@endora-commerce/mod-returns 0.100.0

package/dist/backend/routes.customer.js

@@ -0,0 +1,56 @@
+import { addReturnAttachmentRequestSchema, createReturnCaseRequestSchema, customerAddCommentRequestSchema, selectReturnDeliveryMethodRequestSchema, } from '@endora-commerce/contracts';
+export async function registerReturnsCustomerRoutes(app, deps) {
+    const { caseService, commentService, deliveryMethodService, reasonService, attachmentService, requireCustomer, resolveCustomerAccountId, } = deps;
+    app.get('/api/v1/returns/reasons', { preHandler: requireCustomer }, async (request) => {
+        const data = await reasonService.listActive(request.query.kind);
+        return { data };
+    });
+    app.get('/api/v1/orders/:orderId/returnable', { preHandler: requireCustomer }, async (request) => {
+        const customerAccountId = resolveCustomerAccountId(request);
+        const data = await caseService.getReturnable(request.params.orderId, customerAccountId);
+        return { data };
+    });
+    app.get('/api/v1/returns', { preHandler: requireCustomer }, async (request) => {
+        const customerAccountId = resolveCustomerAccountId(request);
+        const data = await caseService.listForCustomer(customerAccountId);
+        return { data };
+    });
+    app.get('/api/v1/returns/:id', { preHandler: requireCustomer }, async (request) => {
+        const customerAccountId = resolveCustomerAccountId(request);
+        const data = await caseService.getForCustomer(request.params.id, customerAccountId);
+        return { data };
+    });
+    app.post('/api/v1/returns', { preHandler: requireCustomer, schema: { body: createReturnCaseRequestSchema } }, async (request, reply) => {
+        const customerAccountId = resolveCustomerAccountId(request);
+        const body = createReturnCaseRequestSchema.parse(request.body);
+        const data = await caseService.createCase(body, customerAccountId);
+        reply.status(201);
+        return { data };
+    });
+    app.post('/api/v1/returns/:id/comments', { preHandler: requireCustomer, schema: { body: customerAddCommentRequestSchema } }, async (request, reply) => {
+        const customerAccountId = resolveCustomerAccountId(request);
+        const body = customerAddCommentRequestSchema.parse(request.body);
+        const data = await commentService.addByCustomer(request.params.id, customerAccountId, body);
+        reply.status(201);
+        return { data };
+    });
+    app.post('/api/v1/returns/:id/select-delivery-method', { preHandler: requireCustomer, schema: { body: selectReturnDeliveryMethodRequestSchema } }, async (request) => {
+        const customerAccountId = resolveCustomerAccountId(request);
+        const body = selectReturnDeliveryMethodRequestSchema.parse(request.body);
+        const data = await deliveryMethodService.selectForCase(request.params.id, customerAccountId, body.returnDeliveryMethodId);
+        return { data };
+    });
+    app.post('/api/v1/returns/:id/cancel', { preHandler: requireCustomer }, async (request) => {
+        const customerAccountId = resolveCustomerAccountId(request);
+        const data = await caseService.cancelByCustomer(request.params.id, customerAccountId);
+        return { data };
+    });
+    app.post('/api/v1/returns/:id/attachments', { preHandler: requireCustomer, schema: { body: addReturnAttachmentRequestSchema } }, async (request, reply) => {
+        const customerAccountId = resolveCustomerAccountId(request);
+        const body = addReturnAttachmentRequestSchema.parse(request.body);
+        const data = await attachmentService.addToCase(request.params.id, customerAccountId, body);
+        reply.status(201);
+        return { data };
+    });
+}
+//# sourceMappingURL=routes.customer.js.map

