@open-mercato/core 0.6.6-develop.6304.1.4cf2b975cb → 0.6.6-develop.6309.1.983aeec27a

package/dist/modules/customers/data/guards.js

@@ -12,6 +12,13 @@ function normalizeIsoToken(raw) {
   if (!Number.isFinite(ms)) return null;
   return new Date(ms).toISOString();
 }
+const RECORD_LOCK_RESOLUTION_HEADER_NAME = "x-om-record-lock-resolution";
+const RECORD_LOCK_OVERRIDE_RESOLUTIONS = /* @__PURE__ */ new Set(["accept_mine", "merged"]);
+function isAuthorizedRecordLockOverride(headers) {
+  const raw = headers.get(RECORD_LOCK_RESOLUTION_HEADER_NAME);
+  if (typeof raw !== "string") return false;
+  return RECORD_LOCK_OVERRIDE_RESOLUTIONS.has(raw.trim().toLowerCase());
+}
 const optimisticLockGuard = {
   id: "customers.optimistic-lock",
   targetEntity: "*",
@@ -20,6 +27,7 @@ const optimisticLockGuard = {
   async validate(input) {
     const config = parseOptimisticLockEnv(process.env[OPTIMISTIC_LOCK_ENV_VAR]);
     if (config.mode === "off") return { ok: true };
+    if (isAuthorizedRecordLockOverride(input.requestHeaders)) return { ok: true };
     const enabled = config.mode === "all" || config.entities.has(input.resourceKind.toLowerCase());
     if (!enabled) return { ok: true };
     const readers = getAllOptimisticLockReaders();
@@ -61,6 +69,7 @@ const optimisticLockGuard = {
 };
 const guards = [optimisticLockGuard];
 export {
-  guards
+  guards,
+  isAuthorizedRecordLockOverride
 };
 //# sourceMappingURL=guards.js.map

package/dist/modules/customers/data/guards.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customers/data/guards.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { MutationGuard } from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { parseOptimisticLockEnv } from '@open-mercato/shared/lib/crud/optimistic-lock'\nimport { getAllOptimisticLockReaders } from '@open-mercato/shared/lib/crud/optimistic-lock-store'\nimport {\n  OPTIMISTIC_LOCK_CONFLICT_CODE,\n  OPTIMISTIC_LOCK_CONFLICT_ERROR,\n  OPTIMISTIC_LOCK_ENV_VAR,\n  OPTIMISTIC_LOCK_HEADER_NAME,\n} from '@open-mercato/shared/lib/crud/optimistic-lock-headers'\n\nfunction normalizeIsoToken(raw: string): string | null {\n  const ms = Date.parse(raw)\n  if (!Number.isFinite(ms)) return null\n  return new Date(ms).toISOString()\n}\n\nconst optimisticLockGuard: MutationGuard = {\n  id: 'customers.optimistic-lock',\n  targetEntity: '*',\n  operations: ['update', 'delete'],\n  priority: 100,\n  async validate(input) {\n    const config = parseOptimisticLockEnv(process.env[OPTIMISTIC_LOCK_ENV_VAR])\n    if (config.mode === 'off') return { ok: true }\n    const enabled = config.mode === 'all' || config.entities.has(input.resourceKind.toLowerCase())\n    if (!enabled) return { ok: true }\n    const readers = getAllOptimisticLockReaders()\n    const reader = readers[input.resourceKind]\n    if (!reader) return { ok: true }\n    const expectedRaw = input.requestHeaders.get(OPTIMISTIC_LOCK_HEADER_NAME)\n    if (!expectedRaw || expectedRaw.trim().length === 0) return { ok: true }\n    const expectedIso = normalizeIsoToken(expectedRaw.trim())\n    if (!expectedIso) return { ok: true }\n    if (!input.resourceId) return { ok: true }\n    const container = await createRequestContainer()\n    let em: EntityManager\n    try {\n      em = container.resolve('em') as EntityManager\n    } catch {\n      return { ok: true }\n    }\n    const currentRaw = await reader(em, {\n      resourceKind: input.resourceKind,\n      resourceId: input.resourceId,\n      tenantId: input.tenantId,\n      organizationId: input.organizationId ?? null,\n    })\n    if (currentRaw == null) return { ok: true }\n    const currentIso = normalizeIsoToken(currentRaw)\n    if (currentIso == null) return { ok: true }\n    if (currentIso === expectedIso) return { ok: true }\n    return {\n      ok: false,\n      status: 409,\n      body: {\n        error: OPTIMISTIC_LOCK_CONFLICT_ERROR,\n        code: OPTIMISTIC_LOCK_CONFLICT_CODE,\n        currentUpdatedAt: currentIso,\n        expectedUpdatedAt: expectedIso,\n      },\n    }\n  },\n}\n\nexport const guards: MutationGuard[] = [optimisticLockGuard]\n"],
-  "mappings": "AAEA,SAAS,8BAA8B;AACvC,SAAS,8BAA8B;AACvC,SAAS,mCAAmC;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,kBAAkB,KAA4B;AACrD,QAAM,KAAK,KAAK,MAAM,GAAG;AACzB,MAAI,CAAC,OAAO,SAAS,EAAE,EAAG,QAAO;AACjC,SAAO,IAAI,KAAK,EAAE,EAAE,YAAY;AAClC;AAEA,MAAM,sBAAqC;AAAA,EACzC,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,YAAY,CAAC,UAAU,QAAQ;AAAA,EAC/B,UAAU;AAAA,EACV,MAAM,SAAS,OAAO;AACpB,UAAM,SAAS,uBAAuB,QAAQ,IAAI,uBAAuB,CAAC;AAC1E,QAAI,OAAO,SAAS,MAAO,QAAO,EAAE,IAAI,KAAK;AAC7C,UAAM,UAAU,OAAO,SAAS,SAAS,OAAO,SAAS,IAAI,MAAM,aAAa,YAAY,CAAC;AAC7F,QAAI,CAAC,QAAS,QAAO,EAAE,IAAI,KAAK;AAChC,UAAM,UAAU,4BAA4B;AAC5C,UAAM,SAAS,QAAQ,MAAM,YAAY;AACzC,QAAI,CAAC,OAAQ,QAAO,EAAE,IAAI,KAAK;AAC/B,UAAM,cAAc,MAAM,eAAe,IAAI,2BAA2B;AACxE,QAAI,CAAC,eAAe,YAAY,KAAK,EAAE,WAAW,EAAG,QAAO,EAAE,IAAI,KAAK;AACvE,UAAM,cAAc,kBAAkB,YAAY,KAAK,CAAC;AACxD,QAAI,CAAC,YAAa,QAAO,EAAE,IAAI,KAAK;AACpC,QAAI,CAAC,MAAM,WAAY,QAAO,EAAE,IAAI,KAAK;AACzC,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI;AACJ,QAAI;AACF,WAAK,UAAU,QAAQ,IAAI;AAAA,IAC7B,QAAQ;AACN,aAAO,EAAE,IAAI,KAAK;AAAA,IACpB;AACA,UAAM,aAAa,MAAM,OAAO,IAAI;AAAA,MAClC,cAAc,MAAM;AAAA,MACpB,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,IAC1C,CAAC;AACD,QAAI,cAAc,KAAM,QAAO,EAAE,IAAI,KAAK;AAC1C,UAAM,aAAa,kBAAkB,UAAU;AAC/C,QAAI,cAAc,KAAM,QAAO,EAAE,IAAI,KAAK;AAC1C,QAAI,eAAe,YAAa,QAAO,EAAE,IAAI,KAAK;AAClD,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,MAAM;AAAA,QACN,kBAAkB;AAAA,QAClB,mBAAmB;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AACF;AAEO,MAAM,SAA0B,CAAC,mBAAmB;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { MutationGuard } from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { parseOptimisticLockEnv } from '@open-mercato/shared/lib/crud/optimistic-lock'\nimport { getAllOptimisticLockReaders } from '@open-mercato/shared/lib/crud/optimistic-lock-store'\nimport {\n  OPTIMISTIC_LOCK_CONFLICT_CODE,\n  OPTIMISTIC_LOCK_CONFLICT_ERROR,\n  OPTIMISTIC_LOCK_ENV_VAR,\n  OPTIMISTIC_LOCK_HEADER_NAME,\n} from '@open-mercato/shared/lib/crud/optimistic-lock-headers'\n\nfunction normalizeIsoToken(raw: string): string | null {\n  const ms = Date.parse(raw)\n  if (!Number.isFinite(ms)) return null\n  return new Date(ms).toISOString()\n}\n\n/**\n * HTTP header carrying the enterprise `record_locks` conflict resolution the\n * client chose in the merge dialog. This guard only reads the header value off\n * the request (no enterprise import) \u2014 it is the integration contract between\n * the record-lock layer and this universal optimistic-lock floor.