@open-mercato/core 0.6.8-develop.6998.1.d2bc46c56c → 0.6.8-develop.7001.1.03608ab252

package/dist/modules/warranty_claims/api/portal/claims/[id]/route.js

@@ -0,0 +1,178 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { getCustomerAuthFromRequest } from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { WarrantyClaimLine } from "../../../../data/entities.js";
+import { loadPortalOwnedClaim } from "../../../../lib/portalClaimAccess.js";
+const metadata = {
+  GET: { requireAuth: false }
+};
+function toIso(value) {
+  if (!value) return null;
+  if (value instanceof Date) return value.toISOString();
+  const date = new Date(value);
+  return Number.isNaN(date.getTime()) ? value : date.toISOString();
+}
+async function resolveClaimId(ctx) {
+  try {
+    const params = await ctx.params;
+    return typeof params.id === "string" && params.id.trim().length ? params.id.trim() : null;
+  } catch {
+    return null;
+  }
+}
+async function resolvePortalContext(req) {
+  const auth = await getCustomerAuthFromRequest(req);
+  if (!auth) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.unauthorized" }, { status: 401 });
+  }
+  if (!auth.customerEntityId) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.customerAccountNotLinked" }, { status: 403 });
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em");
+  return {
+    auth,
+    customerId: auth.customerEntityId,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    em
+  };
+}
+function serializeLine(line) {
+  return {
+    id: line.id,
+    lineNo: line.lineNo,
+    productId: line.productId ?? null,
+    sku: line.sku ?? null,
+    productName: line.productName ?? null,
+    orderLineId: line.orderLineId ?? null,
+    serialNumber: line.serialNumber ?? null,
+    faultCode: line.faultCode ?? null,
+    faultDescription: line.faultDescription ?? null,
+    qtyClaimed: line.qtyClaimed,
+    qtyApproved: line.qtyApproved ?? null,
+    disposition: line.disposition ?? null,
+    lineStatus: line.lineStatus,
+    creditAmount: line.creditAmount ?? null,
+    createdAt: toIso(line.createdAt),
+    updatedAt: toIso(line.updatedAt)
+  };
+}
+function serializeClaim(claim, lines) {
+  return {
+    id: claim.id,
+    claimNumber: claim.claimNumber,
+    claimType: claim.claimType,
+    status: claim.status,
+    channel: claim.channel,
+    priority: claim.priority,
+    customerId: claim.customerId ?? null,
+    customerName: claim.customerName ?? null,
+    orderId: claim.orderId ?? null,
+    orderNumber: claim.orderNumber ?? null,
+    reasonCode: claim.reasonCode ?? null,
+    rejectionReasonCode: claim.rejectionReasonCode ?? null,
+    resolutionSummary: claim.resolutionSummary ?? null,
+    slaDueAt: toIso(claim.slaDueAt),
+    submittedAt: toIso(claim.submittedAt),
+    resolvedAt: toIso(claim.resolvedAt),
+    closedAt: toIso(claim.closedAt),
+    createdAt: toIso(claim.createdAt),
+    updatedAt: toIso(claim.updatedAt),
+    lines: lines.map(serializeLine)
+  };
+}
+async function GET(req, ctx) {
+  const contextOrResponse = await resolvePortalContext(req);
+  if (contextOrResponse instanceof Response) return contextOrResponse;
+  const context = contextOrResponse;
+  const claimId = await resolveClaimId(ctx);
+  if (!claimId) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const scope = { tenantId: context.tenantId, organizationId: context.organizationId };
+  const claim = await loadPortalOwnedClaim(
+    context.em,
+    {
+      tenantId: context.tenantId,
+      organizationId: context.organizationId,
+      customerId: context.customerId
+    },
+    claimId
+  );
+  if (!claim) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const lines = await findWithDecryption(
+    context.em,
+    WarrantyClaimLine,
+    { claim: claim.id, tenantId: context.tenantId, organizationId: context.organizationId, deletedAt: null },
+    { orderBy: { lineNo: "ASC" } },
+    scope
+  );
+  return NextResponse.json({ item: serializeClaim(claim, lines) });
+}
+const lineSchema = z.object({
+  id: z.string().uuid(),
+  lineNo: z.number().int(),
+  productId: z.string().uuid().nullable(),
+  sku: z.string().nullable(),
+  productName: z.string().nullable(),
+  orderLineId: z.string().uuid().nullable(),
