@open-mercato/core 0.6.8-develop.6998.1.d2bc46c56c → 0.6.8-develop.7001.1.03608ab252

package/dist/modules/warranty_claims/api/credit-memo/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/warranty_claims/api/credit-memo/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport {\n  claimCreateCreditMemoSchema,\n  type ClaimCreateCreditMemoInput,\n} from '../../data/validators'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../commands/shared'\n\nconst logger = createLogger('warranty_claims')\n\ntype ActionRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  translate: (key: string, fallback?: string) => string\n}\n\ntype CreditMemoCommandResult = {\n  claimId: string\n  creditMemoId: string\n  creditMemoUpdatedAt: string | null\n  skippedLineIds: string[]\n  grandTotalGrossAmount: string\n  currencyCode: string\n}\n\nconst creditMemoRequestSchema = z\n  .object({\n    claimId: z.string().uuid(),\n    updatedAt: z.string().datetime().nullable().optional(),\n  })\n  .strict()\n\ntype CreditMemoRequest = z.infer<typeof creditMemoRequestSchema>\n\nconst creditMemoResponseSchema = z.object({\n  creditMemoId: z.string().uuid(),\n  skippedLineIds: z.array(z.string().uuid()),\n  grandTotalGrossAmount: z.string(),\n  currencyCode: z.string(),\n})\n\nconst errorResponseSchema = z.object({\n  error: z.string(),\n})\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.claim.manage', 'sales.credit_memos.manage'] },\n}\n\nfunction translateKey(key: string): string {\n  return key\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nasync function resolveActionContext(req: Request): Promise<ActionRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: 'warranty_claims.errors.unauthorized' })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: 'warranty_claims.errors.organization_required' })\n  }\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    translate: translateKey,\n  }\n}\n\nfunction toCreditMemoRequest(payload: Record<string, unknown>): CreditMemoRequest {\n  return creditMemoRequestSchema.parse(payload)\n}\n\nfunction toCommandInput(\n  input: CreditMemoRequest,\n  context: ActionRouteContext,\n): ClaimCreateCreditMemoInput {\n  const scopedPayload = withScopedPayload({\n    id: input.claimId,\n    updatedAt: input.updatedAt,\n  }, context.ctx, context.translate)\n  return claimCreateCreditMemoSchema.parse(scopedPayload)\n}\n\nasync function runGuard(\n  req: Request,\n  context: ActionRouteContext,\n  input: CreditMemoRequest,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: 'warranty_claims.errors.unauthorized' })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: input.claimId,\n      operation: 'custom',\n      mutationPayload: { ...input },\n    },\n  })\n}\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveActionContext(req)\n    const requestInput = toCreditMemoRequest(toRecord(await readJsonSafe(req, {})))\n    const guarded = await runGuard(req, context, requestInput)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const guardedInput = guarded.modifiedPayload\n      ? toCreditMemoRequest(guarded.modifiedPayload)\n      : requestInput\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute<ClaimCreateCreditMemoInput, CreditMemoCommandResult>(\n      'warranty_claims.claim.create_credit_memo',\n      { input: toCommandInput(guardedInput, context), ctx: context.ctx },\n    )\n    if (!result) throw new CrudHttpError(400, { error: 'warranty_claims.errors.save_failed' })\n    await guarded.runAfterSuccess()\n    return NextResponse.json({\n      creditMemoId: result.creditMemoId,\n      skippedLineIds: result.skippedLineIds,\n      grandTotalGrossAmount: result.grandTotalGrossAmount,\n      currencyCode: result.currencyCode,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n    }\n    logger.error('warranty_claims.credit-memo.post failed', { err })\n    return NextResponse.json({ error: 'warranty_claims.errors.save_failed' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Create a credit memo from a warranty claim',\n  methods: {\n    POST: {\n      summary: 'Create and link a credit memo from eligible received credit or refund lines',\n      description: 'Amounts are prorated from source order-line totals. Version 1 does not prorate order-level adjustments.',\n      requestBody: { contentType: 'application/json', schema: creditMemoRequestSchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Credit memo created and linked; ineligible or unresolvable claim lines are reported as skipped',\n          schema: creditMemoResponseSchema,\n        },\n        { status: 400, description: 'Invalid request or claim is not eligible for credit-memo creation', schema: errorResponseSchema },\n        { status: 401, description: 'Authentication required', schema: errorResponseSchema },\n        { status: 403, description: 'Insufficient permissions', schema: errorResponseSchema },\n        { status: 409, description: 'Optimistic lock