@open-mercato/core 0.6.8-develop.6984.1.f0cf23f0f6 → 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/devices/api/admin/devices/[id]/route.js

@@ -0,0 +1,219 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { UserDevice } from "../../../../data/entities.js";
+import { updateDeviceSchema } from "../../../../data/validators.js";
+import { isOrganizationReadAccessAllowed } from "@open-mercato/core/modules/directory/utils/organizationScopeGuard";
+import { resolveDeviceActorUserId } from "../../../auth.js";
+import { executeUpdate, executeDeactivate } from "../../../deviceOps.js";
+const logger = createLogger("devices");
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["devices.admin"] },
+  PUT: { requireAuth: true, requireFeatures: ["devices.admin"] },
+  DELETE: { requireAuth: true, requireFeatures: ["devices.admin"] }
+};
+const paramsSchema = z.object({ id: z.string().uuid() });
+async function loadDevice(container, id, tenantId) {
+  const em = container.resolve("em");
+  return findOneWithDecryption(em, UserDevice, { id, tenantId, deletedAt: null }, void 0, { tenantId });
+}
+function serializeDevice(device) {
+  return {
+    id: device.id,
+    user_id: device.userId,
+    device_id: device.deviceId,
+    platform: device.platform,
+    client_app_version: device.clientAppVersion ?? null,
+    os_version: device.osVersion ?? null,
+    push_provider: device.pushProvider ?? null,
+    push_token_updated_at: device.pushTokenUpdatedAt ? device.pushTokenUpdatedAt.toISOString() : null,
+    last_seen_at: device.lastSeenAt ? device.lastSeenAt.toISOString() : null,
+    created_at: device.createdAt ? device.createdAt.toISOString() : null,
+    updated_at: device.updatedAt ? device.updatedAt.toISOString() : null
+  };
+}
+async function GET(req, { params }) {
+  const { translate } = await resolveTranslations();
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    const actorUserId = resolveDeviceActorUserId(auth);
+    if (!auth || !auth.tenantId || !actorUserId) {
+      return NextResponse.json({ error: translate("devices.errors.unauthorized", "Unauthorized") }, { status: 401 });
+    }
+    const parsedParams = paramsSchema.safeParse({ id: params.id });
+    if (!parsedParams.success) {
+      return NextResponse.json({ error: translate("devices.errors.invalid_id", "Invalid device id") }, { status: 400 });
+    }
+    const device = await loadDevice(container, parsedParams.data.id, auth.tenantId);
+    if (!device) {
+      return NextResponse.json({ error: translate("devices.errors.not_found", "Device not found") }, { status: 404 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: device.organizationId ?? null })) {
+      return NextResponse.json({ error: translate("devices.errors.forbidden", "Access denied") }, { status: 403 });
+    }
+    return NextResponse.json({ item: serializeDevice(device) });
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    logger.error("devices.admin.GET failed", { err });
+    return NextResponse.json({ error: translate("devices.errors.load_failed", "Failed to load device") }, { status: 500 });
+  }
+}
+async function PUT(req, { params }) {
+  const { translate } = await resolveTranslations();
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    const actorUserId = resolveDeviceActorUserId(auth);
+    if (!auth || !auth.tenantId || !actorUserId) {
+      return NextResponse.json({ error: translate("devices.errors.unauthorized", "Unauthorized") }, { status: 401 });
+    }
+    const parsedParams = paramsSchema.safeParse({ id: params.id });
+    if (!parsedParams.success) {
+      return NextResponse.json({ error: translate("devices.errors.invalid_id", "Invalid device id") }, { status: 400 });
+    }
+    const body = updateDeviceSchema.parse(await readJsonSafe(req, {}));
+    const device = await loadDevice(container, parsedParams.data.id, auth.tenantId);
+    if (!device) {
+      return NextResponse.json({ error: translate("devices.errors.not_found", "Device not found") }, { status: 404 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: device.organizationId ?? null })) {
+      return NextResponse.json({ error: translate("devices.errors.forbidden", "Access denied") }, { status: 403 });
+    }
+    const mctx = {
+      container,
+      auth,
+      scope,
+      organizationId: device.organizationId ?? null,
+      actorUserId,
+      request: req
+    };
+    return await executeUpdate(mctx, device, body);
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: translate("devices.errors.invalid_payload", "Invalid device payload"), details: err.flatten() },
+        { status: 400 }
+      );
+    }
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    logger.error("devices.admin.PUT failed", { err });
+    return NextResponse.json({ error: translate("devices.errors.update_failed", "Failed to update device") }, { status: 500 });
+  }
+}
+async function DELETE(req, { params }) {
+  const { translate } = await resolveTranslations();
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    const actorUserId = resolveDeviceActorUserId(auth);
+    if (!auth || !auth.tenantId || !actorUserId) {
+      return NextResponse.json({ error: translate("devices.errors.unauthorized", "Unauthorized") }, { status: 401 });
+    }
+    const parsedParams = paramsSchema.safeParse({ id: params.id });
+    if (!parsedParams.success) {
+      return NextResponse.json({ error: translate("devices.errors.invalid_id", "Invalid device id") }, { status: 400 });
+    }
+    const device = await loadDevice(container, parsedParams.data.id, auth.tenantId);
+    if (!device) {
+      return NextResponse.json({ error: translate("devices.errors.not_found", "Device not found") }, { status: 404 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: device.organizationId ?? null })) {
+      return NextResponse.json({ error: translate("devices.errors.forbidden", "Access denied") }, { status: 403 });
+    }
+    const mctx = {
+      container,
+      auth,
+      scope,
+      organizationId: device.organizationId ?? null,
+      actorUserId,
+      request: req
+    };
+    return await executeDeactivate(mctx, device);
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    logger.error("devices.admin.DELETE failed", { err });
+    return NextResponse.json({ error: translate("devices.errors.delete_failed", "Failed to delete device") }, { status: 500 });
+  }
+}
+const okResponseSchema = z.object({ ok: z.literal(true), id: z.string().uuid().optional() });
