@endora-commerce/mod-quick-order 0.100.0

package/dist/migrations/20260611T140359_quick_order_default_preferences.js

@@ -0,0 +1,53 @@
+import { Migration } from '@mikro-orm/migrations';
+/**
+ * Quick-order default ordering preferences (feature 039 — US2).
+ *
+ * One row per target (`scope` = organization | customer, `scope_id` = its id)
+ * holding four nullable default references. A customer row overrides the
+ * organization row per field; resolution is in the service. FKs are
+ * `ON DELETE SET NULL` so removing a method / address degrades the default to
+ * "unset" rather than blocking (FR-020).
+ */
+export class Migration20260611T140359QuickOrderDefaultPreferences extends Migration {
+    async up() {
+        this.addSql(`
+      create table "quick_order_default_preferences" (
+        "id" uuid not null,
+        "scope" varchar(16) not null,
+        "scope_id" uuid not null,
+        "default_payment_method_id" uuid null,
+        "default_delivery_method_id" uuid null,
+        "default_billing_address_id" uuid null,
+        "default_shipping_address_id" uuid null,
+        "created_at" timestamptz not null,
+        "updated_at" timestamptz not null,
+        constraint "quick_order_default_preferences_pkey" primary key ("id"),
+        constraint "quick_order_default_preferences_scope_check"
+          check ("scope" in ('organization', 'customer'))
+      );
+    `);
+        this.addSql(`
+      create unique index "quick_order_default_preferences_scope_target_uq"
+        on "quick_order_default_preferences" ("scope", "scope_id");
+    `);
+        this.addSql(`
+      create index "quick_order_default_preferences_scope_id_idx"
+        on "quick_order_default_preferences" ("scope_id");
+    `);
+        this.addSql(`
+      alter table "quick_order_default_preferences"
+        add constraint "qodp_payment_method_fk"
+          foreign key ("default_payment_method_id") references "payment_methods" ("id") on delete set null,
+        add constraint "qodp_delivery_method_fk"
+          foreign key ("default_delivery_method_id") references "delivery_methods" ("id") on delete set null,
+        add constraint "qodp_billing_address_fk"
+          foreign key ("default_billing_address_id") references "addresses" ("id") on delete set null,
+        add constraint "qodp_shipping_address_fk"
+          foreign key ("default_shipping_address_id") references "addresses" ("id") on delete set null;
+    `);
+    }
+    async down() {
+        this.addSql('drop table if exists "quick_order_default_preferences";');
+    }
+}
+//# sourceMappingURL=20260611T140359_quick_order_default_preferences.js.map

package/dist/migrations/20260611T140359_quick_order_default_preferences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"20260611T140359_quick_order_default_preferences.js","sourceRoot":"","sources":["../../src/migrations/20260611T140359_quick_order_default_preferences.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,OAAO,oDAAqD,SAAQ,SAAS;IACxE,KAAK,CAAC,EAAE;QACf,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;KAeX,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC;;;KAGX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC;;;KAGX,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;KAUX,CAAC,CAAC;IACL,CAAC;IAEQ,KAAK,CAAC,IAAI;QACjB,IAAI,CAAC,MAAM,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/migrations/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The `./migrations` subpath — every migration class this module owns, as one
+ * ordered `migrations` array.
+ *
+ * The array is what the platform reads when this module is **installed**:
+ * `src/packages/package-runtime.ts` takes `exported['migrations']` and refuses
+ * the package outright when it is absent (D-168).
+ *
+ * Listed in ascending timestamp, which is the order of this module's own
+ * migrations and of nothing else (feature 081): a manifest `dependencies` array
+ * is the only thing ordering this block against another module's.
+ *
+ * The **named** exports stay beside the array, and the asymmetry with
+ * `./backend` — which publishes an array and no named class (D-168) — is
+ * deliberate. `db/migrations-registry.generated.ts` imports each class by name
+ * from this specifier, and a migration class name is contract in a way an entity
+ * class name is not: `mikro_orm_migrations` persists it, so it is a string every
+ * already-migrated database holds.
+ *
+ * A class that is in neither the array nor the barrel is a migration that does
+ * not run: `migration:pending` reports nothing pending and the first symptom is
+ * a query against a table nobody created.
+ */
+import { Migration20260611T140359QuickOrderDefaultPreferences } from './20260611T140359_quick_order_default_preferences.js';
+export declare const migrations: (typeof Migration20260611T140359QuickOrderDefaultPreferences)[];
+export { Migration20260611T140359QuickOrderDefaultPreferences, };
+//# sourceMappingURL=index.d.ts.map

