@open-mercato/core 0.6.3-develop.3651.1.d3a548a5f1 → 0.6.3-develop.3660.1.53b73d5aa4

package/dist/modules/customers/api/deals/bulk-update-stage/route.js

@@ -0,0 +1,188 @@
+import { NextResponse } from "next/server";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
+import {
+  CUSTOMERS_DEALS_BULK_UPDATE_STAGE_QUEUE,
+  getCustomersQueue
+} from "../../../lib/bulkDeals.js";
+import {
+  dealsBulkUpdateStageSchema as requestSchema,
+  dealsBulkUpdateResponseSchema as responseSchema
+} from "../../../data/validators.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["customers.deals.manage"] }
+};
+const openApi = {
+  tags: ["Customers"],
+  summary: "Bulk update deal pipeline stage",
+  description: "Queues a background job that moves the listed deals to the same pipeline stage. Returns a progress job id to poll for completion."
+};
+async function postImpl(req, translate) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json(
+      responseSchema.parse({
+        ok: false,
+        progressJobId: null,
+        message: translate("customers.errors.unauthorized", "Unauthorized")
+      }),
+      { status: 401 }
+    );
+  }
+  const parsed = requestSchema.safeParse(await readJsonSafe(req));
+  if (!parsed.success) {
+    return NextResponse.json(
+      responseSchema.parse({
+        ok: false,
+        progressJobId: null,
+        message: translate("customers.errors.invalid_payload", "Invalid payload")
+      }),
+      { status: 400 }
+    );
+  }
+  const ids = Array.from(new Set(parsed.data.ids));
+  const container = await createRequestContainer();
+  let guardResult = null;
+  try {
+    guardResult = await validateCrudMutationGuard(container, {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+      userId: auth.sub,
+      resourceKind: "customers.deal",
+      resourceId: ids.join(","),
+      operation: "custom",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      mutationPayload: { ids, pipelineStageId: parsed.data.pipelineStageId }
+    });
+  } catch (guardError) {
+    console.warn("[customers.deals.bulk-update-stage] mutation-guard skipped", guardError);
+    guardResult = null;
+  }
+  if (guardResult && !guardResult.ok) {
+    return NextResponse.json(guardResult.body, { status: guardResult.status });
+  }
+  let progressService;
+  try {
+    progressService = container.resolve("progressService");
+  } catch (resolveError) {
+    console.error("[customers.deals.bulk-update-stage] progressService resolve failed", resolveError);
+    throw new Error(
+      `progressService resolve failed: ${resolveError instanceof Error ? resolveError.message : String(resolveError)}`
+    );
+  }
+  let progressJob;
+  try {
+    progressJob = await progressService.createJob(
+      {
+        jobType: "customers.deals.bulk_update_stage",
+        name: translate(
+          "customers.deals.kanban.bulk.changeStage.progress.name",
+          "Move selected deals to a new stage"
+        ),
+        description: translate(
+          "customers.deals.kanban.bulk.changeStage.progress.description",
+          "{count} deals queued for stage update",
+          { count: ids.length }
+        ),
+        totalCount: ids.length,
+        cancellable: false,
+        meta: {
+          source: "customers.deals.bulk-update-stage",
+          pipelineStageId: parsed.data.pipelineStageId
+        }
+      },
+      {
+        tenantId: auth.tenantId,
+        organizationId: auth.orgId,
+        userId: auth.sub
+      }
+    );
+  } catch (createError) {
+    console.error("[customers.deals.bulk-update-stage] progressService.createJob failed", createError);
+    throw new Error(
+      `progressService.createJob failed: ${createError instanceof Error ? createError.message : String(createError)}`
+    );
+  }
+  const queue = getCustomersQueue(CUSTOMERS_DEALS_BULK_UPDATE_STAGE_QUEUE);
+  try {
+    await queue.enqueue({
+      progressJobId: progressJob.id,
+      ids,
+      pipelineStageId: parsed.data.pipelineStageId,
+      scope: {
+        organizationId: auth.orgId,
+        tenantId: auth.tenantId,
+        userId: auth.sub
+      }
+    });
+  } catch (error) {
