@open-mercato/core 0.4.5-develop-0f0e676c72 → 0.4.5-develop-e694581d9f

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.4.5-develop-0f0e676c72",
+  "version": "0.4.5-develop-e694581d9f",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -207,7 +207,7 @@
     }
   },
   "dependencies": {
-    "@open-mercato/shared": "0.4.5-develop-0f0e676c72",
+    "@open-mercato/shared": "0.4.5-develop-e694581d9f",
     "@types/semver": "^7.5.8",
     "@xyflow/react": "^12.6.0",
     "ai": "^6.0.0",

package/src/modules/customers/acl.ts

@@ -8,6 +8,8 @@ export const features = [
   { id: 'customers.activities.view', title: 'View activities', module: 'customers' },
   { id: 'customers.activities.manage', title: 'Manage activities', module: 'customers' },
   { id: 'customers.settings.manage', title: 'Manage customer settings', module: 'customers' },
+  { id: 'customers.pipelines.view', title: 'View pipelines', module: 'customers' },
+  { id: 'customers.pipelines.manage', title: 'Manage pipelines', module: 'customers' },
   { id: 'customers.widgets.todos', title: 'Use customer todos widget', module: 'customers' },
   { id: 'customers.widgets.next-interactions', title: 'Use customer next interactions widget', module: 'customers' },
   { id: 'customers.widgets.new-customers', title: 'Use customer new customers widget', module: 'customers' },

package/src/modules/customers/api/deals/[id]/route.ts

@@ -212,6 +212,8 @@ export async function GET(request: Request, context: { params?: Record<string, u
       description: deal.description ?? null,
       status: deal.status ?? null,
       pipelineStage: deal.pipelineStage ?? null,
+      pipelineId: deal.pipelineId ?? null,
+      pipelineStageId: deal.pipelineStageId ?? null,
       valueAmount: deal.valueAmount ?? null,
       valueCurrency: deal.valueCurrency ?? null,
       probability: deal.probability ?? null,
@@ -241,6 +243,8 @@ const dealDetailResponseSchema = z.object({
     description: z.string().nullable().optional(),
     status: z.string().nullable().optional(),
     pipelineStage: z.string().nullable().optional(),
+    pipelineId: z.string().uuid().nullable().optional(),
+    pipelineStageId: z.string().uuid().nullable().optional(),
     valueAmount: z.number().nullable().optional(),
     valueCurrency: z.string().nullable().optional(),
     probability: z.number().nullable().optional(),

package/src/modules/customers/api/deals/route.ts

@@ -25,6 +25,8 @@ const listSchema = z
     search: z.string().optional(),
     status: z.string().optional(),
     pipelineStage: z.string().optional(),
+    pipelineId: z.string().uuid().optional(),
+    pipelineStageId: z.string().uuid().optional(),
     sortField: z.string().optional(),
     sortDir: z.enum(['asc', 'desc']).optional(),
     personEntityId: z.string().uuid().optional(),
@@ -98,6 +100,8 @@ const crud = makeCrudRoute<unknown, unknown, DealListQuery>({
       'description',
       'status',
       'pipeline_stage',
+      'pipeline_id',
+      'pipeline_stage_id',
       'value_amount',
       'value_currency',
       'probability',
@@ -129,6 +133,12 @@ const crud = makeCrudRoute<unknown, unknown, DealListQuery>({
       if (query.pipelineStage) {
         filters.pipeline_stage = { $eq: query.pipelineStage }
       }
+      if (query.pipelineId) {
+        filters.pipeline_id = { $eq: query.pipelineId }
+      }
+      if (query.pipelineStageId) {
+        filters.pipeline_stage_id = { $eq: query.pipelineStageId }
+      }
       return filters
     },
   },
@@ -394,6 +404,8 @@ const dealListItemSchema = z
     description: z.string().nullable().optional(),
     status: z.string().nullable().optional(),
     pipeline_stage: z.string().nullable().optional(),
+    pipeline_id: z.string().uuid().nullable().optional(),
+    pipeline_stage_id: z.string().uuid().nullable().optional(),
     value_amount: z.number().nullable().optional(),
     value_currency: z.string().nullable().optional(),
     probability: z.number().nullable().optional(),

