@open-mercato/core 0.5.1-develop.2699.f8b50c8046 → 0.5.1-develop.2708.d6c4f6e5d1

package/dist/modules/customer_accounts/services/customerTokenService.js

@@ -67,7 +67,7 @@ class CustomerTokenService {
     if (tenantId && user?.tenantId !== tenantId) return null;
     const db = getKysely(this.em);
     const updateResult = await db.updateTable("customer_user_email_verifications").set({ used_at: /* @__PURE__ */ new Date() }).where("id", "=", record.id).where("used_at", "is", null).where("expires_at", ">", /* @__PURE__ */ new Date()).executeTakeFirst();
-    const consumed = Number(updateResult?.numUpdatedRows ?? 0n);
+    const consumed = Number(updateResult?.numUpdatedRows ?? 0);
     if (consumed === 0) return null;
     const resolvedUserId = typeof user === "string" ? user : user.id;
     const resolvedTenantId = typeof user === "string" ? "" : user.tenantId;
@@ -85,7 +85,7 @@ class CustomerTokenService {
     if (tenantId && user?.tenantId !== tenantId) return null;
     const db = getKysely(this.em);
     const updateResult = await db.updateTable("customer_user_password_resets").set({ used_at: /* @__PURE__ */ new Date() }).where("id", "=", record.id).where("used_at", "is", null).where("expires_at", ">", /* @__PURE__ */ new Date()).executeTakeFirst();
-    const consumed = Number(updateResult?.numUpdatedRows ?? 0n);
+    const consumed = Number(updateResult?.numUpdatedRows ?? 0);
     if (consumed === 0) return null;
     const resolvedUserId = typeof user === "string" ? user : user.id;
     const resolvedTenantId = typeof user === "string" ? "" : user.tenantId;