+  serialNumber: z.string().nullable(),
+  faultCode: z.string().nullable(),
+  faultDescription: z.string().nullable(),
+  qtyClaimed: z.string(),
+  qtyApproved: z.string().nullable(),
+  disposition: z.string().nullable(),
+  lineStatus: z.string(),
+  creditAmount: z.string().nullable(),
+  createdAt: z.string().nullable(),
+  updatedAt: z.string().nullable()
+});
+const claimSchema = z.object({
+  id: z.string().uuid(),
+  claimNumber: z.string(),
+  claimType: z.string(),
+  status: z.string(),
+  channel: z.string(),
+  priority: z.string(),
+  customerId: z.string().uuid().nullable(),
+  customerName: z.string().nullable(),
+  orderId: z.string().uuid().nullable(),
+  orderNumber: z.string().nullable(),
+  reasonCode: z.string().nullable(),
+  rejectionReasonCode: z.string().nullable(),
+  resolutionSummary: z.string().nullable(),
+  slaDueAt: z.string().nullable(),
+  submittedAt: z.string().nullable(),
+  resolvedAt: z.string().nullable(),
+  closedAt: z.string().nullable(),
+  createdAt: z.string().nullable(),
+  updatedAt: z.string().nullable(),
+  lines: z.array(lineSchema)
+});
+const openApi = {
+  tag: "Warranty Claims Portal",
+  summary: "Customer portal warranty claim detail",
+  methods: {
+    GET: {
+      summary: "Read one authenticated customer claim",
+      responses: [
+        {
+          status: 200,
+          description: "Customer claim detail",
+          schema: z.object({ item: claimSchema })
+        }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/portal/claims/[id]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/warranty_claims/api/portal/claims/%5Bid%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { getCustomerAuthFromRequest, type CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WarrantyClaim, WarrantyClaimLine } from '../../../../data/entities'\nimport { loadPortalOwnedClaim } from '../../../../lib/portalClaimAccess'\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\ntype RouteParams = { id: string }\ntype RouteContext = { params: Promise<RouteParams> }\n\ntype PortalContext = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  em: EntityManager\n}\n\nfunction toIso(value: Date | string | null | undefined): string | null {\n  if (!value) return null\n  if (value instanceof Date) return value.toISOString()\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? value : date.toISOString()\n}\n\nasync function resolveClaimId(ctx: RouteContext): Promise<string | null> {\n  try {\n    const params = await ctx.params\n    return typeof params.id === 'string' && params.id.trim().length ? params.id.trim() : null\n  } catch {\n    return null\n  }\n}\n\nasync function resolvePortalContext(req: Request): Promise<PortalContext | Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.unauthorized' }, { status: 401 })\n  }\n  if (!auth.customerEntityId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.customerAccountNotLinked' }, { status: 403 })\n  }\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  return {\n    auth,\n    customerId: auth.customerEntityId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    em,\n  }\n}\n\nfunction serializeLine(line: WarrantyClaimLine) {\n  return {\n    id: line.id,\n    lineNo: line.lineNo,\n    productId: line.productId ?? null,\n    sku: line.sku ?? null,\n    productName: line.productName ?? null,\n    orderLineId: line.orderLineId ?? null,\n    serialNumber: line.serialNumber ?? null,\n    faultCode: line.faultCode ?? null,\n    faultDescription: line.faultDescription ?? null,\n    qtyClaimed: line.qtyClaimed,\n    qtyApproved: line.qtyApproved ?? null,\n    disposition: line.disposition ?? null,\n    lineStatus: line.lineStatus,\n    creditAmount: line.creditAmount ?? null,\n    createdAt: toIso(line.createdAt),\n    updatedAt: toIso(line.updatedAt),\n  }\n}\n\nfunction serializeClaim(claim: WarrantyClaim, lines: WarrantyClaimLine[]) {\n  return {\n    id: claim.id,\n    claimNumber: claim.claimNumber,\n    claimType: claim.claimType,\n    status: claim.status,\n    channel: claim.channel,\n    priority: claim.priority,\n    customerId: claim.customerId ?? null,\n    customerName: claim.customerName ?? null,\n    orderId: claim.orderId ?? null,\n    orderNumber: claim.orderNumber ?? null,\n    reasonCode: claim.reasonCode ?? null,\n    rejectionReasonCode: claim.rejectionReasonCode ?? null,\n    resolutionSummary: claim.resolutionSummary ?? null,\n    slaDueAt: toIso(claim.slaDueAt),\n    submittedAt: toIso(claim.submittedAt),\n    resolvedAt: toIso(claim.resolvedAt),\n    closedAt: toIso(claim.closedAt),\n    createdAt: toIso(claim.createdAt),\n    updatedAt: toIso(claim.updatedAt),\n    lines: lines.map(serializeLine),\n  }\n}\n\nexport async function GET(req: Request, ctx: RouteContext) {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const claimId = await resolveClaimId(ctx)\n  if (!claimId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const scope = { tenantId: context.tenantId, organizationId: context.organizationId }\n  const claim = await loadPortalOwnedClaim(\n    context.em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const lines = await findWithDecryption(\n    context.em,\n    WarrantyClaimLine,\n    { claim: claim.id, tenantId: context.tenantId, organizationId: context.organizationId, deletedAt: null },\n    { orderBy: { lineNo: 'ASC' } },\n    scope,\n  )\n  return NextResponse.json({ item: serializeClaim(claim, lines) })\n}\n\nconst lineSchema = z.object({\n  id: z.string().uuid(),\n  lineNo: z.number().int(),\n  productId: z.string().uuid().nullable(),\n  sku: z.string().nullable(),\n  productName: z.string().nullable(),\n  orderLineId: z.string().uuid().nullable(),\n  serialNumber: z.string().nullable(),\n  faultCode: z.string().nullable(),\n  faultDescription: z.string().nullable(),\n  qtyClaimed: z.string(),\n  qtyApproved: z.string().nullable(),\n  disposition: z.string().nullable(),\n  lineStatus: z.string(),\n  creditAmount: z.string().nullable(),\n  createdAt: z.string().nullable(),\n  updatedAt: z.string().nullable(),\n})\n\nconst claimSchema = z.object({\n  id: z.string().uuid(),\n  claimNumber: z.string(),\n  claimType: z.string(),\n  status: z.string(),\n  channel: z.string(),\n  priority: z.string(),\n  customerId: z.string().uuid().nullable(),\n  customerName: z.string().nullable(),\n  orderId: z.string().uuid().nullable(),\n  orderNumber: z.string().nullable(),\n  reasonCode: z.string().nullable(),\n  rejectionReasonCode: z.string().nullable(),\n  resolutionSummary: z.string().nullable(),\n  slaDueAt: z.string().nullable(),\n  submittedAt: z.string().nullable(),\n  resolvedAt: z.string().nullable(),\n  closedAt: z.string().nullable(),\n  createdAt: z.string().nullable(),\n  updatedAt: z.string().nullable(),\n  lines: z.array(lineSchema),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim detail',\n  methods: {\n    GET: {\n      summary: 'Read one authenticated customer claim',\n      responses: [\n        {\n          status: 200,\n          description: 'Customer claim detail',\n          schema: z.object({ item: claimSchema }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,kCAA4D;AAErE,SAAwB,yBAAyB;AACjD,SAAS,4BAA4B;AAE9B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAaA,SAAS,MAAM,OAAwD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AACjE;AAEA,eAAe,eAAe,KAA2C;AACvE,MAAI;AACF,UAAM,SAAS,MAAM,IAAI;AACzB,WAAO,OAAO,OAAO,OAAO,YAAY,OAAO,GAAG,KAAK,EAAE,SAAS,OAAO,GAAG,KAAK,IAAI;AAAA,EACvF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,qBAAqB,KAAiD;AACnF,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,MAAI,CAAC,KAAK,kBAAkB;AAC1B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kDAAkD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnH;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO;AAAA,IACL;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,EACF;AACF;AAEA,SAAS,cAAc,MAAyB;AAC9C,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK,aAAa;AAAA,IAC7B,KAAK,KAAK,OAAO;AAAA,IACjB,aAAa,KAAK,eAAe;AAAA,IACjC,aAAa,KAAK,eAAe;AAAA,IACjC,cAAc,KAAK,gBAAgB;AAAA,IACnC,WAAW,KAAK,aAAa;AAAA,IAC7B,kBAAkB,KAAK,oBAAoB;AAAA,IAC3C,YAAY,KAAK;AAAA,IACjB,aAAa,KAAK,eAAe;AAAA,IACjC,aAAa,KAAK,eAAe;AAAA,IACjC,YAAY,KAAK;AAAA,IACjB,cAAc,KAAK,gBAAgB;AAAA,IACnC,WAAW,MAAM,KAAK,SAAS;AAAA,IAC/B,WAAW,MAAM,KAAK,SAAS;AAAA,EACjC;AACF;AAEA,SAAS,eAAe,OAAsB,OAA4B;AACxE,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