package/src/modules/customers/api/dictionaries/[kind]/route.ts

@@ -4,7 +4,8 @@ import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
 import type { CommandBus } from '@open-mercato/shared/lib/commands'
 import type { CommandExecuteResult } from '@open-mercato/shared/lib/commands/types'
 import { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'
-import { CustomerDictionaryEntry } from '../../../data/entities'
+import { CustomerDictionaryEntry, CustomerPipelineStage } from '../../../data/entities'
+import { ensureDictionaryEntry } from '../../../commands/shared'
 import { mapDictionaryKind, resolveDictionaryRouteContext } from '../context'
 import { createDictionaryCacheKey, createDictionaryCacheTags, invalidateDictionaryCache, DICTIONARY_CACHE_TTL_MS } from '../cache'
 import { z } from 'zod'
@@ -48,6 +49,25 @@ export async function GET(req: Request, ctx: { params?: { kind?: string } }) {
       { orderBy: { label: 'asc' } }
     )
 
+    if (mappedKind === 'pipeline_stage' && organizationId) {
+      const existingNormalized = new Set(entries.map((e) => e.normalizedValue))
+      const pipelineStages = await em.find(CustomerPipelineStage, { organizationId, tenantId })
+      for (const stage of pipelineStages) {
+        if (!existingNormalized.has(stage.label.trim().toLowerCase())) {
+          const created = await ensureDictionaryEntry(em, {
+            tenantId,
+            organizationId,
+            kind: 'pipeline_stage',
+            value: stage.label,
+          })
+          if (created) {
+            entries.push(created)
+            existingNormalized.add(created.normalizedValue)
+          }
+        }
+      }
+    }
+
     const byValue = new Map<string, { entry: CustomerDictionaryEntry; isInherited: boolean; order: number }>()
     for (const entry of entries) {
       const normalized = entry.normalizedValue

package/src/modules/customers/api/pipeline-stages/reorder/route.ts

@@ -0,0 +1,71 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
+import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
+import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'
+import { pipelineStageReorderSchema, type PipelineStageReorderInput } from '../../../data/validators'
+import { withScopedPayload } from '../../utils'
+import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
+import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
+import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
+
+export const metadata = {
+  POST: { requireAuth: true, requireFeatures: ['customers.pipelines.manage'] },
+}
+
+export async function POST(req: Request) {
+  try {
+    const container = await createRequestContainer()
+    const auth = await getAuthFromRequest(req)
+    const { translate } = await resolveTranslations()
+    if (!auth) throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })
+    const ctx: CommandRuntimeContext = {
+      container,
+      auth,
+      organizationScope: scope,
+      selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+      request: req,
+    }
+
+    const body = await req.json().catch(() => ({}))
+    const scoped = withScopedPayload(body, ctx, translate)
+
+    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)
+    await commandBus.execute<PipelineStageReorderInput, void>(
+      'customers.pipeline-stages.reorder',
+      { input: pipelineStageReorderSchema.parse(scoped), ctx },
+    )
+    return NextResponse.json({ ok: true })
+  } catch (err) {
+    if (err instanceof CrudHttpError) {
+      return NextResponse.json(err.body, { status: err.status })
+    }
+    console.error('customers.pipeline-stages.reorder failed', err)
+    return NextResponse.json({ error: 'Failed to reorder pipeline stages' }, { status: 400 })
+  }
+}
+
+const reorderOkResponseSchema = z.object({ ok: z.boolean() })
+const reorderErrorSchema = z.object({ error: z.string() })
+
+export const openApi: OpenApiRouteDoc = {
+  tag: 'Customers',
+  summary: 'Reorder pipeline stages',
+  methods: {
+    POST: {
+      summary: 'Reorder pipeline stages',
+      description: 'Updates the order of pipeline stages in bulk.',
+      requestBody: { contentType: 'application/json', schema: pipelineStageReorderSchema },
+      responses: [
+        { status: 200, description: 'Stages reordered', schema: reorderOkResponseSchema },
+      ],
+      errors: [
+        { status: 400, description: 'Validation failed', schema: reorderErrorSchema },
+        { status: 401, description: 'Unauthorized', schema: reorderErrorSchema },
+      ],
+    },
+  },
+}

