@endora-commerce/mod-quote-requests 0.100.0

package/dist/backend/routes.admin.d.ts

@@ -0,0 +1,13 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import type { RfqAdminService, AdminContext } from './services/rfq-admin-service.js';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+export interface AdminContextResolver {
+    (request: FastifyRequest): Promise<AdminContext>;
+}
+export interface QuoteRequestsAdminDeps {
+    adminService: RfqAdminService;
+    requireAdmin: RequireAdminFactory;
+    resolveAdminContext: AdminContextResolver;
+}
+export declare function registerQuoteRequestsAdminRoutes(app: FastifyInstance, deps: QuoteRequestsAdminDeps): Promise<void>;
+//# sourceMappingURL=routes.admin.d.ts.map

package/dist/backend/routes.admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.d.ts","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAgB,MAAM,SAAS,CAAC;AAS7E,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAwB,MAAM,iCAAiC,CAAC;AAC3G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,MAAM,WAAW,oBAAoB;IACnC,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,eAAe,CAAC;IAC9B,YAAY,EAAE,mBAAmB,CAAC;IAClC,mBAAmB,EAAE,oBAAoB,CAAC;CAC3C;AAcD,wBAAsB,gCAAgC,CACpD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAqGf"}

package/dist/backend/routes.admin.js

@@ -0,0 +1,82 @@
+import { adminApproveQuoteRequestSchema, adminAssignQuoteRequestSchema, adminCancelQuoteRequestSchema, adminCreateQuoteRequestSchema, adminPatchQuoteRequestSchema, rfqStatusSchema, } from '@endora-commerce/contracts';
+function parseIfMatch(request) {
+    const header = request.headers['if-match'];
+    if (!header || typeof header !== 'string')
+        return null;
+    const trimmed = header.replace(/^"|"$/g, '');
+    const n = Number.parseInt(trimmed, 10);
+    return Number.isFinite(n) ? n : null;
+}
+function setEtag(reply, version) {
+    reply.header('etag', `"${version}"`);
+}
+export async function registerQuoteRequestsAdminRoutes(app, deps) {
+    const { adminService, requireAdmin, resolveAdminContext } = deps;
+    const guard = requireAdmin('rfqs:handle');
+    app.get('/api/v1/admin/quote-requests', { preHandler: guard }, async (request) => {
+        const ctx = await resolveAdminContext(request);
+        const q = (request.query ?? {});
+        const status = q['status']
+            ? q['status']
+                .split(',')
+                .map((s) => s.trim())
+                .filter((s) => rfqStatusSchema.safeParse(s).success)
+            : undefined;
+        const scope = q['assignmentScope'] ?? undefined;
+        const data = await adminService.listAll(ctx, {
+            ...(q['organizationId'] ? { organizationId: q['organizationId'] } : {}),
+            ...(status && status.length > 0 ? { status: status } : {}),
+            ...(scope ? { scope } : {}),
+        });
+        return {
+            data,
+            pagination: { limit: 50, nextCursor: null, hasMore: false },
+        };
+    });
+    app.get('/api/v1/admin/quote-requests/:id', { preHandler: guard }, async (request, reply) => {
+        const ctx = await resolveAdminContext(request);
+        const rfq = await adminService.getById(ctx, request.params.id);
+        setEtag(reply, rfq.version);
+        return { data: rfq };
+    });
+    app.post('/api/v1/admin/quote-requests', { preHandler: guard, schema: { body: adminCreateQuoteRequestSchema } }, async (request, reply) => {
+        const ctx = await resolveAdminContext(request);
+        const body = adminCreateQuoteRequestSchema.parse(request.body);
+        const rfq = await adminService.createOnBehalf(ctx, body);
+        setEtag(reply, rfq.version);
+        reply.code(201);
+        return { data: rfq };
+    });
+    app.patch('/api/v1/admin/quote-requests/:id', { preHandler: guard, schema: { body: adminPatchQuoteRequestSchema } }, async (request, reply) => {
+        const ctx = await resolveAdminContext(request);
+        const body = adminPatchQuoteRequestSchema.parse(request.body);
+        const expectedVersion = parseIfMatch(request);
+        const rfq = await adminService.modify(ctx, request.params.id, expectedVersion, body);
+        setEtag(reply, rfq.version);
+        return { data: rfq };
+    });
+    app.post('/api/v1/admin/quote-requests/:id/approve', { preHandler: guard, schema: { body: adminApproveQuoteRequestSchema.optional() } }, async (request, reply) => {
+        const ctx = await resolveAdminContext(request);
+        const body = adminApproveQuoteRequestSchema.parse(request.body ?? {});
+        const expectedVersion = parseIfMatch(request);
+        const rfq = await adminService.approve(ctx, request.params.id, expectedVersion, body.note);
+        setEtag(reply, rfq.version);
+        return { data: rfq };
+    });
+    app.post('/api/v1/admin/quote-requests/:id/cancel', { preHandler: guard, schema: { body: adminCancelQuoteRequestSchema.optional() } }, async (request, reply) => {
+        const ctx = await resolveAdminContext(request);
+        const body = adminCancelQuoteRequestSchema.parse(request.body ?? {});
+        const expectedVersion = parseIfMatch(request);
+        const rfq = await adminService.cancel(ctx, request.params.id, expectedVersion, body.reason);
+        setEtag(reply, rfq.version);
+        return { data: rfq };
+    });
+    app.post('/api/v1/admin/quote-requests/:id/assign', { preHandler: guard, schema: { body: adminAssignQuoteRequestSchema } }, async (request, reply) => {
+        const ctx = await resolveAdminContext(request);
+        const body = adminAssignQuoteRequestSchema.parse(request.body);
+        const rfq = await adminService.assign(ctx, request.params.id, body.adminUserId);
+        setEtag(reply, rfq.version);
+        return { data: rfq };
+    });
+}
+//# sourceMappingURL=routes.admin.js.map

