@endora-commerce/mod-search 0.100.0

package/dist/backend/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/backend/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EACV,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACtB,gBAAgB,EAChB,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EACL,oBAAoB,EAIrB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAQzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAe5E;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B;;;;OAIG;IACH,oBAAoB,EAAE,wBAAwB,CAAC;IAC/C;;;;;OAKG;IACH,eAAe,EAAE,sBAAsB,CAAC;IACxC;;;;;OAKG;IACH,iBAAiB,EAAE,uBAAuB,CAAC;IAC3C;;;;OAIG;IACH,sBAAsB,EAAE,0BAA0B,CAAC;IACnD;;;;;;;;;;OAUG;IACH,eAAe,EAAE,gBAAgB,CAAC;IAClC;;;;OAIG;IACH,WAAW,EAAE,qBAAqB,CAAC;IACnC,6EAA6E;IAC7E,oBAAoB,EAAE,iBAAiB,CAAC;IACxC,yDAAyD;IACzD,YAAY,EAAE,mBAAmB,CAAC;IAClC,wBAAwB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,yBAAyB,CAAC;IAC7E;;;;OAIG;IACH,uBAAuB,EAAE,yBAAyB,CAAC;IACnD;;;;OAIG;IACH,aAAa,EAAE,gBAAgB,CAAC;IAChC;;;;;OAKG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC;;;;;OAKG;IACH,sBAAsB,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,qBAAqB,CAAC;IAClC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,cAAc,EAAE,oBAAoB,CAAC;IACrC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,aAAa,EAAE,mBAAmB,CAAC;IACnC,cAAc,EAAE,oBAAoB,CAAC;IACrC;;;;OAIG;IACH,6BAA6B,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAID,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,kBAAkB,CAyQ7E"}

