && !isPurchasable(parent)) {
+                    rejected.push({ line: c.line, raw: c.raw, reason: 'product_archived' });
+                    continue;
+                }
+                resolvedLines.push({
+                    line: c.line,
+                    sku: variant.sku,
+                    productId: variant.parentProductId,
+                    variantId: variant.id,
+                    resolvedVariantSku: variant.sku,
+                    quantity: c.quantity,
+                });
+                continue;
+            }
+            rejected.push({ line: c.line, raw: c.raw, reason: 'product_not_found' });
+        }
+        const { recognized, mergedCount } = this.mergeDuplicates(resolvedLines);
+        return this.finalize(recognized, rejected, mergedCount, truncated);
+    }
+    /** Validate sku + integer quantity, rejecting malformed rows with a reason. */
+    toCandidates(rows, rejected) {
+        const candidates = [];
+        for (const row of rows) {
+            if (!row.sku) {
+                rejected.push({ line: row.rowNumber, raw: row.raw, reason: 'sku_missing' });
+                continue;
+            }
+            const quantity = Number.parseInt(row.quantityRaw, 10);
+            if (!Number.isFinite(quantity) || quantity < 1 || String(quantity) !== row.quantityRaw) {
+                rejected.push({ line: row.rowNumber, raw: row.raw, reason: 'quantity_invalid' });
+                continue;
+            }
+            candidates.push({
+                line: row.rowNumber,
+                raw: row.raw,
+                sku: row.sku,
+                quantity,
+                attributes: row.attributes,
+            });
+        }
+        return candidates;
+    }
+    /** Merge duplicate (productId, variantId) lines, summing quantity (FR-009). */
+    mergeDuplicates(lines) {
+        const byKey = new Map();
+        let mergedCount = 0;
+        for (const line of lines) {
+            const key = `${line.productId}::${line.variantId ?? ''}`;
+            const existing = byKey.get(key);
+            if (existing) {
+                existing.quantity += line.quantity;
+                existing.mergedFromLines.push(line.line);
+                mergedCount += 1;
+            }
+            else {
+                byKey.set(key, {
+                    line: line.line,
+                    sku: line.sku,
+                    productId: line.productId,
+                    variantId: line.variantId,
+                    resolvedVariantSku: line.resolvedVariantSku,
+                    quantity: line.quantity,
+                    mergedFromLines: [],
+                });
+            }
+        }
+        const recognized = Array.from(byKey.values()).map((item) => {
+            const { mergedFromLines, ...rest } = item;
+            return mergedFromLines.length > 0 ? { ...rest, mergedFromLines } : rest;
+        });
+        return { recognized, mergedCount };
+    }
+    finalize(recognized, rejected, mergedCount, truncated) {
+        return {
+            recognized,
+            rejected,
+            summary: {
+                recognizedCount: recognized.length,
+                rejectedCount: rejected.length,
+                mergedCount,
+                truncated,
+            },
+        };
+    }
+}
+//# sourceMappingURL=import-pipeline.js.map