,aAAa,MAAM;AAAA,IACnB,WAAW,MAAM;AAAA,IACjB,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,IACf,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,cAAc;AAAA,IAChC,cAAc,MAAM,gBAAgB;AAAA,IACpC,SAAS,MAAM,WAAW;AAAA,IAC1B,aAAa,MAAM,eAAe;AAAA,IAClC,YAAY,MAAM,cAAc;AAAA,IAChC,qBAAqB,MAAM,uBAAuB;AAAA,IAClD,mBAAmB,MAAM,qBAAqB;AAAA,IAC9C,UAAU,MAAM,MAAM,QAAQ;AAAA,IAC9B,aAAa,MAAM,MAAM,WAAW;AAAA,IACpC,YAAY,MAAM,MAAM,UAAU;AAAA,IAClC,UAAU,MAAM,MAAM,QAAQ;AAAA,IAC9B,WAAW,MAAM,MAAM,SAAS;AAAA,IAChC,WAAW,MAAM,MAAM,SAAS;AAAA,IAChC,OAAO,MAAM,IAAI,aAAa;AAAA,EAChC;AACF;AAEA,eAAsB,IAAI,KAAc,KAAmB;AACzD,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,UAAU,MAAM,eAAe,GAAG;AACxC,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,QAAQ,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AACnF,QAAM,QAAQ,MAAM;AAAA,IAClB,QAAQ;AAAA,IACR;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,QAAQ,MAAM;AAAA,IAClB,QAAQ;AAAA,IACR;AAAA,IACA,EAAE,OAAO,MAAM,IAAI,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,gBAAgB,WAAW,KAAK;AAAA,IACvG,EAAE,SAAS,EAAE,QAAQ,MAAM,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,aAAa,KAAK,EAAE,MAAM,eAAe,OAAO,KAAK,EAAE,CAAC;AACjE;AAEA,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,IAAI;AAAA,EACvB,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,YAAY,EAAE,OAAO;AAAA,EACrB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO;AAAA,EACrB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO;AAAA,EACtB,WAAW,EAAE,OAAO;AAAA,EACpB,QAAQ,EAAE,OAAO;AAAA,EACjB,SAAS,EAAE,OAAO;AAAA,EAClB,UAAU,EAAE,OAAO;AAAA,EACnB,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACvC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,OAAO,EAAE,MAAM,UAAU;AAC3B,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/warranty_claims/api/portal/claims/[id]/shared.js

@@ -0,0 +1,101 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { getCustomerAuthFromRequest } from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { WARRANTY_CLAIM_RESOURCE_KIND } from "../../../../commands/shared.js";
+import { loadPortalOwnedClaim } from "../../../../lib/portalClaimAccess.js";
+const claimIdParamSchema = z.string().uuid();
+async function resolvePortalClaimId(ctx) {
+  try {
+    const params = await ctx.params;
+    const parsed = claimIdParamSchema.safeParse(typeof params.id === "string" ? params.id.trim() : params.id);
+    return parsed.success ? parsed.data : null;
+  } catch {
+    return null;
+  }
+}
+async function resolvePortalActionContext(req) {
+  const auth = await getCustomerAuthFromRequest(req);
+  if (!auth) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.unauthorized" }, { status: 401 });
+  }
+  if (!auth.customerEntityId) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.customerAccountNotLinked" }, { status: 403 });
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em");
+  const commandAuth = {
+    sub: auth.sub,
+    sid: auth.sid,
+    tenantId: auth.tenantId,
+    orgId: auth.orgId,
+    email: auth.email,
+    customerEntityId: auth.customerEntityId ?? null,
+    personEntityId: auth.personEntityId ?? null
+  };
+  return {
+    auth,
+    customerId: auth.customerEntityId,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    em,
+    commandCtx: {
+      container,
+      auth: commandAuth,
+      organizationScope: null,
+      selectedOrganizationId: auth.orgId,
+      organizationIds: [auth.orgId],
+      request: req
+    }
+  };
+}
+async function loadOwnedClaim(context, claimId) {
+  return loadPortalOwnedClaim(
+    context.em,
+    {
+      tenantId: context.tenantId,
+      organizationId: context.organizationId,
+      customerId: context.customerId
+    },
+    claimId
+  );
+}
+async function loadOwnedClaimFresh(context, claimId) {
+  const em = context.em.fork();
+  return loadPortalOwnedClaim(
+    em,
+    {
+      tenantId: context.tenantId,
+      organizationId: context.organizationId,
+      customerId: context.customerId
+    },
+    claimId
+  );
+}
+async function runPortalClaimActionGuard(req, context, claimId, mutationPayload) {
+  return runRouteMutationGuards({
+    container: context.commandCtx.container,
+    req,
+    auth: {
+      userId: context.auth.sub,
+      tenantId: context.tenantId,