package/dist/backend/plugin.js

@@ -0,0 +1,250 @@
+import { z } from 'zod';
+import { SearchIndexer } from './services/search-indexer.js';
+import { SearchEventSubscriber } from './services/search-event-subscriber.js';
+import { SearchQueryService } from './services/search-query.service.js';
+import { SearchSuggestService, DEFAULT_SUGGESTION_COUNT, DEFAULT_MINIMUM_QUERY_LENGTH, } from './services/search-suggest.service.js';
+import { LlmToggleService } from './services/llm-toggle.service.js';
+import { SearchReindexWorker } from './services/search-reindex-worker.js';
+import { SearchPhraseRecorder } from './services/search-phrase-recorder.service.js';
+import { registerSearchPublicRoutes, } from './routes.public.js';
+import { registerSearchAdminRoutes } from './routes.admin.js';
+import { SettingNotRegistered, SettingOutOfScopeForChannel } from '@endora-commerce/platform/kernel';
+import { effectiveState } from '@endora-commerce/platform/kernel';
+import { enterSystemScope } from '@endora-commerce/platform/kernel';
+import { DEFAULT_INDEX_TASK_TIMEOUT_SECONDS, DEFAULT_REINDEX_INTERVAL_MINUTES, SEARCH_SETTING_CODES, } from '../manifest.js';
+/**
+ * Conditions this module has already reported (D-43's warn-once). Module scope
+ * and never reset: an out-of-scope setting is a deployment fact, and the reindex
+ * timer would otherwise log it on every tick.
+ */
+const warnedSearchConditions = new Set();
+function warnOnceForSearch(condition, message) {
+    if (warnedSearchConditions.has(condition))
+        return;
+    warnedSearchConditions.add(condition);
+    console.warn(message);
+}
+const numberSchema = z.number();
+export function searchModule(options) {
+    /**
+     * The indexer's Meilisearch task wait, in milliseconds — this module's own
+     * setting, read inside the module (composition checklist item 6) and not a
+     * knob a composition root resolves on its behalf. It sits here rather than
+     * inside `SearchIndexer` for the same reason
+     * `resolveReindexIntervalMinutes` does: this is the one place that already
+     * holds the module's settings-read idiom, including which two failures may
+     * be absorbed.
+     *
+     * Re-read per wait rather than captured at boot, so raising it during an
+     * incident takes effect on the next task instead of on the next restart.
+     *
+     * Absorbs only what D-43 allows — a setting the reconciler has not written
+     * yet, and a channel-scoped override of a platform-wide read. A shape
+     * mismatch or a driver error propagates, and so does `ModuleDisabledError`:
+     * neither branch below is a status test.
+     */
+    const resolveIndexTaskTimeoutMs = async () => {
+        try {
+            const seconds = await options.settingsService.get(SEARCH_SETTING_CODES.INDEX_TASK_TIMEOUT_SECONDS, null, z.number().int().positive());
+            return seconds * 1000;
+        }
+        catch (error) {
+            if (error instanceof SettingNotRegistered) {
+                return DEFAULT_INDEX_TASK_TIMEOUT_SECONDS * 1000;
+            }
+            if (error instanceof SettingOutOfScopeForChannel) {
+                warnOnceForSearch(`out-of-scope:${SEARCH_SETTING_CODES.INDEX_TASK_TIMEOUT_SECONDS}`, `[search] setting "${SEARCH_SETTING_CODES.INDEX_TASK_TIMEOUT_SECONDS}" is scoped ` +
+                    `to specific sales channels, so it has no platform-wide value — falling back ` +
+                    `to the manifest default (logged once per process).`);
+                return DEFAULT_INDEX_TASK_TIMEOUT_SECONDS * 1000;
+            }
+            throw error;
+        }
+    };
+    const indexer = new SearchIndexer({
+        attributeRead: options.catalogAttributeRead,
+        products: options.catalogProducts,
+        categories: options.catalogCategories,
+        channelMembership: options.salesChannelMembership,
+        resolveTaskTimeoutMs: resolveIndexTaskTimeoutMs,
+    });
+    // Handlers only: `backend.ts` registers them through `ctx.subscribe`, which
+    // is what makes this module's effective state decide whether they run.
+    const subscriber = new SearchEventSubscriber({
+        emFactory: options.emFactory,
+        indexer,
+        ...(options.settingsService !== undefined
+            ? { settingsService: options.settingsService }
+            : {}),
+        ...(options.credentials !== undefined ? { credentials: options.credentials } : {}),
+    });
+    const searchQueryService = new SearchQueryService(options.catalogProducts, options.catalogAttributeRead, {}, options.listingPrices, options.organizations);
+    // Settings-aware suggest config, with fallback to manifest defaults
+    // when the resolver fails for any reason (e.g. Redis hiccup,
+    // `SettingNotRegistered`). The popup must never 500 because of a
+    // Settings glitch.
+    const resolveSuggestConfig = async (ctx) => {
+        const fallback = {
+            defaultLimit: DEFAULT_SUGGESTION_COUNT,
+            minimumQueryLength: DEFAULT_MINIMUM_QUERY_LENGTH,
+        };
+        try {
+            // Feature 053 / FR-002: per-channel settings key off the channel
+            // resolved once upstream — no re-resolution here.
+            const channelId = ctx.resolvedChannel.id;
+            const [defaultLimit, minimumQueryLength] = await Promise.all([
+                options.settingsService.get(SEARCH_SETTING_CODES.POPUP_SUGGESTION_COUNT, channelId, numberSchema),
+                options.settingsService.get(SEARCH_SETTING_CODES.POPUP_MINIMUM_QUERY_LENGTH, channelId, numberSchema),
+            ]);
+            return { defaultLimit, minimumQueryLength };
+        }
+        catch {
+            return fallback;
+        }
+    };
+    const suggestService = new SearchSuggestService(searchQueryService, resolveSuggestConfig);
+    const llmToggleService = new LlmToggleService(options.emFactory, options.settingsService, options.settingsAdminService, options.credentials);
+    /**
+     * The sweep's cadence is this module's own setting, so it reads it itself
+     * rather than taking a resolver from a composition root — which is where the
+     * identical `try`/`catch`-to-the-manifest-default lived before T123.
+     *
+     * Read **platform-wide** (feature 072, D-41). A background reindex is one
+     * timer in one process covering every channel's index, so there is no channel
+     * whose value it could sensibly take; it used to pass the literal `'default'`,
+     * a channel **code** against a `uuid` column, so PostgreSQL rejected every
+     * read, the `catch` answered with the constant, and an operator changing the
+     * cadence changed nothing.
+     *
+     * Absorbs only what D-43 allows; a shape mismatch or a driver error
+     * propagates to the caller, which logs it and keeps polling.
+     */
+    const resolveReindexIntervalMinutes = async () => {
+        try {
+            return await options.settingsService.get(SEARCH_SETTING_CODES.REINDEX_INTERVAL_MINUTES, null, z.number().int().nonnegative());
+        }
+        catch (error) {
+            if (error instanceof SettingNotRegistered)
+                return DEFAULT_REINDEX_INTERVAL_MINUTES;
+            if (error instanceof SettingOutOfScopeForChannel) {
+                warnOnceForSearch(`out-of-scope:${SEARCH_SETTING_CODES.REINDEX_INTERVAL_MINUTES}`, `[search] setting "${SEARCH_SETTING_CODES.REINDEX_INTERVAL_MINUTES}" is scoped ` +
+                    `to specific sales channels, so it has no platform-wide value — falling back ` +
+                    `to the manifest default (logged once per process).`);
+                return DEFAULT_REINDEX_INTERVAL_MINUTES;
+            }
+            throw error;
+        }
+    };
+    const phraseRecorder = new SearchPhraseRecorder(options.emFactory, options.settingsService);
+    const reindexWorker = new SearchReindexWorker({
+        emFactory: options.emFactory,
+        indexer,
+    });
+    return {
+        handle: {
+            indexer,
+            subscriber,
+            searchQueryService,
+            suggestService,
+            reindexWorker,
+            phraseRecorder,
+            llmToggleService,
+            resolveReindexIntervalMinutes,
+        },
+        plugin: async (app) => {
+            // US1 — typeahead popup feed.
+            // US3 — analytics ingest. Both live in routes.public.ts.
+            await registerSearchPublicRoutes(app, {
+                suggestService,
+                phraseRecorder,
+                enrichSuggestionPricing: options.enrichSuggestionPricing,
+            });
+            // US2 — LLM toggle wrapper. Mounts only when the admin gate +
+            // settings admin service are both wired (test-server passes them).
+            await registerSearchAdminRoutes(app, {
+                llmToggleService,
+                reindexWorker,
+                requireAdmin: options.requireAdmin,
+                resolveAdminAuditContext: options.resolveAdminAuditContext,
+            });
+            // Periodic full Meilisearch reindex (FR — keep the catalogue in sync
+            // even when an incremental event was missed). The interval is read
+            // from Settings on every tick via a self-rescheduling timer, so an
+            // operator changing `search.reindex_interval_minutes` takes effect on
+            // the next cycle without a restart. A value <= 0 disables the sweep but
+            // the timer keeps polling the setting so it can be re-enabled live.
+            if (options.enableReindexScheduler) {
+                const DISABLED_POLL_MS = 60_000;
+                let timer;
+                let stopped = false;
+                const scheduleNext = (delayMs) => {
+                    if (stopped)
+                        return;
+                    timer = setTimeout(tick, delayMs);
+                    if (typeof timer.unref === 'function')
+                        timer.unref();
+                };
+                const tick = () => {
+                    // Presence is decided here, before any work and outside the `try`s
+                    // below (issue #126). A timer callback has nowhere to throw to, so
+                    // `ModuleDisabledError` cannot propagate from it and must be decided;
+                    // asked from inside one of those `try`s, a switched-off module and a
+                    // failed sweep would land in the same handler.
+                    //
+                    // The reschedule is deliberate and is not a leak: this timer *is* the
+                    // loop, so returning without re-arming would stop the scheduler for
+                    // the life of the process and no re-enable would bring it back. It is
+                    // the same shape as the `minutes <= 0` branch below — keep polling,
+                    // do nothing.
+                    if (!effectiveState.isPresent('search')) {
+                        scheduleNext(DISABLED_POLL_MS);
+                        return;
+                    }
+                    // Feature 072 (FR-020), issue #128 — the timer is the entry point, so
+                    // the scope opens here: the setting read and the sweep both query, and
+                    // outside a scope they would run on whatever tenancy the ambient store
+                    // happened to hold. It goes around the *work* and not around the guard
+                    // above, and the reschedule stays outside it, because this timer is the
+                    // loop — a tick that failed to re-arm would stop the scheduler for the
+                    // life of the process. `reindex()` is also reachable from the admin
+                    // route, where the request's scope is already open and a second one
+                    // would be wrong; that is why the scope lives at the timer rather than
+                    // inside the worker.
+                    void enterSystemScope('search: periodic reindex sweep', async () => {
+                        let minutes = 0;
+                        try {
+                            minutes = await resolveReindexIntervalMinutes();
+                        }
+                        catch (err) {
+                            app.log.error({ err }, 'search reindex: failed to resolve interval setting');
+                        }
+                        // Disabled — poll on, so a re-enable takes effect live.
+                        if (!Number.isFinite(minutes) || minutes <= 0)
+                            return DISABLED_POLL_MS;
+                        try {
+                            const result = await reindexWorker.reindex();
+                            app.log.info({ result }, 'search reindex sweep completed');
+                        }
+                        catch (err) {
+                            app.log.error({ err }, 'search reindex sweep failed');
+                        }
+                        return minutes * 60_000;
+                    }, { entryPoint: 'interval' })
+                        .then(scheduleNext)
+                        .catch((err) => {
+                        app.log.error({ err }, 'search reindex tick failed');
+                        scheduleNext(DISABLED_POLL_MS);
+                    });
+                };
+                // Kick off the first poll without an immediate reindex at boot.
+                scheduleNext(DISABLED_POLL_MS);
+                app.addHook('onClose', async () => {
+                    stopped = true;
+                    if (timer)
+                        clearTimeout(timer);
+                });
+            }
+        },
+    };
+}
+//# sourceMappingURL=plugin.js.map