package/dist/backend/routes.customer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.customer.js","sourceRoot":"","sources":["../../src/backend/routes.customer.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gCAAgC,EAChC,6BAA6B,EAC7B,+BAA+B,EAC/B,uCAAuC,GACxC,MAAM,4BAA4B,CAAC;AAsBpC,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,GAAoB,EACpB,IAA+B;IAE/B,MAAM,EACJ,WAAW,EACX,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,wBAAwB,GACzB,GAAG,IAAI,CAAC;IAET,GAAG,CAAC,GAAG,CACL,yBAAyB,EACzB,EAAE,UAAU,EAAE,eAAe,EAAE,EAC/B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,oCAAoC,EACpC,EAAE,UAAU,EAAE,eAAe,EAAE,EAC/B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACxF,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC5E,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;QAClE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,qBAAqB,EACrB,EAAE,UAAU,EAAE,eAAe,EAAE,EAC/B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACpF,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,iBAAiB,EACjB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,EAAE,EAChF,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,8BAA8B,EAC9B,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAClF,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,+BAA+B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC5F,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,4CAA4C,EAC5C,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,uCAAuC,EAAE,EAAE,EAC1F,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,uCAAuC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,aAAa,CACpD,OAAO,CAAC,MAAM,CAAC,EAAE,EACjB,iBAAiB,EACjB,IAAI,CAAC,sBAAsB,CAC5B,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,4BAA4B,EAC5B,EAAE,UAAU,EAAE,eAAe,EAAE,EAC/B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACtF,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,iCAAiC,EACjC,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE,EAAE,EACnF,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,gCAAgC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC3F,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/services/notification-context.d.ts

@@ -0,0 +1,47 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { CustomerAccountReadPort } from '@endora-commerce/contracts';
+import type { CustomerEmailResolver } from './return-email-notifier.js';
+/**
+ * The two facts a return notification needs from outside this module
+ * (`specs/110-instance-repository/` T118c).
+ *
+ * Both were `returnsBridge` members — closures a composition root wrote, once in
+ * `backend/src/composition.ts` and once in `backend/test/helpers/test-server.ts`,
+ * with the same body in each. They are functions of what they read rather than of
+ * a `ModuleContext`, so `backend/index.ts` supplies the real inputs and this file
+ * is testable over a stub with nothing composed.
+ */
+/**
+ * Where the authorize / reject e-mail goes.
+ *
+ * `customer_accounts` publishes the record; this maps it to the one field the
+ * notifier needs and answers `null` when no account resolves, which the notifier
+ * reports as `no_recipient` rather than treating as sent.
+ *
+ * **No `catch`, deliberately.** `findById` on a `lazyPort` proxy throws
+ * `ModuleDisabledError` when its owner is absent, and reading that as "this buyer
+ * has no e-mail address" is the fail-open composition checklist item 7 refuses.
+ * `customer_accounts` declares `nonDeactivatable`, so it cannot happen today; the
+ * absence of the `catch` is what keeps it fail-closed if that ever changes.
+ */
+export declare function createCustomerEmailResolver(accounts: Pick<CustomerAccountReadPort, 'findById'>): CustomerEmailResolver;
+/**
+ * The language a channel's e-mail is rendered in.
+ *
+ * A read of the platform's own `SalesChannel` entity through this module's
+ * `EntityManager`, which is what both composition roots did and what `orders`
+ * does at the identical site — resolving the language for a transactional e-mail
+ * (`order-service.ts`, `sendOrderConfirmation`).
+ *
+ * **Not `salesChannelResolutionPort`**, though the platform contributes it and it
+ * carries `defaultLanguage` on its `CachedChannel`. That port is the *cache*, and
+ * swapping a direct read for a cached one changes what this answers for a channel
+ * written outside the invalidation path — a design decision about channel reads,
+ * not a drain's, and T118c moves a value rather than redesigning it. Constitution
+ * XII is untouched either way: this resolves no request channel, it reads one
+ * attribute of a channel the return case already names.
+ *
+ * `en-US` for a channel that is not there is the fallback both roots carried.
+ */
+export declare function createChannelLanguageResolver(emFactory: () => EntityManager): (salesChannelId: string) => Promise<string>;
+//# sourceMappingURL=notification-context.d.ts.map

package/dist/backend/services/notification-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-context.d.ts","sourceRoot":"","sources":["../../../src/backend/services/notification-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAE1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAExE;;;;;;;;;GASG;AAEH;;;;;;;;;;;;GAYG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,IAAI,CAAC,uBAAuB,EAAE,UAAU,CAAC,GAClD,qBAAqB,CAEvB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,aAAa,GAC7B,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAG7C"}

