@open-mercato/core 0.6.8-develop.6925.1.cefa200fa4 → 0.6.8-develop.6930.1.1e5976efc3

package/src/modules/eudr/widgets/injection/order-compliance/widget.client.tsx

@@ -0,0 +1,131 @@
+"use client"
+
+import * as React from 'react'
+import Link from 'next/link'
+import { Check, Copy } from 'lucide-react'
+import { useQuery } from '@tanstack/react-query'
+import type { InjectionWidgetComponentProps } from '@open-mercato/shared/modules/widgets/injection'
+import { useT } from '@open-mercato/shared/lib/i18n/context'
+import { apiCall } from '@open-mercato/ui/backend/utils/apiCall'
+import { ErrorMessage, LoadingMessage } from '@open-mercato/ui/backend/detail'
+import { IconButton } from '@open-mercato/ui/primitives/icon-button'
+import { StatusBadge } from '@open-mercato/ui/primitives/status-badge'
+import { statusBadgeVariant } from '../../../components/formConfig'
+
+export type OrderRecord = {
+  id: string
+}
+
+type StatementListItem = {
+  id: string
+  title: string | null
+  status: string | null
+  referenceNumber: string | null
+  verificationNumber: string | null
+}
+
+function CopyNumberButton({ value, label }: { value: string; label: string }) {
+  const [copied, setCopied] = React.useState(false)
+
+  const handleCopy = React.useCallback(async () => {
+    if (typeof navigator === 'undefined' || !navigator.clipboard) return
+    await navigator.clipboard.writeText(value)
+    setCopied(true)
+    window.setTimeout(() => setCopied(false), 1500)
+  }, [value])
+
+  return (
+    <IconButton type="button" variant="ghost" size="xs" onClick={handleCopy} aria-label={label}>
+      {copied ? <Check aria-hidden /> : <Copy aria-hidden />}
+    </IconButton>
+  )
+}
+
+export default function OrderComplianceWidget({ data }: InjectionWidgetComponentProps<unknown, OrderRecord>) {
+  const t = useT()
+  const orderId = data?.id
+
+  const { data: statementsData, isLoading, isError } = useQuery({
+    queryKey: ['eudr-order-statements', orderId],
+    queryFn: async () => {
+      if (!orderId) return null
+      const result = await apiCall<{ items: StatementListItem[] }>(
+        `/api/eudr/statements?orderId=${encodeURIComponent(orderId)}&pageSize=20`
+      )
+      if (!result.ok) throw new Error('[internal] eudr order compliance statements load failed')
+      return result.result
+    },
+    enabled: Boolean(orderId),
+    staleTime: 5_000,
+  })
+
+  if (!orderId) return null
+
+  const statements = statementsData?.items ?? []
+
+  return (
+    <div className="space-y-3 rounded-lg border bg-card p-4 shadow-sm">
+      <div className="text-sm font-semibold text-foreground">
+        {t('eudr.orderPanel.groupLabel', 'EUDR compliance')}
+      </div>
+
+      {isLoading ? (
+        <LoadingMessage label={t('eudr.orderPanel.loading', 'Loading due diligence statements...')} />
+      ) : isError ? (
+        <ErrorMessage label={t('eudr.orderPanel.error', 'Failed to load due diligence statements.')} />
+      ) : statements.length === 0 ? (
+        <p className="text-sm text-muted-foreground">
+          {t('eudr.orderPanel.empty', 'No due diligence statements are linked to this order.')}{' '}
+          <Link
+            href={`/backend/eudr/statements/create?orderId=${encodeURIComponent(orderId)}`}
+            className="text-primary hover:underline"
+          >
+            {t('eudr.orderPanel.createStatement', 'Create statement')}
+          </Link>
+        </p>
+      ) : (
+        <ul className="space-y-2">
+          {statements.map((statement) => (
+            <li key={statement.id} className="space-y-1.5 rounded-md border p-2.5">
+              <div className="flex items-center justify-between gap-2">
+                <Link
+                  href={`/backend/eudr/statements/${encodeURIComponent(statement.id)}`}
+                  className="min-w-0 truncate text-sm font-medium hover:underline"
+                >
+                  {statement.title || t('eudr.orderPanel.untitled', 'Untitled statement')}
+                </Link>
+                {statement.status ? (
+                  <StatusBadge variant={statusBadgeVariant(statement.status)} dot>
+                    {t(`eudr.statementStatus.${statement.status}`)}
+                  </StatusBadge>
+                ) : null}
+              </div>
+              {statement.referenceNumber ? (
+                <div className="flex items-center gap-1 text-xs text-muted-foreground">
+                  <span className="truncate">
+                    {t('eudr.orderPanel.referenceLabel', 'Reference')}: {statement.referenceNumber}
+                  </span>
+                  <CopyNumberButton
+                    value={statement.referenceNumber}
+                    label={t('eudr.orderPanel.copyReference', 'Copy reference number')}
+                  />
+                </div>
+              ) : null}
+              {statement.verificationNumber ? (
+                <div className="flex items-center gap-1 text-xs text-muted-foreground">
+                  <span className="truncate">
+                    {t('eudr.orderPanel.verificationLabel', 'Verification')}: {statement.verificationNumber}
+                  </span>
+                  <CopyNumberButton
+                    value={statement.verificationNumber}
+                    label={t('eudr.orderPanel.copyVerification', 'Copy verification number')}
+                  />
+                </div>
+              ) : null}
+            </li>
+          ))}
+        </ul>
+      )}
+    </div>
+  )
+}