+    await progressService.failJob(
+      progressJob.id,
+      {
+        errorMessage: error instanceof Error ? error.message : translate("customers.errors.bulk_enqueue_failed", "Failed to enqueue bulk job")
+      },
+      {
+        tenantId: auth.tenantId,
+        organizationId: auth.orgId,
+        userId: auth.sub
+      }
+    ).catch((failErr) => {
+      console.warn("[customers.deals.bulk-update-stage] failed to mark progress job as failed", failErr);
+    });
+    throw error;
+  }
+  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+    await runCrudMutationGuardAfterSuccess(container, {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+      userId: auth.sub,
+      resourceKind: "customers.deal",
+      resourceId: ids.join(","),
+      operation: "custom",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      metadata: guardResult.metadata ?? null
+    });
+  }
+  return NextResponse.json(
+    responseSchema.parse({
+      ok: true,
+      progressJobId: progressJob.id,
+      message: translate(
+        "customers.deals.kanban.bulk.changeStage.queued",
+        "Bulk stage update started ({count} deals).",
+        { count: ids.length }
+      )
+    }),
+    { status: 202 }
+  );
+}
+async function POST(req) {
+  const { translate } = await resolveTranslations();
+  try {
+    return await postImpl(req, translate);
+  } catch (error) {
+    console.error("[customers.deals.bulk-update-stage] route failed", error);
+    return NextResponse.json(
+      responseSchema.parse({
+        ok: false,
+        progressJobId: null,
+        message: error instanceof Error ? error.message : translate("customers.errors.bulk_enqueue_failed", "Failed to enqueue bulk job")
+      }),
+      { status: 500 }
+    );
+  }
+}
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/customers/api/deals/bulk-update-stage/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/customers/api/deals/bulk-update-stage/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { TranslateWithFallbackFn } from '@open-mercato/shared/lib/i18n/translate'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport type { ProgressService } from '../../../../progress/lib/progressService'\nimport {\n  CUSTOMERS_DEALS_BULK_UPDATE_STAGE_QUEUE,\n  getCustomersQueue,\n} from '../../../lib/bulkDeals'\nimport {\n  dealsBulkUpdateStageSchema as requestSchema,\n  dealsBulkUpdateResponseSchema as responseSchema,\n} from '../../../data/validators'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['customers.deals.manage'] },\n}\n\nexport const openApi = {\n  tags: ['Customers'],\n  summary: 'Bulk update deal pipeline stage',\n  description:\n    'Queues a background job that moves the listed deals to the same pipeline stage. Returns a progress job id to poll for completion.',\n}\n\nasync function postImpl(req: Request, translate: TranslateWithFallbackFn): Promise<NextResponse> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message: translate('customers.errors.unauthorized', 'Unauthorized'),\n      }),\n      { status: 401 },\n    )\n  }\n\n  const parsed = requestSchema.safeParse(await readJsonSafe(req))\n  if (!parsed.success) {\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message: translate('customers.errors.invalid_payload', 'Invalid payload'),\n      }),\n      { status: 400 },\n    )\n  }\n\n  const ids = Array.from(new Set(parsed.data.ids))\n  const container = await createRequestContainer()\n\n  // Mutation-guard contract for custom write routes \u2014 lets injection modules (record-lock\n  // conflict handling, scoped headers, undo-history reconciliation) run `onBeforeSave` /\n  // `onAfterSave` for non-`makeCrudRoute` writes. Per-record locks are enforced by the\n  // worker (the worker calls `customers.deals.update` per id, which itself goes through\n  // the single-record route + guard). The guard at the bulk-entry point is best-effort:\n  // it gives lock-aware modules a chance to register a bulk activity log, but failures\n  // (e.g. a guard that expects a single-record id, or transient lock-table errors) must\n  // NOT take the whole bulk enqueue down. Swallow the error so the bulk job still gets\n  // queued and per-record enforcement happens downstream.