+      organizationId: context.organizationId,
+      userFeatures: []
+    },
+    input: {
+      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,
+      resourceId: claimId,
+      operation: "custom",
+      mutationPayload
+    }
+  });
+}
+export {
+  loadOwnedClaim,
+  loadOwnedClaimFresh,
+  resolvePortalActionContext,
+  resolvePortalClaimId,
+  runPortalClaimActionGuard
+};
+//# sourceMappingURL=shared.js.map

package/dist/modules/warranty_claims/api/portal/claims/[id]/shared.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/warranty_claims/api/portal/claims/%5Bid%5D/shared.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { getCustomerAuthFromRequest, type CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport { WarrantyClaim } from '../../../../data/entities'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../../../commands/shared'\nimport { loadPortalOwnedClaim } from '../../../../lib/portalClaimAccess'\n\nexport type PortalClaimActionRouteContext = { params: Promise<{ id: string }> }\n\nexport type PortalClaimActionContext = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  em: EntityManager\n  commandCtx: CommandRuntimeContext\n}\n\nconst claimIdParamSchema = z.string().uuid()\n\nexport async function resolvePortalClaimId(ctx: PortalClaimActionRouteContext): Promise<string | null> {\n  try {\n    const params = await ctx.params\n    const parsed = claimIdParamSchema.safeParse(typeof params.id === 'string' ? params.id.trim() : params.id)\n    return parsed.success ? parsed.data : null\n  } catch {\n    return null\n  }\n}\n\nexport async function resolvePortalActionContext(req: Request): Promise<PortalClaimActionContext | Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.unauthorized' }, { status: 401 })\n  }\n  if (!auth.customerEntityId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.customerAccountNotLinked' }, { status: 403 })\n  }\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const commandAuth: NonNullable<AuthContext> = {\n    sub: auth.sub,\n    sid: auth.sid,\n    tenantId: auth.tenantId,\n    orgId: auth.orgId,\n    email: auth.email,\n    customerEntityId: auth.customerEntityId ?? null,\n    personEntityId: auth.personEntityId ?? null,\n  }\n  return {\n    auth,\n    customerId: auth.customerEntityId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    em,\n    commandCtx: {\n      container,\n      auth: commandAuth,\n      organizationScope: null,\n      selectedOrganizationId: auth.orgId,\n      organizationIds: [auth.orgId],\n      request: req,\n    },\n  }\n}\n\nexport async function loadOwnedClaim(\n  context: PortalClaimActionContext,\n  claimId: string,\n): Promise<WarrantyClaim | null> {\n  return loadPortalOwnedClaim(\n    context.em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n}\n\nexport async function loadOwnedClaimFresh(\n  context: PortalClaimActionContext,\n  claimId: string,\n): Promise<WarrantyClaim | null> {\n  const em = context.em.fork()\n  return loadPortalOwnedClaim(\n    em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n}\n\nexport async function runPortalClaimActionGuard(\n  req: Request,\n  context: PortalClaimActionContext,\n  claimId: string,\n  mutationPayload: Record<string, unknown>,\n): Promise<RouteMutationGuardResult> {\n  return runRouteMutationGuards({\n    container: context.commandCtx.container,\n    req,\n    auth: {\n      userId: context.auth.sub,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      userFeatures: [],\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: claimId,\n      operation: 'custom',\n      mutationPayload,\n    },\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,8BAA8B;AAEvC,SAAS,8BAA6D;AACtE,SAAS,kCAA4D;AAErE,SAAS,oCAAoC;AAC7C,SAAS,4BAA4B;AAarC,MAAM,qBAAqB,EAAE,OAAO,EAAE,KAAK;AAE3C,eAAsB,qBAAqB,KAA4D;AACrG,MAAI;AACF,UAAM,SAAS,MAAM,IAAI;AACzB,UAAM,SAAS,mBAAmB,UAAU,OAAO,OAAO,OAAO,WAAW,OAAO,GAAG,KAAK,IAAI,OAAO,EAAE;AACxG,WAAO,OAAO,UAAU,OAAO,OAAO;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,2BAA2B,KAA4D;AAC3G,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,MAAI,CAAC,KAAK,kBAAkB;AAC1B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kDAAkD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnH;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,cAAwC;AAAA,IAC5C,KAAK,KAAK;AAAA,IACV,KAAK,KAAK;AAAA,IACV,UAAU,KAAK;AAAA,IACf,OAAO,KAAK;AAAA,IACZ,OAAO,KAAK;AAAA,IACZ,kBAAkB,KAAK,oBAAoB;AAAA,IAC3C,gBAAgB,KAAK,kBAAkB;AAAA,EACzC;AACA,SAAO;AAAA,IACL;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA,YAAY;AAAA,MACV;AAAA,MACA,MAAM;AAAA,MACN,mBAAmB;AAAA,MACnB,wBAAwB,KAAK;AAAA,MAC7B,iBAAiB,CAAC,KAAK,KAAK;AAAA,MAC5B,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,eAAsB,eACpB,SACA,SAC+B;AAC/B,SAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,oBACpB,SACA,SAC+B;AAC/B,QAAM,KAAK,QAAQ,GAAG,KAAK;AAC3B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,0BACpB,KACA,SACA,SACA,iBACmC;AACnC,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,WAAW;AAAA,IAC9B;AAAA,IACA,MAAM;AAAA,MACJ,QAAQ,QAAQ,KAAK;AAAA,MACrB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,cAAc,CAAC;AAAA,IACjB;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX;AAAA,IACF;AAAA,EACF,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/warranty_claims/api/portal/claims/[id]/submit/route.js

@@ -0,0 +1,78 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import {
+  loadOwnedClaim,
+  loadOwnedClaimFresh,
+  resolvePortalActionContext,
+  resolvePortalClaimId,
+  runPortalClaimActionGuard
+} from "../shared.js";
+const metadata = {
+  POST: { requireAuth: false }
+};
+async function POST(req, ctx) {
+  const contextOrResponse = await resolvePortalActionContext(req);
+  if (contextOrResponse instanceof Response) return contextOrResponse;
+  const context = contextOrResponse;
+  const claimId = await resolvePortalClaimId(ctx);
+  if (!claimId) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const claim = await loadOwnedClaim(context, claimId);
+  if (!claim) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  if (claim.status !== "draft") {
+    const { translate } = await resolveTranslations();
+    return NextResponse.json(
+      { ok: false, error: translate("warranty_claims.errors.invalidTransition", "That status change is not allowed.") },
+      { status: 400 }
+    );
+  }
+  const guarded = await runPortalClaimActionGuard(req, context, claim.id, {
+    id: claim.id,
+    action: "submit"
+  });
+  if (!guarded.ok) {
+    return guarded.response;
+  }
+  const commandBus = context.commandCtx.container.resolve("commandBus");
+  try {
+    await commandBus.execute(
+      "warranty_claims.claim.submit",
+      { input: { id: claim.id, actorCustomerId: context.customerId }, ctx: context.commandCtx }
+    );
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    throw err;
+  }
+  await guarded.runAfterSuccess();
+  const updated = await loadOwnedClaimFresh(context, claim.id);
+  return NextResponse.json({ ok: true, claimId: claim.id, status: updated?.status ?? "submitted" });
+}
+const openApi = {
+  tag: "Warranty Claims Portal",
+  summary: "Customer portal warranty claim submit action",
+  methods: {
+    POST: {
+      summary: "Submit an owned draft claim from the customer portal",
+      responses: [
+        {
+          status: 200,
+          description: "Claim submitted",
+          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid(), status: z.string() })
+        }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/portal/claims/[id]/submit/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/warranty_claims/api/portal/claims/%5Bid%5D/submit/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  loadOwnedClaim,\n  loadOwnedClaimFresh,\n  resolvePortalActionContext,\n  resolvePortalClaimId,\n  runPortalClaimActionGuard,\n  type PortalClaimActionRouteContext,\n} from '../shared'\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nexport async function POST(req: Request, ctx: PortalClaimActionRouteContext) {\n  const contextOrResponse = await resolvePortalActionContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const claimId = await resolvePortalClaimId(ctx)\n  if (!claimId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const claim = await loadOwnedClaim(context, claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  if (claim.status !