@open-mercato/core 0.6.6-develop.6551.1.1511bfa890 → 0.6.6

package/src/modules/workflows/migrations/Migration20260715120000.ts

@@ -0,0 +1,114 @@
+import { Migration } from '@mikro-orm/migrations'
+
+const LEGACY_WORKFLOW_ID = 'workflows.checkout-demo'
+const LEGACY_WORKFLOW_NAME = 'Checkout with Payment Webhook'
+const LEGACY_ACTIVITY_ID = 'reserve_inventory'
+const LEGACY_ACTIVITY_URL = '{{env.INVENTORY_SERVICE_URL}}/api/inventory/reserve'
+const TRANSITIONS_REPLACED_BY_CODE_DEFINITION = [
+  'cart_to_customer_info',
+  'customer_info_to_payment',
+  'confirmation_to_order',
+] as const
+
+/**
+ * SQL fragment (for the UPDATE `where` clause) that matches ONLY the exact
+ * legacy checkout seed: workflow id, name, version, and the presence of the
+ * obsolete `reserve_inventory` `CALL_WEBHOOK` activity with its exact env-based
+ * URL. The match is intentionally strict so the repair never touches a row that
+ * is not the known-broken seed. A tenant whose persisted row diverges from this
+ * fingerprint (renamed, re-versioned, or a different webhook URL) is left
+ * untouched — the trade-off is safety over coverage for an unknown variant.
+ */
+export function legacyCheckoutPredicate(): string {
+  return `
+    "wf"."workflow_id" = '${LEGACY_WORKFLOW_ID}'
+    and "wf"."workflow_name" = '${LEGACY_WORKFLOW_NAME}'
+    and "wf"."version" = 1
+    and exists (
+      select 1
+      from jsonb_array_elements(coalesce("wf"."definition"->'transitions', '[]'::jsonb)) as "transition"("value")
+      cross join lateral jsonb_array_elements(coalesce("transition"."value"->'activities', '[]'::jsonb)) as "activity"("value")
+      where "activity"."value"->>'activityId' = '${LEGACY_ACTIVITY_ID}'
+        and "activity"."value"->>'activityType' = 'CALL_WEBHOOK'
+        and "activity"."value"#>>'{config,url}' = '${LEGACY_ACTIVITY_URL}'
+    )
+  `.trim()
+}
+
+/**
+ * The exact UPDATE the migration runs. Exported so the DB-level regression test
+ * (`__integration__/TC-WF-031`) executes the identical SQL against Postgres,
+ * making the jsonb transformation itself — not just its rendered string —
+ * the thing under test.
+ *
+ * It rebuilds the `transitions` array in original order, dropping the
+ * `activities` key from exactly the three transitions the maintained code
+ * definition made side-effect-free. All other keys (e.g. `preConditions`) and
+ * all other transitions — including `confirmation_to_end`, whose remaining
+ * activities are internal (`CALL_API`/`SEND_EMAIL`/`EMIT_EVENT`) and never trip
+ * the outbound URL guard — are preserved verbatim.
+ */
+export function buildLegacyCheckoutRepairSql(): string {
+  const strippedTransitionList = TRANSITIONS_REPLACED_BY_CODE_DEFINITION
+    .map((id) => `'${id}'`)
+    .join(', ')
+  return `
+    update "workflow_definitions" as "wf"
+    set "definition" = jsonb_set(
+          "wf"."definition",
+          '{transitions}',
+          coalesce(
+            (
+              select jsonb_agg(
+                case
+                  when "transition"."value"->>'transitionId' in (${strippedTransitionList})
+                    then "transition"."value" - 'activities'
+                  else "transition"."value"
+                end
+                order by "transition"."ordinality"
+              )
+              from jsonb_array_elements(
+                coalesce("wf"."definition"->'transitions', '[]'::jsonb)
+              ) with ordinality as "transition"("value", "ordinality")
+            ),
+            '[]'::jsonb
+          )
+        ),
+        "updated_at" = current_timestamp
+    where "wf"."code_workflow_id" is null
+      and "wf"."deleted_at" is null
+      and ${legacyCheckoutPredicate()};
+  `.trim()
+}
+
+/**
+ * Repairs the former seeded checkout demo after it was renamed to the same ID
+ * as the code-defined workflow. The DB-first lookup shadows the current code
+ * definition, including its obsolete external inventory webhook.
+ *
+ * The persisted row must remain active because historical and in-flight
+ * workflow instances reference it by definition_id — a random UUID the
+ * code-registry fallback in find-definition.ts deliberately never substitutes.
+ * The migration removes the activity arrays from the three transitions that
+ * the maintained code definition intentionally made side-effect-free,
+ * preserving the row and all instance references while keeping the demo
+ * self-contained. (Fresh installs never had this row; they execute the virtual
+ * code definition directly via findDefinitionForInstance.)
+ *
+ * `confirmation_to_end` is deliberately NOT rebuilt: unlike the three stripped
+ * transitions it still holds activities in the maintained code definition, and
+ * its legacy-only extra (`emit_order_completed`, an internal `EMIT_EVENT`) is
+ * harmless — it emits no external request, so leaving it costs nothing and
+ * avoids fragile per-activity surgery that could re-introduce a failure.
+ */
+export class Migration20260715120000 extends Migration {
+  override async up(): Promise<void> {
+    this.addSql(buildLegacyCheckoutRepairSql())
+  }
+
+  override async down(): Promise<void> {
+    // Forward-only data repair. The removed demo-only activity payloads cannot
+    // be reconstructed safely, and restoring obsolete external webhooks would
+    // re-open issue #4179.
+  }
+}