package/dist/backend/services/import-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-pipeline.js","sourceRoot":"","sources":["../../../src/backend/services/import-pipeline.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,cAAc,EAAoB,MAAM,uBAAuB,CAAC;AA4FzE,SAAS,aAAa,CAAC,OAAoB;IACzC,4EAA4E;IAC5E,+EAA+E;IAC/E,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAwB;IACN;IAA7B,YAA6B,MAA+B;QAA/B,WAAM,GAAN,MAAM,CAAyB;IAAG,CAAC;IAEhE,KAAK,CAAC,GAAG,CACP,KAAmB,EACnB,IAA8D;QAE9D,MAAM,QAAQ,GAA6B,EAAE,CAAC;QAE9C,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QAED,sEAAsE;QACtE,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACtB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;YACrF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9B,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QAE9E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnE,iFAAiF;QACjF,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA4D,CAAC;QAC7F,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;gBAC3D,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,4EAA4E;QAC5E,qBAAqB;QACrB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5D,MAAM,aAAa,GAAmB,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBACxE,SAAS;gBACX,CAAC;gBACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACxD,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC1D,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBACtC,aAAa,CAAC,IAAI,CAAC;wBACjB,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,SAAS,EAAE,IAAI;wBACf,kBAAkB,EAAE,IAAI;wBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;qBACrB,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC1C,aAAa,CAAC,IAAI,CAAC;wBACjB,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,SAAS,EAAE,UAAU,CAAC,SAAS;wBAC/B,kBAAkB,EAAE,UAAU,CAAC,UAAU;wBACzC,QAAQ,EAAE,CAAC,CAAC,QAAQ;qBACrB,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAC9E,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBACxD,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBACxE,SAAS;gBACX,CAAC;gBACD,aAAa,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,SAAS,EAAE,OAAO,CAAC,eAAe;oBAClC,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,kBAAkB,EAAE,OAAO,CAAC,GAAG;oBAC/B,QAAQ,EAAE,CAAC,CAAC,QAAQ;iBACrB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC;IAED,+EAA+E;IACvE,YAAY,CAAC,IAAqB,EAAE,QAAkC;QAC5E,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;gBACvF,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACjF,SAAS;YACX,CAAC;YACD,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,GAAG,CAAC,SAAS;gBACnB,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,QAAQ;gBACR,UAAU,EAAE,GAAG,CAAC,UAAU;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,+EAA+E;IACvE,eAAe,CAAC,KAAqB;QAI3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoE,CAAC;QAC1F,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;gBACnC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzC,WAAW,IAAI,CAAC,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;oBACb,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;oBAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,eAAe,EAAE,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACzD,MAAM,EAAE,eAAe,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;YAC1C,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IACrC,CAAC;IAEO,QAAQ,CACd,UAAsC,EACtC,QAAkC,EAClC,WAAmB,EACnB,SAAkB;QAElB,OAAO;YACL,UAAU;YACV,QAAQ;YACR,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,CAAC,MAAM;gBAClC,aAAa,EAAE,QAAQ,CAAC,MAAM;gBAC9B,WAAW;gBACX,SAAS;aACV;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/backend/services/import-rows.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Shared import-row model + CSV parsing for quick-order imports (feature 039).
+ *
+ * Both the CSV path and the Excel path normalize their input into the same
+ * `NormalizedRow[]`, which the import pipeline then validates against the
+ * catalog. Keeping the parse step pure (no DB) makes it unit-testable.
+ */
+export interface NormalizedRow {
+    /** 1-based source row number (header is row 1; first data row is row 2). */
+    rowNumber: number;
+    /** Best-effort raw text of the row, shown when the row is rejected. */
+    raw: string;
+    sku: string;
+    /** Raw quantity cell, validated downstream so the reason can be precise. */
+    quantityRaw: string;
+    /** Non-sku / non-quantity columns, keyed by (lower-cased) header. */
+    attributes: Record<string, string>;
+}
+export interface ParseOutcome {
+    /** False when no usable `sku` + `quantity` header was found. */
+    headerOk: boolean;
+    rows: NormalizedRow[];
+}
+/**
+ * Minimal CSV row parser — handles double-quoted fields with embedded
+ * commas and escaped quotes (`""`). Sufficient for the quick-order use
+ * case; full RFC 4180 escapes are out of scope.
+ */
+export declare function parseCsvLine(line: string): string[];
+/**
+ * Build normalized rows from a header row + the data cell-arrays. Shared by
+ * the CSV and Excel parsers so both honour the same column semantics:
+ * `sku` + `quantity` are required (order-independent, case-insensitive);
+ * every other column becomes a variant attribute value.
+ */
+export declare function rowsFromTable(header: string[], dataRows: Array<{
+    rowNumber: number;
+    raw: string;
+    cells: string[];
+}>): ParseOutcome;
+/** Parse a CSV blob into normalized rows. */
+export declare function parseCsvRows(csv: string): ParseOutcome;
+//# sourceMappingURL=import-rows.d.ts.map

package/dist/backend/services/import-rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-rows.d.ts","sourceRoot":"","sources":["../../../src/backend/services/import-rows.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,gEAAgE;IAChE,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,aAAa,EAAE,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CA0BnD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EAAE,EAChB,QAAQ,EAAE,KAAK,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,GACnE,YAAY,CAmCd;AAED,6CAA6C;AAC7C,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAatD"}