\n  let guardResult: Awaited<ReturnType<typeof validateCrudMutationGuard>> = null\n  try {\n    guardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n      resourceKind: 'customers.deal',\n      resourceId: ids.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { ids, pipelineStageId: parsed.data.pipelineStageId },\n    })\n  } catch (guardError) {\n    console.warn('[customers.deals.bulk-update-stage] mutation-guard skipped', guardError)\n    guardResult = null\n  }\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let progressService: ProgressService\n  try {\n    progressService = container.resolve('progressService') as ProgressService\n  } catch (resolveError) {\n    console.error('[customers.deals.bulk-update-stage] progressService resolve failed', resolveError)\n    throw new Error(\n      `progressService resolve failed: ${resolveError instanceof Error ? resolveError.message : String(resolveError)}`,\n    )\n  }\n\n  let progressJob: Awaited<ReturnType<ProgressService['createJob']>>\n  try {\n    progressJob = await progressService.createJob(\n      {\n        jobType: 'customers.deals.bulk_update_stage',\n        name: translate(\n          'customers.deals.kanban.bulk.changeStage.progress.name',\n          'Move selected deals to a new stage',\n        ),\n        description: translate(\n          'customers.deals.kanban.bulk.changeStage.progress.description',\n          '{count} deals queued for stage update',\n          { count: ids.length },\n        ),\n        totalCount: ids.length,\n        cancellable: false,\n        meta: {\n          source: 'customers.deals.bulk-update-stage',\n          pipelineStageId: parsed.data.pipelineStageId,\n        },\n      },\n      {\n        tenantId: auth.tenantId,\n        organizationId: auth.orgId,\n        userId: auth.sub,\n      },\n    )\n  } catch (createError) {\n    console.error('[customers.deals.bulk-update-stage] progressService.createJob failed', createError)\n    throw new Error(\n      `progressService.createJob failed: ${createError instanceof Error ? createError.message : String(createError)}`,\n    )\n  }\n\n  const queue = getCustomersQueue(CUSTOMERS_DEALS_BULK_UPDATE_STAGE_QUEUE)\n  try {\n    await queue.enqueue({\n      progressJobId: progressJob.id,\n      ids,\n      pipelineStageId: parsed.data.pipelineStageId,\n      scope: {\n        organizationId: auth.orgId,\n        tenantId: auth.tenantId,\n        userId: auth.sub,\n      },\n    })\n  } catch (error) {\n    // Without this guard the progress row sits in `pending` forever \u2014 the worker\n    // never picks the job up, and the top-bar polls a job that will never finish.\n    // Mark it failed so the operator gets a deterministic UX (a failure toast +\n    // ability to retry) instead of an invisible stuck job.\n    await progressService\n      .failJob(\n        progressJob.id,\n        {\n          errorMessage:\n            error instanceof Error\n              ? error.message\n              : translate('customers.errors.bulk_enqueue_failed', 'Failed to enqueue bulk job'),\n        },\n        {\n          tenantId: auth.tenantId,\n          organizationId: auth.orgId,\n          userId: auth.sub,\n        },\n      )\n      .catch((failErr) => {\n        console.warn('[customers.deals.bulk-update-stage] failed to mark progress job as failed', failErr)\n      })\n    throw error\n  }\n\n  // After-success half of the mutation-guard contract \u2014 fires `onAfterSave` injection\n  // hooks. We invoke it here because enqueue succeeded; the worker takes over from here.\n  // If an injection-side after-handler needs the bulk job's actual completion (rather than\n  // enqueue), it should subscribe to the progress event stream \u2014 beyond the scope of the\n  // synchronous guard contract.\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n      resourceKind: 'customers.deal',\n      resourceId: ids.