package/dist/backend/routes.admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.js","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AACA,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,EAC7B,4BAA4B,EAC5B,eAAe,GAChB,MAAM,4BAA4B,CAAC;AAcpC,SAAS,YAAY,CAAC,OAAuB;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,OAAO,CAAC,KAAmB,EAAE,OAAe;IACnD,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,OAAO,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,GAAoB,EACpB,IAA4B;IAE5B,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC;IACjE,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAE1C,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/E,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAuC,CAAC;QAEtE,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC;YACxB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;iBACR,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACxD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,KAAK,GAAI,CAAC,CAAC,iBAAiB,CAAsC,IAAI,SAAS,CAAC;QAEtF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE;YAC3C,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,gBAAgB,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5B,CAAC,CAAC;QACH,OAAO;YACL,IAAI;YACJ,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;SAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,kCAAkC,EAClC,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,8BAA8B,EAC9B,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,EAAE,EACtE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzD,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,kCAAkC,EAClC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,EAAE,EACrE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QACrF,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,0CAA0C,EAC1C,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,8BAA8B,CAAC,QAAQ,EAAE,EAAE,EAAE,EAClF,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3F,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,yCAAyC,EACzC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,6BAA6B,CAAC,QAAQ,EAAE,EAAE,EAAE,EACjF,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5F,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,yCAAyC,EACzC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,EAAE,EACtE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAChF,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/routes.customer.d.ts

@@ -0,0 +1,18 @@
+import type { FastifyInstance, FastifyRequest, FastifyReply } from 'fastify';
+import type { RfqService, CustomerContext } from './services/rfq-service.js';
+export type RequireCustomerGuard = (req: FastifyRequest, reply: FastifyReply) => Promise<void>;
+export interface CustomerContextResolver {
+    (request: FastifyRequest): Promise<CustomerContext>;
+}
+export interface QuoteRequestsCustomerDeps {
+    rfqService: RfqService;
+    requireCustomer: RequireCustomerGuard;
+    resolveCustomerContext: CustomerContextResolver;
+    /**
+     * Optional gate — refuses submission when the Customer's Organization
+     * is not `active` (feature 026 US1 / US3).
+     */
+    assertOrganizationCanTransact?: (organizationId: string) => Promise<void>;
+}
+export declare function registerQuoteRequestsCustomerRoutes(app: FastifyInstance, deps: QuoteRequestsCustomerDeps): Promise<void>;
+//# sourceMappingURL=routes.customer.d.ts.map

package/dist/backend/routes.customer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.customer.d.ts","sourceRoot":"","sources":["../../src/backend/routes.customer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAU7E,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG7E,MAAM,MAAM,oBAAoB,GAAG,CACjC,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,MAAM,WAAW,uBAAuB;IACtC,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,oBAAoB,CAAC;IACtC,sBAAsB,EAAE,uBAAuB,CAAC;IAChD;;;OAGG;IACH,6BAA6B,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAcD,wBAAsB,mCAAmC,CACvD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAoIf"}

