@open-mercato/core 0.6.8-develop.6998.1.d2bc46c56c → 0.6.8-develop.7001.1.03608ab252

package/dist/modules/warranty_claims/api/portal/events/route.js

@@ -0,0 +1,228 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { getCustomerAuthFromRequest } from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { WarrantyClaimEvent } from "../../../data/entities.js";
+import { WARRANTY_CLAIM_RESOURCE_KIND } from "../../../commands/shared.js";
+import { loadPortalOwnedClaim } from "../../../lib/portalClaimAccess.js";
+const metadata = {
+  GET: { requireAuth: false },
+  POST: { requireAuth: false }
+};
+const eventQuerySchema = z.object({
+  claimId: z.string().uuid()
+});
+const portalCommentSchema = z.object({
+  claimId: z.string().uuid(),
+  body: z.string().trim().min(1).max(8e3)
+}).strict();
+function toRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function relationId(value) {
+  if (typeof value === "string") return value;
+  const record = toRecord(value);
+  return typeof record.id === "string" ? record.id : null;
+}
+function toIso(value) {
+  if (!value) return null;
+  if (value instanceof Date) return value.toISOString();
+  const date = new Date(value);
+  return Number.isNaN(date.getTime()) ? value : date.toISOString();
+}
+function serializeEvent(event) {
+  return {
+    id: event.id,
+    claimId: relationId(event.claim),
+    kind: event.kind,
+    visibility: event.visibility,
+    body: event.body ?? null,
+    payload: event.payload ?? null,
+    actorCustomerId: event.actorCustomerId ?? null,
+    createdAt: toIso(event.createdAt)
+  };
+}
+async function resolvePortalContext(req) {
+  const auth = await getCustomerAuthFromRequest(req);
+  if (!auth) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.unauthorized" }, { status: 401 });
+  }
+  if (!auth.customerEntityId) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.customerAccountNotLinked" }, { status: 403 });
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em");
+  const commandAuth = {
+    sub: auth.sub,
+    sid: auth.sid,
+    tenantId: auth.tenantId,
+    orgId: auth.orgId,
+    email: auth.email,
+    customerEntityId: auth.customerEntityId ?? null,
+    personEntityId: auth.personEntityId ?? null
+  };
+  return {
+    auth,
+    customerId: auth.customerEntityId,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    em,
+    commandCtx: {
+      container,
+      auth: commandAuth,
+      organizationScope: null,
+      selectedOrganizationId: auth.orgId,
+      organizationIds: [auth.orgId],
+      request: req
+    }
+  };
+}
+async function loadOwnedClaim(context, claimId) {
+  return loadPortalOwnedClaim(
+    context.em,
+    {
+      tenantId: context.tenantId,
+      organizationId: context.organizationId,
+      customerId: context.customerId
+    },
+    claimId
+  );
+}
+async function runPortalCommentGuard(req, context, claimId, mutationPayload) {
+  return runRouteMutationGuards({
+    container: context.commandCtx.container,
+    req,
+    auth: {
+      userId: context.auth.sub,
+      tenantId: context.tenantId,
+      organizationId: context.organizationId,
+      userFeatures: []
+    },
+    input: {
+      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,
+      resourceId: claimId,
+      operation: "create",
+      mutationPayload
+    }
+  });
+}
+async function GET(req) {
+  const contextOrResponse = await resolvePortalContext(req);
+  if (contextOrResponse instanceof Response) return contextOrResponse;
+  const context = contextOrResponse;
+  const url = new URL(req.url);
+  const parsed = eventQuerySchema.safeParse({ claimId: url.searchParams.get("claimId") ?? void 0 });
+  if (!parsed.success) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.invalidInput" }, { status: 400 });
+  }
+  const claim = await loadOwnedClaim(context, parsed.data.claimId);
+  if (!claim) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const events = await findWithDecryption(
+    context.em,
+    WarrantyClaimEvent,
+    { claim: claim.id, visibility: "customer", tenantId: context.tenantId, organizationId: context.organizationId },
+    { orderBy: { createdAt: "ASC" } },
+    { tenantId: context.tenantId, organizationId: context.organizationId }
+  );
+  return NextResponse.json({ items: events.map(serializeEvent) });
+}
+async function POST(req) {
+  const contextOrResponse = await resolvePortalContext(req);
+  if (contextOrResponse instanceof Response) return contextOrResponse;
+  const context = contextOrResponse;
+  let body;
+  try {
+    body = await req.json();
+  } catch {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.invalidInput" }, { status: 400 });
+  }
+  const parsed = portalCommentSchema.safeParse(body);
+  if (!parsed.success) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.invalidInput" }, { status: 400 });
+  }
+  const claim = await loadOwnedClaim(context, parsed.data.claimId);
+  if (!claim) {
+    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+  }
+  const input = {
+    claimId: claim.id,
+    body: parsed.data.body,
+    visibility: "customer",
+    actorCustomerId: context.customerId
+  };
+  const guarded = await runPortalCommentGuard(req, context, claim.id, { ...input });
+  if (!guarded.ok) {
+    return guarded.response;
+  }
+  const effectiveInput = guarded.modifiedPayload ? {
+    ...input,
+    ...guarded.modifiedPayload,
+    claimId: input.claimId,
+    visibility: input.visibility,
