@mostajs/ticketing 1.0.0

package/README.md

@@ -0,0 +1,479 @@
+# @mostajs/ticketing
+
+> Reusable ticketing module — ticket lifecycle, scan validation, quota management, API route factories.
+
+[![npm version](https://img.shields.io/npm/v/@mostajs/ticketing.svg)](https://www.npmjs.com/package/@mostajs/ticketing)
+[![license](https://img.shields.io/npm/l/@mostajs/ticketing.svg)](LICENSE)
+
+Part of the [@mosta suite](https://mostajs.dev). Depends only on `@mostajs/orm`. **Zero coupling** with auth, RBAC, or any framework beyond standard `Request`/`Response`.
+
+---
+
+## Table des matieres
+
+1. [Installation](#installation)
+2. [Concepts cles](#concepts-cles)
+3. [Quick Start (5 etapes)](#quick-start)
+4. [Formats de codes supportes](#formats-de-codes)
+5. [API Route Factories](#api-route-factories)
+6. [Core Logic (fonctions pures)](#core-logic)
+7. [Schemas & Repositories](#schemas--repositories)
+8. [Integration complete dans une nouvelle app](#integration-complete)
+9. [API Reference](#api-reference)
+10. [Architecture](#architecture)
+
+---
+
+## Installation
+
+```bash
+npm install @mostajs/ticketing
+```
+
+Prerequis : `@mostajs/orm` doit etre configure avec votre base de donnees.
+
+---
+
+## Concepts cles
+
+### Cycle de vie d'un ticket
+
+```
+[create] → active → [scan] → used → (expired)
+                 ↑           ↓
+                 └── day_reentry (re-scan meme jour)
+```
+
+### Modes de validite
+
+| Mode | Comportement |
+|------|-------------|
+| `single_use` | Un seul scan, puis `used` |
+| `day_reentry` | Re-entree illimitee le meme jour, quota decremente une seule fois |
+| `time_slot` | Valide pendant N minutes apres creation |
+| `unlimited` | Pas d'expiration |
+
+### Quota
+
+- `totalQuota` : nombre total de tickets autorise pour un acces
+- `remainingQuota` : decremente a chaque scan (sauf re-entrees day_reentry)
+- Status `depleted` automatique quand quota atteint 0
+
+### Formats de codes
+
+Le champ `codeFormat` permet de generer et scanner differents types de codes :
+
+| Format | Type | Usage typique |
+|--------|------|--------------|
+| `qrcode` | 2D | Le plus courant, haute capacite |
+| `code128` | 1D | Alphanumerique, logistique |
+| `code39` | 1D | Alphanumerique, industrie |
+| `ean13` | 1D | 13 chiffres, retail Europe |
+| `ean8` | 1D | 8 chiffres, petits produits |
+| `upc_a` | 1D | 12 chiffres, retail USA |
+| `itf` | 1D | Paires numeriques, colis |
+| `pdf417` | 2D | Haute capacite, cartes d'identite |
+| `datamatrix` | 2D | Petit format, composants |
+| `aztec` | 2D | Compact, cartes d'embarquement |
+
+---
+
+## Quick Start
+
+### Etape 1 — Enregistrer les schemas
+
+```typescript
+// src/dal/registry.ts
+import { registerSchema } from '@mostajs/orm'
+import {
+  TicketSchema,
+  ClientAccessSchema,
+  ScanLogSchema,
+  ActivitySchema,
+  SubscriptionPlanSchema,
+  CounterSchema,
+} from '@mostajs/ticketing'
+
+registerSchema(TicketSchema)
+registerSchema(ClientAccessSchema)
+registerSchema(ScanLogSchema)
+registerSchema(ActivitySchema)
+registerSchema(SubscriptionPlanSchema)
+registerSchema(CounterSchema)
+```
+