conflict', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,8BAA6D;AACtE,SAAS,yBAAyB;AAElC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,OAEK;AACP,SAAS,oCAAoC;AAE7C,MAAM,SAAS,aAAa,iBAAiB;AAkB7C,MAAM,0BAA0B,EAC7B,OAAO;AAAA,EACN,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;AACvD,CAAC,EACA,OAAO;AAIV,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,EACzC,uBAAuB,EAAE,OAAO;AAAA,EAChC,cAAc,EAAE,OAAO;AACzB,CAAC;AAED,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,OAAO,EAAE,OAAO;AAClB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,2BAA2B,EAAE;AAC5G;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO;AACT;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,eAAe,qBAAqB,KAA2C;AAC7E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,EAC/E;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,+CAA+C,CAAC;AAAA,EACxF;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA,WAAW;AAAA,EACb;AACF;AAEA,SAAS,oBAAoB,SAAqD;AAChF,SAAO,wBAAwB,MAAM,OAAO;AAC9C;AAEA,SAAS,eACP,OACA,SAC4B;AAC5B,QAAM,gBAAgB,kBAAkB;AAAA,IACtC,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,EACnB,GAAG,QAAQ,KAAK,QAAQ,SAAS;AACjC,SAAO,4BAA4B,MAAM,aAAa;AACxD;AAEA,eAAe,SACb,KACA,SACA,OACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,EAC/E;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,UAAM,eAAe,oBAAoB,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9E,UAAM,UAAU,MAAM,SAAS,KAAK,SAAS,YAAY;AACzD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,eAAe,QAAQ,kBACzB,oBAAoB,QAAQ,eAAe,IAC3C;AACJ,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAC7D,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA,EAAE,OAAO,eAAe,cAAc,OAAO,GAAG,KAAK,QAAQ,IAAI;AAAA,IACnE;AACA,QAAI,CAAC,OAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qCAAqC,CAAC;AACzF,UAAM,QAAQ,gBAAgB;AAC9B,WAAO,aAAa,KAAK;AAAA,MACvB,cAAc,OAAO;AAAA,MACrB,gBAAgB,OAAO;AAAA,MACvB,uBAAuB,OAAO;AAAA,MAC9B,cAAc,OAAO;AAAA,IACvB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC5F;AACA,WAAO,MAAM,2CAA2C,EAAE,IAAI,CAAC;AAC/D,WAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,aAAa,oBAAoB,QAAQ,wBAAwB;AAAA,MAChF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,qEAAqE,QAAQ,oBAAoB;AAAA,QAC7H,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,oBAAoB;AAAA,QACnF,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/warranty_claims/api/entitlement/route.js

@@ -0,0 +1,145 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { sql } from "kysely";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("warranty_claims");
+const UNKNOWN_ENTITLEMENT = {
+  warrantyStatus: "unknown",
+  coverageType: null,
+  expiresAt: null,
+  source: null
+};
+const querySchema = z.object({
+  serialNumber: z.string().trim().max(191).optional(),
+  orderId: z.string().uuid().optional(),
+  productId: z.string().uuid().optional(),
+  variantId: z.string().uuid().optional(),
+  sku: z.string().trim().max(191).optional(),
+  purchaseDate: z.string().trim().max(80).optional(),
+  excludeClaimId: z.string().uuid().optional()
+}).strict();
+const entitlementResultSchema = z.object({
+  warrantyStatus: z.enum(["in_warranty", "out_of_warranty", "unknown"]),
+  coverageType: z.enum(["standard", "extended", "none"]).nullable(),
+  expiresAt: z.string().nullable(),
+  source: z.enum(["registration", "order", "manual", "resolver"]).nullable(),
+  hasPriorClaims: z.boolean().optional(),
+  priorClaimCount: z.number().int().nonnegative().optional(),
+  priorRegistrationCount: z.number().int().nonnegative().optional(),
+  relatedClaimNumbers: z.array(z.string()).optional()
+});
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["warranty_claims.claim.view"] }
+};
+function hasAnyInput(input) {
+  return Object.values(input).some((value) => typeof value === "string" && value.trim().length > 0);
+}
+function normalizeInput(query) {
+  return {
+    serialNumber: query.serialNumber?.trim() || null,
+    orderId: query.orderId ?? null,
+    productId: query.productId ?? null,
+    variantId: query.variantId ?? null,
+    sku: query.sku?.trim() || null,
+    purchaseDate: query.purchaseDate?.trim() || null
+  };
+}
+function parseNumeric(value) {
+  if (value === void 0 || value === null) return 0;
+  const parsed = Number(value);
+  return Number.isFinite(parsed) ? Math.trunc(parsed) : 0;
+}
+async function resolveEntitlementContext(req) {
+  const container = await createRequestContainer();
+  const auth = await getAuthFromRequest(req);
+  const { translate } = await resolveTranslations();
+  if (!auth || !auth.tenantId) {
+    throw new CrudHttpError(401, { error: translate("warranty_claims.errors.unauthorized", "Unauthorized") });
+  }
+  const organizationScope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+  const organizationId = organizationScope?.selectedId ?? auth.orgId ?? null;
+  if (!organizationId) {
+    throw new CrudHttpError(400, { error: translate("warranty_claims.errors.organization_required", "Organization context is required") });
+  }
+  return {
+    tenantId: auth.tenantId,
+    organizationId,
+    em: container.resolve("em").fork(),
+    resolver: container.resolve("warrantyEntitlementResolver")