package/dist/backend/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/backend/plugin.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EACL,oBAAoB,EAEpB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EACL,0BAA0B,GAE3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAErG,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EACL,kCAAkC,EAClC,gCAAgC,EAChC,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAGxB;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;AAEjD,SAAS,iBAAiB,CAAC,SAAiB,EAAE,OAAe;IAC3D,IAAI,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO;IAClD,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AA0HD,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AAEhC,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,yBAAyB,GAAG,KAAK,IAAqB,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,GAAG,CAC/C,oBAAoB,CAAC,0BAA0B,EAC/C,IAAI,EACJ,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAC5B,CAAC;YACF,OAAO,OAAO,GAAG,IAAI,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;gBAC1C,OAAO,kCAAkC,GAAG,IAAI,CAAC;YACnD,CAAC;YACD,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;gBACjD,iBAAiB,CACf,gBAAgB,oBAAoB,CAAC,0BAA0B,EAAE,EACjE,qBAAqB,oBAAoB,CAAC,0BAA0B,cAAc;oBAChF,8EAA8E;oBAC9E,oDAAoD,CACvD,CAAC;gBACF,OAAO,kCAAkC,GAAG,IAAI,CAAC;YACnD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,aAAa,EAAE,OAAO,CAAC,oBAAoB;QAC3C,QAAQ,EAAE,OAAO,CAAC,eAAe;QACjC,UAAU,EAAE,OAAO,CAAC,iBAAiB;QACrC,iBAAiB,EAAE,OAAO,CAAC,sBAAsB;QACjD,oBAAoB,EAAE,yBAAyB;KAChD,CAAC,CAAC;IACH,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,UAAU,GAAG,IAAI,qBAAqB,CAAC;QAC3C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO;QACP,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnF,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAC/C,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,oBAAoB,EAC5B,EAAE,EACF,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,aAAa,CACtB,CAAC;IAEF,oEAAoE;IACpE,6DAA6D;IAC7D,iEAAiE;IACjE,mBAAmB;IACnB,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAE/B,EAAkC,EAAE;QACnC,MAAM,QAAQ,GAA0B;YACtC,YAAY,EAAE,wBAAwB;YACtC,kBAAkB,EAAE,4BAA4B;SACjD,CAAC;QACF,IAAI,CAAC;YACH,iEAAiE;YACjE,kDAAkD;YAClD,MAAM,SAAS,GAAG,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,YAAY,EAAE,kBAAkB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC3D,OAAO,CAAC,eAAe,CAAC,GAAG,CACzB,oBAAoB,CAAC,sBAAsB,EAC3C,SAAS,EACT,YAAY,CACb;gBACD,OAAO,CAAC,eAAe,CAAC,GAAG,CACzB,oBAAoB,CAAC,0BAA0B,EAC/C,SAAS,EACT,YAAY,CACb;aACF,CAAC,CAAC;YACH,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IAEN,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IAE1F,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAC3C,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,oBAAoB,EAC5B,OAAO,CAAC,WAAW,CACpB,CAAC;IAEF;;;;;;;;;;;;;;OAcG;IACH,MAAM,6BAA6B,GAAG,KAAK,IAAqB,EAAE;QAChE,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,eAAe,CAAC,GAAG,CACtC,oBAAoB,CAAC,wBAAwB,EAC7C,IAAI,EACJ,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oBAAoB;gBAAE,OAAO,gCAAgC,CAAC;YACnF,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;gBACjD,iBAAiB,CACf,gBAAgB,oBAAoB,CAAC,wBAAwB,EAAE,EAC/D,qBAAqB,oBAAoB,CAAC,wBAAwB,cAAc;oBAC9E,8EAA8E;oBAC9E,oDAAoD,CACvD,CAAC;gBACF,OAAO,gCAAgC,CAAC;YAC1C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAC7C,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,eAAe,CACxB,CAAC;IAEF,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;QAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO;KACR,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE;YACN,OAAO;YACP,UAAU;YACV,kBAAkB;YAClB,cAAc;YACd,aAAa;YACb,cAAc;YACd,gBAAgB;YAChB,6BAA6B;SAC9B;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACpB,8BAA8B;YAC9B,yDAAyD;YACzD,MAAM,0BAA0B,CAAC,GAAG,EAAE;gBACpC,cAAc;gBACd,cAAc;gBACd,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;aACzD,CAAC,CAAC;YACH,8DAA8D;YAC9D,mEAAmE;YACnE,MAAM,yBAAyB,CAAC,GAAG,EAAE;gBACnC,gBAAgB;gBAChB,aAAa;gBACb,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;aAC3D,CAAC,CAAC;YAEH,qEAAqE;YACrE,mEAAmE;YACnE,mEAAmE;YACnE,sEAAsE;YACtE,wEAAwE;YACxE,oEAAoE;YACpE,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC;gBACnC,MAAM,gBAAgB,GAAG,MAAM,CAAC;gBAChC,IAAI,KAAgD,CAAC;gBACrD,IAAI,OAAO,GAAG,KAAK,CAAC;gBAEpB,MAAM,YAAY,GAAG,CAAC,OAAe,EAAQ,EAAE;oBAC7C,IAAI,OAAO;wBAAE,OAAO;oBACpB,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAClC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;wBAAE,KAAK,CAAC,KAAK,EAAE,CAAC;gBACvD,CAAC,CAAC;gBAEF,MAAM,IAAI,GAAG,GAAS,EAAE;oBACtB,mEAAmE;oBACnE,mEAAmE;oBACnE,sEAAsE;oBACtE,qEAAqE;oBACrE,+CAA+C;oBAC/C,EAAE;oBACF,sEAAsE;oBACtE,oEAAoE;oBACpE,sEAAsE;oBACtE,oEAAoE;oBACpE,cAAc;oBACd,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACxC,YAAY,CAAC,gBAAgB,CAAC,CAAC;wBAC/B,OAAO;oBACT,CAAC;oBACD,sEAAsE;oBACtE,uEAAuE;oBACvE,uEAAuE;oBACvE,uEAAuE;oBACvE,wEAAwE;oBACxE,uEAAuE;oBACvE,oEAAoE;oBACpE,oEAAoE;oBACpE,uEAAuE;oBACvE,qBAAqB;oBACrB,KAAK,gBAAgB,CACnB,gCAAgC,EAChC,KAAK,IAAqB,EAAE;wBAC1B,IAAI,OAAO,GAAG,CAAC,CAAC;wBAChB,IAAI,CAAC;4BACH,OAAO,GAAG,MAAM,6BAA6B,EAAE,CAAC;wBAClD,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,oDAAoD,CAAC,CAAC;wBAC/E,CAAC;wBACD,wDAAwD;wBACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;4BAAE,OAAO,gBAAgB,CAAC;wBACvE,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC;4BAC7C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,gCAAgC,CAAC,CAAC;wBAC7D,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,6BAA6B,CAAC,CAAC;wBACxD,CAAC;wBACD,OAAO,OAAO,GAAG,MAAM,CAAC;oBAC1B,CAAC,EACD,EAAE,UAAU,EAAE,UAAU,EAAE,CAC3B;yBACE,IAAI,CAAC,YAAY,CAAC;yBAClB,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;wBACtB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC;wBACrD,YAAY,CAAC,gBAAgB,CAAC,CAAC;oBACjC,CAAC,CAAC,CAAC;gBACP,CAAC,CAAC;gBAEF,gEAAgE;gBAChE,YAAY,CAAC,gBAAgB,CAAC,CAAC;gBAC/B,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;oBAChC,OAAO,GAAG,IAAI,CAAC;oBACf,IAAI,KAAK;wBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/routes.admin.d.ts

