@naisys/erp 3.0.0-beta.46 → 3.0.0-beta.47

package/client-dist/index.html

@@ -45,7 +45,7 @@
     <meta name="format-detection" content="telephone=no" />
 
     <title>NAISYS ERP</title>
-    <script type="module" crossorigin src="/erp/assets/index-BWVp_WEm.js"></script>
+    <script type="module" crossorigin src="/erp/assets/index-Bu_bS_Vd.js"></script>
     <link rel="modulepreload" crossorigin href="/erp/assets/rolldown-runtime-CvHMtSRF.js">
     <link rel="modulepreload" crossorigin href="/erp/assets/vendor-Co7ZCNxO.js">
     <link rel="stylesheet" crossorigin href="/erp/assets/vendor-CLUPjUnv.css">

package/dist/{erpDb.js → database/erpDb.js}

@@ -1,6 +1,6 @@
 import { PrismaBetterSqlite3 } from "@prisma/adapter-better-sqlite3";
+import { PrismaClient } from "../generated/prisma/client.js";
 import { erpDbUrl } from "./dbConfig.js";
-import { PrismaClient } from "./generated/prisma/client.js";
 let _db;
 /**
  * Initialize the ERP database connection and run SQLite pragmas.

package/dist/erpRoutes.js

@@ -1,35 +1,35 @@
+import { isSupervisorAuth } from "./middleware/supervisorAuth.js";
 import adminRoutes from "./routes/admin.js";
 import auditRoutes from "./routes/audit.js";
-import authRoutes from "./routes/auth.js";
-import dispatchRoutes from "./routes/dispatch.js";
-import inventoryRoutes from "./routes/inventory.js";
-import itemFieldRoutes from "./routes/item-fields.js";
-import itemInstanceRoutes from "./routes/item-instances.js";
-import itemRoutes from "./routes/items.js";
-import laborTicketRoutes from "./routes/labor-tickets.js";
-import operationDependencyRoutes from "./routes/operation-dependencies.js";
-import operationFieldRefRoutes from "./routes/operation-field-refs.js";
-import operationRunCommentRoutes from "./routes/operation-run-comments.js";
-import operationRunTransitionRoutes from "./routes/operation-run-transitions.js";
-import operationRunRoutes from "./routes/operation-runs.js";
-import operationRoutes from "./routes/operations.js";
-import orderRevisionTransitionRoutes from "./routes/order-revision-transitions.js";
-import orderRevisionRoutes from "./routes/order-revisions.js";
-import orderRunTransitionRoutes from "./routes/order-run-transitions.js";
-import orderRunRoutes from "./routes/order-runs.js";
-import orderRoutes from "./routes/orders.js";
+import itemFieldRoutes from "./routes/items/item-fields.js";
+import itemInstanceRoutes from "./routes/items/item-instances.js";
+import itemRoutes from "./routes/items/items.js";
+import operationDependencyRoutes from "./routes/operations/operation-dependencies.js";
+import operationFieldRefRoutes from "./routes/operations/operation-field-refs.js";
+import operationRunCommentRoutes from "./routes/operations/operation-run-comments.js";
+import operationRunTransitionRoutes from "./routes/operations/operation-run-transitions.js";
+import operationRunRoutes from "./routes/operations/operation-runs.js";
+import operationRoutes from "./routes/operations/operations.js";
+import orderRevisionTransitionRoutes from "./routes/orders/order-revision-transitions.js";
+import orderRevisionRoutes from "./routes/orders/order-revisions.js";
+import orderRunTransitionRoutes from "./routes/orders/order-run-transitions.js";
+import orderRunRoutes from "./routes/orders/order-runs.js";
+import orderRoutes from "./routes/orders/orders.js";
+import dispatchRoutes from "./routes/production/dispatch.js";
+import inventoryRoutes from "./routes/production/inventory.js";
+import laborTicketRoutes from "./routes/production/labor-tickets.js";
+import workCenterRoutes from "./routes/production/work-centers.js";
 import rootRoute from "./routes/root.js";
 import schemaRoutes from "./routes/schemas.js";
-import stepFieldAttachmentRoutes from "./routes/step-field-attachments.js";
-import stepFieldRoutes from "./routes/step-fields.js";
-import stepRunFieldRoutes from "./routes/step-run-fields.js";
-import stepRunTransitionRoutes from "./routes/step-run-transitions.js";
-import stepRunRoutes from "./routes/step-runs.js";
-import stepRoutes from "./routes/steps.js";
-import userPermissionRoutes from "./routes/user-permissions.js";
-import userRoutes from "./routes/users.js";
-import workCenterRoutes from "./routes/work-centers.js";
-import { isSupervisorAuth } from "./supervisorAuth.js";
+import stepFieldAttachmentRoutes from "./routes/steps/step-field-attachments.js";
+import stepFieldRoutes from "./routes/steps/step-fields.js";
+import stepRunFieldRoutes from "./routes/steps/step-run-fields.js";
+import stepRunTransitionRoutes from "./routes/steps/step-run-transitions.js";
+import stepRunRoutes from "./routes/steps/step-runs.js";
+import stepRoutes from "./routes/steps/steps.js";
+import authRoutes from "./routes/users/auth.js";
+import userPermissionRoutes from "./routes/users/user-permissions.js";
+import userRoutes from "./routes/users/users.js";
 export const erpRoutes = (fastify) => {
     fastify.register(adminRoutes, { prefix: "/erp/api/admin" });
     fastify.register(auditRoutes, { prefix: "/erp/api/audit" });