package/dist/backend/routes.customer.js

@@ -0,0 +1,98 @@
+import { createQuoteRequestSchema, patchQuoteRequestSchema, acceptRevisionSchema, rejectRevisionSchema, resubmitQuoteRequestSchema, ERROR_CODES, OrganizationCannotTransactError, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+function parseIfMatch(request) {
+    const header = request.headers['if-match'];
+    if (!header || typeof header !== 'string')
+        return null;
+    const trimmed = header.replace(/^"|"$/g, '');
+    const n = Number.parseInt(trimmed, 10);
+    return Number.isFinite(n) ? n : null;
+}
+function setEtag(reply, version) {
+    reply.header('etag', `"${version}"`);
+}
+export async function registerQuoteRequestsCustomerRoutes(app, deps) {
+    const { rfqService, requireCustomer, resolveCustomerContext } = deps;
+    const { assertOrganizationCanTransact } = deps;
+    const guardCanTransact = async (organizationId) => {
+        if (!assertOrganizationCanTransact)
+            return;
+        try {
+            await assertOrganizationCanTransact(organizationId);
+        }
+        catch (err) {
+            if (err instanceof OrganizationCannotTransactError) {
+                throw new HttpError(423, ERROR_CODES.FORBIDDEN, 'Your Organization cannot submit Quote Requests in its current status.', { code: 'organization_cannot_transact', status: err.status });
+            }
+            throw err;
+        }
+    };
+    // GET /api/v1/quote-requests — list visible Quote Requests for the caller
+    app.get('/api/v1/quote-requests', { preHandler: requireCustomer }, async (request) => {
+        const ctx = await resolveCustomerContext(request);
+        const data = await rfqService.listForCustomer(ctx);
+        return {
+            data,
+            pagination: { limit: 50, nextCursor: null, hasMore: false },
+        };
+    });
+    // GET /api/v1/quote-requests/:id — detail
+    app.get('/api/v1/quote-requests/:id', { preHandler: requireCustomer }, async (request, reply) => {
+        const ctx = await resolveCustomerContext(request);
+        const rfq = await rfqService.getForCustomer(request.params.id, ctx);
+        setEtag(reply, rfq.version);
+        return { data: rfq };
+    });
+    // POST /api/v1/quote-requests — create + submit a new Quote Request
+    app.post('/api/v1/quote-requests', { preHandler: requireCustomer, schema: { body: createQuoteRequestSchema } }, async (request, reply) => {
+        const ctx = await resolveCustomerContext(request);
+        await guardCanTransact(ctx.organizationId);
+        const body = createQuoteRequestSchema.parse(request.body);
+        const rfq = await rfqService.createForCustomer(ctx, body);
+        setEtag(reply, rfq.version);
+        reply.code(201);
+        return { data: rfq };
+    });
+    // PATCH /api/v1/quote-requests/:id — customer-side draft edit
+    app.patch('/api/v1/quote-requests/:id', { preHandler: requireCustomer, schema: { body: patchQuoteRequestSchema } }, async (request, reply) => {
+        const ctx = await resolveCustomerContext(request);
+        const body = patchQuoteRequestSchema.parse(request.body);
+        const expectedVersion = parseIfMatch(request);
+        const rfq = await rfqService.patchDraft(request.params.id, ctx, body, expectedVersion);
+        setEtag(reply, rfq.version);
+        return { data: rfq };
+    });
+    // POST /api/v1/quote-requests/:id/accept-revision
+    app.post('/api/v1/quote-requests/:id/accept-revision', { preHandler: requireCustomer, schema: { body: acceptRevisionSchema } }, async (request, reply) => {
+        const ctx = await resolveCustomerContext(request);
+        const body = acceptRevisionSchema.parse(request.body);
+        const rfq = await rfqService.acceptRevision(request.params.id, ctx, body.expectedRevisionNumber);
+        setEtag(reply, rfq.version);
+        return { data: rfq };
+    });
+    // POST /api/v1/quote-requests/:id/reject-revision
+    app.post('/api/v1/quote-requests/:id/reject-revision', { preHandler: requireCustomer, schema: { body: rejectRevisionSchema } }, async (request, reply) => {
+        const ctx = await resolveCustomerContext(request);
+        const body = rejectRevisionSchema.parse(request.body);
+        const rfq = await rfqService.rejectRevision(request.params.id, ctx, body.expectedRevisionNumber, body.reason);
+        setEtag(reply, rfq.version);
+        return { data: rfq };
+    });
+    // POST /api/v1/quote-requests/:id/convert-to-order — start checkout
+    app.post('/api/v1/quote-requests/:id/convert-to-order', { preHandler: requireCustomer }, async (request, reply) => {
+        const ctx = await resolveCustomerContext(request);
+        const result = await rfqService.convertToOrder(request.params.id, ctx);
+        reply.code(200);
+        return { data: result };
+    });
+    // POST /api/v1/quote-requests/:id/resubmit — clone into a new Pending RFQ
+    app.post('/api/v1/quote-requests/:id/resubmit', { preHandler: requireCustomer, schema: { body: resubmitQuoteRequestSchema.optional() } }, async (request, reply) => {
+        const ctx = await resolveCustomerContext(request);
+        const body = resubmitQuoteRequestSchema.parse(request.body ?? {});
+        const rfq = await rfqService.resubmit(request.params.id, ctx, body);
+        setEtag(reply, rfq.version);
+        reply.code(201);
+        return { data: rfq };
+    });
+}
+//# sourceMappingURL=routes.customer.js.map

