@open-mercato/core 0.6.8-develop.6998.1.d2bc46c56c → 0.6.8-develop.7001.1.03608ab252

package/dist/modules/warranty_claims/api/portal/orders/route.js

@@ -0,0 +1,151 @@
+import { NextResponse } from "next/server";
+import { sql } from "kysely";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { getCustomerAuthFromRequest } from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("warranty_claims");
+const PAGE_SIZE = 20;
+const querySchema = z.object({
+  search: z.preprocess(
+    (value) => typeof value === "string" ? value.trim() : value,
+    z.string().max(120).optional()
+  ),
+  page: z.coerce.number().int().min(1).default(1)
+}).strict();
+const orderSchema = z.object({
+  id: z.string().uuid(),
+  orderNumber: z.string(),
+  placedAt: z.string().nullable(),
+  currencyCode: z.string().nullable(),
+  grandTotalGrossAmount: z.union([z.string(), z.number()]).nullable()
+});
+const responseSchema = z.object({
+  ok: z.literal(true),
+  items: z.array(orderSchema),
+  total: z.number().int().nonnegative(),
+  page: z.number().int().min(1),
+  pageSize: z.number().int().min(1)
+});
+const metadata = {
+  GET: { requireAuth: false }
+};
+function stringField(record, key) {
+  const value = record[key];
+  return typeof value === "string" ? value : null;
+}
+function isMissingTableError(err) {
+  if (typeof err !== "object" || err === null) return false;
+  const candidate = err;
+  return candidate.code === "42P01" || typeof candidate.message === "string" && candidate.message.includes("does not exist");
+}
+function amountField(record, key) {
+  const value = record[key];
+  if (typeof value === "string" || typeof value === "number") return value;
+  return null;
+}
+function toIso(value) {
+  if (!value) return null;
+  if (value instanceof Date) return value.toISOString();
+  if (typeof value === "string") {
+    const date = new Date(value);
+    return Number.isNaN(date.getTime()) ? value : date.toISOString();
+  }
+  return null;
+}
+async function resolvePortalContext(req) {
+  const auth = await getCustomerAuthFromRequest(req);
+  const { translate } = await resolveTranslations();
+  if (!auth) {
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.unauthorized", "Unauthorized") }, { status: 401 });
+  }
+  if (!auth.customerEntityId) {
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.customerAccountNotLinked", "Customer account is not linked to a customer record") }, { status: 403 });
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em").fork();
+  return {
+    auth,
+    customerId: auth.customerEntityId,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    container,
+    em
+  };
+}
+function serializeOrder(row) {
+  const id = stringField(row, "id");
+  if (!id) return null;
+  return {
+    id,
+    orderNumber: stringField(row, "order_number") ?? id,
+    placedAt: toIso(row.placed_at),
+    currencyCode: stringField(row, "currency_code"),
+    grandTotalGrossAmount: amountField(row, "grand_total_gross_amount")
+  };
+}
+async function GET(req) {
+  try {
+    const url = new URL(req.url);
+    const query = querySchema.parse(Object.fromEntries(url.searchParams));
+    const contextOrResponse = await resolvePortalContext(req);
+    if (contextOrResponse instanceof Response) return contextOrResponse;
+    const context = contextOrResponse;
+    const db = context.em.getKysely();
+    let listQuery = db.selectFrom("sales_orders").select(["id", "order_number", "placed_at", "currency_code", "grand_total_gross_amount"]).where("tenant_id", "=", context.tenantId).where("organization_id", "=", context.organizationId).where("customer_entity_id", "=", context.customerId).where("deleted_at", "is", null);
+    let countQuery = db.selectFrom("sales_orders").select(sql`count(*)`.as("total")).where("tenant_id", "=", context.tenantId).where("organization_id", "=", context.organizationId).where("customer_entity_id", "=", context.customerId).where("deleted_at", "is", null);
+    if (query.search) {
+      const pattern = `%${escapeLikePattern(query.search)}%`;
+      listQuery = listQuery.where("order_number", "ilike", pattern);
+      countQuery = countQuery.where("order_number", "ilike", pattern);
+    }
+    let rows = [];
+    let total = 0;
+    try {
+      rows = await listQuery.orderBy("placed_at", "desc").limit(PAGE_SIZE).offset((query.page - 1) * PAGE_SIZE).execute();
+      const countRow = await countQuery.executeTakeFirst();
+      total = Number(countRow?.total ?? 0) || 0;
+    } catch (err) {
+      if (!isMissingTableError(err)) throw err;
+    }
+    return NextResponse.json({
+      ok: true,
+      items: rows.map(serializeOrder).filter((item) => item !== null),
+      total,
+      page: query.page,
+      pageSize: PAGE_SIZE
+    });
+  } catch (err) {
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });
+    }
+    logger.error("warranty_claims.portal.orders.get failed", { err });