package/src/modules/customers/api/pipeline-stages/route.ts

@@ -0,0 +1,296 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
+import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
+import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import type { EntityManager } from '@mikro-orm/postgresql'
+import type { CommandRuntimeContext, CommandBus } from '@open-mercato/shared/lib/commands'
+import { CustomerPipelineStage, CustomerDictionaryEntry } from '../../data/entities'
+import {
+  pipelineStageCreateSchema,
+  pipelineStageUpdateSchema,
+  pipelineStageDeleteSchema,
+  type PipelineStageCreateInput,
+  type PipelineStageUpdateInput,
+  type PipelineStageDeleteInput,
+} from '../../data/validators'
+import { withScopedPayload } from '../utils'
+import { ensureDictionaryEntry } from '../../commands/shared'
+import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
+import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
+import { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'
+import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
+
+export const metadata = {
+  GET: { requireAuth: true, requireFeatures: ['customers.pipelines.view'] },
+  POST: { requireAuth: true, requireFeatures: ['customers.pipelines.manage'] },
+  PUT: { requireAuth: true, requireFeatures: ['customers.pipelines.manage'] },
+  DELETE: { requireAuth: true, requireFeatures: ['customers.pipelines.manage'] },
+}
+
+async function buildContext(
+  req: Request
+): Promise<{ ctx: CommandRuntimeContext; organizationId: string | null; tenantId: string | null }> {
+  const container = await createRequestContainer()
+  const auth = await getAuthFromRequest(req)
+  const { translate } = await resolveTranslations()
+  if (!auth) throw new CrudHttpError(401, { error: translate('customers.errors.unauthorized', 'Unauthorized') })
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })
+  const ctx: CommandRuntimeContext = {
+    container,
+    auth,
+    organizationScope: scope,
+    selectedOrganizationId: scope?.selectedId ?? auth.orgId ?? null,
+    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+    request: req,
+  }
+  const organizationId = scope?.selectedId ?? auth.orgId ?? null
+  const tenantId = auth.tenantId ?? null
+  return { ctx, organizationId, tenantId }
+}
+
+export async function GET(req: Request) {
+  try {
+    const { ctx, organizationId, tenantId } = await buildContext(req)
+    if (!organizationId || !tenantId) {
+      return NextResponse.json({ error: 'Organization and tenant context required' }, { status: 400 })
+    }
+    const url = new URL(req.url)
+    const pipelineId = url.searchParams.get('pipelineId')
+
+    const em = (ctx.container.resolve('em') as EntityManager)
+    const where: Record<string, unknown> = { organizationId, tenantId }
+    if (pipelineId) where.pipelineId = pipelineId
+
+    const stages = await em.find(CustomerPipelineStage, where, { orderBy: { order: 'ASC' } })
+
+    const stageLabels = stages.map((s) => s.label.trim().toLowerCase())
+    const dictEntries = stageLabels.length
+      ? await em.find(CustomerDictionaryEntry, {
+          organizationId,
+          tenantId,
+          kind: 'pipeline_stage',
+          normalizedValue: { $in: stageLabels },
+        })
+      : []
+    const dictByNormalized = new Map<string, CustomerDictionaryEntry>()
+    dictEntries.forEach((entry) => dictByNormalized.set(entry.normalizedValue, entry))
+
+    const missingStages = stages.filter((s) => !dictByNormalized.has(s.label.trim().toLowerCase()))
+    if (missingStages.length) {
+      for (const stage of missingStages) {
+        const created = await ensureDictionaryEntry(em, {
+          tenantId,
+          organizationId,
+          kind: 'pipeline_stage',
+          value: stage.label,
+        })
+        if (created) dictByNormalized.set(created.normalizedValue, created)
