@open-mercato/core 0.6.8-develop.6998.1.d2bc46c56c → 0.6.8-develop.7001.1.03608ab252

package/dist/modules/warranty_claims/api/return-label/route.js

@@ -0,0 +1,235 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { WarrantyClaimLine } from "../../data/entities.js";
+import { claimSetReturnLabelSchema } from "../../data/validators.js";
+import {
+  WARRANTY_CLAIM_RESOURCE_KIND,
+  enforceWarrantyClaimOptimisticLock,
+  requireScopedClaim
+} from "../../commands/shared.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("warranty_claims");
+const uuid = z.string().uuid();
+const returnLabelText = (max) => z.string().trim().min(1).max(max).optional();
+const optimisticLockTokenSchema = z.string().datetime().nullable().optional();
+const returnLabelRequestSchema = z.object({
+  claimId: uuid,
+  manual: z.boolean().optional(),
+  labelUrl: returnLabelText(2048),
+  trackingNumber: returnLabelText(191),
+  carrier: returnLabelText(120),
+  updatedAt: optimisticLockTokenSchema
+}).strict();
+const returnLabelResponseSchema = z.discriminatedUnion("status", [
+  z.object({
+    status: z.literal("created"),
+    labelUrl: z.string().nullable(),
+    trackingNumber: z.string().nullable(),
+    carrier: z.string().nullable()
+  }),
+  z.object({ status: z.literal("notConfigured") })
+]);
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["warranty_claims.claim.manage"] }
+};
+function translateKey(key) {
+  return key;
+}
+function toRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+async function resolveActionContext(req) {
+  const container = await createRequestContainer();
+  const auth = await getAuthFromRequest(req);
+  if (!auth || !auth.tenantId) {
+    throw new CrudHttpError(401, { error: "warranty_claims.errors.unauthorized" });
+  }
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+  const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+  if (!organizationId) {
+    throw new CrudHttpError(400, { error: "warranty_claims.errors.organization_required" });
+  }
+  return {
+    ctx: {
+      container,
+      auth,
+      organizationScope: scope,
+      selectedOrganizationId: organizationId,
+      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+      request: req
+    },
+    tenantId: auth.tenantId,
+    organizationId,
+    translate: translateKey
+  };
+}
+function toReturnLabelRequest(payload) {
+  return returnLabelRequestSchema.parse({
+    claimId: payload.claimId ?? payload.id,
+    manual: payload.manual,
+    labelUrl: payload.labelUrl,
+    trackingNumber: payload.trackingNumber,
+    carrier: payload.carrier,
+    updatedAt: payload.updatedAt
+  });
+}
+function isManualRequest(input) {
+  return input.manual === true || input.labelUrl !== void 0 || input.trackingNumber !== void 0 || input.carrier !== void 0;
+}
+function toSetReturnLabelInput(input, context) {
+  const scopedPayload = withScopedPayload({
+    id: input.claimId,
+    labelUrl: input.labelUrl,
+    trackingNumber: input.trackingNumber,
+    carrier: input.carrier,
+    updatedAt: input.updatedAt
+  }, context.ctx, context.translate);
+  return claimSetReturnLabelSchema.parse(scopedPayload);
+}
+async function runGuard(req, context, input) {
+  const userId = context.ctx.auth?.sub;
+  if (!userId) {
+    throw new CrudHttpError(401, { error: "warranty_claims.errors.unauthorized" });
+  }
+  return runRouteMutationGuards({
+    container: context.ctx.container,
+    req,
+    auth: {
+      userId,
+      tenantId: context.tenantId,
+      organizationId: context.organizationId
+    },
+    input: {
+      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,
+      resourceId: input.claimId,
+      operation: "custom",
+      mutationPayload: { ...input }
+    }
+  });
+}
+async function loadClaimAndLines(context, claimId) {
+  const scope = { tenantId: context.tenantId, organizationId: context.organizationId };
+  const em = context.ctx.container.resolve("em").fork();
+  const claim = await requireScopedClaim(em, claimId, scope);
+  const lines = await findWithDecryption(
+    em,
+    WarrantyClaimLine,
+    { claim: claim.id, tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null },
+    {},
+    scope
+  );
+  return { claim, lines };
+}
+function assertGeneratableStatus(claim) {
+  if (claim.status !== "approved" && claim.status !== "awaiting_return") {
+    throw new CrudHttpError(400, { error: "warranty_claims.errors.returnLabelInvalidStatus" });
+  }
+}
+async function executeSetReturnLabel(commandBus, input, ctx) {
+  const { result } = await commandBus.execute(
+    "warranty_claims.claim.set_return_label",
+    { input, ctx }
+  );
+  if (!result) throw new CrudHttpError(400, { error: "warranty_claims.errors.save_failed" });
+  return {
+    status: "created",
+    labelUrl: result.labelUrl,
+    trackingNumber: result.trackingNumber,
+    carrier: result.carrier
+  };
+}
+function firstTranslatableIssueKey(err) {
+  const keyed = err.issues.find(
+    (issue) => typeof issue.message === "string" && issue.message.startsWith("warranty_claims.")