\n */\nconst RECORD_LOCK_RESOLUTION_HEADER_NAME = 'x-om-record-lock-resolution'\n\n/**\n * Resolutions that express an explicit, privileged intent to OVERWRITE the\n * incoming concurrent write (\"Keep mine\" / merged). When the request asserts\n * one of these, the record-lock guard (which runs first, at priority 0) has\n * already authorized the override against `canOverrideIncoming`, so the\n * stale-`updated_at` floor MUST defer to it \u2014 otherwise it rejects exactly the\n * overwrite the user just authorized, looping the merge dialog on a fresh 409\n * (issue #3601). `accept_incoming` is intentionally NOT here: that path reloads\n * with a fresh `updated_at` and must still pass through the floor normally.\n */\nconst RECORD_LOCK_OVERRIDE_RESOLUTIONS: ReadonlySet<string> = new Set(['accept_mine', 'merged'])\n\nexport function isAuthorizedRecordLockOverride(headers: Headers): boolean {\n  const raw = headers.get(RECORD_LOCK_RESOLUTION_HEADER_NAME)\n  if (typeof raw !== 'string') return false\n  return RECORD_LOCK_OVERRIDE_RESOLUTIONS.has(raw.trim().toLowerCase())\n}\n\nconst optimisticLockGuard: MutationGuard = {\n  id: 'customers.optimistic-lock',\n  targetEntity: '*',\n  operations: ['update', 'delete'],\n  priority: 100,\n  async validate(input) {\n    const config = parseOptimisticLockEnv(process.env[OPTIMISTIC_LOCK_ENV_VAR])\n    if (config.mode === 'off') return { ok: true }\n    // A privileged record-lock \"Keep mine\" override deliberately overwrites the\n    // concurrent write; the floor must not block it on the now-stale timestamp.\n    if (isAuthorizedRecordLockOverride(input.requestHeaders)) return { ok: true }\n    const enabled = config.mode === 'all' || config.entities.has(input.resourceKind.toLowerCase())\n    if (!enabled) return { ok: true }\n    const readers = getAllOptimisticLockReaders()\n    const reader = readers[input.resourceKind]\n    if (!reader) return { ok: true }\n    const expectedRaw = input.requestHeaders.get(OPTIMISTIC_LOCK_HEADER_NAME)\n    if (!expectedRaw || expectedRaw.trim().length === 0) return { ok: true }\n    const expectedIso = normalizeIsoToken(expectedRaw.trim())\n    if (!expectedIso) return { ok: true }\n    if (!input.resourceId) return { ok: true }\n    const container = await createRequestContainer()\n    let em: EntityManager\n    try {\n      em = container.resolve('em') as EntityManager\n    } catch {\n      return { ok: true }\n    }\n    const currentRaw = await reader(em, {\n      resourceKind: input.resourceKind,\n      resourceId: input.resourceId,\n      tenantId: input.tenantId,\n      organizationId: input.organizationId ?? null,\n    })\n    if (currentRaw == null) return { ok: true }\n    const currentIso = normalizeIsoToken(currentRaw)\n    if (currentIso == null) return { ok: true }\n    if (currentIso === expectedIso) return { ok: true }\n    return {\n      ok: false,\n      status: 409,\n      body: {\n        error: OPTIMISTIC_LOCK_CONFLICT_ERROR,\n        code: OPTIMISTIC_LOCK_CONFLICT_CODE,\n        currentUpdatedAt: currentIso,\n        expectedUpdatedAt: expectedIso,\n      },\n    }\n  },\n}\n\nexport const guards: MutationGuard[] = [optimisticLockGuard]\n"],