package/dist/erpServer.js

@@ -19,13 +19,13 @@ import path from "path";
 import { fileURLToPath } from "url";
 import { takeCoverage } from "v8";
 import { registerApiReference } from "./api-reference.js";
-import { registerAuthMiddleware } from "./auth-middleware.js";
-import { ERP_DB_VERSION, erpDbPath } from "./dbConfig.js";
-import { initErpDb } from "./erpDb.js";
+import { ERP_DB_VERSION, erpDbPath } from "./database/dbConfig.js";
+import { initErpDb } from "./database/erpDb.js";
 import { erpRoutes } from "./erpRoutes.js";
-import { isSupervisorAuth } from "./supervisorAuth.js";
-import { ensureLocalSuperAdmin, ensureSupervisorSuperAdmin, } from "./userService.js";
-export { enableSupervisorAuth } from "./supervisorAuth.js";
+import { registerAuthMiddleware } from "./middleware/auth-middleware.js";
+import { isSupervisorAuth } from "./middleware/supervisorAuth.js";
+import { ensureLocalSuperAdmin, ensureSupervisorSuperAdmin, } from "./services/user-service.js";
+export { enableSupervisorAuth } from "./middleware/supervisorAuth.js";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 /**
@@ -44,7 +44,7 @@ export const erpPlugin = async (fastify, opts) => {
     }
     // Rate limiting — moderate global default, strict overrides on sensitive routes
     await fastify.register(rateLimit, {
-        max: 500,
+        max: Number(process.env.ERP_API_RATE_LIMIT) || 500,
         timeWindow: "1 minute",
         allowList: (request) => !request.url.match(/^\/(supervisor|erp)\/api\//),
     });

package/dist/{auth-middleware.js → middleware/auth-middleware.js}

@@ -2,7 +2,7 @@ import { AuthCache, urlMatchesPrefix } from "@naisys/common";
 import { extractBearerToken, hashToken, SESSION_COOKIE_NAME, } from "@naisys/common-node";
 import { findAgentByApiKey } from "@naisys/hub-database";
 import { findSession, findUserByApiKey } from "@naisys/supervisor-database";
-import erpDb from "./erpDb.js";
+import erpDb from "../database/erpDb.js";
 import { isSupervisorAuth } from "./supervisorAuth.js";
 const PUBLIC_PREFIXES = ["/erp/api/auth/login", "/erp/api/client-config"];
 export const authCache = new AuthCache();

package/dist/route-helpers.js

@@ -1,8 +1,8 @@
 import { permGate, resolveActions as resolveActionsBase, } from "@naisys/common";
 import { OperationRunStatus, OrderRunStatus, RevisionStatus, } from "@naisys/erp-shared";
-import { hasPermission } from "./auth-middleware.js";
-import erpDb from "./erpDb.js";
+import erpDb from "./database/erpDb.js";
 import { API_PREFIX, schemaLink, selfLink } from "./hateoas.js";
+import { hasPermission } from "./middleware/auth-middleware.js";
 // --- Prefer: return=representation (RFC 7240) ---
 /**
  * Returns true when the caller wants the full entity in the mutation response.

package/dist/routes/admin.js

@@ -3,11 +3,11 @@ import fs from "node:fs/promises";
 import { AdminAttachmentListRequestSchema, AdminAttachmentListResponseSchema, AdminInfoResponseSchema, ErrorResponseSchema, ServerLogRequestSchema, ServerLogResponseSchema, } from "@naisys/erp-shared";
 import { getHubVariable } from "@naisys/hub-database";
 import { z } from "zod/v4";
-import { hasPermission, requirePermission } from "../auth-middleware.js";
-import { ERP_DB_VERSION, erpDbPath } from "../dbConfig.js";
-import erpDb from "../erpDb.js";
+import { ERP_DB_VERSION, erpDbPath } from "../database/dbConfig.js";
+import erpDb from "../database/erpDb.js";
 import { notFound } from "../error-handler.js";
 import { paginationLinks } from "../hateoas.js";
+import { hasPermission, requirePermission, } from "../middleware/auth-middleware.js";
 import { getErpLogPath, tailLogFile } from "../services/log-file-service.js";
 import { getPackageVersion } from "../version.js";
 const API_PREFIX = "/erp/api";

package/dist/routes/audit.js

@@ -1,5 +1,5 @@
 import { AuditListResponseSchema, AuditQuerySchema } from "@naisys/erp-shared";
-import erpDb from "../erpDb.js";
+import erpDb from "../database/erpDb.js";
 export default function auditRoutes(fastify) {
     const app = fastify.withTypeProvider();
     app.get("/", {