+  )?.message;
+  return keyed ?? "warranty_claims.errors.invalidInput";
+}
+async function POST(req) {
+  try {
+    const context = await resolveActionContext(req);
+    const requestInput = toReturnLabelRequest(toRecord(await readJsonSafe(req, {})));
+    const guarded = await runGuard(req, context, requestInput);
+    if (!guarded.ok) {
+      return guarded.response;
+    }
+    const guardedInput = guarded.modifiedPayload ? toReturnLabelRequest(guarded.modifiedPayload) : requestInput;
+    const commandBus = context.ctx.container.resolve("commandBus");
+    if (isManualRequest(guardedInput)) {
+      const response2 = await executeSetReturnLabel(
+        commandBus,
+        toSetReturnLabelInput(guardedInput, context),
+        context.ctx
+      );
+      await guarded.runAfterSuccess();
+      return NextResponse.json(response2);
+    }
+    const { claim, lines } = await loadClaimAndLines(context, guardedInput.claimId);
+    assertGeneratableStatus(claim);
+    await enforceWarrantyClaimOptimisticLock(
+      context.ctx,
+      claim,
+      WARRANTY_CLAIM_RESOURCE_KIND,
+      guardedInput.updatedAt ?? void 0
+    );
+    const provider = context.ctx.container.resolve("warrantyReturnLabelProvider");
+    const result = await provider.createReturnLabel(
+      { claim, lines },
+      { tenantId: context.tenantId, organizationId: context.organizationId },
+      context.ctx.container
+    );
+    if (result.status === "notConfigured") {
+      return NextResponse.json({ status: "notConfigured" });
+    }
+    const response = await executeSetReturnLabel(
+      commandBus,
+      toSetReturnLabelInput({
+        ...guardedInput,
+        labelUrl: result.labelUrl,
+        trackingNumber: result.trackingNumber,
+        carrier: result.carrier
+      }, context),
+      context.ctx
+    );
+    await guarded.runAfterSuccess();
+    return NextResponse.json(response);
+  } catch (err) {
+    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: firstTranslatableIssueKey(err) }, { status: 400 });
+    }
+    logger.error("warranty_claims.return-label.post failed", { err });
+    return NextResponse.json({ error: "warranty_claims.errors.save_failed" }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: "Warranty Claims",
+  summary: "Create or record a return label for a warranty claim",
+  methods: {
+    POST: {
+      summary: "Generate a carrier return label or record manual label details",
+      requestBody: { contentType: "application/json", schema: returnLabelRequestSchema },
+      responses: [
+        {
+          status: 200,
+          description: "Return label created or provider not configured",
+          schema: returnLabelResponseSchema
+        }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  firstTranslatableIssueKey,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/return-label/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/warranty_claims/api/return-label/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { WarrantyClaim, WarrantyClaimLine } from '../../data/entities'\nimport { claimSetReturnLabelSchema, type ClaimSetReturnLabelInput } from '../../data/validators'\nimport type { WarrantyReturnLabelProvider } from '../../services/returnLabelProvider'\nimport {\n  WARRANTY_CLAIM_RESOURCE_KIND,\n  enforceWarrantyClaimOptimisticLock,\n  requireScopedClaim,\n} from '../../commands/shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\ntype ActionRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  translate: (key: string, fallback?: string) => string\n}\n\ntype ReturnLabelCreatedResponse = {\n  status: 'created'\n  labelUrl: string | null\n  trackingNumber: string | null\n  carrier: string | null\n}\ntype ReturnLabelCommandResult = Omit<ReturnLabelCreatedResponse, 'status'> & { claimId: string }\n\nconst uuid = z.string().uuid()\nconst returnLabelText = (max: number) => z.string().trim().min(1).max(max).optional()\nconst optimisticLockTokenSchema = z.string().datetime().nullable().optional()\n\nconst returnLabelRequestSchema = z\n  .object({\n    claimId: uuid,\n    manual: z.boolean().optional(),\n    labelUrl: returnLabelText(2048),\n    trackingNumber: returnLabelText(191),\n    carrier: returnLabelText(120),\n    updatedAt: optimisticLockTokenSchema,\n  })\n  .strict()\n\ntype ReturnLabelRequest = z.infer<typeof returnLabelRequestSchema>\n\nconst returnLabelResponseSchema = z.discriminatedUnion('status', [\n  z.object({\n    status: z.literal('created'),\n    labelUrl: z.string().nullable(),\n    trackingNumber: z.string().nullable(),\n    carrier: z.string().nullable(),\n  }),\n  z.object({ status: z.literal('notConfigured') }),\n])\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.claim.manage'] },\n}\n\nfunction translateKey(key: string): string {\n  return key\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nasync function resolveActionContext(req: Request): Promise<ActionRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: 'warranty_claims.errors.unauthorized' })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: 'warranty_claims.errors.organization_required' })\n  }\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    translate: translateKey,\n  }\n}\n\nfunction toReturnLabelRequest(payload: Record<string, unknown>): ReturnLabelRequest {\n  return returnLabelRequestSchema.parse({\n    claimId: payload.claimId ?? payload.id,\n    manual: payload.manual,\n    labelUrl: payload.labelUrl,\n    trackingNumber: payload.trackingNumber,\n    carrier: payload.carrier,\n    updatedAt: payload.updatedAt,\n  })\n}\n\nfunction isManualRequest(input: ReturnLabelRequest): boolean {\n  return input.manual === true\n    || input.labelUrl !== undefined\n    || input.trackingNumber !== undefined\n    || input.carrier !== undefined\n}\n\nfunction toSetReturnLabelInput(\n  input: ReturnLabelRequest,\n  context: ActionRouteContext,\n): ClaimSetReturnLabelInput {\n  const scopedPayload = withScopedPayload({\n    id: input.claimId,\n    labelUrl: input.labelUrl,\n    trackingNumber: input.trackingNumber,\n    carrier: input.carrier,\n    updatedAt: input.updatedAt,\n  }, context.ctx, context.translate)\n  return claimSetReturnLabelSchema.parse(scopedPayload)\n}\n\nasync function runGuard(\n  req: Request,\n  context: ActionRouteContext,\n  input: ReturnLabelRequest,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: 'warranty_claims.errors.unauthorized' })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: input.claimId,\n      operation: 'custom',\n      mutationPayload: { ...input },\n    },\n  })\n}\n\nasync function loadClaimAndLines(\n  context: ActionRouteContext,\n  claimId: string,\n): Promise<{ claim: WarrantyClaim; lines: WarrantyClaimLine[] }> {\n  const scope = { tenantId: context.tenantId, organizationId: context.organizationId }\n  const em = (context.ctx.container.resolve('em') as EntityManager).fork()\n  const claim = await requireScopedClaim(em, claimId, scope)\n  const lines = await findWithDecryption(\n    em,\n    WarrantyClaimLine,\n    { claim: claim.id, tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null },\n    {},\n    scope,\n  )\n  return { claim, lines }\n}\n\nfunction assertGeneratableStatus(claim: WarrantyClaim): void {\n  if (claim.status !== 'approved' && claim.status !== 'awaiting_return') {\n    throw new CrudHttpError(400, { error: 'warranty_claims.errors.returnLabelInvalidStatus' })\n  }\n}\n\nasync function executeSetReturnLabel(\n  commandBus: CommandBus,\n  input: ClaimSetReturnLabelInput,\n  ctx: CommandRuntimeContext,\n): Promise<ReturnLabelCreatedResponse> {\n  const { result } = await commandBus.execute<ClaimSetReturnLabelInput, ReturnLabelCommandResult>(\n    'warranty_claims.claim.set_return_label',\n    { input, ctx },\n  )\n  if (!result) throw new CrudHttpError(400, { error: 'warranty_claims.errors.save_failed' })\n  return {\n    status: 'created',\n    labelUrl: result.labelUrl,\n    trackingNumber: result.trackingNumber,\n    carrier: result.carrier,\n  }\n}\n\nexport function firstTranslatableIssueKey(err: z.ZodError): string {\n  const keyed = err.issues.find(\n    (issue) => typeof issue.message === 'string' && issue.message.startsWith('warranty_claims.'),\n  )?.message\n  return keyed ?? 