@@ -0,0 +1,28 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import { type SettingsAdminAuditContext } from '@endora-commerce/contracts';
+import type { LlmToggleService } from './services/llm-toggle.service.js';
+import type { SearchReindexWorker } from './services/search-reindex-worker.js';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+/**
+ * Admin HTTP surface — feature 006 / US2 (T025).
+ *
+ * Mounts under `/api/v1/admin/search/*`:
+ *   - POST /llm/toggle — flip `search.llm.enabled` on/off with cross-
+ *     setting validation. Refuses to enable for any channel whose
+ *     embedder.* triplet is incomplete (FR-011).
+ *
+ * The three embedder.* values themselves are still saved through the
+ * generic Settings admin route (`PUT /api/v1/admin/settings/:code/value`).
+ * That keeps the per-field audit trail intact while the toggle remains
+ * the single guarded entry point for `enabled`.
+ */
+export interface SearchAdminDeps {
+    llmToggleService: LlmToggleService;
+    /** Backs the manual "Reindex now" admin action. */
+    reindexWorker: SearchReindexWorker;
+    requireAdmin: RequireAdminFactory;
+    /** Resolves the audit actor from the request; mirrors Settings' shape. */
+    resolveAdminAuditContext?: (req: FastifyRequest) => SettingsAdminAuditContext;
+}
+export declare function registerSearchAdminRoutes(app: FastifyInstance, deps: SearchAdminDeps): Promise<void>;
+//# sourceMappingURL=routes.admin.d.ts.map