package/dist/backend/services/notification-context.js

@@ -0,0 +1,49 @@
+import { SalesChannel } from '@endora-commerce/platform/kernel';
+/**
+ * The two facts a return notification needs from outside this module
+ * (`specs/110-instance-repository/` T118c).
+ *
+ * Both were `returnsBridge` members — closures a composition root wrote, once in
+ * `backend/src/composition.ts` and once in `backend/test/helpers/test-server.ts`,
+ * with the same body in each. They are functions of what they read rather than of
+ * a `ModuleContext`, so `backend/index.ts` supplies the real inputs and this file
+ * is testable over a stub with nothing composed.
+ */
+/**
+ * Where the authorize / reject e-mail goes.
+ *
+ * `customer_accounts` publishes the record; this maps it to the one field the
+ * notifier needs and answers `null` when no account resolves, which the notifier
+ * reports as `no_recipient` rather than treating as sent.
+ *
+ * **No `catch`, deliberately.** `findById` on a `lazyPort` proxy throws
+ * `ModuleDisabledError` when its owner is absent, and reading that as "this buyer
+ * has no e-mail address" is the fail-open composition checklist item 7 refuses.
+ * `customer_accounts` declares `nonDeactivatable`, so it cannot happen today; the
+ * absence of the `catch` is what keeps it fail-closed if that ever changes.
+ */
+export function createCustomerEmailResolver(accounts) {
+    return async (customerAccountId) => (await accounts.findById(customerAccountId))?.email ?? null;
+}
+/**
+ * The language a channel's e-mail is rendered in.
+ *
+ * A read of the platform's own `SalesChannel` entity through this module's
+ * `EntityManager`, which is what both composition roots did and what `orders`
+ * does at the identical site — resolving the language for a transactional e-mail
+ * (`order-service.ts`, `sendOrderConfirmation`).
+ *
+ * **Not `salesChannelResolutionPort`**, though the platform contributes it and it
+ * carries `defaultLanguage` on its `CachedChannel`. That port is the *cache*, and
+ * swapping a direct read for a cached one changes what this answers for a channel
+ * written outside the invalidation path — a design decision about channel reads,
+ * not a drain's, and T118c moves a value rather than redesigning it. Constitution
+ * XII is untouched either way: this resolves no request channel, it reads one
+ * attribute of a channel the return case already names.
+ *
+ * `en-US` for a channel that is not there is the fallback both roots carried.
+ */
+export function createChannelLanguageResolver(emFactory) {
+    return async (salesChannelId) => (await emFactory().findOne(SalesChannel, { id: salesChannelId }))?.defaultLanguage ?? 'en-US';
+}
+//# sourceMappingURL=notification-context.js.map

package/dist/backend/services/notification-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-context.js","sourceRoot":"","sources":["../../../src/backend/services/notification-context.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAGhE;;;;;;;;;GASG;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAmD;IAEnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;AAClG,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAA8B;IAE9B,OAAO,KAAK,EAAE,cAAc,EAAE,EAAE,CAC9B,CAAC,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,eAAe,IAAI,OAAO,CAAC;AAClG,CAAC"}

package/dist/backend/services/return-attachment-service.d.ts

@@ -0,0 +1,20 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { ReturnAttachmentDto } from '@endora-commerce/contracts';
+/**
+ * ReturnAttachmentService — feature 046 (US1, T027).
+ *
+ * Links uploaded assets (e.g. defect photos) to a case or a specific case line.
+ * The binary upload itself goes through the assets library, which returns an
+ * `assetId`; this service persists the `return_case_attachments` link and
+ * enforces case ownership.
+ */
+export declare class ReturnAttachmentService {
+    private readonly emFactory;
+    constructor(emFactory: () => EntityManager);
+    addToCase(caseId: string, customerAccountId: string, input: {
+        assetId: string;
+        returnCaseItemId?: string | undefined;
+    }): Promise<ReturnAttachmentDto>;
+    listForCase(caseId: string): Promise<ReturnAttachmentDto[]>;
+}
+//# sourceMappingURL=return-attachment-service.d.ts.map

package/dist/backend/services/return-attachment-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"return-attachment-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/return-attachment-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAKtE;;;;;;;GAOG;AACH,qBAAa,uBAAuB;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM,aAAa;IAErD,SAAS,CACb,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,MAAM,EACzB,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAChE,OAAO,CAAC,mBAAmB,CAAC;IAezB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;CASlE"}