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.load_failed", "Failed to load warranty claim data") }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: "Warranty Claims Portal",
+  summary: "Customer portal warranty claim order picker",
+  methods: {
+    GET: {
+      summary: "List authenticated customer orders for portal claim intake",
+      query: querySchema,
+      responses: [
+        {
+          status: 200,
+          description: "Customer-owned sales orders",
+          schema: responseSchema
+        }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/portal/orders/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/warranty_claims/api/portal/orders/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { sql } from 'kysely'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getCustomerAuthFromRequest, type CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\nconst PAGE_SIZE = 20\n\nconst querySchema = z\n  .object({\n    search: z.preprocess(\n      (value) => (typeof value === 'string' ? value.trim() : value),\n      z.string().max(120).optional(),\n    ),\n    page: z.coerce.number().int().min(1).default(1),\n  })\n  .strict()\n\nconst orderSchema = z.object({\n  id: z.string().uuid(),\n  orderNumber: z.string(),\n  placedAt: z.string().nullable(),\n  currencyCode: z.string().nullable(),\n  grandTotalGrossAmount: z.union([z.string(), z.number()]).nullable(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  items: z.array(orderSchema),\n  total: z.number().int().nonnegative(),\n  page: z.number().int().min(1),\n  pageSize: z.number().int().min(1),\n})\n\ntype PortalOrdersContext = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  container: Awaited<ReturnType<typeof createRequestContainer>>\n  em: EntityManager\n}\n\ntype PortalOrderItem = z.infer<typeof orderSchema>\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\nfunction stringField(record: Record<string, unknown>, key: string): string | null {\n  const value = record[key]\n  return typeof value === 'string' ? value : null\n}\n\nfunction isMissingTableError(err: unknown): boolean {\n  if (typeof err !== 'object' || err === null) return false\n  const candidate = err as { code?: unknown; message?: unknown }\n  return candidate.code === '42P01'\n    || (typeof candidate.message === 'string' && candidate.message.includes('does not exist'))\n}\n\nfunction amountField(record: Record<string, unknown>, key: string): string | number | null {\n  const value = record[key]\n  if (typeof value === 'string' || typeof value === 'number') return value\n  return null\n}\n\nfunction toIso(value: unknown): string | null {\n  if (!value) return null\n  if (value instanceof Date) return value.toISOString()\n  if (typeof value === 'string') {\n    const date = new Date(value)\n    return Number.isNaN(date.getTime()) ? value : date.toISOString()\n  }\n  return null\n}\n\nasync function resolvePortalContext(req: Request): Promise<PortalOrdersContext | Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n  if (!auth.customerEntityId) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.customerAccountNotLinked', 'Customer account is not linked to a customer record') }, { status: 403 })\n  }\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  return {\n    auth,\n    customerId: auth.customerEntityId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    container,\n    em,\n  }\n}\n\ntype PortalOrdersDb = {\n  sales_orders: {\n    id: string\n    order_number: string\n    placed_at: Date | null\n    currency_code: string\n    grand_total_gross_amount: string | number | null\n    customer_entity_id: string | null\n    tenant_id: string | null\n    organization_id: string | null\n    deleted_at: Date | null\n  }\n}\n\nfunction serializeOrder(row: Record<string, unknown>): PortalOrderItem | null {\n  const id = stringField(row, 'id')\n  if (!id) return null\n  return {\n    id,\n    orderNumber: stringField(row, 'order_number') ?? id,\n    placedAt: toIso(row.placed_at),\n    currencyCode: stringField(row, 'currency_code'),\n    grandTotalGrossAmount: amountField(row, 'grand_total_gross_amount'),\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(url.searchParams))\n    const contextOrResponse = await resolvePortalContext(req)\n    if (contextOrResponse instanceof Response) return contextOrResponse\n    const context = contextOrResponse\n    const db = context.em.getKysely<PortalOrdersDb>()\n    let listQuery = db\n      .selectFrom('sales_orders')\n      .select(['id', 'order_number', 'placed_at', 'currency_code', 'grand_total_gross_amount'])\n      .where('tenant_id', '=', context.tenantId)\n      .where('organization_id', '=', context.organizationId)\n      .where('customer_entity_id', '=', context.customerId)\n      .where('deleted_at', 'is', null)\n    let countQuery = db\n      .selectFrom('sales_orders')\n      .select(sql<string>`count(*)`.as('total'))\n      .where('tenant_id', '=', context.tenantId)\n      .where('organization_id', '=', context.organizationId)\n      .where('customer_entity_id', '=', context.customerId)\n      .where('deleted_at', 'is', null)\n    if (query.search) {\n      const pattern = `%${escapeLikePattern(query.search)}%`\n      listQuery = listQuery.where('order_number', 'ilike', pattern)\n      countQuery = countQuery.where('order_number', 'ilike', pattern)\n    }\n    let rows: Array<Record<string, unknown>> = []\n    let total = 0\n    try {\n      rows = await listQuery\n        .orderBy('placed_at', 'desc')\n        .limit(PAGE_SIZE)\n        .offset((query.page - 1) * PAGE_SIZE)\n        .execute() as Array<Record<string, unknown>>\n      const countRow = await countQuery.executeTakeFirst()\n      total = Number(countRow?.total ?? 