package/dist/modules/customer_accounts/services/customerTokenService.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customer_accounts/services/customerTokenService.ts"],
-  "sourcesContent": ["import { EntityManager } from '@mikro-orm/postgresql'\nimport type { Kysely } from 'kysely'\nimport {\n  CustomerUser,\n  CustomerUserEmailVerification,\n  CustomerUserPasswordReset,\n} from '@open-mercato/core/modules/customer_accounts/data/entities'\nimport { generateSecureToken, hashToken } from '@open-mercato/core/modules/customer_accounts/lib/tokenGenerator'\n\nfunction getKysely(em: EntityManager): Kysely<any> {\n  return (em as unknown as { getKysely: () => Kysely<any> }).getKysely()\n}\n\nconst EMAIL_VERIFICATION_TTL_MS = 24 * 60 * 60 * 1000 // 24 hours\nconst MAGIC_LINK_TTL_MS = 15 * 60 * 1000 // 15 minutes\nconst PASSWORD_RESET_TTL_MS = 60 * 60 * 1000 // 60 minutes\n\nexport class CustomerTokenService {\n  constructor(private em: EntityManager) {}\n\n  async createEmailVerification(userId: string, tenantId: string): Promise<string> {\n    const rawToken = generateSecureToken()\n    const tokenHashed = hashToken(rawToken)\n    const expiresAt = new Date(Date.now() + EMAIL_VERIFICATION_TTL_MS)\n    const record = this.em.create(CustomerUserEmailVerification, {\n      user: userId as any,\n      token: tokenHashed,\n      purpose: 'email_verification',\n      expiresAt,\n      createdAt: new Date(),\n    } as any)\n    await this.em.persist(record).flush()\n    return rawToken\n  }\n\n  async createMagicLink(userId: string, tenantId: string): Promise<string> {\n    const rawToken = generateSecureToken()\n    const tokenHashed = hashToken(rawToken)\n    const expiresAt = new Date(Date.now() + MAGIC_LINK_TTL_MS)\n    const record = this.em.create(CustomerUserEmailVerification, {\n      user: userId as any,\n      token: tokenHashed,\n      purpose: 'magic_link',\n      expiresAt,\n      createdAt: new Date(),\n    } as any)\n    await this.em.persist(record).flush()\n    return rawToken\n  }\n\n  async createPasswordReset(userId: string, tenantId: string): Promise<string> {\n    const rawToken = generateSecureToken()\n    const tokenHashed = hashToken(rawToken)\n    const expiresAt = new Date(Date.now() + PASSWORD_RESET_TTL_MS)\n    const record = this.em.create(CustomerUserPasswordReset, {\n      user: userId as any,\n      token: tokenHashed,\n      expiresAt,\n      createdAt: new Date(),\n    } as any)\n    await this.em.persist(record).flush()\n    return rawToken\n  }\n\n  async verifyEmailToken(token: string, purpose: string, tenantId?: string): Promise<{ userId: string; tenantId: string } | null> {\n    const tokenHashed = hashToken(token)\n    const record = await this.em.findOne(CustomerUserEmailVerification, {\n      token: tokenHashed,\n      purpose,\n    }, { populate: ['user'] })\n    if (!record) return null\n    if (record.usedAt) return null\n    if (record.expiresAt.getTime() < Date.now()) return null\n\n    const user = record.user as CustomerUser\n    if (tenantId && user?.tenantId !== tenantId) return null\n\n    const db = getKysely(this.em)\n    const updateResult = await db\n      .updateTable('customer_user_email_verifications' as any)\n      .set({ used_at: new Date() } as any)\n      .where('id' as any, '=', record.id)\n      .where('used_at' as any, 'is', null)\n      .where('expires_at' as any, '>', new Date())\n      .executeTakeFirst()\n    const consumed = Number(updateResult?.numUpdatedRows ?? 0n)\n    if (consumed === 0) return null\n\n    const resolvedUserId = typeof user === 'string' ? user : user.id\n    const resolvedTenantId = typeof user === 'string' ? '' : user.tenantId\n    return { userId: resolvedUserId, tenantId: resolvedTenantId }\n  }\n\n  async verifyPasswordResetToken(token: string, tenantId?: string): Promise<{ userId: string; tenantId: string } | null> {\n    const tokenHashed = hashToken(token)\n    const record = await this.em.findOne(CustomerUserPasswordReset, {\n      token: tokenHashed,\n    }, { populate: ['user'] })\n    if (!record) return null\n    if (record.usedAt) return null\n    if (record.expiresAt.getTime() < Date.now()) return null\n\n    const user = record.user as CustomerUser\n    if (tenantId && user?.tenantId !