'warranty_claims.errors.invalidInput'\n}\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveActionContext(req)\n    const requestInput = toReturnLabelRequest(toRecord(await readJsonSafe(req, {})))\n    const guarded = await runGuard(req, context, requestInput)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const guardedInput = guarded.modifiedPayload ? toReturnLabelRequest(guarded.modifiedPayload) : requestInput\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n\n    if (isManualRequest(guardedInput)) {\n      const response = await executeSetReturnLabel(\n        commandBus,\n        toSetReturnLabelInput(guardedInput, context),\n        context.ctx,\n      )\n      await guarded.runAfterSuccess()\n      return NextResponse.json(response)\n    }\n\n    const { claim, lines } = await loadClaimAndLines(context, guardedInput.claimId)\n    assertGeneratableStatus(claim)\n    await enforceWarrantyClaimOptimisticLock(\n      context.ctx,\n      claim,\n      WARRANTY_CLAIM_RESOURCE_KIND,\n      guardedInput.updatedAt ?? undefined,\n    )\n\n    const provider = context.ctx.container.resolve<WarrantyReturnLabelProvider>('warrantyReturnLabelProvider')\n    const result = await provider.createReturnLabel(\n      { claim, lines },\n      { tenantId: context.tenantId, organizationId: context.organizationId },\n      context.ctx.container,\n    )\n\n    if (result.status === 'notConfigured') {\n      return NextResponse.json({ status: 'notConfigured' })\n    }\n\n    const response = await executeSetReturnLabel(\n      commandBus,\n      toSetReturnLabelInput({\n        ...guardedInput,\n        labelUrl: result.labelUrl,\n        trackingNumber: result.trackingNumber,\n        carrier: result.carrier,\n      }, context),\n      context.ctx,\n    )\n    await guarded.runAfterSuccess()\n    return NextResponse.json(response)\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: firstTranslatableIssueKey(err) }, { status: 400 })\n    }\n    logger.error('warranty_claims.return-label.post failed', { err })\n    return NextResponse.json({ error: 'warranty_claims.errors.save_failed' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Create or record a return label for a warranty claim',\n  methods: {\n    POST: {\n      summary: 'Generate a carrier return label or record manual label details',\n      requestBody: { contentType: 'application/json', schema: returnLabelRequestSchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Return label created or provider not configured',\n          schema: returnLabelResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,8BAA6D;AACtE,SAAS,yBAAyB;AAElC,SAAS,0BAA0B;AACnC,SAAwB,yBAAyB;AACjD,SAAS,iCAAgE;AAEzE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAiB7C,MAAM,OAAO,EAAE,OAAO,EAAE,KAAK;AAC7B,MAAM,kBAAkB,CAAC,QAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AACpF,MAAM,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;AAE5E,MAAM,2BAA2B,EAC9B,OAAO;AAAA,EACN,SAAS;AAAA,EACT,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC7B,UAAU,gBAAgB,IAAI;AAAA,EAC9B,gBAAgB,gBAAgB,GAAG;AAAA,EACnC,SAAS,gBAAgB,GAAG;AAAA,EAC5B,WAAW;AACb,CAAC,EACA,OAAO;AAIV,MAAM,4BAA4B,EAAE,mBAAmB,UAAU;AAAA,EAC/D,EAAE,OAAO;AAAA,IACP,QAAQ,EAAE,QAAQ,SAAS;AAAA,IAC3B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,IAC9B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,IACpC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,CAAC;AAAA,EACD,