+### Etape 2 — Instancier les repositories
+
+```typescript
+// src/dal/service.ts
+import { getDialect } from '@mostajs/orm'
+import {
+  TicketRepository,
+  ClientAccessRepository,
+  ScanLogRepository,
+  ActivityRepository,
+  SubscriptionPlanRepository,
+} from '@mostajs/ticketing'
+
+export async function ticketRepo() {
+  return new TicketRepository(await getDialect())
+}
+export async function clientAccessRepo() {
+  return new ClientAccessRepository(await getDialect())
+}
+export async function scanLogRepo() {
+  return new ScanLogRepository(await getDialect())
+}
+export async function activityRepo() {
+  return new ActivityRepository(await getDialect())
+}
+export async function planRepo() {
+  return new SubscriptionPlanRepository(await getDialect())
+}
+```
+
+### Etape 3 — Route scan (POST /api/scan)
+
+```typescript
+// src/app/api/scan/route.ts
+import { createScanHandler } from '@mostajs/ticketing/api/scan.route'
+import { ticketRepo, clientAccessRepo, scanLogRepo, clientRepo } from '@/dal/service'
+import { checkPermission } from '@/lib/authCheck'
+
+export const { POST } = createScanHandler({
+  checkAuth: async () => {
+    const { error, session } = await checkPermission('scan:validate')
+    return { error: error || null, userId: session?.user?.id || '' }
+  },
+
+  getRepositories: async () => ({
+    ticketRepo: await ticketRepo(),
+    clientAccessRepo: await clientAccessRepo(),
+    scanLogRepo: await scanLogRepo(),
+    clientRepo: await clientRepo(),
+  }),
+
+  // Optionnel : audit apres scan reussi
+  onGranted: async ({ ticket, client, isReentry, userId }) => {
+    console.log(`Scan ${isReentry ? 'reentry' : 'granted'}: ${ticket.ticketNumber}`)
+  },
+})
+```
+
+### Etape 4 — Route tickets (GET + POST /api/tickets)
+
+```typescript
+// src/app/api/tickets/route.ts
+import { createTicketsHandler } from '@mostajs/ticketing/api/tickets.route'
+import { ticketRepo, clientRepo, clientAccessRepo, activityRepo } from '@/dal/service'
+import { checkPermission } from '@/lib/authCheck'
+
+export const { GET, POST } = createTicketsHandler({
+  checkAuth: async (req, permission) => {
+    const { error, session } = await checkPermission(permission)
+    return { error: error || null, userId: session?.user?.id || '' }
+  },
+
+  getRepositories: async () => ({
+    ticketRepo: await ticketRepo(),
+    clientRepo: await clientRepo(),
+    clientAccessRepo: await clientAccessRepo(),
+    activityRepo: await activityRepo(),
+  }),
+
+  // Format de code par defaut pour les nouveaux tickets
+  defaultCodeFormat: 'qrcode',
+
+  // Optionnel : callback apres creation
+  onCreated: async ({ ticket, userId }) => {
+    console.log(`Ticket ${ticket.ticketNumber} cree`)
+  },
+})
+```
+
+### Etape 5 — Tester
+
+```bash
+# Creer un ticket
+curl -X POST http://localhost:3000/api/tickets \
+  -H 'Content-Type: application/json' \
+  -d '{"clientId": "abc", "activityId": "xyz"}'
+
+# Scanner un ticket
+curl -X POST http://localhost:3000/api/scan \
+  -H 'Content-Type: application/json' \
+  -d '{"code": "uuid-du-ticket"}'
+
+# Avec un code-barres specifique