== tenantId) return null\n\n    const db = getKysely(this.em)\n    const updateResult = await db\n      .updateTable('customer_user_password_resets' as any)\n      .set({ used_at: new Date() } as any)\n      .where('id' as any, '=', record.id)\n      .where('used_at' as any, 'is', null)\n      .where('expires_at' as any, '>', new Date())\n      .executeTakeFirst()\n    const consumed = Number(updateResult?.numUpdatedRows ?? 0n)\n    if (consumed === 0) return null\n\n    const resolvedUserId = typeof user === 'string' ? user : user.id\n    const resolvedTenantId = typeof user === 'string' ? '' : user.tenantId\n    return { userId: resolvedUserId, tenantId: resolvedTenantId }\n  }\n}\n"],
-  "mappings": "AAEA;AAAA,EAEE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB,iBAAiB;AAE/C,SAAS,UAAU,IAAgC;AACjD,SAAQ,GAAmD,UAAU;AACvE;AAEA,MAAM,4BAA4B,KAAK,KAAK,KAAK;AACjD,MAAM,oBAAoB,KAAK,KAAK;AACpC,MAAM,wBAAwB,KAAK,KAAK;AAEjC,MAAM,qBAAqB;AAAA,EAChC,YAAoB,IAAmB;AAAnB;AAAA,EAAoB;AAAA,EAExC,MAAM,wBAAwB,QAAgB,UAAmC;AAC/E,UAAM,WAAW,oBAAoB;AACrC,UAAM,cAAc,UAAU,QAAQ;AACtC,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,yBAAyB;AACjE,UAAM,SAAS,KAAK,GAAG,OAAO,+BAA+B;AAAA,MAC3D,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,MACT;AAAA,MACA,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAQ;AACR,UAAM,KAAK,GAAG,QAAQ,MAAM,EAAE,MAAM;AACpC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,gBAAgB,QAAgB,UAAmC;AACvE,UAAM,WAAW,oBAAoB;AACrC,UAAM,cAAc,UAAU,QAAQ;AACtC,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB;AACzD,UAAM,SAAS,KAAK,GAAG,OAAO,+BAA+B;AAAA,MAC3D,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,MACT;AAAA,MACA,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAQ;AACR,UAAM,KAAK,GAAG,QAAQ,MAAM,EAAE,MAAM;AACpC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,oBAAoB,QAAgB,UAAmC;AAC3E,UAAM,WAAW,oBAAoB;AACrC,UAAM,cAAc,UAAU,QAAQ;AACtC,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,qBAAqB;AAC7D,UAAM,SAAS,KAAK,GAAG,OAAO,2BAA2B;AAAA,MACvD,MAAM;AAAA,MACN,OAAO;AAAA,MACP;AAAA,MACA,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAQ;AACR,UAAM,KAAK,GAAG,QAAQ,MAAM,EAAE,MAAM;AACpC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,iBAAiB,OAAe,SAAiB,UAAyE;AAC9H,UAAM,cAAc,UAAU,KAAK;AACnC,UAAM,SAAS,MAAM,KAAK,GAAG,QAAQ,+BAA+B;AAAA,MAClE,OAAO;AAAA,MACP;AAAA,IACF,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,QAAI,OAAO,OAAQ,QAAO;AAC1B,QAAI,OAAO,UAAU,QAAQ,IAAI,KAAK,IAAI,EAAG,QAAO;AAEpD,UAAM,OAAO,OAAO;AACpB,QAAI,YAAY,MAAM,aAAa,SAAU,QAAO;AAEpD,UAAM,KAAK,UAAU,KAAK,EAAE;AAC5B,UAAM,eAAe,MAAM,GACxB,YAAY,mCAA0C,EACtD,IAAI,EAAE,SAAS,oBAAI,KAAK,EAAE,CAAQ,EAClC,MAAM,MAAa,KAAK,OAAO,EAAE,EACjC,MAAM,WAAkB,MAAM,IAAI,EAClC,MAAM,cAAqB,KAAK,oBAAI,KAAK,CAAC,EAC1C,iBAAiB;AACpB,UAAM,WAAW,OAAO,cAAc,kBAAkB,EAAE;AAC1D,QAAI,aAAa,EAAG,QAAO;AAE3B,UAAM,iBAAiB,OAAO,SAAS,WAAW,OAAO,KAAK;AAC9D,UAAM,mBAAmB,OAAO,SAAS,WAAW,KAAK,KAAK;AAC9D,WAAO,EAAE,QAAQ,gBAAgB,UAAU,iBAAiB;AAAA,EAC9D;AAAA,EAEA,MAAM,yBAAyB,OAAe,UAAyE;AACrH,UAAM,cAAc,UAAU,KAAK;AACnC,UAAM,SAAS,MAAM,KAAK,GAAG,QAAQ,2BAA2B;AAAA,MAC9D,OAAO;AAAA,IACT,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,QAAI,OAAO,OAAQ,QAAO;AAC1B,QAAI,OAAO,UAAU,QAAQ,IAAI,KAAK,IAAI,EAAG,QAAO;AAEpD,UAAM,OAAO,OAAO;AACpB,QAAI,YAAY,MAAM,aAAa,SAAU,QAAO;AAEpD,UAAM,KAAK,UAAU,KAAK,EAAE;AAC5B,UAAM,eAAe,MAAM,GACxB,YAAY,+BAAsC,EAClD,IAAI,EAAE,SAAS,oBAAI,KAAK,EAAE,CAAQ,EAClC,MAAM,MAAa,KAAK,OAAO,EAAE,EACjC,MAAM,WAAkB,MAAM,IAAI,EAClC,MAAM,cAAqB,KAAK,oBAAI,KAAK,CAAC,EAC1C,iBAAiB;AACpB,UAAM,WAAW,OAAO,cAAc,kBAAkB,EAAE;AAC1D,QAAI,aAAa,EAAG,QAAO;AAE3B,UAAM,iBAAiB,OAAO,SAAS,WAAW,OAAO,KAAK;AAC9D,UAAM,mBAAmB,OAAO,SAAS,WAAW,KAAK,KAAK;AAC9D,WAAO,EAAE,QAAQ,gBAAgB,UAAU,iBAAiB;AAAA,EAC9D;AACF;",