+      }
+    }
+
+    const items = stages.map((stage) => {
+      const dictEntry = dictByNormalized.get(stage.label.trim().toLowerCase())
+      return {
+        id: stage.id,
+        pipelineId: stage.pipelineId,
+        label: stage.label,
+        order: stage.order,
+        color: dictEntry?.color ?? null,
+        icon: dictEntry?.icon ?? null,
+        organizationId: stage.organizationId,
+        tenantId: stage.tenantId,
+        createdAt: stage.createdAt,
+        updatedAt: stage.updatedAt,
+      }
+    })
+    return NextResponse.json({ items, total: items.length })
+  } catch (err) {
+    if (err instanceof CrudHttpError) {
+      return NextResponse.json(err.body, { status: err.status })
+    }
+    console.error('customers.pipeline-stages GET failed', err)
+    return NextResponse.json({ error: 'Failed to load pipeline stages' }, { status: 500 })
+  }
+}
+
+export async function POST(req: Request) {
+  try {
+    const { ctx } = await buildContext(req)
+    const body = await req.json().catch(() => ({}))
+    const { translate } = await resolveTranslations()
+    const scoped = withScopedPayload(body, ctx, translate)
+
+    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)
+    const { result, logEntry } = await commandBus.execute<PipelineStageCreateInput, { stageId: string }>(
+      'customers.pipeline-stages.create',
+      { input: pipelineStageCreateSchema.parse(scoped), ctx },
+    )
+    const response = NextResponse.json({ id: result?.stageId ?? null }, { status: 201 })
+    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {
+      response.headers.set(
+        'x-om-operation',
+        serializeOperationMetadata({
+          id: logEntry.id,
+          undoToken: logEntry.undoToken,
+          commandId: logEntry.commandId,
+          actionLabel: logEntry.actionLabel ?? null,
+          resourceKind: logEntry.resourceKind ?? 'customers.pipelineStage',
+          resourceId: logEntry.resourceId ?? result?.stageId ?? null,
+          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,
+        })
+      )
+    }
+    return response
+  } catch (err) {
+    if (err instanceof CrudHttpError) {
+      return NextResponse.json(err.body, { status: err.status })
+    }
+    console.error('customers.pipeline-stages POST failed', err)
+    return NextResponse.json({ error: 'Failed to create pipeline stage' }, { status: 400 })
+  }
+}
+
+export async function PUT(req: Request) {
+  try {
+    const { ctx } = await buildContext(req)
+    const body = await req.json().catch(() => ({}))
+    const { translate } = await resolveTranslations()
+    const scoped = withScopedPayload(body, ctx, translate)
+
+    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)
+    const { logEntry } = await commandBus.execute<PipelineStageUpdateInput, void>(
+      'customers.pipeline-stages.update',
+      { input: pipelineStageUpdateSchema.parse(scoped), ctx },
+    )
+    const response = NextResponse.json({ ok: true })
+    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {
+      response.headers.set(
+        'x-om-operation',
+        serializeOperationMetadata({
+          id: logEntry.id,
+          undoToken: logEntry.undoToken,
+          commandId: logEntry.commandId,
+          actionLabel: logEntry.actionLabel ?? null,
+          resourceKind: logEntry.resourceKind ?? 'customers.pipelineStage',
+          resourceId: logEntry.resourceId ?? null,
+          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,
+        })
+      )
+    }
+    return response
+  } catch (err) {
+    if (err instanceof CrudHttpError) {
+      return NextResponse.json(err.body, { status: err.status })
+    }
+    console.error('customers.pipeline-stages PUT failed', err)
+    return NextResponse.json({ error: 'Failed to update pipeline stage' }, { status: 400 })