package/src/modules/eudr/widgets/injection/order-compliance/widget.ts

@@ -0,0 +1,16 @@
+import type { InjectionWidgetModule } from '@open-mercato/shared/modules/widgets/injection'
+import OrderComplianceWidget, { type OrderRecord } from './widget.client'
+
+const widget: InjectionWidgetModule<unknown, OrderRecord> = {
+  metadata: {
+    id: 'eudr.injection.order-compliance',
+    title: 'EUDR compliance',
+    description: 'Due diligence statements linked to the sales order',
+    features: ['eudr.statements.view'],
+    priority: 210,
+    enabled: true,
+  },
+  Widget: OrderComplianceWidget,
+}
+
+export default widget

package/src/modules/eudr/widgets/injection/supplier-compliance/widget.client.tsx

@@ -0,0 +1,168 @@
+"use client"
+
+import Link from 'next/link'
+import { useQuery } from '@tanstack/react-query'
+import type { InjectionWidgetComponentProps } from '@open-mercato/shared/modules/widgets/injection'
+import { useLocale, useT } from '@open-mercato/shared/lib/i18n/context'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+import { apiCall } from '@open-mercato/ui/backend/utils/apiCall'
+import { Badge } from '@open-mercato/ui/primitives/badge'
+import { StatusBadge } from '@open-mercato/ui/primitives/status-badge'
+import { statusBadgeVariant } from '../../../components/formConfig'
+import { EUDR_SUBMISSION_STATUSES } from '../../../data/validators'
+
+const logger = createLogger('eudr')
+
+type SupplierCompliance = {
+  submissions: {
+    total: number
+    byStatus: Record<string, number>
+    avgCompleteness: number | null
+  }
+  lastSubmissionAt: string | null
+  plots?: {
+    total: number
+    withWarnings: number
+  }
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value)
+}
+
+function readId(value: unknown): string | null {
+  if (typeof value !== 'string') return null
+  const trimmed = value.trim()
+  return trimmed.length > 0 ? trimmed : null
+}
+
+function readNestedCompanyId(value: unknown): string | null {
+  if (!isRecord(value) || !isRecord(value.company)) return null
+  return readId(value.company.id)
+}
+
+function resolveCompanyId(context: unknown, data: unknown): string | null {
+  if (!isRecord(context)) return readNestedCompanyId(data)
+  return readId(context.companyId)
+    ?? readId(context.resourceId)
+    ?? readId(context.entityId)
+    ?? readId(context.recordId)
+    ?? readNestedCompanyId(context.data)
+    ?? readNestedCompanyId(data)
+}
+
+function formatDate(value: string | null, emptyLabel: string, locale: string): string {
+  if (!value) return emptyLabel
+  const date = new Date(value)
+  return Number.isNaN(date.getTime()) ? emptyLabel : date.toLocaleDateString(locale || undefined)
+}
+
+async function loadSupplierCompliance(supplierEntityId: string): Promise<SupplierCompliance | null> {
+  try {
+    const call = await apiCall<SupplierCompliance>(
+      `/api/eudr/suppliers/compliance?supplierEntityId=${encodeURIComponent(supplierEntityId)}`,
+      {
+        headers: {
+          'x-om-forbidden-redirect': '0',
+          'x-om-unauthorized-redirect': '0',
+        },
+      },
+    )
+    if (!call.ok || !call.result) {
+      throw new Error(`[internal] EUDR supplier compliance request failed with status ${call.status}`)
+    }
+    return call.result
+  } catch (err) {
+    logger.debug('Supplier compliance widget data unavailable', {
+      component: 'supplier-compliance',
+      err,
+    })
+    return null
+  }
+}
+
+export default function SupplierComplianceWidget({
+  context,
+  data,
+}: InjectionWidgetComponentProps<unknown, unknown>) {
+  const t = useT()
+  const locale = useLocale()
+  const companyId = resolveCompanyId(context, data)
+  const { data: compliance } = useQuery({
+    queryKey: ['eudr-supplier-compliance', companyId],
+    queryFn: () => companyId ? loadSupplierCompliance(companyId) : Promise.resolve(null),
+    enabled: Boolean(companyId),
+    staleTime: 5_000,
+  })
+
+  if (!companyId || !compliance) return null
+  if (compliance.submissions.total === 0 && (!compliance.plots || compliance.plots.total === 0)) return null
+
+  const emptyLabel = t('eudr.common.empty')
+  const statusCounts = EUDR_SUBMISSION_STATUSES.flatMap((status) => {
+    const count = compliance.submissions.byStatus[status] ?? 0
+    return count > 0 ? [{ status, count }] : []
+  })
+
+  return (