+  "sourcesContent": ["import { EntityManager } from '@mikro-orm/postgresql'\nimport type { Kysely } from 'kysely'\nimport {\n  CustomerUser,\n  CustomerUserEmailVerification,\n  CustomerUserPasswordReset,\n} from '@open-mercato/core/modules/customer_accounts/data/entities'\nimport { generateSecureToken, hashToken } from '@open-mercato/core/modules/customer_accounts/lib/tokenGenerator'\n\nfunction getKysely(em: EntityManager): Kysely<any> {\n  return (em as unknown as { getKysely: () => Kysely<any> }).getKysely()\n}\n\nconst EMAIL_VERIFICATION_TTL_MS = 24 * 60 * 60 * 1000 // 24 hours\nconst MAGIC_LINK_TTL_MS = 15 * 60 * 1000 // 15 minutes\nconst PASSWORD_RESET_TTL_MS = 60 * 60 * 1000 // 60 minutes\n\nexport class CustomerTokenService {\n  constructor(private em: EntityManager) {}\n\n  async createEmailVerification(userId: string, tenantId: string): Promise<string> {\n    const rawToken = generateSecureToken()\n    const tokenHashed = hashToken(rawToken)\n    const expiresAt = new Date(Date.now() + EMAIL_VERIFICATION_TTL_MS)\n    const record = this.em.create(CustomerUserEmailVerification, {\n      user: userId as any,\n      token: tokenHashed,\n      purpose: 'email_verification',\n      expiresAt,\n      createdAt: new Date(),\n    } as any)\n    await this.em.persist(record).flush()\n    return rawToken\n  }\n\n  async createMagicLink(userId: string, tenantId: string): Promise<string> {\n    const rawToken = generateSecureToken()\n    const tokenHashed = hashToken(rawToken)\n    const expiresAt = new Date(Date.now() + MAGIC_LINK_TTL_MS)\n    const record = this.em.create(CustomerUserEmailVerification, {\n      user: userId as any,\n      token: tokenHashed,\n      purpose: 'magic_link',\n      expiresAt,\n      createdAt: new Date(),\n    } as any)\n    await this.em.persist(record).flush()\n    return rawToken\n  }\n\n  async createPasswordReset(userId: string, tenantId: string): Promise<string> {\n    const rawToken = generateSecureToken()\n    const tokenHashed = hashToken(rawToken)\n    const expiresAt = new Date(Date.now() + PASSWORD_RESET_TTL_MS)\n    const record = this.em.create(CustomerUserPasswordReset, {\n      user: userId as any,\n      token: tokenHashed,\n      expiresAt,\n      createdAt: new Date(),\n    } as any)\n    await this.em.persist(record).flush()\n    return rawToken\n  }\n\n  async verifyEmailToken(token: string, purpose: string, tenantId?: string): Promise<{ userId: string; tenantId: string } | null> {\n    const tokenHashed = hashToken(token)\n    const record = await this.em.findOne(CustomerUserEmailVerification, {\n      token: tokenHashed,\n      purpose,\n    }, { populate: ['user'] })\n    if (!record) return null\n    if (record.usedAt) return null\n    if (record.expiresAt.getTime() < Date.now()) return null\n\n    const user = record.user as CustomerUser\n    if (tenantId && user?.tenantId !== tenantId) return null\n\n    const db = getKysely(this.em)\n    const updateResult = await db\n      .updateTable('customer_user_email_verifications' as any)\n      .set({ used_at: new Date() } as any)\n      .where('id' as any, '=', record.id)\n      .where('used_at' as any, 'is', null)\n      .where('expires_at' as any, '>', new Date())\n      .executeTakeFirst()\n    const consumed = Number(updateResult?.numUpdatedRows ?? 0)\n    if (consumed === 0) return null\n\n    const resolvedUserId = typeof user === 'string' ? user : user.id\n    const resolvedTenantId = typeof user === 'string' ? '' : user.tenantId\n    return { userId: resolvedUserId, tenantId: resolvedTenantId }\n  }\n\n  async verifyPasswordResetToken(token: string, tenantId?: string): Promise<{ userId: string; tenantId: string } | null> {\n    const tokenHashed = hashToken(token)\n    const record = await this.em.findOne(CustomerUserPasswordReset, {\n      token: tokenHashed,\n    }, { populate: ['user'] })\n    if (!record) return null\n    if (record.usedAt) return null\n    if (record.expiresAt.getTime() < Date.now()) return null\n\n    const user = record.user as CustomerUser\n    if (tenantId && user?.tenantId !