+  "mappings": "AAEA,SAAS,8BAA8B;AACvC,SAAS,8BAA8B;AACvC,SAAS,mCAAmC;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,kBAAkB,KAA4B;AACrD,QAAM,KAAK,KAAK,MAAM,GAAG;AACzB,MAAI,CAAC,OAAO,SAAS,EAAE,EAAG,QAAO;AACjC,SAAO,IAAI,KAAK,EAAE,EAAE,YAAY;AAClC;AAQA,MAAM,qCAAqC;AAY3C,MAAM,mCAAwD,oBAAI,IAAI,CAAC,eAAe,QAAQ,CAAC;AAExF,SAAS,+BAA+B,SAA2B;AACxE,QAAM,MAAM,QAAQ,IAAI,kCAAkC;AAC1D,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,SAAO,iCAAiC,IAAI,IAAI,KAAK,EAAE,YAAY,CAAC;AACtE;AAEA,MAAM,sBAAqC;AAAA,EACzC,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,YAAY,CAAC,UAAU,QAAQ;AAAA,EAC/B,UAAU;AAAA,EACV,MAAM,SAAS,OAAO;AACpB,UAAM,SAAS,uBAAuB,QAAQ,IAAI,uBAAuB,CAAC;AAC1E,QAAI,OAAO,SAAS,MAAO,QAAO,EAAE,IAAI,KAAK;AAG7C,QAAI,+BAA+B,MAAM,cAAc,EAAG,QAAO,EAAE,IAAI,KAAK;AAC5E,UAAM,UAAU,OAAO,SAAS,SAAS,OAAO,SAAS,IAAI,MAAM,aAAa,YAAY,CAAC;AAC7F,QAAI,CAAC,QAAS,QAAO,EAAE,IAAI,KAAK;AAChC,UAAM,UAAU,4BAA4B;AAC5C,UAAM,SAAS,QAAQ,MAAM,YAAY;AACzC,QAAI,CAAC,OAAQ,QAAO,EAAE,IAAI,KAAK;AAC/B,UAAM,cAAc,MAAM,eAAe,IAAI,2BAA2B;AACxE,QAAI,CAAC,eAAe,YAAY,KAAK,EAAE,WAAW,EAAG,QAAO,EAAE,IAAI,KAAK;AACvE,UAAM,cAAc,kBAAkB,YAAY,KAAK,CAAC;AACxD,QAAI,CAAC,YAAa,QAAO,EAAE,IAAI,KAAK;AACpC,QAAI,CAAC,MAAM,WAAY,QAAO,EAAE,IAAI,KAAK;AACzC,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI;AACJ,QAAI;AACF,WAAK,UAAU,QAAQ,IAAI;AAAA,IAC7B,QAAQ;AACN,aAAO,EAAE,IAAI,KAAK;AAAA,IACpB;AACA,UAAM,aAAa,MAAM,OAAO,IAAI;AAAA,MAClC,cAAc,MAAM;AAAA,MACpB,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,IAC1C,CAAC;AACD,QAAI,cAAc,KAAM,QAAO,EAAE,IAAI,KAAK;AAC1C,UAAM,aAAa,kBAAkB,UAAU;AAC/C,QAAI,cAAc,KAAM,QAAO,EAAE,IAAI,KAAK;AAC1C,QAAI,eAAe,YAAa,QAAO,EAAE,IAAI,KAAK;AAClD,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,MAAM;AAAA,QACN,kBAAkB;AAAA,QAClB,mBAAmB;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AACF;AAEO,MAAM,SAA0B,CAAC,mBAAmB;",
   "names": []
 }

package/dist/modules/sales/commands/configuration.js

@@ -71,7 +71,7 @@ const channelCrudIndexer = {
   entityType: E.sales.sales_channel
 };
 async function loadChannelSnapshot(em, id) {
-  const channel = await em.findOne(SalesChannel, { id, deletedAt: null });
+  const channel = await findOneWithDecryption(em, SalesChannel, { id, deletedAt: null }, {});
   if (!channel) return null;
   const custom = await loadCustomFieldSnapshot(em, {
     entityId: E.sales.sales_channel,
@@ -504,7 +504,7 @@ const createChannelCommand = {
     const after = payload?.after;
     if (!after) return;
     const em = ctx.container.resolve("em").fork();
-    const record = await em.findOne(SalesChannel, { id: after.id });
+    const record = await findOneWithDecryption(em, SalesChannel, { id: after.id }, {}, { tenantId: after.tenantId, organizationId: after.organizationId });
     if (!record) return;
     ensureTenantScope(ctx, record.tenantId);
     ensureOrganizationScope(ctx, record.organizationId);
@@ -578,7 +578,7 @@ const updateChannelCommand = {
   async execute(rawInput, ctx) {
     const { parsed, custom } = parseWithCustomFields(channelUpdateSchema, rawInput);
     const em = ctx.container.resolve("em").fork();
-    const record = await em.findOne(SalesChannel, { id: parsed.id, deletedAt: null });