package/src/modules/workflows/migrations/Migration20260716120000.ts

@@ -0,0 +1,57 @@
+import { Migration } from '@mikro-orm/migrations'
+
+const CODE_WORKFLOW_ID = 'workflows.checkout-demo'
+
+/**
+ * Retires the persisted checkout-demo seed rows so runtime resolves the
+ * maintained CODE definition instead (issue #4211).
+ *
+ * Background: `workflows.checkout-demo` is now code-defined
+ * (`packages/core/src/modules/workflows/workflows.ts`), and only the code
+ * definition forwards the cart's line items + shipping/tax adjustments to
+ * `POST /api/sales/orders`. But existing tenants still carry a persisted
+ * `workflow_definitions` row from the old seed — originally seeded under ids
+ * like `checkout_simple_v1` / names like `Simple Checkout Flow` and later
+ * `Checkout with Payment Webhook`, then renamed to `workflows.checkout-demo`
+ * by Migration20260428102318. Its `create_order` body never sent `lines`, and
+ * because `findWorkflowDefinition` resolves the DB row first, that stale row
+ * SHADOWS the code definition — so orders come out with zero line items and
+ * $0.00 totals. Patching the persisted body is unreliable: the seed's name and
+ * body shape vary across historical versions, so a fingerprint on either misses
+ * whole cohorts of tenants (the defect QA hit).
+ *
+ * Instead, soft-delete the seeded rows. This is body/name-agnostic, so it fixes
+ * every historical seed variant:
+ *   - New instances: `findWorkflowDefinition` filters `deleted_at IS NULL`, so
+ *     the retired row is skipped and the code definition is used (correct body).
+ *   - In-flight instances: `findDefinitionForInstance` loads the definition by
+ *     `id` with no soft-delete filter (WorkflowDefinition has no global filter),
+ *     so instances that reference the row keep resolving and advancing.
+ *
+ * Scope is limited to `code_workflow_id IS NULL` rows — user customizations of
+ * the code definition set `code_workflow_id` and MUST NOT be retired. The
+ * `deleted_at IS NULL` guard makes the migration idempotent.
+ */
+export function buildRetireSeededCheckoutDemoSql(): string {
+  return `
+    update "workflow_definitions" as "wf"
+    set "deleted_at" = current_timestamp,
+        "updated_at" = current_timestamp
+    where "wf"."workflow_id" = '${CODE_WORKFLOW_ID}'
+      and "wf"."code_workflow_id" is null
+      and "wf"."deleted_at" is null;
+  `.trim()
+}
+
+export class Migration20260716120000 extends Migration {
+  override async up(): Promise<void> {
+    this.addSql(buildRetireSeededCheckoutDemoSql())
+  }
+
+  override async down(): Promise<void> {
+    // Forward-only. Restoring `deleted_at = null` would re-shadow the maintained
+    // code definition with the stale seed body and re-introduce zero-line orders
+    // (#4211). The code definition supersedes the seed, so there is nothing to
+    // restore.
+  }
+}

package/src/modules/workflows/workflows.ts

@@ -239,6 +239,8 @@ const checkoutDemo = defineWorkflow({
               customerEntityId: '{{context.customer.id}}',
               currencyCode: '{{context.cart.currency}}',
               placedAt: '{{now}}',
+              lines: '{{context.cart.orderLines}}',
+              adjustments: '{{context.cart.orderAdjustments}}',
               grandTotalGrossAmount: '{{context.cart.total}}',
             },
             validateTenantMatch: true,

package/dist/generated/entities/gateway_session_initialization/index.js

@@ -1,23 +0,0 @@
-const id = "id";
-const operation_key = "operation_key";
-const provider_key = "provider_key";
-const claim_token = "claim_token";
-const claimed_at = "claimed_at";
-const gateway_transaction_id = "gateway_transaction_id";
-const organization_id = "organization_id";
-const tenant_id = "tenant_id";
-const created_at = "created_at";
-const updated_at = "updated_at";
-export {
-  claim_token,
-  claimed_at,
-  created_at,
-  gateway_transaction_id,
-  id,
-  operation_key,
-  organization_id,
-  provider_key,
-  tenant_id,
-  updated_at
-};
-//# sourceMappingURL=index.js.map

package/dist/generated/entities/gateway_session_initialization/index.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../generated/entities/gateway_session_initialization/index.ts"],
-  "sourcesContent": ["export const id = \"id\";\nexport const operation_key = \"operation_key\";\nexport const provider_key = \"provider_key\";\nexport const claim_token = \"claim_token\";\nexport const claimed_at = \"claimed_at\";\nexport const gateway_transaction_id = \"gateway_transaction_id\";\nexport const organization_id = \"organization_id\";\nexport const tenant_id = \"tenant_id\";\nexport const created_at = \"created_at\";\nexport const updated_at = \"updated_at\";\n"],
-  "mappings": "AAAO,MAAM,KAAK;AACX,MAAM,gBAAgB;AACtB,MAAM,eAAe;AACrB,MAAM,cAAc;AACpB,MAAM,aAAa;AACnB,MAAM,yBAAyB;AAC/B,MAAM,kBAAkB;AACxB,MAAM,YAAY;AAClB,MAAM,aAAa;AACnB,MAAM,aAAa;",
-  "names": []
-}