package/dist/routes/{item-fields.js → items/item-fields.js}

@@ -1,12 +1,12 @@
 import { CreateFieldSchema, ErrorResponseSchema, FieldListResponseSchema, FieldSchema, MutateResponseSchema, SeqNoCreateResponseSchema, UpdateFieldSchema, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { hasPermission, requirePermission } from "../auth-middleware.js";
-import erpDb from "../erpDb.js";
-import { notFound } from "../error-handler.js";
-import { API_PREFIX, selfLink } from "../hateoas.js";
-import { calcNextSeqNo, childItemLinks, formatAuditFields, mutationResult, permGate, } from "../route-helpers.js";
-import { createField, deleteField, ensureFieldSet, findExistingField, getField, listFields, updateField, } from "../services/field-service.js";
-import { findExisting as findExistingItem } from "../services/item-service.js";
+import erpDb from "../../database/erpDb.js";
+import { notFound } from "../../error-handler.js";
+import { API_PREFIX, selfLink } from "../../hateoas.js";
+import { hasPermission, requirePermission, } from "../../middleware/auth-middleware.js";
+import { calcNextSeqNo, childItemLinks, formatAuditFields, mutationResult, permGate, } from "../../route-helpers.js";
+import { findExisting as findExistingItem } from "../../services/inventory/item-service.js";
+import { createField, deleteField, ensureFieldSet, findExistingField, getField, listFields, updateField, } from "../../services/production/field-service.js";
 const ParamsSchema = z.object({ key: z.string() });
 const FieldParamsSchema = z.object({
     key: z.string(),

package/dist/routes/{item-instances.js → items/item-instances.js}

@@ -1,12 +1,12 @@
 import { CreateItemInstanceSchema, DeleteSetMutateResponseSchema, ErrorResponseSchema, fieldTypeString, FieldValueMutateResponseSchema, getValueFormatHint, ItemInstanceListQuerySchema, ItemInstanceListResponseSchema, ItemInstanceSchema, KeyCreateResponseSchema, MutateResponseSchema, UpdateFieldValueSchema, UpdateItemInstanceSchema, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { hasPermission, requirePermission } from "../auth-middleware.js";
-import { notFound, unprocessable } from "../error-handler.js";
-import { API_PREFIX, paginationLinks, schemaLink, selfLink, } from "../hateoas.js";
-import { formatAuditFields, mutationResult, permGate, useFullSerializer, wantsFullResponse, } from "../route-helpers.js";
-import { checkFieldValueShape, deleteFieldValueSet, deserializeFieldValue, serializeFieldValue, upsertFieldValue, validateFieldValue, } from "../services/field-value-service.js";
-import { createItemInstance, deleteItemInstance, ensureItemInstanceFieldRecord, findItemInstance, findItemInstanceWithField, listItemInstances, updateItemInstance, } from "../services/item-instance-service.js";
-import { findExisting as findItem } from "../services/item-service.js";
+import { notFound, unprocessable } from "../../error-handler.js";
+import { API_PREFIX, paginationLinks, schemaLink, selfLink, } from "../../hateoas.js";
+import { hasPermission, requirePermission, } from "../../middleware/auth-middleware.js";
+import { formatAuditFields, mutationResult, permGate, useFullSerializer, wantsFullResponse, } from "../../route-helpers.js";
+import { createItemInstance, deleteItemInstance, ensureItemInstanceFieldRecord, findItemInstance, findItemInstanceWithField, listItemInstances, updateItemInstance, } from "../../services/inventory/item-instance-service.js";
+import { findExisting as findItem } from "../../services/inventory/item-service.js";
+import { checkFieldValueShape, deleteFieldValueSet, deserializeFieldValue, serializeFieldValue, upsertFieldValue, validateFieldValue, } from "../../services/production/field-value-service.js";
 const ParamsSchema = z.object({
     key: z.string(),
 });

package/dist/routes/{items.js → items/items.js}

@@ -1,10 +1,10 @@
 import { CreateItemSchema, ErrorResponseSchema, ItemListQuerySchema, ItemListResponseSchema, ItemSchema, KeyCreateResponseSchema, MutateResponseSchema, UpdateItemSchema, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { hasPermission, requirePermission } from "../auth-middleware.js";
-import { notFound } from "../error-handler.js";
-import { API_PREFIX, collectionLink, paginationLinks, schemaLink, selfLink, } from "../hateoas.js";
-import { calcNextSeqNo, childItemLinks, formatAuditFields, mutationResult, permGate, } from "../route-helpers.js";
-import { createItem, deleteItem, findExisting, listItems, updateItem, } from "../services/item-service.js";
+import { notFound } from "../../error-handler.js";
+import { API_PREFIX, collectionLink, paginationLinks, schemaLink, selfLink, } from "../../hateoas.js";
+import { hasPermission, requirePermission, } from "../../middleware/auth-middleware.js";
+import { calcNextSeqNo, childItemLinks, formatAuditFields, mutationResult, permGate, } from "../../route-helpers.js";
+import { createItem, deleteItem, findExisting, listItems, updateItem, } from "../../services/inventory/item-service.js";
 const RESOURCE = "items";
 const KeyParamsSchema = z.object({
     key: z.string(),

package/dist/routes/{operation-dependencies.js → operations/operation-dependencies.js}