package/dist/backend/services/return-attachment-service.js

@@ -0,0 +1,48 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { ReturnCase } from '../entities/return-case.entity.js';
+import { ReturnCaseAttachment } from '../entities/return-case-attachment.entity.js';
+/**
+ * ReturnAttachmentService — feature 046 (US1, T027).
+ *
+ * Links uploaded assets (e.g. defect photos) to a case or a specific case line.
+ * The binary upload itself goes through the assets library, which returns an
+ * `assetId`; this service persists the `return_case_attachments` link and
+ * enforces case ownership.
+ */
+export class ReturnAttachmentService {
+    emFactory;
+    constructor(emFactory) {
+        this.emFactory = emFactory;
+    }
+    async addToCase(caseId, customerAccountId, input) {
+        // command-coverage-ignore: append-only evidence attachment on a case, not an
+        // audited domain-state mutation (no before-state, no undo value).
+        const em = this.emFactory();
+        const rc = await em.findOne(ReturnCase, { id: caseId, customerAccountId });
+        if (!rc)
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Return case not found.');
+        const attachment = em.create(ReturnCaseAttachment, {
+            returnCaseId: caseId,
+            returnCaseItemId: input.returnCaseItemId ?? null,
+            assetId: input.assetId,
+        });
+        await em.persistAndFlush(attachment);
+        return toDto(attachment);
+    }
+    async listForCase(caseId) {
+        const em = this.emFactory();
+        const rows = await em.find(ReturnCaseAttachment, { returnCaseId: caseId }, { orderBy: { createdAt: 'asc' } });
+        return rows.map(toDto);
+    }
+}
+function toDto(a) {
+    return {
+        id: a.id,
+        returnCaseId: a.returnCaseId,
+        returnCaseItemId: a.returnCaseItemId ?? null,
+        assetId: a.assetId,
+        createdAt: a.createdAt.toISOString(),
+    };
+}
+//# sourceMappingURL=return-attachment-service.js.map

package/dist/backend/services/return-attachment-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"return-attachment-service.js","sourceRoot":"","sources":["../../../src/backend/services/return-attachment-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AAEpF;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IACL;IAA7B,YAA6B,SAA8B;QAA9B,cAAS,GAAT,SAAS,CAAqB;IAAG,CAAC;IAE/D,KAAK,CAAC,SAAS,CACb,MAAc,EACd,iBAAyB,EACzB,KAAiE;QAEjE,6EAA6E;QAC7E,kEAAkE;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;QACnF,MAAM,UAAU,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE;YACjD,YAAY,EAAE,MAAM;YACpB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI;YAChD,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACrC,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CACxB,oBAAoB,EACpB,EAAE,YAAY,EAAE,MAAM,EAAE,EACxB,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAClC,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;CACF;AAED,SAAS,KAAK,CAAC,CAAuB;IACpC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,IAAI;QAC5C,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;KACrC,CAAC;AACJ,CAAC"}

package/dist/backend/services/return-authorization-service.d.ts

@@ -0,0 +1,53 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { ReturnCase } from '../entities/return-case.entity.js';
+import type { ReturnTransitionService } from './return-transition-service.js';
+import type { RmaNumberGenerator } from './rma-number-generator.js';
+import type { ReturnEmailResult } from './return-email-notifier.js';
+/**
+ * Best-effort customer notifications on authorize/reject (FR-017).
+ *
+ * Each answers whether the message went out and, when it did not, why (issue
+ * #78). `Promise<void>` said nothing, and this service is the caller that could
+ * not tell a delivered notification from a deactivated template.
+ */
+export interface ReturnNotifier {
+    authorized(rc: ReturnCase): Promise<ReturnEmailResult>;
+    rejected(rc: ReturnCase): Promise<ReturnEmailResult>;
+}
+export interface ReturnAuthorizationServiceDeps {
+    emFactory: () => EntityManager;
+    transitions: ReturnTransitionService;
+    rmaGenerator: RmaNumberGenerator;
+    notifier?: ReturnNotifier;
+}
+/**
+ * ReturnAuthorizationService — feature 046 (US2).
+ *
+ * Verification outcome handlers: `authorize` assigns a unique RMA number and
+ * advances the case to the authorized status; `reject` records a mandatory
+ * reason and moves the case to the rejected terminal. Both notify the customer
+ * best-effort.
+ */
+export declare class ReturnAuthorizationService {
+    private readonly deps;
+    constructor(deps: ReturnAuthorizationServiceDeps);
+    authorize(id: string, adminUserId: string): Promise<{
+        rmaNumber: string;
+        statusCode: string;
+    }>;
+    reject(id: string, adminUserId: string, reason: string): Promise<ReturnCase>;
+    /**
+     * The outer net for a notification that must not undo the transition it
+     * announces.
+     *
+     * The notifier itself now names every non-sent path in its result and writes
+     * it to the log (issue #78), so what reaches here is the residue: a throw the
+     * notifier deliberately let travel. That includes a `ModuleDisabledError`,
+     * which this `catch` still absorbs — re-throwing it would answer 503 to an
+     * authorize that has already committed, and the honest repair is an outbox
+     * the transition hands the message to, not a rethrow here. What it no longer
+     * does is absorb it in silence.
+     */
+    private notifySafely;
+}
+//# sourceMappingURL=return-authorization-service.d.ts.map

