@open-mercato/core 0.6.1-develop.3276.1.1fcd145078 → 0.6.1-develop.3287.1.450f4ffb56

package/dist/modules/customer_accounts/api/admin/domain-mappings.js

@@ -0,0 +1,271 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { UniqueConstraintViolationException } from "@mikro-orm/core";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import {
+  validateCrudMutationGuard,
+  runCrudMutationGuardAfterSuccess
+} from "@open-mercato/shared/lib/crud/mutation-guard";
+import { registerDomainSchema } from "@open-mercato/core/modules/customer_accounts/data/validators";
+import { DomainMapping } from "@open-mercato/core/modules/customer_accounts/data/entities";
+const FEATURE = "customer_accounts.domain.manage";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: [FEATURE] },
+  POST: { requireAuth: true, requireFeatures: [FEATURE] },
+  DELETE: { requireAuth: true, requireFeatures: [FEATURE] }
+};
+function isUniqueViolation(error) {
+  if (error instanceof UniqueConstraintViolationException) return true;
+  if (!error || typeof error !== "object") return false;
+  const code = error.code;
+  if (code === "23505") return true;
+  const messageRaw = error.message;
+  const message = typeof messageRaw === "string" ? messageRaw : "";
+  return message.toLowerCase().includes("duplicate key");
+}
+function serializeRecord(record) {
+  return {
+    id: record.id,
+    hostname: record.hostname,
+    organizationId: record.organizationId,
+    tenantId: record.tenantId,
+    provider: record.provider,
+    status: record.status,
+    verifiedAt: record.verifiedAt?.toISOString() ?? null,
+    lastDnsCheckAt: record.lastDnsCheckAt?.toISOString() ?? null,
+    dnsFailureReason: record.dnsFailureReason ?? null,
+    tlsFailureReason: record.tlsFailureReason ?? null,
+    tlsRetryCount: record.tlsRetryCount,
+    cnameTarget: process.env.CUSTOM_DOMAIN_CNAME_TARGET ?? null,
+    aRecordTarget: process.env.CUSTOM_DOMAIN_A_RECORD_TARGET ?? null,
+    createdAt: record.createdAt.toISOString(),
+    updatedAt: record.updatedAt?.toISOString() ?? null
+  };
+}
+async function GET(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth) return NextResponse.json({ ok: false, error: "Unauthorized" }, { status: 401 });
+  const container = await createRequestContainer();
+  const rbac = container.resolve("rbacService");
+  const allowed = await rbac.userHasAllFeatures(auth.sub, [FEATURE], {
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId
+  });
+  if (!allowed) return NextResponse.json({ ok: false, error: "Forbidden" }, { status: 403 });
+  const url = new URL(req.url);
+  const orgFilter = url.searchParams.get("organizationId");
+  const em = container.resolve("em");
+  const where = { tenantId: auth.tenantId };
+  if (orgFilter) where.organizationId = orgFilter;
+  const records = await em.find(DomainMapping, where, { orderBy: { createdAt: "desc" } });
+  return NextResponse.json({
+    ok: true,
+    domainMappings: records.map(serializeRecord),
+    config: {
+      cnameTarget: process.env.CUSTOM_DOMAIN_CNAME_TARGET ?? null,
+      aRecordTarget: process.env.CUSTOM_DOMAIN_A_RECORD_TARGET ?? null
+    }
+  });
+}
+async function POST(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth || !auth.tenantId) return NextResponse.json({ ok: false, error: "Unauthorized" }, { status: 401 });
+  const container = await createRequestContainer();
+  const rbac = container.resolve("rbacService");
+  const allowed = await rbac.userHasAllFeatures(auth.sub, [FEATURE], {
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId
+  });
+  if (!allowed) return NextResponse.json({ ok: false, error: "Forbidden" }, { status: 403 });
+  const body = await readJsonSafe(req, {});
+  const parsed = registerDomainSchema.safeParse(body);
+  if (!parsed.success) {
+    return NextResponse.json(
+      { ok: false, error: "Invalid request", issues: parsed.error.flatten() },
+      { status: 400 }
+    );
+  }
+  const guardResult = await validateCrudMutationGuard(container, {
+    tenantId: auth.tenantId,
+    organizationId: parsed.data.organizationId,
+    userId: auth.sub,
+    resourceKind: "customer_accounts.domain_mapping",
+    resourceId: parsed.data.organizationId,
+    operation: "create",
+    requestMethod: req.method,
+    requestHeaders: req.headers,
+    mutationPayload: parsed.data
+  });
+  if (guardResult && !guardResult.ok) {
+    return NextResponse.json(guardResult.body, { status: guardResult.status });
+  }
+  const service = container.resolve("domainMappingService");
+  let entity;
+  try {
+    entity = await service.register({
+      hostname: parsed.data.hostname,
+      organizationId: parsed.data.organizationId,
+      tenantId: auth.tenantId,
+      replacesDomainId: parsed.data.replacesDomainId
+    });
+  } catch (err) {
+    if (isUniqueViolation(err)) {
+      return NextResponse.json(
+        { ok: false, error: "This domain is not available. Please choose a different hostname." },
+        { status: 409 }
+      );
+    }
+    const message = err instanceof Error ? err.message : "Failed to register domain";
+    return NextResponse.json({ ok: false, error: message }, { status: 500 });
+  }
+  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+    await runCrudMutationGuardAfterSuccess(container, {
+      tenantId: auth.tenantId,
+      organizationId: parsed.data.organizationId,
+      userId: auth.sub,
+      resourceKind: "customer_accounts.domain_mapping",
+      resourceId: entity.id,
+      operation: "create",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      metadata: guardResult.metadata ?? null
+    });
+  }
+  return NextResponse.json({ ok: true, domainMapping: serializeRecord(entity) }, { status: 201 });
+}
+async function DELETE(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth || !auth.tenantId) return NextResponse.json({ ok: false, error: "Unauthorized" }, { status: 401 });
+  const container = await createRequestContainer();
+  const rbac = container.resolve("rbacService");