@@ -1,11 +1,11 @@
 import { CreateOperationDependencySchema, CreateResponseSchema, ErrorResponseSchema, OperationDependencyListResponseSchema, RevisionStatus, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { hasPermission, requirePermission } from "../auth-middleware.js";
-import { conflict, notFound } from "../error-handler.js";
-import { API_PREFIX, selfLink } from "../hateoas.js";
-import { mutationResult, resolveRevision } from "../route-helpers.js";
-import { createDependency, deleteDependency, listDependencies, } from "../services/operation-dependency-service.js";
-import { findExisting } from "../services/operation-service.js";
+import { conflict, notFound } from "../../error-handler.js";
+import { API_PREFIX, selfLink } from "../../hateoas.js";
+import { hasPermission, requirePermission, } from "../../middleware/auth-middleware.js";
+import { mutationResult, resolveRevision } from "../../route-helpers.js";
+import { createDependency, deleteDependency, listDependencies, } from "../../services/operations/operation-dependency-service.js";
+import { findExisting } from "../../services/operations/operation-service.js";
 const ParamsSchema = z.object({
     orderKey: z.string(),
     revNo: z.coerce.number().int(),

package/dist/routes/{operation-field-refs.js → operations/operation-field-refs.js}

@@ -1,11 +1,11 @@
 import { CreateFieldRefSchema, ErrorResponseSchema, FieldRefListResponseSchema, RevisionStatus, SeqNoCreateResponseSchema, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { requirePermission } from "../auth-middleware.js";
-import erpDb from "../erpDb.js";
-import { conflict, notFound } from "../error-handler.js";
-import { API_PREFIX, selfLink } from "../hateoas.js";
-import { calcNextSeqNo, childItemLinks, mutationResult, resolveActions, resolveOperation, } from "../route-helpers.js";
-import { checkDuplicateSource, createFieldRef, deleteFieldRef, findExistingFieldRef, listFieldRefs, } from "../services/field-ref-service.js";
+import erpDb from "../../database/erpDb.js";
+import { conflict, notFound } from "../../error-handler.js";
+import { API_PREFIX, selfLink } from "../../hateoas.js";
+import { requirePermission } from "../../middleware/auth-middleware.js";
+import { calcNextSeqNo, childItemLinks, mutationResult, resolveActions, resolveOperation, } from "../../route-helpers.js";
+import { checkDuplicateSource, createFieldRef, deleteFieldRef, findExistingFieldRef, listFieldRefs, } from "../../services/production/field-ref-service.js";
 const ParamsSchema = z.object({
     orderKey: z.string(),
     revNo: z.coerce.number().int(),

package/dist/routes/{operation-run-comments.js → operations/operation-run-comments.js}

@@ -1,10 +1,10 @@
 import { CreateOperationRunCommentSchema, CreateResponseSchema, ErrorResponseSchema, OperationRunCommentListResponseSchema, OperationRunCommentType, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { requirePermission } from "../auth-middleware.js";
-import { notFound } from "../error-handler.js";
-import { API_PREFIX, selfLink } from "../hateoas.js";
-import { mutationResult, resolveActions, resolveOpRun, } from "../route-helpers.js";
-import { createComment, listComments, } from "../services/operation-run-comment-service.js";
+import { notFound } from "../../error-handler.js";
+import { API_PREFIX, selfLink } from "../../hateoas.js";
+import { requirePermission } from "../../middleware/auth-middleware.js";
+import { mutationResult, resolveActions, resolveOpRun, } from "../../route-helpers.js";
+import { createComment, listComments, } from "../../services/operations/operation-run-comment-service.js";
 function commentResource(orderKey, runNo, seqNo) {
     return `orders/${orderKey}/runs/${runNo}/ops/${seqNo}/comments`;
 }

package/dist/routes/{operation-run-transitions.js → operations/operation-run-transitions.js}

@@ -1,10 +1,10 @@
 import { ErrorResponseSchema, OperationRunStatus, OperationRunTransitionSlimSchema, OrderRunStatus, TransitionNoteSchema, } from "@naisys/erp-shared";
-import { requirePermission } from "../auth-middleware.js";
-import { conflict, notFound, unprocessable } from "../error-handler.js";
-import { checkOrderRunStarted, checkWorkCenterAccess, mutationResult, resolveOpRun, } from "../route-helpers.js";
-import { clockIn, clockOutAllForOpRun, isUserClockedIn, sumLaborTicketCosts, } from "../services/labor-ticket-service.js";
-import { checkPredecessorsComplete, checkStepsComplete, reblockSuccessors, transitionStatus, unblockSuccessors, validateStatusFor, } from "../services/operation-run-service.js";
-import { transitionStatus as transitionOrderRunStatus } from "../services/order-run-service.js";
+import { conflict, notFound, unprocessable } from "../../error-handler.js";
+import { requirePermission } from "../../middleware/auth-middleware.js";
+import { checkOrderRunStarted, checkWorkCenterAccess, mutationResult, resolveOpRun, } from "../../route-helpers.js";
+import { checkPredecessorsComplete, checkStepsComplete, reblockSuccessors, transitionStatus, unblockSuccessors, validateStatusFor, } from "../../services/operations/operation-run-service.js";
+import { transitionStatus as transitionOrderRunStatus } from "../../services/orders/order-run-service.js";
+import { clockIn, clockOutAllForOpRun, isUserClockedIn, sumLaborTicketCosts, } from "../../services/production/labor-ticket-service.js";
 import { formatOpRunTransition, SeqNoParamsSchema } from "./operation-runs.js";
 export default function operationRunTransitionRoutes(fastify) {
     const app = fastify.withTypeProvider();