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,eAAe,EAAE,CAAC;AACjD,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAC/E;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO;AACT;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,eAAe,qBAAqB,KAA2C;AAC7E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,EAC/E;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,+CAA+C,CAAC;AAAA,EACxF;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA,WAAW;AAAA,EACb;AACF;AAEA,SAAS,qBAAqB,SAAsD;AAClF,SAAO,yBAAyB,MAAM;AAAA,IACpC,SAAS,QAAQ,WAAW,QAAQ;AAAA,IACpC,QAAQ,QAAQ;AAAA,IAChB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,SAAS,QAAQ;AAAA,IACjB,WAAW,QAAQ;AAAA,EACrB,CAAC;AACH;AAEA,SAAS,gBAAgB,OAAoC;AAC3D,SAAO,MAAM,WAAW,QACnB,MAAM,aAAa,UACnB,MAAM,mBAAmB,UACzB,MAAM,YAAY;AACzB;AAEA,SAAS,sBACP,OACA,SAC0B;AAC1B,QAAM,gBAAgB,kBAAkB;AAAA,IACtC,IAAI,MAAM;AAAA,IACV,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,SAAS,MAAM;AAAA,IACf,WAAW,MAAM;AAAA,EACnB,GAAG,QAAQ,KAAK,QAAQ,SAAS;AACjC,SAAO,0BAA0B,MAAM,aAAa;AACtD;AAEA,eAAe,SACb,KACA,SACA,OACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,EAC/E;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAe,kBACb,SACA,SAC+D;AAC/D,QAAM,QAAQ,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AACnF,QAAM,KAAM,QAAQ,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AACvE,QAAM,QAAQ,MAAM,mBAAmB,IAAI,SAAS,KAAK;AACzD,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,EAAE,OAAO,MAAM,IAAI,UAAU,MAAM,UAAU,gBAAgB,MAAM,gBAAgB,WAAW,KAAK;AAAA,IACnG,CAAC;AAAA,IACD;AAAA,EACF;AACA,SAAO,EAAE,OAAO,MAAM;AACxB;AAEA,SAAS,wBAAwB,OAA4B;AAC3D,MAAI,MAAM,WAAW,cAAc,MAAM,WAAW,mBAAmB;AACrE,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,kDAAkD,CAAC;AAAA,EAC3F;AACF;AAEA,eAAe,sBACb,YACA,OACA,KACqC;AACrC,QAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,IAClC;AAAA,IACA,EAAE,OAAO,IAAI;AAAA,EACf;AACA,MAAI,CAAC,OAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qCAAqC,CAAC;AACzF,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,UAAU,OAAO;AAAA,IACjB,gBAAgB,OAAO;AAAA,IACvB,SAAS,OAAO;AAAA,EAClB;AACF;AAEO,SAAS,0BAA0B,KAAyB;AACjE,QAAM,QAAQ,IAAI,OAAO;AAAA,IACvB,CAAC,UAAU,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,WAAW,kBAAkB;AAAA,EAC7F,GAAG;AACH,SAAO,SAAS;AAClB;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,UAAM,eAAe,qBAAqB,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/E,UAAM,UAAU,MAAM,SAAS,KAAK,SAAS,YAAY;AACzD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,eAAe,QAAQ,kBAAkB,qBAAqB,QAAQ,eAAe,IAAI;AAC/F,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAE7D,QAAI,gBAAgB,YAAY,GAAG;AACjC,YAAMA,YAAW,MAAM;AAAA,QACrB;AAAA,QACA,sBAAsB,cAAc,OAAO;AAAA,QAC3C,QAAQ;AAAA,MACV;AACA,YAAM,QAAQ,gBAAgB;AAC9B,aAAO,aAAa,KAAKA,SAAQ;AAAA,IACnC;AAEA,UAAM,EAAE,OAAO,MAAM,IAAI,MAAM,kBAAkB,SAAS,aAAa,OAAO;AAC9E,4BAAwB,KAAK;AAC7B,UAAM;AAAA,MACJ,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,aAAa,aAAa;AAAA,IAC5B;AAEA,UAAM,WAAW,QAAQ,IAAI,UAAU,QAAqC,6BAA6B;AACzG,UAAM,SAAS,MAAM,SAAS;AAAA,MAC5B,EAAE,OAAO,MAAM;AAAA,MACf,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,MACrE,QAAQ,IAAI;AAAA,IACd;AAEA,QAAI,OAAO,WAAW,iBAAiB;AACrC,aAAO,aAAa,KAAK,EAAE,QAAQ,gBAAgB,CAAC;AAAA,IACtD;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA,sBAAsB;AAAA,QACpB,GAAG;AAAA,QACH,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO;AAAA,QACvB,SAAS,OAAO;AAAA,MAClB,GAAG,OAAO;AAAA,MACV,QAAQ;AAAA,IACV;AACA,UAAM,QAAQ,gBAAgB;AAC9B,WAAO,aAAa,KAAK,QAAQ;AAAA,EACnC,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,0BAA0B,GAAG,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AACA,WAAO,MAAM,4CAA4C,EAAE,IAAI,CAAC;AAChE,WAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,yBAAyB;AAAA,MACjF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": ["response"]
+}

package/dist/modules/warranty_claims/api/risk/route.js

@@ -0,0 +1,101 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { WarrantyClaimLine } from "../../data/entities.js";