+  };
+}
+async function resolveSerialHistory(context, serialNumber, excludeClaimId) {
+  const serial = serialNumber?.trim();
+  if (!serial) return {};
+  const db = context.em.getKysely();
+  let claimQuery = db.selectFrom("warranty_claim_lines").innerJoin("warranty_claims", "warranty_claims.id", "warranty_claim_lines.claim_id").select("warranty_claims.claim_number as claimNumber").distinct().where("warranty_claim_lines.tenant_id", "=", context.tenantId).where("warranty_claim_lines.organization_id", "=", context.organizationId).where("warranty_claim_lines.serial_number", "=", serial).where("warranty_claim_lines.deleted_at", "is", null).where("warranty_claims.tenant_id", "=", context.tenantId).where("warranty_claims.organization_id", "=", context.organizationId).where("warranty_claims.deleted_at", "is", null);
+  if (excludeClaimId) {
+    claimQuery = claimQuery.where("warranty_claim_lines.claim_id", "!=", excludeClaimId);
+  }
+  const claimRows = await claimQuery.execute();
+  const relatedClaimNumbers = Array.from(new Set(
+    claimRows.map((row) => row.claimNumber).filter((claimNumber) => typeof claimNumber === "string" && claimNumber.length > 0)
+  )).sort((left, right) => left.localeCompare(right));
+  const registrationRow = await db.selectFrom("warranty_claim_registrations").select(sql`count(*)`.as("count")).where("tenant_id", "=", context.tenantId).where("organization_id", "=", context.organizationId).where("serial_number", "=", serial).where("deleted_at", "is", null).executeTakeFirst();
+  const priorClaimCount = relatedClaimNumbers.length;
+  return {
+    hasPriorClaims: priorClaimCount > 0,
+    priorClaimCount,
+    priorRegistrationCount: parseNumeric(registrationRow?.count),
+    relatedClaimNumbers: relatedClaimNumbers.slice(0, 8)
+  };
+}
+async function GET(req) {
+  try {
+    const url = new URL(req.url);
+    const query = querySchema.parse(Object.fromEntries(url.searchParams));
+    const input = normalizeInput(query);
+    const context = await resolveEntitlementContext(req);
+    const history = await resolveSerialHistory(context, input.serialNumber, query.excludeClaimId);
+    if (!hasAnyInput(input)) {
+      return NextResponse.json({ ...UNKNOWN_ENTITLEMENT, ...history });
+    }
+    const result = await context.resolver.resolveEntitlement(
+      input,
+      { tenantId: context.tenantId, organizationId: context.organizationId },
+      context.em
+    );
+    return NextResponse.json({ ...result, ...history });
+  } catch (err) {
+    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });
+    }
+    logger.error("warranty_claims.entitlement.get failed", { err });
+    return NextResponse.json({ error: translate("warranty_claims.errors.load_failed", "Failed to load warranty claim data") }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: "Warranty Claims",
+  summary: "Resolve warranty entitlement",
+  methods: {
+    GET: {
+      summary: "Resolve warranty entitlement for serial, order, product, SKU, or purchase date facts",
+      query: querySchema,
+      responses: [
+        {
+          status: 200,
+          description: "Resolved warranty entitlement",
+          schema: entitlementResultSchema
+        }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/entitlement/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/warranty_claims/api/entitlement/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql } from 'kysely'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type {\n  WarrantyEntitlementInput,\n  WarrantyEntitlementResolver,\n  WarrantyEntitlementResult,\n} from '../../services/entitlementResolver'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\ntype EntitlementHistoryDb = {\n  warranty_claim_lines: {\n    claim_id: string\n    organization_id: string\n    tenant_id: string\n    serial_number: string | null\n    deleted_at: Date | null\n  }\n  warranty_claims: {\n    id: string\n    organization_id: string\n    tenant_id: string\n    claim_number: string\n    deleted_at: Date | null\n  }\n  warranty_claim_registrations: {\n    id: string\n    organization_id: string\n    tenant_id: string\n    serial_number: string | null\n    deleted_at: Date | null\n  }\n}\n\ntype NumericAggregateValue = string | number | bigint | null\n\ntype EntitlementRouteContext = {\n  tenantId: string\n  organizationId: string\n  em: EntityManager\n  resolver: WarrantyEntitlementResolver\n}\n\ntype EntitlementResponse = WarrantyEntitlementResult & {\n  hasPriorClaims?: boolean\n  priorClaimCount?: number\n  priorRegistrationCount?: number\n  relatedClaimNumbers?: string[]\n}\n\nconst UNKNOWN_ENTITLEMENT: WarrantyEntitlementResult = {\n  warrantyStatus: 'unknown',\n  coverageType: null,\n  expiresAt: null,\n  source: null,\n}\n\nconst querySchema = z\n  .object({\n    serialNumber: z.string().trim().max(191).optional(),\n    orderId: z.string().uuid().optional(),\n    productId: z.string().uuid().optional(),\n    variantId: z.string().uuid().optional(),\n    sku: z.string().trim().max(191).optional(),\n    