@endora-commerce/platform 0.100.0

package/dist/kernel/sales-channels/sales-channel-membership.service.d.ts

@@ -0,0 +1,157 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type ChannelMemberEntityType } from '@endora-commerce/contracts';
+import type { AuditPort } from '../ports/audit.js';
+import type { EventBus } from '../../events/bus.js';
+import { SalesChannel } from './sales-channel.entity.js';
+import { type ChannelBridgeRegistry } from './channel-bridge-registry.js';
+/**
+ * SalesChannelMembershipService — feature 005 / T016.
+ *
+ * Single mutator for every M:N bridge between Sales Channels and the
+ * channel-scoped entity types (FR-009). Going through this service is
+ * mandatory: `check:module-boundary`'s `sql` predicate resolves every
+ * `sales_channel_*` table to its owner out of the DDL, so an owning module
+ * reaching for a bridge table in raw SQL is a ledgered finding (D-87). Until
+ * then this clause was credited to `no-unscoped-channel-query`, an ESLint rule
+ * wired into no config that never looked at a bridge table.
+ *
+ * Responsibilities:
+ *
+ *   - {@link addToChannel} / {@link removeFromChannel} — idempotent
+ *     mutations against the right bridge table.
+ *   - The "at-least-one-channel" invariant (FR-008) — `removeFromChannel`
+ *     refuses when it would leave an entity with zero channels, unless
+ *     the caller passes `fallbackToDefault: true`, in which case the
+ *     entity is re-bound to the system-default channel inside the
+ *     same transaction.
+ *   - {@link bindToDefaultIfEmpty} — wired into every owning module's
+ *     create-path so entities created without explicit channels land
+ *     in Default automatically (FR-011).
+ *   - {@link listChannelsForEntity} / {@link listEntityIdsForChannel}
+ *     — symmetric reads from either side of the relationship.
+ *
+ * Bridges are resolved through {@link ChannelBridgeRegistry}, which the
+ * module owning each entity type contributes to at compose time (feature 120,
+ * FR-015). This service used to hold the map itself, **total** over
+ * `ChannelMemberEntityTypeSchema` — nine module-owned tables named from inside
+ * the platform, which is D-52/D-53's prohibition expressed in a contract
+ * instead of an import, and which meant a membership call for an entity type
+ * whose module an instance never installed ran SQL against a relation that is
+ * not there. A member nothing registered now refuses before the database is
+ * touched (FR-017). The service uses `em.getConnection().execute()` (which
+ * honours the EM's active transaction — knex's `getKnex()` would bypass it via
+ * its own connection pool, breaking transactional integration tests).
+ *
+ * Every successful add / remove writes one audit row through
+ * {@link AuditPort} and emits one EventBus event. Idempotent
+ * no-ops (adding an existing membership / removing a missing one) are
+ * NOT audited because they did not change state.
+ */
+export interface MembershipMutationOptions {
+    /** When true, falling to zero channels triggers automatic rebind to Default instead of refusal. */
+    fallbackToDefault?: boolean;
+    /** Optional admin actor for the audit row. */
+    actorAdminUserId?: string | null;
+}
+export interface MembershipMutationResult {
+    /** True if the mutation actually changed state (false for idempotent no-ops). */
+    changed: boolean;
+    /** Set when the FR-008 fallback was applied. */
+    fallbackAppliedToDefault?: boolean;
+}
+export declare class SalesChannelMembershipService {
+    private readonly emFactory;
+    private readonly eventBus;
+    private readonly auditLogService?;
+    private readonly bridges;
+    /**
+     * `bridges` defaults to the process-level registry the composition roots
+     * contribute into, so every existing construction site keeps working
+     * unchanged. Pass one explicitly to compose an isolated platform — or, in a
+     * test, to drive the FR-017 refusal without a database in reach.
+     */
+    constructor(emFactory: () => EntityManager, eventBus: EventBus, auditLogService?: AuditPort | undefined, bridges?: ChannelBridgeRegistry);
+    /**
+     * Add `entityId` to `channelId`'s member set for `entityType`. Idempotent —
+     * adding an existing membership returns `{ changed: false }` without
+     * touching the database.
+     */
+    addToChannel(channelId: string, entityType: ChannelMemberEntityType, entityId: string, options?: MembershipMutationOptions): Promise<MembershipMutationResult>;
+    /**
+     * Remove `entityId` from `channelId`'s member set for `entityType`. If the
+     * removal would leave the entity with zero channel bindings:
+     *   - when `fallbackToDefault = true`: re-bind to the system-default
+     *     channel inside the same transaction; mark the result with
+     *     `fallbackAppliedToDefault: true`.
+     *   - otherwise: throw `ENTITY_WOULD_HAVE_ZERO_CHANNELS` (HTTP 422).
+     *
+     * Idempotent on the row itself: removing a missing membership returns
+     * `{ changed: false }`.