package/dist/backend/routes.admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.d.ts","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAA0B,KAAK,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACpG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,mDAAmD;IACnD,aAAa,EAAE,mBAAmB,CAAC;IACnC,YAAY,EAAE,mBAAmB,CAAC;IAClC,0EAA0E;IAC1E,wBAAwB,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,yBAAyB,CAAC;CAC/E;AAED,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAwCf"}

package/dist/backend/routes.admin.js

@@ -0,0 +1,33 @@
+import { LlmToggleRequestSchema } from '@endora-commerce/contracts';
+export async function registerSearchAdminRoutes(app, deps) {
+    const { llmToggleService, reindexWorker, requireAdmin, resolveAdminAuditContext } = deps;
+    // Manual full Meilisearch reindex — the on-demand equivalent of the
+    // periodic `search.reindex_interval_minutes` sweep. Runs synchronously and
+    // returns a per-run summary. Gated by the existing `search:write`
+    // permission (no new permission code introduced).
+    app.post('/api/v1/admin/search/reindex', { preHandler: requireAdmin('search:write') }, async (_request, reply) => {
+        const result = await reindexWorker.reindex();
+        return reply.send(result);
+    });
+    app.post('/api/v1/admin/search/llm/toggle', { preHandler: requireAdmin('search:write') }, async (request) => {
+        const body = LlmToggleRequestSchema.parse(request.body);
+        const actor = resolveAdminAuditContext
+            ? resolveAdminAuditContext(request)
+            : { actorAdminUserId: null };
+        const result = await llmToggleService.toggle({
+            enabled: body.enabled,
+            ...(body.salesChannelCodes !== undefined
+                ? { salesChannelCodes: body.salesChannelCodes }
+                : {}),
+            expectedVersion: body.expectedVersion ?? null,
+            actor,
+        });
+        return {
+            code: 'search.llm.enabled',
+            enabled: result.enabled,
+            newVersion: result.newVersion,
+            appliedChannelIds: result.appliedChannelIds,
+        };
+    });
+}
+//# sourceMappingURL=routes.admin.js.map

package/dist/backend/routes.admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.js","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAkC,MAAM,4BAA4B,CAAC;AA4BpG,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAoB,EACpB,IAAqB;IAErB,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,wBAAwB,EAAE,GAAG,IAAI,CAAC;IAEzF,oEAAoE;IACpE,2EAA2E;IAC3E,kEAAkE;IAClE,kDAAkD;IAClD,GAAG,CAAC,IAAI,CACN,8BAA8B,EAC9B,EAAE,UAAU,EAAE,YAAY,CAAC,cAAc,CAAC,EAAE,EAC5C,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,iCAAiC,EACjC,EAAE,UAAU,EAAE,YAAY,CAAC,cAAc,CAAC,EAAE,EAC5C,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,KAAK,GAA8B,wBAAwB;YAC/D,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC;YACnC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;YACP,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI;YAC7C,KAAK;SACN,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,oBAA6B;YACnC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/routes.public.d.ts

@@ -0,0 +1,22 @@
+import type { FastifyInstance } from 'fastify';
+import { type ProductSummary, type SearchSuggestItem } from '@endora-commerce/contracts';
+import { type SearchSuggestService } from './services/search-suggest.service.js';
+import type { SearchPhraseRecorder } from './services/search-phrase-recorder.service.js';
+export type SuggestionPricingEnricher = (items: ProductSummary[], ctx: {
+    /** The request's resolved sales channel (feature 053 / FR-002). */
+    resolvedChannel: {
+        id: string;
+        defaultCurrency: string;
+    };
+    /** Organization of the signed-in customer, or null for guests. */
+    organizationId?: string | null;
+}) => Promise<SearchSuggestItem[]>;
+export interface SearchPublicDeps {
+    suggestService: SearchSuggestService;
+    /** When provided, `POST /api/v1/search/record` is mounted (US3). */
+    phraseRecorder?: SearchPhraseRecorder;
+    /** When provided, suggestions carry the per-customer resolved price. */
+    enrichSuggestionPricing?: SuggestionPricingEnricher;
+}
+export declare function registerSearchPublicRoutes(app: FastifyInstance, deps: SearchPublicDeps): Promise<void>;
+//# sourceMappingURL=routes.public.d.ts.map

package/dist/backend/routes.public.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.public.d.ts","sourceRoot":"","sources":["../../src/backend/routes.public.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAkB,MAAM,SAAS,CAAC;AAE/D,OAAO,EAOL,KAAK,cAAc,EAEnB,KAAK,iBAAiB,EAEvB,MAAM,4BAA4B,CAAC;AAQpC,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AA+CzF,MAAM,MAAM,yBAAyB,GAAG,CACtC,KAAK,EAAE,cAAc,EAAE,EACvB,GAAG,EAAE;IACH,mEAAmE;IACnE,eAAe,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,KACE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;AAElC,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,oBAAoB,CAAC;IACrC,oEAAoE;IACpE,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,wEAAwE;IACxE,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;CACrD;AAED,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CAmHf"}