+curl -X POST http://localhost:3000/api/tickets \
+  -H 'Content-Type: application/json' \
+  -d '{"clientId": "abc", "activityId": "xyz", "codeFormat": "code128"}'
+```
+
+---
+
+## API Route Factories
+
+### createScanHandler(config)
+
+| Option | Type | Description |
+|--------|------|-------------|
+| `getRepositories` | `() => Promise<{...}>` | Fournit ticketRepo, clientAccessRepo, scanLogRepo, clientRepo |
+| `checkAuth` | `(req) => Promise<{error, userId}>` | Verifie auth + permissions |
+| `onGranted?` | `(data) => Promise<void>` | Callback apres scan reussi (audit, notifications) |
+| `onDenied?` | `(data) => Promise<void>` | Callback apres scan refuse (alertes) |
+
+**Requete :**
+```json
+POST /api/scan
+{ "code": "uuid-or-barcode-value", "scanMethod": "webcam" }
+```
+
+**Reponse (granted) :**
+```json
+{
+  "data": {
+    "result": "granted",
+    "isReentry": false,
+    "ticket": { "ticketNumber": "TKT-20260306-0001", "clientName": "Alice Dupont", ... },
+    "client": { "name": "Alice Dupont", "photo": "/photos/alice.jpg" },
+    "access": { "remainingQuota": 9, "totalQuota": 10, "status": "active" }
+  }
+}
+```
+
+**Reponse (denied) :**
+```json
+{
+  "data": {
+    "result": "denied",
+    "reason": "ticket_already_used",
+    "ticket": { "ticketNumber": "TKT-20260306-0001", ... }
+  }
+}
+```
+
+### createTicketsHandler(config)
+
+| Option | Type | Description |
+|--------|------|-------------|
+| `getRepositories` | `() => Promise<{...}>` | Fournit ticketRepo, clientRepo, clientAccessRepo, activityRepo |
+| `checkAuth` | `(req, permission) => Promise<{error, userId}>` | Auth avec nom de permission (`ticket:view`, `ticket:create`) |
+| `onCreated?` | `(data) => Promise<void>` | Callback apres creation ticket |
+| `defaultCodeFormat?` | `CodeFormat` | Format de code par defaut (defaut: `'qrcode'`) |
+
+---
+
+## Core Logic
+
+Fonctions pures, utilisables partout (serveur, worker, CLI, tests) :
+
+### processScan(code, scanMethod, scannedBy, deps)
+
+Pipeline 8 etapes de validation. Toute l'I/O est injectee via `deps`.
+
+```typescript
+import { processScan } from '@mostajs/ticketing'
+import type { ScanDeps } from '@mostajs/ticketing'
+
+const deps: ScanDeps = {
+  findTicketByCode: async (code) => db.tickets.findOne({ code }),
+  findAccessById: async (id) => db.accesses.findById(id),
+  findClientById: async (id) => db.clients.findById(id),
+  wasScannedToday: async (ticketId) => { /* ... */ },
+  updateTicket: async (id, data) => db.tickets.update(id, data),
+  updateAccess: async (id, data) => db.accesses.update(id, data),
+  createScanLog: async (data) => db.scanLogs.create(data),
+  resolveId: (ref) => typeof ref === 'string' ? ref : ref.id,
+  formatClientName: (c) => `${c.firstName} ${c.lastName}`,
+}
+
+const result = await processScan('ticket-uuid', 'webcam', 'user-123', deps)
+```
+
+### computeValidUntil(mode, durationMinutes)
+
+```typescript
+import { computeValidUntil } from '@mostajs/ticketing'
+
+computeValidUntil('day_reentry', null)  // → fin de journee (23:59:59)
+computeValidUntil('time_slot', 90)      // → now + 90 minutes
+computeValidUntil('single_use', null)   // → null