+    actorCustomerId: input.actorCustomerId
+  } : input;
+  const commandBus = context.commandCtx.container.resolve("commandBus");
+  try {
+    await commandBus.execute(
+      "warranty_claims.claim.comment",
+      { input: effectiveInput, ctx: context.commandCtx }
+    );
+    await guarded.runAfterSuccess();
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    throw err;
+  }
+  return NextResponse.json({ ok: true, claimId: claim.id });
+}
+const eventSchema = z.object({
+  id: z.string().uuid(),
+  claimId: z.string().uuid().nullable(),
+  kind: z.string(),
+  visibility: z.literal("customer"),
+  body: z.string().nullable(),
+  payload: z.record(z.string(), z.unknown()).nullable(),
+  actorCustomerId: z.string().uuid().nullable(),
+  createdAt: z.string().nullable()
+});
+const openApi = {
+  tag: "Warranty Claims Portal",
+  summary: "Customer portal warranty claim timeline",
+  methods: {
+    GET: {
+      summary: "List customer-visible timeline events for an owned claim",
+      query: eventQuerySchema,
+      responses: [
+        {
+          status: 200,
+          description: "Customer-visible timeline events",
+          schema: z.object({ items: z.array(eventSchema) })
+        }
+      ]
+    },
+    POST: {
+      summary: "Append a customer-visible customer comment",
+      requestBody: { contentType: "application/json", schema: portalCommentSchema },
+      responses: [
+        {
+          status: 200,
+          description: "Comment appended",
+          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid() })
+        }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/portal/events/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/warranty_claims/api/portal/events/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getCustomerAuthFromRequest, type CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport { WarrantyClaim, WarrantyClaimEvent } from '../../../data/entities'\nimport type { CommentClaimInput } from '../../../data/validators'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../../commands/shared'\nimport { loadPortalOwnedClaim } from '../../../lib/portalClaimAccess'\n\nexport const metadata = {\n  GET: { requireAuth: false },\n  POST: { requireAuth: false },\n}\n\nconst eventQuerySchema = z.object({\n  claimId: z.string().uuid(),\n})\n\nconst portalCommentSchema = z\n  .object({\n    claimId: z.string().uuid(),\n    body: z.string().trim().min(1).max(8000),\n  })\n  .strict()\n\ntype PortalContext = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  em: EntityManager\n  commandCtx: CommandRuntimeContext\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nfunction relationId(value: unknown): string | null {\n  if (typeof value === 'string') return value\n  const record = toRecord(value)\n  return typeof record.id === 'string' ? record.id : null\n}\n\nfunction toIso(value: Date | string | null | undefined): string | null {\n  if (!value) return null\n  if (value instanceof Date) return value.toISOString()\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? value : date.toISOString()\n}\n\nfunction serializeEvent(event: WarrantyClaimEvent) {\n  return {\n    id: event.id,\n    claimId: relationId(event.claim),\n    kind: event.kind,\n    visibility: event.visibility,\n    body: event.body ?? null,\n    payload: event.payload ?? null,\n    actorCustomerId: event.actorCustomerId ?? null,\n    createdAt: toIso(event.createdAt),\n  }\n}\n\nasync function resolvePortalContext(req: Request): Promise<PortalContext | Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.unauthorized' }, { status: 401 })\n  }\n  if (!auth.customerEntityId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.customerAccountNotLinked' }, { status: 403 })\n  }\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const commandAuth: NonNullable<AuthContext> = {\n    sub: auth.sub,\n    sid: auth.sid,\n    tenantId: auth.tenantId,\n    orgId: auth.orgId,\n    email: auth.email,\n    customerEntityId: auth.customerEntityId ?? null,\n    personEntityId: auth.personEntityId ?? null,\n  }\n  return {\n    auth,\n    customerId: auth.customerEntityId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    em,\n    commandCtx: {\n      container,\n      auth: commandAuth,\n      organizationScope: null,\n      selectedOrganizationId: auth.orgId,\n      organizationIds: [auth.orgId],\n      request: req,\n    },\n  }\n}\n\nasync function loadOwnedClaim(context: PortalContext, claimId: string): Promise<WarrantyClaim | null> {\n  return loadPortalOwnedClaim(\n    context.em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n}\n\nasync function runPortalCommentGuard(\n  req: Request,\n  context: PortalContext,\n  claimId: string,\n  mutationPayload: Record<string, unknown>,\n): Promise<RouteMutationGuardResult> {\n  return runRouteMutationGuards({\n    container: context.commandCtx.container,\n    req,\n    auth: {\n      userId: context.auth.sub,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      userFeatures: [],\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: claimId,\n      operation: 'create',\n      mutationPayload,\n    },\n  })\n}\n\nexport async function GET(req: Request) {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const url = new URL(req.url)\n  const parsed = eventQuerySchema.safeParse({ claimId: url.searchParams.get('claimId') ?? undefined })\n  if (!parsed.success) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n  }\n  const claim = await loadOwnedClaim(context, parsed.data.claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const events = await findWithDecryption(\n    context.em,\n    WarrantyClaimEvent,\n    { claim: claim.id, visibility: 'customer', tenantId: context.tenantId, organizationId: context.organizationId },\n    { orderBy: { createdAt: 'ASC' } },\n    { tenantId: context.tenantId, organizationId: context.organizationId },\n  )\n  return NextResponse.json({ items: events.map(serializeEvent) })\n}\n\nexport async function POST(req: Request) {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  let body: unknown\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n  }\n  const parsed = portalCommentSchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n  }\n  const claim = await loadOwnedClaim(context, parsed.data.claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const input: CommentClaimInput = {\n    claimId: claim.id,\n    body: parsed.data.body,\n    visibility: 'customer',\n    actorCustomerId: context.customerId,\n  }\n  const guarded = await runPortalCommentGuard(req, context, claim.id, { ...input })\n  if (!guarded.ok) {\n    return guarded.response\n  }\n  const effectiveInput: CommentClaimInput = guarded.modifiedPayload\n    ? {\n        ...input,\n        ...guarded.modifiedPayload,\n        claimId: input.claimId,\n        visibility: input.visibility,\n        actorCustomerId: input.actorCustomerId,\n      }\n    : input\n\n  const commandBus = context.commandCtx.container.resolve('commandBus') as CommandBus\n  try {\n    await commandBus.execute<CommentClaimInput, { claimId: string }>(\n      'warranty_claims.claim.comment',\n      { input: effectiveInput, ctx: context.commandCtx },\n    )\n    await guarded.runAfterSuccess()\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  return NextResponse.json({ ok: true, claimId: claim.id })\n}\n\nconst eventSchema = z.object({\n  id: z.string().uuid(),\n  claimId: z.string().uuid().nullable(),\n  kind: z.string(),\n  visibility: z.literal('customer'),\n  body: z.string().nullable(),\n  payload: z.record(z.string(), z.unknown()).nullable(),\n  actorCustomerId: z.string().uuid().nullable(),\n  createdAt: z.string().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim timeline',\n  methods: {\n    GET: {\n      summary: 'List customer-visible timeline events for an owned claim',\n      query: eventQuerySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Customer-visible timeline events',\n          schema: z.object({ items: z.array(eventSchema) }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Append a customer-visible customer comment',\n      requestBody: { contentType: 'application/json', schema: portalCommentSchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Comment appended',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,8BAA8B;AAEvC,SAAS,uBAAuB;AAChC,SAAS,8BAA6D;AACtE,SAAS,0BAA0B;AAEnC,SAAS,kCAA4D;AACrE,SAAwB,0BAA0B;AAElD,SAAS,oCAAoC;AAC7C,SAAS,4BAA4B;AAE9B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAAA,EAC1B,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC;AAED,MAAM,sBAAsB,EACzB,OAAO;AAAA,EACN,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI;AACzC,CAAC,EACA,OAAO;AAWV,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,SAAS,WAAW,OAA+B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,SAAS,SAAS,KAAK;AAC7B,SAAO,OAAO,OAAO,OAAO,WAAW,OAAO,KAAK;AACrD;AAEA,SAAS,MAAM,OAAwD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AACjE;AAEA,SAAS,eAAe,OAA2B;AACjD,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,SAAS,WAAW,MAAM,KAAK;AAAA,IAC/B,MAAM,MAAM;AAAA,IACZ,YAAY,MAAM;AAAA,IAClB,MAAM,MAAM,QAAQ;AAAA,IACpB,SAAS,MAAM,WAAW;AAAA,IAC1B,iBAAiB,MAAM,mBAAmB;AAAA,IAC1C,WAAW,MAAM,MAAM,SAAS;AAAA,EAClC;AACF;AAEA,eAAe,qBAAqB,KAAiD;AACnF,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,MAAI,CAAC,KAAK,kBAAkB;AAC1B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kDAAkD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnH;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,cAAwC;AAAA,IAC5C,KAAK,KAAK;AAAA,IACV,KAAK,KAAK;AAAA,IACV,UAAU,KAAK;AAAA,IACf,OAAO,KAAK;AAAA,IACZ,OAAO,KAAK;AAAA,IACZ,kBAAkB,KAAK,oBAAoB;AAAA,IAC3C,gBAAgB,KAAK,kBAAkB;AAAA,EACzC;AACA,SAAO;AAAA,IACL;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA,YAAY;AAAA,MACV;AAAA,MACA,MAAM;AAAA,MACN,mBAAmB;AAAA,MACnB,wBAAwB,KAAK;AAAA,MAC7B,iBAAiB,CAAC,KAAK,KAAK;AAAA,MAC5B,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,eAAe,eAAe,SAAwB,SAAgD;AACpG,SAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,sBACb,KACA,SACA,SACA,iBACmC;AACnC,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,WAAW;AAAA,IAC9B;AAAA,IACA,MAAM;AAAA,MACJ,QAAQ,QAAQ,KAAK;AAAA,MACrB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,cAAc,CAAC;AAAA,IACjB;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,iBAAiB,UAAU,EAAE,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK,OAAU,CAAC;AACnG,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO,KAAK,OAAO;AAC/D,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,SAAS,MAAM;AAAA,IACnB,QAAQ;AAAA,IACR;AAAA,IACA,EAAE,OAAO,MAAM,IAAI,YAAY,YAAY,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,IAC9G,EAAE,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,IAChC,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,EACvE;AACA,SAAO,aAAa,KAAK,EAAE,OAAO,OAAO,IAAI,cAAc,EAAE,CAAC;AAChE;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,QAAM,SAAS,oBAAoB,UAAU,IAAI;AACjD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO,KAAK,OAAO;AAC/D,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,QAA2B;AAAA,IAC/B,SAAS,MAAM;AAAA,IACf,MAAM,OAAO,KAAK;AAAA,IAClB,YAAY;AAAA,IACZ,iBAAiB,QAAQ;AAAA,EAC3B;AACA,QAAM,UAAU,MAAM,sBAAsB,KAAK,SAAS,MAAM,IAAI,EAAE,GAAG,MAAM,CAAC;AAChF,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,QAAQ;AAAA,EACjB;AACA,QAAM,iBAAoC,QAAQ,kBAC9C;AAAA,IACE,GAAG;AAAA,IACH,GAAG,QAAQ;AAAA,IACX,SAAS,MAAM;AAAA,IACf,YAAY,MAAM;AAAA,IAClB,iBAAiB,MAAM;AAAA,EACzB,IACA;AAEJ,QAAM,aAAa,QAAQ,WAAW,UAAU,QAAQ,YAAY;AACpE,MAAI;AACF,UAAM,WAAW;AAAA,MACf;AAAA,MACA,EAAE,OAAO,gBAAgB,KAAK,QAAQ,WAAW;AAAA,IACnD;AACA,UAAM,QAAQ,gBAAgB;AAAA,EAChC,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,GAAG,CAAC;AAC1D;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,MAAM,EAAE,OAAO;AAAA,EACf,YAAY,EAAE,QAAQ,UAAU;AAAA,EAChC,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC5C,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,EAAE,CAAC;AAAA,QAClD;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,oBAAoB;AAAA,MAC5E,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,QAClE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/warranty_claims/api/portal/options/route.js

@@ -0,0 +1,91 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { getCustomerAuthFromRequest } from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { loadWarrantyClaimDictionaryOptions } from "../../../lib/dictionaries.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("warranty_claims");
+const querySchema = z.object({}).strict();
+const optionSchema = z.object({
+  value: z.string(),
+  label: z.string()
+});
+const responseSchema = z.object({
+  ok: z.literal(true),
+  result: z.object({
+    reasons: z.array(optionSchema),
+    faultCodes: z.array(optionSchema)
+  })
+});
+const metadata = {
+  GET: { requireAuth: false }
+};
+async function resolvePortalOptionsContext(req) {
+  const auth = await getCustomerAuthFromRequest(req);
+  const { translate } = await resolveTranslations();
+  if (!auth) {
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.unauthorized", "Unauthorized") }, { status: 401 });
+  }
+  const container = await createRequestContainer();
+  return {
+    auth,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    container
+  };
+}
+async function loadDictionaryOptions(em, context, kind) {
+  try {
+    return await loadWarrantyClaimDictionaryOptions(
+      em,
+      { tenantId: context.tenantId, organizationId: context.organizationId },
+      kind
+    );
+  } catch {
+    return [];
+  }
+}
+async function GET(req) {
+  try {
+    const url = new URL(req.url);
+    querySchema.parse(Object.fromEntries(url.searchParams));
+    const contextOrResponse = await resolvePortalOptionsContext(req);
+    if (contextOrResponse instanceof Response) return contextOrResponse;
+    const context = contextOrResponse;
+    const em = context.container.resolve("em").fork();
+    const reasons = await loadDictionaryOptions(em, context, "warranty-claim-reason");
+    const faultCodes = await loadDictionaryOptions(em, context, "warranty-claim-fault-code");
+    return NextResponse.json({ ok: true, result: { reasons, faultCodes } });
+  } catch (err) {
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });
+    }
+    logger.error("warranty_claims.portal.options.get failed", { err });
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.load_failed", "Failed to load warranty claim data") }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: "Warranty Claims Portal",
+  summary: "Customer portal warranty claim options",
+  methods: {
+    GET: {
+      summary: "List active customer portal warranty claim options",
+      query: querySchema,
+      responses: [
+        {
+          status: 200,
+          description: "Portal warranty claim options",
+          schema: responseSchema
+        }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/portal/options/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/warranty_claims/api/portal/options/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getCustomerAuthFromRequest, type CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { loadWarrantyClaimDictionaryOptions } from '../../../lib/dictionaries'\nimport type { WarrantyClaimDictionaryKind } from '../../../data/constants'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\ntype PortalOptionsContext = {\n  auth: CustomerAuthContext\n  tenantId: string\n  organizationId: string\n  container: Awaited<ReturnType<typeof createRequestContainer>>\n}\n\ntype PortalOption = {\n  value: string\n  label: string\n}\n\nconst querySchema = z.object({}).strict()\n\nconst optionSchema = z.object({\n  value: z.string(),\n  label: z.string(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  result: z.object({\n    reasons: z.array(optionSchema),\n    faultCodes: z.array(optionSchema),\n  }),\n})\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\nasync function resolvePortalOptionsContext(req: Request): Promise<PortalOptionsContext | Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n  const container = await createRequestContainer()\n  return {\n    auth,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    container,\n  }\n}\n\nasync function loadDictionaryOptions(\n  em: EntityManager,\n  context: PortalOptionsContext,\n  kind: WarrantyClaimDictionaryKind,\n): Promise<PortalOption[]> {\n  try {\n    return await loadWarrantyClaimDictionaryOptions(\n      em,\n      { tenantId: context.tenantId, organizationId: context.organizationId },\n      kind,\n    )\n  } catch {\n    return []\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    querySchema.parse(Object.fromEntries(url.searchParams))\n    const contextOrResponse = await resolvePortalOptionsContext(req)\n    if (contextOrResponse instanceof Response) return contextOrResponse\n    const context = contextOrResponse\n    const em = (context.container.resolve('em') as EntityManager).fork()\n    const reasons = await loadDictionaryOptions(em, context, 'warranty-claim-reason')\n    const faultCodes = await loadDictionaryOptions(em, context, 'warranty-claim-fault-code')\n    return NextResponse.json({ ok: true, result: { reasons, faultCodes } })\n  } catch (err) {\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.portal.options.get failed', { err })\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.load_failed', 'Failed to load warranty claim data') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim options',\n  methods: {\n    GET: {\n      summary: 'List active customer portal warranty claim options',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Portal warranty claim options',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,kCAA4D;AAErE,SAAS,0CAA0C;AAEnD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAc7C,MAAM,cAAc,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO;AAExC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,OAAO,EAAE,OAAO;AAAA,EAChB,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EAAE,OAAO;AAAA,IACf,SAAS,EAAE,MAAM,YAAY;AAAA,IAC7B,YAAY,EAAE,MAAM,YAAY;AAAA,EAClC,CAAC;AACH,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,eAAe,4BAA4B,KAAwD;AACjG,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,SAAO;AAAA,IACL;AAAA,IACA,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,EACF;AACF;AAEA,eAAe,sBACb,IACA,SACA,MACyB;AACzB,MAAI;AACF,WAAO,MAAM;AAAA,MACX;AAAA,MACA,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,MACrE;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,gBAAY,MAAM,OAAO,YAAY,IAAI,YAAY,CAAC;AACtD,UAAM,oBAAoB,MAAM,4BAA4B,GAAG;AAC/D,QAAI,6BAA6B,SAAU,QAAO;AAClD,UAAM,UAAU;AAChB,UAAM,KAAM,QAAQ,UAAU,QAAQ,IAAI,EAAoB,KAAK;AACnE,UAAM,UAAU,MAAM,sBAAsB,IAAI,SAAS,uBAAuB;AAChF,UAAM,aAAa,MAAM,sBAAsB,IAAI,SAAS,2BAA2B;AACvF,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;AAAA,EACxE,SAAS,KAAK;AACZ,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AACA,WAAO,MAAM,6CAA6C,EAAE,IAAI,CAAC;AACjE,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,sCAAsC,oCAAoC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvJ;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/warranty_claims/api/portal/orders/lines/route.js

@@ -0,0 +1,172 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { getCustomerAuthFromRequest } from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { resolveEffectiveWarrantyClaimSettings } from "../../../../lib/settings.js";
+import { computeWarrantyEntitlementPreview } from "../../../../lib/warrantyPreview.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("warranty_claims");
+const querySchema = z.object({
+  orderId: z.string().uuid()
+}).strict();
+const orderSchema = z.object({
+  id: z.string().uuid(),
+  placedAt: z.string().nullable()
+});
+const orderLineSchema = z.object({
+  orderLineId: z.string().uuid(),
+  productId: z.string().uuid().nullable(),
+  variantId: z.string().uuid().nullable(),
+  sku: z.string().nullable(),
+  name: z.string().nullable(),
+  quantity: z.union([z.string(), z.number()]).nullable(),
+  estimatedWarrantyStatus: z.enum(["in_warranty", "out_of_warranty", "unknown"]),
+  // Warranty basis for the line so the claim persists real entitlement metadata (WQA-004).
+  purchaseDate: z.string().nullable(),
+  warrantyMonths: z.number().nullable()
+});
+const responseSchema = z.object({
+  ok: z.literal(true),
+  order: orderSchema,
+  items: z.array(orderLineSchema)
+});
+const metadata = {
+  GET: { requireAuth: false }
+};
+function stringField(record, key) {
+  const value = record[key];
+  return typeof value === "string" ? value : null;
+}
+function isMissingTableError(err) {
+  if (typeof err !== "object" || err === null) return false;
+  const candidate = err;
+  return candidate.code === "42P01" || typeof candidate.message === "string" && candidate.message.includes("does not exist");
+}
+function amountField(record, key) {
+  const value = record[key];
+  if (typeof value === "string" || typeof value === "number") return value;
+  return null;
+}
+function toIso(value) {
+  if (!value) return null;
+  if (value instanceof Date) return value.toISOString();
+  if (typeof value === "string") {
+    const date = new Date(value);
+    return Number.isNaN(date.getTime()) ? value : date.toISOString();
+  }
+  return null;
+}
+function estimateWarrantyStatus(placedAt, defaultWarrantyMonths) {
+  if (!placedAt) return "unknown";
+  return computeWarrantyEntitlementPreview(new Date(placedAt), defaultWarrantyMonths);
+}
+async function resolvePortalContext(req) {
+  const auth = await getCustomerAuthFromRequest(req);
+  const { translate } = await resolveTranslations();
+  if (!auth) {
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.unauthorized", "Unauthorized") }, { status: 401 });
+  }
+  if (!auth.customerEntityId) {