package/dist/backend/services/return-authorization-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"return-authorization-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/return-authorization-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAMpE;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvD,QAAQ,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,WAAW,EAAE,uBAAuB,CAAC;IACrC,YAAY,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,qBAAa,0BAA0B;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,8BAA8B;IAE3D,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAkB9F,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAsBlF;;;;;;;;;;;OAWG;YACW,YAAY;CAiB3B"}

package/dist/backend/services/return-authorization-service.js

@@ -0,0 +1,72 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { RETURN_STATUS_AUTHORIZED, RETURN_STATUS_REJECTED, } from '../domain/return-status-graph.js';
+/**
+ * ReturnAuthorizationService — feature 046 (US2).
+ *
+ * Verification outcome handlers: `authorize` assigns a unique RMA number and
+ * advances the case to the authorized status; `reject` records a mandatory
+ * reason and moves the case to the rejected terminal. Both notify the customer
+ * best-effort.
+ */
+export class ReturnAuthorizationService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async authorize(id, adminUserId) {
+        const rc = await this.deps.transitions.apply(id, RETURN_STATUS_AUTHORIZED, { kind: 'admin', adminUserId }, {
+            mutate: async (target, em) => {
+                if (!target.rmaNumber) {
+                    target.rmaNumber = await this.deps.rmaGenerator.generate(em, target.salesChannelId);
+                }
+                target.authorizedAt = new Date();
+            },
+        });
+        await this.notifySafely(rc, 'return_authorized', () => this.deps.notifier?.authorized(rc));
+        return { rmaNumber: rc.rmaNumber, statusCode: rc.statusCode };
+    }
+    async reject(id, adminUserId, reason) {
+        const trimmed = reason.trim();
+        if (!trimmed) {
+            throw new HttpError(422, ERROR_CODES.VALIDATION_FAILED, 'A rejection reason is required.', {
+                code: 'reason_required',
+            });
+        }
+        const rc = await this.deps.transitions.apply(id, RETURN_STATUS_REJECTED, { kind: 'admin', adminUserId }, {
+            reason: trimmed,
+            mutate: (target) => {
+                target.rejectionReason = trimmed;
+            },
+        });
+        await this.notifySafely(rc, 'return_rejected', () => this.deps.notifier?.rejected(rc));
+        return rc;
+    }
+    /**
+     * The outer net for a notification that must not undo the transition it
+     * announces.
+     *
+     * The notifier itself now names every non-sent path in its result and writes
+     * it to the log (issue #78), so what reaches here is the residue: a throw the
+     * notifier deliberately let travel. That includes a `ModuleDisabledError`,
+     * which this `catch` still absorbs — re-throwing it would answer 503 to an
+     * authorize that has already committed, and the honest repair is an outbox
+     * the transition hands the message to, not a rethrow here. What it no longer
+     * does is absorb it in silence.
+     */
+    async notifySafely(rc, kind, fn) {
+        try {
+            await fn();
+        }
+        catch (error) {
+            // Notifications are best-effort; never block the workflow transition.
+            console.warn('[returns] the return e-mail was not sent', {
+                returnCaseId: rc.id,
+                kind,
+                reason: 'failed',
+                error: error instanceof Error ? error.message : error,
+            });
+        }
+    }
+}
+//# sourceMappingURL=return-authorization-service.js.map