+```
+
+### decrementQuota(remainingQuota)
+
+```typescript
+import { decrementQuota } from '@mostajs/ticketing'
+
+decrementQuota(5)    // → { remainingQuota: 4 }
+decrementQuota(1)    // → { remainingQuota: 0, status: 'depleted' }
+decrementQuota(null) // → null (unlimited)
+```
+
+---
+
+## Schemas & Repositories
+
+### Schemas disponibles
+
+| Schema | Collection | Description |
+|--------|-----------|-------------|
+| `TicketSchema` | `tickets` | Ticket avec code (QR/barcode), validite, statut |
+| `ClientAccessSchema` | `client_accesses` | Acces client-activite avec quota |
+| `ScanLogSchema` | `scan_logs` | Journal des scans (granted/denied) |
+| `ActivitySchema` | `activities` | Activites avec planning et mode de validite |
+| `SubscriptionPlanSchema` | `subscription_plans` | Plans d'abonnement |
+| `CounterSchema` | `counters` | Auto-increment interne |
+
+### Repositories
+
+| Repository | Methodes cles |
+|-----------|--------------|
+| `TicketRepository` | `createWithAutoFields()`, `findByCode()`, `markUsed()`, `countByAccess()` |
+| `ClientAccessRepository` | `findActiveAccess()`, `decrementQuota()`, `block()` |
+| `ScanLogRepository` | `wasScannedToday()`, `countToday()`, `findDistinctClientsToday()` |
+| `ActivityRepository` | `findActive()`, `findBySlug()`, `findAllOrdered()` |
+| `SubscriptionPlanRepository` | `findActive()`, `findAllWithActivities()` |
+
+---
+
+## Integration complete
+
+### Nouvelle app Next.js depuis zero
+
+```bash
+# 1. Creer le projet
+npx create-next-app@latest my-ticketing-app
+cd my-ticketing-app
+
+# 2. Installer
+npm install @mostajs/orm @mostajs/ticketing
+
+# 3. Configurer la DB
+echo 'DATABASE_URL=mongodb://localhost:27017/myapp' >> .env.local
+
+# 4. Enregistrer les schemas dans src/dal/registry.ts
+# 5. Creer les repo helpers dans src/dal/service.ts
+# 6. Creer les routes API (2 fichiers, ~30 lignes chacun)
+# 7. npm run dev
+```
+
+### Avec audit (@mostajs/audit)
+
+```typescript
+import { createScanHandler } from '@mostajs/ticketing/api/scan.route'
+import { logAudit, getAuditUser } from '@mostajs/audit/lib/audit'
+
+export const { POST } = createScanHandler({
+  // ...
+  onGranted: async ({ ticket, client, isReentry, userId }) => {
+    await logAudit({
+      userId,
+      action: isReentry ? 'scan_reentry' : 'scan_granted',
+      module: 'scan',
+      resource: ticket.ticketNumber,
+    })
+  },
+  onDenied: async ({ reason, ticket, userId }) => {
+    await logAudit({
+      userId,
+      action: 'scan_denied',
+      module: 'scan',
+      resource: ticket?.ticketNumber,
+      details: { reason },
+    })
+  },
+})
+```
+
+### Avec un scanner de code-barres physique
+
+```typescript
+// Le scanner physique envoie le meme POST /api/scan
+// Seul le scanMethod change
+fetch('/api/scan', {
+  method: 'POST',
+  body: JSON.stringify({
+    code: 'TKT-20260306-0001',  // valeur lue par le scanner
+    scanMethod: 'handheld_scanner',
+  }),
+})
+```
+
+---
+
+## API Reference
+
+### Types
+
+| Type | Description |
+|------|-------------|