package/dist/routes/{operation-runs.js → operations/operation-runs.js}

@@ -1,10 +1,10 @@
 import { ErrorResponseSchema, MutateResponseSchema, OperationRunListResponseSchema, OperationRunSchema, OperationRunStatus, UpdateOperationRunSchema, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { hasPermission, requirePermission } from "../auth-middleware.js";
-import { conflict, notFound } from "../error-handler.js";
-import { API_PREFIX, selfLink } from "../hateoas.js";
-import { checkOrderRunStarted, checkWorkCenterAccess, childItemLinks, formatAuditFields, formatDate, resolveActions, resolveOpRun, resolveOrderRun, useFullSerializer, wantsFullResponse, } from "../route-helpers.js";
-import { checkStepsComplete, getOpRun, getOpRunFieldRefSummary, getOpRunStepSummary, listOpRuns, updateOpRun, validateStatusFor, } from "../services/operation-run-service.js";
+import { conflict, notFound } from "../../error-handler.js";
+import { API_PREFIX, selfLink } from "../../hateoas.js";
+import { hasPermission, requirePermission, } from "../../middleware/auth-middleware.js";
+import { checkOrderRunStarted, checkWorkCenterAccess, childItemLinks, formatAuditFields, formatDate, resolveActions, resolveOpRun, resolveOrderRun, useFullSerializer, wantsFullResponse, } from "../../route-helpers.js";
+import { checkStepsComplete, getOpRun, getOpRunFieldRefSummary, getOpRunStepSummary, listOpRuns, updateOpRun, validateStatusFor, } from "../../services/operations/operation-run-service.js";
 function opRunResource(orderKey, runNo) {
     return `orders/${orderKey}/runs/${runNo}/ops`;
 }

package/dist/routes/{operations.js → operations/operations.js}

@@ -1,11 +1,11 @@
 import { CreateOperationSchema, ErrorResponseSchema, MutateResponseSchema, OperationListResponseSchema, OperationSchema, RevisionStatus, SeqNoCreateResponseSchema, UpdateOperationSchema, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { hasPermission, requirePermission } from "../auth-middleware.js";
-import { conflict, notFound } from "../error-handler.js";
-import { API_PREFIX, selfLink } from "../hateoas.js";
-import { calcNextSeqNo, childItemLinks, draftCrudActions, formatAuditFields, mutationResult, permGate, resolveRevision, } from "../route-helpers.js";
-import { createOperation, deleteOperation, findExisting, getOperation, listOperations, updateOperation, } from "../services/operation-service.js";
-import { findWorkCenterByKey } from "../services/work-center-service.js";
+import { conflict, notFound } from "../../error-handler.js";
+import { API_PREFIX, selfLink } from "../../hateoas.js";
+import { hasPermission, requirePermission, } from "../../middleware/auth-middleware.js";
+import { calcNextSeqNo, childItemLinks, draftCrudActions, formatAuditFields, mutationResult, permGate, resolveRevision, } from "../../route-helpers.js";
+import { createOperation, deleteOperation, findExisting, getOperation, listOperations, updateOperation, } from "../../services/operations/operation-service.js";
+import { findWorkCenterByKey } from "../../services/production/work-center-service.js";
 /** Resolve an optional workCenterKey to a workCenterId. Returns undefined (skip), null (clear), or the ID. */
 async function resolveWorkCenterId(workCenterKey) {
     if (workCenterKey === undefined)

package/dist/routes/{order-revision-transitions.js → orders/order-revision-transitions.js}

@@ -1,8 +1,8 @@
 import { ErrorResponseSchema, OrderRevisionTransitionSchema, RevisionStatus, } from "@naisys/erp-shared";
-import { requirePermission } from "../auth-middleware.js";
-import { conflict, notFound } from "../error-handler.js";
-import { resolveOrder, useFullSerializer, wantsFullResponse, } from "../route-helpers.js";
-import { findExisting, transitionStatus, } from "../services/order-revision-service.js";
+import { conflict, notFound } from "../../error-handler.js";
+import { requirePermission } from "../../middleware/auth-middleware.js";
+import { resolveOrder, useFullSerializer, wantsFullResponse, } from "../../route-helpers.js";
+import { findExisting, transitionStatus, } from "../../services/orders/order-revision-service.js";
 import { formatRevision, revisionItemActions, RevNoParamsSchema, } from "./order-revisions.js";
 export default function orderRevisionTransitionRoutes(fastify) {
     const app = fastify.withTypeProvider();

package/dist/routes/{order-revisions.js → orders/order-revisions.js}

@@ -1,11 +1,11 @@
 import { CreateOrderRevisionSchema, ErrorResponseSchema, MutateResponseSchema, OrderRevisionListQuerySchema, OrderRevisionListResponseSchema, OrderRevisionSchema, RevisionCreateResponseSchema, RevisionDiffQuerySchema, RevisionDiffResponseSchema, RevisionStatus, UpdateOrderRevisionSchema, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { hasPermission, requirePermission } from "../auth-middleware.js";
-import { conflict, notFound } from "../error-handler.js";
-import { API_PREFIX, paginationLinks } from "../hateoas.js";
-import { childItemLinks, formatAuditFields, mutationResult, permGate, resolveActions, resolveOrder, } from "../route-helpers.js";
-import { checkHasOrderRuns, createRevision, deleteRevision, findExisting, getRevision, getRevisionOpSummary, listRevisions, updateRevision, validateDraftStatus, } from "../services/order-revision-service.js";
-import { diffRevisions } from "../services/revision-diff-service.js";
+import { conflict, notFound } from "../../error-handler.js";
+import { API_PREFIX, paginationLinks } from "../../hateoas.js";
+import { hasPermission, requirePermission, } from "../../middleware/auth-middleware.js";
+import { childItemLinks, formatAuditFields, mutationResult, permGate, resolveActions, resolveOrder, } from "../../route-helpers.js";
+import { checkHasOrderRuns, createRevision, deleteRevision, findExisting, getRevision, getRevisionOpSummary, listRevisions, updateRevision, validateDraftStatus, } from "../../services/orders/order-revision-service.js";
+import { diffRevisions } from "../../services/orders/revision-diff-service.js";
 export function revisionItemActions(parentResource, orderKey, revNo, status, user) {
     const href = `${API_PREFIX}/${parentResource}/${orderKey}/revs/${revNo}`;
     return resolveActions([