package/dist/modules/attachments/lib/reconcileOrganization.js

@@ -1,110 +0,0 @@
-import { createLogger } from "@open-mercato/shared/lib/logger";
-import { Attachment } from "../data/entities.js";
-const logger = createLogger("attachments").child({ component: "reconcileOrganization" });
-const LIBRARY_ENTITY_ID = "attachments:library";
-const DEFAULT_BATCH_SIZE = 500;
-function readParentOrganizationId(record) {
-  const raw = record["organization_id"] ?? record["organizationId"];
-  if (typeof raw === "string" && raw.trim().length) return raw.trim();
-  return null;
-}
-function ensureBucket(report, entityId) {
-  const existing = report.byEntity[entityId];
-  if (existing) return existing;
-  const bucket = { scanned: 0, updated: 0, unresolved: 0 };
-  report.byEntity[entityId] = bucket;
-  return bucket;
-}
-async function reconcileAttachmentOrganizations(opts) {
-  const { em, queryEngine, tenantId } = opts;
-  const batchSize = opts.batchSize && opts.batchSize > 0 ? opts.batchSize : DEFAULT_BATCH_SIZE;
-  const report = {
-    scanned: 0,
-    updated: 0,
-    unresolved: 0,
-    skippedVirtual: 0,
-    byEntity: {}
-  };
-  const rows = await em.getConnection().execute(
-    "select id, entity_id, record_id, organization_id from attachments where tenant_id = ?",
-    [tenantId]
-  );
-  report.scanned = rows.length;
-  if (!rows.length) return report;
-  const groups = /* @__PURE__ */ new Map();
-  for (const row of rows) {
-    if (!row.id || !row.entity_id || !row.record_id) continue;
-    const list = groups.get(row.entity_id) ?? [];
-    list.push(row);
-    groups.set(row.entity_id, list);
-  }
-  const pendingUpdates = [];
-  for (const [entityId, group] of groups) {
-    const bucket = ensureBucket(report, entityId);
-    bucket.scanned += group.length;
-    if (entityId === LIBRARY_ENTITY_ID) {
-      report.skippedVirtual += group.length;
-      continue;
-    }
-    const recordIds = Array.from(
-      new Set(group.map((row) => row.record_id).filter((value) => !!value))
-    );
-    const parentOrgByRecordId = /* @__PURE__ */ new Map();
-    let resolvable = true;
-    for (let index = 0; index < recordIds.length; index += batchSize) {
-      const chunk = recordIds.slice(index, index + batchSize);
-      try {
-        const result = await queryEngine.query(entityId, {
-          fields: ["id", "organization_id"],
-          filters: { id: chunk.length === 1 ? { $eq: chunk[0] } : { $in: chunk } },
-          tenantId,
-          withDeleted: true,
-          page: { pageSize: Math.max(chunk.length, 1) }
-        });
-        for (const item of result.items ?? []) {
-          const record = item;
-          const recordId = record.id != null ? String(record.id) : null;
-          if (!recordId) continue;
-          parentOrgByRecordId.set(recordId, readParentOrganizationId(record));
-        }
-      } catch (error) {
-        resolvable = false;
-        logger.warn("org reconcile: cannot resolve parent organization for entity", {
-          entityId,
-          error
-        });
-        break;
-      }
-    }
-    if (!resolvable) {
-      bucket.unresolved += group.length;
-      report.unresolved += group.length;
-      continue;
-    }
-    for (const row of group) {
-      const target = row.record_id ? parentOrgByRecordId.get(row.record_id) : null;
-      if (!target) {
-        bucket.unresolved += 1;
-        report.unresolved += 1;
-        continue;
-      }
-      if ((row.organization_id ?? null) === target) continue;
-      pendingUpdates.push({ id: row.id, organizationId: target });
-      bucket.updated += 1;
-      report.updated += 1;
-    }
-  }
-  for (let index = 0; index < pendingUpdates.length; index += batchSize) {
-    const chunk = pendingUpdates.slice(index, index + batchSize);
-    for (const update of chunk) {
-      const reference = em.getReference(Attachment, update.id);
-      reference.organizationId = update.organizationId;
-    }
-    await em.flush();
-  }
-  return report;
-}
-export {
-  reconcileAttachmentOrganizations
-};
-//# sourceMappingURL=reconcileOrganization.js.map