== tenantId) return null\n\n    const db = getKysely(this.em)\n    const updateResult = await db\n      .updateTable('customer_user_password_resets' as any)\n      .set({ used_at: new Date() } as any)\n      .where('id' as any, '=', record.id)\n      .where('used_at' as any, 'is', null)\n      .where('expires_at' as any, '>', new Date())\n      .executeTakeFirst()\n    const consumed = Number(updateResult?.numUpdatedRows ?? 0)\n    if (consumed === 0) return null\n\n    const resolvedUserId = typeof user === 'string' ? user : user.id\n    const resolvedTenantId = typeof user === 'string' ? '' : user.tenantId\n    return { userId: resolvedUserId, tenantId: resolvedTenantId }\n  }\n}\n"],
+  "mappings": "AAEA;AAAA,EAEE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB,iBAAiB;AAE/C,SAAS,UAAU,IAAgC;AACjD,SAAQ,GAAmD,UAAU;AACvE;AAEA,MAAM,4BAA4B,KAAK,KAAK,KAAK;AACjD,MAAM,oBAAoB,KAAK,KAAK;AACpC,MAAM,wBAAwB,KAAK,KAAK;AAEjC,MAAM,qBAAqB;AAAA,EAChC,YAAoB,IAAmB;AAAnB;AAAA,EAAoB;AAAA,EAExC,MAAM,wBAAwB,QAAgB,UAAmC;AAC/E,UAAM,WAAW,oBAAoB;AACrC,UAAM,cAAc,UAAU,QAAQ;AACtC,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,yBAAyB;AACjE,UAAM,SAAS,KAAK,GAAG,OAAO,+BAA+B;AAAA,MAC3D,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,MACT;AAAA,MACA,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAQ;AACR,UAAM,KAAK,GAAG,QAAQ,MAAM,EAAE,MAAM;AACpC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,gBAAgB,QAAgB,UAAmC;AACvE,UAAM,WAAW,oBAAoB;AACrC,UAAM,cAAc,UAAU,QAAQ;AACtC,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB;AACzD,UAAM,SAAS,KAAK,GAAG,OAAO,+BAA+B;AAAA,MAC3D,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,MACT;AAAA,MACA,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAQ;AACR,UAAM,KAAK,GAAG,QAAQ,MAAM,EAAE,MAAM;AACpC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,oBAAoB,QAAgB,UAAmC;AAC3E,UAAM,WAAW,oBAAoB;AACrC,UAAM,cAAc,UAAU,QAAQ;AACtC,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,qBAAqB;AAC7D,UAAM,SAAS,KAAK,GAAG,OAAO,2BAA2B;AAAA,MACvD,MAAM;AAAA,MACN,OAAO;AAAA,MACP;AAAA,MACA,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAQ;AACR,UAAM,KAAK,GAAG,QAAQ,MAAM,EAAE,MAAM;AACpC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,iBAAiB,OAAe,SAAiB,UAAyE;AAC9H,UAAM,cAAc,UAAU,KAAK;AACnC,UAAM,SAAS,MAAM,KAAK,GAAG,QAAQ,+BAA+B;AAAA,MAClE,OAAO;AAAA,MACP;AAAA,IACF,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,QAAI,OAAO,OAAQ,QAAO;AAC1B,QAAI,OAAO,UAAU,QAAQ,IAAI,KAAK,IAAI,EAAG,QAAO;AAEpD,UAAM,OAAO,OAAO;AACpB,QAAI,YAAY,MAAM,aAAa,SAAU,QAAO;AAEpD,UAAM,KAAK,UAAU,KAAK,EAAE;AAC5B,UAAM,eAAe,MAAM,GACxB,YAAY,mCAA0C,EACtD,IAAI,EAAE,SAAS,oBAAI,KAAK,EAAE,CAAQ,EAClC,MAAM,MAAa,KAAK,OAAO,EAAE,EACjC,MAAM,WAAkB,MAAM,IAAI,EAClC,MAAM,cAAqB,KAAK,oBAAI,KAAK,CAAC,EAC1C,iBAAiB;AACpB,UAAM,WAAW,OAAO,cAAc,kBAAkB,CAAC;AACzD,QAAI,aAAa,EAAG,QAAO;AAE3B,UAAM,iBAAiB,OAAO,SAAS,WAAW,OAAO,KAAK;AAC9D,UAAM,mBAAmB,OAAO,SAAS,WAAW,KAAK,KAAK;AAC9D,WAAO,EAAE,QAAQ,gBAAgB,UAAU,iBAAiB;AAAA,EAC9D;AAAA,EAEA,MAAM,yBAAyB,OAAe,UAAyE;AACrH,UAAM,cAAc,UAAU,KAAK;AACnC,UAAM,SAAS,MAAM,KAAK,GAAG,QAAQ,2BAA2B;AAAA,MAC9D,OAAO;AAAA,IACT,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;AACzB,QAAI,CAAC,OAAQ,QAAO;AACpB,QAAI,OAAO,OAAQ,QAAO;AAC1B,QAAI,OAAO,UAAU,QAAQ,IAAI,KAAK,IAAI,EAAG,QAAO;AAEpD,UAAM,OAAO,OAAO;AACpB,QAAI,YAAY,MAAM,aAAa,SAAU,QAAO;AAEpD,UAAM,KAAK,UAAU,KAAK,EAAE;AAC5B,UAAM,eAAe,MAAM,GACxB,YAAY,+BAAsC,EAClD,IAAI,EAAE,SAAS,oBAAI,KAAK,EAAE,CAAQ,EAClC,MAAM,MAAa,KAAK,OAAO,EAAE,EACjC,MAAM,WAAkB,MAAM,IAAI,EAClC,MAAM,cAAqB,KAAK,oBAAI,KAAK,CAAC,EAC1C,iBAAiB;AACpB,UAAM,WAAW,OAAO,cAAc,kBAAkB,CAAC;AACzD,QAAI,aAAa,EAAG,QAAO;AAE3B,UAAM,iBAAiB,OAAO,SAAS,WAAW,OAAO,KAAK;AAC9D,UAAM,mBAAmB,OAAO,SAAS,WAAW,KAAK,KAAK;AAC9D,WAAO,EAAE,QAAQ,gBAAgB,UAAU,iBAAiB;AAAA,EAC9D;AACF;",
   "names": []
 }