package/dist/routes/{order-run-transitions.js → orders/order-run-transitions.js}

@@ -1,8 +1,8 @@
 import { CompleteOrderRunSchema, ErrorResponseSchema, OrderRunStatus, OrderRunTransitionSchema, } from "@naisys/erp-shared";
-import { requirePermission } from "../auth-middleware.js";
-import { badRequest, conflict, notFound, unprocessable, } from "../error-handler.js";
-import { resolveOrderRun, useFullSerializer, wantsFullResponse, } from "../route-helpers.js";
-import { checkOpsComplete, completeOrderRun, getReopenTarget, sumOpRunCosts, transitionStatus, validateStatusFor, } from "../services/order-run-service.js";
+import { badRequest, conflict, notFound, unprocessable, } from "../../error-handler.js";
+import { requirePermission } from "../../middleware/auth-middleware.js";
+import { resolveOrderRun, useFullSerializer, wantsFullResponse, } from "../../route-helpers.js";
+import { checkOpsComplete, completeOrderRun, getReopenTarget, sumOpRunCosts, transitionStatus, validateStatusFor, } from "../../services/orders/order-run-service.js";
 import { formatRun, orderRunItemActions, RunNoParamsSchema, } from "./order-runs.js";
 export default function orderRunTransitionRoutes(fastify) {
     const app = fastify.withTypeProvider();

package/dist/routes/{order-runs.js → orders/order-runs.js}

@@ -1,10 +1,10 @@
 import { CreateOrderRunSchema, ErrorResponseSchema, MutateResponseSchema, OrderRunListQuerySchema, OrderRunListResponseSchema, OrderRunSchema, OrderRunStatus, RunCreateResponseSchema, UpdateOrderRunSchema, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { hasPermission, requirePermission } from "../auth-middleware.js";
-import { conflict, notFound } from "../error-handler.js";
-import { API_PREFIX, paginationLinks } from "../hateoas.js";
-import { childItemLinks, formatAuditFields, mutationResult, resolveActions, resolveOrder, resolveOrderRun, } from "../route-helpers.js";
-import { checkOpsComplete, createOrderRun, deleteOrderRun, findLatestApprovedRevision, findOrderRevision, getOrderRun, getOrderRunOpSummary, listOrderRuns, updateOrderRun, validateStatusFor, } from "../services/order-run-service.js";
+import { conflict, notFound } from "../../error-handler.js";
+import { API_PREFIX, paginationLinks } from "../../hateoas.js";
+import { hasPermission, requirePermission, } from "../../middleware/auth-middleware.js";
+import { childItemLinks, formatAuditFields, mutationResult, resolveActions, resolveOrder, resolveOrderRun, } from "../../route-helpers.js";
+import { checkOpsComplete, createOrderRun, deleteOrderRun, findLatestApprovedRevision, findOrderRevision, getOrderRun, getOrderRunOpSummary, listOrderRuns, updateOrderRun, validateStatusFor, } from "../../services/orders/order-run-service.js";
 function runResource(orderKey) {
     return `orders/${orderKey}/runs`;
 }

package/dist/routes/{orders.js → orders/orders.js}

@@ -1,10 +1,10 @@
 import { CreateOrderSchema, ErrorResponseSchema, KeyCreateResponseSchema, MutateResponseSchema, OrderListQuerySchema, OrderListResponseSchema, OrderSchema, OrderStatus, UpdateOrderSchema, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { hasPermission, requirePermission } from "../auth-middleware.js";
-import { conflict, notFound } from "../error-handler.js";
-import { API_PREFIX, collectionLink, paginationLinks, schemaLink, selfLink, } from "../hateoas.js";
-import { formatAuditFields, mutationResult, permGate, resolveActions, } from "../route-helpers.js";
-import { checkHasRevisions, createOrder, deleteOrder, findExisting, getLatestApprovedRevNo, listOrders, resolveItemKey, updateOrder, } from "../services/order-service.js";
+import { conflict, notFound } from "../../error-handler.js";
+import { API_PREFIX, collectionLink, paginationLinks, schemaLink, selfLink, } from "../../hateoas.js";
+import { hasPermission, requirePermission, } from "../../middleware/auth-middleware.js";
+import { formatAuditFields, mutationResult, permGate, resolveActions, } from "../../route-helpers.js";
+import { checkHasRevisions, createOrder, deleteOrder, findExisting, getLatestApprovedRevNo, listOrders, resolveItemKey, updateOrder, } from "../../services/orders/order-service.js";
 function orderLinks(resource, key, schemaName) {
     return [
         selfLink(`/${resource}/${key}`),