+  const allowed = await rbac.userHasAllFeatures(auth.sub, [FEATURE], {
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId
+  });
+  if (!allowed) return NextResponse.json({ ok: false, error: "Forbidden" }, { status: 403 });
+  const url = new URL(req.url);
+  const id = url.searchParams.get("id");
+  if (!id) return NextResponse.json({ ok: false, error: "id is required" }, { status: 400 });
+  const service = container.resolve("domainMappingService");
+  const existing = await service.findById(id, { tenantId: auth.tenantId });
+  if (!existing) return NextResponse.json({ ok: false, error: "Not found" }, { status: 404 });
+  const guardResult = await validateCrudMutationGuard(container, {
+    tenantId: auth.tenantId,
+    organizationId: existing.organizationId,
+    userId: auth.sub,
+    resourceKind: "customer_accounts.domain_mapping",
+    resourceId: id,
+    operation: "delete",
+    requestMethod: req.method,
+    requestHeaders: req.headers
+  });
+  if (guardResult && !guardResult.ok) {
+    return NextResponse.json(guardResult.body, { status: guardResult.status });
+  }
+  await service.remove(id, { tenantId: auth.tenantId });
+  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+    await runCrudMutationGuardAfterSuccess(container, {
+      tenantId: auth.tenantId,
+      organizationId: existing.organizationId,
+      userId: auth.sub,
+      resourceKind: "customer_accounts.domain_mapping",
+      resourceId: id,
+      operation: "delete",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      metadata: guardResult.metadata ?? null
+    });
+  }
+  return NextResponse.json({ ok: true });
+}
+const errorSchema = z.object({ ok: z.literal(false), error: z.string() });
+const domainMappingSchema = z.object({
+  id: z.string().uuid(),
+  hostname: z.string(),
+  organizationId: z.string().uuid(),
+  tenantId: z.string().uuid(),
+  provider: z.literal("traefik"),
+  status: z.enum(["pending", "verified", "active", "dns_failed", "tls_failed"]),
+  verifiedAt: z.string().nullable(),
+  lastDnsCheckAt: z.string().nullable(),
+  dnsFailureReason: z.string().nullable(),
+  tlsFailureReason: z.string().nullable(),
+  tlsRetryCount: z.number().int().nonnegative(),
+  cnameTarget: z.string().nullable(),
+  aRecordTarget: z.string().nullable(),
+  createdAt: z.string(),
+  updatedAt: z.string().nullable()
+});
+const openApi = {
+  tag: "CustomerAccounts",
+  summary: "Custom portal domain mappings (admin)",
+  methods: {
+    GET: {
+      summary: "List domain mappings",
+      description: "Returns all custom-domain mappings for the current tenant, optionally filtered by organization.",
+      responses: [
+        {
+          status: 200,
+          description: "OK",
+          schema: z.object({
+            ok: z.literal(true),
+            domainMappings: z.array(domainMappingSchema),
+            config: z.object({
+              cnameTarget: z.string().nullable(),
+              aRecordTarget: z.string().nullable()
+            })
+          })
+        }
+      ],
+      errors: [
+        { status: 401, description: "Unauthorized", schema: errorSchema },
+        { status: 403, description: "Forbidden", schema: errorSchema }
+      ]
+    },
+    POST: {
+      summary: "Register a custom domain",
+      description: "Registers a new custom domain mapping for an organization. Verifies via DNS asynchronously.",
+      requestBody: {
+        contentType: "application/json",
+        schema: z.object({
+          hostname: z.string(),
+          organizationId: z.string().uuid(),
+          replacesDomainId: z.string().uuid().optional()
+        })
+      },
+      responses: [
+        {
+          status: 201,
+          description: "Created",
+          schema: z.object({ ok: z.literal(true), domainMapping: domainMappingSchema })
+        }
+      ],
+      errors: [
+        { status: 400, description: "Validation error", schema: errorSchema },
+        { status: 401, description: "Unauthorized", schema: errorSchema },
+        { status: 403, description: "Forbidden", schema: errorSchema },
+        { status: 409, description: "Conflict", schema: errorSchema }
+      ]
+    },
+    DELETE: {
+      summary: "Remove a custom domain",
+      description: "Removes the domain mapping identified by ?id=. Cache and Traefik routing drain within TTL.",
+      responses: [{ status: 200, description: "OK", schema: z.object({ ok: z.literal(true) }) }],
+      errors: [
+        { status: 400, description: "Bad request", schema: errorSchema },
+        { status: 401, description: "Unauthorized", schema: errorSchema },
+        { status: 403, description: "Forbidden", schema: errorSchema }
+      ]
+    }
+  }
+};
+export {
+  DELETE,
+  GET,
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=domain-mappings.js.map

package/dist/modules/customer_accounts/api/admin/domain-mappings.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/customer_accounts/api/admin/domain-mappings.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { UniqueConstraintViolationException } from '@mikro-orm/core'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport {\n  validateCrudMutationGuard,\n  runCrudMutationGuardAfterSuccess,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { registerDomainSchema } from '@open-mercato/core/modules/customer_accounts/data/validators'\nimport {\n  DomainMappingService,\n  type ResolveResult,\n} from '@open-mercato/core/modules/customer_accounts/services/domainMappingService'\nimport { DomainMapping } from '@open-mercato/core/modules/customer_accounts/data/entities'\n\nconst FEATURE = 'customer_accounts.domain.manage'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: [FEATURE] },\n  POST: { requireAuth: true, requireFeatures: [FEATURE] },\n  DELETE: { requireAuth: true, requireFeatures: [FEATURE] },\n}\n\nfunction isUniqueViolation(error: unknown): boolean {\n  if (error instanceof UniqueConstraintViolationException) return true\n  if (!error || typeof error !