+     */
+    removeFromChannel(channelId: string, entityType: ChannelMemberEntityType, entityId: string, options?: MembershipMutationOptions): Promise<MembershipMutationResult>;
+    /**
+     * If the entity has no memberships in any channel, bind it to the
+     * system-default channel. Wired into every owning module's create
+     * transaction (FR-011 / T027).
+     */
+    bindToDefaultIfEmpty(entityType: ChannelMemberEntityType, entityId: string): Promise<MembershipMutationResult>;
+    /**
+     * Give `targetEntityId` every channel `sourceEntityId` belongs to (issue #185).
+     *
+     * `catalog` duplicates a product and copies the source's whole channel
+     * assortment. It did that with one `insert … select` against
+     * `sales_channel_products` — Principle XII's accessor clause and Principle
+     * XIII in a single statement, because the bridge was written directly and not
+     * one of the memberships it created was audited.
+     *
+     * Implemented over {@link addToChannel} rather than as a set-based insert on
+     * purpose: that is what makes each new membership carry its audit row and its
+     * `sales_channel_membership_changed` event, which is the entire reason the
+     * copy moved here. An assortment is tens of channels at the very most, so the
+     * per-row round trip costs nothing worth the divergence.
+     *
+     * Memberships the target already holds are skipped by `addToChannel`'s own
+     * idempotency and are not counted.
+     */
+    copyMemberships(entityType: ChannelMemberEntityType, sourceEntityId: string, targetEntityId: string, options?: MembershipMutationOptions): Promise<{
+        copied: number;
+    }>;
+    /**
+     * Replace an entity's complete channel membership set atomically.
+     *
+     * Complete-record integrations use this instead of composing add/remove:
+     * product creation initially binds the system default, while the delivered
+     * record names the exact channel that must remain. A delete-then-add sequence
+     * through the public methods would either trip the zero-channel invariant or
+     * retain the unrelated default.
+     */
+    replaceChannelsForEntity(entityType: ChannelMemberEntityType, entityId: string, channelIds: readonly [string, ...string[]], options?: MembershipMutationOptions): Promise<MembershipMutationResult>;
+    /**
+     * Narrow a **known** set of entity ids to those bound to `channelId`
+     * (issue #185).
+     *
+     * The read half of the same finding. Three `catalog` services asked
+     * `select <entity>_id from sales_channel_<type> where sales_channel_id = ?
+     * and <entity>_id in (…)` by hand, one per channel-scoped listing, and every
+     * one of them fails closed to the empty set — which is the right behaviour
+     * and the wrong place to spell it.
+     *
+     * Not {@link listEntityIdsForChannel}: that one enumerates a channel's whole
+     * membership a page at a time, and a caller holding a page of ids wants the
+     * intersection rather than the enumeration. Using it here would mean pulling
+     * every product in the channel to filter twenty.
+     */
+    filterEntityIdsInChannel(channelId: string, entityType: ChannelMemberEntityType, entityIds: readonly string[]): Promise<string[]>;
+    /** Channels an entity currently belongs to. */
+    listChannelsForEntity(entityType: ChannelMemberEntityType, entityId: string): Promise<SalesChannel[]>;
+    /** Entity ids of `entityType` that currently belong to `channelId`. */
+    listEntityIdsForChannel(channelId: string, entityType: ChannelMemberEntityType, page?: number, pageSize?: number): Promise<{
+        entityIds: string[];
+        total: number;
+    }>;
+    private countMembershipsForEntity;
+    private requireSystemDefaultId;
+    private auditMembership;
+    private emitMembershipChanged;
+}
+//# sourceMappingURL=sales-channel-membership.service.d.ts.map

package/dist/kernel/sales-channels/sales-channel-membership.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sales-channel-membership.service.d.ts","sourceRoot":"","sources":["../../../src/kernel/sales-channels/sales-channel-membership.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,MAAM,WAAW,yBAAyB;IACxC,mGAAmG;IACnG,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,iFAAiF;IACjF,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,qBAAa,6BAA6B;IAQtC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAV1B;;;;;OAKG;gBAEgB,SAAS,EAAE,MAAM,aAAa,EAC9B,QAAQ,EAAE,QAAQ,EAClB,eAAe,CAAC,EAAE,SAAS,YAAA,EAC3B,OAAO,GAAE,qBAAsC;IAGlE;;;;OAIG;IACG,YAAY,CAChB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,uBAAuB,EACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC;IAyBpC;;;;;;;;;;OAUG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,uBAAuB,EACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC;IAuEpC;;;;OAIG;IACG,oBAAoB,CACxB,UAAU,EAAE,uBAAuB,EACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,wBAAwB,CAAC;IAyBpC;;;;;;;;;;;;;;;;;OAiBG;IACG,eAAe,CACnB,UAAU,EAAE,uBAAuB,EACnC,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAyB9B;;;;;;;;OAQG;IACG,wBAAwB,CAC5B,UAAU,EAAE,uBAAuB,EACnC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,EAC1C,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC;IA4DpC;;;;;;;;;;;;;;OAcG;IACG,wBAAwB,CAC5B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,uBAAuB,EACnC,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,OAAO,CAAC,MAAM,EAAE,CAAC;IAiBpB,+CAA+C;IACzC,qBAAqB,CACzB,UAAU,EAAE,uBAAuB,EACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,EAAE,CAAC;IAgB1B,uEAAuE;IACjE,uBAAuB,CAC3B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,uBAAuB,EACnC,IAAI,SAAI,EACR,QAAQ,SAAM,GACb,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;YAgCpC,yBAAyB;YAgBzB,sBAAsB;YAoBtB,eAAe;IAwB7B,OAAO,CAAC,qBAAqB;CAe9B"}

package/dist/kernel/sales-channels/sales-channel-membership.service.js

@@ -0,0 +1,302 @@
+import { ERROR_CODES, SALES_CHANNEL_AUDIT_ACTIONS, } from '@endora-commerce/contracts';
+import { HttpError } from '../../http/error-envelope.js';
+import { SalesChannel } from './sales-channel.entity.js';
+import { channelBridges, } from './channel-bridge-registry.js';
+export class SalesChannelMembershipService {
+    emFactory;
+    eventBus;
+    auditLogService;
+    bridges;
+    /**
+     * `bridges` defaults to the process-level registry the composition roots
+     * contribute into, so every existing construction site keeps working
+     * unchanged. Pass one explicitly to compose an isolated platform — or, in a
+     * test, to drive the FR-017 refusal without a database in reach.