+    <div className="space-y-3 rounded-lg border border-border bg-card p-4 shadow-sm">
+      <div className="text-sm font-semibold text-foreground">
+        {t('eudr.supplierPanel.title')}
+      </div>
+
+      <dl className="grid gap-3 sm:grid-cols-3">
+        <div className="space-y-1">
+          <dt className="text-xs text-muted-foreground">{t('eudr.supplierPanel.submissions')}</dt>
+          <dd className="text-lg font-semibold text-foreground">{compliance.submissions.total}</dd>
+        </div>
+        <div className="space-y-1">
+          <dt className="text-xs text-muted-foreground">{t('eudr.supplierPanel.avgCompleteness')}</dt>
+          <dd className="text-lg font-semibold text-foreground">
+            {compliance.submissions.avgCompleteness === null
+              ? emptyLabel
+              : `${Math.round(compliance.submissions.avgCompleteness)}%`}
+          </dd>
+        </div>
+        <div className="space-y-1">
+          <dt className="text-xs text-muted-foreground">{t('eudr.supplierPanel.lastSubmission')}</dt>
+          <dd className="text-sm font-medium text-foreground">
+            {formatDate(compliance.lastSubmissionAt, emptyLabel, locale)}
+          </dd>
+        </div>
+      </dl>
+
+      {statusCounts.length > 0 ? (
+        <div className="flex flex-wrap gap-2">
+          {statusCounts.map(({ status, count }) => (
+            <StatusBadge key={status} variant={statusBadgeVariant(status)} dot>
+              {t(`eudr.submissionStatus.${status}`)}: {count}
+            </StatusBadge>
+          ))}
+        </div>
+      ) : null}
+
+      {compliance.plots ? (
+        <div className="flex flex-wrap items-center gap-2 text-sm">
+          <span className="text-muted-foreground">{t('eudr.supplierPanel.plots')}</span>
+          <span className="font-semibold text-foreground">{compliance.plots.total}</span>
+          {compliance.plots.withWarnings > 0 ? (
+            <Badge variant="warning">
+              {t('eudr.supplierPanel.warnings')}: {compliance.plots.withWarnings}
+            </Badge>
+          ) : null}
+        </div>
+      ) : null}
+
+      <div className="flex flex-wrap gap-3 text-sm">
+        <Link href="/backend/eudr/evidence-submissions" className="text-primary hover:underline">
+          {t('eudr.supplierPanel.viewSubmissions')}
+        </Link>
+        {compliance.plots ? (
+          <Link href="/backend/eudr/plots" className="text-primary hover:underline">
+            {t('eudr.supplierPanel.viewPlots')}
+          </Link>
+        ) : null}
+      </div>
+    </div>
+  )
+}

package/src/modules/eudr/widgets/injection/supplier-compliance/widget.ts

@@ -0,0 +1,16 @@
+import type { InjectionWidgetModule } from '@open-mercato/shared/modules/widgets/injection'
+import SupplierComplianceWidget from './widget.client'
+
+const widget: InjectionWidgetModule<unknown, unknown> = {
+  metadata: {
+    id: 'eudr.injection.supplier-compliance',
+    title: 'eudr.supplierPanel.title',
+    description: 'EUDR submissions and plot readiness for a supplier company',
+    features: ['eudr.submissions.view'],
+    priority: 220,
+    enabled: true,
+  },
+  Widget: SupplierComplianceWidget,
+}
+
+export default widget

package/src/modules/eudr/widgets/injection-table.ts

@@ -0,0 +1,31 @@
+import type { ModuleInjectionTable } from '@open-mercato/shared/modules/widgets/injection'
+
+const supplierComplianceWidget = {
+  widgetId: 'eudr.injection.supplier-compliance',
+  kind: 'group',
+  column: 2,
+  groupLabel: 'eudr.supplierPanel.title',
+  priority: 220,
+} as const
+
+export const injectionTable: ModuleInjectionTable = {
+  'data-table:catalog.products.list:columns': [
+    {
+      widgetId: 'eudr.injection.product-column',
+      priority: 50,
+    },
+  ],
+  'sales.document.detail.order:details': [
+    {
+      widgetId: 'eudr.injection.order-compliance',
+      kind: 'group',
+      column: 2,
+      groupLabel: 'eudr.orderPanel.groupLabel',
+      priority: 210,
+    },
+  ],
+  'detail:customers.company:footer': [supplierComplianceWidget],
+  'customers.company.detail:details': [supplierComplianceWidget],
+}
+
+export default injectionTable

package/src/modules/notifications/lib/notificationService.ts

@@ -211,11 +211,15 @@ export interface NotificationServiceContext {
   userId?: string | null
 }
 