package/dist/routes/{dispatch.js → production/dispatch.js}

@@ -1,7 +1,7 @@
 import { DispatchListQuerySchema, DispatchListResponseSchema, OperationRunStatus, OrderRunStatus, ReadyToCloseListQuerySchema, ReadyToCloseListResponseSchema, } from "@naisys/erp-shared";
-import erpDb from "../erpDb.js";
-import { API_PREFIX, paginationLinks } from "../hateoas.js";
-import { getUserWorkCenterIds } from "../services/work-center-service.js";
+import erpDb from "../../database/erpDb.js";
+import { API_PREFIX, paginationLinks } from "../../hateoas.js";
+import { getUserWorkCenterIds } from "../../services/production/work-center-service.js";
 const OPEN_ORDER_STATUSES = [OrderRunStatus.released, OrderRunStatus.started];
 const DEFAULT_OP_STATUSES = [
     OperationRunStatus.pending,

package/dist/routes/{inventory.js → production/inventory.js}

@@ -1,7 +1,7 @@
 import { InventoryListQuerySchema, InventoryListResponseSchema, } from "@naisys/erp-shared";
-import { hasPermission } from "../auth-middleware.js";
-import erpDb from "../erpDb.js";
-import { API_PREFIX, paginationLinks } from "../hateoas.js";
+import erpDb from "../../database/erpDb.js";
+import { API_PREFIX, paginationLinks } from "../../hateoas.js";
+import { hasPermission } from "../../middleware/auth-middleware.js";
 function buildInventoryActionTemplates(user) {
     const templates = [
         {

package/dist/routes/{labor-tickets.js → production/labor-tickets.js}

@@ -1,10 +1,10 @@
 import { ClockOutLaborTicketSchema, CreateResponseSchema, ErrorResponseSchema, LaborTicketListResponseSchema, MutateResponseSchema, OperationRunStatus, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { hasPermission, requirePermission } from "../auth-middleware.js";
-import { notFound } from "../error-handler.js";
-import { API_PREFIX, selfLink } from "../hateoas.js";
-import { checkOpRunInProgress, formatAuditFields, formatDate, mutationResult, permGate, resolveOpRun, } from "../route-helpers.js";
-import { clockIn, clockOut, deleteLaborTicket, listLaborTickets, } from "../services/labor-ticket-service.js";
+import { notFound } from "../../error-handler.js";
+import { API_PREFIX, selfLink } from "../../hateoas.js";
+import { hasPermission, requirePermission, } from "../../middleware/auth-middleware.js";
+import { checkOpRunInProgress, formatAuditFields, formatDate, mutationResult, permGate, resolveOpRun, } from "../../route-helpers.js";
+import { clockIn, clockOut, deleteLaborTicket, listLaborTickets, } from "../../services/production/labor-ticket-service.js";
 function laborResource(orderKey, runNo, seqNo) {
     return `orders/${orderKey}/runs/${runNo}/ops/${seqNo}/labor`;
 }

package/dist/routes/{work-centers.js → production/work-centers.js}

@@ -1,10 +1,10 @@
 import { AssignWorkCenterUserSchema, CreateWorkCenterSchema, ErrorResponseSchema, KeyCreateResponseSchema, MutateResponseSchema, UpdateWorkCenterSchema, WorkCenterListQuerySchema, WorkCenterListResponseSchema, WorkCenterSchema, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { hasPermission, requirePermission } from "../auth-middleware.js";
-import { notFound } from "../error-handler.js";
-import { API_PREFIX, collectionLink, paginationLinks, schemaLink, selfLink, } from "../hateoas.js";
-import { formatAuditFields, mutationResult, permGate, } from "../route-helpers.js";
-import { assignUser, createWorkCenter, deleteWorkCenter, findExisting, listWorkCenters, removeUser, updateWorkCenter, } from "../services/work-center-service.js";
+import { notFound } from "../../error-handler.js";
+import { API_PREFIX, collectionLink, paginationLinks, schemaLink, selfLink, } from "../../hateoas.js";
+import { hasPermission, requirePermission, } from "../../middleware/auth-middleware.js";
+import { formatAuditFields, mutationResult, permGate, } from "../../route-helpers.js";
+import { assignUser, createWorkCenter, deleteWorkCenter, findExisting, listWorkCenters, removeUser, updateWorkCenter, } from "../../services/production/work-center-service.js";
 const RESOURCE = "work-centers";
 const KeyParamsSchema = z.object({
     key: z.string(),

package/dist/routes/root.js

@@ -1,4 +1,4 @@
-import { hasPermission } from "../auth-middleware.js";
+import { hasPermission } from "../middleware/auth-middleware.js";
 export default function rootRoute(fastify) {
     fastify.get("/", {
         schema: {

package/dist/routes/{step-field-attachments.js → steps/step-field-attachments.js}