package/dist/backend/services/import-rows.js

@@ -0,0 +1,102 @@
+/**
+ * Shared import-row model + CSV parsing for quick-order imports (feature 039).
+ *
+ * Both the CSV path and the Excel path normalize their input into the same
+ * `NormalizedRow[]`, which the import pipeline then validates against the
+ * catalog. Keeping the parse step pure (no DB) makes it unit-testable.
+ */
+/**
+ * Minimal CSV row parser — handles double-quoted fields with embedded
+ * commas and escaped quotes (`""`). Sufficient for the quick-order use
+ * case; full RFC 4180 escapes are out of scope.
+ */
+export function parseCsvLine(line) {
+    const cells = [];
+    let current = '';
+    let inQuotes = false;
+    for (let i = 0; i < line.length; i++) {
+        const ch = line[i];
+        if (inQuotes) {
+            if (ch === '"' && line[i + 1] === '"') {
+                current += '"';
+                i++;
+            }
+            else if (ch === '"') {
+                inQuotes = false;
+            }
+            else {
+                current += ch;
+            }
+        }
+        else if (ch === ',') {
+            cells.push(current);
+            current = '';
+        }
+        else if (ch === '"' && current.length === 0) {
+            inQuotes = true;
+        }
+        else {
+            current += ch;
+        }
+    }
+    cells.push(current);
+    return cells;
+}
+/**
+ * Build normalized rows from a header row + the data cell-arrays. Shared by
+ * the CSV and Excel parsers so both honour the same column semantics:
+ * `sku` + `quantity` are required (order-independent, case-insensitive);
+ * every other column becomes a variant attribute value.
+ */
+export function rowsFromTable(header, dataRows) {
+    const normalizedHeader = header.map((h) => h.trim().toLowerCase());
+    const skuIdx = normalizedHeader.indexOf('sku');
+    const qtyIdx = normalizedHeader.indexOf('quantity');
+    if (skuIdx === -1 || qtyIdx === -1) {
+        // No usable header — surface every data row so the pipeline can reject
+        // each as `malformed_row` (preserves the line numbers for the UI).
+        return {
+            headerOk: false,
+            rows: dataRows.map(({ rowNumber, raw }) => ({
+                rowNumber,
+                raw,
+                sku: '',
+                quantityRaw: '',
+                attributes: {},
+            })),
+        };
+    }
+    const attributeColumns = normalizedHeader
+        .map((name, idx) => ({ name, idx }))
+        .filter(({ name, idx }) => idx !== skuIdx && idx !== qtyIdx && name.length > 0);
+    const rows = [];
+    for (const { rowNumber, raw, cells } of dataRows) {
+        const sku = (cells[skuIdx] ?? '').trim();
+        const quantityRaw = (cells[qtyIdx] ?? '').trim();
+        const attributes = {};
+        for (const { name, idx } of attributeColumns) {
+            const value = (cells[idx] ?? '').trim();
+            if (value.length > 0)
+                attributes[name] = value;
+        }
+        rows.push({ rowNumber, raw, sku, quantityRaw, attributes });
+    }
+    return { headerOk: true, rows };
+}
+/** Parse a CSV blob into normalized rows. */
+export function parseCsvRows(csv) {
+    const lines = csv.replace(/\r\n?/g, '\n').split('\n');
+    if (lines.length === 0 || !lines[0]?.trim()) {
+        return { headerOk: false, rows: [] };
+    }
+    const header = parseCsvLine(lines[0] ?? '');
+    const dataRows = [];
+    for (let i = 1; i < lines.length; i++) {
+        const raw = lines[i] ?? '';
+        if (!raw.trim())
+            continue;
+        dataRows.push({ rowNumber: i + 1, raw, cells: parseCsvLine(raw) });
+    }
+    return rowsFromTable(header, dataRows);
+}
+//# sourceMappingURL=import-rows.js.map