package/dist/modules/attachments/lib/reconcileOrganization.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/attachments/lib/reconcileOrganization.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { Attachment } from '../data/entities'\n\nconst logger = createLogger('attachments').child({ component: 'reconcileOrganization' })\n\n/**\n * Virtual entity id for library attachments \u2014 these are not attached to a\n * parent record that owns an organization, so there is nothing to reconcile\n * against. They are counted as skipped rather than unresolved.\n */\nconst LIBRARY_ENTITY_ID = 'attachments:library'\n\nconst DEFAULT_BATCH_SIZE = 500\n\nexport type AttachmentOrgReconcileEntityStat = {\n  scanned: number\n  updated: number\n  unresolved: number\n}\n\nexport type AttachmentOrgReconcileReport = {\n  scanned: number\n  updated: number\n  unresolved: number\n  skippedVirtual: number\n  byEntity: Record<string, AttachmentOrgReconcileEntityStat>\n}\n\ntype AttachmentScanRow = {\n  id: string\n  entity_id: string | null\n  record_id: string | null\n  organization_id: string | null\n}\n\nfunction readParentOrganizationId(record: Record<string, unknown>): string | null {\n  const raw = record['organization_id'] ?? record['organizationId']\n  if (typeof raw === 'string' && raw.trim().length) return raw.trim()\n  return null\n}\n\nfunction ensureBucket(\n  report: AttachmentOrgReconcileReport,\n  entityId: string,\n): AttachmentOrgReconcileEntityStat {\n  const existing = report.byEntity[entityId]\n  if (existing) return existing\n  const bucket: AttachmentOrgReconcileEntityStat = { scanned: 0, updated: 0, unresolved: 0 }\n  report.byEntity[entityId] = bucket\n  return bucket\n}\n\n/**\n * Reconcile the `organization_id` of existing attachments to the organization\n * of the record they are attached to.\n *\n * Background (#3765): before the upload route became selected-organization\n * aware, a multi-org admin who switched the header organization uploaded files\n * that were silently stored under their *home* organization instead of the\n * selected one (the organization of the parent record). Those rows are now\n * invisible to org-scoped reads and stay orphaned. This heals them forward.\n *\n * The parent record's organization is the ground truth: an attachment is not\n * distinguishable from a legitimately home-org one by looking at the attachment\n * alone. Parent organizations are resolved generically through the Query Engine\n * by `entityId` (works for both base and custom entities, tenant-scoped and\n * organization-agnostic so the parent's real org is returned regardless of\n * which org the caller sits in) \u2014 the same mechanism the attachments module\n * already uses to enrich assignment details.\n *\n * The reconciliation is:\n * - idempotent \u2014 rows already matching their parent are left untouched;\n * - conservative \u2014 when the parent org cannot be resolved (unregistered\n *   entity id, hard-deleted parent, parent without an org column) the row is\n *   counted as `unresolved` and left as-is rather than guessed at;\n * - tenant-scoped \u2014 it reconciles every attachment in the tenant across all\n *   organizations (the whole point is moving rows between orgs).\n *\n * Writes go through the passed `EntityManager` (which the caller runs inside a\n * transaction) so the whole reconciliation commits atomically.\n */\nexport async function reconcileAttachmentOrganizations(opts: {\n  em: EntityManager\n  queryEngine: QueryEngine\n  tenantId: string\n  batchSize?: number\n}): Promise<AttachmentOrgReconcileReport> {\n  const { em, queryEngine, tenantId } = opts\n  const batchSize = opts.batchSize && opts.batchSize > 0 ? opts.batchSize : DEFAULT_BATCH_SIZE\n  const report: AttachmentOrgReconcileReport = {\n    scanned: 0,\n    updated: 0,\n    unresolved: 0,\n    skippedVirtual: 0,\n    byEntity: {},\n  }\n\n  const rows = (await em.getConnection().execute(\n    'select id, entity_id, record_id, organization_id from attachments where tenant_id = ?',\n    [tenantId],\n  )) as AttachmentScanRow[]\n  report.scanned = rows.length\n  if (!rows.length) return report\n\n  const groups = new Map<string, AttachmentScanRow[]>()\n  for (const row of rows) {\n    if (!row.id || !row.entity_id || !row.record_id) continue\n    const list = groups.get(row.entity_id) ?? []\n    list.push(row)\n    groups.set(row.entity_id, list)\n  }\n\n  const pendingUpdates: Array<{ id: string; organizationId: string }> = []\n\n  for (const [entityId, group] of groups) {\n    const bucket = ensureBucket(report, entityId)\n    bucket.scanned += group.length\n\n    if (entityId === LIBRARY_ENTITY_ID) {\n      report.skippedVirtual += group.length\n      continue\n    }\n\n    const recordIds = Array.from(\n      new Set(group.map((row) => row.record_id).filter((value): value is string => !!value)),\n    )\n    const parentOrgByRecordId = new Map<string, string | null>()\n    let resolvable = true\n\n    for (let index = 0; index < recordIds.length; index += batchSize) {\n      const chunk = recordIds.slice(index, index + batchSize)\n      try {\n        const result = await queryEngine.query(entityId as any, {\n          fields: ['id', 'organization_id'],\n          filters: { id: chunk.length === 1 ? { $eq: chunk[0] } : { $in: chunk } },\n          tenantId,\n          withDeleted: true,\n          page: { pageSize: Math.max(chunk.length, 1) },\n        })\n        for (const item of result.items ?? []) {\n          const record = item as Record<string, unknown>\n          const recordId = record.id != null ? String(record.id) : null\n          if (!recordId) continue\n          parentOrgByRecordId.set(recordId, readParentOrganizationId(record))\n        }\n      } catch (error) {\n        resolvable = false\n        logger.warn('org reconcile: cannot resolve parent organization for entity', {\n          entityId,\n          error,\n        })\n        break\n      }\n    }\n\n    if (!resolvable) {\n      bucket.unresolved += group.length\n      report.unresolved += group.length\n      continue\n    }\n\n    for (const row of group) {\n      const target = row.record_id ? parentOrgByRecordId.get(row.record_id) : null\n      if (!target) {\n        bucket.unresolved += 1\n        report.unresolved += 1\n        continue\n      }\n      if ((row.organization_id ?? null) === target) continue\n      pendingUpdates.push({ id: row.id, organizationId: target })\n      bucket.updated += 1\n      report.updated += 1\n    }\n  }\n\n  for (let index = 0; index < pendingUpdates.length; index += batchSize) {\n    const chunk = pendingUpdates.slice(index, index + batchSize)\n    for (const update of chunk) {\n      const reference = em.getReference(Attachment, update.id)\n      reference.organizationId = update.organizationId\n    }\n    await em.flush()\n  }\n\n  return report\n}\n"],
-  "mappings": "AACA,SAAS,oBAAoB;AAE7B,SAAS,kBAAkB;AAE3B,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,wBAAwB,CAAC;AAOvF,MAAM,oBAAoB;AAE1B,MAAM,qBAAqB;AAuB3B,SAAS,yBAAyB,QAAgD;AAChF,QAAM,MAAM,OAAO,iBAAiB,KAAK,OAAO,gBAAgB;AAChE,MAAI,OAAO,QAAQ,YAAY,IAAI,KAAK,EAAE,OAAQ,QAAO,IAAI,KAAK;AAClE,SAAO;AACT;AAEA,SAAS,aACP,QACA,UACkC;AAClC,QAAM,WAAW,OAAO,SAAS,QAAQ;AACzC,MAAI,SAAU,QAAO;AACrB,QAAM,SAA2C,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,EAAE;AACzF,SAAO,SAAS,QAAQ,IAAI;AAC5B,SAAO;AACT;AA+BA,eAAsB,iCAAiC,MAKb;AACxC,QAAM,EAAE,IAAI,aAAa,SAAS,IAAI;AACtC,QAAM,YAAY,KAAK,aAAa,KAAK,YAAY,IAAI,KAAK,YAAY;AAC1E,QAAM,SAAuC;AAAA,IAC3C,SAAS;AAAA,IACT,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,gBAAgB;AAAA,IAChB,UAAU,CAAC;AAAA,EACb;AAEA,QAAM,OAAQ,MAAM,GAAG,cAAc,EAAE;AAAA,IACrC;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AACA,SAAO,UAAU,KAAK;AACtB,MAAI,CAAC,KAAK,OAAQ,QAAO;AAEzB,QAAM,SAAS,oBAAI,IAAiC;AACpD,aAAW,OAAO,MAAM;AACtB,QAAI,CAAC,IAAI,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,UAAW;AACjD,UAAM,OAAO,OAAO,IAAI,IAAI,SAAS,KAAK,CAAC;AAC3C,SAAK,KAAK,GAAG;AACb,WAAO,IAAI,IAAI,WAAW,IAAI;AAAA,EAChC;AAEA,QAAM,iBAAgE,CAAC;AAEvE,aAAW,CAAC,UAAU,KAAK,KAAK,QAAQ;AACtC,UAAM,SAAS,aAAa,QAAQ,QAAQ;AAC5C,WAAO,WAAW,MAAM;AAExB,QAAI,aAAa,mBAAmB;AAClC,aAAO,kBAAkB,MAAM;AAC/B;AAAA,IACF;AAEA,UAAM,YAAY,MAAM;AAAA,MACtB,IAAI,IAAI,MAAM,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK,CAAC;AAAA,IACvF;AACA,UAAM,sBAAsB,oBAAI,IAA2B;AAC3D,QAAI,aAAa;AAEjB,aAAS,QAAQ,GAAG,QAAQ,UAAU,QAAQ,SAAS,WAAW;AAChE,YAAM,QAAQ,UAAU,MAAM,OAAO,QAAQ,SAAS;AACtD,UAAI;AACF,cAAM,SAAS,MAAM,YAAY,MAAM,UAAiB;AAAA,UACtD,QAAQ,CAAC,MAAM,iBAAiB;AAAA,UAChC,SAAS,EAAE,IAAI,MAAM,WAAW,IAAI,EAAE,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,MAAM,EAAE;AAAA,UACvE;AAAA,UACA,aAAa;AAAA,UACb,MAAM,EAAE,UAAU,KAAK,IAAI,MAAM,QAAQ,CAAC,EAAE;AAAA,QAC9C,CAAC;AACD,mBAAW,QAAQ,OAAO,SAAS,CAAC,GAAG;AACrC,gBAAM,SAAS;AACf,gBAAM,WAAW,OAAO,MAAM,OAAO,OAAO,OAAO,EAAE,IAAI;AACzD,cAAI,CAAC,SAAU;AACf,8BAAoB,IAAI,UAAU,yBAAyB,MAAM,CAAC;AAAA,QACpE;AAAA,MACF,SAAS,OAAO;AACd,qBAAa;AACb,eAAO,KAAK,gEAAgE;AAAA,UAC1E;AAAA,UACA;AAAA,QACF,CAAC;AACD;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,YAAY;AACf,aAAO,cAAc,MAAM;AAC3B,aAAO,cAAc,MAAM;AAC3B;AAAA,IACF;AAEA,eAAW,OAAO,OAAO;AACvB,YAAM,SAAS,IAAI,YAAY,oBAAoB,IAAI,IAAI,SAAS,IAAI;AACxE,UAAI,CAAC,QAAQ;AACX,eAAO,cAAc;AACrB,eAAO,cAAc;AACrB;AAAA,MACF;AACA,WAAK,IAAI,mBAAmB,UAAU,OAAQ;AAC9C,qBAAe,KAAK,EAAE,IAAI,IAAI,IAAI,gBAAgB,OAAO,CAAC;AAC1D,aAAO,WAAW;AAClB,aAAO,WAAW;AAAA,IACpB;AAAA,EACF;AAEA,WAAS,QAAQ,GAAG,QAAQ,eAAe,QAAQ,SAAS,WAAW;AACrE,UAAM,QAAQ,eAAe,MAAM,OAAO,QAAQ,SAAS;AAC3D,eAAW,UAAU,OAAO;AAC1B,YAAM,YAAY,GAAG,aAAa,YAAY,OAAO,EAAE;AACvD,gBAAU,iBAAiB,OAAO;AAAA,IACpC;AACA,UAAM,GAAG,MAAM;AAAA,EACjB;AAEA,SAAO;AACT;",
-  "names": []
-}