+  }
+}
+
+export async function DELETE(req: Request) {
+  try {
+    const { ctx } = await buildContext(req)
+    const body = await req.json().catch(() => ({}))
+    const { translate } = await resolveTranslations()
+    const scoped = withScopedPayload(body, ctx, translate)
+
+    const commandBus = (ctx.container.resolve('commandBus') as CommandBus)
+    await commandBus.execute<PipelineStageDeleteInput, void>(
+      'customers.pipeline-stages.delete',
+      { input: pipelineStageDeleteSchema.parse(scoped), ctx },
+    )
+    return NextResponse.json({ ok: true })
+  } catch (err) {
+    if (err instanceof CrudHttpError) {
+      return NextResponse.json(err.body, { status: err.status })
+    }
+    console.error('customers.pipeline-stages DELETE failed', err)
+    return NextResponse.json({ error: 'Failed to delete pipeline stage' }, { status: 400 })
+  }
+}
+
+const stageItemSchema = z.object({
+  id: z.string().uuid(),
+  pipelineId: z.string().uuid(),
+  label: z.string(),
+  order: z.number(),
+  color: z.string().nullable(),
+  icon: z.string().nullable(),
+  organizationId: z.string().uuid(),
+  tenantId: z.string().uuid(),
+  createdAt: z.date(),
+  updatedAt: z.date(),
+})
+
+const stageListResponseSchema = z.object({
+  items: z.array(stageItemSchema),
+  total: z.number(),
+})
+
+const stageCreateResponseSchema = z.object({
+  id: z.string().uuid().nullable(),
+})
+
+const stageOkResponseSchema = z.object({
+  ok: z.boolean(),
+})
+
+const stageErrorSchema = z.object({
+  error: z.string(),
+})
+
+export const openApi: OpenApiRouteDoc = {
+  tag: 'Customers',
+  summary: 'Manage pipeline stages',
+  methods: {
+    GET: {
+      summary: 'List pipeline stages',
+      description: 'Returns pipeline stages for the authenticated organization, optionally filtered by pipelineId.',
+      query: z.object({ pipelineId: z.string().uuid().optional() }),
+      responses: [
+        { status: 200, description: 'Stage list', schema: stageListResponseSchema },
+      ],
+      errors: [
+        { status: 401, description: 'Unauthorized', schema: stageErrorSchema },
+        { status: 400, description: 'Invalid request', schema: stageErrorSchema },
+      ],
+    },
+    POST: {
+      summary: 'Create pipeline stage',
+      description: 'Creates a new pipeline stage.',
+      requestBody: { contentType: 'application/json', schema: pipelineStageCreateSchema },
+      responses: [
+        { status: 201, description: 'Stage created', schema: stageCreateResponseSchema },
+      ],
+      errors: [
+        { status: 400, description: 'Validation failed', schema: stageErrorSchema },
+        { status: 401, description: 'Unauthorized', schema: stageErrorSchema },
+      ],
+    },
+    PUT: {
+      summary: 'Update pipeline stage',
+      description: 'Updates an existing pipeline stage.',
+      requestBody: { contentType: 'application/json', schema: pipelineStageUpdateSchema },
+      responses: [
+        { status: 200, description: 'Stage updated', schema: stageOkResponseSchema },
+      ],
+      errors: [
+        { status: 400, description: 'Validation failed', schema: stageErrorSchema },
+        { status: 404, description: 'Stage not found', schema: stageErrorSchema },
+      ],
+    },
+    DELETE: {
+      summary: 'Delete pipeline stage',
+      description: 'Deletes a pipeline stage. Returns 409 if active deals use this stage.',
+      requestBody: { contentType: 'application/json', schema: pipelineStageDeleteSchema },
+      responses: [
+        { status: 200, description: 'Stage deleted', schema: stageOkResponseSchema },
+      ],
+      errors: [
+        { status: 409, description: 'Stage has active deals', schema: stageErrorSchema },
+        { status: 404, description: 'Stage not found', schema: stageErrorSchema },
+      ],
+    },
+  },
+}