0) || 0\n    } catch (err) {\n      if (!isMissingTableError(err)) throw err\n    }\n\n    return NextResponse.json({\n      ok: true,\n      items: rows.map(serializeOrder).filter((item): item is PortalOrderItem => item !== null),\n      total,\n      page: query.page,\n      pageSize: PAGE_SIZE,\n    })\n  } catch (err) {\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.portal.orders.get failed', { err })\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.load_failed', 'Failed to load warranty claim data') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim order picker',\n  methods: {\n    GET: {\n      summary: 'List authenticated customer orders for portal claim intake',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Customer-owned sales orders',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,WAAW;AACpB,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,kCAA4D;AAErE,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAE7C,MAAM,YAAY;AAElB,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,QAAQ,EAAE;AAAA,IACR,CAAC,UAAW,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AAAA,IACvD,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC/B;AAAA,EACA,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAChD,CAAC,EACA,OAAO;AAEV,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO;AAAA,EACtB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,uBAAuB,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS;AACpE,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,OAAO,EAAE,MAAM,WAAW;AAAA,EAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAClC,CAAC;AAaM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,SAAS,YAAY,QAAiC,KAA4B;AAChF,QAAM,QAAQ,OAAO,GAAG;AACxB,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAEA,SAAS,oBAAoB,KAAuB;AAClD,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO;AACpD,QAAM,YAAY;AAClB,SAAO,UAAU,SAAS,WACpB,OAAO,UAAU,YAAY,YAAY,UAAU,QAAQ,SAAS,gBAAgB;AAC5F;AAEA,SAAS,YAAY,QAAiC,KAAqC;AACzF,QAAM,QAAQ,OAAO,GAAG;AACxB,MAAI,OAAO,UAAU,YAAY,OAAO,UAAU,SAAU,QAAO;AACnE,SAAO;AACT;AAEA,SAAS,MAAM,OAA+B;AAC5C,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,WAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AAAA,EACjE;AACA,SAAO;AACT;AAEA,eAAe,qBAAqB,KAAuD;AACzF,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,MAAI,CAAC,KAAK,kBAAkB;AAC1B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mDAAmD,qDAAqD,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrL;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,SAAO;AAAA,IACL;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA;AAAA,EACF;AACF;AAgBA,SAAS,eAAe,KAAsD;AAC5E,QAAM,KAAK,YAAY,KAAK,IAAI;AAChC,MAAI,CAAC,GAAI,QAAO;AAChB,SAAO;AAAA,IACL;AAAA,IACA,aAAa,YAAY,KAAK,cAAc,KAAK;AAAA,IACjD,UAAU,MAAM,IAAI,SAAS;AAAA,IAC7B,cAAc,YAAY,KAAK,eAAe;AAAA,IAC9C,uBAAuB,YAAY,KAAK,0BAA0B;AAAA,EACpE;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,YAAY,CAAC;AACpE,UAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,QAAI,6BAA6B,SAAU,QAAO;AAClD,UAAM,UAAU;AAChB,UAAM,KAAK,QAAQ,GAAG,UAA0B;AAChD,QAAI,YAAY,GACb,WAAW,cAAc,EACzB,OAAO,CAAC,MAAM,gBAAgB,aAAa,iBAAiB,0BAA0B,CAAC,EACvF,MAAM,aAAa,KAAK,QAAQ,QAAQ,EACxC,MAAM,mBAAmB,KAAK,QAAQ,cAAc,EACpD,MAAM,sBAAsB,KAAK,QAAQ,UAAU,EACnD,MAAM,cAAc,MAAM,IAAI;AACjC,QAAI,aAAa,GACd,WAAW,cAAc,EACzB,OAAO,cAAsB,GAAG,OAAO,CAAC,EACxC,MAAM,aAAa,KAAK,QAAQ,QAAQ,EACxC,MAAM,mBAAmB,KAAK,QAAQ,cAAc,EACpD,MAAM,sBAAsB,KAAK,QAAQ,UAAU,EACnD,MAAM,cAAc,MAAM,IAAI;AACjC,QAAI,MAAM,QAAQ;AAChB,YAAM,UAAU,IAAI,kBAAkB,MAAM,MAAM,CAAC;AACnD,kBAAY,UAAU,MAAM,gBAAgB,SAAS,OAAO;AAC5D,mBAAa,WAAW,MAAM,gBAAgB,SAAS,OAAO;AAAA,IAChE;AACA,QAAI,OAAuC,CAAC;AAC5C,QAAI,QAAQ;AACZ,QAAI;AACF,aAAO,MAAM,UACV,QAAQ,aAAa,MAAM,EAC3B,MAAM,SAAS,EACf,QAAQ,MAAM,OAAO,KAAK,SAAS,EACnC,QAAQ;AACX,YAAM,WAAW,MAAM,WAAW,iBAAiB;AACnD,cAAQ,OAAO,UAAU,SAAS,CAAC,KAAK;AAAA,IAC1C,SAAS,KAAK;AACZ,UAAI,CAAC,oBAAoB,GAAG,EAAG,OAAM;AAAA,IACvC;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,OAAO,KAAK,IAAI,cAAc,EAAE,OAAO,CAAC,SAAkC,SAAS,IAAI;AAAA,MACvF;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU;AAAA,IACZ,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AACA,WAAO,MAAM,4CAA4C,EAAE,IAAI,CAAC;AAChE,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,sCAAsC,oCAAoC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvJ;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/warranty_claims/api/portal/troubleshooting/route.js

