@open-mercato/core 0.6.8-develop.6998.1.d2bc46c56c → 0.6.8-develop.7001.1.03608ab252

package/dist/modules/warranty_claims/api/vendor-policies/route.js

@@ -0,0 +1,311 @@
+import { z } from "zod";
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { parseBooleanFromUnknown } from "@open-mercato/shared/lib/boolean";
+import { buildIlikeTerm } from "@open-mercato/shared/lib/db/buildIlikeTerm";
+import { applyIdsFilter } from "../../lib/apiIdsFilter.js";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { E } from "../../../../generated/entities.ids.generated.js";
+import * as F from "../../../../generated/entities/warranty_vendor_policy/index.js";
+import { WarrantyVendorPolicy } from "../../data/entities.js";
+import {
+  vendorPolicyCreateSchema,
+  vendorPolicyUpdateSchema,
+  vendorPolicyDeleteSchema
+} from "../../data/validators.js";
+import {
+  createPagedListResponseSchema,
+  createWarrantyClaimsCrudOpenApi,
+  defaultOkResponseSchema
+} from "../openapi.js";
+const rawBodySchema = z.object({}).passthrough();
+const uuid = z.string().uuid();
+const idsSchema = z.preprocess((value) => {
+  if (typeof value === "string") {
+    return value.split(",").map((part) => part.trim()).filter(Boolean);
+  }
+  return value;
+}, z.array(uuid).min(1).max(500).optional());
+const booleanQuerySchema = z.preprocess((value) => parseBooleanFromUnknown(value) ?? void 0, z.boolean().optional());
+const listSchema = z.object({
+  id: uuid.optional(),
+  ids: idsSchema,
+  search: z.string().trim().max(300).optional(),
+  isActive: booleanQuerySchema,
+  autoGenerateRecovery: booleanQuerySchema,
+  page: z.coerce.number().int().min(1).default(1),
+  pageSize: z.coerce.number().int().min(1).max(100).default(20),
+  sortField: z.enum(["vendorName", "updatedAt", "createdAt"]).optional(),
+  sortDir: z.enum(["asc", "desc"]).optional()
+}).passthrough();
+const routeMetadata = {
+  GET: { requireAuth: true, requireFeatures: ["warranty_claims.vendor_policy.manage"] },
+  POST: { requireAuth: true, requireFeatures: ["warranty_claims.vendor_policy.manage"] },
+  PUT: { requireAuth: true, requireFeatures: ["warranty_claims.vendor_policy.manage"] },
+  DELETE: { requireAuth: true, requireFeatures: ["warranty_claims.vendor_policy.manage"] }
+};
+const metadata = routeMetadata;
+const baseListFields = [
+  F.id,
+  F.organization_id,
+  F.tenant_id,
+  F.vendor_name,
+  F.vendor_ref,
+  F.coverage_months,
+  F.claimable_reason_codes,
+  F.recovery_rate_pct,
+  F.auto_generate_recovery,
+  F.is_active,
+  F.created_at,
+  F.updated_at,
+  F.deleted_at
+];
+const detailFields = [...baseListFields, F.contact_email];
+function scopeFromContext(ctx) {
+  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null;
+  const tenantId = ctx.auth?.tenantId ?? null;
+  if (!organizationId || !tenantId) {
+    throw new CrudHttpError(400, { error: "[internal] warranty vendor policy scope is missing" });
+  }
+  return { organizationId, tenantId };
+}
+function parseCreateInput(input, ctx) {
+  return vendorPolicyCreateSchema.parse({
+    ...input,
+    ...scopeFromContext(ctx)
+  });
+}
+function parseUpdateInput(input, ctx) {
+  return vendorPolicyUpdateSchema.parse({
+    ...input,
+    ...scopeFromContext(ctx)
+  });
+}
+function hasOwn(input, key) {
+  return Object.prototype.hasOwnProperty.call(input, key);
+}
+function toNullableText(value) {
+  const trimmed = value?.trim();
+  return trimmed ? trimmed : null;
+}
+function toNullableDecimal(value) {
+  if (value === null || value === void 0) return null;
+  if (typeof value === "number") return Number.isFinite(value) ? String(value) : null;
+  const trimmed = value.trim();
+  return trimmed ? trimmed : null;
+}
+function toVendorPolicyEntityData(input) {
+  return {
+    vendorName: input.vendorName,
+    vendorRef: input.vendorRef ?? null,
+    coverageMonths: input.coverageMonths ?? null,
+    claimableReasonCodes: input.claimableReasonCodes ?? null,
+    recoveryRatePct: toNullableDecimal(input.recoveryRatePct),
+    contactEmail: input.contactEmail ?? null,
+    autoGenerateRecovery: input.autoGenerateRecovery ?? false,
+    isActive: input.isActive ?? true
+  };
+}
+function applyVendorPolicyUpdate(entity, input) {
+  if (hasOwn(input, "vendorName") && input.vendorName) entity.vendorName = input.vendorName;