package/dist/migrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,oDAAoD,EAAE,MAAM,sDAAsD,CAAC;AAE5H,eAAO,MAAM,UAAU,iEAEtB,CAAC;AAEF,OAAO,EACL,oDAAoD,GACrD,CAAC"}

package/dist/migrations/index.js

@@ -0,0 +1,29 @@
+/**
+ * The `./migrations` subpath — every migration class this module owns, as one
+ * ordered `migrations` array.
+ *
+ * The array is what the platform reads when this module is **installed**:
+ * `src/packages/package-runtime.ts` takes `exported['migrations']` and refuses
+ * the package outright when it is absent (D-168).
+ *
+ * Listed in ascending timestamp, which is the order of this module's own
+ * migrations and of nothing else (feature 081): a manifest `dependencies` array
+ * is the only thing ordering this block against another module's.
+ *
+ * The **named** exports stay beside the array, and the asymmetry with
+ * `./backend` — which publishes an array and no named class (D-168) — is
+ * deliberate. `db/migrations-registry.generated.ts` imports each class by name
+ * from this specifier, and a migration class name is contract in a way an entity
+ * class name is not: `mikro_orm_migrations` persists it, so it is a string every
+ * already-migrated database holds.
+ *
+ * A class that is in neither the array nor the barrel is a migration that does
+ * not run: `migration:pending` reports nothing pending and the first symptom is
+ * a query against a table nobody created.
+ */
+import { Migration20260611T140359QuickOrderDefaultPreferences } from './20260611T140359_quick_order_default_preferences.js';
+export const migrations = [
+    Migration20260611T140359QuickOrderDefaultPreferences,
+];
+export { Migration20260611T140359QuickOrderDefaultPreferences, };
+//# sourceMappingURL=index.js.map

package/dist/migrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,oDAAoD,EAAE,MAAM,sDAAsD,CAAC;AAE5H,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,oDAAoD;CACrD,CAAC;AAEF,OAAO,EACL,oDAAoD,GACrD,CAAC"}