+const errorResponseSchema = z.object({ error: z.string() });
+const detailResponseSchema = z.object({
+  item: z.object({
+    id: z.string().uuid(),
+    user_id: z.string().uuid(),
+    device_id: z.string(),
+    platform: z.enum(["ios", "android", "web"]),
+    client_app_version: z.string().nullable(),
+    os_version: z.string().nullable(),
+    push_provider: z.string().nullable(),
+    push_token_updated_at: z.string().nullable(),
+    last_seen_at: z.string().nullable(),
+    created_at: z.string().nullable(),
+    updated_at: z.string().nullable()
+  })
+});
+const openApi = {
+  tag: "Devices (admin)",
+  summary: "Admin: read, update or deactivate any device in the tenant",
+  methods: {
+    GET: {
+      summary: "Get any device",
+      description: "Admin: fetch a single device by id (push_token is never returned).",
+      responses: [{ status: 200, description: "Device", schema: detailResponseSchema }],
+      errors: [
+        { status: 400, description: "Invalid id", schema: errorResponseSchema },
+        { status: 401, description: "Unauthorized", schema: errorResponseSchema },
+        { status: 403, description: "Missing devices.admin", schema: errorResponseSchema },
+        { status: 404, description: "Device not found", schema: errorResponseSchema }
+      ]
+    },
+    PUT: {
+      summary: "Update any device",
+      description: "Admin: update last-seen, app/OS metadata, and push token for any device. Set pushToken to null to clear it.",
+      requestBody: { schema: updateDeviceSchema },
+      responses: [{ status: 200, description: "Device updated", schema: okResponseSchema }],
+      errors: [
+        { status: 400, description: "Invalid payload or id", schema: errorResponseSchema },
+        { status: 401, description: "Unauthorized", schema: errorResponseSchema },
+        { status: 403, description: "Missing devices.admin", schema: errorResponseSchema },
+        { status: 404, description: "Device not found", schema: errorResponseSchema }
+      ]
+    },
+    DELETE: {
+      summary: "Deactivate any device",
+      description: "Admin: soft-delete any device in the tenant.",
+      responses: [{ status: 200, description: "Device deactivated", schema: okResponseSchema }],
+      errors: [
+        { status: 400, description: "Invalid id", schema: errorResponseSchema },
+        { status: 401, description: "Unauthorized", schema: errorResponseSchema },
+        { status: 403, description: "Missing devices.admin", schema: errorResponseSchema },
+        { status: 404, description: "Device not found", schema: errorResponseSchema }
+      ]
+    }
+  }
+};
+export {
+  DELETE,
+  GET,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/devices/api/admin/devices/[id]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/devices/api/admin/devices/%5Bid%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { UserDevice } from '../../../../data/entities'\nimport { updateDeviceSchema } from '../../../../data/validators'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport { resolveDeviceActorUserId } from '../../../auth'\nimport { executeUpdate, executeDeactivate, type DeviceMutationContext } from '../../../deviceOps'\n\nconst logger = createLogger('devices')\n\n// Admin: read/update/deactivate ANY device in the tenant. Gated by devices.admin (no owner check).\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['devices.admin'] },\n  PUT: { requireAuth: true, requireFeatures: ['devices.admin'] },\n  DELETE: { requireAuth: true, requireFeatures: ['devices.admin'] },\n}\n\nconst paramsSchema = z.object({ id: z.string().uuid() })\n\nasync function loadDevice(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n  id: string,\n  tenantId: string,\n): Promise<UserDevice | null> {\n  const em = container.resolve('em') as EntityManager\n  // push_token is encrypted at rest; the org is not known until the row loads, so pass tenant only \u2014\n  // the helper prefers each record's own tenant/org and treats this scope as a fallback.\n  return findOneWithDecryption(em, UserDevice, { id, tenantId, deletedAt: null }, undefined, { tenantId })\n}\n\n// push_token is a secret and is never returned.\nfunction serializeDevice(device: UserDevice) {\n  return {\n    id: device.id,\n    user_id: device.userId,\n    device_id: device.deviceId,\n    platform: device.platform,\n    client_app_version: device.clientAppVersion ?? null,\n    os_version: device.osVersion ?? null,\n    push_provider: device.pushProvider ?? null,\n    push_token_updated_at: device.pushTokenUpdatedAt ? device.pushTokenUpdatedAt.toISOString() : null,\n    last_seen_at: device.lastSeenAt ? device.lastSeenAt.toISOString() : null,\n    created_at: device.createdAt ? device.createdAt.toISOString() : null,\n    updated_at: device.updatedAt ? device.updatedAt.toISOString() : null,\n  }\n}\n\nexport async function GET(req: Request, { params }: { params: { id: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const actorUserId = resolveDeviceActorUserId(auth)\n    if (!auth || !auth.tenantId || !actorUserId) {\n      return NextResponse.json({ error: translate('devices.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n    }\n    const parsedParams = paramsSchema.safeParse({ id: params.id })\n    if (!parsedParams.success) {\n      return NextResponse.json({ error: translate('devices.errors.invalid_id', 'Invalid device id') }, { status: 400 })\n    }\n    const device = await loadDevice(container, parsedParams.data.id, auth.tenantId)\n    if (!device) {\n      return NextResponse.json({ error: translate('devices.errors.not_found', 'Device not found') }, { status: 404 })\n    }\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: device.organizationId ?? null })) {\n      return NextResponse.json({ error: translate('devices.errors.forbidden', 'Access denied') }, { status: 403 })\n    }\n    return NextResponse.json({ item: serializeDevice(device) })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('devices.admin.GET failed', { err })\n    return NextResponse.json({ error: translate('devices.errors.load_failed', 'Failed to load device') }, { status: 500 })\n  }\n}\n\nexport async function PUT(req: Request, { params }: { params: { id: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const actorUserId = resolveDeviceActorUserId(auth)\n    if (!auth || !auth.tenantId || !actorUserId) {\n      return NextResponse.json({ error: translate('devices.