package/dist/modules/attachments/lib/requestScope.js

@@ -1,10 +0,0 @@
-import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
-async function resolveAttachmentOrganizationId(container, auth, request) {
-  if (!auth) return null;
-  const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
-  return scope?.selectedId ?? auth.orgId ?? null;
-}
-export {
-  resolveAttachmentOrganizationId
-};
-//# sourceMappingURL=requestScope.js.map

package/dist/modules/attachments/lib/requestScope.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/attachments/lib/requestScope.ts"],
-  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\n\n/**\n * Resolve the organization an attachment request should act within.\n *\n * `auth.orgId` alone is NOT selected-organization aware for non-superadmin\n * principals: `applySuperAdminScope` only rewrites `orgId` from the\n * `om_selected_org` cookie for superadmins, so a regular multi-org admin who\n * switches the header organization keeps `auth.orgId` pinned to their own home\n * organization. The CRUD factory and other org-scoped routes derive the active\n * organization via `resolveOrganizationScopeForRequest` (cookie-driven and\n * RBAC-validated for ALL users, falling back to the home org when the selection\n * is absent or inaccessible). Attachments must do the same so uploaded files\n * land under \u2014 and are read back from \u2014 the currently selected organization\n * rather than the uploader's home organization (#3765).\n */\nexport async function resolveAttachmentOrganizationId(\n  container: AwilixContainer,\n  auth: AuthContext,\n  request: Request,\n): Promise<string | null> {\n  if (!auth) return null\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n  return scope?.selectedId ?? auth.orgId ?? null\n}\n"],
-  "mappings": "AAEA,SAAS,0CAA0C;AAgBnD,eAAsB,gCACpB,WACA,MACA,SACwB;AACxB,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,SAAO,OAAO,cAAc,KAAK,SAAS;AAC5C;",
-  "names": []
-}

package/dist/modules/auth/api/autologin.js

@@ -1,85 +0,0 @@
-import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
-import { createLogger } from "@open-mercato/shared/lib/logger";
-import { signJwt } from "@open-mercato/shared/lib/auth/jwt";
-import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
-import { buildSafeRedirectResponse, resolveTrustedRedirectBase } from "@open-mercato/core/modules/auth/lib/requestRedirect";
-import { sanitizeRedirectPath } from "@open-mercato/core/modules/auth/lib/safeRedirect";
-import { resolveAutoLoginCredentials } from "@open-mercato/core/modules/auth/lib/autologin";
-import { emitAuthEvent } from "@open-mercato/core/modules/auth/events";
-const metadata = { requireAuth: false };
-const accessTokenMaxAgeSeconds = 60 * 60 * 8;
-const logger = createLogger("auth").child({ component: "autologin" });
-async function GET(req) {
-  const url = new URL(req.url);
-  const baseUrl = resolveTrustedRedirectBase(req) ?? url.origin;
-  const redirectTo = sanitizeRedirectPath(url.searchParams.get("redirect"), baseUrl, "/backend");
-  const credentials = resolveAutoLoginCredentials();
-  if (!credentials) {
-    return buildSafeRedirectResponse(req, "/login");
-  }
-  const existing = await getAuthFromRequest(req);
-  if (existing) {
-    return buildSafeRedirectResponse(req, redirectTo);
-  }
-  const container = await createRequestContainer();
-  const auth = container.resolve("authService");
-  let user = null;
-  if (credentials.tenantId) {
-    user = await auth.findUserByEmailAndTenant(credentials.email, credentials.tenantId);
-  } else {
-    const users = await auth.findUsersByEmail(credentials.email);
-    user = users.length === 1 ? users[0] : null;
-  }
-  const ok = await auth.verifyPassword(user, credentials.password);
-  if (!user || !ok) {
-    logger.warn("OM_AUTOLOGIN credentials did not resolve to a single valid user; falling back to login");
-    return buildSafeRedirectResponse(req, "/login");
-  }
-  const resolvedTenantId = credentials.tenantId ?? (user.tenantId ? String(user.tenantId) : null);
-  const roles = await auth.getUserRoles(user, resolvedTenantId);
-  await auth.updateLastLoginAt(user);
-  const expiresAt = new Date(Date.now() + accessTokenMaxAgeSeconds * 1e3);
-  const { session } = await auth.createSession(user, expiresAt);
-  const token = signJwt({
-    sub: String(user.id),
-    sid: String(session.id),
-    tenantId: resolvedTenantId,
-    orgId: user.organizationId ? String(user.organizationId) : null,
-    email: user.email,
-    roles
-  });
-  void emitAuthEvent("auth.login.success", {
-    id: String(user.id),
-    email: user.email,
-    tenantId: resolvedTenantId,
-    organizationId: user.organizationId ? String(user.organizationId) : null
-  }).catch(() => void 0);
-  const res = buildSafeRedirectResponse(req, redirectTo);
-  res.cookies.set("auth_token", token, {
-    httpOnly: true,
-    path: "/",
-    sameSite: "lax",
-    secure: process.env.NODE_ENV === "production",
-    maxAge: accessTokenMaxAgeSeconds
-  });
-  return res;
-}
-const openApi = {
-  tag: "Authentication & Accounts",
-  summary: "Demo autologin",
-  methods: {
-    GET: {
-      summary: "Auto sign-in using env-configured demo credentials",
-      description: "When OM_AUTOLOGIN_EMAIL / OM_AUTOLOGIN_PASSWORD are configured, signs the visitor in with those credentials and redirects into the app. Intended for single-tenant demo instances only. Falls back to the login page when disabled or misconfigured.",
-      responses: [
-        { status: 307, description: "Redirect into the app (or to /login on failure)", mediaType: "text/html" }
-      ]
-    }
-  }
-};
-export {
-  GET,
-  metadata,
-  openApi
-};
-//# sourceMappingURL=autologin.js.map