== 'object') return false\n  const code = (error as { code?: string }).code\n  if (code === '23505') return true\n  const messageRaw = (error as { message?: string }).message\n  const message = typeof messageRaw === 'string' ? messageRaw : ''\n  return message.toLowerCase().includes('duplicate key')\n}\n\nfunction serializeRecord(record: DomainMapping) {\n  return {\n    id: record.id,\n    hostname: record.hostname,\n    organizationId: record.organizationId,\n    tenantId: record.tenantId,\n    provider: record.provider,\n    status: record.status,\n    verifiedAt: record.verifiedAt?.toISOString() ?? null,\n    lastDnsCheckAt: record.lastDnsCheckAt?.toISOString() ?? null,\n    dnsFailureReason: record.dnsFailureReason ?? null,\n    tlsFailureReason: record.tlsFailureReason ?? null,\n    tlsRetryCount: record.tlsRetryCount,\n    cnameTarget: process.env.CUSTOM_DOMAIN_CNAME_TARGET ?? null,\n    aRecordTarget: process.env.CUSTOM_DOMAIN_A_RECORD_TARGET ?? null,\n    createdAt: record.createdAt.toISOString(),\n    updatedAt: record.updatedAt?.toISOString() ?? null,\n  }\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ ok: false, error: 'Unauthorized' }, { status: 401 })\n\n  const container = await createRequestContainer()\n  const rbac = container.resolve('rbacService') as RbacService\n  const allowed = await rbac.userHasAllFeatures(auth.sub, [FEATURE], {\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n  })\n  if (!allowed) return NextResponse.json({ ok: false, error: 'Forbidden' }, { status: 403 })\n\n  const url = new URL(req.url)\n  const orgFilter = url.searchParams.get('organizationId')\n\n  const em = container.resolve('em') as EntityManager\n  const where: Record<string, unknown> = { tenantId: auth.tenantId }\n  if (orgFilter) where.organizationId = orgFilter\n  const records = await em.find(DomainMapping, where as never, { orderBy: { createdAt: 'desc' } })\n\n  return NextResponse.json({\n    ok: true,\n    domainMappings: records.map(serializeRecord),\n    config: {\n      cnameTarget: process.env.CUSTOM_DOMAIN_CNAME_TARGET ?? null,\n      aRecordTarget: process.env.CUSTOM_DOMAIN_A_RECORD_TARGET ?? null,\n    },\n  })\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) return NextResponse.json({ ok: false, error: 'Unauthorized' }, { status: 401 })\n\n  const container = await createRequestContainer()\n  const rbac = container.resolve('rbacService') as RbacService\n  const allowed = await rbac.userHasAllFeatures(auth.sub, [FEATURE], {\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n  })\n  if (!allowed) return NextResponse.json({ ok: false, error: 'Forbidden' }, { status: 403 })\n\n  const body = await readJsonSafe(req, {})\n  const parsed = registerDomainSchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json(\n      { ok: false, error: 'Invalid request', issues: parsed.error.flatten() },\n      { status: 400 },\n    )\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId: parsed.data.organizationId,\n    userId: auth.sub,\n    resourceKind: 'customer_accounts.domain_mapping',\n    resourceId: parsed.data.organizationId,\n    operation: 'create',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: parsed.data as unknown as Record<string, unknown>,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  const service = container.resolve('domainMappingService') as DomainMappingService\n\n  let entity: DomainMapping\n  try {\n    // service.register normalizes hostname internally \u2014 guards may have\n    // returned modifiedPayload but the typed runner doesn't expose it,\n    // so we rely on the service for the canonical form.\n    entity = await service.register({\n      hostname: parsed.data.hostname,\n      organizationId: parsed.data.organizationId,\n      tenantId: auth.tenantId,\n      replacesDomainId: parsed.data.replacesDomainId,\n    })\n  } catch (err: unknown) {\n    if (isUniqueViolation(err)) {\n      return NextResponse.json(\n        { ok: false, error: 'This domain is not available. Please choose a different hostname.' },\n        { status: 409 },\n      )\n    }\n    const message = err instanceof Error ? err.message : 'Failed to register domain'\n    return NextResponse.json({ ok: false, error: message }, { status: 500 })\n  }\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId,\n      organizationId: parsed.data.organizationId,\n      userId: auth.sub,\n      resourceKind: 'customer_accounts.domain_mapping',\n      resourceId: entity.id,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ ok: true, domainMapping: serializeRecord(entity) }, { status: 201 })\n}\n\nexport async function DELETE(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) return NextResponse.json({ ok: false, error: 'Unauthorized' }, { status: 401 })\n\n  const container = await createRequestContainer()\n  const rbac = container.resolve('rbacService') as RbacService\n  const allowed = await rbac.userHasAllFeatures(auth.sub, [FEATURE], {\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n  })\n  if (!allowed) return NextResponse.json({ ok: false, error: 'Forbidden' }, { status: 403 })\n\n  const url = new URL(req.url)\n  const id = url.searchParams.get('id')\n  if (!id) return NextResponse.json({ ok: false, error: 'id is required' }, { status: 400 })\n\n  const service = container.resolve('domainMappingService') as DomainMappingService\n  const existing = await service.findById(id, { tenantId: auth.tenantId })\n  if (!existing) return NextResponse.json({ ok: false, error: 'Not found' }, { status: 404 })\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId: existing.organizationId,\n    userId: auth.sub,\n    resourceKind: 'customer_accounts.domain_mapping',\n    resourceId: id,\n    operation: 'delete',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  await service.remove(id, { tenantId: auth.tenantId })\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId,\n      organizationId: existing.organizationId,\n      userId: auth.sub,\n      resourceKind: 'customer_accounts.domain_mapping',\n      resourceId: id,\n      operation: 'delete',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ ok: true })\n}\n\nconst errorSchema = z.object({ ok: z.literal(false), error: z.string() })\nconst domainMappingSchema = z.object({\n  id: z.string().uuid(),\n  hostname: z.string(),\n  organizationId: z.string().uuid(),\n  tenantId: z.string().uuid(),\n  provider: z.literal('traefik'),\n  status: z.enum(['pending', 'verified', 'active', 'dns_failed', 'tls_failed']),\n  verifiedAt: z.string().nullable(),\n  lastDnsCheckAt: z.string().nullable(),\n  dnsFailureReason: z.string().nullable(),\n  tlsFailureReason: z.string().nullable(),\n  tlsRetryCount: z.number().int().nonnegative(),\n  cnameTarget: z.string().nullable(),\n  aRecordTarget: z.string().nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'CustomerAccounts',\n  summary: 'Custom portal domain mappings (admin)',\n  methods: {\n    GET: {\n      summary: 'List domain mappings',\n      description: 'Returns all custom-domain mappings for the current tenant, optionally filtered by organization.',\n      responses: [\n        {\n          status: 200,\n          description: 'OK',\n          schema: z.object({\n            ok: z.literal(true),\n            domainMappings: z.array(domainMappingSchema),\n            config: z.object({\n              cnameTarget: z.string().nullable(),\n              aRecordTarget: z.string().nullable(),\n            }),\n          }),\n        },\n      ],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Register a custom domain',\n      description: 'Registers a new custom domain mapping for an organization. Verifies via DNS asynchronously.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: z.object({\n          hostname: z.string(),\n          organizationId: z.string().uuid(),\n          replacesDomainId: z.string().uuid().optional(),\n        }),\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Created',\n          schema: z.object({ ok: z.literal(true), domainMapping: domainMappingSchema }),\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Validation error', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n        { status: 409, description: 'Conflict', schema: errorSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Remove a custom domain',\n      description: 'Removes the domain mapping identified by ?id=. Cache and Traefik routing drain within TTL.',\n      responses: [{ status: 200, description: 'OK', schema: z.object({ ok: z.literal(true) }) }],\n      errors: [\n        { status: 400, description: 'Bad request', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n      ],\n    },\n  },\n}\n\n// Re-export resolve type so tests can import without indirect lookup\nexport type { ResolveResult }\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0CAA0C;AAGnD,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AAKrC,SAAS,qBAAqB;AAE9B,MAAM,UAAU;AAET,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAAA,EACrD,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAAA,EACtD,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,OAAO,EAAE;AAC1D;AAEA,SAAS,kBAAkB,OAAyB;AAClD,MAAI,iBAAiB,mCAAoC,QAAO;AAChE,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,OAAQ,MAA4B;AAC1C,MAAI,SAAS,QAAS,QAAO;AAC7B,QAAM,aAAc,MAA+B;AACnD,QAAM,UAAU,OAAO,eAAe,WAAW,aAAa;AAC9D,SAAO,QAAQ,YAAY,EAAE,SAAS,eAAe;AACvD;AAEA,SAAS,gBAAgB,QAAuB;AAC9C,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,UAAU,OAAO;AAAA,IACjB,gBAAgB,OAAO;AAAA,IACvB,UAAU,OAAO;AAAA,IACjB,UAAU,OAAO;AAAA,IACjB,QAAQ,OAAO;AAAA,IACf,YAAY,OAAO,YAAY,YAAY,KAAK;AAAA,IAChD,gBAAgB,OAAO,gBAAgB,YAAY,KAAK;AAAA,IACxD,kBAAkB,OAAO,oBAAoB;AAAA,IAC7C,kBAAkB,OAAO,oBAAoB;AAAA,IAC7C,eAAe,OAAO;AAAA,IACtB,aAAa,QAAQ,IAAI,8BAA8B;AAAA,IACvD,eAAe,QAAQ,IAAI,iCAAiC;AAAA,IAC5D,WAAW,OAAO,UAAU,YAAY;AAAA,IACxC,WAAW,OAAO,WAAW,YAAY,KAAK;AAAA,EAChD;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEzF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,UAAU,MAAM,KAAK,mBAAmB,KAAK,KAAK,CAAC,OAAO,GAAG;AAAA,IACjE,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,EACvB,CAAC;AACD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEzF,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,YAAY,IAAI,aAAa,IAAI,gBAAgB;AAEvD,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAiC,EAAE,UAAU,KAAK,SAAS;AACjE,MAAI,UAAW,OAAM,iBAAiB;AACtC,QAAM,UAAU,MAAM,GAAG,KAAK,eAAe,OAAgB,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE,CAAC;AAE/F,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI;AAAA,IACJ,gBAAgB,QAAQ,IAAI,eAAe;AAAA,IAC3C,QAAQ;AAAA,MACN,aAAa,QAAQ,IAAI,8BAA8B;AAAA,MACvD,eAAe,QAAQ,IAAI,iCAAiC;AAAA,IAC9D;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE3G,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,UAAU,MAAM,KAAK,mBAAmB,KAAK,KAAK,CAAC,OAAO,GAAG;AAAA,IACjE,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,EACvB,CAAC;AACD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEzF,QAAM,OAAO,MAAM,aAAa,KAAK,CAAC,CAAC;AACvC,QAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,IAAI,OAAO,OAAO,mBAAmB,QAAQ,OAAO,MAAM,QAAQ,EAAE;AAAA,MACtE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf,gBAAgB,OAAO,KAAK;AAAA,IAC5B,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY,OAAO,KAAK;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,OAAO;AAAA,EAC1B,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,QAAM,UAAU,UAAU,QAAQ,sBAAsB;AAExD,MAAI;AACJ,MAAI;AAIF,aAAS,MAAM,QAAQ,SAAS;AAAA,MAC9B,UAAU,OAAO,KAAK;AAAA,MACtB,gBAAgB,OAAO,KAAK;AAAA,MAC5B,UAAU,KAAK;AAAA,MACf,kBAAkB,OAAO,KAAK;AAAA,IAChC,CAAC;AAAA,EACH,SAAS,KAAc;AACrB,QAAI,kBAAkB,GAAG,GAAG;AAC1B,aAAO,aAAa;AAAA,QAClB,EAAE,IAAI,OAAO,OAAO,oEAAoE;AAAA,QACxF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzE;AAEA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO,KAAK;AAAA,MAC5B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,eAAe,gBAAgB,MAAM,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAChG;AAEA,eAAsB,OAAO,KAAc;AACzC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE3G,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,UAAU,MAAM,KAAK,mBAAmB,KAAK,KAAK,CAAC,OAAO,GAAG;AAAA,IACjE,