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n    }\n    const parsedParams = paramsSchema.safeParse({ id: params.id })\n    if (!parsedParams.success) {\n      return NextResponse.json({ error: translate('devices.errors.invalid_id', 'Invalid device id') }, { status: 400 })\n    }\n\n    const body = updateDeviceSchema.parse(await readJsonSafe(req, {}))\n    const device = await loadDevice(container, parsedParams.data.id, auth.tenantId)\n    if (!device) {\n      return NextResponse.json({ error: translate('devices.errors.not_found', 'Device not found') }, { status: 404 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: device.organizationId ?? null })) {\n      return NextResponse.json({ error: translate('devices.errors.forbidden', 'Access denied') }, { status: 403 })\n    }\n    const mctx: DeviceMutationContext = {\n      container,\n      auth,\n      scope,\n      organizationId: device.organizationId ?? null,\n      actorUserId,\n      request: req,\n    }\n    return await executeUpdate(mctx, device, body)\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('devices.errors.invalid_payload', 'Invalid device payload'), details: err.flatten() },\n        { status: 400 },\n      )\n    }\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('devices.admin.PUT failed', { err })\n    return NextResponse.json({ error: translate('devices.errors.update_failed', 'Failed to update device') }, { status: 500 })\n  }\n}\n\nexport async function DELETE(req: Request, { params }: { params: { id: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const actorUserId = resolveDeviceActorUserId(auth)\n    if (!auth || !auth.tenantId || !actorUserId) {\n      return NextResponse.json({ error: translate('devices.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n    }\n    const parsedParams = paramsSchema.safeParse({ id: params.id })\n    if (!parsedParams.success) {\n      return NextResponse.json({ error: translate('devices.errors.invalid_id', 'Invalid device id') }, { status: 400 })\n    }\n\n    const device = await loadDevice(container, parsedParams.data.id, auth.tenantId)\n    if (!device) {\n      return NextResponse.json({ error: translate('devices.errors.not_found', 'Device not found') }, { status: 404 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: device.organizationId ?? null })) {\n      return NextResponse.json({ error: translate('devices.errors.forbidden', 'Access denied') }, { status: 403 })\n    }\n    const mctx: DeviceMutationContext = {\n      container,\n      auth,\n      scope,\n      organizationId: device.organizationId ?? null,\n      actorUserId,\n      request: req,\n    }\n    return await executeDeactivate(mctx, device)\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('devices.admin.DELETE failed', { err })\n    return NextResponse.json({ error: translate('devices.errors.delete_failed', 'Failed to delete device') }, { status: 500 })\n  }\n}\n\nconst okResponseSchema = z.object({ ok: z.literal(true), id: z.string().uuid().optional() })\nconst errorResponseSchema = z.object({ error: z.string() })\nconst detailResponseSchema = z.object({\n  item: z.object({\n    id: z.string().uuid(),\n    user_id: z.string().uuid(),\n    device_id: z.string(),\n    platform: z.enum(['ios', 'android', 'web']),\n    client_app_version: z.string().nullable(),\n    os_version: z.string().nullable(),\n    push_provider: z.string().nullable(),\n    push_token_updated_at: z.string().nullable(),\n    last_seen_at: z.string().nullable(),\n    created_at: z.string().nullable(),\n    updated_at: z.string().nullable(),\n  }),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Devices (admin)',\n  summary: 'Admin: read, update or deactivate any device in the tenant',\n  methods: {\n    GET: {\n      summary: 'Get any device',\n      description: 'Admin: fetch a single device by id (push_token is never returned).',\n      responses: [{ status: 200, description: 'Device', schema: detailResponseSchema }],\n      errors: [\n        { status: 400, description: 'Invalid id', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 403, description: 'Missing devices.admin', schema: errorResponseSchema },\n        { status: 404, description: 'Device not found', schema: errorResponseSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update any device',\n      description: 'Admin: update last-seen, app/OS metadata, and push token for any device. Set pushToken to null to clear it.',\n      requestBody: { schema: updateDeviceSchema },\n      responses: [{ status: 200, description: 'Device updated', schema: okResponseSchema }],\n      errors: [\n        { status: 400, description: 'Invalid payload or id', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 403, description: 'Missing devices.admin', schema: errorResponseSchema },\n        { status: 404, description: 'Device not found', schema: errorResponseSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Deactivate any device',\n      description: 'Admin: soft-delete any device in the tenant.',\n      responses: [{ status: 200, description: 'Device deactivated', schema: okResponseSchema }],\n      errors: [\n        { status: 400, description: 'Invalid id', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 403, description: 'Missing devices.admin', schema: errorResponseSchema },\n        { status: 404, description: 'Device not found', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AAEtC,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B,SAAS,0BAA0B;AACnC,SAAS,uCAAuC;AAChD,SAAS,gCAAgC;AACzC,SAAS,eAAe,yBAAqD;AAE7E,MAAM,SAAS,aAAa,SAAS;AAG9B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAAA,EAC7D,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAAA,EAC7D,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAClE;AAEA,MAAM,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEvD,eAAe,WACb,WACA,IACA,UAC4B;AAC5B,QAAM,KAAK,UAAU,QAAQ,IAAI;AAGjC,SAAO,sBAAsB,IAAI,YAAY,EAAE,IAAI,UAAU,WAAW,KAAK,GAAG,QAAW,EAAE,SAAS,CAAC;AACzG;AAGA,SAAS,gBAAgB,QAAoB;AAC3C,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,oBAAoB,OAAO,oBAAoB;AAAA,IAC/C,YAAY,OAAO,aAAa;AAAA,IAChC,eAAe,OAAO,gBAAgB;AAAA,IACtC,uBAAuB,OAAO,qBAAqB,OAAO,mBAAmB,YAAY,IAAI;AAAA,IAC7F,cAAc,OAAO,aAAa,OAAO,WAAW,YAAY,IAAI;AAAA,IACpE,YAAY,OAAO,YAAY,OAAO,UAAU,YAAY,IAAI;AAAA,IAChE,YAAY,OAAO,YAAY,OAAO,UAAU,YAAY,IAAI;AAAA,EAClE;AACF;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAA+B;AAC9E,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,cAAc,yBAAyB,IAAI;AACjD,QAAI,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,aAAa;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,+BAA+B