package/dist/backend/services/return-authorization-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"return-authorization-service.js","sourceRoot":"","sources":["../../../src/backend/services/return-authorization-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAK3D,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,kCAAkC,CAAC;AAqB1C;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IACR;IAA7B,YAA6B,IAAoC;QAApC,SAAI,GAAJ,IAAI,CAAgC;IAAG,CAAC;IAErE,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,WAAmB;QAC7C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAC1C,EAAE,EACF,wBAAwB,EACxB,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,EAC9B;YACE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;gBAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACtB,MAAM,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;gBACtF,CAAC;gBACD,MAAM,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;YACnC,CAAC;SACF,CACF,CAAC;QACF,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3F,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,SAAU,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,WAAmB,EAAE,MAAc;QAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,iCAAiC,EAAE;gBACzF,IAAI,EAAE,iBAAiB;aACxB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAC1C,EAAE,EACF,sBAAsB,EACtB,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,EAC9B;YACE,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;gBACjB,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC;YACnC,CAAC;SACF,CACF,CAAC;QACF,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACvF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,YAAY,CACxB,EAAc,EACd,IAAY,EACZ,EAAgD;QAEhD,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sEAAsE;YACtE,OAAO,CAAC,IAAI,CAAC,0CAA0C,EAAE;gBACvD,YAAY,EAAE,EAAE,CAAC,EAAE;gBACnB,IAAI;gBACJ,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;aACtD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/backend/services/return-case-service.d.ts

@@ -0,0 +1,44 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { CreateReturnCaseRequest, OrderReturnContextPort, ReturnableResponse, ReturnCaseDetail, ReturnCaseSummary } from '@endora-commerce/contracts';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import type { ReturnStatusGraphService } from './return-status-graph-service.js';
+import type { ReturnTransitionService } from './return-transition-service.js';
+export interface ReturnCaseServiceDeps {
+    emFactory: () => EntityManager;
+    graphService: ReturnStatusGraphService;
+    transitions: ReturnTransitionService;
+    orderContext: OrderReturnContextPort;
+    /** Free-return window in days for a sales channel (0 = no free-return option). */
+    resolveFreeReturnDays: (salesChannelId: string) => Promise<number>;
+    /** Injected for deterministic tests; defaults to `new Date()`. */
+    now?: () => Date;
+    /** Feature 054 — audits case creation co-transactionally when provided. */
+    auditLog?: AuditPort;
+}
+/**
+ * ReturnCaseService — feature 046 (US1).
+ *
+ * Eligibility evaluation, remaining-returnable computation, and case creation in
+ * the initial workflow status. Reads order facts only through the
+ * `OrderReturnContextPort` (Principle I).
+ */
+export declare class ReturnCaseService {
+    private readonly deps;
+    constructor(deps: ReturnCaseServiceDeps);
+    private now;
+    /** Lines a customer may still return for an order, with the eligibility verdict. */
+    getReturnable(orderId: string, customerAccountId: string): Promise<ReturnableResponse>;
+    /** Open a return/complaint case (FR-001/002/003/005). */
+    createCase(input: CreateReturnCaseRequest, customerAccountId: string): Promise<ReturnCaseDetail>;
+    listForCustomer(customerAccountId: string): Promise<ReturnCaseSummary[]>;
+    getForCustomer(id: string, customerAccountId: string): Promise<ReturnCaseDetail>;
+    /** Customer withdraws their own case (if the workflow permits the transition). */
+    cancelByCustomer(id: string, customerAccountId: string): Promise<ReturnCaseDetail>;
+    /** Detail for the admin surface (includes internal comments). */
+    getByIdForAdmin(id: string): Promise<ReturnCaseDetail>;
+    private consumedQuantities;
+    private isWithinFreeWindow;
+    private toSummary;
+    private mapDetail;
+}
+//# sourceMappingURL=return-case-service.d.ts.map

package/dist/backend/services/return-case-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"return-case-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/return-case-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EACV,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAUlE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAK9E,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,YAAY,EAAE,wBAAwB,CAAC;IACvC,WAAW,EAAE,uBAAuB,CAAC;IACrC,YAAY,EAAE,sBAAsB,CAAC;IACrC,kFAAkF;IAClF,qBAAqB,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB;AAED;;;;;;GAMG;AACH,qBAAa,iBAAiB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,qBAAqB;IAExD,OAAO,CAAC,GAAG;IAIX,oFAAoF;IAC9E,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA0B5F,yDAAyD;IACnD,UAAU,CACd,KAAK,EAAE,uBAAuB,EAC9B,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,gBAAgB,CAAC;IAmHtB,eAAe,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAWxE,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAOtF,kFAAkF;IAC5E,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAQxF,iEAAiE;IAC3D,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAS9C,kBAAkB;YAalB,kBAAkB;IAQhC,OAAO,CAAC,SAAS;YAcH,SAAS;CAwDxB"}