+     */
+    constructor(emFactory, eventBus, auditLogService, bridges = channelBridges) {
+        this.emFactory = emFactory;
+        this.eventBus = eventBus;
+        this.auditLogService = auditLogService;
+        this.bridges = bridges;
+    }
+    /**
+     * Add `entityId` to `channelId`'s member set for `entityType`. Idempotent —
+     * adding an existing membership returns `{ changed: false }` without
+     * touching the database.
+     */
+    async addToChannel(channelId, entityType, entityId, options = {}) {
+        const bridge = this.bridges.require(entityType);
+        const em = this.emFactory();
+        const inserted = await em
+            .getConnection()
+            .execute(`insert into "${bridge.table}" ("sales_channel_id", "${bridge.entityIdColumn}") ` +
+            `values (?, ?) ` +
+            `on conflict ("sales_channel_id", "${bridge.entityIdColumn}") do nothing ` +
+            `returning "${bridge.entityIdColumn}"`, [channelId, entityId], 'all', em.getTransactionContext());
+        if (inserted.length === 0) {
+            return { changed: false };
+        }
+        await this.auditMembership(channelId, entityType, entityId, 'add', options);
+        this.emitMembershipChanged(channelId, entityType, entityId, 'add');
+        return { changed: true };
+    }
+    /**
+     * Remove `entityId` from `channelId`'s member set for `entityType`. If the
+     * removal would leave the entity with zero channel bindings:
+     *   - when `fallbackToDefault = true`: re-bind to the system-default
+     *     channel inside the same transaction; mark the result with
+     *     `fallbackAppliedToDefault: true`.
+     *   - otherwise: throw `ENTITY_WOULD_HAVE_ZERO_CHANNELS` (HTTP 422).
+     *
+     * Idempotent on the row itself: removing a missing membership returns
+     * `{ changed: false }`.
+     */
+    async removeFromChannel(channelId, entityType, entityId, options = {}) {
+        const bridge = this.bridges.require(entityType);
+        const em = this.emFactory();
+        // Step 1: check existence so the no-op path is idempotent and so FR-008
+        // can be evaluated BEFORE we delete anything.
+        const existing = await em
+            .getConnection()
+            .execute(`select 1 as present from "${bridge.table}" ` +
+            `where "sales_channel_id" = ? and "${bridge.entityIdColumn}" = ? limit 1`, [channelId, entityId], 'all', em.getTransactionContext());
+        if (existing.length === 0) {
+            return { changed: false };
+        }
+        // Step 2: count total memberships for the entity. If this is the last
+        // one, FR-008 either refuses (default) or rebinds to Default (when the
+        // caller opted in).
+        const totalChannels = await this.countMembershipsForEntity(em, bridge, entityId);
+        const wouldOrphan = totalChannels === 1;
+        if (wouldOrphan && !options.fallbackToDefault) {
+            throw new HttpError(422, ERROR_CODES.ENTITY_WOULD_HAVE_ZERO_CHANNELS, `Removing this membership would leave the ${entityType} with zero sales channels. ` +
+                `Pass fallbackToDefault=true to rebind it to the system default instead.`, [{ path: 'entityId', issue: entityId }]);
+        }
+        // Step 3: when we get here either the entity has another channel left or
+        // the caller asked for the rebind. The actual DELETE is now safe.
+        await em
+            .getConnection()
+            .execute(`delete from "${bridge.table}" ` +
+            `where "sales_channel_id" = ? and "${bridge.entityIdColumn}" = ?`, [channelId, entityId], 'run', em.getTransactionContext());
+        if (!wouldOrphan) {
+            await this.auditMembership(channelId, entityType, entityId, 'remove', options);
+            this.emitMembershipChanged(channelId, entityType, entityId, 'remove');
+            return { changed: true };
+        }
+        // wouldOrphan && fallbackToDefault — rebind in the same transaction.