+    const record = await findOneWithDecryption(em, SalesChannel, { id: parsed.id, deletedAt: null }, {}, { tenantId: parsed.tenantId, organizationId: parsed.organizationId });
     if (!record) throw new CrudHttpError(404, { error: "Channel not found" });
     const dataEngine = ctx.container.resolve("dataEngine");
     const scope = resolveScopeFromUpdate(record, parsed, ctx);
@@ -670,7 +670,7 @@ const updateChannelCommand = {
     const before = payload?.before;
     if (!before) return;
     const em = ctx.container.resolve("em").fork();
-    let record = await em.findOne(SalesChannel, { id: before.id });
+    let record = await findOneWithDecryption(em, SalesChannel, { id: before.id }, {}, { tenantId: before.tenantId, organizationId: before.organizationId });
     if (!record) {
       record = em.create(SalesChannel, channelSeedFromSnapshot(before));
       em.persist(record);
@@ -721,7 +721,7 @@ const deleteChannelCommand = {
   async execute(input, ctx) {
     const id = requireId(input, "Channel id is required");
     const em = ctx.container.resolve("em").fork();
-    const record = await em.findOne(SalesChannel, { id });
+    const record = await findOneWithDecryption(em, SalesChannel, { id }, {});
     if (!record) throw new CrudHttpError(404, { error: "Channel not found" });
     ensureTenantScope(ctx, record.tenantId);
     ensureOrganizationScope(ctx, record.organizationId);
@@ -765,7 +765,7 @@ const deleteChannelCommand = {
     const before = payload?.before;
     if (!before) return;
     const em = ctx.container.resolve("em").fork();
-    let record = await em.findOne(SalesChannel, { id: before.id });
+    let record = await findOneWithDecryption(em, SalesChannel, { id: before.id }, {}, { tenantId: before.tenantId, organizationId: before.organizationId });
     if (!record) {
       record = em.create(SalesChannel, channelSeedFromSnapshot(before));
       em.persist(record);
@@ -1615,7 +1615,7 @@ const createTaxRateCommand = {
     ensureOrganizationScope(ctx, parsed.organizationId);
     const em = ctx.container.resolve("em").fork();
     if (parsed.channelId) {
-      const channel = await em.findOne(SalesChannel, { id: parsed.channelId, deletedAt: null });
+      const channel = await findOneWithDecryption(em, SalesChannel, { id: parsed.channelId, deletedAt: null }, {}, { tenantId: parsed.tenantId, organizationId: parsed.organizationId });
       const channelInScope = assertFound(channel, "Channel not found for tax rate");
       ensureSameScope(channelInScope, parsed.organizationId, parsed.tenantId);
     }
@@ -1745,7 +1745,7 @@ const updateTaxRateCommand = {
     record.organizationId = scope.organizationId;
     record.tenantId = scope.tenantId;
     if (parsed.channelId !== void 0 && parsed.channelId !== null) {
-      const channel = await em.findOne(SalesChannel, { id: parsed.channelId, deletedAt: null });
+      const channel = await findOneWithDecryption(em, SalesChannel, { id: parsed.channelId, deletedAt: null }, {}, { tenantId: record.tenantId, organizationId: record.organizationId });
       const channelInScope = assertFound(channel, "Channel not found for tax rate");
       ensureSameScope(channelInScope, record.organizationId, record.tenantId);
     }