package/docs/quick_order.md

@@ -0,0 +1,98 @@
+---
+title: quick_order
+description: CSV-import + type-ahead helpers for buyers ordering by SKU
+---
+
+# `quick_order`
+
+The platform's **quick-ordering toolkit**.
+It bundles several conveniences that let B2B buyers place repeat and
+high-volume orders with the fewest steps, reusing the existing Cart, Quote
+Request, Order/Checkout, Organization, Payment/Shipping method, Catalog, and
+Settings capabilities rather than introducing a parallel ordering engine.
+
+## Capabilities
+
+### 1. CSV / Excel import → Cart or Quote Request
+
+`POST /api/v1/quick-order/import` accepts a pasted CSV (`csv`) **or** an
+uploaded CSV / `.xlsx` file (`file: { filename, contentBase64 }`). Both are
+normalized to the same row model and validated against the catalog:
+
+- Required columns `sku` + `quantity` (header row, order-independent,
+  case-insensitive). Any other column is treated as a **variant attribute
+  value** and resolved against the parent product's variant-axis attributes —
+  a row resolves only when exactly one purchasable variant matches.
+- The response partitions rows into `recognized` + `rejected` (each with a
+  per-row reason: `sku_missing`, `quantity_invalid`, `product_not_found`,
+  `product_archived`, `malformed_row`, `variant_not_resolved`,
+  `variant_ambiguous`, `row_limit_exceeded`) plus a `summary`.
+- Duplicate SKUs are merged (quantities summed); rows beyond
+  `quick_order.import_max_rows` are rejected.
+
+`POST /api/v1/quick-order/build` turns the confirmed recognized rows into a
+**Cart** (`CartService`) or a **Quote Request** (`RfqService`), priced under the
+buyer's / organization's current price list. The admin twins
+(`/api/v1/admin/quick-order/import` + `/build`, guarded by `orders:write`)
+build on behalf of a chosen customer via `onBehalfOf`.
+
+`.xlsx` parsing uses **`exceljs`** (backend-only, isolated to
+`excel-importer.ts`); only the first worksheet is read.
+
+### 2. Quick search
+
+`GET /api/v1/quick-order/search?q=` matches by SKU, product name, and the
+values of attributes flagged **`quick_searchable`** (an independent boolean on
+`product_attributes`, toggled in the admin Attributes manager). Values of
+non-flagged attributes never match. Session-gated; channel-scoped.
+
+### 3. Default ordering preferences
+
+`quick_order_default_preferences` stores four defaults — payment method,
+delivery method, billing address, shipping address — per target
+(`scope` = `organization` | `customer`). Resolution is most-specific-wins
+(customer overrides organization, per field) with a use-time eligibility
+re-check (active / org-allowed / address exists → otherwise dropped to null).
+
+- Storefront: a customer manages their own defaults (`/preferences`); checkout
+  pre-selects the resolved defaults.
+- Admin: `/api/v1/admin/quick-order/preferences` — a platform admin manages any
+  scope; a salesperson only their assigned organizations and those orgs'
+  customers. Every change is audited.
+
+### 4. Reorder
+
+"Order again" on a past order produces either a new Cart
+(`POST /orders/:id/reorder`) or a new Quote Request
+(`POST /orders/:id/clone-to-quote`) at current prices, reporting unavailable
+lines and respecting the `orders.reorder_enabled` setting.
+
+### 5. One-click buy
+
+When `quick_order.one_click_buy_enabled` is on for the buyer's sales channel
+**and** the buyer has all four eligible defaults, the product page shows a
+"Buy in one click" button. It skips Cart and Checkout: the order is placed from
+the defaults (`clear cart → add product → OrderService.placeOrder`) and the
+buyer is routed by the payment `nextAction` (gateway redirect, or the order /
+success page when no payment step is required). Same validations as a normal
+order (org active, minimum value, credit limit, stock).
+
+## Settings
+
+| Code | Type | Default | Scope |
+|------|------|---------|-------|
+| `quick_order.one_click_buy_enabled` | boolean | `false` | per sales channel |
+| `quick_order.import_max_rows` | number | `2000` | global |
+
+## Data
+
+- New table `quick_order_default_preferences` (migration 057).
+- New column `product_attributes.quick_searchable` (migration 058, catalog).
+
+## Dependencies
+
+Builds on `orders` (Core ordering engine), `carts`, `quote_requests`,
+`organizations`, `payment_methods`, `delivery_methods`, `catalog`, `addresses`,
+and `settings`. The `orders` module does **not** depend on `quick_order`; the
+one-click flow receives `OrderService` through a lazy getter wired in
+composition.

package/i18n/en.json

@@ -0,0 +1,47 @@
+{
+  "module.name": "Quick Order",
+  "settings.oneClickBuyEnabled.label": "One-click buy enabled",
+  "settings.importMaxRows.label": "Import row limit",
+  "actions.openQuickOrder.label": "Quick order on behalf",
+  "actions.openQuickOrder.description": "Import a CSV or Excel file and build a cart or quote request for a customer",
+  "onBehalf.page.title": "Quick order on behalf",
+  "onBehalf.page.description": "Import a CSV / Excel file and build a cart or quote request for a customer.",
+  "onBehalf.customer.title": "Customer",
+  "onBehalf.customer.account": "Customer account",
+  "onBehalf.customer.accountPlaceholder": "Search customers by name or email…",
+  "onBehalf.customer.accountEmpty": "No matching customers.",
+  "onBehalf.customer.organization": "Organization",
+  "onBehalf.customer.organizationPlaceholder": "Search organizations…",
+  "onBehalf.customer.organizationEmpty": "No organizations found",
+  "onBehalf.import.title": "Import",
+  "onBehalf.import.dropzone": "Drag a CSV or Excel file here, or click to choose",
+  "onBehalf.import.selectedFile": "Selected: {name}",
+  "onBehalf.import.pasteLabel": "…or paste CSV",
+  "onBehalf.import.preview": "Preview",
+  "onBehalf.preview.title": "Preview",
+  "onBehalf.preview.summary": "{recognized} recognised, {rejected} rejected",
+  "onBehalf.preview.truncated": "truncated",
+  "onBehalf.preview.empty": "No rows matched the catalog.",
+  "onBehalf.column.line": "Line",
+  "onBehalf.column.sku": "SKU",
+  "onBehalf.column.variant": "Variant",
+  "onBehalf.column.quantity": "Qty",
+  "onBehalf.column.reason": "Reason",
+  "onBehalf.column.raw": "Raw",
+  "onBehalf.action.buildCart": "Build cart",
+  "onBehalf.action.buildQuoteRequest": "Build quote request",
+  "onBehalf.success.cart": "Cart built: {id}",
+  "onBehalf.success.quoteRequest": "Quote request created: {id}",
+  "onBehalf.error.import": "Import failed.",
+  "onBehalf.error.build": "Build failed.",
+  "onBehalf.error.missingCustomer": "Choose a customer account and an organization first.",
+  "onBehalf.reason.sku_missing": "SKU missing",
+  "onBehalf.reason.quantity_invalid": "Invalid quantity",
+  "onBehalf.reason.product_not_found": "Product not found",
+  "onBehalf.reason.product_archived": "Product archived",
+  "onBehalf.reason.malformed_row": "Malformed row",
+  "onBehalf.reason.variant_not_resolved": "Variant not resolved",
+  "onBehalf.reason.variant_ambiguous": "Ambiguous variant",
+  "onBehalf.reason.row_limit_exceeded": "Row limit exceeded",
+  "orderEntry.tab.quick": "Quick order"
+}