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,EACvB,CAAC;AACD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEzF,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,KAAK,IAAI,aAAa,IAAI,IAAI;AACpC,MAAI,CAAC,GAAI,QAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEzF,QAAM,UAAU,UAAU,QAAQ,sBAAsB;AACxD,QAAM,WAAW,MAAM,QAAQ,SAAS,IAAI,EAAE,UAAU,KAAK,SAAS,CAAC;AACvE,MAAI,CAAC,SAAU,QAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE1F,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf,gBAAgB,SAAS;AAAA,IACzB,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,EACtB,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,QAAM,QAAQ,OAAO,IAAI,EAAE,UAAU,KAAK,SAAS,CAAC;AAEpD,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK;AAAA,MACf,gBAAgB,SAAS;AAAA,MACzB,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,MAAM,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;AACxE,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO;AAAA,EACnB,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,UAAU,EAAE,QAAQ,SAAS;AAAA,EAC7B,QAAQ,EAAE,KAAK,CAAC,WAAW,YAAY,UAAU,cAAc,YAAY,CAAC;AAAA,EAC5E,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EAC5C,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,IAAI;AAAA,YAClB,gBAAgB,EAAE,MAAM,mBAAmB;AAAA,YAC3C,QAAQ,EAAE,OAAO;AAAA,cACf,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,cACjC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,YACrC,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ,EAAE,OAAO;AAAA,UACf,UAAU,EAAE,OAAO;AAAA,UACnB,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,UAChC,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,eAAe,oBAAoB,CAAC;AAAA,QAC9E;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,YAAY;AAAA,QACpE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,YAAY,QAAQ,YAAY;AAAA,MAC9D;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,MAAM,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;AAAA,MACzF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,eAAe,QAAQ,YAAY;AAAA,QAC/D,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/customer_accounts/api/domain-check.js

@@ -0,0 +1,70 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { tryNormalizeHostname } from "@open-mercato/core/modules/customer_accounts/lib/hostname";
+import { secretEqual } from "@open-mercato/core/modules/customer_accounts/lib/secretCompare";
+const ORIGIN_HEADER_NAME = process.env.CUSTOMER_DOMAIN_ORIGIN_HEADER ?? "X-Open-Mercato-Origin";
+const metadata = {
+  GET: { requireAuth: false }
+};
+function withOriginHeader(response) {
+  response.headers.set(ORIGIN_HEADER_NAME, "1");
+  return response;
+}
+function unauthorized(message) {
+  return withOriginHeader(NextResponse.json({ ok: false, error: message }, { status: 403 }));
+}
+function notFound() {
+  return withOriginHeader(NextResponse.json({ ok: false, error: "Not found" }, { status: 404 }));
+}
+function ok() {
+  return withOriginHeader(NextResponse.json({ ok: true }));
+}
+async function GET(req) {
+  const expected = process.env.DOMAIN_CHECK_SECRET;
+  if (!expected) {
+    return withOriginHeader(
+      NextResponse.json(
+        { ok: false, error: "DOMAIN_CHECK_SECRET is not configured on the server" },
+        { status: 503 }
+      )
+    );
+  }
+  const supplied = req.headers.get("x-domain-check-secret");
+  if (!secretEqual(supplied, expected)) return unauthorized("Forbidden");
+  const url = new URL(req.url);
+  const rawHost = url.searchParams.get("host") ?? req.headers.get("x-forwarded-host");
+  if (!rawHost) return notFound();
+  const hostname = tryNormalizeHostname(rawHost);
+  if (!hostname) return notFound();
+  const container = await createRequestContainer();
+  const service = container.resolve("domainMappingService");
+  const result = await service.isAllowedForTls(hostname);
+  if (!result) return notFound();
+  return ok();
+}
+const errorSchema = z.object({ ok: z.literal(false), error: z.string() });
+const openApi = {
+  tag: "CustomerAccounts",
+  summary: "Traefik domain-check gate",
+  methods: {
+    GET: {
+      summary: "Verify a hostname is allowed for TLS provisioning",
+      description: "Called by Traefik before issuing a Let's Encrypt certificate. Requires the X-Domain-Check-Secret header to match DOMAIN_CHECK_SECRET.",
+      responses: [
+        { status: 200, description: "Hostname allowed", schema: z.object({ ok: z.literal(true) }) }
+      ],
+      errors: [
+        { status: 403, description: "Forbidden", schema: errorSchema },
+        { status: 404, description: "Hostname not registered or not yet verified", schema: errorSchema },
+        { status: 503, description: "Server misconfiguration", schema: errorSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=domain-check.js.map

package/dist/modules/customer_accounts/api/domain-check.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_accounts/api/domain-check.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { tryNormalizeHostname } from '@open-mercato/core/modules/customer_accounts/lib/hostname'\nimport { secretEqual } from '@open-mercato/core/modules/customer_accounts/lib/secretCompare'\nimport { DomainMappingService } from '@open-mercato/core/modules/customer_accounts/services/domainMappingService'\n\nconst ORIGIN_HEADER_NAME = process.env.CUSTOMER_DOMAIN_ORIGIN_HEADER ?? 'X-Open-Mercato-Origin'\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\nfunction withOriginHeader(response: NextResponse): NextResponse {\n  response.headers.set(ORIGIN_HEADER_NAME, '1')\n  return response\n}\n\nfunction unauthorized(message: string): NextResponse {\n  return withOriginHeader(NextResponse.json({ ok: false, error: message }, { status: 403 }))\n}\n\nfunction notFound(): NextResponse {\n  return withOriginHeader(NextResponse.json({ ok: false, error: 'Not found' }, { status: 404 }))\n}\n\nfunction ok(): NextResponse {\n  return withOriginHeader(NextResponse.json({ ok: true }))\n}\n\nexport async function GET(req: Request) {\n  const expected = process.env.DOMAIN_CHECK_SECRET\n  if (!expected) {\n    // Fail closed when the gating secret is not configured on the server.