purchaseDate: z.string().trim().max(80).optional(),\n    excludeClaimId: z.string().uuid().optional(),\n  })\n  .strict()\n\nconst entitlementResultSchema = z.object({\n  warrantyStatus: z.enum(['in_warranty', 'out_of_warranty', 'unknown']),\n  coverageType: z.enum(['standard', 'extended', 'none']).nullable(),\n  expiresAt: z.string().nullable(),\n  source: z.enum(['registration', 'order', 'manual', 'resolver']).nullable(),\n  hasPriorClaims: z.boolean().optional(),\n  priorClaimCount: z.number().int().nonnegative().optional(),\n  priorRegistrationCount: z.number().int().nonnegative().optional(),\n  relatedClaimNumbers: z.array(z.string()).optional(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['warranty_claims.claim.view'] },\n}\n\nfunction hasAnyInput(input: WarrantyEntitlementInput): boolean {\n  return Object.values(input).some((value) => typeof value === 'string' && value.trim().length > 0)\n}\n\nfunction normalizeInput(query: z.infer<typeof querySchema>): WarrantyEntitlementInput {\n  return {\n    serialNumber: query.serialNumber?.trim() || null,\n    orderId: query.orderId ?? null,\n    productId: query.productId ?? null,\n    variantId: query.variantId ?? null,\n    sku: query.sku?.trim() || null,\n    purchaseDate: query.purchaseDate?.trim() || null,\n  }\n}\n\nfunction parseNumeric(value: NumericAggregateValue | undefined): number {\n  if (value === undefined || value === null) return 0\n  const parsed = Number(value)\n  return Number.isFinite(parsed) ? Math.trunc(parsed) : 0\n}\n\nasync function resolveEntitlementContext(req: Request): Promise<EntitlementRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const organizationScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = organizationScope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required') })\n  }\n  return {\n    tenantId: auth.tenantId,\n    organizationId,\n    em: container.resolve<EntityManager>('em').fork(),\n    resolver: container.resolve<WarrantyEntitlementResolver>('warrantyEntitlementResolver'),\n  }\n}\n\nasync function resolveSerialHistory(\n  context: Pick<EntitlementRouteContext, 'tenantId' | 'organizationId' | 'em'>,\n  serialNumber: string | null | undefined,\n  excludeClaimId?: string | null,\n): Promise<Pick<EntitlementResponse, 'hasPriorClaims' | 'priorClaimCount' | 'priorRegistrationCount' | 'relatedClaimNumbers'>> {\n  const serial = serialNumber?.trim()\n  if (!serial) return {}\n  const db = context.em.getKysely<EntitlementHistoryDb>()\n  let claimQuery = db\n    .selectFrom('warranty_claim_lines')\n    .innerJoin('warranty_claims', 'warranty_claims.id', 'warranty_claim_lines.claim_id')\n    .select('warranty_claims.claim_number as claimNumber')\n    .distinct()\n    .where('warranty_claim_lines.tenant_id', '=', context.tenantId)\n    .where('warranty_claim_lines.organization_id', '=', context.organizationId)\n    .where('warranty_claim_lines.serial_number', '=', serial)\n    .where('warranty_claim_lines.deleted_at', 'is', null)\n    .where('warranty_claims.tenant_id', '=', context.tenantId)\n    .where('warranty_claims.organization_id', '=', context.organizationId)\n    .where('warranty_claims.deleted_at', 'is', null)\n  if (excludeClaimId) {\n    claimQuery = claimQuery.where('warranty_claim_lines.claim_id', '!=', excludeClaimId)\n  }\n  const claimRows = await claimQuery.execute()\n  const relatedClaimNumbers = Array.from(new Set(\n    claimRows\n      .map((row) => row.claimNumber)\n      .filter((claimNumber): claimNumber is string => typeof claimNumber === 'string' && claimNumber.length > 0),\n  )).sort((left, right) => left.localeCompare(right))\n  const registrationRow = await db\n    .selectFrom('warranty_claim_registrations')\n    .select(sql<NumericAggregateValue>`count(*)`.as('count'))\n    .where('tenant_id', '=', context.tenantId)\n    .where('organization_id', '=', context.organizationId)\n    .where('serial_number', '=', serial)\n    .where('deleted_at', 'is', null)\n    .executeTakeFirst()\n  const priorClaimCount = relatedClaimNumbers.length\n  return {\n    hasPriorClaims: priorClaimCount > 0,\n    priorClaimCount,\n    priorRegistrationCount: parseNumeric(registrationRow?.count),\n    relatedClaimNumbers: relatedClaimNumbers.slice(0, 8),\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(url.searchParams))\n    const input = normalizeInput(query)\n    const context = await resolveEntitlementContext(req)\n    const history = await resolveSerialHistory(context, input.serialNumber, query.excludeClaimId)\n    if (!hasAnyInput(input)) {\n      return NextResponse.json({ ...UNKNOWN_ENTITLEMENT, ...history })\n    }\n    const result = await context.resolver.resolveEntitlement(\n      input,\n      { tenantId: context.tenantId, organizationId: context.organizationId },\n      context.em,\n    )\n    return NextResponse.json({ ...result, ...history })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.entitlement.get failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.load_failed', 'Failed to load warranty