package/dist/backend/routes.customer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.customer.js","sourceRoot":"","sources":["../../src/backend/routes.customer.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,WAAW,EACX,+BAA+B,GAChC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAsB3D,SAAS,YAAY,CAAC,OAAuB;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,OAAO,CAAC,KAAmB,EAAE,OAAe;IACnD,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,OAAO,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,GAAoB,EACpB,IAA+B;IAE/B,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,sBAAsB,EAAE,GAAG,IAAI,CAAC;IACrE,MAAM,EAAE,6BAA6B,EAAE,GAAG,IAAI,CAAC;IAE/C,MAAM,gBAAgB,GAAG,KAAK,EAAE,cAAsB,EAAiB,EAAE;QACvE,IAAI,CAAC,6BAA6B;YAAE,OAAO;QAC3C,IAAI,CAAC;YACH,MAAM,6BAA6B,CAAC,cAAc,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,+BAA+B,EAAE,CAAC;gBACnD,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,SAAS,EACrB,uEAAuE,EACvE,EAAE,IAAI,EAAE,8BAA8B,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAC7D,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF,0EAA0E;IAC1E,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnF,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACnD,OAAO;YACL,IAAI;YACJ,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;SAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,0CAA0C;IAC1C,GAAG,CAAC,GAAG,CACL,4BAA4B,EAC5B,EAAE,UAAU,EAAE,eAAe,EAAE,EAC/B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;IAEF,oEAAoE;IACpE,GAAG,CAAC,IAAI,CACN,wBAAwB,EACxB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,EAAE,EAC3E,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;IAEF,8DAA8D;IAC9D,GAAG,CAAC,KAAK,CACP,4BAA4B,EAC5B,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAC1E,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;QACvF,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;IAEF,kDAAkD;IAClD,GAAG,CAAC,IAAI,CACN,4CAA4C,EAC5C,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EACvE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,cAAc,CACzC,OAAO,CAAC,MAAM,CAAC,EAAE,EACjB,GAAG,EACH,IAAI,CAAC,sBAAsB,CAC5B,CAAC;QACF,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;IAEF,kDAAkD;IAClD,GAAG,CAAC,IAAI,CACN,4CAA4C,EAC5C,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EACvE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,cAAc,CACzC,OAAO,CAAC,MAAM,CAAC,EAAE,EACjB,GAAG,EACH,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,MAAM,CACZ,CAAC;QACF,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;IAEF,oEAAoE;IACpE,GAAG,CAAC,IAAI,CACN,6CAA6C,EAC7C,EAAE,UAAU,EAAE,eAAe,EAAE,EAC/B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC,CACF,CAAC;IAEF,0EAA0E;IAC1E,GAAG,CAAC,IAAI,CACN,qCAAqC,EACrC,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,CAAC,QAAQ,EAAE,EAAE,EAAE,EACxF,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACpE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/routes.sales-reps.d.ts

@@ -0,0 +1,12 @@
+import type { FastifyInstance } from 'fastify';
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { OrganizationDetailsPort, SalesRepAssignmentPort } from '@endora-commerce/contracts';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+export interface QuoteRequestsSalesRepRoutesDeps {
+    emFactory: () => EntityManager;
+    requireAdmin: RequireAdminFactory;
+    salesRepAssignment: SalesRepAssignmentPort;
+    organizations: OrganizationDetailsPort;
+}
+export declare function registerQuoteRequestsSalesRepRoutes(app: FastifyInstance, deps: QuoteRequestsSalesRepRoutesDeps): Promise<void>;
+//# sourceMappingURL=routes.sales-reps.d.ts.map

package/dist/backend/routes.sales-reps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.sales-reps.d.ts","sourceRoot":"","sources":["../../src/backend/routes.sales-reps.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EACV,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAgC5E,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,YAAY,EAAE,mBAAmB,CAAC;IAClC,kBAAkB,EAAE,sBAAsB,CAAC;IAC3C,aAAa,EAAE,uBAAuB,CAAC;CACxC;AAED,wBAAsB,mCAAmC,CACvD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,+BAA+B,GACpC,OAAO,CAAC,IAAI,CAAC,CAiCf"}