package/i18n/pl.json

@@ -0,0 +1,47 @@
+{
+  "module.name": "Szybkie zamówienia",
+  "settings.oneClickBuyEnabled.label": "Zakup jednym kliknięciem włączony",
+  "settings.importMaxRows.label": "Limit wierszy importu",
+  "actions.openQuickOrder.label": "Szybkie zamówienie w imieniu klienta",
+  "actions.openQuickOrder.description": "Zaimportuj plik CSV lub Excel i zbuduj koszyk albo zapytanie ofertowe dla klienta",
+  "onBehalf.page.title": "Szybkie zamówienie w imieniu klienta",
+  "onBehalf.page.description": "Zaimportuj plik CSV / Excel i zbuduj koszyk albo zapytanie ofertowe dla klienta.",
+  "onBehalf.customer.title": "Klient",
+  "onBehalf.customer.account": "Konto klienta",
+  "onBehalf.customer.accountPlaceholder": "Szukaj klientów po nazwie lub adresie e-mail…",
+  "onBehalf.customer.accountEmpty": "Brak pasujących klientów.",
+  "onBehalf.customer.organization": "Organizacja",
+  "onBehalf.customer.organizationPlaceholder": "Szukaj organizacji…",
+  "onBehalf.customer.organizationEmpty": "Nie znaleziono organizacji",
+  "onBehalf.import.title": "Import",
+  "onBehalf.import.dropzone": "Przeciągnij tutaj plik CSV lub Excel albo kliknij, aby wybrać",
+  "onBehalf.import.selectedFile": "Wybrano: {name}",
+  "onBehalf.import.pasteLabel": "…lub wklej CSV",
+  "onBehalf.import.preview": "Podgląd",
+  "onBehalf.preview.title": "Podgląd",
+  "onBehalf.preview.summary": "rozpoznano: {recognized}, odrzucono: {rejected}",
+  "onBehalf.preview.truncated": "przycięto",
+  "onBehalf.preview.empty": "Żaden wiersz nie pasuje do katalogu.",
+  "onBehalf.column.line": "Wiersz",
+  "onBehalf.column.sku": "SKU",
+  "onBehalf.column.variant": "Wariant",
+  "onBehalf.column.quantity": "Ilość",
+  "onBehalf.column.reason": "Powód",
+  "onBehalf.column.raw": "Dane źródłowe",
+  "onBehalf.action.buildCart": "Zbuduj koszyk",
+  "onBehalf.action.buildQuoteRequest": "Zbuduj zapytanie ofertowe",
+  "onBehalf.success.cart": "Koszyk zbudowany: {id}",
+  "onBehalf.success.quoteRequest": "Zapytanie ofertowe utworzone: {id}",
+  "onBehalf.error.import": "Import nie powiódł się.",
+  "onBehalf.error.build": "Budowanie nie powiodło się.",
+  "onBehalf.error.missingCustomer": "Najpierw wybierz konto klienta i organizację.",
+  "onBehalf.reason.sku_missing": "Brak SKU",
+  "onBehalf.reason.quantity_invalid": "Nieprawidłowa ilość",
+  "onBehalf.reason.product_not_found": "Nie znaleziono produktu",
+  "onBehalf.reason.product_archived": "Produkt zarchiwizowany",
+  "onBehalf.reason.malformed_row": "Nieprawidłowy wiersz",
+  "onBehalf.reason.variant_not_resolved": "Nie rozpoznano wariantu",
+  "onBehalf.reason.variant_ambiguous": "Niejednoznaczny wariant",
+  "onBehalf.reason.row_limit_exceeded": "Przekroczono limit wierszy",
+  "orderEntry.tab.quick": "Szybkie zamówienie"
+}