package/dist/backend/routes.public.js

@@ -0,0 +1,192 @@
+import { z } from 'zod';
+import { ERROR_CODES, RecordPhraseRequestSchema, SearchSuggestQuerySchema, SEARCH_PHRASE_MAX_LENGTH, SEARCH_SUGGEST_LIMIT_MAX, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { markPersonalisedPricing, productAudienceOf } from '@endora-commerce/platform/http';
+import { currentSalesChannel, getResolvedChannel, } from '@endora-commerce/platform/kernel';
+import { QueryTooShort, SearchBackendUnavailable, } from './services/search-suggest.service.js';
+/**
+ * Public HTTP surface — feature 006 / US1 (T013) and US3 (T036).
+ *
+ * Routes mounted under `/api/v1/search/*`:
+ *   - GET  /suggest  — typeahead popup feed.
+ *   - POST /record   — analytics ingest. Returns 202 immediately;
+ *                      persistence is queued via the recorder service
+ *                      so the storefront response is never delayed
+ *                      (FR-015).
+ *
+ * Sales-channel scoping mirrors the catalog public routes: the channel
+ * is resolved from the request scope (filled by the resolver
+ * middleware) with a header fallback for the contract-level read in
+ * `readContext`.
+ */
+const acceptLanguageHeaderSchema = z.string().optional();
+/**
+ * Enriches raw suggestions with the per-customer price-list resolution so the
+ * typeahead popup can show the price the searching user would actually pay,
+ * honouring their price list and price-visibility. Wired from the composition
+ * root (where the price-lists `PricingService` lives). When absent, the popup
+ * degrades to the legacy `ProductSummary.price` projection.
+ */
+/**
+ * The signed-in customer's organization, or `null`.
+ *
+ * `request.actor` is not on `FastifyRequest`: it is a declaration-merging
+ * augmentation the `auth` module contributes (`modules/auth/plugin.ts`). Inside
+ * `backend/src` it arrived ambiently through the host's own `types` graph, so
+ * nothing in this module ever named it; a package compiles against its own
+ * manifest and `auth` publishes nothing a package can name, so the property is
+ * simply not there (TS2339). Read structurally and narrowed rather than
+ * asserted — an absent actor answers `null`, which is the guest price, exactly
+ * as before.
+ */
+function customerOrganizationId(request) {
+    const { actor } = request;
+    if (actor?.kind !== 'customer')
+        return null;
+    return actor.organizationId ?? null;
+}
+export async function registerSearchPublicRoutes(app, deps) {
+    const { suggestService, phraseRecorder, enrichSuggestionPricing } = deps;
+    // POST /api/v1/search/record — feature 006 / US3 / T036.
+    // Mounted only when a recorder was wired (search/plugin.ts gates
+    // this on `settingsService` being provided so the recorder can read
+    // the per-channel minimum-length threshold).
+    if (phraseRecorder) {
+        app.post('/api/v1/search/record', async (request, reply) => {
+            const parseResult = RecordPhraseRequestSchema.safeParse(request.body);
+            if (!parseResult.success) {
+                // The two negative paths the contract calls out
+                // (PHRASE_REQUIRED, PHRASE_TOO_LONG) are derived from the Zod
+                // issue codes so the wire surface is stable.
+                const issue = parseResult.error.issues[0];
+                const code = issue?.path[0] === 'phrase' && issue?.code === 'too_big'
+                    ? ERROR_CODES.PHRASE_TOO_LONG
+                    : issue?.path[0] === 'resultCount'
+                        ? ERROR_CODES.RESULT_COUNT_INVALID
+                        : ERROR_CODES.PHRASE_REQUIRED;
+                throw new HttpError(400, code, issue?.message ?? 'Invalid record phrase request.', parseResult.error.issues.map((i) => ({
+                    path: i.path.join('.') || '(root)',
+                    issue: i.message,
+                })));
+            }
+            // The resolver middleware (kernel) fills the request scope's channel
+            // slot. Storefront paths fall back to the system-default channel; admin
+            // paths refuse with MISSING_SALES_CHANNEL_CONTEXT before reaching this
+            // handler.
+            const salesChannelId = currentSalesChannel()?.id;
+            if (!salesChannelId) {
+                throw new HttpError(400, ERROR_CODES.MISSING_SALES_CHANNEL_CONTEXT, 'No sales channel could be resolved for this request.');
+            }
+            // Fire-and-forget: the recorder swallows its own errors and the
+            // storefront response is not delayed by persistence (FR-015).
+            void phraseRecorder.record({
+                phrase: parseResult.data.phrase,
+                salesChannelId,
+                resultCount: parseResult.data.resultCount ?? 0,
+            });
+            return reply.code(202).send({ ok: true });
+        });
+    }
+    // GET /api/v1/search/suggest
+    app.get('/api/v1/search/suggest', async (request, reply) => {
+        const parsed = parseSuggestQuery(request);
+        const ctx = readContext(request);
+        // The popup has carried the buyer's own resolved price since feature 075
+        // and said nothing about it to a cache. It is the same private response the
+        // result feed below it now returns, so it gets the same header; the
+        // storefront's own typeahead fetch already asks for `no-store`.
+        markPersonalisedPricing(reply, ctx.audience);
+        try {
+            const result = await suggestService.suggest({
+                q: parsed.q,
+                ...(parsed.limit !== undefined ? { limit: parsed.limit } : {}),
+            }, ctx);
+            // Enrich with the per-customer price-list resolution when wired. The
+            // organization comes from the request actor (the suggest fetch carries
+            // the session cookie), so a signed-in buyer sees their negotiated price
+            // and a guest sees the public one. Enrichment failures degrade to the
+            // raw projection — the popup must never 500 over a pricing hiccup.
+            if (enrichSuggestionPricing) {
+                const organizationId = customerOrganizationId(request);
+                try {
+                    const enriched = await enrichSuggestionPricing(result.data, {
+                        resolvedChannel: ctx.resolvedChannel,
+                        organizationId,
+                    });
+                    return {
+                        data: enriched,
+                        meta: result.meta,
+                    };
+                }
+                catch {
+                    // fall through to the un-enriched response
+                }
+            }
+            return result;
+        }
+        catch (err) {
+            if (err instanceof QueryTooShort) {
+                throw new HttpError(400, ERROR_CODES.QUERY_TOO_SHORT, `Query is shorter than the minimum length of ${err.minimumQueryLength} characters.`, [{ path: 'q', issue: 'phrase below minimum length' }]);
+            }
+            if (err instanceof SearchBackendUnavailable) {
+                throw new HttpError(503, ERROR_CODES.SEARCH_BACKEND_UNAVAILABLE, 'Search is temporarily unavailable.');
+            }
+            throw err;
+        }
+    });
+}
+/**
+ * Parses + validates `?q=…&limit=N`. Returns the canonicalised pair or
+ * raises an HttpError that the route handler does NOT need to translate.
+ *
+ * We hand-parse instead of letting Zod's `safeParse` populate the body
+ * because we want the search-specific error codes (`QUERY_TOO_LONG`,
+ * `LIMIT_OUT_OF_RANGE`) rather than the generic `VALIDATION_FAILED`.
+ */
+function parseSuggestQuery(request) {
+    const raw = (request.query ?? {});
+    const qRaw = typeof raw['q'] === 'string' ? raw['q'] : undefined;
+    const limitRaw = typeof raw['limit'] === 'string' ? Number(raw['limit']) : undefined;
+    if (qRaw === undefined || qRaw.length === 0) {
+        throw new HttpError(400, ERROR_CODES.QUERY_TOO_SHORT, 'Query parameter "q" is required.', [{ path: 'q', issue: 'missing' }]);
+    }
+    if (qRaw.length > SEARCH_PHRASE_MAX_LENGTH) {
+        throw new HttpError(400, ERROR_CODES.QUERY_TOO_LONG, `Query exceeds the maximum length of ${SEARCH_PHRASE_MAX_LENGTH} characters.`, [{ path: 'q', issue: 'phrase too long' }]);
+    }
+    let limit;
+    if (limitRaw !== undefined) {
+        if (!Number.isInteger(limitRaw) ||
+            limitRaw <= 0 ||
+            limitRaw > SEARCH_SUGGEST_LIMIT_MAX) {
+            throw new HttpError(400, ERROR_CODES.LIMIT_OUT_OF_RANGE, `Limit must be an integer between 1 and ${SEARCH_SUGGEST_LIMIT_MAX}.`, [{ path: 'limit', issue: 'out of range' }]);
+        }
+        limit = limitRaw;
+    }
+    // Round-trip through the contract schema so the type system knows the
+    // values match the wire shape exactly. The schema mirrors the manual
+    // checks above, so this never throws — but it would catch any future
+    // drift between the route and the contract.
+    SearchSuggestQuerySchema.parse({ q: qRaw, ...(limit !== undefined ? { limit } : {}) });
+    return { q: qRaw, ...(limit !== undefined ? { limit } : {}) };
+}
+function readContext(request) {
+    // Feature 053 / FR-002: read the channel resolved once by the canonical
+    // middleware instead of re-parsing the `x-sales-channel` header.
+    const ch = getResolvedChannel(request);
+    const acceptLanguage = acceptLanguageHeaderSchema.parse(request.headers['accept-language']);
+    const preferredLanguage = acceptLanguage
+        ? acceptLanguage.split(',')[0]?.trim()
+        : undefined;
+    return {
+        resolvedChannel: {
+            id: ch.id,
+            code: ch.code,
+            isPublic: ch.isPublic,
+            defaultCurrency: ch.defaultCurrency,
+            defaultLanguage: ch.defaultLanguage,
+        },
+        audience: productAudienceOf(request),
+        ...(preferredLanguage !== undefined ? { preferredLanguage } : {}),
+    };
+}
+//# sourceMappingURL=routes.public.js.map