package/dist/backend/routes.sales-reps.js

@@ -0,0 +1,57 @@
+import { QuoteRequest } from './entities/quote-request.entity.js';
+/**
+ * `GET /api/v1/admin/sales-reps/:adminUserId/organizations` — the reverse side
+ * of the sales-rep assignment relation, with the open quote-request count per
+ * organisation (feature 008 / T077; moved here by D-166).
+ *
+ * It sat in `organizations/routes.sales-reps.ts` with the three assignment
+ * endpoints, in a file `quote_requests` registered through a dynamic
+ * `import()`. That arrangement is what two of `organizations`' three
+ * cross-module-import ledger entries described, and this is the endpoint that
+ * made one of them: the open-RFQ count is **this** module's fact, so counting
+ * it there meant `organizations` naming `quote_requests`' entity, and repairing
+ * it in place by resolving `quoteRequestReadPort` from `organizations` would
+ * have closed a manifest cycle (`quote_requests` already declares
+ * `organizations`) for a question `organizations` does not own.
+ *
+ * Here it is built from two published ports and this module's own entity, and
+ * it names no file in another module's directory at all. It stays gated
+ * `rfqs:handle`, and that is the point of the split: the code is declared
+ * `module: 'quote_requests'`, so it disappears from `/admin-roles` when this
+ * module is switched off — which is correct precisely because this route
+ * disappears with it. The three endpoints that must **not** disappear are
+ * `organizations`', under `organizations:assign-sales-rep`.
+ *
+ * The statuses counted as "open" are the three the RFQ workflow treats as live;
+ * the list is the one this endpoint has always used.
+ */
+/** The statuses a quote request is counted under while it is still live. */
+const OPEN_STATUSES = ['Pending', 'Created from admin', 'Approved'];
+export async function registerQuoteRequestsSalesRepRoutes(app, deps) {
+    const { emFactory, requireAdmin, salesRepAssignment, organizations } = deps;
+    const guard = requireAdmin('rfqs:handle');
+    app.get('/api/v1/admin/sales-reps/:adminUserId/organizations', { preHandler: guard }, async (request) => {
+        const orgIds = await salesRepAssignment.listAssignedOrganizationIds(request.params.adminUserId);
+        if (orgIds.length === 0)
+            return { data: [] };
+        const orgs = await organizations.findByIds(orgIds);
+        const em = emFactory();
+        const open = await em.find(QuoteRequest, {
+            organizationId: { $in: orgIds },
+            status: { $in: [...OPEN_STATUSES] },
+        });
+        const countByOrg = new Map();
+        for (const r of open) {
+            countByOrg.set(r.organizationId, (countByOrg.get(r.organizationId) ?? 0) + 1);
+        }
+        return {
+            data: orgs.map((o) => ({
+                organizationId: o.id,
+                name: o.name,
+                openRfqCount: countByOrg.get(o.id) ?? 0,
+                assignedAt: o.createdAt.toISOString(),
+            })),
+        };
+    });
+}
+//# sourceMappingURL=routes.sales-reps.js.map

package/dist/backend/routes.sales-reps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.sales-reps.js","sourceRoot":"","sources":["../../src/backend/routes.sales-reps.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAGlE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,4EAA4E;AAC5E,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,oBAAoB,EAAE,UAAU,CAAU,CAAC;AAS7E,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,GAAoB,EACpB,IAAqC;IAErC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAC5E,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAE1C,GAAG,CAAC,GAAG,CACL,qDAAqD,EACrD,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,2BAA2B,CACjE,OAAO,CAAC,MAAM,CAAC,WAAW,CAC3B,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAE7C,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE;YACvC,cAAc,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;YAC/B,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,aAAa,CAAC,EAAE;SACpC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrB,cAAc,EAAE,CAAC,CAAC,EAAE;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;gBACvC,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/services/order-completion-reactor.d.ts

@@ -0,0 +1,32 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { OrderReadPort } from '@endora-commerce/contracts';
+import type { RfqEventService } from './rfq-event-service.js';
+import type { RfqNotificationService } from './rfq-notification-service.js';
+export interface OrderCompletionReactorDeps {
+    emFactory: () => EntityManager;
+    /**
+     * Feature 075, Phase C — the order row the event names, read over `orders`'
+     * published port instead of `em.findOne(Order, …)` against its table.
+     * Deactivation drops no tables, so the reactor kept completing quote requests
+     * from a module an operator had switched off; over the port the read fails
+     * closed, and `orders` is a binding dependency of this manifest.
+     */
+    orders: OrderReadPort;
+    eventService: RfqEventService;
+    notificationService: RfqNotificationService;
+}
+/**
+ * US5 — when an order is created carrying `sourceQuoteRequestId`, flip the
+ * originating RFQ to Completed and notify both parties (FR-007 + FR-028).
+ *
+ * The order-creation flow lives in `orders`, so this observes `order.created.v1`
+ * rather than coupling the two modules. The **subscription** lives in this
+ * module's `backend.ts` and goes through `ctx.subscribe` (issue #107): it was a
+ * bare `eventBus.on` in the plugin body, which meant a switched-off
+ * `quote_requests` still completed quote requests, appended an event row and
+ * enqueued a customer notification.
+ */
+export declare function createOrderCompletionReactor(deps: OrderCompletionReactorDeps): {
+    onOrderCreated: (payload: unknown) => Promise<void>;
+};
+//# sourceMappingURL=order-completion-reactor.d.ts.map