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.customerAccountNotLinked", "Customer account is not linked to a customer record") }, { status: 403 });
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em").fork();
+  return {
+    auth,
+    customerId: auth.customerEntityId,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    container,
+    em
+  };
+}
+async function loadOwnedOrder(context, orderId) {
+  try {
+    const db = context.em.getKysely();
+    const row = await db.selectFrom("sales_orders").select(["id", "placed_at"]).where("id", "=", orderId).where("tenant_id", "=", context.tenantId).where("organization_id", "=", context.organizationId).where("customer_entity_id", "=", context.customerId).where("deleted_at", "is", null).executeTakeFirst();
+    if (!row) return null;
+    return { id: row.id, placedAt: toIso(row.placed_at) };
+  } catch (err) {
+    if (isMissingTableError(err)) return null;
+    throw err;
+  }
+}
+function serializeOrderLine(row, estimatedWarrantyStatus, purchaseDate, warrantyMonths) {
+  if (stringField(row, "kind") !== "product") return null;
+  const id = stringField(row, "id");
+  if (!id) return null;
+  const snapshot = row.catalog_snapshot && typeof row.catalog_snapshot === "object" && !Array.isArray(row.catalog_snapshot) ? row.catalog_snapshot : {};
+  return {
+    orderLineId: id,
+    productId: stringField(row, "product_id"),
+    variantId: stringField(row, "product_variant_id"),
+    sku: stringField(row, "sku") ?? stringField(snapshot, "sku") ?? stringField(snapshot, "variantSku") ?? stringField(snapshot, "variant_sku"),
+    name: stringField(row, "name") ?? stringField(snapshot, "title") ?? stringField(snapshot, "name"),
+    quantity: amountField(row, "quantity"),
+    estimatedWarrantyStatus,
+    purchaseDate,
+    warrantyMonths
+  };
+}
+async function GET(req) {
+  try {
+    const url = new URL(req.url);
+    const query = querySchema.parse(Object.fromEntries(url.searchParams));
+    const contextOrResponse = await resolvePortalContext(req);
+    if (contextOrResponse instanceof Response) return contextOrResponse;
+    const context = contextOrResponse;
+    const { translate } = await resolveTranslations();
+    const order = await loadOwnedOrder(context, query.orderId);
+    if (!order) {
+      return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.orderNotOwned", "Order not found") }, { status: 404 });
+    }
+    const settings = await resolveEffectiveWarrantyClaimSettings(context.em, {
+      tenantId: context.tenantId,
+      organizationId: context.organizationId
+    });
+    const estimatedWarrantyStatus = estimateWarrantyStatus(order.placedAt, settings.defaultWarrantyMonths);
+    const db = context.em.getKysely();
+    let rows = [];
+    try {
+      rows = await db.selectFrom("sales_order_lines").select(["id", "order_id", "kind", "product_id", "product_variant_id", "catalog_snapshot", "name", "quantity"]).where("order_id", "=", order.id).where("tenant_id", "=", context.tenantId).where("organization_id", "=", context.organizationId).where("deleted_at", "is", null).limit(100).execute();
+    } catch (err) {
+      if (!isMissingTableError(err)) throw err;
+    }
+    return NextResponse.json({
+      ok: true,
+      order,
+      items: rows.map((row) => serializeOrderLine(row, estimatedWarrantyStatus, order.placedAt, settings.defaultWarrantyMonths)).filter((item) => item !== null)
+    });
+  } catch (err) {
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });
+    }
+    logger.error("warranty_claims.portal.order_lines.get failed", { err });
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.load_failed", "Failed to load warranty claim data") }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: "Warranty Claims Portal",
+  summary: "Customer portal warranty claim order line picker",
+  methods: {
+    GET: {
+      summary: "List product lines for an authenticated customer-owned order",
+      query: querySchema,
+      responses: [
+        {
+          status: 200,
+          description: "Customer-owned sales order product lines",
+          schema: responseSchema
+        }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/portal/orders/lines/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/warranty_claims/api/portal/orders/lines/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getCustomerAuthFromRequest, type CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { resolveEffectiveWarrantyClaimSettings } from '../../../../lib/settings'\nimport { computeWarrantyEntitlementPreview } from '../../../../lib/warrantyPreview'\nimport type { WarrantyClaimWarrantyStatus } from '../../../../data/validators'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\nconst querySchema = z\n  .object({\n    orderId: z.string().uuid(),\n  })\n  .strict()\n\nconst orderSchema = z.object({\n  id: z.string().uuid(),\n  placedAt: z.string().nullable(),\n})\n\nconst orderLineSchema = z.object({\n  orderLineId: z.string().uuid(),\n  productId: z.string().uuid().nullable(),\n  variantId: z.string().uuid().nullable(),\n  sku: z.string().nullable(),\n  name: z.string().nullable(),\n  quantity: z.union([z.string(), z.number()]).nullable(),\n  estimatedWarrantyStatus: z.enum(['in_warranty', 'out_of_warranty', 'unknown']),\n  // Warranty basis for the line so the claim persists real entitlement metadata (WQA-004).