package/dist/modules/auth/api/autologin.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/auth/api/autologin.ts"],
-  "sourcesContent": ["import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { AuthService } from '@open-mercato/core/modules/auth/services/authService'\nimport { signJwt } from '@open-mercato/shared/lib/auth/jwt'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { buildSafeRedirectResponse, resolveTrustedRedirectBase } from '@open-mercato/core/modules/auth/lib/requestRedirect'\nimport { sanitizeRedirectPath } from '@open-mercato/core/modules/auth/lib/safeRedirect'\nimport { resolveAutoLoginCredentials } from '@open-mercato/core/modules/auth/lib/autologin'\nimport { emitAuthEvent } from '@open-mercato/core/modules/auth/events'\n\nexport const metadata = { requireAuth: false }\n\nconst accessTokenMaxAgeSeconds = 60 * 60 * 8\nconst logger = createLogger('auth').child({ component: 'autologin' })\n\n// Demo-only convenience: when OM_AUTOLOGIN_* credentials are configured, sign the\n// visitor in with those credentials and redirect into the app. Gated entirely\n// behind env vars \u2014 the homepage only routes here when they are set. On any\n// failure (feature off, bad credentials) it falls back to the manual login form\n// so a misconfigured demo can never loop.\nexport async function GET(req: Request) {\n  const url = new URL(req.url)\n  const baseUrl = resolveTrustedRedirectBase(req) ?? url.origin\n  const redirectTo = sanitizeRedirectPath(url.searchParams.get('redirect'), baseUrl, '/backend')\n\n  const credentials = resolveAutoLoginCredentials()\n  if (!credentials) {\n    return buildSafeRedirectResponse(req, '/login')\n  }\n\n  // Already signed in \u2014 go straight to the app instead of re-issuing a session.\n  const existing = await getAuthFromRequest(req)\n  if (existing) {\n    return buildSafeRedirectResponse(req, redirectTo)\n  }\n\n  const container = await createRequestContainer()\n  const auth = container.resolve<AuthService>('authService')\n\n  let user = null\n  if (credentials.tenantId) {\n    user = await auth.findUserByEmailAndTenant(credentials.email, credentials.tenantId)\n  } else {\n    const users = await auth.findUsersByEmail(credentials.email)\n    user = users.length === 1 ? users[0] : null\n  }\n\n  const ok = await auth.verifyPassword(user, credentials.password)\n  if (!user || !ok) {\n    // Misconfigured demo credentials \u2014 never loop; drop to the manual form.\n    logger.warn('OM_AUTOLOGIN credentials did not resolve to a single valid user; falling back to login')\n    return buildSafeRedirectResponse(req, '/login')\n  }\n\n  const resolvedTenantId = credentials.tenantId ?? (user.tenantId ? String(user.tenantId) : null)\n  const roles = await auth.getUserRoles(user, resolvedTenantId)\n  await auth.updateLastLoginAt(user)\n  const expiresAt = new Date(Date.now() + accessTokenMaxAgeSeconds * 1000)\n  const { session } = await auth.createSession(user, expiresAt)\n  const token = signJwt({\n    sub: String(user.id),\n    sid: String(session.id),\n    tenantId: resolvedTenantId,\n    orgId: user.organizationId ? String(user.organizationId) : null,\n    email: user.email,\n    roles,\n  })\n  void emitAuthEvent('auth.login.success', {\n    id: String(user.id),\n    email: user.email,\n    tenantId: resolvedTenantId,\n    organizationId: user.organizationId ? String(user.organizationId) : null,\n  }).catch(() => undefined)\n\n  const res = buildSafeRedirectResponse(req, redirectTo)\n  res.cookies.set('auth_token', token, {\n    httpOnly: true,\n    path: '/',\n    sameSite: 'lax',\n    secure: process.env.NODE_ENV === 'production',\n    maxAge: accessTokenMaxAgeSeconds,\n  })\n  return res\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Authentication & Accounts',\n  summary: 'Demo autologin',\n  methods: {\n    GET: {\n      summary: 'Auto sign-in using env-configured demo credentials',\n      description:\n        'When OM_AUTOLOGIN_EMAIL / OM_AUTOLOGIN_PASSWORD are configured, signs the visitor in with those credentials and redirects into the app. Intended for single-tenant demo instances only. Falls back to the login page when disabled or misconfigured.',\n      responses: [\n        { status: 307, description: 'Redirect into the app (or to /login on failure)', mediaType: 'text/html' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AACA,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAE7B,SAAS,eAAe;AACxB,SAAS,0BAA0B;AACnC,SAAS,2BAA2B,kCAAkC;AACtE,SAAS,4BAA4B;AACrC,SAAS,mCAAmC;AAC5C,SAAS,qBAAqB;AAEvB,MAAM,WAAW,EAAE,aAAa,MAAM;AAE7C,MAAM,2BAA2B,KAAK,KAAK;AAC3C,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AAOpE,eAAsB,IAAI,KAAc;AACtC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,UAAU,2BAA2B,GAAG,KAAK,IAAI;AACvD,QAAM,aAAa,qBAAqB,IAAI,aAAa,IAAI,UAAU,GAAG,SAAS,UAAU;AAE7F,QAAM,cAAc,4BAA4B;AAChD,MAAI,CAAC,aAAa;AAChB,WAAO,0BAA0B,KAAK,QAAQ;AAAA,EAChD;AAGA,QAAM,WAAW,MAAM,mBAAmB,GAAG;AAC7C,MAAI,UAAU;AACZ,WAAO,0BAA0B,KAAK,UAAU;AAAA,EAClD;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,UAAU,QAAqB,aAAa;AAEzD,MAAI,OAAO;AACX,MAAI,YAAY,UAAU;AACxB,WAAO,MAAM,KAAK,yBAAyB,YAAY,OAAO,YAAY,QAAQ;AAAA,EACpF,OAAO;AACL,UAAM,QAAQ,MAAM,KAAK,iBAAiB,YAAY,KAAK;AAC3D,WAAO,MAAM,WAAW,IAAI,MAAM,CAAC,IAAI;AAAA,EACzC;AAEA,QAAM,KAAK,MAAM,KAAK,eAAe,MAAM,YAAY,QAAQ;AAC/D,MAAI,CAAC,QAAQ,CAAC,IAAI;AAEhB,WAAO,KAAK,wFAAwF;AACpG,WAAO,0BAA0B,KAAK,QAAQ;AAAA,EAChD;AAEA,QAAM,mBAAmB,YAAY,aAAa,KAAK,WAAW,OAAO,KAAK,QAAQ,IAAI;AAC1F,QAAM,QAAQ,MAAM,KAAK,aAAa,MAAM,gBAAgB;AAC5D,QAAM,KAAK,kBAAkB,IAAI;AACjC,QAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,2BAA2B,GAAI;AACvE,QAAM,EAAE,QAAQ,IAAI,MAAM,KAAK,cAAc,MAAM,SAAS;AAC5D,QAAM,QAAQ,QAAQ;AAAA,IACpB,KAAK,OAAO,KAAK,EAAE;AAAA,IACnB,KAAK,OAAO,QAAQ,EAAE;AAAA,IACtB,UAAU;AAAA,IACV,OAAO,KAAK,iBAAiB,OAAO,KAAK,cAAc,IAAI;AAAA,IAC3D,OAAO,KAAK;AAAA,IACZ;AAAA,EACF,CAAC;AACD,OAAK,cAAc,sBAAsB;AAAA,IACvC,IAAI,OAAO,KAAK,EAAE;AAAA,IAClB,OAAO,KAAK;AAAA,IACZ,UAAU;AAAA,IACV,gBAAgB,KAAK,iBAAiB,OAAO,KAAK,cAAc,IAAI;AAAA,EACtE,CAAC,EAAE,MAAM,MAAM,MAAS;AAExB,QAAM,MAAM,0BAA0B,KAAK,UAAU;AACrD,MAAI,QAAQ,IAAI,cAAc,OAAO;AAAA,IACnC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,QAAQ;AAAA,EACV,CAAC;AACD,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mDAAmD,WAAW,YAAY;AAAA,MACxG;AAAA,IACF;AAAA,EACF;AACF;",
-  "names": []
-}