package/dist/modules/messages/lib/tokenConsumption.js

@@ -11,7 +11,7 @@ async function consumeMessageAccessToken(em, tokenId) {
     use_count: sql`use_count + 1`,
     used_at: now
   }).where("id", "=", tokenId).where("use_count", "<", MAX_TOKEN_USE_COUNT).where("expires_at", ">", now).executeTakeFirst();
-  const consumed = Number(updateResult?.numUpdatedRows ?? 0n);
+  const consumed = Number(updateResult?.numUpdatedRows ?? 0);
   if (consumed > 0) return { ok: true };
   em.clear();
   const fresh = await em.findOne(MessageAccessToken, { id: tokenId });

package/dist/modules/messages/lib/tokenConsumption.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/lib/tokenConsumption.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { MessageAccessToken } from '../data/entities'\n\nexport const MAX_TOKEN_USE_COUNT = 25\n\nexport type TokenConsumptionFailureReason = 'expired' | 'exhausted' | 'not_found'\n\nexport type TokenConsumptionResult =\n  | { ok: true }\n  | { ok: false; reason: TokenConsumptionFailureReason }\n\nfunction getKysely(em: EntityManager): Kysely<any> {\n  return (em as unknown as { getKysely: () => Kysely<any> }).getKysely()\n}\n\nexport async function consumeMessageAccessToken(\n  em: EntityManager,\n  tokenId: string,\n): Promise<TokenConsumptionResult> {\n  const db = getKysely(em)\n  const now = new Date()\n  const updateResult = await db\n    .updateTable('message_access_tokens' as any)\n    .set({\n      use_count: sql`use_count + 1`,\n      used_at: now,\n    } as any)\n    .where('id' as any, '=', tokenId)\n    .where('use_count' as any, '<', MAX_TOKEN_USE_COUNT)\n    .where('expires_at' as any, '>', now)\n    .executeTakeFirst()\n  const consumed = Number(updateResult?.numUpdatedRows ?? 0n)\n  if (consumed > 0) return { ok: true }\n\n  em.clear()\n  const fresh = await em.findOne(MessageAccessToken, { id: tokenId })\n  if (!fresh) return { ok: false, reason: 'not_found' }\n  if (fresh.expiresAt < now) return { ok: false, reason: 'expired' }\n  return { ok: false, reason: 'exhausted' }\n}\n"],
-  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,0BAA0B;AAE5B,MAAM,sBAAsB;AAQnC,SAAS,UAAU,IAAgC;AACjD,SAAQ,GAAmD,UAAU;AACvE;AAEA,eAAsB,0BACpB,IACA,SACiC;AACjC,QAAM,KAAK,UAAU,EAAE;AACvB,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,eAAe,MAAM,GACxB,YAAY,uBAA8B,EAC1C,IAAI;AAAA,IACH,WAAW;AAAA,IACX,SAAS;AAAA,EACX,CAAQ,EACP,MAAM,MAAa,KAAK,OAAO,EAC/B,MAAM,aAAoB,KAAK,mBAAmB,EAClD,MAAM,cAAqB,KAAK,GAAG,EACnC,iBAAiB;AACpB,QAAM,WAAW,OAAO,cAAc,kBAAkB,EAAE;AAC1D,MAAI,WAAW,EAAG,QAAO,EAAE,IAAI,KAAK;AAEpC,KAAG,MAAM;AACT,QAAM,QAAQ,MAAM,GAAG,QAAQ,oBAAoB,EAAE,IAAI,QAAQ,CAAC;AAClE,MAAI,CAAC,MAAO,QAAO,EAAE,IAAI,OAAO,QAAQ,YAAY;AACpD,MAAI,MAAM,YAAY,IAAK,QAAO,EAAE,IAAI,OAAO,QAAQ,UAAU;AACjE,SAAO,EAAE,IAAI,OAAO,QAAQ,YAAY;AAC1C;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { MessageAccessToken } from '../data/entities'\n\nexport const MAX_TOKEN_USE_COUNT = 25\n\nexport type TokenConsumptionFailureReason = 'expired' | 'exhausted' | 'not_found'\n\nexport type TokenConsumptionResult =\n  | { ok: true }\n  | { ok: false; reason: TokenConsumptionFailureReason }\n\nfunction getKysely(em: EntityManager): Kysely<any> {\n  return (em as unknown as { getKysely: () => Kysely<any> }).getKysely()\n}\n\nexport async function consumeMessageAccessToken(\n  em: EntityManager,\n  tokenId: string,\n): Promise<TokenConsumptionResult> {\n  const db = getKysely(em)\n  const now = new Date()\n  const updateResult = await db\n    .updateTable('message_access_tokens' as any)\n    .set({\n      use_count: sql`use_count + 1`,\n      used_at: now,\n    } as any)\n    .where('id' as any, '=', tokenId)\n    .where('use_count' as any, '<', MAX_TOKEN_USE_COUNT)\n    .where('expires_at' as any, '>', now)\n    .executeTakeFirst()\n  const consumed = Number(updateResult?.numUpdatedRows ?? 0)\n  if (consumed > 0) return { ok: true }\n\n  em.clear()\n  const fresh = await em.findOne(MessageAccessToken, { id: tokenId })\n  if (!fresh) return { ok: false, reason: 'not_found' }\n  if (fresh.expiresAt < now) return { ok: false, reason: 'expired' }\n  return { ok: false, reason: 'exhausted' }\n}\n"],
+  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,0BAA0B;AAE5B,MAAM,sBAAsB;AAQnC,SAAS,UAAU,IAAgC;AACjD,SAAQ,GAAmD,UAAU;AACvE;AAEA,eAAsB,0BACpB,IACA,SACiC;AACjC,QAAM,KAAK,UAAU,EAAE;AACvB,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,eAAe,MAAM,GACxB,YAAY,uBAA8B,EAC1C,IAAI;AAAA,IACH,WAAW;AAAA,IACX,SAAS;AAAA,EACX,CAAQ,EACP,MAAM,MAAa,KAAK,OAAO,EAC/B,MAAM,aAAoB,KAAK,mBAAmB,EAClD,MAAM,cAAqB,KAAK,GAAG,EACnC,iBAAiB;AACpB,QAAM,WAAW,OAAO,cAAc,kBAAkB,CAAC;AACzD,MAAI,WAAW,EAAG,QAAO,EAAE,IAAI,KAAK;AAEpC,KAAG,MAAM;AACT,QAAM,QAAQ,MAAM,GAAG,QAAQ,oBAAoB,EAAE,IAAI,QAAQ,CAAC;AAClE,MAAI,CAAC,MAAO,QAAO,EAAE,IAAI,OAAO,QAAQ,YAAY;AACpD,MAAI,MAAM,YAAY,IAAK,QAAO,EAAE,IAAI,OAAO,QAAQ,UAAU;AACjE,SAAO,EAAE,IAAI,OAAO,QAAQ,YAAY;AAC1C;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.5.1-develop.2699.f8b50c8046",
+  "version": "0.5.1-develop.2708.d6c4f6e5d1",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -223,6 +223,9 @@
     }
   },
   "dependencies": {
+    "@mikro-orm/core": "^7.0.10",
+    "@mikro-orm/decorators": "^7.0.10",
+    "@mikro-orm/postgresql": "^7.0.10",
     "@xyflow/react": "^12.10.2",
     "ai": "^6.0.168",
     "date-fns": "^4.1.0",
@@ -234,10 +237,10 @@
     "ts-pattern": "^5.0.0"
   },
   "peerDependencies": {
-    "@open-mercato/shared": "0.5.1-develop.2699.f8b50c8046"
+    "@open-mercato/shared": "0.5.1-develop.2708.d6c4f6e5d1"
   },
   "devDependencies": {
-    "@open-mercato/shared": "0.5.1-develop.2699.f8b50c8046",
+    "@open-mercato/shared": "0.5.1-develop.2708.d6c4f6e5d1",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.1",