+        const defaultId = await this.requireSystemDefaultId(em);
+        await em
+            .getConnection()
+            .execute(`insert into "${bridge.table}" ("sales_channel_id", "${bridge.entityIdColumn}") ` +
+            `values (?, ?) ` +
+            `on conflict ("sales_channel_id", "${bridge.entityIdColumn}") do nothing`, [defaultId, entityId], 'run', em.getTransactionContext());
+        await this.auditMembership(channelId, entityType, entityId, 'remove', options, true);
+        this.emitMembershipChanged(channelId, entityType, entityId, 'remove');
+        return { changed: true, fallbackAppliedToDefault: true };
+    }
+    /**
+     * If the entity has no memberships in any channel, bind it to the
+     * system-default channel. Wired into every owning module's create
+     * transaction (FR-011 / T027).
+     */
+    async bindToDefaultIfEmpty(entityType, entityId) {
+        const bridge = this.bridges.require(entityType);
+        const em = this.emFactory();
+        const remaining = await this.countMembershipsForEntity(em, bridge, entityId);
+        if (remaining > 0)
+            return { changed: false };
+        const defaultId = await this.requireSystemDefaultId(em);
+        await em
+            .getConnection()
+            .execute(`insert into "${bridge.table}" ("sales_channel_id", "${bridge.entityIdColumn}") ` +
+            `values (?, ?) ` +
+            `on conflict ("sales_channel_id", "${bridge.entityIdColumn}") do nothing`, [defaultId, entityId], 'run', em.getTransactionContext());
+        await this.auditMembership(defaultId, entityType, entityId, 'add', {});
+        this.emitMembershipChanged(defaultId, entityType, entityId, 'add');
+        return { changed: true };
+    }
+    /**
+     * Give `targetEntityId` every channel `sourceEntityId` belongs to (issue #185).
+     *
+     * `catalog` duplicates a product and copies the source's whole channel
+     * assortment. It did that with one `insert … select` against
+     * `sales_channel_products` — Principle XII's accessor clause and Principle
+     * XIII in a single statement, because the bridge was written directly and not
+     * one of the memberships it created was audited.
+     *
+     * Implemented over {@link addToChannel} rather than as a set-based insert on
+     * purpose: that is what makes each new membership carry its audit row and its
+     * `sales_channel_membership_changed` event, which is the entire reason the
+     * copy moved here. An assortment is tens of channels at the very most, so the
+     * per-row round trip costs nothing worth the divergence.
+     *
+     * Memberships the target already holds are skipped by `addToChannel`'s own
+     * idempotency and are not counted.
+     */
+    async copyMemberships(entityType, sourceEntityId, targetEntityId, options = {}) {
+        const bridge = this.bridges.require(entityType);
+        const em = this.emFactory();
+        const rows = await em
+            .getConnection()
+            .execute(`select "sales_channel_id" from "${bridge.table}" where "${bridge.entityIdColumn}" = ?`, [sourceEntityId], 'all', em.getTransactionContext());
+        let copied = 0;
+        for (const row of rows) {
+            const result = await this.addToChannel(row.sales_channel_id, entityType, targetEntityId, options);
+            if (result.changed)
+                copied += 1;
+        }
+        return { copied };
+    }
+    /**
+     * Replace an entity's complete channel membership set atomically.
+     *
+     * Complete-record integrations use this instead of composing add/remove:
+     * product creation initially binds the system default, while the delivered
+     * record names the exact channel that must remain. A delete-then-add sequence
+     * through the public methods would either trip the zero-channel invariant or
+     * retain the unrelated default.
+     */
+    async replaceChannelsForEntity(entityType, entityId, channelIds, options = {}) {
+        const bridge = this.bridges.require(entityType);
+        const desiredIds = [...new Set(channelIds)];
+        const em = this.emFactory();
+        const existingRows = await em
+            .getConnection()
+            .execute(`select "sales_channel_id" from "${bridge.table}" ` +
+            `where "${bridge.entityIdColumn}" = ? order by "sales_channel_id" asc`, [entityId], 'all', em.getTransactionContext());
+        const existingIds = existingRows.map((row) => row.sales_channel_id);
+        const desiredSorted = [...desiredIds].sort();
+        if (existingIds.length === desiredSorted.length &&
+            existingIds.every((id, index) => id === desiredSorted[index])) {
+            return { changed: false };
+        }
+        await em.transactional(async (tx) => {
+            await tx
+                .getConnection()
+                .execute(`delete from "${bridge.table}" where "${bridge.entityIdColumn}" = ?`, [entityId], 'run', tx.getTransactionContext());
+            for (const channelId of desiredIds) {
+                await tx
+                    .getConnection()
+                    .execute(`insert into "${bridge.table}" ("sales_channel_id", "${bridge.entityIdColumn}") ` +
+                    `values (?, ?)`, [channelId, entityId], 'run', tx.getTransactionContext());
+            }
+        });
+        const desiredSet = new Set(desiredIds);
+        const existingSet = new Set(existingIds);
+        for (const channelId of existingIds) {
+            if (desiredSet.has(channelId))
+                continue;
+            await this.auditMembership(channelId, entityType, entityId, 'remove', options);
+            this.emitMembershipChanged(channelId, entityType, entityId, 'remove');
+        }
+        for (const channelId of desiredIds) {
+            if (existingSet.has(channelId))
+                continue;
+            await this.auditMembership(channelId, entityType, entityId, 'add', options);
+            this.emitMembershipChanged(channelId, entityType, entityId, 'add');
+        }
+        return { changed: true };
+    }
+    /**
+     * Narrow a **known** set of entity ids to those bound to `channelId`
+     * (issue #185).