package/dist/backend/services/order-completion-reactor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"order-completion-reactor.d.ts","sourceRoot":"","sources":["../../../src/backend/services/order-completion-reactor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAE5E,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B;;;;;;OAMG;IACH,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,eAAe,CAAC;IAC9B,mBAAmB,EAAE,sBAAsB,CAAC;CAC7C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,0BAA0B,GAAG;IAC9E,cAAc,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD,CAyCA"}

package/dist/backend/services/order-completion-reactor.js

@@ -0,0 +1,57 @@
+import { QuoteRequest } from '../entities/quote-request.entity.js';
+/**
+ * US5 — when an order is created carrying `sourceQuoteRequestId`, flip the
+ * originating RFQ to Completed and notify both parties (FR-007 + FR-028).
+ *
+ * The order-creation flow lives in `orders`, so this observes `order.created.v1`
+ * rather than coupling the two modules. The **subscription** lives in this
+ * module's `backend.ts` and goes through `ctx.subscribe` (issue #107): it was a
+ * bare `eventBus.on` in the plugin body, which meant a switched-off
+ * `quote_requests` still completed quote requests, appended an event row and
+ * enqueued a customer notification.
+ */
+export function createOrderCompletionReactor(deps) {
+    return {
+        async onOrderCreated(payload) {
+            // command-coverage-ignore: **this marker is new; the write is not.** It
+            // appears only because issue #107 lifted this handler out of a plugin-body
+            // closure, where `check-command-coverage` could not see it — the same
+            // completion has been written on every quote-to-order conversion since
+            // US5. Read it as a write becoming visible, not as a new unaudited one.
+            //
+            // The disposition: a system reaction to an already-committed order, not an
+            // operator-initiated write. The placement that emits the event runs
+            // through the Command Bus, and the completion is appended to the RFQ's own
+            // event timeline below with `actor: System`, which is this module's audit
+            // trail — the same reasoning as its four sibling markers
+            // (`rfq-expiry-worker`, `rfq-event-service`, `rfq-revision-service`,
+            // `rfq-notification-service`).
+            const em = deps.emFactory();
+            const orderId = payload.orderId;
+            const order = await deps.orders.findById(orderId);
+            if (!order || !order.sourceQuoteRequestId)
+                return;
+            const rfq = await em.findOne(QuoteRequest, { id: order.sourceQuoteRequestId });
+            if (!rfq || rfq.status === 'Completed')
+                return;
+            rfq.status = 'Completed';
+            rfq.completedAt = new Date();
+            rfq.convertedOrderId = order.id;
+            rfq.version += 1;
+            await em.flush();
+            const evt = await deps.eventService.append({
+                quoteRequestId: rfq.id,
+                eventType: 'completed',
+                actor: { roleLabel: 'System' },
+                payload: { type: 'completed', orderId: order.id },
+            });
+            await deps.notificationService.enqueue({
+                quoteRequestId: rfq.id,
+                sourceEventId: evt.id,
+                recipients: [{ customerAccountId: rfq.customerAccountId }],
+                channels: ['email', 'in_app'],
+            });
+        },
+    };
+}
+//# sourceMappingURL=order-completion-reactor.js.map

package/dist/backend/services/order-completion-reactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"order-completion-reactor.js","sourceRoot":"","sources":["../../../src/backend/services/order-completion-reactor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAkBnE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAgC;IAG3E,OAAO;QACL,KAAK,CAAC,cAAc,CAAC,OAAgB;YACnC,wEAAwE;YACxE,2EAA2E;YAC3E,sEAAsE;YACtE,uEAAuE;YACvE,wEAAwE;YACxE,EAAE;YACF,2EAA2E;YAC3E,oEAAoE;YACpE,2EAA2E;YAC3E,0EAA0E;YAC1E,yDAAyD;YACzD,qEAAqE;YACrE,+BAA+B;YAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAI,OAA+B,CAAC,OAAO,CAAC;YACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,oBAAoB;gBAAE,OAAO;YAClD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO;YAC/C,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;YACzB,GAAG,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;YAC7B,GAAG,CAAC,gBAAgB,GAAG,KAAK,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACjB,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;gBACzC,cAAc,EAAE,GAAG,CAAC,EAAE;gBACtB,SAAS,EAAE,WAAW;gBACtB,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE;gBAC9B,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE;aAClD,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;gBACrC,cAAc,EAAE,GAAG,CAAC,EAAE;gBACtB,aAAa,EAAE,GAAG,CAAC,EAAE;gBACrB,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC;gBAC1D,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/services/quote-request-business-id-generator.d.ts