package/src/modules/customer_accounts/services/customerTokenService.ts

@@ -83,7 +83,7 @@ export class CustomerTokenService {
       .where('used_at' as any, 'is', null)
       .where('expires_at' as any, '>', new Date())
       .executeTakeFirst()
-    const consumed = Number(updateResult?.numUpdatedRows ?? 0n)
+    const consumed = Number(updateResult?.numUpdatedRows ?? 0)
     if (consumed === 0) return null
 
     const resolvedUserId = typeof user === 'string' ? user : user.id
@@ -111,7 +111,7 @@ export class CustomerTokenService {
       .where('used_at' as any, 'is', null)
       .where('expires_at' as any, '>', new Date())
       .executeTakeFirst()
-    const consumed = Number(updateResult?.numUpdatedRows ?? 0n)
+    const consumed = Number(updateResult?.numUpdatedRows ?? 0)
     if (consumed === 0) return null
 
     const resolvedUserId = typeof user === 'string' ? user : user.id

package/src/modules/customers/i18n/de.json

@@ -966,6 +966,9 @@
   "customers.linking.preview.label": "Vorschau",
   "customers.linking.preview.loading": "Details werden geladen…",
   "customers.linking.primary.badge": "Primär",
+  "customers.linking.primary.current": "Primär",
+  "customers.linking.primary.help": "Wähle aus, welcher verknüpfte Datensatz als primär behandelt werden soll.",
+  "customers.linking.primary.set": "Als primär festlegen",
   "customers.linking.primary.setAction": "Als primär festlegen",
   "customers.linking.resultsCount": "{{count}} Ergebnisse",
   "customers.linking.searchResults": "Suchergebnisse",
@@ -973,6 +976,7 @@
   "customers.linking.selectEntity": "{{name}} auswählen",
   "customers.linking.selected.clearAll": "Zurücksetzen",
   "customers.linking.selected.count": "{{count}} ausgewählt",
+  "customers.linking.selected.label": "Ausgewählt",
   "customers.linking.selected.remove": "Entfernen",
   "customers.linking.selected.title": "Ausgewählt",
   "customers.linking.settings.label": "Verknüpfungseinstellungen",

package/src/modules/customers/i18n/en.json

@@ -966,6 +966,9 @@
   "customers.linking.preview.label": "Preview",
   "customers.linking.preview.loading": "Loading details…",
   "customers.linking.primary.badge": "Primary",
+  "customers.linking.primary.current": "Primary",
+  "customers.linking.primary.help": "Choose which linked record should be treated as primary.",
+  "customers.linking.primary.set": "Set primary",
   "customers.linking.primary.setAction": "Set primary",
   "customers.linking.resultsCount": "{{count}} results",
   "customers.linking.searchResults": "Search results",
@@ -973,6 +976,7 @@
   "customers.linking.selectEntity": "Select {{name}}",
   "customers.linking.selected.clearAll": "Clear",
   "customers.linking.selected.count": "{{count}} selected",
+  "customers.linking.selected.label": "Selected",
   "customers.linking.selected.remove": "Remove",
   "customers.linking.selected.title": "Selected",
   "customers.linking.settings.label": "Link settings",

package/src/modules/customers/i18n/es.json

@@ -966,6 +966,9 @@
   "customers.linking.preview.label": "Vista previa",
   "customers.linking.preview.loading": "Cargando detalles…",
   "customers.linking.primary.badge": "Principal",
+  "customers.linking.primary.current": "Principal",
+  "customers.linking.primary.help": "Elige qué registro vinculado debe tratarse como principal.",
+  "customers.linking.primary.set": "Definir principal",
   "customers.linking.primary.setAction": "Marcar como principal",
   "customers.linking.resultsCount": "{{count}} resultados",
   "customers.linking.searchResults": "Resultados de la búsqueda",
@@ -973,6 +976,7 @@
   "customers.linking.selectEntity": "Seleccionar {{name}}",
   "customers.linking.selected.clearAll": "Limpiar",
   "customers.linking.selected.count": "{{count}} seleccionados",
+  "customers.linking.selected.label": "Seleccionados",
   "customers.linking.selected.remove": "Eliminar",
   "customers.linking.selected.title": "Seleccionados",
   "customers.linking.settings.label": "Ajustes del vínculo",

package/src/modules/customers/i18n/pl.json

@@ -966,6 +966,9 @@
   "customers.linking.preview.label": "Podgląd",
   "customers.linking.preview.loading": "Wczytywanie szczegółów…",
   "customers.linking.primary.badge": "Główny",
+  "customers.linking.primary.current": "Główny",
+  "customers.linking.primary.help": "Wybierz, który powiązany rekord ma być traktowany jako główny.",
+  "customers.linking.primary.set": "Ustaw główny",
   "customers.linking.primary.setAction": "Ustaw jako główny",
   "customers.linking.resultsCount": "{{count}} wyników",
   "customers.linking.searchResults": "Wyniki wyszukiwania",
@@ -973,6 +976,7 @@
   "customers.linking.selectEntity": "Wybierz {{name}}",
   "customers.linking.selected.clearAll": "Wyczyść",
   "customers.linking.selected.count": "Wybrano: {{count}}",
+  "customers.linking.selected.label": "Wybrane",
   "customers.linking.selected.remove": "Usuń",
   "customers.linking.selected.title": "Wybrane",
   "customers.linking.settings.label": "Ustawienia powiązania",