+| `CodeFormat` | `'qrcode' \| 'code128' \| 'code39' \| 'ean13' \| 'ean8' \| 'upc_a' \| 'itf' \| 'pdf417' \| 'datamatrix' \| 'aztec'` |
+| `ValidityMode` | `'day_reentry' \| 'single_use' \| 'time_slot' \| 'unlimited'` |
+| `TicketStatus` | `'active' \| 'used' \| 'expired' \| 'cancelled'` |
+| `ScanResult` | `'granted' \| 'denied'` |
+| `ScanMethod` | `'webcam' \| 'pwa_camera' \| 'handheld_scanner' \| 'nfc'` |
+| `AccessType` | `'unlimited' \| 'count' \| 'temporal' \| 'mixed'` |
+| `DenyReason` | `'invalid_ticket' \| 'ticket_already_used' \| 'ticket_expired' \| 'ticket_cancelled' \| 'quota_depleted' \| 'access_expired' \| 'client_suspended'` |
+| `ScanDeps` | Interface d'injection pour `processScan()` |
+| `ScanHandlerConfig` | Config de `createScanHandler()` |
+| `TicketsHandlerConfig` | Config de `createTicketsHandler()` |
+
+---
+
+## Architecture
+
+```
+@mostajs/ticketing
+├── schemas/
+│   ├── ticket.schema.ts          # Ticket (code multi-format, validite, statut)
+│   ├── client-access.schema.ts   # Acces client-activite avec quota
+│   ├── scan-log.schema.ts        # Journal des scans
+│   ├── activity.schema.ts        # Activites (planning, mode validite)
+│   ├── subscription-plan.schema.ts # Plans d'abonnement
+│   └── counter.schema.ts         # Auto-increment sequences
+├── repositories/
+│   ├── ticket.repository.ts      # CRUD + findByCode, createWithAutoFields
+│   ├── client-access.repository.ts # Quota, findActiveAccess
+│   ├── scan-log.repository.ts    # wasScannedToday, countToday
+│   ├── activity.repository.ts    # findActive, findBySlug
+│   └── subscription-plan.repository.ts
+├── lib/
+│   ├── scan-processor.ts         # Pipeline 8 etapes (pure, injectable)
+│   ├── validity-checker.ts       # computeValidUntil, isExpired
+│   └── quota-manager.ts          # decrementQuota, wouldExceedQuota
+├── api/
+│   ├── scan.route.ts             # Factory createScanHandler(config)
+│   └── tickets.route.ts          # Factory createTicketsHandler(config)
+├── types/
+│   └── index.ts                  # CodeFormat, ValidityMode, ScanDeps, etc.
+└── index.ts                      # Barrel exports
+
+Dependances:
+  @mostajs/orm   (seule dep runtime)
+  next >= 14     (peer, optionnel)
+
+Zero dependance sur: @mostajs/auth, @mostajs/rbac, @mostajs/audit
+(l'app injecte ses propres callbacks auth/audit)
+```
+
+### Pattern Factory (injection de dependances)
+
+```
+┌──────────────────────┐     inject callbacks      ┌──────────────────────┐
+│  @mostajs/ticketing   │ ◄──────────────────────── │   Votre app          │
+│                       │                            │                      │
+│ createScanHandler({   │                            │ checkAuth: () =>     │
+│   checkAuth,          │                            │   verifyToken(...)   │
+│   getRepositories,    │                            │ getRepositories: ()  │
+│   onGranted,          │                            │   => { ticketRepo,   │
+│ })                    │                            │     scanLogRepo }    │
+└──────────────────────┘                            └──────────────────────┘
+```
+
+---
+
+## License
+
+MIT — Dr Hamid MADANI <drmdh@msn.com>