\n  purchaseDate: z.string().nullable(),\n  warrantyMonths: z.number().nullable(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  order: orderSchema,\n  items: z.array(orderLineSchema),\n})\n\ntype PortalOrderLinesContext = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  container: Awaited<ReturnType<typeof createRequestContainer>>\n  em: EntityManager\n}\n\ntype OwnedOrder = {\n  id: string\n  placedAt: string | null\n}\n\ntype PortalOrderLineItem = z.infer<typeof orderLineSchema>\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\nfunction stringField(record: Record<string, unknown>, key: string): string | null {\n  const value = record[key]\n  return typeof value === 'string' ? value : null\n}\n\nfunction isMissingTableError(err: unknown): boolean {\n  if (typeof err !== 'object' || err === null) return false\n  const candidate = err as { code?: unknown; message?: unknown }\n  return candidate.code === '42P01'\n    || (typeof candidate.message === 'string' && candidate.message.includes('does not exist'))\n}\n\nfunction amountField(record: Record<string, unknown>, key: string): string | number | null {\n  const value = record[key]\n  if (typeof value === 'string' || typeof value === 'number') return value\n  return null\n}\n\nfunction toIso(value: unknown): string | null {\n  if (!value) return null\n  if (value instanceof Date) return value.toISOString()\n  if (typeof value === 'string') {\n    const date = new Date(value)\n    return Number.isNaN(date.getTime()) ? value : date.toISOString()\n  }\n  return null\n}\n\nfunction estimateWarrantyStatus(placedAt: string | null, defaultWarrantyMonths: number | null): WarrantyClaimWarrantyStatus {\n  if (!placedAt) return 'unknown'\n  return computeWarrantyEntitlementPreview(new Date(placedAt), defaultWarrantyMonths)\n}\n\nasync function resolvePortalContext(req: Request): Promise<PortalOrderLinesContext | Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n  if (!auth.customerEntityId) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.customerAccountNotLinked', 'Customer account is not linked to a customer record') }, { status: 403 })\n  }\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  return {\n    auth,\n    customerId: auth.customerEntityId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    container,\n    em,\n  }\n}\n\ntype PortalOrderLinesDb = {\n  sales_orders: {\n    id: string\n    placed_at: Date | null\n    customer_entity_id: string | null\n    tenant_id: string | null\n    organization_id: string | null\n    deleted_at: Date | null\n  }\n  sales_order_lines: {\n    id: string\n    order_id: string\n    kind: string | null\n    product_id: string | null\n    product_variant_id: string | null\n    catalog_snapshot: Record<string, unknown> | null\n    name: string | null\n    quantity: string | number | null\n    tenant_id: string | null\n    organization_id: string | null\n    deleted_at: Date | null\n  }\n}\n\nasync function loadOwnedOrder(\n  context: PortalOrderLinesContext,\n  orderId: string,\n): Promise<OwnedOrder | null> {\n  try {\n    const db = context.em.getKysely<PortalOrderLinesDb>()\n    const row = await db\n      .selectFrom('sales_orders')\n      .select(['id', 'placed_at'])\n      .where('id', '=', orderId)\n      .where('tenant_id', '=', context.tenantId)\n      .where('organization_id', '=', context.organizationId)\n      .where('customer_entity_id', '=', context.customerId)\n      .where('deleted_at', 'is', null)\n      .executeTakeFirst()\n    if (!row) return null\n    return { id: row.id, placedAt: toIso(row.placed_at) }\n  } catch (err) {\n    if (isMissingTableError(err)) return null\n    throw err\n  }\n}\n\nfunction serializeOrderLine(\n  row: Record<string, unknown>,\n  estimatedWarrantyStatus: WarrantyClaimWarrantyStatus,\n  purchaseDate: string | null,\n  warrantyMonths: number | null,\n): PortalOrderLineItem | null {\n  if (stringField(row, 'kind') !== 'product') return null\n  const id = stringField(row, 'id')\n  if (!id) return null\n  const snapshot = row.catalog_snapshot && typeof row.catalog_snapshot === 'object' && !Array.isArray(row.catalog_snapshot)\n    ? row.catalog_snapshot as Record<string, unknown>\n    : {}\n  return {\n    orderLineId: id,\n    productId: stringField(row, 'product_id'),\n    variantId: stringField(row, 'product_variant_id'),\n    sku: stringField(row, 'sku') ?? stringField(snapshot, 'sku') ?? stringField(snapshot, 'variantSku') ?? stringField(snapshot, 'variant_sku'),\n    name: stringField(row, 'name') ?? stringField(snapshot, 'title') ?? stringField(snapshot, 'name'),\n    quantity: amountField(row, 'quantity'),\n    estimatedWarrantyStatus,\n    purchaseDate,\n    warrantyMonths,\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(url.searchParams))\n    const contextOrResponse = await resolvePortalContext(req)\n    if (contextOrResponse instanceof Response) return contextOrResponse\n    const context = contextOrResponse\n    const { translate } = await resolveTranslations()\n    const order = await loadOwnedOrder(context, query.orderId)\n    if (!order) {\n      return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.orderNotOwned', 'Order not found') }, { status: 404 })\n    }\n\n    const settings = await resolveEffectiveWarrantyClaimSettings(context.em, {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    })\n    const estimatedWarrantyStatus = estimateWarrantyStatus(order.placedAt, settings.defaultWarrantyMonths)\n    