== 'draft') {\n    const { translate } = await resolveTranslations()\n    return NextResponse.json(\n      { ok: false, error: translate('warranty_claims.errors.invalidTransition', 'That status change is not allowed.') },\n      { status: 400 },\n    )\n  }\n\n  const guarded = await runPortalClaimActionGuard(req, context, claim.id, {\n    id: claim.id,\n    action: 'submit',\n  })\n  if (!guarded.ok) {\n    return guarded.response\n  }\n\n  const commandBus = context.commandCtx.container.resolve('commandBus') as CommandBus\n  try {\n    await commandBus.execute<{ id: string; actorCustomerId: string }, { claimId: string }>(\n      'warranty_claims.claim.submit',\n      { input: { id: claim.id, actorCustomerId: context.customerId }, ctx: context.commandCtx },\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  await guarded.runAfterSuccess()\n\n  const updated = await loadOwnedClaimFresh(context, claim.id)\n  return NextResponse.json({ ok: true, claimId: claim.id, status: updated?.status ?? 'submitted' })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim submit action',\n  methods: {\n    POST: {\n      summary: 'Submit an owned draft claim from the customer portal',\n      responses: [\n        {\n          status: 200,\n          description: 'Claim submitted',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid(), status: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,uBAAuB;AAChC,SAAS,2BAA2B;AAEpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,eAAsB,KAAK,KAAc,KAAoC;AAC3E,QAAM,oBAAoB,MAAM,2BAA2B,GAAG;AAC9D,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO;AACnD,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,MAAI,MAAM,WAAW,SAAS;AAC5B,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,aAAa;AAAA,MAClB,EAAE,IAAI,OAAO,OAAO,UAAU,4CAA4C,oCAAoC,EAAE;AAAA,MAChH,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,0BAA0B,KAAK,SAAS,MAAM,IAAI;AAAA,IACtE,IAAI,MAAM;AAAA,IACV,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,aAAa,QAAQ,WAAW,UAAU,QAAQ,YAAY;AACpE,MAAI;AACF,UAAM,WAAW;AAAA,MACf;AAAA,MACA,EAAE,OAAO,EAAE,IAAI,MAAM,IAAI,iBAAiB,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW;AAAA,IAC1F;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,QAAM,QAAQ,gBAAgB;AAE9B,QAAM,UAAU,MAAM,oBAAoB,SAAS,MAAM,EAAE;AAC3D,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,IAAI,QAAQ,SAAS,UAAU,YAAY,CAAC;AAClG;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC;AAAA,QACtF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/warranty_claims/api/portal/claims/[id]/withdraw/route.js

@@ -0,0 +1,81 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import {
+  loadOwnedClaim,
+  resolvePortalActionContext,
+  resolvePortalClaimId,
+  runPortalClaimActionGuard
+} from "../shared.js";
+const metadata = {
+  POST: { requireAuth: false }
+};
+const PORTAL_WITHDRAWABLE_STATUSES = /* @__PURE__ */ new Set(["draft", "submitted"]);
+async function POST(req, ctx) {
+  const contextOrResponse = await resolvePortalActionContext(req);
+  if (contextOrResponse instanceof Response) return contextOrResponse;
+  const context = contextOrResponse;
+  const claimId = await resolvePortalClaimId(ctx);
+  if (!claimId) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const claim = await loadOwnedClaim(context, claimId);
+  if (!claim) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  if (!PORTAL_WITHDRAWABLE_STATUSES.has(claim.status)) {
+    const { translate } = await resolveTranslations();
+    return NextResponse.json(
+      { ok: false, error: translate("warranty_claims.errors.invalidTransition", "That status change is not allowed.") },
+      { status: 400 }
+    );
+  }
+  const guarded = await runPortalClaimActionGuard(req, context, claim.id, {
+    id: claim.id,
+    action: "withdraw",
+    toStatus: "cancelled"
+  });
+  if (!guarded.ok) {
+    return guarded.response;
+  }
+  const commandBus = context.commandCtx.container.resolve("commandBus");
+  try {
+    await commandBus.execute(
+      "warranty_claims.claim.transition",
+      {
+        input: { id: claim.id, toStatus: "cancelled", actorCustomerId: context.customerId },
+        ctx: context.commandCtx
+      }
+    );
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    throw err;
+  }
+  await guarded.runAfterSuccess();