@@ -0,0 +1,46 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+/**
+ * Resolves the admin-configurable business-ID prefix/suffix for Quote
+ * Requests. In production these wrap
+ * `SettingsService.get('quote_requests.business_id.*')` (wired in
+ * composition); the generator treats any resolver failure as an empty string
+ * so RFQ creation never fails because a setting is missing. Unlike Orders,
+ * Quote Requests are not Sales-Channel scoped, so the resolver takes no
+ * arguments.
+ */
+export interface QuoteRequestBusinessIdSettingsResolver {
+    resolvePrefix(): Promise<string>;
+    resolveSuffix(): Promise<string>;
+}
+/** Draws the next value from the monotonic business-ID sequence. */
+export type DrawSequence = (em: EntityManager) => Promise<string>;
+/**
+ * Generates the customer-facing business Quote Request ID:
+ * `${prefix}${sequence}${suffix}`. The numeric core comes from the
+ * `quote_requests_business_id_seq` Postgres sequence (monotonic, never
+ * resets), so the ID is unique regardless of later prefix/suffix changes. The
+ * sequence draw is injected so the generator is unit-testable without a
+ * database. Mirrors `orders/services/business-id-generator.ts`.
+ */
+export declare class QuoteRequestBusinessIdGenerator {
+    private readonly drawSequence;
+    private readonly settings?;
+    constructor(drawSequence: DrawSequence, settings?: QuoteRequestBusinessIdSettingsResolver | undefined);
+    generate(em: EntityManager): Promise<string>;
+    /**
+     * Resolve a prefix/suffix, swallowing any resolver failure as `''`.
+     *
+     * The catch-all is deliberate and stays (feature 072, D-43): `drawSequence`
+     * runs before it, so a throw rolls the transaction back after `nextval` has
+     * been consumed — the sequence gaps and the RFQ is refused over a cosmetic
+     * prefix. What changes is that it is observable, and that a disabled module
+     * still refuses rather than being turned into a missing affix.
+     */
+    private resolve;
+}
+/**
+ * Production factory: draws `nextval('quote_requests_business_id_seq')` on the
+ * EntityManager's connection.
+ */
+export declare function createQuoteRequestBusinessIdGenerator(settings?: QuoteRequestBusinessIdSettingsResolver): QuoteRequestBusinessIdGenerator;
+//# sourceMappingURL=quote-request-business-id-generator.d.ts.map

package/dist/backend/services/quote-request-business-id-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote-request-business-id-generator.d.ts","sourceRoot":"","sources":["../../../src/backend/services/quote-request-business-id-generator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAS3D;;;;;;;;GAQG;AACH,MAAM,WAAW,sCAAsC;IACrD,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAClC;AAED,oEAAoE;AACpE,MAAM,MAAM,YAAY,GAAG,CAAC,EAAE,EAAE,aAAa,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAElE;;;;;;;GAOG;AACH,qBAAa,+BAA+B;IAExC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBADT,YAAY,EAAE,YAAY,EAC1B,QAAQ,CAAC,EAAE,sCAAsC,YAAA;IAG9D,QAAQ,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAOlD;;;;;;;;OAQG;YACW,OAAO;CAqBtB;AAED;;;GAGG;AACH,wBAAgB,qCAAqC,CACnD,QAAQ,CAAC,EAAE,sCAAsC,GAChD,+BAA+B,CAQjC"}

package/dist/backend/services/quote-request-business-id-generator.js

@@ -0,0 +1,69 @@
+import { ModuleDisabledError } from '@endora-commerce/platform/kernel';
+/**
+ * Conditions already reported. Per process and never reset, so a settings
+ * outage costs one line rather than one per quote request.
+ */
+const warnedConditions = new Set();
+/**
+ * Generates the customer-facing business Quote Request ID:
+ * `${prefix}${sequence}${suffix}`. The numeric core comes from the
+ * `quote_requests_business_id_seq` Postgres sequence (monotonic, never
+ * resets), so the ID is unique regardless of later prefix/suffix changes. The
+ * sequence draw is injected so the generator is unit-testable without a
+ * database. Mirrors `orders/services/business-id-generator.ts`.
+ */
+export class QuoteRequestBusinessIdGenerator {
+    drawSequence;
+    settings;
+    constructor(drawSequence, settings) {
+        this.drawSequence = drawSequence;
+        this.settings = settings;
+    }
+    async generate(em) {
+        const sequence = await this.drawSequence(em);
+        const prefix = await this.resolve((s) => s.resolvePrefix());
+        const suffix = await this.resolve((s) => s.resolveSuffix());
+        return `${prefix}${sequence}${suffix}`;
+    }
+    /**
+     * Resolve a prefix/suffix, swallowing any resolver failure as `''`.
+     *
+     * The catch-all is deliberate and stays (feature 072, D-43): `drawSequence`
+     * runs before it, so a throw rolls the transaction back after `nextval` has
+     * been consumed — the sequence gaps and the RFQ is refused over a cosmetic
+     * prefix. What changes is that it is observable, and that a disabled module
+     * still refuses rather than being turned into a missing affix.
+     */
+    async resolve(pick) {
+        if (!this.settings)
+            return '';
+        try {
+            return (await pick(this.settings)) ?? '';
+        }
+        catch (error) {
+            if (error instanceof ModuleDisabledError)
+                throw error;
+            const name = error.name ?? 'Error';
+            const condition = `rfq-business-id:${name}`;
+            if (!warnedConditions.has(condition)) {
+                warnedConditions.add(condition);
+                console.warn(`[quote_requests] business-ID affix settings unreadable (${name}) — quote ` +
+                    `requests are numbered without the configured prefix/suffix ` +
+                    `(logged once per process).`);
+            }
+            return '';
+        }
+    }
+}
+/**
+ * Production factory: draws `nextval('quote_requests_business_id_seq')` on the
+ * EntityManager's connection.
+ */
+export function createQuoteRequestBusinessIdGenerator(settings) {
+    const draw = async (em) => {
+        const rows = (await em.execute(`select nextval('quote_requests_business_id_seq') as n`));
+        return String(rows[0]?.n ?? '');
+    };
+    return new QuoteRequestBusinessIdGenerator(draw, settings);
+}
+//# sourceMappingURL=quote-request-business-id-generator.js.map