package/dist/modules/auth/lib/autologin.js

@@ -1,19 +0,0 @@
-function readEnvValue(env, key) {
-  const value = env[key];
-  return typeof value === "string" ? value.trim() : "";
-}
-function resolveAutoLoginCredentials(env = process.env) {
-  const email = readEnvValue(env, "OM_AUTOLOGIN_EMAIL");
-  const password = env.OM_AUTOLOGIN_PASSWORD ?? "";
-  if (!email || !password) return null;
-  const tenantId = readEnvValue(env, "OM_AUTOLOGIN_TENANT");
-  return { email, password, tenantId: tenantId || null };
-}
-function isAutoLoginEnabled(env = process.env) {
-  return resolveAutoLoginCredentials(env) !== null;
-}
-export {
-  isAutoLoginEnabled,
-  resolveAutoLoginCredentials
-};
-//# sourceMappingURL=autologin.js.map

package/dist/modules/auth/lib/autologin.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/auth/lib/autologin.ts"],
-  "sourcesContent": ["export type AutoLoginCredentials = {\n  email: string\n  password: string\n  tenantId: string | null\n}\n\nfunction readEnvValue(env: Record<string, string | undefined>, key: string): string {\n  const value = env[key]\n  return typeof value === 'string' ? value.trim() : ''\n}\n\n/**\n * Reads the optional demo-autologin credentials from env. When both\n * `OM_AUTOLOGIN_EMAIL` and `OM_AUTOLOGIN_PASSWORD` are set, the homepage hands\n * unauthenticated visitors to the autologin route which signs them in and drops\n * them into the app. Unset (the default) \u2192 `null` \u2192 normal login flow.\n *\n * `OM_AUTOLOGIN_TENANT` is optional and only needed when the same email exists\n * across multiple tenants. Pure: pass the env bag so it stays testable.\n */\nexport function resolveAutoLoginCredentials(\n  env: Record<string, string | undefined> = process.env,\n): AutoLoginCredentials | null {\n  const email = readEnvValue(env, 'OM_AUTOLOGIN_EMAIL')\n  const password = env.OM_AUTOLOGIN_PASSWORD ?? ''\n  if (!email || !password) return null\n  const tenantId = readEnvValue(env, 'OM_AUTOLOGIN_TENANT')\n  return { email, password, tenantId: tenantId || null }\n}\n\n/** True when demo autologin credentials are configured via env. */\nexport function isAutoLoginEnabled(\n  env: Record<string, string | undefined> = process.env,\n): boolean {\n  return resolveAutoLoginCredentials(env) !== null\n}\n"],
-  "mappings": "AAMA,SAAS,aAAa,KAAyC,KAAqB;AAClF,QAAM,QAAQ,IAAI,GAAG;AACrB,SAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AACpD;AAWO,SAAS,4BACd,MAA0C,QAAQ,KACrB;AAC7B,QAAM,QAAQ,aAAa,KAAK,oBAAoB;AACpD,QAAM,WAAW,IAAI,yBAAyB;AAC9C,MAAI,CAAC,SAAS,CAAC,SAAU,QAAO;AAChC,QAAM,WAAW,aAAa,KAAK,qBAAqB;AACxD,SAAO,EAAE,OAAO,UAAU,UAAU,YAAY,KAAK;AACvD;AAGO,SAAS,mBACd,MAA0C,QAAQ,KACzC;AACT,SAAO,4BAA4B,GAAG,MAAM;AAC9C;",
-  "names": []
-}