const db = context.em.getKysely<PortalOrderLinesDb>()\n    let rows: Array<Record<string, unknown>> = []\n    try {\n      rows = await db\n        .selectFrom('sales_order_lines')\n        .select(['id', 'order_id', 'kind', 'product_id', 'product_variant_id', 'catalog_snapshot', 'name', 'quantity'])\n        .where('order_id', '=', order.id)\n        .where('tenant_id', '=', context.tenantId)\n        .where('organization_id', '=', context.organizationId)\n        .where('deleted_at', 'is', null)\n        .limit(100)\n        .execute() as Array<Record<string, unknown>>\n    } catch (err) {\n      if (!isMissingTableError(err)) throw err\n    }\n\n    return NextResponse.json({\n      ok: true,\n      order,\n      items: rows\n        .map((row) => serializeOrderLine(row, estimatedWarrantyStatus, order.placedAt, settings.defaultWarrantyMonths))\n        .filter((item): item is PortalOrderLineItem => item !== null),\n    })\n  } catch (err) {\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.portal.order_lines.get failed', { err })\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.load_failed', 'Failed to load warranty claim data') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim order line picker',\n  methods: {\n    GET: {\n      summary: 'List product lines for an authenticated customer-owned order',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Customer-owned sales order product lines',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,kCAA4D;AAErE,SAAS,6CAA6C;AACtD,SAAS,yCAAyC;AAElD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAE7C,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC,EACA,OAAO;AAEV,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAED,MAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,EACrD,yBAAyB,EAAE,KAAK,CAAC,eAAe,mBAAmB,SAAS,CAAC;AAAA;AAAA,EAE7E,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,OAAO;AAAA,EACP,OAAO,EAAE,MAAM,eAAe;AAChC,CAAC;AAkBM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,SAAS,YAAY,QAAiC,KAA4B;AAChF,QAAM,QAAQ,OAAO,GAAG;AACxB,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAEA,SAAS,oBAAoB,KAAuB;AAClD,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO;AACpD,QAAM,YAAY;AAClB,SAAO,UAAU,SAAS,WACpB,OAAO,UAAU,YAAY,YAAY,UAAU,QAAQ,SAAS,gBAAgB;AAC5F;AAEA,SAAS,YAAY,QAAiC,KAAqC;AACzF,QAAM,QAAQ,OAAO,GAAG;AACxB,MAAI,OAAO,UAAU,YAAY,OAAO,UAAU,SAAU,QAAO;AACnE,SAAO;AACT;AAEA,SAAS,MAAM,OAA+B;AAC5C,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,WAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AAAA,EACjE;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,UAAyB,uBAAmE;AAC1H,MAAI,CAAC,SAAU,QAAO;AACtB,SAAO,kCAAkC,IAAI,KAAK,QAAQ,GAAG,qBAAqB;AACpF;AAEA,eAAe,qBAAqB,KAA2D;AAC7F,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,MAAI,CAAC,KAAK,kBAAkB;AAC1B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mDAAmD,qDAAqD,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrL;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,SAAO;AAAA,IACL;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA;AAAA,EACF;AACF;AA0BA,eAAe,eACb,SACA,SAC4B;AAC5B,MAAI;AACF,UAAM,KAAK,QAAQ,GAAG,UAA8B;AACpD,UAAM,MAAM,MAAM,GACf,WAAW,cAAc,EACzB,OAAO,CAAC,MAAM,WAAW,CAAC,EAC1B,MAAM,MAAM,KAAK,OAAO,EACxB,MAAM,aAAa,KAAK,QAAQ,QAAQ,EACxC,MAAM,mBAAmB,KAAK,QAAQ,cAAc,EACpD,MAAM,sBAAsB,KAAK,QAAQ,UAAU,EACnD,MAAM,cAAc,MAAM,IAAI,EAC9B,iBAAiB;AACpB,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO,EAAE,IAAI,IAAI,IAAI,UAAU,MAAM,IAAI,SAAS,EAAE;AAAA,EACtD,SAAS,KAAK;AACZ,QAAI,oBAAoB,GAAG,EAAG,QAAO;AACrC,UAAM;AAAA,EACR;AACF;AAEA,SAAS,mBACP,KACA,yBACA,cACA,gBAC4B;AAC5B,MAAI,YAAY,KAAK,MAAM,MAAM,UAAW,QAAO;AACnD,QAAM,KAAK,YAAY,KAAK,IAAI;AAChC,MAAI,CAAC,GAAI,QAAO;AAChB,QAAM,WAAW,IAAI,oBAAoB,OAAO,IAAI,qBAAqB,YAAY,CAAC,MAAM,QAAQ,IAAI,gBAAgB,IACpH,IAAI,mBACJ,CAAC;AACL,SAAO;AAAA,IACL,aAAa;AAAA,IACb,WAAW,YAAY,KAAK,YAAY;AAAA,IACxC,WAAW,YAAY,KAAK,oBAAoB;AAAA,IAChD,KAAK,YAAY,KAAK,KAAK,KAAK,YAAY,UAAU,KAAK,KAAK,YAAY,UAAU,YAAY,KAAK,YAAY,UAAU,aAAa;AAAA,IAC1I,MAAM,YAAY,KAAK,MAAM,KAAK,YAAY,UAAU,OAAO,KAAK,YAAY,UAAU,MAAM;AAAA,IAChG,UAAU,YAAY,KAAK,UAAU;AAAA,IACrC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,YAAY,CAAC;AACpE,UAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,QAAI,6BAA6B,SAAU,QAAO;AAClD,UAAM,UAAU;AAChB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,QAAQ,MAAM,eAAe,SAAS,MAAM,OAAO;AACzD,QAAI,CAAC,OAAO;AACV,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,wCAAwC,iBAAiB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtI;AAEA,UAAM,WAAW,MAAM,sCAAsC,QAAQ,IAAI;AAAA,MACvE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AACD,UAAM,0BAA0B,uBAAuB,MAAM,UAAU,SAAS,qBAAqB;AACrG,UAAM,KAAK,QAAQ,GAAG,UAA8B;AACpD,QAAI,OAAuC,CAAC;AAC5C,QAAI;AACF,aAAO,MAAM,GACV,WAAW,mBAAmB,EAC9B,OAAO,CAAC,MAAM,YAAY,QAAQ,cAAc,sBAAsB,oBAAoB,QAAQ,UAAU,CAAC,EAC7G,MAAM,YAAY,KAAK,MAAM,EAAE,EAC/B,MAAM,aAAa,KAAK,QAAQ,QAAQ,EACxC,MAAM,mBAAmB,KAAK,QAAQ,cAAc,EACpD,MAAM,cAAc,MAAM,IAAI,EAC9B,MAAM,GAAG,EACT,QAAQ;AAAA,IACb,SAAS,KAAK;AACZ,UAAI,CAAC,oBAAoB,GAAG,EAAG,OAAM;AAAA,IACvC;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ;AAAA,MACA,OAAO,KACJ,IAAI,CAAC,QAAQ,mBAAmB,KAAK,yBAAyB,MAAM,UAAU,SAAS,qBAAqB,CAAC,EAC7G,OAAO,CAAC,SAAsC,SAAS,IAAI;AAAA,IAChE,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AACA,WAAO,MAAM,iDAAiD,EAAE,IAAI,CAAC;AACrE,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,sCAAsC,oCAAoC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvJ;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}