+  return NextResponse.json({ ok: true, claimId: claim.id, status: "cancelled" });
+}
+const openApi = {
+  tag: "Warranty Claims Portal",
+  summary: "Customer portal warranty claim withdraw action",
+  methods: {
+    POST: {
+      summary: "Withdraw (cancel) an owned claim while it is draft or submitted",
+      responses: [
+        {
+          status: 200,
+          description: "Claim withdrawn",
+          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid(), status: z.literal("cancelled") })
+        }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/portal/claims/[id]/withdraw/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/warranty_claims/api/portal/claims/%5Bid%5D/withdraw/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { TransitionClaimInput, WarrantyClaimStatus } from '../../../../../data/validators'\nimport {\n  loadOwnedClaim,\n  resolvePortalActionContext,\n  resolvePortalClaimId,\n  runPortalClaimActionGuard,\n  type PortalClaimActionRouteContext,\n} from '../shared'\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst PORTAL_WITHDRAWABLE_STATUSES = new Set<WarrantyClaimStatus>(['draft', 'submitted'])\n\nexport async function POST(req: Request, ctx: PortalClaimActionRouteContext) {\n  const contextOrResponse = await resolvePortalActionContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const claimId = await resolvePortalClaimId(ctx)\n  if (!claimId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const claim = await loadOwnedClaim(context, claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  if (!PORTAL_WITHDRAWABLE_STATUSES.has(claim.status)) {\n    const { translate } = await resolveTranslations()\n    return NextResponse.json(\n      { ok: false, error: translate('warranty_claims.errors.invalidTransition', 'That status change is not allowed.') },\n      { status: 400 },\n    )\n  }\n\n  const guarded = await runPortalClaimActionGuard(req, context, claim.id, {\n    id: claim.id,\n    action: 'withdraw',\n    toStatus: 'cancelled',\n  })\n  if (!guarded.ok) {\n    return guarded.response\n  }\n\n  const commandBus = context.commandCtx.container.resolve('commandBus') as CommandBus\n  try {\n    await commandBus.execute<TransitionClaimInput, { claimId: string }>(\n      'warranty_claims.claim.transition',\n      {\n        input: { id: claim.id, toStatus: 'cancelled', actorCustomerId: context.customerId },\n        ctx: context.commandCtx,\n      },\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  await guarded.runAfterSuccess()\n\n  return NextResponse.json({ ok: true, claimId: claim.id, status: 'cancelled' })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim withdraw action',\n  methods: {\n    POST: {\n      summary: 'Withdraw (cancel) an owned claim while it is draft or submitted',\n      responses: [\n        {\n          status: 200,\n          description: 'Claim withdrawn',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid(), status: z.literal('cancelled') }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,uBAAuB;AAChC,SAAS,2BAA2B;AAGpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,+BAA+B,oBAAI,IAAyB,CAAC,SAAS,WAAW,CAAC;AAExF,eAAsB,KAAK,KAAc,KAAoC;AAC3E,QAAM,oBAAoB,MAAM,2BAA2B,GAAG;AAC9D,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO;AACnD,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,MAAI,CAAC,6BAA6B,IAAI,MAAM,MAAM,GAAG;AACnD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,aAAa;AAAA,MAClB,EAAE,IAAI,OAAO,OAAO,UAAU,4CAA4C,oCAAoC,EAAE;AAAA,MAChH,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,0BAA0B,KAAK,SAAS,MAAM,IAAI;AAAA,IACtE,IAAI,MAAM;AAAA,IACV,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AACD,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,aAAa,QAAQ,WAAW,UAAU,QAAQ,YAAY;AACpE,MAAI;AACF,UAAM,WAAW;AAAA,MACf;AAAA,MACA;AAAA,QACE,OAAO,EAAE,IAAI,MAAM,IAAI,UAAU,aAAa,iBAAiB,QAAQ,WAAW;AAAA,QAClF,KAAK,QAAQ;AAAA,MACf;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,QAAM,QAAQ,gBAAgB;AAE9B,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,IAAI,QAAQ,YAAY,CAAC;AAC/E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,GAAG,QAAQ,EAAE,QAAQ,WAAW,EAAE,CAAC;AAAA,QAClG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}