claim data') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Resolve warranty entitlement',\n  methods: {\n    GET: {\n      summary: 'Resolve warranty entitlement for serial, order, product, SKU, or purchase date facts',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Resolved warranty entitlement',\n          schema: entitlementResultSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,WAAW;AACpB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AAEpC,SAAS,0CAA0C;AAMnD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AA0C7C,MAAM,sBAAiD;AAAA,EACrD,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,WAAW;AAAA,EACX,QAAQ;AACV;AAEA,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAClD,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACzC,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACjD,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC7C,CAAC,EACA,OAAO;AAEV,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,gBAAgB,EAAE,KAAK,CAAC,eAAe,mBAAmB,SAAS,CAAC;AAAA,EACpE,cAAc,EAAE,KAAK,CAAC,YAAY,YAAY,MAAM,CAAC,EAAE,SAAS;AAAA,EAChE,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,QAAQ,EAAE,KAAK,CAAC,gBAAgB,SAAS,UAAU,UAAU,CAAC,EAAE,SAAS;AAAA,EACzE,gBAAgB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACrC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,EACzD,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,EAChE,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AACpD,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC5E;AAEA,SAAS,YAAY,OAA0C;AAC7D,SAAO,OAAO,OAAO,KAAK,EAAE,KAAK,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,CAAC;AAClG;AAEA,SAAS,eAAe,OAA8D;AACpF,SAAO;AAAA,IACL,cAAc,MAAM,cAAc,KAAK,KAAK;AAAA,IAC5C,SAAS,MAAM,WAAW;AAAA,IAC1B,WAAW,MAAM,aAAa;AAAA,IAC9B,WAAW,MAAM,aAAa;AAAA,IAC9B,KAAK,MAAM,KAAK,KAAK,KAAK;AAAA,IAC1B,cAAc,MAAM,cAAc,KAAK,KAAK;AAAA,EAC9C;AACF;AAEA,SAAS,aAAa,OAAkD;AACtE,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,QAAM,SAAS,OAAO,KAAK;AAC3B,SAAO,OAAO,SAAS,MAAM,IAAI,KAAK,MAAM,MAAM,IAAI;AACxD;AAEA,eAAe,0BAA0B,KAAgD;AACvF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,oBAAoB,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACpG,QAAM,iBAAiB,mBAAmB,cAAc,KAAK,SAAS;AACtE,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,kCAAkC,EAAE,CAAC;AAAA,EACvI;AACA,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf;AAAA,IACA,IAAI,UAAU,QAAuB,IAAI,EAAE,KAAK;AAAA,IAChD,UAAU,UAAU,QAAqC,6BAA6B;AAAA,EACxF;AACF;AAEA,eAAe,qBACb,SACA,cACA,gBAC6H;AAC7H,QAAM,SAAS,cAAc,KAAK;AAClC,MAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,QAAM,KAAK,QAAQ,GAAG,UAAgC;AACtD,MAAI,aAAa,GACd,WAAW,sBAAsB,EACjC,UAAU,mBAAmB,sBAAsB,+BAA+B,EAClF,OAAO,6CAA6C,EACpD,SAAS,EACT,MAAM,kCAAkC,KAAK,QAAQ,QAAQ,EAC7D,MAAM,wCAAwC,KAAK,QAAQ,cAAc,EACzE,MAAM,sCAAsC,KAAK,MAAM,EACvD,MAAM,mCAAmC,MAAM,IAAI,EACnD,MAAM,6BAA6B,KAAK,QAAQ,QAAQ,EACxD,MAAM,mCAAmC,KAAK,QAAQ,cAAc,EACpE,MAAM,8BAA8B,MAAM,IAAI;AACjD,MAAI,gBAAgB;AAClB,iBAAa,WAAW,MAAM,iCAAiC,MAAM,cAAc;AAAA,EACrF;AACA,QAAM,YAAY,MAAM,WAAW,QAAQ;AAC3C,QAAM,sBAAsB,MAAM,KAAK,IAAI;AAAA,IACzC,UACG,IAAI,CAAC,QAAQ,IAAI,WAAW,EAC5B,OAAO,CAAC,gBAAuC,OAAO,gBAAgB,YAAY,YAAY,SAAS,CAAC;AAAA,EAC7G,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAClD,QAAM,kBAAkB,MAAM,GAC3B,WAAW,8BAA8B,EACzC,OAAO,cAAqC,GAAG,OAAO,CAAC,EACvD,MAAM,aAAa,KAAK,QAAQ,QAAQ,EACxC,MAAM,mBAAmB,KAAK,QAAQ,cAAc,EACpD,MAAM,iBAAiB,KAAK,MAAM,EAClC,MAAM,cAAc,MAAM,IAAI,EAC9B,iBAAiB;AACpB,QAAM,kBAAkB,oBAAoB;AAC5C,SAAO;AAAA,IACL,gBAAgB,kBAAkB;AAAA,IAClC;AAAA,IACA,wBAAwB,aAAa,iBAAiB,KAAK;AAAA,IAC3D,qBAAqB,oBAAoB,MAAM,GAAG,CAAC;AAAA,EACrD;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,YAAY,CAAC;AACpE,UAAM,QAAQ,eAAe,KAAK;AAClC,UAAM,UAAU,MAAM,0BAA0B,GAAG;AACnD,UAAM,UAAU,MAAM,qBAAqB,SAAS,MAAM,cAAc,MAAM,cAAc;AAC5F,QAAI,CAAC,YAAY,KAAK,GAAG;AACvB,aAAO,aAAa,KAAK,EAAE,GAAG,qBAAqB,GAAG,QAAQ,CAAC;AAAA,IACjE;AACA,UAAM,SAAS,MAAM,QAAQ,SAAS;AAAA,MACpC;AAAA,MACA,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,MACrE,QAAQ;AAAA,IACV;AACA,WAAO,aAAa,KAAK,EAAE,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAAA,EACpD,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,0CAA0C,EAAE,IAAI,CAAC;AAC9D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,oCAAoC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5I;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/warranty_claims/api/events/route.js

@@ -0,0 +1,199 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { WarrantyClaimEvent } from "../../data/entities.js";
+import { commentClaimInputSchema } from "../../data/validators.js";
+import { requireScopedClaim, WARRANTY_CLAIM_RESOURCE_KIND } from "../../commands/shared.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("warranty_claims");
+const eventListQuerySchema = z.object({
+  claimId: z.string().uuid()
+});
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["warranty_claims.claim.view"] },
+  POST: { requireAuth: true, requireFeatures: ["warranty_claims.claim.manage"] }
+};
+function toRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function relationId(value) {
+  if (typeof value === "string") return value;