+export type CreateFeatureNotificationServiceInput = CreateFeatureNotificationInput & {
+  restrictRecipientsToOrganization?: boolean
+}
+
 export interface NotificationService {
   create(input: CreateNotificationInput, ctx: NotificationServiceContext): Promise<Notification>
   createBatch(input: CreateBatchNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>
   createForRole(input: CreateRoleNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>
-  createForFeature(input: CreateFeatureNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>
+  createForFeature(input: CreateFeatureNotificationServiceInput, ctx: NotificationServiceContext): Promise<Notification[]>
   markAsRead(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>
   markAllAsRead(ctx: NotificationServiceContext): Promise<number>
   dismiss(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>
@@ -338,11 +342,86 @@ export function createNotificationService(deps: NotificationServiceDeps): Notifi
         return []
       }
 
-      debug('Creating notifications for', recipientUserIds.length, 'user(s) with feature:', input.requiredFeature)
+      let authorizedRecipientUserIds = recipientUserIds
+      if (input.restrictRecipientsToOrganization) {
+        const uniqueCandidateUserIds = Array.from(new Set(recipientUserIds))
+        if (!ctx.organizationId) {
+          logger.warn('Organization-restricted feature fan-out skipped because organization scope is missing', {
+            tenantId: ctx.tenantId,
+            requiredFeature: input.requiredFeature,
+          })
+          return []
+        }
+
+        if (uniqueCandidateUserIds.length > 200) {
+          logger.warn('Organization-restricted feature fan-out skipped because the candidate cap was exceeded', {
+            tenantId: ctx.tenantId,
+            organizationId: ctx.organizationId,
+            requiredFeature: input.requiredFeature,
+            candidateCount: uniqueCandidateUserIds.length,
+            candidateCap: 200,
+          })
+          return []
+        }
+
+        if (!container) {
+          logger.warn('Organization-restricted feature fan-out skipped because the DI container is unavailable', {
+            tenantId: ctx.tenantId,
+            organizationId: ctx.organizationId,
+            requiredFeature: input.requiredFeature,
+          })
+          return []
+        }
+
+        try {
+          const rbacService = container.resolve('rbacService') as {
+            userHasAllFeatures: (
+              userId: string,
+              features: string[],
+              scope: { tenantId: string | null; organizationId: string | null },
+            ) => Promise<boolean>
+          }
+          const allowedRecipientUserIds: string[] = []
+          for (let offset = 0; offset < uniqueCandidateUserIds.length; offset += 10) {
+            const candidates = uniqueCandidateUserIds.slice(offset, offset + 10)
+            const results = await Promise.all(candidates.map(async (recipientUserId) => ({
+              recipientUserId,
+              allowed: await rbacService.userHasAllFeatures(
+                recipientUserId,
+                [input.requiredFeature],
+                { tenantId: ctx.tenantId, organizationId: ctx.organizationId ?? null },
+              ),
+            })))
+            for (const result of results) {
+              if (result.allowed) allowedRecipientUserIds.push(result.recipientUserId)
+            }
+          }
+          authorizedRecipientUserIds = allowedRecipientUserIds
+        } catch (err) {
+          logger.warn('Organization-restricted feature fan-out skipped because RBAC filtering failed', {
+            tenantId: ctx.tenantId,
+            organizationId: ctx.organizationId,
+            requiredFeature: input.requiredFeature,
+            err,
+          })
+          return []
+        }
+
+        if (authorizedRecipientUserIds.length === 0) {
+          debug('No users found with feature in organization:', input.requiredFeature, ctx.organizationId)
+          return []
+        }
+      }
+
+      debug('Creating notifications for', authorizedRecipientUserIds.length, 'user(s) with feature:', input.requiredFeature)
 
-      const { requiredFeature: _requiredFeature, ...content } = input
+      const {
+        requiredFeature: _requiredFeature,
+        restrictRecipientsToOrganization: _restrictRecipientsToOrganization,
+        ...content
+      } = input
       const notifications: Notification[] = []
-      const uniqueRecipientUserIds = Array.from(new Set(recipientUserIds))
+      const uniqueRecipientUserIds = Array.from(new Set(authorizedRecipientUserIds))
       const writeEm = rootEm.fork()
 
       await writeEm.transactional(async (tx) => {