+import { requireScopedClaim } from "../../commands/shared.js";
+import { evaluateClaimRisk } from "../../lib/risk.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("warranty_claims");
+const querySchema = z.object({
+  claimId: z.string().uuid()
+}).strict();
+const riskSignalSchema = z.object({
+  id: z.enum(["duplicate_serial", "duplicate_order_claim", "outside_return_window", "over_quantity_claim", "repeat_claimer", "value_velocity"]),
+  level: z.enum(["low", "medium", "high"]),
+  messageKey: z.string(),
+  params: z.record(z.string(), z.union([z.string(), z.number()])).optional(),
+  relatedClaimNumbers: z.array(z.string()).optional()
+});
+const responseSchema = z.object({
+  ok: z.literal(true),
+  result: z.object({
+    level: z.enum(["none", "low", "medium", "high"]),
+    signals: z.array(riskSignalSchema)
+  })
+});
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["warranty_claims.claim.view"] }
+};
+async function resolveRiskContext(req) {
+  const container = await createRequestContainer();
+  const auth = await getAuthFromRequest(req);
+  const { translate } = await resolveTranslations();
+  if (!auth || !auth.tenantId) {
+    throw new CrudHttpError(401, { error: translate("warranty_claims.errors.unauthorized", "Unauthorized") });
+  }
+  const organizationScope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+  const organizationId = organizationScope?.selectedId ?? auth.orgId ?? null;
+  if (!organizationId) {
+    throw new CrudHttpError(400, { error: translate("warranty_claims.errors.organization_required", "Organization context is required") });
+  }
+  const em = container.resolve("em");
+  return {
+    tenantId: auth.tenantId,
+    organizationId,
+    scope: { tenantId: auth.tenantId, organizationId },
+    em
+  };
+}
+async function GET(req) {
+  try {
+    const context = await resolveRiskContext(req);
+    const url = new URL(req.url);
+    const query = querySchema.parse(Object.fromEntries(url.searchParams));
+    const claim = await requireScopedClaim(context.em, query.claimId, context.scope);
+    const lines = await findWithDecryption(
+      context.em,
+      WarrantyClaimLine,
+      { claim: claim.id, tenantId: context.tenantId, organizationId: context.organizationId, deletedAt: null },
+      { orderBy: { lineNo: "ASC" } },
+      context.scope
+    );
+    const result = await evaluateClaimRisk(context.em, claim, lines);
+    return NextResponse.json({ ok: true, result });
+  } catch (err) {
+    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });
+    }
+    logger.error("warranty_claims.risk.get failed", { err });
+    return NextResponse.json({ error: translate("warranty_claims.errors.load_failed", "Failed to load warranty claim data") }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: "Warranty Claims",
+  summary: "Evaluate warranty claim risk",
+  methods: {
+    GET: {
+      summary: "Evaluate deterministic risk signals for a claim",
+      query: querySchema,
+      responses: [
+        {
+          status: 200,
+          description: "Risk assessment",
+          schema: responseSchema
+        }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/risk/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/warranty_claims/api/risk/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WarrantyClaimLine } from '../../data/entities'\nimport { requireScopedClaim, type WarrantyClaimScope } from '../../commands/shared'\nimport { evaluateClaimRisk } from '../../lib/risk'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\nconst querySchema = z.object({\n  claimId: z.string().uuid(),\n}).strict()\n\nconst riskSignalSchema = z.object({\n  id: z.enum(['duplicate_serial', 'duplicate_order_claim', 'outside_return_window', 'over_quantity_claim', 'repeat_claimer', 'value_velocity']),\n  level: z.enum(['low', 'medium', 'high']),\n  messageKey: z.string(),\n  params: z.record(z.string(), z.union([z.string(), z.number()])).optional(),\n  relatedClaimNumbers: z.array(z.string()).optional(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  result: z.object({\n    level: z.enum(['none', 'low', 'medium', 'high']),\n    signals: z.array(riskSignalSchema),\n  }),\n})\n\ntype RiskRouteContext = {\n  tenantId: string\n  organizationId: string\n  scope: WarrantyClaimScope\n  em: EntityManager\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['warranty_claims.claim.view'] },\n}\n\nasync function resolveRiskContext(req: Request): Promise<RiskRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const organizationScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = organizationScope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required') })\n  }\n  const em = container.resolve('em') as EntityManager\n  return {\n    tenantId: auth.tenantId,\n    organizationId,\n    scope: { tenantId: auth.tenantId, organizationId },\n    em,\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const context = await resolveRiskContext(req)\n    const url = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(url.searchParams))\n    const claim = await requireScopedClaim(context.em, query.claimId, context.scope)\n    const lines = await findWithDecryption(\n      context.em,\n      WarrantyClaimLine,\n      { claim: claim.id, tenantId: context.tenantId, organizationId: context.organizationId, deletedAt: null },\n      { orderBy: { lineNo: 'ASC' } },\n      context.scope,\n    )\n    const result = await evaluateClaimRisk(context.em, claim, lines)\n    return NextResponse.json({ ok: true, result })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.risk.get failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.load_failed', 'Failed to load warranty claim data') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Evaluate warranty claim risk',\n  methods: {\n    GET: {\n      summary: 'Evaluate deterministic risk signals for a claim',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Risk assessment',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AAEpC,SAAS,yBAAyB;AAClC,SAAS,0BAAmD;AAC5D,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAE7C,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC,EAAE,OAAO;AAEV,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,KAAK,CAAC,oBAAoB,yBAAyB,yBAAyB,uBAAuB,kBAAkB,gBAAgB,CAAC;AAAA,EAC5I,OAAO,EAAE,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC;AAAA,EACvC,YAAY,EAAE,OAAO;AAAA,EACrB,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,EACzE,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AACpD,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,UAAU,MAAM,CAAC;AAAA,IAC/C,SAAS,EAAE,MAAM,gBAAgB;AAAA,EACnC,CAAC;AACH,CAAC;AASM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC5E;AAEA,eAAe,mBAAmB,KAAyC;AACzE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,oBAAoB,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACpG,QAAM,iBAAiB,mBAAmB,cAAc,KAAK,SAAS;AACtE,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,kCAAkC,EAAE,CAAC;AAAA,EACvI;AACA,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf;AAAA,IACA,OAAO,EAAE,UAAU,KAAK,UAAU,eAAe;AAAA,IACjD;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,UAAU,MAAM,mBAAmB,GAAG;AAC5C,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,YAAY,CAAC;AACpE,UAAM,QAAQ,MAAM,mBAAmB,QAAQ,IAAI,MAAM,SAAS,QAAQ,KAAK;AAC/E,UAAM,QAAQ,MAAM;AAAA,MAClB,QAAQ;AAAA,MACR;AAAA,MACA,EAAE,OAAO,MAAM,IAAI,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,gBAAgB,WAAW,KAAK;AAAA,MACvG,EAAE,SAAS,EAAE,QAAQ,MAAM,EAAE;AAAA,MAC7B,QAAQ;AAAA,IACV;AACA,UAAM,SAAS,MAAM,kBAAkB,QAAQ,IAAI,OAAO,KAAK;AAC/D,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,mCAAmC,EAAE,IAAI,CAAC;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,oCAAoC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5I;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}