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/G;AACA,UAAM,eAAe,aAAa,UAAU,EAAE,IAAI,OAAO,GAAG,CAAC;AAC7D,QAAI,CAAC,aAAa,SAAS;AACzB,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,mBAAmB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClH;AACA,UAAM,SAAS,MAAM,WAAW,WAAW,aAAa,KAAK,IAAI,KAAK,QAAQ;AAC9E,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4BAA4B,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAChH;AACA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,gBAAgB,OAAO,kBAAkB,KAAK,CAAC,GAAG;AACpG,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4BAA4B,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7G;AACA,WAAO,aAAa,KAAK,EAAE,MAAM,gBAAgB,MAAM,EAAE,CAAC;AAAA,EAC5D,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,4BAA4B,EAAE,IAAI,CAAC;AAChD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,8BAA8B,uBAAuB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvH;AACF;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAA+B;AAC9E,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,cAAc,yBAAyB,IAAI;AACjD,QAAI,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,aAAa;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,+BAA+B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/G;AACA,UAAM,eAAe,aAAa,UAAU,EAAE,IAAI,OAAO,GAAG,CAAC;AAC7D,QAAI,CAAC,aAAa,SAAS;AACzB,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,mBAAmB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClH;AAEA,UAAM,OAAO,mBAAmB,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACjE,UAAM,SAAS,MAAM,WAAW,WAAW,aAAa,KAAK,IAAI,KAAK,QAAQ;AAC9E,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4BAA4B,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAChH;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,gBAAgB,OAAO,kBAAkB,KAAK,CAAC,GAAG;AACpG,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4BAA4B,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7G;AACA,UAAM,OAA8B;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,MACA,gBAAgB,OAAO,kBAAkB;AAAA,MACzC;AAAA,MACA,SAAS;AAAA,IACX;AACA,WAAO,MAAM,cAAc,MAAM,QAAQ,IAAI;AAAA,EAC/C,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,kCAAkC,wBAAwB,GAAG,SAAS,IAAI,QAAQ,EAAE;AAAA,QACvG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,4BAA4B,EAAE,IAAI,CAAC;AAChD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,gCAAgC,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3H;AACF;AAEA,eAAsB,OAAO,KAAc,EAAE,OAAO,GAA+B;AACjF,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,cAAc,yBAAyB,IAAI;AACjD,QAAI,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,aAAa;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,+BAA+B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/G;AACA,UAAM,eAAe,aAAa,UAAU,EAAE,IAAI,OAAO,GAAG,CAAC;AAC7D,QAAI,CAAC,aAAa,SAAS;AACzB,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,mBAAmB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClH;AAEA,UAAM,SAAS,MAAM,WAAW,WAAW,aAAa,KAAK,IAAI,KAAK,QAAQ;AAC9E,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4BAA4B,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAChH;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,gBAAgB,OAAO,kBAAkB,KAAK,CAAC,GAAG;AACpG,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4BAA4B,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7G;AACA,UAAM,OAA8B;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,MACA,gBAAgB,OAAO,kBAAkB;AAAA,MACzC;AAAA,MACA,SAAS;AAAA,IACX;AACA,WAAO,MAAM,kBAAkB,MAAM,MAAM;AAAA,EAC7C,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,+BAA+B,EAAE,IAAI,CAAC;AACnD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,gCAAgC,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3H;AACF;AAEA,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC3F,MAAM,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC1D,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,OAAO;AAAA,IACb,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,IACzB,WAAW,EAAE,OAAO;AAAA,IACpB,UAAU,EAAE,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC;AAAA,IAC1C,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,IACxC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,IACnC,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3C,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,IAClC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,CAAC;AACH,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,UAAU,QAAQ,qBAAqB,CAAC;AAAA,MAChF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,cAAc,QAAQ,oBAAoB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,oBAAoB;AAAA,MAC9E;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,QAAQ,mBAAmB;AAAA,MAC1C,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,iBAAiB,CAAC;AAAA,MACpF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,oBAAoB;AAAA,MAC9E;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,iBAAiB,CAAC;AAAA,MACxF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,cAAc,QAAQ,oBAAoB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,oBAAoB;AAAA,MAC9E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/devices/api/admin/devices/route.js

@@ -0,0 +1,140 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { isOrganizationReadAccessAllowed } from "@open-mercato/core/modules/directory/utils/organizationScopeGuard";
+import { User } from "@open-mercato/core/modules/auth/data/entities";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { E } from "../../../../../generated/entities.ids.generated.js";
+import { UserDevice } from "../../../data/entities.js";
+import {
+  registerDeviceAdminSchema,
+  registerDeviceCommandSchema
+} from "../../../data/validators.js";
+import { resolveDeviceActorUserId } from "../../auth.js";
+import { createDevicesCrudOpenApi, createPagedListResponseSchema } from "../../openapi.js";
+import { deviceListSchema, deviceListFields, deviceListSortFieldMap, deviceListItemSchema } from "../../deviceList.js";
+import { executeRegister } from "../../deviceOps.js";
+const logger = createLogger("devices");
+const routeMetadata = {
+  GET: { requireAuth: true, requireFeatures: ["devices.admin"] },
+  POST: { requireAuth: true, requireFeatures: ["devices.admin"] }
+};
+const metadata = routeMetadata;
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: UserDevice,
+    idField: "id",
+    // organization_id stays nullable, but scoping follows the standard org-scoped pattern: the factory
+    // auto-filters by the caller's organization scope (null-aware in the query engine). Unrestricted
+    // admins see the whole tenant including null-org rows; org-restricted admins see only their orgs.