package/src/modules/messages/lib/tokenConsumption.ts

@@ -30,7 +30,7 @@ export async function consumeMessageAccessToken(
     .where('use_count' as any, '<', MAX_TOKEN_USE_COUNT)
     .where('expires_at' as any, '>', now)
     .executeTakeFirst()
-  const consumed = Number(updateResult?.numUpdatedRows ?? 0n)
+  const consumed = Number(updateResult?.numUpdatedRows ?? 0)
   if (consumed > 0) return { ok: true }
 
   em.clear()

package/src/modules/sales/i18n/de.json

@@ -1338,10 +1338,12 @@
   "sales.shipment-statuses.create": "Sendungsstatus hinzufügen",
   "sales.shipment-statuses.delete": "Sendungsstatus löschen",
   "sales.shipment-statuses.update": "Sendungsstatus aktualisieren",
+  "sales.shipments.fully_returned": "Die Sendung kann nicht geändert werden: Die Bestellung wurde vollständig retourniert.",
   "sales.shipments.invalid_order": "Die Sendung gehört nicht zu dieser Bestellung.",
   "sales.shipments.items_required": "Füge mindestens eine Position zur Sendung hinzu.",
   "sales.shipments.line_missing": "Bestellposition wurde nicht gefunden.",
   "sales.shipments.not_found": "Sendung wurde nicht gefunden",
+  "sales.shipments.payment_completed": "Die Sendung kann nicht geändert werden: Die Zahlung der Bestellung ist abgeschlossen.",
   "sales.shipments.quantity_exceeded": "Es kann nicht mehr als die verbleibende Menge versendet werden.",
   "sales.stageBar.changeFailed": "Failed to update stage",
   "sales.stageBar.changed": "Stage updated",

package/src/modules/sales/i18n/en.json

@@ -1338,10 +1338,12 @@
   "sales.shipment-statuses.create": "Add shipment status",
   "sales.shipment-statuses.delete": "Delete shipment status",
   "sales.shipment-statuses.update": "Update shipment status",
+  "sales.shipments.fully_returned": "Cannot modify shipment: order is fully returned.",
   "sales.shipments.invalid_order": "Shipment does not belong to this order.",
   "sales.shipments.items_required": "Add at least one line to ship.",
   "sales.shipments.line_missing": "Order line not found.",
   "sales.shipments.not_found": "Shipment not found",
+  "sales.shipments.payment_completed": "Cannot modify shipment: order payment is completed.",
   "sales.shipments.quantity_exceeded": "Cannot ship more than the remaining quantity.",
   "sales.stageBar.changeFailed": "Failed to update stage",
   "sales.stageBar.changed": "Stage updated",

package/src/modules/sales/i18n/es.json

@@ -1338,10 +1338,12 @@
   "sales.shipment-statuses.create": "Agregar estado de envío",
   "sales.shipment-statuses.delete": "Eliminar estado de envío",
   "sales.shipment-statuses.update": "Actualizar estado de envío",
+  "sales.shipments.fully_returned": "No se puede modificar el envío: el pedido fue devuelto por completo.",
   "sales.shipments.invalid_order": "El envío no pertenece a este pedido.",
   "sales.shipments.items_required": "Agrega al menos una línea para enviar.",
   "sales.shipments.line_missing": "Línea de pedido no encontrada.",
   "sales.shipments.not_found": "Envío no encontrado",
+  "sales.shipments.payment_completed": "No se puede modificar el envío: el pago del pedido está completado.",
   "sales.shipments.quantity_exceeded": "No se puede enviar más de la cantidad restante.",
   "sales.stageBar.changeFailed": "Failed to update stage",
   "sales.stageBar.changed": "Stage updated",

package/src/modules/sales/i18n/pl.json

@@ -1338,10 +1338,12 @@
   "sales.shipment-statuses.create": "Dodaj status wysyłki",
   "sales.shipment-statuses.delete": "Usuń status wysyłki",
   "sales.shipment-statuses.update": "Zaktualizuj status wysyłki",
+  "sales.shipments.fully_returned": "Nie można zmodyfikować wysyłki: zamówienie zostało w pełni zwrócone.",
   "sales.shipments.invalid_order": "Wysyłka nie należy do tego zamówienia.",
   "sales.shipments.items_required": "Dodaj co najmniej jedną linię do wysyłki.",
   "sales.shipments.line_missing": "Nie znaleziono linii zamówienia.",
   "sales.shipments.not_found": "Nie znaleziono wysyłki",
+  "sales.shipments.payment_completed": "Nie można zmodyfikować wysyłki: płatność za zamówienie jest zakończona.",
   "sales.shipments.quantity_exceeded": "Nie można wysłać więcej niż pozostała ilość.",
   "sales.stageBar.changeFailed": "Failed to update stage",
   "sales.stageBar.changed": "Stage updated",