+  const record = toRecord(value);
+  return typeof record.id === "string" ? record.id : null;
+}
+function toIso(value) {
+  if (value instanceof Date) return value.toISOString();
+  if (typeof value === "string") {
+    const date = new Date(value);
+    return Number.isNaN(date.getTime()) ? value : date.toISOString();
+  }
+  return null;
+}
+function serializeEvent(event) {
+  return {
+    id: event.id,
+    claimId: relationId(event.claim),
+    kind: event.kind,
+    visibility: event.visibility,
+    body: event.body ?? null,
+    payload: event.payload ?? null,
+    actorUserId: event.actorUserId ?? null,
+    actorCustomerId: event.actorCustomerId ?? null,
+    createdAt: toIso(event.createdAt)
+  };
+}
+async function resolveEventContext(req) {
+  const container = await createRequestContainer();
+  const auth = await getAuthFromRequest(req);
+  const { translate } = await resolveTranslations();
+  if (!auth || !auth.tenantId) {
+    throw new CrudHttpError(401, { error: translate("warranty_claims.errors.unauthorized", "Unauthorized") });
+  }
+  const organizationScope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+  const organizationId = organizationScope?.selectedId ?? auth.orgId ?? null;
+  if (!organizationId) {
+    throw new CrudHttpError(400, { error: translate("warranty_claims.errors.organization_required", "Organization context is required") });
+  }
+  const em = container.resolve("em");
+  return {
+    ctx: {
+      container,
+      auth,
+      organizationScope,
+      selectedOrganizationId: organizationId,
+      organizationIds: organizationScope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+      request: req
+    },
+    tenantId: auth.tenantId,
+    organizationId,
+    scope: { tenantId: auth.tenantId, organizationId },
+    translate,
+    em
+  };
+}
+async function runCommentGuard(req, context, input) {
+  const userId = context.ctx.auth?.sub;
+  if (!userId) {
+    throw new CrudHttpError(401, { error: context.translate("warranty_claims.errors.unauthorized", "Unauthorized") });
+  }
+  return runRouteMutationGuards({
+    container: context.ctx.container,
+    req,
+    auth: {
+      userId,
+      tenantId: context.tenantId,
+      organizationId: context.organizationId
+    },
+    input: {
+      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,
+      resourceId: input.claimId,
+      operation: "custom",
+      mutationPayload: { ...input }
+    }
+  });
+}
+async function GET(req) {
+  try {
+    const context = await resolveEventContext(req);
+    const url = new URL(req.url);
+    const query = eventListQuerySchema.parse({ claimId: url.searchParams.get("claimId") ?? void 0 });
+    const claim = await requireScopedClaim(context.em, query.claimId, context.scope);
+    const events = await findWithDecryption(
+      context.em,
+      WarrantyClaimEvent,
+      { claim: claim.id, tenantId: context.scope.tenantId, organizationId: context.scope.organizationId },
+      { orderBy: { createdAt: "ASC" } },
+      context.scope
+    );
+    return NextResponse.json({ items: events.map(serializeEvent) });
+  } catch (err) {
+    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });
+    }
+    logger.error("warranty_claims.events.get failed", { err });
+    return NextResponse.json({ error: translate("warranty_claims.errors.notFound", "Warranty claim not found.") }, { status: 404 });
+  }
+}
+async function POST(req) {
+  try {
+    const context = await resolveEventContext(req);
+    const payload = toRecord(await readJsonSafe(req, {}));
+    const parsed = commentClaimInputSchema.parse(payload);
+    const input = { ...parsed, actorCustomerId: void 0 };
+    const guarded = await runCommentGuard(req, context, input);
+    if (!guarded.ok) {
+      return guarded.response;
+    }
+    const commandInput = guarded.modifiedPayload ? { ...commentClaimInputSchema.parse(guarded.modifiedPayload), actorCustomerId: void 0 } : input;
+    const commandBus = context.ctx.container.resolve("commandBus");
+    const { result } = await commandBus.execute(
+      "warranty_claims.claim.comment",
+      { input: commandInput, ctx: context.ctx }
+    );
+    await guarded.runAfterSuccess();
+    return NextResponse.json({ ok: true, claimId: result?.claimId ?? commandInput.claimId });
+  } catch (err) {
+    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });
+    }
+    logger.error("warranty_claims.events.post failed", { err });
+    return NextResponse.json({ error: translate("warranty_claims.errors.save_failed", "Failed to save warranty claim") }, { status: 400 });
+  }
+}
+const eventSchema = z.object({
+  id: z.string().uuid(),
+  claimId: z.string().uuid().nullable(),
+  kind: z.string(),
+  visibility: z.string(),
+  body: z.string().nullable(),
+  payload: z.record(z.string(), z.unknown()).nullable(),
+  actorUserId: z.string().uuid().nullable(),
+  actorCustomerId: z.string().uuid().nullable(),
+  createdAt: z.string().nullable()
+});
+const openApi = {
+  tag: "Warranty Claims",