package/dist/api/scan.route.d.ts

@@ -0,0 +1,16 @@
+import type { ScanHandlerConfig } from '../types/index';
+/**
+ * Factory: creates a POST handler for ticket scanning.
+ *
+ * The host app injects its repositories, auth check, and optional audit callbacks.
+ *
+ * ```ts
+ * // src/app/api/scan/route.ts
+ * import { createScanHandler } from '@mostajs/ticketing/api/scan.route'
+ * export const { POST } = createScanHandler({ ... })
+ * ```
+ */
+export declare function createScanHandler(config: ScanHandlerConfig): {
+    POST: (req: Request) => Promise<Response>;
+};
+//# sourceMappingURL=scan.route.d.ts.map

package/dist/api/scan.route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.route.d.ts","sourceRoot":"","sources":["../../api/scan.route.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAc,MAAM,gBAAgB,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB;gBAChC,OAAO;EAmEjC"}

package/dist/api/scan.route.js

@@ -0,0 +1,75 @@
+// @mostajs/ticketing — Scan route factory
+// Author: Dr Hamid MADANI drmdh@msn.com
+import { processScan } from '../lib/scan-processor';
+/**
+ * Factory: creates a POST handler for ticket scanning.
+ *
+ * The host app injects its repositories, auth check, and optional audit callbacks.
+ *
+ * ```ts
+ * // src/app/api/scan/route.ts
+ * import { createScanHandler } from '@mostajs/ticketing/api/scan.route'
+ * export const { POST } = createScanHandler({ ... })
+ * ```
+ */
+export function createScanHandler(config) {
+    async function POST(req) {
+        const { error, userId } = await config.checkAuth(req);
+        if (error)
+            return error;
+        const body = await req.json();
+        const { code, qrCode, scanMethod = 'webcam' } = body;
+        // Support both "code" (generic) and "qrCode" (legacy) field names
+        const codeValue = code || qrCode;
+        if (!codeValue) {
+            return Response.json({ error: { code: 'INVALID', message: 'Code manquant' } }, { status: 400 });
+        }
+        const repos = await config.getRepositories();
+        const resolveId = (ref) => {
+            if (!ref)
+                return '';
+            if (typeof ref === 'string')
+                return ref;
+            return ref.id ?? ref._id ?? String(ref);
+        };
+        const result = await processScan(codeValue, scanMethod, userId, {
+            findTicketByCode: (c) => repos.ticketRepo.findByCode?.(c) ?? repos.ticketRepo.findOne({ code: c }),
+            findAccessById: (id) => repos.clientAccessRepo.findById(id),
+            findClientById: (id) => repos.clientRepo.findById(id),
+            wasScannedToday: async (ticketId) => {
+                const start = new Date();
+                start.setHours(0, 0, 0, 0);
+                const log = await repos.scanLogRepo.findOne({
+                    ticket: ticketId,
+                    result: 'granted',
+                    timestamp: { $gte: start },
+                });
+                return log !== null;
+            },
+            updateTicket: (id, data) => repos.ticketRepo.update(id, data),
+            updateAccess: (id, data) => repos.clientAccessRepo.update(id, data),
+            createScanLog: (data) => repos.scanLogRepo.create(data),
+            resolveId,
+            formatClientName: (client) => `${client.firstName} ${client.lastName}`,
+        });
+        if (result.result === 'granted' && config.onGranted) {
+            await config.onGranted({
+                ticket: result.ticket,
+                client: result.client,
+                access: result.access,
+                isReentry: result.isReentry,
+                userId,
+            });
+        }
+        if (result.result === 'denied' && config.onDenied) {
+            await config.onDenied({
+                reason: result.reason,
+                ticket: result.ticket,
+                userId,
+            });
+        }
+        return Response.json({ data: result });
+    }
+    return { POST };
+}
+//# sourceMappingURL=scan.route.js.map

package/dist/api/scan.route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.route.js","sourceRoot":"","sources":["../../api/scan.route.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,wCAAwC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,KAAK,UAAU,IAAI,CAAC,GAAY;QAC9B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAExB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;QAErD,kEAAkE;QAClE,MAAM,SAAS,GAAG,IAAI,IAAI,MAAM,CAAC;QACjC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EACxD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;QAE7C,MAAM,SAAS,GAAG,CAAC,GAAQ,EAAU,EAAE;YACrC,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,CAAC;YACpB,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,OAAO,GAAG,CAAC;YACxC,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,UAAwB,EAAE,MAAM,EAAE;YAC5E,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAClG,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBAClC,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;gBACzB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC3B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC;oBAC1C,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;iBAC3B,CAAC,CAAC;gBACH,OAAO,GAAG,KAAK,IAAI,CAAC;YACtB,CAAC;YACD,YAAY,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC;YAC7D,YAAY,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC;YACnE,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;YACvD,SAAS;YACT,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,EAAE;SACvE,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACpD,MAAM,MAAM,CAAC,SAAS,CAAC;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClD,MAAM,MAAM,CAAC,QAAQ,CAAC;gBACpB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC"}

package/dist/api/tickets.route.d.ts

@@ -0,0 +1,15 @@
+import type { TicketsHandlerConfig } from '../types/index';
+/**
+ * Factory: creates GET + POST handlers for ticket management.
+ *
+ * ```ts
+ * // src/app/api/tickets/route.ts
+ * import { createTicketsHandler } from '@mostajs/ticketing/api/tickets.route'
+ * export const { GET, POST } = createTicketsHandler({ ... })
+ * ```
+ */
+export declare function createTicketsHandler(config: TicketsHandlerConfig): {
+    GET: (req: Request) => Promise<Response>;
+    POST: (req: Request) => Promise<Response>;
+};
+//# sourceMappingURL=tickets.route.d.ts.map

package/dist/api/tickets.route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tickets.route.d.ts","sourceRoot":"","sources":["../../api/tickets.route.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAc,MAAM,gBAAgB,CAAC;AAEvE;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB;eAEvC,OAAO;gBAmBN,OAAO;EA+EjC"}