@@ -0,0 +1,121 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { getCustomerAuthFromRequest } from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { WarrantyTroubleshootingGuide } from "../../../data/entities.js";
+import { claimTypeSchema } from "../../../data/validators.js";
+import {
+  parseGuideSteps,
+  selectBestGuide
+} from "../../../lib/troubleshooting.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("warranty_claims");
+const optionalReasonCodeSchema = z.preprocess((value) => {
+  if (typeof value !== "string") return value;
+  const trimmed = value.trim();
+  return trimmed.length ? trimmed : void 0;
+}, z.string().max(120).optional());
+const optionalClaimTypeSchema = z.preprocess((value) => {
+  if (typeof value !== "string") return value;
+  const trimmed = value.trim();
+  return trimmed.length ? trimmed : void 0;
+}, claimTypeSchema.optional());
+const querySchema = z.object({
+  claimType: optionalClaimTypeSchema,
+  reasonCode: optionalReasonCodeSchema
+}).strict();
+const troubleshootingStepsSchema = z.record(z.string(), z.unknown());
+const responseSchema = z.object({
+  guide: z.object({
+    id: z.string().uuid(),
+    title: z.string(),
+    steps: troubleshootingStepsSchema
+  }).nullable()
+});
+const metadata = {
+  GET: { requireAuth: false }
+};
+async function resolvePortalContext(req) {
+  const auth = await getCustomerAuthFromRequest(req);
+  const { translate } = await resolveTranslations();
+  if (!auth) {
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.unauthorized", "Unauthorized") }, { status: 401 });
+  }
+  const container = await createRequestContainer();
+  return {
+    auth,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    em: container.resolve("em").fork()
+  };
+}
+function serializeGuide(guide) {
+  const steps = parseGuideSteps(guide.steps);
+  if (!steps) return null;
+  return {
+    id: guide.id,
+    title: guide.title,
+    claimType: guide.claimType ?? null,
+    reasonCode: guide.reasonCode ?? null,
+    isActive: guide.isActive,
+    steps
+  };
+}
+async function GET(req) {
+  try {
+    const url = new URL(req.url);
+    const query = querySchema.parse(Object.fromEntries(url.searchParams));
+    const contextOrResponse = await resolvePortalContext(req);
+    if (contextOrResponse instanceof Response) return contextOrResponse;
+    const context = contextOrResponse;
+    const guides = await context.em.find(
+      WarrantyTroubleshootingGuide,
+      {
+        tenantId: context.tenantId,
+        organizationId: context.organizationId,
+        isActive: true,
+        deletedAt: null
+      },
+      {
+        orderBy: { updatedAt: "desc" },
+        limit: 500
+      }
+    );
+    const candidates = guides.map(serializeGuide).filter((guide2) => guide2 !== null);
+    const guide = selectBestGuide(candidates, query.claimType ?? null, query.reasonCode ?? null);
+    return NextResponse.json({
+      guide: guide ? { id: guide.id, title: guide.title, steps: guide.steps } : null
+    });
+  } catch (err) {
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });
+    }
+    logger.error("warranty_claims.portal.troubleshooting.get failed", { err });
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.load_failed", "Failed to load warranty claim data") }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: "Warranty Claims Portal",
+  summary: "Customer portal warranty troubleshooting guide",
+  methods: {
+    GET: {
+      summary: "Load the best matching guided troubleshooting tree for portal claim intake",
+      query: querySchema,
+      responses: [
+        {
+          status: 200,
+          description: "Matching troubleshooting guide, if configured",
+          schema: responseSchema
+        }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/portal/troubleshooting/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/warranty_claims/api/portal/troubleshooting/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getCustomerAuthFromRequest, type CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WarrantyTroubleshootingGuide } from '../../../data/entities'\nimport { claimTypeSchema } from '../../../data/validators'\nimport {\n  parseGuideSteps,\n  selectBestGuide,\n  type TroubleshootingNode,\n} from '../../../lib/troubleshooting'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\nconst optionalReasonCodeSchema = z.preprocess((value) => {\n  if (typeof value !== 'string') return value\n  const trimmed = value.trim()\n  return trimmed.length ? trimmed : undefined\n}, z.string().max(120).optional())\n\nconst optionalClaimTypeSchema = z.preprocess((value) => {\n  if (typeof value !