+  summary: "Warranty claim timeline events",
+  methods: {
+    GET: {
+      summary: "List timeline events for a claim",
+      query: eventListQuerySchema,
+      responses: [
+        {
+          status: 200,
+          description: "Timeline events",
+          schema: z.object({ items: z.array(eventSchema) })
+        }
+      ]
+    },
+    POST: {
+      summary: "Append a staff comment to a claim timeline",
+      requestBody: { contentType: "application/json", schema: commentClaimInputSchema },
+      responses: [
+        {
+          status: 200,
+          description: "Comment appended",
+          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid() })
+        }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/events/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/warranty_claims/api/events/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WarrantyClaimEvent } from '../../data/entities'\nimport { commentClaimInputSchema, type CommentClaimInput } from '../../data/validators'\nimport { requireScopedClaim, WARRANTY_CLAIM_RESOURCE_KIND, type WarrantyClaimScope } from '../../commands/shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\nconst eventListQuerySchema = z.object({\n  claimId: z.string().uuid(),\n})\n\ntype EventRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  scope: WarrantyClaimScope\n  translate: (key: string, fallback?: string) => string\n  em: EntityManager\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['warranty_claims.claim.view'] },\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.claim.manage'] },\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nfunction relationId(value: unknown): string | null {\n  if (typeof value === 'string') return value\n  const record = toRecord(value)\n  return typeof record.id === 'string' ? record.id : null\n}\n\nfunction toIso(value: unknown): string | null {\n  if (value instanceof Date) return value.toISOString()\n  if (typeof value === 'string') {\n    const date = new Date(value)\n    return Number.isNaN(date.getTime()) ? value : date.toISOString()\n  }\n  return null\n}\n\nfunction serializeEvent(event: WarrantyClaimEvent) {\n  return {\n    id: event.id,\n    claimId: relationId(event.claim),\n    kind: event.kind,\n    visibility: event.visibility,\n    body: event.body ?? null,\n    payload: event.payload ?? null,\n    actorUserId: event.actorUserId ?? null,\n    actorCustomerId: event.actorCustomerId ?? null,\n    createdAt: toIso(event.createdAt),\n  }\n}\n\nasync function resolveEventContext(req: Request): Promise<EventRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const organizationScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = organizationScope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required') })\n  }\n  const em = container.resolve('em') as EntityManager\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope,\n      selectedOrganizationId: organizationId,\n      organizationIds: organizationScope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    scope: { tenantId: auth.tenantId, organizationId },\n    translate,\n    em,\n  }\n}\n\nasync function runCommentGuard(\n  req: Request,\n  context: EventRouteContext,\n  input: CommentClaimInput,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: context.translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: input.claimId,\n      operation: 'custom',\n      mutationPayload: { ...input },\n    },\n  })\n}\n\nexport async function GET(req: Request) {\n  try {\n    const context = await resolveEventContext(req)\n    const url = new URL(req.url)\n    const query = eventListQuerySchema.parse({ claimId: url.searchParams.get('claimId') ?? undefined })\n    const claim = await requireScopedClaim(context.em, query.claimId, context.scope)\n    const events = await findWithDecryption(\n      context.em,\n      WarrantyClaimEvent,\n      { claim: claim.id, tenantId: context.scope.tenantId, organizationId: context.scope.organizationId },\n      { orderBy: { createdAt: 'ASC' } },\n      context.scope,\n    )\n    return NextResponse.json({ items: events.map(serializeEvent) })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.events.get failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.notFound', 'Warranty claim not found.') }, { status: 404 })\n  }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveEventContext(req)\n    const payload = toRecord(await readJsonSafe(req, {}))\n    const parsed = commentClaimInputSchema.parse(payload)\n    const input: CommentClaimInput = { ...parsed, actorCustomerId: undefined }\n    const guarded = await runCommentGuard(req, context, input)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const commandInput = guarded.modifiedPayload\n      ? { ...commentClaimInputSchema.parse(guarded.modifiedPayload), actorCustomerId: undefined }\n      : input\n\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute<CommentClaimInput, { claimId: string }>(\n      'warranty_claims.claim.comment',\n      { input: commandInput, ctx: context.ctx },\n    )\n\n    await guarded.runAfterSuccess()\n\n    return NextResponse.json({ ok: true, claimId: result?.claimId ?? commandInput.claimId })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.events.post failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.save_failed', 'Failed to save warranty claim') }, { status: 400 })\n  }\n}\n\nconst eventSchema = z.object({\n  id: z.string().uuid(),\n  claimId: z.string().uuid().nullable(),\n  kind: z.string(),\n  visibility: z.string(),\n  body: z.string().nullable(),\n  payload: z.record(z.string(), z.unknown()).nullable(),\n  actorUserId: z.string().uuid().nullable(),\n  actorCustomerId: z.string().uuid().nullable(),\n  createdAt: z.string().