package/dist/backend/routes.public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.public.js","sourceRoot":"","sources":["../../src/backend/routes.public.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,WAAW,EACX,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,GAMzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAC5F,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,aAAa,EACb,wBAAwB,GAEzB,MAAM,sCAAsC,CAAC;AAG9C;;;;;;;;;;;;;;GAcG;AAEH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAEzD;;;;;;GAMG;AACH;;;;;;;;;;;GAWG;AACH,SAAS,sBAAsB,CAAC,OAAuB;IACrD,MAAM,EAAE,KAAK,EAAE,GAAG,OAEjB,CAAC;IACF,IAAI,KAAK,EAAE,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC;AACtC,CAAC;AAoBD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAoB,EACpB,IAAsB;IAEtB,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,uBAAuB,EAAE,GAAG,IAAI,CAAC;IAEzE,yDAAyD;IACzD,iEAAiE;IACjE,oEAAoE;IACpE,6CAA6C;IAC7C,IAAI,cAAc,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACzD,MAAM,WAAW,GAAG,yBAAyB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACzB,gDAAgD;gBAChD,8DAA8D;gBAC9D,6CAA6C;gBAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC1C,MAAM,IAAI,GACR,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,EAAE,IAAI,KAAK,SAAS;oBACtD,CAAC,CAAC,WAAW,CAAC,eAAe;oBAC7B,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa;wBAChC,CAAC,CAAC,WAAW,CAAC,oBAAoB;wBAClC,CAAC,CAAC,WAAW,CAAC,eAAe,CAAC;gBACpC,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,IAAI,EACJ,KAAK,EAAE,OAAO,IAAI,gCAAgC,EAClD,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ;oBAClC,KAAK,EAAE,CAAC,CAAC,OAAO;iBACjB,CAAC,CAAC,CACJ,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,wEAAwE;YACxE,uEAAuE;YACvE,WAAW;YACX,MAAM,cAAc,GAAG,mBAAmB,EAAE,EAAE,EAAE,CAAC;YACjD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,6BAA6B,EACzC,sDAAsD,CACvD,CAAC;YACJ,CAAC;YAED,gEAAgE;YAChE,8DAA8D;YAC9D,KAAK,cAAc,CAAC,MAAM,CAAC;gBACzB,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM;gBAC/B,cAAc;gBACd,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC;aAC/C,CAAC,CAAC;YAEH,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAiC,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,6BAA6B;IAC7B,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACzD,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACjC,yEAAyE;QACzE,4EAA4E;QAC5E,oEAAoE;QACpE,gEAAgE;QAChE,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CACzC;gBACE,CAAC,EAAE,MAAM,CAAC,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,EACD,GAAG,CACJ,CAAC;YACF,qEAAqE;YACrE,uEAAuE;YACvE,wEAAwE;YACxE,sEAAsE;YACtE,mEAAmE;YACnE,IAAI,uBAAuB,EAAE,CAAC;gBAC5B,MAAM,cAAc,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;gBACvD,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE;wBAC1D,eAAe,EAAE,GAAG,CAAC,eAAe;wBACpC,cAAc;qBACf,CAAC,CAAC;oBACH,OAAO;wBACL,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,MAAM,CAAC,IAAI;qBACc,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,2CAA2C;gBAC7C,CAAC;YACH,CAAC;YACD,OAAO,MAAsC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,eAAe,EAC3B,+CAA+C,GAAG,CAAC,kBAAkB,cAAc,EACnF,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CACtD,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;gBAC5C,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,0BAA0B,EACtC,oCAAoC,CACrC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,OAAuB;IAIhD,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;IAC7D,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,MAAM,QAAQ,GACZ,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,eAAe,EAC3B,kCAAkC,EAClC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAClC,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,cAAc,EAC1B,uCAAuC,wBAAwB,cAAc,EAC7E,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAC1C,CAAC;IACJ,CAAC;IAED,IAAI,KAAyB,CAAC;IAC9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC3B,QAAQ,IAAI,CAAC;YACb,QAAQ,GAAG,wBAAwB,EACnC,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,kBAAkB,EAC9B,0CAA0C,wBAAwB,GAAG,EACrE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAC3C,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,QAAQ,CAAC;IACnB,CAAC;IAED,sEAAsE;IACtE,qEAAqE;IACrE,qEAAqE;IACrE,4CAA4C;IAC5C,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAEvF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,OAAuB;IAK1C,wEAAwE;IACxE,iEAAiE;IACjE,MAAM,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,0BAA0B,CAAC,KAAK,CACrD,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CACnC,CAAC;IACF,MAAM,iBAAiB,GAAG,cAAc;QACtC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACtC,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,eAAe,EAAE;YACf,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,eAAe,EAAE,EAAE,CAAC,eAAe;YACnC,eAAe,EAAE,EAAE,CAAC,eAAe;SACpC;QACD,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC;QACpC,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC"}