+     *
+     * The read half of the same finding. Three `catalog` services asked
+     * `select <entity>_id from sales_channel_<type> where sales_channel_id = ?
+     * and <entity>_id in (…)` by hand, one per channel-scoped listing, and every
+     * one of them fails closed to the empty set — which is the right behaviour
+     * and the wrong place to spell it.
+     *
+     * Not {@link listEntityIdsForChannel}: that one enumerates a channel's whole
+     * membership a page at a time, and a caller holding a page of ids wants the
+     * intersection rather than the enumeration. Using it here would mean pulling
+     * every product in the channel to filter twenty.
+     */
+    async filterEntityIdsInChannel(channelId, entityType, entityIds) {
+        if (entityIds.length === 0)
+            return [];
+        const bridge = this.bridges.require(entityType);
+        const em = this.emFactory();
+        const placeholders = entityIds.map(() => '?').join(',');
+        const rows = await em
+            .getConnection()
+            .execute(`select "${bridge.entityIdColumn}" from "${bridge.table}" ` +
+            `where "sales_channel_id" = ? and "${bridge.entityIdColumn}" in (${placeholders})`, [channelId, ...entityIds], 'all', em.getTransactionContext());
+        return rows.map((row) => row[bridge.entityIdColumn]);
+    }
+    /** Channels an entity currently belongs to. */
+    async listChannelsForEntity(entityType, entityId) {
+        const bridge = this.bridges.require(entityType);
+        const em = this.emFactory();
+        const rows = await em
+            .getConnection()
+            .execute(`select "sales_channel_id" from "${bridge.table}" where "${bridge.entityIdColumn}" = ?`, [entityId], 'all', em.getTransactionContext());
+        const ids = rows.map((r) => r.sales_channel_id);
+        if (ids.length === 0)
+            return [];
+        return em.find(SalesChannel, { id: { $in: ids } });
+    }
+    /** Entity ids of `entityType` that currently belong to `channelId`. */
+    async listEntityIdsForChannel(channelId, entityType, page = 0, pageSize = 100) {
+        const bridge = this.bridges.require(entityType);
+        const em = this.emFactory();
+        const totalRows = await em
+            .getConnection()
+            .execute(`select count(*)::text as count from "${bridge.table}" where "sales_channel_id" = ?`, [channelId], 'all', em.getTransactionContext());
+        const total = Number(totalRows[0]?.count ?? '0');
+        const rows = await em
+            .getConnection()
+            .execute(`select "${bridge.entityIdColumn}" from "${bridge.table}" ` +
+            `where "sales_channel_id" = ? order by "${bridge.entityIdColumn}" asc ` +
+            `offset ? limit ?`, [channelId, page * pageSize, pageSize], 'all', em.getTransactionContext());
+        const entityIds = rows.map((r) => r[bridge.entityIdColumn]);
+        return { entityIds, total };
+    }
+    // -------------------------------------------------------------------------
+    // Internals
+    // -------------------------------------------------------------------------
+    async countMembershipsForEntity(em, bridge, entityId) {
+        const rows = await em
+            .getConnection()
+            .execute(`select count(*)::text as count from "${bridge.table}" where "${bridge.entityIdColumn}" = ?`, [entityId], 'all', em.getTransactionContext());
+        return Number(rows[0]?.count ?? '0');
+    }
+    async requireSystemDefaultId(em) {
+        const rows = await em
+            .getConnection()
+            .execute(`select "id" from "sales_channels" where "system_default" = true limit 1`, [], 'all', em.getTransactionContext());
+        const id = rows[0]?.id;
+        if (!id) {
+            throw new HttpError(500, ERROR_CODES.INTERNAL, 'No system-default sales channel found; cannot apply fallback.');
+        }
+        return id;
+    }
+    async auditMembership(channelId, entityType, entityId, op, options, fallbackAppliedToDefault) {
+        if (!this.auditLogService)
+            return;
+        await this.auditLogService.record({
+            actorAdminUserId: options.actorAdminUserId ?? null,
+            action: SALES_CHANNEL_AUDIT_ACTIONS.MEMBERSHIP_CHANGED,
+            objectType: 'sales_channel_membership',
+            objectId: `${channelId}:${entityType}:${entityId}`,
+            stateAfter: {
+                channelId,
+                entityType,
