@floristcloud/api-lib 1.2.135 → 1.2.137

package/build/enum/permission-key.enum.js

@@ -21,6 +21,16 @@ var PermissionKeyEnum;
     PermissionKeyEnum["PAGE_PRE_ORDERS_VIEW"] = "page.pre_orders.view";
     PermissionKeyEnum["PAGE_REPORT_VIEW"] = "page.report.view";
     PermissionKeyEnum["PAGE_STAFF_VIEW"] = "page.staff.view";
+    PermissionKeyEnum["ORDER_CREATE"] = "order.create";
+    PermissionKeyEnum["ORDER_EDIT"] = "order.edit";
+    PermissionKeyEnum["ORDER_DELETE"] = "order.delete";
+    // Order-level money edits: discount and delivery cost (скидка и стоимость доставки).
+    PermissionKeyEnum["ORDER_PRICE_EDIT"] = "order.price.edit";
+    PermissionKeyEnum["ORDER_STATUS_CHANGE"] = "order.status.change";
+    PermissionKeyEnum["WRITE_OFF_CREATE"] = "write_off.create";
+    PermissionKeyEnum["WRITE_OFF_DELETE"] = "write_off.delete";
+    // Moving a write-off out of PENDING (принятие / отклонение списания).
+    PermissionKeyEnum["WRITE_OFF_APPROVE"] = "write_off.approve";
 })(PermissionKeyEnum || (exports.PermissionKeyEnum = PermissionKeyEnum = {}));
 exports.PERMISSION_KEY_LIST = [
     PermissionKeyEnum.PRODUCT_VIEW,
@@ -39,4 +49,12 @@ exports.PERMISSION_KEY_LIST = [
     PermissionKeyEnum.PAGE_PRE_ORDERS_VIEW,
     PermissionKeyEnum.PAGE_REPORT_VIEW,
     PermissionKeyEnum.PAGE_STAFF_VIEW,
+    PermissionKeyEnum.ORDER_CREATE,
+    PermissionKeyEnum.ORDER_EDIT,
+    PermissionKeyEnum.ORDER_DELETE,
+    PermissionKeyEnum.ORDER_PRICE_EDIT,
+    PermissionKeyEnum.ORDER_STATUS_CHANGE,
+    PermissionKeyEnum.WRITE_OFF_CREATE,
+    PermissionKeyEnum.WRITE_OFF_DELETE,
+    PermissionKeyEnum.WRITE_OFF_APPROVE,
 ];

package/build/enum/userRole.enum.js

@@ -6,6 +6,8 @@ var UserRoleEnum;
     UserRoleEnum["ADMIN"] = "ADMIN";
     UserRoleEnum["MANAGER"] = "MANAGER";
     UserRoleEnum["EMPLOYEE"] = "EMPLOYEE";
+    // Warehouse worker: the same panel access as EMPLOYEE, but always sees every client of the company.
+    UserRoleEnum["WAREHOUSE_EMPLOYEE"] = "WAREHOUSE_EMPLOYEE";
     UserRoleEnum["BUYER"] = "BUYER";
 })(UserRoleEnum || (exports.UserRoleEnum = UserRoleEnum = {}));
 var UserPanelRoleEnum;
@@ -13,5 +15,11 @@ var UserPanelRoleEnum;
     UserPanelRoleEnum["ADMIN"] = "ADMIN";
     UserPanelRoleEnum["MANAGER"] = "MANAGER";
     UserPanelRoleEnum["EMPLOYEE"] = "EMPLOYEE";
+    UserPanelRoleEnum["WAREHOUSE_EMPLOYEE"] = "WAREHOUSE_EMPLOYEE";
 })(UserPanelRoleEnum || (exports.UserPanelRoleEnum = UserPanelRoleEnum = {}));
-exports.USER_PANEL_ROLE_LIST = [UserRoleEnum.ADMIN, UserRoleEnum.MANAGER, UserRoleEnum.EMPLOYEE];
+exports.USER_PANEL_ROLE_LIST = [
+    UserRoleEnum.ADMIN,
+    UserRoleEnum.MANAGER,
+    UserRoleEnum.EMPLOYEE,
+    UserRoleEnum.WAREHOUSE_EMPLOYEE,
+];

package/build/schemas/access-policy/access-policy.schema.js

@@ -9,7 +9,11 @@ const userRole_enum_1 = require("../../enum/userRole.enum");
  * it always bypasses UI restrictions, so any ADMIN entry in a policy is dead
  * config. The admin panel must not offer it, and the sanitizer drops it.
  */
-exports.CONFIGURABLE_PANEL_ROLE_LIST = [userRole_enum_1.UserPanelRoleEnum.MANAGER, userRole_enum_1.UserPanelRoleEnum.EMPLOYEE];
+exports.CONFIGURABLE_PANEL_ROLE_LIST = [
+    userRole_enum_1.UserPanelRoleEnum.MANAGER,
+    userRole_enum_1.UserPanelRoleEnum.EMPLOYEE,
+    userRole_enum_1.UserPanelRoleEnum.WAREHOUSE_EMPLOYEE,
+];
 /**
  * A sparse map of permission key -> boolean.
  * Semantics are default-allow: a missing key means "allowed", so in practice

package/build/schemas/attribute-normalization/normalization-summary.schema.js

@@ -10,7 +10,8 @@ const product_image_duplicate_forecast_schema_1 = require("./product-image-dupli
 exports.NormalizationSummarySchema = zod_1.z.object({
     // Уникальных написаний по каждому атрибуту.
     uniqueValues: zod_1.z.partialRecord(zod_1.z.nativeEnum(normalized_attribute_enum_1.NormalizedAttributeEnum), zod_1.z.number()),
-    // Строк к изменению по каждой таблице, если принять все предложения.
+    // Строк к изменению по каждой таблице, если принять все предложения. Считается по строкам:
+    // строка, у которой меняются и цвет, и страна, — это одна строка, а не две.
     affectedRows: normalization_row_count_schema_1.NormalizationRowCountSchema,
     // Строк, которые прогон пропустит из-за того, что позиция закрыта. Нужно фронту, чтобы
     // предложить включить их флагом: по умолчанию закрытая история не трогается.