== 'string') return value\n  const trimmed = value.trim()\n  return trimmed.length ? trimmed : undefined\n}, claimTypeSchema.optional())\n\nconst querySchema = z\n  .object({\n    claimType: optionalClaimTypeSchema,\n    reasonCode: optionalReasonCodeSchema,\n  })\n  .strict()\n\nconst troubleshootingStepsSchema = z.record(z.string(), z.unknown())\n\nconst responseSchema = z.object({\n  guide: z.object({\n    id: z.string().uuid(),\n    title: z.string(),\n    steps: troubleshootingStepsSchema,\n  }).nullable(),\n})\n\ntype PortalTroubleshootingContext = {\n  auth: CustomerAuthContext\n  tenantId: string\n  organizationId: string\n  em: EntityManager\n}\n\ntype PortalTroubleshootingGuide = {\n  id: string\n  title: string\n  claimType: string | null\n  reasonCode: string | null\n  isActive: boolean\n  steps: TroubleshootingNode\n}\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\nasync function resolvePortalContext(req: Request): Promise<PortalTroubleshootingContext | Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n  const container = await createRequestContainer()\n  return {\n    auth,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    em: (container.resolve('em') as EntityManager).fork(),\n  }\n}\n\nfunction serializeGuide(guide: WarrantyTroubleshootingGuide): PortalTroubleshootingGuide | null {\n  const steps = parseGuideSteps(guide.steps)\n  if (!steps) return null\n  return {\n    id: guide.id,\n    title: guide.title,\n    claimType: guide.claimType ?? null,\n    reasonCode: guide.reasonCode ?? null,\n    isActive: guide.isActive,\n    steps,\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(url.searchParams))\n    const contextOrResponse = await resolvePortalContext(req)\n    if (contextOrResponse instanceof Response) return contextOrResponse\n    const context = contextOrResponse\n\n    const guides = await context.em.find(\n      WarrantyTroubleshootingGuide,\n      {\n        tenantId: context.tenantId,\n        organizationId: context.organizationId,\n        isActive: true,\n        deletedAt: null,\n      },\n      {\n        orderBy: { updatedAt: 'desc' },\n        limit: 500,\n      },\n    )\n    const candidates = guides\n      .map(serializeGuide)\n      .filter((guide): guide is PortalTroubleshootingGuide => guide !== null)\n    const guide = selectBestGuide(candidates, query.claimType ?? null, query.reasonCode ?? null)\n\n    return NextResponse.json({\n      guide: guide ? { id: guide.id, title: guide.title, steps: guide.steps } : null,\n    })\n  } catch (err) {\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.portal.troubleshooting.get failed', { err })\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.load_failed', 'Failed to load warranty claim data') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty troubleshooting guide',\n  methods: {\n    GET: {\n      summary: 'Load the best matching guided troubleshooting tree for portal claim intake',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Matching troubleshooting guide, if configured',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,kCAA4D;AAErE,SAAS,oCAAoC;AAC7C,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAE7C,MAAM,2BAA2B,EAAE,WAAW,CAAC,UAAU;AACvD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,UAAU;AACpC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,CAAC;AAEjC,MAAM,0BAA0B,EAAE,WAAW,CAAC,UAAU;AACtD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,UAAU;AACpC,GAAG,gBAAgB,SAAS,CAAC;AAE7B,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,WAAW;AAAA,EACX,YAAY;AACd,CAAC,EACA,OAAO;AAEV,MAAM,6BAA6B,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAEnE,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,OAAO,EAAE,OAAO;AAAA,IACd,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,OAAO,EAAE,OAAO;AAAA,IAChB,OAAO;AAAA,EACT,CAAC,EAAE,SAAS;AACd,CAAC;AAkBM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,eAAe,qBAAqB,KAAgE;AAClG,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,SAAO;AAAA,IACL;AAAA,IACA,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,IAAK,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAAA,EACtD;AACF;AAEA,SAAS,eAAe,OAAwE;AAC9F,QAAM,QAAQ,gBAAgB,MAAM,KAAK;AACzC,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,OAAO,MAAM;AAAA,IACb,WAAW,MAAM,aAAa;AAAA,IAC9B,YAAY,MAAM,cAAc;AAAA,IAChC,UAAU,MAAM;AAAA,IAChB;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,YAAY,CAAC;AACpE,UAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,QAAI,6BAA6B,SAAU,QAAO;AAClD,UAAM,UAAU;AAEhB,UAAM,SAAS,MAAM,QAAQ,GAAG;AAAA,MAC9B;AAAA,MACA;AAAA,QACE,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,QACxB,UAAU;AAAA,QACV,WAAW;AAAA,MACb;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B,OAAO;AAAA,MACT;AAAA,IACF;AACA,UAAM,aAAa,OAChB,IAAI,cAAc,EAClB,OAAO,CAACA,WAA+CA,WAAU,IAAI;AACxE,UAAM,QAAQ,gBAAgB,YAAY,MAAM,aAAa,MAAM,MAAM,cAAc,IAAI;AAE3F,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,QAAQ,EAAE,IAAI,MAAM,IAAI,OAAO,MAAM,OAAO,OAAO,MAAM,MAAM,IAAI;AAAA,IAC5E,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AACA,WAAO,MAAM,qDAAqD,EAAE,IAAI,CAAC;AACzE,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,sCAAsC,oCAAoC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvJ;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": ["guide"]