package/dist/api/tickets.route.js

@@ -0,0 +1,91 @@
+// @mostajs/ticketing — Tickets route factory (GET list + POST create)
+// Author: Dr Hamid MADANI drmdh@msn.com
+import { computeValidUntil } from '../lib/validity-checker';
+import { wouldExceedQuota } from '../lib/quota-manager';
+/**
+ * Factory: creates GET + POST handlers for ticket management.
+ *
+ * ```ts
+ * // src/app/api/tickets/route.ts
+ * import { createTicketsHandler } from '@mostajs/ticketing/api/tickets.route'
+ * export const { GET, POST } = createTicketsHandler({ ... })
+ * ```
+ */
+export function createTicketsHandler(config) {
+    async function GET(req) {
+        const { error } = await config.checkAuth(req, 'ticket:view');
+        if (error)
+            return error;
+        const url = new URL(req.url);
+        const clientId = url.searchParams.get('clientId');
+        const status = url.searchParams.get('status');
+        const limit = parseInt(url.searchParams.get('limit') || '50');
+        const filter = {};
+        if (clientId)
+            filter.client = clientId;
+        if (status)
+            filter.status = status;
+        const repos = await config.getRepositories();
+        const tickets = await repos.ticketRepo.findAll(filter, { sort: { createdAt: -1 }, limit });
+        return Response.json({ data: tickets });
+    }
+    async function POST(req) {
+        const { error, userId } = await config.checkAuth(req, 'ticket:create');
+        if (error)
+            return error;
+        const body = await req.json();
+        const { clientId, activityId, ticketType = 'standard', sourceClientId, amount = 0, codeFormat } = body;
+        if (!clientId || !activityId) {
+            return Response.json({ error: { code: 'VALIDATION_ERROR', message: 'clientId et activityId requis' } }, { status: 400 });
+        }
+        // For gift tickets, the access check is on the sourceClient
+        const accessClientId = ticketType === 'cadeau' && sourceClientId ? sourceClientId : clientId;
+        const repos = await config.getRepositories();
+        const [client, activity, clientAccess] = await Promise.all([
+            repos.clientRepo.findById(clientId),
+            repos.activityRepo.findById(activityId),
+            repos.clientAccessRepo.findActiveAccess(accessClientId, activityId),
+        ]);
+        if (!client) {
+            return Response.json({ error: { code: 'NOT_FOUND', message: 'Client non trouvé' } }, { status: 404 });
+        }
+        if (!activity) {
+            return Response.json({ error: { code: 'NOT_FOUND', message: 'Activité non trouvée' } }, { status: 404 });
+        }
+        if (!clientAccess) {
+            return Response.json({ error: { code: 'NO_ACCESS', message: "Ce client n'a pas accès à cette activité" } }, { status: 403 });
+        }
+        // Check quota
+        if (clientAccess.totalQuota != null) {
+            const ticketCount = await repos.ticketRepo.countByAccess(clientAccess.id);
+            if (wouldExceedQuota(clientAccess.totalQuota, ticketCount)) {
+                return Response.json({ error: { code: 'QUOTA_EXCEEDED', message: `Quota atteint : ${ticketCount}/${clientAccess.totalQuota} tickets` } }, { status: 403 });
+            }
+        }
+        // Gift tickets don't expire (usable another day)
+        const validUntil = ticketType === 'cadeau'
+            ? null
+            : computeValidUntil(activity.ticketValidityMode, activity.ticketDuration);
+        const resolvedFormat = codeFormat || config.defaultCodeFormat || 'qrcode';
+        const ticket = await repos.ticketRepo.createWithAutoFields({
+            client: clientId,
+            clientAccess: clientAccess.id,
+            activity: activityId,
+            ticketType,
+            sourceClient: ticketType === 'cadeau' ? sourceClientId : null,
+            clientName: `${client.firstName} ${client.lastName}`,
+            activityName: activity.name,
+            validityMode: activity.ticketValidityMode,
+            validUntil: validUntil?.toISOString() || null,
+            amount,
+            codeFormat: resolvedFormat,
+            createdBy: userId,
+        });
+        if (config.onCreated) {
+            await config.onCreated({ ticket, userId });
+        }
+        return Response.json({ data: ticket }, { status: 201 });
+    }
+    return { GET, POST };
+}
+//# sourceMappingURL=tickets.route.js.map