@fonderie/customers 6.1.4 → 6.1.6

package/dist/index.js

@@ -1042,11 +1042,23 @@ var CustomerLabelModel = class {
       [type]
     );
   }
-  remove(id) {
-    return this.store.query(
-      `DELETE FROM fonderie_customer_labels WHERE id = $1`,
+  /**
+   * Returns false when the label is still referenced. Labels are a SHARED
+   * table (no workspace column), so an unconditional delete would let one
+   * tenant destroy a label other tenants' emails/phones/addresses point at.
+   * Until labels are workspace-scoped, only an unreferenced label may go.
+   */
+  async remove(id) {
+    const rows = await this.store.query(
+      `DELETE FROM fonderie_customer_labels l
+			 WHERE l.id = $1
+			   AND NOT EXISTS (SELECT 1 FROM fonderie_customer_emails    WHERE label_id = l.id)
+			   AND NOT EXISTS (SELECT 1 FROM fonderie_customer_phones    WHERE label_id = l.id)
+			   AND NOT EXISTS (SELECT 1 FROM fonderie_customer_addresses WHERE label_id = l.id)
+			 RETURNING l.id`,
       [id]
-    ).then(() => void 0);
+    );
+    return rows.length > 0;
   }
   async findOrCreate(type, raw) {
     const value = raw.trim().toLowerCase();
@@ -2159,7 +2171,14 @@ function customerLabelController(store) {
       if (!isUuid(labelId)) {
         return setApiResponse7(HTTP7.UNPROCESSABLE, "INVALID_PARAMETER", "labelId must be a valid UUID");
       }
-      await labels.remove(labelId);
+      const removed = await labels.remove(labelId);
+      if (!removed) {
+        return setApiResponse7(
+          HTTP7.CONFLICT,
+          "LABEL_IN_USE",
+          "Label is still referenced by customer records and cannot be deleted."
+        );
+      }
       return setApiResponse7(HTTP7.OK, "LABEL_DELETED", "Label deleted successfully.");
     }
   };