+    orgField: "organizationId",
+    tenantField: "tenantId",
+    softDeleteField: "deletedAt"
+  },
+  indexer: { entityType: E.devices.user_device },
+  // Same cache resource tag as the self route + commands, so any device write busts both list caches.
+  events: { module: "devices", entity: "user_device" },
+  list: {
+    schema: deviceListSchema,
+    entityId: E.devices.user_device,
+    fields: deviceListFields,
+    sortFieldMap: deviceListSortFieldMap,
+    // Tenant + org scope is enforced by the factory (orm.tenantField + orm.orgField); only the optional
+    // userId/platform narrowing is left to do here.
+    buildFilters: async (query) => {
+      const filters = {};
+      if (query.userId) filters.user_id = { $eq: query.userId };
+      if (query.platform) filters.platform = { $eq: query.platform };
+      return filters;
+    }
+  }
+});
+const GET = crud.GET;
+async function POST(req) {
+  const { translate } = await resolveTranslations();
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    const actorUserId = resolveDeviceActorUserId(auth);
+    if (!auth || !auth.tenantId || !actorUserId) {
+      return NextResponse.json({ error: translate("devices.errors.unauthorized", "Unauthorized") }, { status: 401 });
+    }
+    const body = registerDeviceAdminSchema.parse(await readJsonSafe(req, {}));
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const em = container.resolve("em");
+    const targetUser = await em.findOne(
+      User,
+      { id: body.userId, tenantId: auth.tenantId, deletedAt: null },
+      { fields: ["id", "organizationId"] }
+    );
+    if (!targetUser) {
+      return NextResponse.json(
+        { error: translate("devices.errors.user_not_found", "Target user not found in this tenant") },
+        { status: 400 }
+      );
+    }
+    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: targetUser.organizationId ?? null })) {
+      return NextResponse.json({ error: translate("devices.errors.forbidden", "Access denied") }, { status: 403 });
+    }
+    const commandInput = registerDeviceCommandSchema.parse({
+      ...body,
+      tenantId: auth.tenantId,
+      organizationId,
+      userId: body.userId
+    });
+    const mctx = { container, auth, scope, organizationId, actorUserId, request: req };
+    return await executeRegister(mctx, commandInput);
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: translate("devices.errors.invalid_payload", "Invalid device payload"), details: err.flatten() },
+        { status: 400 }
+      );
+    }
+    if (isCrudHttpError(err) && err.body?.code === "device_already_registered") {
+      return NextResponse.json(
+        { error: translate("devices.errors.already_registered", "This device is already registered") },
+        { status: 409 }
+      );
+    }
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    logger.error("devices.admin.POST failed", { err });
+    return NextResponse.json(
+      { error: translate("devices.errors.register_failed", "Failed to register device") },
+      { status: 500 }
+    );
+  }
+}
+const registerResponseSchema = z.object({
+  id: z.string().uuid(),
+  deviceId: z.string(),
+  revived: z.boolean()
+});
+const openApi = createDevicesCrudOpenApi({
+  resourceName: "Device (admin)",
+  pluralName: "Devices (admin)",
+  querySchema: deviceListSchema,
+  listResponseSchema: createPagedListResponseSchema(deviceListItemSchema),
+  create: {
+    schema: registerDeviceAdminSchema,
+    responseSchema: registerResponseSchema,
+    description: "Admin: register (idempotently upsert) a device on behalf of any user in the tenant."
+  }
+});
+export {
+  GET,
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/devices/api/admin/devices/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/devices/api/admin/devices/route.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { E } from '#generated/entities.ids.generated'\nimport { UserDevice } from '../../../data/entities'\nimport {\n  registerDeviceAdminSchema,\n  registerDeviceCommandSchema,\n  type RegisterDeviceCommandInput,\n} from '../../../data/validators'\nimport { resolveDeviceActorUserId } from '../../auth'\nimport { createDevicesCrudOpenApi, createPagedListResponseSchema } from '../../openapi'\nimport { deviceListSchema, deviceListFields, deviceListSortFieldMap, deviceListItemSchema } from '../../deviceList'\nimport { executeRegister, type DeviceMutationContext } from '../../deviceOps'\n\nconst logger = createLogger('devices')\n\n// Admin device administration: cross-user listing + register-on-behalf-of-user. Gated by devices.admin.\n// Self-serve registration/listing stays on /api/devices (scoped to the acting user).\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['devices.admin'] },\n  POST: { requireAuth: true, requireFeatures: ['devices.admin'] },\n}\n\nexport const metadata = routeMetadata\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: UserDevice,\n    idField: 'id',\n    // organization_id stays nullable, but scoping follows the standard org-scoped pattern: the factory\n    // auto-filters by the caller's organization scope (null-aware in the query engine). Unrestricted\n    // admins see the whole tenant including null-org rows; org-restricted admins see only their orgs.\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: { entityType: E.devices.user_device },\n  // Same cache resource tag as the self route + commands, so any device write busts both list caches.\n  events: { module: 'devices', entity: 'user_device' },\n  list: {\n    schema: deviceListSchema,\n    entityId: E.devices.user_device,\n    fields: deviceListFields,\n    sortFieldMap: deviceListSortFieldMap,\n    // Tenant + org scope is enforced by the factory (orm.tenantField + orm.orgField); only the optional\n    // userId/platform narrowing is left to do here.