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Warranty claim timeline events',\n  methods: {\n    GET: {\n      summary: 'List timeline events for a claim',\n      query: eventListQuerySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Timeline events',\n          schema: z.object({ items: z.array(eventSchema) }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Append a staff comment to a claim timeline',\n      requestBody: { contentType: 'application/json', schema: commentClaimInputSchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Comment appended',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,8BAA6D;AACtE,SAAS,0BAA0B;AAEnC,SAAS,0BAA0B;AACnC,SAAS,+BAAuD;AAChE,SAAS,oBAAoB,oCAA6D;AAC1F,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAE7C,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC;AAWM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA,EAC1E,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAC/E;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,SAAS,WAAW,OAA+B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,SAAS,SAAS,KAAK;AAC7B,SAAO,OAAO,OAAO,OAAO,WAAW,OAAO,KAAK;AACrD;AAEA,SAAS,MAAM,OAA+B;AAC5C,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,WAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AAAA,EACjE;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAA2B;AACjD,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,SAAS,WAAW,MAAM,KAAK;AAAA,IAC/B,MAAM,MAAM;AAAA,IACZ,YAAY,MAAM;AAAA,IAClB,MAAM,MAAM,QAAQ;AAAA,IACpB,SAAS,MAAM,WAAW;AAAA,IAC1B,aAAa,MAAM,eAAe;AAAA,IAClC,iBAAiB,MAAM,mBAAmB;AAAA,IAC1C,WAAW,MAAM,MAAM,SAAS;AAAA,EAClC;AACF;AAEA,eAAe,oBAAoB,KAA0C;AAC3E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,oBAAoB,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACpG,QAAM,iBAAiB,mBAAmB,cAAc,KAAK,SAAS;AACtE,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,kCAAkC,EAAE,CAAC;AAAA,EACvI;AACA,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA;AAAA,MACA,wBAAwB;AAAA,MACxB,iBAAiB,mBAAmB,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAC9E,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA,OAAO,EAAE,UAAU,KAAK,UAAU,eAAe;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,gBACb,KACA,SACA,OACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAClH;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,UAAU,MAAM,oBAAoB,GAAG;AAC7C,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,qBAAqB,MAAM,EAAE,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK,OAAU,CAAC;AAClG,UAAM,QAAQ,MAAM,mBAAmB,QAAQ,IAAI,MAAM,SAAS,QAAQ,KAAK;AAC/E,UAAM,SAAS,MAAM;AAAA,MACnB,QAAQ;AAAA,MACR;AAAA,MACA,EAAE,OAAO,MAAM,IAAI,UAAU,QAAQ,MAAM,UAAU,gBAAgB,QAAQ,MAAM,eAAe;AAAA,MAClG,EAAE,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,MAChC,QAAQ;AAAA,IACV;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,OAAO,IAAI,cAAc,EAAE,CAAC;AAAA,EAChE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,qCAAqC,EAAE,IAAI,CAAC;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,mCAAmC,2BAA2B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChI;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,oBAAoB,GAAG;AAC7C,UAAM,UAAU,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACpD,UAAM,SAAS,wBAAwB,MAAM,OAAO;AACpD,UAAM,QAA2B,EAAE,GAAG,QAAQ,iBAAiB,OAAU;AACzE,UAAM,UAAU,MAAM,gBAAgB,KAAK,SAAS,KAAK;AACzD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,eAAe,QAAQ,kBACzB,EAAE,GAAG,wBAAwB,MAAM,QAAQ,eAAe,GAAG,iBAAiB,OAAU,IACxF;AAEJ,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAC7D,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA,EAAE,OAAO,cAAc,KAAK,QAAQ,IAAI;AAAA,IAC1C;AAEA,UAAM,QAAQ,gBAAgB;AAE9B,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,QAAQ,WAAW,aAAa,QAAQ,CAAC;AAAA,EACzF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,sCAAsC,EAAE,IAAI,CAAC;AAC1D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,+BAA+B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvI;AACF;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,MAAM,EAAE,OAAO;AAAA,EACf,YAAY,EAAE,OAAO;AAAA,EACrB,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC5C,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,EAAE,CAAC;AAAA,QAClD;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,wBAAwB;AAAA,MAChF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,QAClE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}