@@ -2,14 +2,14 @@ import { mimeFromFilename } from "@naisys/common";
 import { ErrorResponseSchema, UploadAttachmentResponseSchema, } from "@naisys/erp-shared";
 import { createReadStream, existsSync, statSync } from "fs";
 import { z } from "zod/v4";
-import { requirePermission } from "../auth-middleware.js";
-import erpDb from "../erpDb.js";
-import { conflict, notFound } from "../error-handler.js";
-import { checkOpRunInProgress, checkOrderRunStarted, checkWorkCenterAccess, resolveStepRun, } from "../route-helpers.js";
-import { deleteFieldAttachment, getAttachmentFilePath, uploadAttachment, } from "../services/attachment-service.js";
-import { ensureStepRunFieldRecord } from "../services/field-service.js";
-import { findStepRunWithField, rebuildAttachmentFieldValue, upsertFieldValue, } from "../services/field-value-service.js";
-import { isUserClockedIn } from "../services/labor-ticket-service.js";
+import erpDb from "../../database/erpDb.js";
+import { conflict, notFound } from "../../error-handler.js";
+import { requirePermission } from "../../middleware/auth-middleware.js";
+import { checkOpRunInProgress, checkOrderRunStarted, checkWorkCenterAccess, resolveStepRun, } from "../../route-helpers.js";
+import { deleteFieldAttachment, getAttachmentFilePath, uploadAttachment, } from "../../services/attachment-service.js";
+import { ensureStepRunFieldRecord } from "../../services/production/field-service.js";
+import { findStepRunWithField, rebuildAttachmentFieldValue, upsertFieldValue, } from "../../services/production/field-value-service.js";
+import { isUserClockedIn } from "../../services/production/labor-ticket-service.js";
 const FieldSeqNoParamsSchema = z.object({
     orderKey: z.string(),
     runNo: z.coerce.number().int(),

package/dist/routes/{step-fields.js → steps/step-fields.js}

@@ -1,11 +1,11 @@
 import { BatchCreateFieldSchema, BatchSeqNoCreateResponseSchema, CreateFieldSchema, ErrorResponseSchema, FieldListResponseSchema, FieldSchema, MutateResponseSchema, RevisionStatus, SeqNoCreateResponseSchema, UpdateFieldSchema, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { requirePermission } from "../auth-middleware.js";
-import erpDb from "../erpDb.js";
-import { conflict, notFound } from "../error-handler.js";
-import { API_PREFIX, selfLink } from "../hateoas.js";
-import { calcNextSeqNo, childItemLinks, draftCrudActions, formatAuditFields, mutationResult, resolveActions, resolveStep, } from "../route-helpers.js";
-import { createField, createFields, deleteField, ensureFieldSet, findExistingField, getField, listFields, updateField, } from "../services/field-service.js";
+import erpDb from "../../database/erpDb.js";
+import { conflict, notFound } from "../../error-handler.js";
+import { API_PREFIX, selfLink } from "../../hateoas.js";
+import { requirePermission } from "../../middleware/auth-middleware.js";
+import { calcNextSeqNo, childItemLinks, draftCrudActions, formatAuditFields, mutationResult, resolveActions, resolveStep, } from "../../route-helpers.js";
+import { createField, createFields, deleteField, ensureFieldSet, findExistingField, getField, listFields, updateField, } from "../../services/production/field-service.js";
 const ParamsSchema = z.object({
     orderKey: z.string(),
     revNo: z.coerce.number().int(),

package/dist/routes/{step-run-fields.js → steps/step-run-fields.js}

@@ -1,14 +1,14 @@
 import { BatchFieldValueMutateResponseSchema, BatchFieldValueUpdateResponseSchema, BatchUpdateFieldValuesSchema, DeleteSetMutateResponseSchema, ErrorResponseSchema, fieldTypeString, FieldValueMutateResponseSchema, getValueFormatHint, UpdateFieldValueSchema, } from "@naisys/erp-shared";
 import { z } from "zod/v4";
-import { requirePermission } from "../auth-middleware.js";
-import erpDb from "../erpDb.js";
-import { conflict, notFound, unprocessable } from "../error-handler.js";
-import { API_PREFIX } from "../hateoas.js";
-import { checkOpRunInProgress, checkOrderRunStarted, checkWorkCenterAccess, mutationResult, resolveStepRun, } from "../route-helpers.js";
-import { ensureStepRunFieldRecord } from "../services/field-service.js";
-import { checkFieldValueShape, clearAttachmentFieldValue, deleteFieldValueSet, deserializeFieldValue, findStepRunWithField, serializeFieldValue, upsertFieldValue, validateFieldValue, } from "../services/field-value-service.js";
-import { isUserClockedIn } from "../services/labor-ticket-service.js";
-import { getStepRunWithFields } from "../services/step-run-service.js";
+import erpDb from "../../database/erpDb.js";
+import { conflict, notFound, unprocessable } from "../../error-handler.js";
+import { API_PREFIX } from "../../hateoas.js";
+import { requirePermission } from "../../middleware/auth-middleware.js";
+import { checkOpRunInProgress, checkOrderRunStarted, checkWorkCenterAccess, mutationResult, resolveStepRun, } from "../../route-helpers.js";
+import { getStepRunWithFields } from "../../services/operations/step-run-service.js";
+import { ensureStepRunFieldRecord } from "../../services/production/field-service.js";
+import { checkFieldValueShape, clearAttachmentFieldValue, deleteFieldValueSet, deserializeFieldValue, findStepRunWithField, serializeFieldValue, upsertFieldValue, validateFieldValue, } from "../../services/production/field-value-service.js";
+import { isUserClockedIn } from "../../services/production/labor-ticket-service.js";
 import { computeStepRunHateoas, stepRunResource } from "./step-runs.js";
 const FieldSeqNoParamsSchema = z.object({
     orderKey: z.string(),