package/package.json

@@ -0,0 +1,91 @@
+{
+  "name": "@endora-commerce/mod-quick-order",
+  "version": "0.100.0",
+  "type": "module",
+  "sideEffects": false,
+  "description": "Bulk Cart / Quote Request import (CSV + Excel, with variants), quick product search, reorder, default ordering preferences, and one-click buy.",
+  "license": "MIT",
+  "endora": {
+    "type": "module",
+    "id": "quick_order"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/endora-commerce/endora-commerce.git",
+    "directory": "packages/modules/quick_order"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/manifest.d.ts",
+      "default": "./dist/manifest.js"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.ts",
+      "default": "./dist/backend/index.js"
+    },
+    "./migrations": {
+      "types": "./dist/migrations/index.d.ts",
+      "default": "./dist/migrations/index.js"
+    },
+    "./admin": {
+      "types": "./dist/admin/index.d.ts",
+      "default": "./dist/admin/index.js"
+    },
+    "./tailwind.css": "./tailwind.css",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "i18n",
+    "docs",
+    "tailwind.css"
+  ],
+  "engines": {
+    "node": ">=22.18.0"
+  },
+  "peerDependencies": {
+    "@mikro-orm/core": "^6",
+    "@mikro-orm/migrations": "^6",
+    "@mikro-orm/postgresql": "^6",
+    "exceljs": "^4",
+    "fastify": "^5",
+    "react": "^19",
+    "zod": "^4",
+    "@endora-commerce/admin-kit": "0.100.0",
+    "@endora-commerce/contracts": "0.100.0",
+    "@endora-commerce/platform": "0.100.0"
+  },
+  "peerDependenciesMeta": {
+    "@endora-commerce/admin-kit": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@mikro-orm/core": "^6.6.13",
+    "@mikro-orm/migrations": "^6.6.13",
+    "@mikro-orm/postgresql": "^6.6.13",
+    "@types/node": "^22.9.0",
+    "@types/react": "^19.2.14",
+    "exceljs": "^4.4.0",
+    "fastify": "^5.12.5",
+    "react": "^19.2.5",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.11",
+    "zod": "^4.2.0",
+    "@endora-commerce/admin-kit": "0.100.0",
+    "@endora-commerce/contracts": "0.100.0",
+    "@endora-commerce/platform": "0.100.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json && tsc -p tsconfig.ui.json",
+    "typecheck": "tsc -p tsconfig.json && tsc -p tsconfig.ui.json --noEmit",
+    "lint": "eslint src",
+    "test": "vitest run"
+  }
+}

package/tailwind.css

@@ -0,0 +1,14 @@
+/* @endora-commerce/mod-quick-order — AUTO-GENERATED by `pnpm --filter backend run manifests:generate`.
+ *
+ * The `@source` directives this package asks its host to scan
+ * (`specs/110-instance-repository/contracts/admin-stylesheet-composition.md` R1).
+ * They resolve relative to **this file**, so they hold wherever the package is
+ * installed — a workspace link here, `node_modules` in a client's instance.
+ *
+ * The `dist` line is what a published tarball ships and is what an instance
+ * scans; the `src` line is inert there and is what keeps `pnpm --filter admin
+ * run dev` reading source in this repository. Do not edit: run
+ * `pnpm --filter backend run manifests:generate`.
+ */
+@source "./dist/admin";
+@source "./src/admin";