+}

package/dist/modules/warranty_claims/api/receiving/route.js

@@ -0,0 +1,176 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
+import {
+  claimConditionGradeSchema,
+  claimLineReceiveSchema,
+  claimLineReleaseQuarantineSchema
+} from "../../data/validators.js";
+import { WARRANTY_CLAIM_LINE_RESOURCE_KIND } from "../../commands/shared.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("warranty_claims");
+const uuid = z.string().uuid();
+const optimisticLockTokenSchema = z.string().datetime().nullable().optional();
+const receiveBodySchema = z.object({
+  lineId: uuid,
+  conditionGrade: claimConditionGradeSchema,
+  inspectionNotes: z.string().trim().max(4e3).optional(),
+  updatedAt: optimisticLockTokenSchema
+}).strict();
+const releaseBodySchema = z.object({
+  lineId: uuid,
+  action: z.literal("release"),
+  updatedAt: optimisticLockTokenSchema
+}).strict();
+const receivingBodySchema = z.union([releaseBodySchema, receiveBodySchema]);
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["warranty_claims.receiving.manage"] }
+};
+function toRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function translateKey(key) {
+  return key;
+}
+async function resolveActionContext(req) {
+  const container = await createRequestContainer();
+  const auth = await getAuthFromRequest(req);
+  if (!auth || !auth.tenantId) {
+    throw new CrudHttpError(401, { error: "warranty_claims.errors.unauthorized" });
+  }
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+  const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+  if (!organizationId) {
+    throw new CrudHttpError(400, { error: "warranty_claims.errors.organization_required" });
+  }
+  return {
+    ctx: {
+      container,
+      auth,
+      organizationScope: scope,
+      selectedOrganizationId: organizationId,
+      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+      request: req
+    },
+    tenantId: auth.tenantId,
+    organizationId,
+    translate: translateKey
+  };
+}
+function toReceivingAction(payload, context) {
+  const releaseBody = releaseBodySchema.safeParse(payload);
+  if (releaseBody.success) {
+    const scopedPayload2 = withScopedPayload({
+      id: releaseBody.data.lineId,
+      updatedAt: releaseBody.data.updatedAt
+    }, context.ctx, context.translate);
+    return { kind: "release", input: claimLineReleaseQuarantineSchema.parse(scopedPayload2) };
+  }
+  const body = receiveBodySchema.parse(payload);
+  const scopedPayload = withScopedPayload({
+    id: body.lineId,
+    conditionGrade: body.conditionGrade,
+    inspectionNotes: body.inspectionNotes,
+    updatedAt: body.updatedAt
+  }, context.ctx, context.translate);
+  return { kind: "receive", input: claimLineReceiveSchema.parse(scopedPayload) };
+}
+function toGuardedAction(kind, payload) {
+  if (kind === "release") {
+    return { kind, input: claimLineReleaseQuarantineSchema.parse(payload) };
+  }
+  return { kind, input: claimLineReceiveSchema.parse(payload) };
+}
+async function runGuard(req, context, action) {
+  const userId = context.ctx.auth?.sub;
+  if (!userId) {
+    throw new CrudHttpError(401, { error: "warranty_claims.errors.unauthorized" });
+  }
+  return runRouteMutationGuards({
+    container: context.ctx.container,
+    req,
+    auth: {
+      userId,
+      tenantId: context.tenantId,
+      organizationId: context.organizationId
+    },
+    input: {
+      resourceKind: WARRANTY_CLAIM_LINE_RESOURCE_KIND,
+      resourceId: action.input.id,
+      operation: "custom",
+      mutationPayload: { ...action.input }
+    }
+  });
+}
+async function executeReceivingAction(commandBus, action, ctx) {
+  if (action.kind === "release") {
+    const { result: result2 } = await commandBus.execute(
+      "warranty_claims.claim_line.release_quarantine",
+      { input: action.input, ctx }
+    );
+    if (!result2) throw new CrudHttpError(400, { error: "warranty_claims.errors.save_failed" });
+    return result2;
+  }
+  const { result } = await commandBus.execute(
+    "warranty_claims.claim_line.receive",
+    { input: action.input, ctx }
+  );
+  if (!result) throw new CrudHttpError(400, { error: "warranty_claims.errors.save_failed" });
+  return result;
+}
+async function POST(req) {
+  try {
+    const context = await resolveActionContext(req);
+    const payload = toRecord(await readJsonSafe(req, {}));
+    const action = toReceivingAction(payload, context);
+    const guarded = await runGuard(req, context, action);
+    if (!guarded.ok) {
+      return guarded.response;
+    }
+    const commandAction = guarded.modifiedPayload ? toGuardedAction(action.kind, guarded.modifiedPayload) : action;
+    const commandBus = context.ctx.container.resolve("commandBus");
+    const result = await executeReceivingAction(commandBus, commandAction, context.ctx);
+    await guarded.runAfterSuccess();
+    return NextResponse.json({ ok: true, lineId: result.lineId, claimId: result.claimId });