package/enum/permission-key.enum.ts

@@ -17,6 +17,16 @@ export enum PermissionKeyEnum {
     PAGE_PRE_ORDERS_VIEW = 'page.pre_orders.view',
     PAGE_REPORT_VIEW = 'page.report.view',
     PAGE_STAFF_VIEW = 'page.staff.view',
+    ORDER_CREATE = 'order.create',
+    ORDER_EDIT = 'order.edit',
+    ORDER_DELETE = 'order.delete',
+    // Order-level money edits: discount and delivery cost (скидка и стоимость доставки).
+    ORDER_PRICE_EDIT = 'order.price.edit',
+    ORDER_STATUS_CHANGE = 'order.status.change',
+    WRITE_OFF_CREATE = 'write_off.create',
+    WRITE_OFF_DELETE = 'write_off.delete',
+    // Moving a write-off out of PENDING (принятие / отклонение списания).
+    WRITE_OFF_APPROVE = 'write_off.approve',
 }
 
 export const PERMISSION_KEY_LIST: PermissionKeyEnum[] = [
@@ -36,4 +46,12 @@ export const PERMISSION_KEY_LIST: PermissionKeyEnum[] = [
     PermissionKeyEnum.PAGE_PRE_ORDERS_VIEW,
     PermissionKeyEnum.PAGE_REPORT_VIEW,
     PermissionKeyEnum.PAGE_STAFF_VIEW,
+    PermissionKeyEnum.ORDER_CREATE,
+    PermissionKeyEnum.ORDER_EDIT,
+    PermissionKeyEnum.ORDER_DELETE,
+    PermissionKeyEnum.ORDER_PRICE_EDIT,
+    PermissionKeyEnum.ORDER_STATUS_CHANGE,
+    PermissionKeyEnum.WRITE_OFF_CREATE,
+    PermissionKeyEnum.WRITE_OFF_DELETE,
+    PermissionKeyEnum.WRITE_OFF_APPROVE,
 ];

package/enum/userRole.enum.ts

@@ -2,6 +2,8 @@ export enum UserRoleEnum {
     ADMIN = 'ADMIN',
     MANAGER = 'MANAGER',
     EMPLOYEE = 'EMPLOYEE',
+    // Warehouse worker: the same panel access as EMPLOYEE, but always sees every client of the company.
+    WAREHOUSE_EMPLOYEE = 'WAREHOUSE_EMPLOYEE',
     BUYER = 'BUYER',
 }
 
@@ -9,6 +11,12 @@ export enum UserPanelRoleEnum {
     ADMIN = 'ADMIN',
     MANAGER = 'MANAGER',
     EMPLOYEE = 'EMPLOYEE',
+    WAREHOUSE_EMPLOYEE = 'WAREHOUSE_EMPLOYEE',
 }
 
-export const USER_PANEL_ROLE_LIST: UserRoleEnum[] = [UserRoleEnum.ADMIN, UserRoleEnum.MANAGER, UserRoleEnum.EMPLOYEE];
+export const USER_PANEL_ROLE_LIST: UserRoleEnum[] = [
+    UserRoleEnum.ADMIN,
+    UserRoleEnum.MANAGER,
+    UserRoleEnum.EMPLOYEE,
+    UserRoleEnum.WAREHOUSE_EMPLOYEE,
+];

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@floristcloud/api-lib",
-    "version": "1.2.135",
+    "version": "1.2.137",
     "description": "",
     "main": "./build/index.js",
     "scripts": {

package/schemas/access-policy/access-policy.schema.ts

@@ -7,7 +7,11 @@ import { UserPanelRoleEnum } from '../../enum/userRole.enum';
  * it always bypasses UI restrictions, so any ADMIN entry in a policy is dead
  * config. The admin panel must not offer it, and the sanitizer drops it.
  */
-export const CONFIGURABLE_PANEL_ROLE_LIST: UserPanelRoleEnum[] = [UserPanelRoleEnum.MANAGER, UserPanelRoleEnum.EMPLOYEE];
+export const CONFIGURABLE_PANEL_ROLE_LIST: UserPanelRoleEnum[] = [
+    UserPanelRoleEnum.MANAGER,
+    UserPanelRoleEnum.EMPLOYEE,
+    UserPanelRoleEnum.WAREHOUSE_EMPLOYEE,
+];
 
 /**
  * A sparse map of permission key -> boolean.

package/schemas/attribute-normalization/normalization-summary.schema.ts

@@ -8,7 +8,8 @@ import { ProductImageDuplicateForecastSchema } from './product-image-duplicate-f
 export const NormalizationSummarySchema = z.object({
     // Уникальных написаний по каждому атрибуту.
     uniqueValues: z.partialRecord(z.nativeEnum(NormalizedAttributeEnum), z.number()),
-    // Строк к изменению по каждой таблице, если принять все предложения.
+    // Строк к изменению по каждой таблице, если принять все предложения. Считается по строкам:
+    // строка, у которой меняются и цвет, и страна, — это одна строка, а не две.
     affectedRows: NormalizationRowCountSchema,
     // Строк, которые прогон пропустит из-за того, что позиция закрыта. Нужно фронту, чтобы
     // предложить включить их флагом: по умолчанию закрытая история не трогается.