\n    return withOriginHeader(\n      NextResponse.json(\n        { ok: false, error: 'DOMAIN_CHECK_SECRET is not configured on the server' },\n        { status: 503 },\n      ),\n    )\n  }\n  const supplied = req.headers.get('x-domain-check-secret')\n  if (!secretEqual(supplied, expected)) return unauthorized('Forbidden')\n\n  const url = new URL(req.url)\n  // Traefik's ForwardAuth middleware cannot template the auth URL with the\n  // original Host, so it forwards the original request via X-Forwarded-Host.\n  // Manual / direct callers can still pass `?host=` explicitly.\n  const rawHost =\n    url.searchParams.get('host') ?? req.headers.get('x-forwarded-host')\n  if (!rawHost) return notFound()\n  const hostname = tryNormalizeHostname(rawHost)\n  if (!hostname) return notFound()\n\n  const container = await createRequestContainer()\n  const service = container.resolve('domainMappingService') as DomainMappingService\n  const result = await service.isAllowedForTls(hostname)\n  if (!result) return notFound()\n  return ok()\n}\n\nconst errorSchema = z.object({ ok: z.literal(false), error: z.string() })\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'CustomerAccounts',\n  summary: 'Traefik domain-check gate',\n  methods: {\n    GET: {\n      summary: 'Verify a hostname is allowed for TLS provisioning',\n      description:\n        'Called by Traefik before issuing a Let\\'s Encrypt certificate. Requires the X-Domain-Check-Secret header to match DOMAIN_CHECK_SECRET.',\n      responses: [\n        { status: 200, description: 'Hostname allowed', schema: z.object({ ok: z.literal(true) }) },\n      ],\n      errors: [\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n        { status: 404, description: 'Hostname not registered or not yet verified', schema: errorSchema },\n        { status: 503, description: 'Server misconfiguration', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,4BAA4B;AACrC,SAAS,mBAAmB;AAG5B,MAAM,qBAAqB,QAAQ,IAAI,iCAAiC;AAEjE,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,SAAS,iBAAiB,UAAsC;AAC9D,WAAS,QAAQ,IAAI,oBAAoB,GAAG;AAC5C,SAAO;AACT;AAEA,SAAS,aAAa,SAA+B;AACnD,SAAO,iBAAiB,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAC3F;AAEA,SAAS,WAAyB;AAChC,SAAO,iBAAiB,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAC/F;AAEA,SAAS,KAAmB;AAC1B,SAAO,iBAAiB,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC;AACzD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,CAAC,UAAU;AAEb,WAAO;AAAA,MACL,aAAa;AAAA,QACX,EAAE,IAAI,OAAO,OAAO,sDAAsD;AAAA,QAC1E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACA,QAAM,WAAW,IAAI,QAAQ,IAAI,uBAAuB;AACxD,MAAI,CAAC,YAAY,UAAU,QAAQ,EAAG,QAAO,aAAa,WAAW;AAErE,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAI3B,QAAM,UACJ,IAAI,aAAa,IAAI,MAAM,KAAK,IAAI,QAAQ,IAAI,kBAAkB;AACpE,MAAI,CAAC,QAAS,QAAO,SAAS;AAC9B,QAAM,WAAW,qBAAqB,OAAO;AAC7C,MAAI,CAAC,SAAU,QAAO,SAAS;AAE/B,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,UAAU,UAAU,QAAQ,sBAAsB;AACxD,QAAM,SAAS,MAAM,QAAQ,gBAAgB,QAAQ;AACrD,MAAI,CAAC,OAAQ,QAAO,SAAS;AAC7B,SAAO,GAAG;AACZ;AAEA,MAAM,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;AAEjE,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;AAAA,MAC5F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,+CAA+C,QAAQ,YAAY;AAAA,QAC/F,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,YAAY;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/customer_accounts/api/domain-resolve/all.js

@@ -0,0 +1,128 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { secretEqual } from "@open-mercato/core/modules/customer_accounts/lib/secretCompare";
+import { rateLimitErrorSchema } from "@open-mercato/shared/lib/ratelimit/helpers";
+import {
+  checkAuthRateLimit,
+  domainResolveAllIpRateLimitConfig
+} from "@open-mercato/core/modules/customer_accounts/lib/rateLimiter";
+const ORIGIN_HEADER_NAME = process.env.CUSTOMER_DOMAIN_ORIGIN_HEADER ?? "X-Open-Mercato-Origin";
+const LOG_PREFIX = "[domain-resolve/all]";
+const ENDPOINT_PATH = "/api/customer_accounts/domain-resolve/all";
+const metadata = {
+  GET: { requireAuth: false }
+};
+function withOriginHeader(response) {
+  response.headers.set(ORIGIN_HEADER_NAME, "1");
+  return response;
+}
+function readCallerIp(req) {
+  const forwardedFor = req.headers.get("x-forwarded-for");
+  if (forwardedFor) {
+    const firstHop = forwardedFor.split(",")[0]?.trim();
+    if (firstHop) return firstHop;
+  }
+  const realIp = req.headers.get("x-real-ip");
+  if (realIp && realIp.trim().length > 0) return realIp.trim();
+  return "unknown";
+}
+async function GET(req) {
+  const callerIp = readCallerIp(req);
+  const expected = process.env.DOMAIN_RESOLVE_SECRET;
+  if (!expected) {
+    console.warn(`${LOG_PREFIX} rejected request \u2014 secret not configured`, {
+      endpoint: ENDPOINT_PATH,
+      ip: callerIp,
+      outcome: "misconfigured"
+    });
+    return withOriginHeader(
+      NextResponse.json(
+        { ok: false, error: "DOMAIN_RESOLVE_SECRET is not configured on the server" },
+        { status: 503 }
+      )
+    );
+  }
+  const { error: rateLimitError } = await checkAuthRateLimit({
+    req,
+    ipConfig: domainResolveAllIpRateLimitConfig
+  });
+  if (rateLimitError) {
+    console.warn(`${LOG_PREFIX} rate-limited`, {
+      endpoint: ENDPOINT_PATH,
+      ip: callerIp,
+      outcome: "rate_limited"
+    });
+    return withOriginHeader(rateLimitError);
+  }
+  const supplied = req.headers.get("x-domain-resolve-secret");
+  if (!secretEqual(supplied, expected)) {
+    console.warn(`${LOG_PREFIX} rejected request \u2014 invalid secret`, {
+      endpoint: ENDPOINT_PATH,
+      ip: callerIp,
+      outcome: "forbidden"
+    });
+    return withOriginHeader(NextResponse.json({ ok: false, error: "Forbidden" }, { status: 403 }));
+  }
+  const container = await createRequestContainer();
+  const service = container.resolve("domainMappingService");
+  const records = await service.resolveAll();
+  console.info(`${LOG_PREFIX} authorized`, {
+    endpoint: ENDPOINT_PATH,