package/dist/backend/services/embedder-config-resolver.d.ts

@@ -0,0 +1,25 @@
+import type { ResolveResult } from '@endora-commerce/contracts';
+import { type SettingsReadPort } from '@endora-commerce/platform/kernel';
+/** Narrow port over CredentialsService.resolve (feature 058, Principle I). */
+export interface CredentialResolvePort {
+    resolve(configurationCode: string): Promise<ResolveResult>;
+}
+export interface EmbedderConfig {
+    url: string;
+    apiKey: string;
+    model: string;
+}
+/**
+ * Resolve the Meilisearch embedder config for a channel (feature 058, T060).
+ *
+ * The `search.llm.embedder_credentials` reference (a reusable `llm` credential
+ * configuration) is the SINGLE source: its `baseUrl` → embedder URL, `apiKey` →
+ * embedder API key, `model` → embedder model. When the reference is unset or
+ * unresolvable, every field comes back empty and the caller treats LLM search as
+ * not configured (fail closed). There are no separate embedder settings.
+ *
+ * The secret `apiKey` is decrypted in-memory by `resolve`; it never leaves the
+ * process.
+ */
+export declare function resolveEmbedderConfig(settings: SettingsReadPort, channelId: string, credentials?: CredentialResolvePort): Promise<EmbedderConfig>;
+//# sourceMappingURL=embedder-config-resolver.d.ts.map

package/dist/backend/services/embedder-config-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedder-config-resolver.d.ts","sourceRoot":"","sources":["../../../src/backend/services/embedder-config-resolver.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAA2B,KAAK,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGlG,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,gBAAgB,EAC1B,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,qBAAqB,GAClC,OAAO,CAAC,cAAc,CAAC,CAmCzB"}