+  } catch (err) {
+    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: "warranty_claims.errors.invalidInput" }, { status: 400 });
+    }
+    logger.error("warranty_claims.receiving.post failed", { err });
+    return NextResponse.json({ error: "warranty_claims.errors.save_failed" }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: "Warranty Claims",
+  summary: "Receive or release a warranty claim line",
+  methods: {
+    POST: {
+      summary: "Grade a received line or release its quarantine hold",
+      requestBody: { contentType: "application/json", schema: receivingBodySchema },
+      responses: [
+        {
+          status: 200,
+          description: "Receiving action applied",
+          schema: z.object({
+            ok: z.boolean(),
+            lineId: z.string().uuid(),
+            claimId: z.string().uuid()
+          })
+        }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/receiving/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/warranty_claims/api/receiving/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  claimConditionGradeSchema,\n  claimLineReceiveSchema,\n  claimLineReleaseQuarantineSchema,\n  type ClaimLineReceiveInput,\n  type ClaimLineReleaseQuarantineInput,\n} from '../../data/validators'\nimport { WARRANTY_CLAIM_LINE_RESOURCE_KIND } from '../../commands/shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\ntype ActionRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  translate: (key: string, fallback?: string) => string\n}\n\ntype ReceivingAction =\n  | { kind: 'receive'; input: ClaimLineReceiveInput }\n  | { kind: 'release'; input: ClaimLineReleaseQuarantineInput }\n\nconst uuid = z.string().uuid()\nconst optimisticLockTokenSchema = z.string().datetime().nullable().optional()\n\nconst receiveBodySchema = z\n  .object({\n    lineId: uuid,\n    conditionGrade: claimConditionGradeSchema,\n    inspectionNotes: z.string().trim().max(4000).optional(),\n    updatedAt: optimisticLockTokenSchema,\n  })\n  .strict()\n\nconst releaseBodySchema = z\n  .object({\n    lineId: uuid,\n    action: z.literal('release'),\n    updatedAt: optimisticLockTokenSchema,\n  })\n  .strict()\n\nconst receivingBodySchema = z.union([releaseBodySchema, receiveBodySchema])\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.receiving.manage'] },\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nfunction translateKey(key: string): string {\n  return key\n}\n\nasync function resolveActionContext(req: Request): Promise<ActionRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: 'warranty_claims.errors.unauthorized' })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: 'warranty_claims.errors.organization_required' })\n  }\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    translate: translateKey,\n  }\n}\n\nfunction toReceivingAction(payload: Record<string, unknown>, context: ActionRouteContext): ReceivingAction {\n  const releaseBody = releaseBodySchema.safeParse(payload)\n  if (releaseBody.success) {\n    const scopedPayload = withScopedPayload({\n      id: releaseBody.data.lineId,\n      updatedAt: releaseBody.data.updatedAt,\n    }, context.ctx, context.translate)\n    return { kind: 'release', input: claimLineReleaseQuarantineSchema.parse(scopedPayload) }\n  }\n  const body = receiveBodySchema.parse(payload)\n  const scopedPayload = withScopedPayload({\n    id: body.lineId,\n    conditionGrade: body.conditionGrade,\n    inspectionNotes: body.inspectionNotes,\n    updatedAt: body.updatedAt,\n  }, context.ctx, context.translate)\n  return { kind: 'receive', input: claimLineReceiveSchema.parse(scopedPayload) }\n}\n\nfunction toGuardedAction(kind: ReceivingAction['kind'], payload: Record<string, unknown>): ReceivingAction {\n  if (kind === 'release') {\n    return { kind, input: claimLineReleaseQuarantineSchema.parse(payload) }\n  }\n  return { kind, input: claimLineReceiveSchema.parse(payload) }\n}\n\nasync function runGuard(\n  req: Request,\n  context: ActionRouteContext,\n  action: ReceivingAction,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: 'warranty_claims.errors.unauthorized' })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_LINE_RESOURCE_KIND,\n      resourceId: action.input.id,\n      operation: 'custom',\n      mutationPayload: { ...action.input },\n    },\n  })\n}\n\nasync function executeReceivingAction(\n  commandBus: CommandBus,\n  action: ReceivingAction,\n  ctx: CommandRuntimeContext,\n): Promise<{ lineId: string; claimId: string }> {\n  if (action.kind === 'release') {\n    const { result } = await commandBus.execute<ClaimLineReleaseQuarantineInput, { lineId: string; claimId: string }>(\n      'warranty_claims.claim_line.release_quarantine',\n      { input: action.input, ctx },\n    )\n    if (!result) throw new CrudHttpError(400, { error: 'warranty_claims.errors.save_failed' })\n    return result\n  }\n  const { result } = await commandBus.execute<ClaimLineReceiveInput, { lineId: string; claimId: string }>(\n    