+                entityId,
+                op,
+                ...(fallbackAppliedToDefault ? { fallbackAppliedToDefault: true } : {}),
+            },
+        });
+    }
+    emitMembershipChanged(channelId, entityType, entityId, op) {
+        this.eventBus.emit('sales_channels.membership_changed', {
+            eventId: `sales_channels.membership_changed:${channelId}:${entityType}:${entityId}:${op}:${Date.now()}`,
+            occurredAt: new Date().toISOString(),
+            channelId,
+            entityType,
+            entityId,
+            op,
+        });
+    }
+}
+//# sourceMappingURL=sales-channel-membership.service.js.map

package/dist/kernel/sales-channels/sales-channel-membership.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sales-channel-membership.service.js","sourceRoot":"","sources":["../../../src/kernel/sales-channels/sales-channel-membership.service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,2BAA2B,GAE5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAGzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EACL,cAAc,GAGf,MAAM,8BAA8B,CAAC;AA4DtC,MAAM,OAAO,6BAA6B;IAQrB;IACA;IACA;IACA;IAVnB;;;;;OAKG;IACH,YACmB,SAA8B,EAC9B,QAAkB,EAClB,eAA2B,EAC3B,UAAiC,cAAc;QAH/C,cAAS,GAAT,SAAS,CAAqB;QAC9B,aAAQ,GAAR,QAAQ,CAAU;QAClB,oBAAe,GAAf,eAAe,CAAY;QAC3B,YAAO,GAAP,OAAO,CAAwC;IAC/D,CAAC;IAEJ;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAChB,SAAiB,EACjB,UAAmC,EACnC,QAAgB,EAChB,UAAqC,EAAE;QAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,aAAa,EAAE;aACf,OAAO,CACN,gBAAgB,MAAM,CAAC,KAAK,2BAA2B,MAAM,CAAC,cAAc,KAAK;YAC/E,gBAAgB;YAChB,qCAAqC,MAAM,CAAC,cAAc,gBAAgB;YAC1E,cAAc,MAAM,CAAC,cAAc,GAAG,EACxC,CAAC,SAAS,EAAE,QAAQ,CAAC,EACrB,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QAEJ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5E,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,iBAAiB,CACrB,SAAiB,EACjB,UAAmC,EACnC,QAAgB,EAChB,UAAqC,EAAE;QAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,aAAa,EAAE;aACf,OAAO,CACN,6BAA6B,MAAM,CAAC,KAAK,IAAI;YAC3C,qCAAqC,MAAM,CAAC,cAAc,eAAe,EAC3E,CAAC,SAAS,EAAE,QAAQ,CAAC,EACrB,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QACJ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,sEAAsE;QACtE,uEAAuE;QACvE,oBAAoB;QACpB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjF,MAAM,WAAW,GAAG,aAAa,KAAK,CAAC,CAAC;QAExC,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9C,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,+BAA+B,EAC3C,4CAA4C,UAAU,6BAA6B;gBACjF,yEAAyE,EAC3E,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CACxC,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,EAAE;aACL,aAAa,EAAE;aACf,OAAO,CACN,gBAAgB,MAAM,CAAC,KAAK,IAAI;YAC9B,qCAAqC,MAAM,CAAC,cAAc,OAAO,EACnE,CAAC,SAAS,EAAE,QAAQ,CAAC,EACrB,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QAEJ,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/E,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,qEAAqE;QACrE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE;aACL,aAAa,EAAE;aACf,OAAO,CACN,gBAAgB,MAAM,CAAC,KAAK,2BAA2B,MAAM,CAAC,cAAc,KAAK;YAC/E,gBAAgB;YAChB,qCAAqC,MAAM,CAAC,cAAc,eAAe,EAC3E,CAAC,SAAS,EAAE,QAAQ,CAAC,EACrB,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QAEJ,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACrF,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC;IAC3D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,oBAAoB,CACxB,UAAmC,EACnC,QAAgB;QAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7E,IAAI,SAAS,GAAG,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAE7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAExD,MAAM,EAAE;aACL,aAAa,EAAE;aACf,OAAO,CACN,gBAAgB,MAAM,CAAC,KAAK,2BAA2B,MAAM,CAAC,cAAc,KAAK;YAC/E,gBAAgB;YAChB,qCAAqC,MAAM,CAAC,cAAc,eAAe,EAC3E,CAAC,SAAS,EAAE,QAAQ,CAAC,EACrB,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QAEJ,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,eAAe,CACnB,UAAmC,EACnC,cAAsB,EACtB,cAAsB,EACtB,UAAqC,EAAE;QAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,aAAa,EAAE;aACf,OAAO,CACN,mCAAmC,MAAM,CAAC,KAAK,YAAY,MAAM,CAAC,cAAc,OAAO,EACvF,CAAC,cAAc,CAAC,EAChB,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QAEJ,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CACpC,GAAG,CAAC,gBAAgB,EACpB,UAAU,EACV,cAAc,EACd,OAAO,CACR,CAAC;YACF,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,wBAAwB,CAC5B,UAAmC,EACnC,QAAgB,EAChB,UAA0C,EAC1C,UAAqC,EAAE;QAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,MAAM,EAAE;aAC1B,aAAa,EAAE;aACf,OAAO,CACN,mCAAmC,MAAM,CAAC,KAAK,IAAI;YACjD,UAAU,MAAM,CAAC,cAAc,uCAAuC,EACxE,CAAC,QAAQ,CAAC,EACV,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QACJ,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IACE,WAAW,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;YAC3C,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC,EAC7D,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE;iBACL,aAAa,EAAE;iBACf,OAAO,CACN,gBAAgB,MAAM,CAAC,KAAK,YAAY,MAAM,CAAC,cAAc,OAAO,EACpE,CAAC,QAAQ,CAAC,EACV,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;YACJ,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,EAAE;qBACL,aAAa,EAAE;qBACf,OAAO,CACN,gBAAgB,MAAM,CAAC,KAAK,2BAA2B,MAAM,CAAC,cAAc,KAAK;oBAC/E,eAAe,EACjB,CAAC,SAAS,EAAE,QAAQ,CAAC,EACrB,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACzC,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;YACpC,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,SAAS;YACxC,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/E,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxE,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,SAAS;YACzC,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC5E,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,wBAAwB,CAC5B,SAAiB,EACjB,UAAmC,EACnC,SAA4B;QAE5B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,aAAa,EAAE;aACf,OAAO,CACN,WAAW,MAAM,CAAC,cAAc,WAAW,MAAM,CAAC,KAAK,IAAI;YACzD,qCAAqC,MAAM,CAAC,cAAc,SAAS,YAAY,GAAG,EACpF,CAAC,SAAS,EAAE,GAAG,SAAS,CAAC,EACzB,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAE,CAAC,CAAC;IACxD,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,qBAAqB,CACzB,UAAmC,EACnC,QAAgB;QAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,aAAa,EAAE;aACf,OAAO,CACN,mCAAmC,MAAM,CAAC,KAAK,YAAY,MAAM,CAAC,cAAc,OAAO,EACvF,CAAC,QAAQ,CAAC,EACV,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,uBAAuB,CAC3B,SAAiB,EACjB,UAAmC,EACnC,IAAI,GAAG,CAAC,EACR,QAAQ,GAAG,GAAG;QAEd,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,MAAM,SAAS,GAAG,MAAM,EAAE;aACvB,aAAa,EAAE;aACf,OAAO,CACN,wCAAwC,MAAM,CAAC,KAAK,gCAAgC,EACpF,CAAC,SAAS,CAAC,EACX,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,GAAG,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,aAAa,EAAE;aACf,OAAO,CACN,WAAW,MAAM,CAAC,cAAc,WAAW,MAAM,CAAC,KAAK,IAAI;YACzD,0CAA0C,MAAM,CAAC,cAAc,QAAQ;YACvE,kBAAkB,EACpB,CAAC,SAAS,EAAE,IAAI,GAAG,QAAQ,EAAE,QAAQ,CAAC,EACtC,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QACJ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAE,CAAC,CAAC;QAC7D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAEpE,KAAK,CAAC,yBAAyB,CACrC,EAAiB,EACjB,MAAiC,EACjC,QAAgB;QAEhB,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,aAAa,EAAE;aACf,OAAO,CACN,wCAAwC,MAAM,CAAC,KAAK,YAAY,MAAM,CAAC,cAAc,OAAO,EAC5F,CAAC,QAAQ,CAAC,EACV,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QACJ,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,GAAG,CAAC,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,EAAiB;QACpD,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,aAAa,EAAE;aACf,OAAO,CACN,yEAAyE,EACzE,EAAE,EACF,KAAK,EACL,EAAE,CAAC,qBAAqB,EAAE,CAC3B,CAAC;QACJ,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,QAAQ,EACpB,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,SAAiB,EACjB,UAAmC,EACnC,QAAgB,EAChB,EAAoB,EACpB,OAAkC,EAClC,wBAAkC;QAElC,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO;QAClC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAClD,MAAM,EAAE,2BAA2B,CAAC,kBAAkB;YACtD,UAAU,EAAE,0BAA0B;YACtC,QAAQ,EAAE,GAAG,SAAS,IAAI,UAAU,IAAI,QAAQ,EAAE;YAClD,UAAU,EAAE;gBACV,SAAS;gBACT,UAAU;gBACV,QAAQ;gBACR,EAAE;gBACF,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE;SACF,CAAC,CAAC;IACL,CAAC;IAEO,qBAAqB,CAC3B,SAAiB,EACjB,UAAmC,EACnC,QAAgB,EAChB,EAAoB;QAEpB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,mCAAmC,EAAE;YACtD,OAAO,EAAE,qCAAqC,SAAS,IAAI,UAAU,IAAI,QAAQ,IAAI,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;YACvG,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,SAAS;YACT,UAAU;YACV,QAAQ;YACR,EAAE;SACM,CAAC,CAAC;IACd,CAAC;CACF"}

package/dist/kernel/sales-channels/sales-channel-resolver.middleware.d.ts

@@ -0,0 +1,76 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import type { CachedChannel } from './sales-channels-cache.js';
+import type { SalesChannelResolverService } from './sales-channel-resolver.service.js';
+import type { AuditPort } from '../ports/audit.js';
+/**
+ * Sales-channel resolver middleware — feature 005 / T015.