\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      if (query.userId) filters.user_id = { $eq: query.userId }\n      if (query.platform) filters.platform = { $eq: query.platform }\n      return filters\n    },\n  },\n})\n\nexport const GET = crud.GET\n\nexport async function POST(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const actorUserId = resolveDeviceActorUserId(auth)\n    if (!auth || !auth.tenantId || !actorUserId) {\n      return NextResponse.json({ error: translate('devices.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n    }\n\n    const body = registerDeviceAdminSchema.parse(await readJsonSafe(req, {}))\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n\n    // Validate the on-behalf-of target before registering. `body.userId` is caller-supplied, and the\n    // fan-out delivers by `(tenant, org, user)` \u2014 so without this an admin could register their OWN push\n    // token under an arbitrary `userId` (even a non-existent or cross-tenant one) and start receiving that\n    // user's notifications. Require a real, active user in the admin's tenant who is also within the\n    // admin's organization scope (org-restricted admins cannot reach users in orgs they can't access).\n    // Only non-encrypted columns are selected, so no decryption is needed.\n    const em = container.resolve('em') as EntityManager\n    const targetUser = await em.findOne(\n      User,\n      { id: body.userId, tenantId: auth.tenantId, deletedAt: null },\n      { fields: ['id', 'organizationId'] },\n    )\n    if (!targetUser) {\n      return NextResponse.json(\n        { error: translate('devices.errors.user_not_found', 'Target user not found in this tenant') },\n        { status: 400 },\n      )\n    }\n    if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId: targetUser.organizationId ?? null })) {\n      return NextResponse.json({ error: translate('devices.errors.forbidden', 'Access denied') }, { status: 403 })\n    }\n\n    // Register is an idempotent upsert keyed per (tenant, org, user, device). organizationId is the\n    // admin's own resolved scope, so the upsert can only ever touch a row inside an org the admin can\n    // access \u2014 no cross-org guard is needed here.\n    const commandInput = registerDeviceCommandSchema.parse({\n      ...body,\n      tenantId: auth.tenantId,\n      organizationId,\n      userId: body.userId,\n    } satisfies RegisterDeviceCommandInput)\n\n    // actorUserId is the admin (for the mutation guard/audit); the device is owned by body.userId.\n    const mctx: DeviceMutationContext = { container, auth, scope, organizationId, actorUserId, request: req }\n    return await executeRegister(mctx, commandInput)\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('devices.errors.invalid_payload', 'Invalid device payload'), details: err.flatten() },\n        { status: 400 },\n      )\n    }\n    if (isCrudHttpError(err) && (err.body as { code?: string } | undefined)?.code === 'device_already_registered') {\n      return NextResponse.json(\n        { error: translate('devices.errors.already_registered', 'This device is already registered') },\n        { status: 409 },\n      )\n    }\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('devices.admin.POST failed', { err })\n    return NextResponse.json(\n      { error: translate('devices.errors.register_failed', 'Failed to register device') },\n      { status: 500 },\n    )\n  }\n}\n\nconst registerResponseSchema = z.object({\n  id: z.string().uuid(),\n  deviceId: z.string(),\n  revived: z.boolean(),\n})\n\nexport const openApi: OpenApiRouteDoc = createDevicesCrudOpenApi({\n  resourceName: 'Device (admin)',\n  pluralName: 'Devices (admin)',\n  querySchema: deviceListSchema,\n  listResponseSchema: createPagedListResponseSchema(deviceListItemSchema),\n  create: {\n    schema: registerDeviceAdminSchema,\n    responseSchema: registerResponseSchema,\n    description: 'Admin: register (idempotently upsert) a device on behalf of any user in the tenant.',\n  },\n})\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,uCAAuC;AAChD,SAAS,YAAY;AACrB,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AAEpC,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,gCAAgC;AACzC,SAAS,0BAA0B,qCAAqC;AACxE,SAAS,kBAAkB,kBAAkB,wBAAwB,4BAA4B;AACjG,SAAS,uBAAmD;AAE5D,MAAM,SAAS,aAAa,SAAS;AAIrC,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAAA,EAC7D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAChE;AAEO,MAAM,WAAW;AAExB,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA;AAAA;AAAA;AAAA,IAIT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS,EAAE,YAAY,EAAE,QAAQ,YAAY;AAAA;AAAA,EAE7C,QAAQ,EAAE,QAAQ,WAAW,QAAQ,cAAc;AAAA,EACnD,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,QAAQ;AAAA,IACpB,QAAQ;AAAA,IACR,cAAc;AAAA;AAAA;AAAA,IAGd,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAC1C,UAAI,MAAM,OAAQ,SAAQ,UAAU,EAAE,KAAK,MAAM,OAAO;AACxD,UAAI,MAAM,SAAU,SAAQ,WAAW,EAAE,KAAK,MAAM,SAAS;AAC7D,aAAO;AAAA,IACT;AAAA,EACF;AACF,CAAC;AAEM,MAAM,MAAM,KAAK;AAExB,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,cAAc,yBAAyB,IAAI;AACjD,QAAI,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,aAAa;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,+BAA+B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/G;AAEA,UAAM,OAAO,0BAA0B,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACxE,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAQ1D,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,aAAa,MAAM,GAAG;AAAA,MAC1B;AAAA,MACA,EAAE,IAAI,KAAK,QAAQ,UAAU,KAAK,UAAU,WAAW,KAAK;AAAA,MAC5D,EAAE,QAAQ,CAAC,MAAM,gBAAgB,EAAE;AAAA,IACrC;AACA,QAAI,CAAC,YAAY;AACf,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,iCAAiC,sCAAsC,EAAE;AAAA,QAC5F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,QAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,gBAAgB,WAAW,kBAAkB,KAAK,CAAC,GAAG;AACxG,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4BAA4B,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7G;AAKA,UAAM,eAAe,4BAA4B,MAAM;AAAA,MACrD,GAAG;AAAA,MACH,UAAU,KAAK;AAAA,MACf;AAAA,MACA,QAAQ,KAAK;AAAA,IACf,CAAsC;AAGtC,UAAM,OAA8B,EAAE,WAAW,MAAM,OAAO,gBAAgB,aAAa,SAAS,IAAI;AACxG,WAAO,MAAM,gBAAgB,MAAM,YAAY;AAAA,EACjD,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,kCAAkC,wBAAwB,GAAG,SAAS,IAAI,QAAQ,EAAE;AAAA,QACvG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,QAAI,gBAAgB,GAAG,KAAM,IAAI,MAAwC,SAAS,6BAA6B;AAC7G,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,qCAAqC,mCAAmC,EAAE;AAAA,QAC7F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,6BAA6B,EAAE,IAAI,CAAC;AACjD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,kCAAkC,2BAA2B,EAAE;AAAA,MAClF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO;AAAA,EACnB,SAAS,EAAE,QAAQ;AACrB,CAAC;AAEM,MAAM,UAA2B,yBAAyB;AAAA,EAC/D,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,oBAAoB;AAAA,EACtE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
+  "names": []
+}

package/dist/modules/devices/api/auth.js

@@ -0,0 +1,9 @@
+function resolveDeviceActorUserId(auth) {
+  if (!auth || auth.isApiKey) return null;
+  const subjectId = typeof auth.sub === "string" ? auth.sub.trim() : "";
+  return subjectId || null;
+}
+export {
+  resolveDeviceActorUserId
+};
+//# sourceMappingURL=auth.js.map

package/dist/modules/devices/api/auth.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/devices/api/auth.ts"],
+  "sourcesContent": ["import type { AuthContext } from '@open-mercato/shared/lib/auth/server'\n\n/**\n * Resolves the acting user id for device routes. Device ownership is per-user, so API-key\n * principals (which have no human user) are not valid device actors and yield null. Mirrors the\n * `auth.isApiKey ? null : auth.sub` convention used across the codebase; the target user id is\n * validated as a UUID by the command schemas downstream.\n */\nexport function resolveDeviceActorUserId(auth: AuthContext | null): string | null {\n  if (!auth || auth.isApiKey) return null\n  const subjectId = typeof auth.sub === 'string' ? auth.sub.trim() : ''\n  return subjectId || null\n}\n"],
+  "mappings": "AAQO,SAAS,yBAAyB,MAAyC;AAChF,MAAI,CAAC,QAAQ,KAAK,SAAU,QAAO;AACnC,QAAM,YAAY,OAAO,KAAK,QAAQ,WAAW,KAAK,IAAI,KAAK,IAAI;AACnE,SAAO,aAAa;AACtB;",
+  "names": []
+}

package/dist/modules/devices/api/deviceList.js

@@ -0,0 +1,53 @@
+import { z } from "zod";
+const deviceListSchema = z.object({
+  page: z.coerce.number().min(1).default(1),
+  pageSize: z.coerce.number().min(1).max(100).default(50),
+  platform: z.enum(["ios", "android", "web"]).optional(),
+  userId: z.string().uuid().optional(),
+  sortField: z.string().optional(),
+  sortDir: z.enum(["asc", "desc"]).optional()
+}).passthrough();
+const deviceListFields = [
+  "id",
+  "tenant_id",
+  "organization_id",
+  "user_id",
+  "device_id",
+  "platform",
+  "client_app_version",
+  "os_version",
+  "locale",
+  "push_provider",
+  "push_token_updated_at",
+  "last_seen_at",
+  "created_at",
+  "updated_at"
+];
+const deviceListSortFieldMap = {
+  lastSeenAt: "last_seen_at",
+  createdAt: "created_at",
+  updatedAt: "updated_at"
+};
+const deviceListItemSchema = z.object({
+  id: z.string().uuid(),
+  tenant_id: z.string().uuid(),
+  organization_id: z.string().uuid().nullable().optional(),
+  user_id: z.string().uuid(),
+  device_id: z.string(),
+  platform: z.enum(["ios", "android", "web"]),
+  client_app_version: z.string().nullable().optional(),
+  os_version: z.string().nullable().optional(),
+  locale: z.string().nullable().optional(),
+  push_provider: z.string().nullable().optional(),
+  push_token_updated_at: z.string().nullable().optional(),
+  last_seen_at: z.string().nullable().optional(),
+  created_at: z.string().nullable().optional(),
+  updated_at: z.string().nullable().optional()
+});
+export {
+  deviceListFields,
+  deviceListItemSchema,
+  deviceListSchema,
+  deviceListSortFieldMap
+};
+//# sourceMappingURL=deviceList.js.map

package/dist/modules/devices/api/deviceList.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/devices/api/deviceList.ts"],
+  "sourcesContent": ["import { z } from 'zod'\n\n// Shared list contract for the self-serve (`/api/devices`) and admin (`/api/devices/admin/devices`)\n// list routes. push_token is a secret and is never part of the exposed field set.\nexport const deviceListSchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    platform: z.enum(['ios', 'android', 'web']).optional(),\n    userId: z.string().uuid().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\nexport const deviceListFields: string[] = [\n  'id',\n  'tenant_id',\n  'organization_id',\n  'user_id',\n  'device_id',\n  'platform',\n  'client_app_version',\n  'os_version',\n  'locale',\n  'push_provider',\n  'push_token_updated_at',\n  'last_seen_at',\n  'created_at',\n  'updated_at',\n]\n\nexport const deviceListSortFieldMap: Record<string, string> = {\n  lastSeenAt: 'last_seen_at',\n  createdAt: 'created_at',\n  updatedAt: 'updated_at',\n}\n\nexport const deviceListItemSchema = z.object({\n  id: z.string().uuid(),\n  tenant_id: z.string().uuid(),\n  organization_id: z.string().uuid().nullable().optional(),\n  user_id: z.string().uuid(),\n  device_id: z.string(),\n  platform: z.enum(['ios', 'android', 'web']),\n  client_app_version: z.string().nullable().optional(),\n  os_version: z.string().nullable().optional(),\n  locale: z.string().nullable().optional(),\n  push_provider: z.string().nullable().optional(),\n  push_token_updated_at: z.string().nullable().optional(),\n  last_seen_at: z.string().nullable().optional(),\n  created_at: z.string().nullable().optional(),\n  updated_at: z.string().nullable().optional(),\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAIX,MAAM,mBAAmB,EAC7B,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,UAAU,EAAE,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC,EAAE,SAAS;AAAA,EACrD,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AAER,MAAM,mBAA6B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,yBAAiD;AAAA,EAC5D,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,WAAW;AACb;AAEO,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACvD,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,WAAW,EAAE,OAAO;AAAA,EACpB,UAAU,EAAE,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC;AAAA,EAC1C,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACnD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC7C,CAAC;",
+  "names": []
+}

package/dist/modules/devices/api/deviceOps.js

@@ -0,0 +1,118 @@
+import { NextResponse } from "next/server";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
+import { enforceCommandOptimisticLock } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import { attachOperationMetadataHeader } from "../lib/operationMetadata.js";
+const RESOURCE_KIND = "devices.user_device";
+function redactMutationPayload(payload) {
+  if (!payload || !("pushToken" in payload)) return payload;
+  const { pushToken: _pushToken, ...rest } = payload;
+  return rest;
+}
+function commandCtx(mctx) {
+  return {
+    container: mctx.container,
+    auth: mctx.auth,
+    organizationScope: mctx.scope ?? null,
+    selectedOrganizationId: mctx.organizationId,
+    organizationIds: mctx.scope?.filterIds ?? (mctx.auth.orgId ? [mctx.auth.orgId] : null),
+    request: mctx.request
+  };
+}
+async function runGuards(mctx, operation, resourceId, mutationPayload) {
+  return validateCrudMutationGuard(mctx.container, {
+    tenantId: mctx.auth.tenantId,
+    organizationId: mctx.organizationId,
+    userId: mctx.actorUserId,
+    resourceKind: RESOURCE_KIND,
+    resourceId,
+    operation,
+    requestMethod: mctx.request.method,
+    requestHeaders: mctx.request.headers,
+    mutationPayload
+  });
+}
+async function runAfter(mctx, guardResult, operation, resourceId) {
+  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+    await runCrudMutationGuardAfterSuccess(mctx.container, {
+      tenantId: mctx.auth.tenantId,
+      organizationId: mctx.organizationId,
+      userId: mctx.actorUserId,
+      resourceKind: RESOURCE_KIND,
+      resourceId,
+      operation,
+      requestMethod: mctx.request.method,
+      requestHeaders: mctx.request.headers,
+      metadata: guardResult.metadata ?? null
+    });
+  }
+}
+async function executeRegister(mctx, commandInput) {
+  const guardResourceId = `${commandInput.userId}:${commandInput.deviceId}`;
+  const guardResult = await runGuards(mctx, "create", guardResourceId, redactMutationPayload(commandInput));
+  if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status });
+  const commandBus = mctx.container.resolve("commandBus");
+  const { result, logEntry } = await commandBus.execute("devices.user_devices.register", { input: commandInput, ctx: commandCtx(mctx) });
+  await runAfter(mctx, guardResult, "create", guardResourceId);
+  const response = NextResponse.json(
+    { id: result.id, deviceId: result.deviceId, revived: result.revived },
+    { status: 201 }
+  );
+  attachOperationMetadataHeader(response, logEntry, { resourceKind: RESOURCE_KIND, resourceId: result.id });
+  return response;
+}
+async function executeUpdate(mctx, device, body) {
+  enforceCommandOptimisticLock({
+    resourceKind: RESOURCE_KIND,
+    resourceId: device.id,
+    current: device.updatedAt,
+    request: mctx.request
+  });
+  const guardResult = await runGuards(mctx, "update", device.id, redactMutationPayload(body));
+  if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status });
+  const commandBus = mctx.container.resolve("commandBus");
+  const { logEntry } = await commandBus.execute("devices.user_devices.update", {
+    input: {
+      ...body,
+      id: device.id,
+      tenantId: device.tenantId,
+      userId: device.userId,
+      organizationId: device.organizationId ?? null
+    },
+    ctx: commandCtx(mctx)
+  });
+  await runAfter(mctx, guardResult, "update", device.id);
+  const response = NextResponse.json({ ok: true, id: device.id });
+  attachOperationMetadataHeader(response, logEntry, { resourceKind: RESOURCE_KIND, resourceId: device.id });
+  return response;
+}
+async function executeDeactivate(mctx, device) {
+  const guardResult = await runGuards(mctx, "delete", device.id);
+  if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status });
+  const commandBus = mctx.container.resolve("commandBus");
+  const { logEntry } = await commandBus.execute(
+    "devices.user_devices.deactivate",
+    {
+      input: {
+        id: device.id,
+        tenantId: device.tenantId,
+        userId: device.userId,
+        organizationId: device.organizationId ?? null
+      },
+      ctx: commandCtx(mctx)
+    }
+  );
+  await runAfter(mctx, guardResult, "delete", device.id);
+  const response = NextResponse.json({ ok: true });
+  attachOperationMetadataHeader(response, logEntry, { resourceKind: RESOURCE_KIND, resourceId: device.id });
+  return response;
+}
+export {
+  executeDeactivate,
+  executeRegister,
+  executeUpdate,
+  redactMutationPayload
+};
+//# sourceMappingURL=deviceOps.js.map