package/dist/modules/customers/components/detail/useDealsAccess.js

@@ -1,16 +0,0 @@
-"use client";
-import * as React from "react";
-import { useBackendChrome } from "@open-mercato/ui/backend/BackendChromeProvider";
-import { hasFeature } from "@open-mercato/shared/security/features";
-function useDealsAccess() {
-  const { payload, isReady } = useBackendChrome();
-  const canViewDeals = React.useMemo(
-    () => hasFeature(payload?.grantedFeatures ?? [], "customers.deals.view"),
-    [payload?.grantedFeatures]
-  );
-  return { canViewDeals, isReady };
-}
-export {
-  useDealsAccess
-};
-//# sourceMappingURL=useDealsAccess.js.map

package/dist/modules/customers/components/detail/useDealsAccess.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/modules/customers/components/detail/useDealsAccess.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useBackendChrome } from '@open-mercato/ui/backend/BackendChromeProvider'\nimport { hasFeature } from '@open-mercato/shared/security/features'\n\nexport type DealsAccess = {\n  canViewDeals: boolean\n  isReady: boolean\n}\n\nexport function useDealsAccess(): DealsAccess {\n  const { payload, isReady } = useBackendChrome()\n  const canViewDeals = React.useMemo(\n    () => hasFeature(payload?.grantedFeatures ?? [], 'customers.deals.view'),\n    [payload?.grantedFeatures],\n  )\n  return { canViewDeals, isReady }\n}\n"],
-  "mappings": ";AAEA,YAAY,WAAW;AACvB,SAAS,wBAAwB;AACjC,SAAS,kBAAkB;AAOpB,SAAS,iBAA8B;AAC5C,QAAM,EAAE,SAAS,QAAQ,IAAI,iBAAiB;AAC9C,QAAM,eAAe,MAAM;AAAA,IACzB,MAAM,WAAW,SAAS,mBAAmB,CAAC,GAAG,sBAAsB;AAAA,IACvE,CAAC,SAAS,eAAe;AAAA,EAC3B;AACA,SAAO,EAAE,cAAc,QAAQ;AACjC;",
-  "names": []
-}

package/dist/modules/payment_gateways/lib/session-idempotency.js

@@ -1,104 +0,0 @@
-import { createHash, randomUUID } from "node:crypto";
-import { UniqueConstraintViolationException } from "@mikro-orm/core";
-import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { GatewaySessionInitialization } from "../data/entities.js";
-function buildPaymentSessionOperationKey(input) {
-  const digest = createHash("sha256").update(JSON.stringify([
-    input.scope.tenantId,
-    input.scope.organizationId,
-    input.providerKey,
-    input.paymentId,
-    input.idempotencyKey
-  ])).digest("hex");
-  return `om-payment-session:${digest}`;
-}
-async function findPaymentSessionInitialization(em, operationKey, providerKey, scope) {
-  return findOneWithDecryption(
-    em.fork(),
-    GatewaySessionInitialization,
-    {
-      operationKey,
-      providerKey,
-      organizationId: scope.organizationId,
-      tenantId: scope.tenantId
-    },
-    void 0,
-    scope
-  );
-}
-async function claimPaymentSessionInitialization(em, operationKey, providerKey, scope, claimedAt) {
-  const claimEm = em.fork();
-  const claimToken = randomUUID();
-  const record = claimEm.create(GatewaySessionInitialization, {
-    operationKey,
-    providerKey,
-    claimToken,
-    claimedAt,
-    gatewayTransactionId: null,
-    organizationId: scope.organizationId,
-    tenantId: scope.tenantId
-  });
-  try {
-    await claimEm.persist(record).flush();
-    return { id: record.id, claimToken };
-  } catch (error) {
-    if (error instanceof UniqueConstraintViolationException) return null;
-    throw error;
-  }
-}
-async function reclaimPaymentSessionInitialization(em, claim, scope, claimedAt, staleBefore) {
-  const claimToken = randomUUID();
-  const claimedRows = await em.fork().nativeUpdate(
-    GatewaySessionInitialization,
-    {
-      id: claim.id,
-      operationKey: claim.operationKey,
-      providerKey: claim.providerKey,
-      organizationId: scope.organizationId,
-      tenantId: scope.tenantId,
-      gatewayTransactionId: null,
-      $or: [
-        { claimToken: null },
-        { claimedAt: { $lt: staleBefore } }
-      ]
-    },
-    { claimToken, claimedAt, updatedAt: claimedAt }
-  );
-  return claimedRows > 0 ? { id: claim.id, claimToken } : null;
-}
-async function releasePaymentSessionInitialization(em, ownership, scope) {
-  await em.fork().nativeUpdate(
-    GatewaySessionInitialization,
-    {
-      id: ownership.id,
-      claimToken: ownership.claimToken,
-      organizationId: scope.organizationId,
-      tenantId: scope.tenantId,
-      gatewayTransactionId: null
-    },
-    { claimToken: null, claimedAt: null, updatedAt: /* @__PURE__ */ new Date() }
-  );
-}
-async function refreshPaymentSessionInitialization(em, ownership, scope, claimedAt) {
-  const refreshedRows = await em.fork().nativeUpdate(
-    GatewaySessionInitialization,
-    {
-      id: ownership.id,
-      claimToken: ownership.claimToken,
-      organizationId: scope.organizationId,
-      tenantId: scope.tenantId,
-      gatewayTransactionId: null
-    },
-    { claimedAt, updatedAt: claimedAt }
-  );
-  return refreshedRows > 0;
-}
-export {
-  buildPaymentSessionOperationKey,
-  claimPaymentSessionInitialization,
-  findPaymentSessionInitialization,
-  reclaimPaymentSessionInitialization,
-  refreshPaymentSessionInitialization,
-  releasePaymentSessionInitialization
-};
-//# sourceMappingURL=session-idempotency.js.map