package/dist/backend/services/quote-request-business-id-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote-request-business-id-generator.js","sourceRoot":"","sources":["../../../src/backend/services/quote-request-business-id-generator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvE;;;GAGG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;AAmB3C;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IAEvB;IACA;IAFnB,YACmB,YAA0B,EAC1B,QAAiD;QADjD,iBAAY,GAAZ,YAAY,CAAc;QAC1B,aAAQ,GAAR,QAAQ,CAAyC;IACjE,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,EAAiB;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QAC5D,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,EAAE,CAAC;IACzC,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,OAAO,CACnB,IAAoE;QAEpE,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB;gBAAE,MAAM,KAAK,CAAC;YACtD,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,IAAI,OAAO,CAAC;YAC1D,MAAM,SAAS,GAAG,mBAAmB,IAAI,EAAE,CAAC;YAC5C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAChC,OAAO,CAAC,IAAI,CACV,2DAA2D,IAAI,YAAY;oBACzE,6DAA6D;oBAC7D,4BAA4B,CAC/B,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,qCAAqC,CACnD,QAAiD;IAEjD,MAAM,IAAI,GAAiB,KAAK,EAAE,EAAE,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B,uDAAuD,CACxD,CAAkC,CAAC;QACpC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO,IAAI,+BAA+B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC"}

package/dist/backend/services/quote-request-read-port.d.ts

@@ -0,0 +1,36 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { QuoteRequestLineRecord, QuoteRequestReadPort, QuoteRequestRecord } from '@endora-commerce/contracts';
+import { QuoteRequest } from '../entities/quote-request.entity.js';
+/**
+ * The row-level read model `quote_requests` publishes (feature 075, Phase P).
+ *
+ * Two consumers, two questions. `carts` resolves the quote a cart was
+ * converted from; `organizations` counts the open quotes per organisation on
+ * the sales-rep screen, where the three open statuses had been written out as
+ * a literal array in a module that does not own the lifecycle.
+ *
+ * The full customer-facing projection stays `RfqService` — this is the row,
+ * for the callers that only need to count or cross-reference one.
+ */
+export declare class QuoteRequestReadService implements QuoteRequestReadPort {
+    private readonly emFactory;
+    constructor(emFactory: () => EntityManager);
+    findById(id: string): Promise<QuoteRequestRecord | null>;
+    /**
+     * The business id is unique by construction (`QR-<uuid>` unless a caller
+     * passes one) and the column carries a unique index, so `findOne` is the
+     * whole of the lookup.
+     */
+    findByBusinessId(businessId: string): Promise<QuoteRequestRecord | null>;
+    listOpenForOrganizations(organizationIds: readonly string[]): Promise<QuoteRequestRecord[]>;
+    /**
+     * Added in feature 075's `carts` cut. The quote-to-cart conversion read
+     * `QuoteRequestItem` itself; the money columns are deliberately not on the
+     * record, because that conversion re-resolves every price against the
+     * buyer's current list (FR-017) and a caller that cannot see the quoted
+     * price cannot carry it over by accident.
+     */
+    listItems(quoteRequestId: string): Promise<QuoteRequestLineRecord[]>;
+}
+export declare function toQuoteRequestRecord(quote: QuoteRequest): QuoteRequestRecord;
+//# sourceMappingURL=quote-request-read-port.d.ts.map

package/dist/backend/services/quote-request-read-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote-request-read-port.d.ts","sourceRoot":"","sources":["../../../src/backend/services/quote-request-read-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EACV,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAGnE;;;;;;;;;;GAUG;AACH,qBAAa,uBAAwB,YAAW,oBAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM,aAAa;IAErD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAK9D;;;;OAIG;IACG,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAKxE,wBAAwB,CAC5B,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAYhC;;;;;;OAMG;IACG,SAAS,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;CAoB3E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,GAAG,kBAAkB,CA0B5E"}