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json(\n    responseSchema.parse({\n      ok: true,\n      progressJobId: progressJob.id,\n      message: translate(\n        'customers.deals.kanban.bulk.changeStage.queued',\n        'Bulk stage update started ({count} deals).',\n        { count: ids.length },\n      ),\n    }),\n    { status: 202 },\n  )\n}\n\n// Outer wrapper: every uncaught error from `postImpl` becomes a controlled 500 with\n// diagnostic JSON instead of Next.js's default HTML error page. Routes that throw\n// produced opaque 500s in CI integration tests (no body, no message), making the\n// root cause invisible. With this wrapper the operator sees the actual error string\n// in the response body and the server log, and the test framework can surface it.\nexport async function POST(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    return await postImpl(req, translate)\n  } catch (error) {\n    console.error('[customers.deals.bulk-update-stage] route failed', error)\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: false,\n        progressJobId: null,\n        message:\n          error instanceof Error\n            ? error.message\n            : translate('customers.errors.bulk_enqueue_failed', 'Failed to enqueue bulk job'),\n      }),\n      { status: 500 },\n    )\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AAEpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE,8BAA8B;AAAA,EAC9B,iCAAiC;AAAA,OAC5B;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,WAAW;AAAA,EAClB,SAAS;AAAA,EACT,aACE;AACJ;AAEA,eAAe,SAAS,KAAc,WAA2D;AAC/F,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SAAS,UAAU,iCAAiC,cAAc;AAAA,MACpE,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,SAAS,cAAc,UAAU,MAAM,aAAa,GAAG,CAAC;AAC9D,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SAAS,UAAU,oCAAoC,iBAAiB;AAAA,MAC1E,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,MAAM,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC;AAC/C,QAAM,YAAY,MAAM,uBAAuB;AAW/C,MAAI,cAAqE;AACzE,MAAI;AACF,kBAAc,MAAM,0BAA0B,WAAW;AAAA,MACvD,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,IAAI,KAAK,GAAG;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,KAAK,iBAAiB,OAAO,KAAK,gBAAgB;AAAA,IACvE,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,YAAQ,KAAK,8DAA8D,UAAU;AACrF,kBAAc;AAAA,EAChB;AACA,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI;AACJ,MAAI;AACF,sBAAkB,UAAU,QAAQ,iBAAiB;AAAA,EACvD,SAAS,cAAc;AACrB,YAAQ,MAAM,sEAAsE,YAAY;AAChG,UAAM,IAAI;AAAA,MACR,mCAAmC,wBAAwB,QAAQ,aAAa,UAAU,OAAO,YAAY,CAAC;AAAA,IAChH;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,kBAAc,MAAM,gBAAgB;AAAA,MAClC;AAAA,QACE,SAAS;AAAA,QACT,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa;AAAA,UACX;AAAA,UACA;AAAA,UACA,EAAE,OAAO,IAAI,OAAO;AAAA,QACtB;AAAA,QACA,YAAY,IAAI;AAAA,QAChB,aAAa;AAAA,QACb,MAAM;AAAA,UACJ,QAAQ;AAAA,UACR,iBAAiB,OAAO,KAAK;AAAA,QAC/B;AAAA,MACF;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,QAAQ,KAAK;AAAA,MACf;AAAA,IACF;AAAA,EACF,SAAS,aAAa;AACpB,YAAQ,MAAM,wEAAwE,WAAW;AACjG,UAAM,IAAI;AAAA,MACR,qCAAqC,uBAAuB,QAAQ,YAAY,UAAU,OAAO,WAAW,CAAC;AAAA,IAC/G;AAAA,EACF;AAEA,QAAM,QAAQ,kBAAkB,uCAAuC;AACvE,MAAI;AACF,UAAM,MAAM,QAAQ;AAAA,MAClB,eAAe,YAAY;AAAA,MAC3B;AAAA,MACA,iBAAiB,OAAO,KAAK;AAAA,MAC7B,OAAO;AAAA,QACL,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,QACf,QAAQ,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AAKd,UAAM,gBACH;AAAA,MACC,YAAY;AAAA,MACZ;AAAA,QACE,cACE,iBAAiB,QACb,MAAM,UACN,UAAU,wCAAwC,4BAA4B;AAAA,MACtF;AAAA,MACA;AAAA,QACE,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,QAAQ,KAAK;AAAA,MACf;AAAA,IACF,EACC,MAAM,CAAC,YAAY;AAClB,cAAQ,KAAK,6EAA6E,OAAO;AAAA,IACnG,CAAC;AACH,UAAM;AAAA,EACR;AAOA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,IAAI,KAAK,GAAG;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa;AAAA,IAClB,eAAe,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ,eAAe,YAAY;AAAA,MAC3B,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,EAAE,OAAO,IAAI,OAAO;AAAA,MACtB;AAAA,IACF,CAAC;AAAA,IACD,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAOA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,WAAO,MAAM,SAAS,KAAK,SAAS;AAAA,EACtC,SAAS,OAAO;AACd,YAAQ,MAAM,oDAAoD,KAAK;AACvE,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe;AAAA,QACf,SACE,iBAAiB,QACb,MAAM,UACN,UAAU,wCAAwC,4BAA4B;AAAA,MACtF,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
+  "names": []
+}