+ *
+ * Runs as a Fastify `onRequest` hook on every `/api/v1/*` request and fills the
+ * request scope's channel slot with the resolved channel (research R-5;
+ * feature 072 T028 moved it off the `request.salesChannel` property, so a
+ * consumer no longer has to be handed the request to know its channel).
+ *
+ * Resolution order:
+ *
+ *   0. Bound api-key actor (feature 062) — the channel derives from the
+ *      key's binding. An explicit header/query signal naming a DIFFERENT
+ *      channel refuses with 403 `API_KEY_CHANNEL_MISMATCH` (audited); an
+ *      unknown/inactive bound channel refuses with the standard
+ *      `UNKNOWN_/INACTIVE_SALES_CHANNEL` — never a fallback.
+ *   1. `X-Sales-Channel: <code>` header
+ *   2. `?salesChannel=<code>` query parameter — IGNORED on
+ *      `/api/v1/admin/*` paths to prevent cross-channel admin bleed.
+ *   3. Host-based mapping (env-configured `SALES_CHANNEL_HOST_MAP`).
+ *   4. System-default fallback — ONLY on storefront / integration
+ *      paths. Admin paths refuse with `MISSING_SALES_CHANNEL_CONTEXT`.
+ *
+ * If a step matches a code that does not exist or is inactive, the
+ * middleware refuses with `UNKNOWN_SALES_CHANNEL` /
+ * `INACTIVE_SALES_CHANNEL`. The fallback NEVER applies in those cases
+ * (FR-014).
+ *
+ * Every response carries `X-Sales-Channel: <resolvedCode>` so HTTP
+ * caches and dev tools can see the effective channel.
+ *
+ * Paths that should bypass resolution entirely (e.g. health checks)
+ * are excluded by the {@link SHOULD_RESOLVE} predicate so liveness
+ * probes do not depend on the channel registry being available.
+ */
+export interface SalesChannelResolverPluginOptions {
+    resolver: SalesChannelResolverService;
+    /**
+     * When true, admin paths refuse with `MISSING_SALES_CHANNEL_CONTEXT`
+     * if no signal resolves to a channel (FR-014 spirit). When false
+     * (default), admin paths fall back to the system default just like
+     * storefront paths so the existing admin UI keeps working until it
+     * is updated to send `X-Sales-Channel` (T034+). The US3 resolver
+     * contract tests (T046) construct a server with `strictAdmin: true`
+     * to exercise the production behaviour.
+     */
+    strictAdmin?: boolean;
+    /**
+     * Feature 062 — sink for the `api_key.channel_mismatch` refusal audit
+     * (bound key named a channel other than its bound one). Optional so
+     * minimal test composition roots keep working.
+     */
+    auditLogService?: AuditPort;
+}
+export declare function registerSalesChannelResolverMiddleware(app: FastifyInstance, options: SalesChannelResolverPluginOptions): Promise<void>;
+/**
+ * The resolved channel for the current execution, or `null` when the resolver
+ * did not run on this path (`/api/v1/_health`, non-API routes) or there is no
+ * request scope at all.
+ *
+ * Takes no argument on purpose: the channel lives on the scope now, so a caller
+ * deep in a service no longer has to be threaded a `FastifyRequest` to read it.
+ */
+export declare function currentSalesChannel(): CachedChannel | null;
+/**
+ * Helper used by route handlers downstream. Throws if not resolved.
+ *
+ * The `request` parameter is retained so the 49 existing call sites keep
+ * compiling unchanged; it is no longer read. New code calls
+ * `getResolvedChannel()` or `currentSalesChannel()`.
+ */
+export declare function getResolvedChannel(_request?: FastifyRequest): CachedChannel;
+//# sourceMappingURL=sales-channel-resolver.middleware.d.ts.map

package/dist/kernel/sales-channels/sales-channel-resolver.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sales-channel-resolver.middleware.d.ts","sourceRoot":"","sources":["../../../src/kernel/sales-channels/sales-channel-resolver.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,cAAc,EAAE,MAAM,SAAS,CAAC;AAI7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AACvF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE,2BAA2B,CAAC;IACtC;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,eAAe,CAAC,EAAE,SAAS,CAAC;CAC7B;AAsCD,wBAAsB,sCAAsC,CAC1D,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,IAAI,CAAC,CA4Gf;AAgDD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,GAAG,IAAI,CAE1D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,aAAa,CAU3E"}