package/dist/backend/services/import-rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-rows.js","sourceRoot":"","sources":["../../../src/backend/services/import-rows.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAoBH;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACtC,OAAO,IAAI,GAAG,CAAC;gBACf,CAAC,EAAE,CAAC;YACN,CAAC;iBAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACtB,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAgB,EAChB,QAAoE;IAEpE,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACnC,uEAAuE;QACvE,mEAAmE;QACnE,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC1C,SAAS;gBACT,GAAG;gBACH,GAAG,EAAE,EAAE;gBACP,WAAW,EAAE,EAAE;gBACf,UAAU,EAAE,EAAE;aACf,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,gBAAgB;SACtC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;SACnC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAElF,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,gBAAgB,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAA+D,EAAE,CAAC;IAChF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,SAAS;QAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC"}

package/dist/backend/services/one-click-service.d.ts

@@ -0,0 +1,50 @@
+import { type CartWritePort, type OrderPlacementPort, type PlacedOrderRecord, type QuickOrderOneClickEligibility } from '@endora-commerce/contracts';
+import type { DefaultPreferenceService } from './default-preference-service.js';
+export interface OneClickContext {
+    customerAccountId: string;
+    organizationId: string;
+}
+export interface OneClickPlaceInput {
+    productId: string;
+    variantId?: string | null;
+    quantity?: number;
+    idempotencyKey?: string;
+}
+/**
+ * OneClickService (feature 039, US5). Computes whether the one-click button
+ * should show, and places a one-click order by reusing the platform's
+ * established single-active-cart flow: clear the cart, add the chosen product,
+ * then run `OrderService.placeOrder` with the buyer's resolved default methods
+ * and addresses. All order validation (org active, minimum value, credit limit,
+ * stock) and the payment-routing `nextAction` come from `placeOrder` (FR-029 /
+ * FR-030); no parallel ordering path (FR-031).
+ *
+ * Both collaborators are `@endora-commerce/contracts` ports since feature 075's Phase C —
+ * `cartWritePort` and `orderPlacementPort`. The lazy `() => OrderService | null`
+ * accessor is gone with them: the port's gate answers 503 `MODULE_DISABLED`
+ * when `orders` is not present, which is the same refusal the `null` branch
+ * spelled by hand, except that a `null` accessor was indistinguishable from a
+ * wiring mistake. `placeOrder` answers `PlacedOrderRecord`, which is
+ * `OrderRecord` **plus** `nextAction` — the payment routing this reply exists
+ * to carry.
+ *
+ * **The channel is a per-call argument, not a constructor default** (issue #99,
+ * D-48). It used to be `salesChannelId: string = 'default'` — a fifth
+ * constructor parameter `backend.ts` never passed, so every deployment read the
+ * setting against a channel *code*, tripped the settings seam guard, and
+ * reported `setting_disabled` indistinguishably from an operator having
+ * switched one-click buy off. The routes read the channel the canonical
+ * resolver put on the request and hand it down; `null` means there is none, and
+ * then the setting is read platform-wide (D-41 case c) and the order records no
+ * channel rather than an invented one.
+ */
+export declare class OneClickService {
+    private readonly preferenceService;
+    private readonly cartWrite;
+    private readonly orderPlacement;
+    private readonly resolveOneClickEnabled;
+    constructor(preferenceService: DefaultPreferenceService, cartWrite: CartWritePort, orderPlacement: OrderPlacementPort, resolveOneClickEnabled: (salesChannelId: string | null) => Promise<boolean>);
+    eligibility(customerAccountId: string, salesChannelId: string | null): Promise<QuickOrderOneClickEligibility>;
+    place(ctx: OneClickContext, input: OneClickPlaceInput, salesChannelId: string | null): Promise<PlacedOrderRecord>;
+}
+//# sourceMappingURL=one-click-service.d.ts.map

package/dist/backend/services/one-click-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"one-click-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/one-click-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,6BAA6B,EACnC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEhF,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,sBAAsB;gBAHtB,iBAAiB,EAAE,wBAAwB,EAC3C,SAAS,EAAE,aAAa,EACxB,cAAc,EAAE,kBAAkB,EAClC,sBAAsB,EAAE,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC;IAGxF,WAAW,CACf,iBAAiB,EAAE,MAAM,EACzB,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAAC,6BAA6B,CAAC;IAgBnC,KAAK,CACT,GAAG,EAAE,eAAe,EACpB,KAAK,EAAE,kBAAkB,EACzB,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAAC,iBAAiB,CAAC;CAiC9B"}