+    ip: callerIp,
+    outcome: "ok",
+    domains: records.length
+  });
+  return withOriginHeader(
+    NextResponse.json({
+      ok: true,
+      domains: records.map((r) => ({
+        hostname: r.hostname,
+        tenantId: r.tenantId,
+        organizationId: r.organizationId,
+        orgSlug: r.orgSlug,
+        status: r.status
+      }))
+    })
+  );
+}
+const errorSchema = z.object({ ok: z.literal(false), error: z.string() });
+const openApi = {
+  tag: "CustomerAccounts",
+  summary: "Batch resolve all active custom domains",
+  methods: {
+    GET: {
+      summary: "Batch warm-up for the Node middleware",
+      description: "Returns every active domain mapping in a single payload so the middleware can populate its cache on process start. Requires X-Domain-Resolve-Secret header.",
+      responses: [
+        {
+          status: 200,
+          description: "OK",
+          schema: z.object({
+            ok: z.literal(true),
+            domains: z.array(
+              z.object({
+                hostname: z.string(),
+                tenantId: z.string().uuid(),
+                organizationId: z.string().uuid(),
+                orgSlug: z.string().nullable(),
+                status: z.literal("active")
+              })
+            )
+          })
+        }
+      ],
+      errors: [
+        { status: 403, description: "Forbidden", schema: errorSchema },
+        { status: 429, description: "Too many requests", schema: rateLimitErrorSchema },
+        { status: 503, description: "Server misconfiguration", schema: errorSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=all.js.map

package/dist/modules/customer_accounts/api/domain-resolve/all.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/customer_accounts/api/domain-resolve/all.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { secretEqual } from '@open-mercato/core/modules/customer_accounts/lib/secretCompare'\nimport { DomainMappingService } from '@open-mercato/core/modules/customer_accounts/services/domainMappingService'\nimport { rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport {\n  checkAuthRateLimit,\n  domainResolveAllIpRateLimitConfig,\n} from '@open-mercato/core/modules/customer_accounts/lib/rateLimiter'\n\nconst ORIGIN_HEADER_NAME = process.env.CUSTOMER_DOMAIN_ORIGIN_HEADER ?? 'X-Open-Mercato-Origin'\nconst LOG_PREFIX = '[domain-resolve/all]'\nconst ENDPOINT_PATH = '/api/customer_accounts/domain-resolve/all'\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\nfunction withOriginHeader(response: NextResponse): NextResponse {\n  response.headers.set(ORIGIN_HEADER_NAME, '1')\n  return response\n}\n\nfunction readCallerIp(req: Request): string {\n  const forwardedFor = req.headers.get('x-forwarded-for')\n  if (forwardedFor) {\n    const firstHop = forwardedFor.split(',')[0]?.trim()\n    if (firstHop) return firstHop\n  }\n  const realIp = req.headers.get('x-real-ip')\n  if (realIp && realIp.trim().length > 0) return realIp.trim()\n  return 'unknown'\n}\n\nexport async function GET(req: Request) {\n  const callerIp = readCallerIp(req)\n  const expected = process.env.DOMAIN_RESOLVE_SECRET\n  if (!expected) {\n    // Fail closed when the gating secret is not configured on the server.\n    console.warn(`${LOG_PREFIX} rejected request \u2014 secret not configured`, {\n      endpoint: ENDPOINT_PATH,\n      ip: callerIp,\n      outcome: 'misconfigured',\n    })\n    return withOriginHeader(\n      NextResponse.json(\n        { ok: false, error: 'DOMAIN_RESOLVE_SECRET is not configured on the server' },\n        { status: 503 },\n      ),\n    )\n  }\n\n  // Rate-limit by caller IP before the secret comparison to make leak-driven\n  // enumeration noisy and bounded. Fails closed (returns the helper's 429\n  // response) when the limit is exceeded.\n  const { error: rateLimitError } = await checkAuthRateLimit({\n    req,\n    ipConfig: domainResolveAllIpRateLimitConfig,\n  })\n  if (rateLimitError) {\n    console.warn(`${LOG_PREFIX} rate-limited`, {\n      endpoint: ENDPOINT_PATH,\n      ip: callerIp,\n      outcome: 'rate_limited',\n    })\n    return withOriginHeader(rateLimitError)\n  }\n\n  const supplied = req.headers.get('x-domain-resolve-secret')\n  if (!secretEqual(supplied, expected)) {\n    console.warn(`${LOG_PREFIX} rejected request \u2014 invalid secret`, {\n      endpoint: ENDPOINT_PATH,\n      ip: callerIp,\n      outcome: 'forbidden',\n    })\n    return withOriginHeader(NextResponse.json({ ok: false, error: 'Forbidden' }, { status: 403 }))\n  }\n\n  const container = await createRequestContainer()\n  const service = container.resolve('domainMappingService') as DomainMappingService\n  const records = await service.resolveAll()\n  console.info(`${LOG_PREFIX} authorized`, {\n    endpoint: ENDPOINT_PATH,\n    ip: callerIp,\n    outcome: 'ok',\n    domains: records.length,\n  })\n  return withOriginHeader(\n    NextResponse.json({\n      ok: true,\n      domains: records.map((r) => ({\n        hostname: r.hostname,\n        tenantId: r.tenantId,\n        organizationId: r.organizationId,\n        orgSlug: r.orgSlug,\n        status: r.status,\n      })),\n    }),\n  )\n}\n\nconst errorSchema = z.object({ ok: z.literal(false), error: z.string() })\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'CustomerAccounts',\n  summary: 'Batch resolve all active custom domains',\n  methods: {\n    GET: {\n      summary: 'Batch warm-up for the Node middleware',\n      description:\n        'Returns every active domain mapping in a single payload so the middleware can populate its cache on process start. Requires X-Domain-Resolve-Secret header.',\n      responses: [\n        {\n          status: 200,\n          description: 'OK',\n          schema: z.object({\n            ok: z.literal(true),\n            domains: z.array(\n              z.object({\n                hostname: z.string(),\n                tenantId: z.string().uuid(),\n                organizationId: z.string().uuid(),\n                orgSlug: z.string().nullable(),\n                status: z.literal('active'),\n              }),\n            ),\n          }),\n        },\n      ],\n      errors: [\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n        { status: 429, description: 'Too many requests', schema: rateLimitErrorSchema },\n        { status: 503, description: 'Server misconfiguration', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,mBAAmB;AAE5B,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,qBAAqB,QAAQ,IAAI,iCAAiC;AACxE,MAAM,aAAa;AACnB,MAAM,gBAAgB;AAEf,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,SAAS,iBAAiB,UAAsC;AAC9D,WAAS,QAAQ,IAAI,oBAAoB,GAAG;AAC5C,SAAO;AACT;AAEA,SAAS,aAAa,KAAsB;AAC1C,QAAM,eAAe,IAAI,QAAQ,IAAI,iBAAiB;AACtD,MAAI,cAAc;AAChB,UAAM,WAAW,aAAa,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AAClD,QAAI,SAAU,QAAO;AAAA,EACvB;AACA,QAAM,SAAS,IAAI,QAAQ,IAAI,WAAW;AAC1C,MAAI,UAAU,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,OAAO,KAAK;AAC3D,SAAO;AACT;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,aAAa,GAAG;AACjC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,CAAC,UAAU;AAEb,YAAQ,KAAK,GAAG,UAAU,kDAA6C;AAAA,MACrE,UAAU;AAAA,MACV,IAAI;AAAA,MACJ,SAAS;AAAA,IACX,CAAC;AACD,WAAO;AAAA,MACL,aAAa;AAAA,QACX,EAAE,IAAI,OAAO,OAAO,wDAAwD;AAAA,QAC5E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAKA,QAAM,EAAE,OAAO,eAAe,IAAI,MAAM,mBAAmB;AAAA,IACzD;AAAA,IACA,UAAU;AAAA,EACZ,CAAC;AACD,MAAI,gBAAgB;AAClB,YAAQ,KAAK,GAAG,UAAU,iBAAiB;AAAA,MACzC,UAAU;AAAA,MACV,IAAI;AAAA,MACJ,SAAS;AAAA,IACX,CAAC;AACD,WAAO,iBAAiB,cAAc;AAAA,EACxC;AAEA,QAAM,WAAW,IAAI,QAAQ,IAAI,yBAAyB;AAC1D,MAAI,CAAC,YAAY,UAAU,QAAQ,GAAG;AACpC,YAAQ,KAAK,GAAG,UAAU,2CAAsC;AAAA,MAC9D,UAAU;AAAA,MACV,IAAI;AAAA,MACJ,SAAS;AAAA,IACX,CAAC;AACD,WAAO,iBAAiB,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,EAC/F;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,UAAU,UAAU,QAAQ,sBAAsB;AACxD,QAAM,UAAU,MAAM,QAAQ,WAAW;AACzC,UAAQ,KAAK,GAAG,UAAU,eAAe;AAAA,IACvC,UAAU;AAAA,IACV,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,SAAS,QAAQ;AAAA,EACnB,CAAC;AACD,SAAO;AAAA,IACL,aAAa,KAAK;AAAA,MAChB,IAAI;AAAA,MACJ,SAAS,QAAQ,IAAI,CAAC,OAAO;AAAA,QAC3B,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,QACZ,gBAAgB,EAAE;AAAA,QAClB,SAAS,EAAE;AAAA,QACX,QAAQ,EAAE;AAAA,MACZ,EAAE;AAAA,IACJ,CAAC;AAAA,EACH;AACF;AAEA,MAAM,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;AAEjE,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,IAAI;AAAA,YAClB,SAAS,EAAE;AAAA,cACT,EAAE,OAAO;AAAA,gBACP,UAAU,EAAE,OAAO;AAAA,gBACnB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,gBAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,gBAChC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,gBAC7B,QAAQ,EAAE,QAAQ,QAAQ;AAAA,cAC5B,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,QAC9E,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,YAAY;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/customer_accounts/api/domain-resolve.js

@@ -0,0 +1,84 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { tryNormalizeHostname } from "@open-mercato/core/modules/customer_accounts/lib/hostname";
+import { secretEqual } from "@open-mercato/core/modules/customer_accounts/lib/secretCompare";
+const ORIGIN_HEADER_NAME = process.env.CUSTOMER_DOMAIN_ORIGIN_HEADER ?? "X-Open-Mercato-Origin";
+const metadata = {
+  GET: { requireAuth: false }
+};
+function withOriginHeader(response) {
+  response.headers.set(ORIGIN_HEADER_NAME, "1");
+  return response;
+}
+async function GET(req) {
+  const expected = process.env.DOMAIN_RESOLVE_SECRET;
+  if (!expected) {
+    return withOriginHeader(
+      NextResponse.json(
+        { ok: false, error: "DOMAIN_RESOLVE_SECRET is not configured on the server" },
+        { status: 503 }
+      )
+    );
+  }
+  const supplied = req.headers.get("x-domain-resolve-secret");
+  if (!secretEqual(supplied, expected)) {
+    return withOriginHeader(NextResponse.json({ ok: false, error: "Forbidden" }, { status: 403 }));
+  }
+  const url = new URL(req.url);
+  const rawHost = url.searchParams.get("host");
+  if (!rawHost) return withOriginHeader(NextResponse.json({ ok: false, error: "host param required" }, { status: 400 }));
+  const hostname = tryNormalizeHostname(rawHost);
+  if (!hostname) return withOriginHeader(NextResponse.json({ ok: false, error: "invalid host" }, { status: 400 }));
+  const container = await createRequestContainer();
+  const service = container.resolve("domainMappingService");
+  const result = await service.resolveByHostname(hostname);
+  if (!result || result.status !== "active") {
+    return withOriginHeader(NextResponse.json({ ok: false, error: "Not found" }, { status: 404 }));
+  }
+  return withOriginHeader(
+    NextResponse.json({
+      ok: true,
+      tenantId: result.tenantId,
+      organizationId: result.organizationId,
+      orgSlug: result.orgSlug,
+      status: result.status
+    })
+  );
+}
+const errorSchema = z.object({ ok: z.literal(false), error: z.string() });
+const openApi = {
+  tag: "CustomerAccounts",
+  summary: "Resolve a custom domain to its tenant and organization",
+  methods: {
+    GET: {
+      summary: "Single-host resolve for the Node middleware",
+      description: "Internal endpoint used by the portal middleware to populate its in-memory cache. Requires X-Domain-Resolve-Secret header.",
+      responses: [
+        {
+          status: 200,
+          description: "OK",
+          schema: z.object({
+            ok: z.literal(true),
+            tenantId: z.string().uuid(),
+            organizationId: z.string().uuid(),
+            orgSlug: z.string().nullable(),
+            status: z.literal("active")
+          })
+        }
+      ],
+      errors: [
+        { status: 400, description: "Bad request", schema: errorSchema },
+        { status: 403, description: "Forbidden", schema: errorSchema },
+        { status: 404, description: "Not found", schema: errorSchema },
+        { status: 503, description: "Server misconfiguration", schema: errorSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=domain-resolve.js.map