'warranty_claims.claim_line.receive',\n    { input: action.input, ctx },\n  )\n  if (!result) throw new CrudHttpError(400, { error: 'warranty_claims.errors.save_failed' })\n  return result\n}\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveActionContext(req)\n    const payload = toRecord(await readJsonSafe(req, {}))\n    const action = toReceivingAction(payload, context)\n    const guarded = await runGuard(req, context, action)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const commandAction = guarded.modifiedPayload ? toGuardedAction(action.kind, guarded.modifiedPayload) : action\n\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n    const result = await executeReceivingAction(commandBus, commandAction, context.ctx)\n\n    await guarded.runAfterSuccess()\n\n    return NextResponse.json({ ok: true, lineId: result.lineId, claimId: result.claimId })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n    }\n    logger.error('warranty_claims.receiving.post failed', { err })\n    return NextResponse.json({ error: 'warranty_claims.errors.save_failed' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Receive or release a warranty claim line',\n  methods: {\n    POST: {\n      summary: 'Grade a received line or release its quarantine hold',\n      requestBody: { contentType: 'application/json', schema: receivingBodySchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Receiving action applied',\n          schema: z.object({\n            ok: z.boolean(),\n            lineId: z.string().uuid(),\n            claimId: z.string().uuid(),\n          }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,8BAA6D;AACtE,SAAS,yBAAyB;AAElC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,yCAAyC;AAClD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAa7C,MAAM,OAAO,EAAE,OAAO,EAAE,KAAK;AAC7B,MAAM,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;AAE5E,MAAM,oBAAoB,EACvB,OAAO;AAAA,EACN,QAAQ;AAAA,EACR,gBAAgB;AAAA,EAChB,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EACtD,WAAW;AACb,CAAC,EACA,OAAO;AAEV,MAAM,oBAAoB,EACvB,OAAO;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ,EAAE,QAAQ,SAAS;AAAA,EAC3B,WAAW;AACb,CAAC,EACA,OAAO;AAEV,MAAM,sBAAsB,EAAE,MAAM,CAAC,mBAAmB,iBAAiB,CAAC;AAEnE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kCAAkC,EAAE;AACnF;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO;AACT;AAEA,eAAe,qBAAqB,KAA2C;AAC7E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,EAC/E;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,+CAA+C,CAAC;AAAA,EACxF;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA,WAAW;AAAA,EACb;AACF;AAEA,SAAS,kBAAkB,SAAkC,SAA8C;AACzG,QAAM,cAAc,kBAAkB,UAAU,OAAO;AACvD,MAAI,YAAY,SAAS;AACvB,UAAMA,iBAAgB,kBAAkB;AAAA,MACtC,IAAI,YAAY,KAAK;AAAA,MACrB,WAAW,YAAY,KAAK;AAAA,IAC9B,GAAG,QAAQ,KAAK,QAAQ,SAAS;AACjC,WAAO,EAAE,MAAM,WAAW,OAAO,iCAAiC,MAAMA,cAAa,EAAE;AAAA,EACzF;AACA,QAAM,OAAO,kBAAkB,MAAM,OAAO;AAC5C,QAAM,gBAAgB,kBAAkB;AAAA,IACtC,IAAI,KAAK;AAAA,IACT,gBAAgB,KAAK;AAAA,IACrB,iBAAiB,KAAK;AAAA,IACtB,WAAW,KAAK;AAAA,EAClB,GAAG,QAAQ,KAAK,QAAQ,SAAS;AACjC,SAAO,EAAE,MAAM,WAAW,OAAO,uBAAuB,MAAM,aAAa,EAAE;AAC/E;AAEA,SAAS,gBAAgB,MAA+B,SAAmD;AACzG,MAAI,SAAS,WAAW;AACtB,WAAO,EAAE,MAAM,OAAO,iCAAiC,MAAM,OAAO,EAAE;AAAA,EACxE;AACA,SAAO,EAAE,MAAM,OAAO,uBAAuB,MAAM,OAAO,EAAE;AAC9D;AAEA,eAAe,SACb,KACA,SACA,QACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,EAC/E;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,OAAO,MAAM;AAAA,MACzB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,OAAO,MAAM;AAAA,IACrC;AAAA,EACF,CAAC;AACH;AAEA,eAAe,uBACb,YACA,QACA,KAC8C;AAC9C,MAAI,OAAO,SAAS,WAAW;AAC7B,UAAM,EAAE,QAAAC,QAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA,EAAE,OAAO,OAAO,OAAO,IAAI;AAAA,IAC7B;AACA,QAAI,CAACA,QAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qCAAqC,CAAC;AACzF,WAAOA;AAAA,EACT;AACA,QAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,IAClC;AAAA,IACA,EAAE,OAAO,OAAO,OAAO,IAAI;AAAA,EAC7B;AACA,MAAI,CAAC,OAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qCAAqC,CAAC;AACzF,SAAO;AACT;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,UAAM,UAAU,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACpD,UAAM,SAAS,kBAAkB,SAAS,OAAO;AACjD,UAAM,UAAU,MAAM,SAAS,KAAK,SAAS,MAAM;AACnD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,gBAAgB,QAAQ,kBAAkB,gBAAgB,OAAO,MAAM,QAAQ,eAAe,IAAI;AAExG,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAC7D,UAAM,SAAS,MAAM,uBAAuB,YAAY,eAAe,QAAQ,GAAG;AAElF,UAAM,QAAQ,gBAAgB;AAE9B,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,QAAQ,OAAO,QAAQ,SAAS,OAAO,QAAQ,CAAC;AAAA,EACvF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC5F;AACA,WAAO,MAAM,yCAAyC,EAAE,IAAI,CAAC;AAC7D,WAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,oBAAoB;AAAA,MAC5E,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ;AAAA,YACd,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,YACxB,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,UAC3B,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": ["scopedPayload", "result"]
+}