+  if (hasOwn(input, "vendorRef")) entity.vendorRef = input.vendorRef ?? null;
+  if (hasOwn(input, "coverageMonths")) entity.coverageMonths = input.coverageMonths ?? null;
+  if (hasOwn(input, "claimableReasonCodes")) entity.claimableReasonCodes = input.claimableReasonCodes ?? null;
+  if (hasOwn(input, "recoveryRatePct")) entity.recoveryRatePct = toNullableDecimal(input.recoveryRatePct);
+  if (hasOwn(input, "contactEmail")) entity.contactEmail = input.contactEmail ?? null;
+  if (hasOwn(input, "autoGenerateRecovery")) entity.autoGenerateRecovery = input.autoGenerateRecovery === true;
+  if (hasOwn(input, "isActive")) entity.isActive = input.isActive !== false;
+}
+function toRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function readString(record, snakeKey, camelKey) {
+  const value = record[snakeKey] ?? record[camelKey];
+  return typeof value === "string" ? value : null;
+}
+function readNumber(record, snakeKey, camelKey) {
+  const value = record[snakeKey] ?? record[camelKey];
+  if (typeof value === "number") return Number.isFinite(value) ? value : null;
+  if (typeof value === "string") {
+    const parsed = Number(value);
+    return Number.isFinite(parsed) ? parsed : null;
+  }
+  return null;
+}
+function readBool(record, snakeKey, camelKey) {
+  const value = record[snakeKey] ?? record[camelKey];
+  return value === true;
+}
+function readStringArray(record, snakeKey, camelKey) {
+  const value = record[snakeKey] ?? record[camelKey];
+  if (!Array.isArray(value)) return null;
+  return value.filter((entry) => typeof entry === "string");
+}
+function toIso(value) {
+  if (value instanceof Date) return value.toISOString();
+  if (typeof value === "string") {
+    const date = new Date(value);
+    return Number.isNaN(date.getTime()) ? value : date.toISOString();
+  }
+  return null;
+}
+function isDetailQuery(query) {
+  if (query.id) return true;
+  return Array.isArray(query.ids) && query.ids.length === 1;
+}
+function detailIds(query) {
+  if (query.id) return [query.id];
+  if (Array.isArray(query.ids) && query.ids.length === 1) return query.ids;
+  return [];
+}
+function transformVendorPolicyItem(item) {
+  const record = toRecord(item);
+  if (!Object.keys(record).length) return item;
+  const result = {
+    id: readString(record, "id", "id"),
+    organizationId: readString(record, "organization_id", "organizationId"),
+    tenantId: readString(record, "tenant_id", "tenantId"),
+    vendorName: readString(record, "vendor_name", "vendorName"),
+    vendorRef: readString(record, "vendor_ref", "vendorRef"),
+    coverageMonths: readNumber(record, "coverage_months", "coverageMonths"),
+    claimableReasonCodes: readStringArray(record, "claimable_reason_codes", "claimableReasonCodes"),
+    recoveryRatePct: readString(record, "recovery_rate_pct", "recoveryRatePct"),
+    autoGenerateRecovery: readBool(record, "auto_generate_recovery", "autoGenerateRecovery"),
+    isActive: readBool(record, "is_active", "isActive"),
+    createdAt: toIso(record.created_at ?? record.createdAt),
+    updatedAt: toIso(record.updated_at ?? record.updatedAt),
+    deletedAt: toIso(record.deleted_at ?? record.deletedAt)
+  };
+  if (hasOwn(record, "contact_email") || hasOwn(record, "contactEmail")) {
+    result.contactEmail = readString(record, "contact_email", "contactEmail");
+  }
+  return result;
+}
+async function hydrateDetailContactEmail(payload, ctx) {
+  const ids = detailIds(ctx.query);
+  if (!ids.length || !Array.isArray(payload.items) || !payload.items.length) return;
+  const tenantId = ctx.auth?.tenantId ?? null;
+  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null;
+  if (!tenantId || !organizationId) return;
+  const em = ctx.container.resolve("em").fork();
+  const policies = await findWithDecryption(
+    em,
+    WarrantyVendorPolicy,
+    { id: { $in: ids }, tenantId, organizationId, deletedAt: null },
+    {},
+    { tenantId, organizationId }
+  );
+  const contactEmailById = new Map(policies.map((policy) => [policy.id, policy.contactEmail ?? null]));
+  for (const item of payload.items) {
+    const record = toRecord(item);
+    const id = readString(record, "id", "id");
+    if (!id || !contactEmailById.has(id)) continue;
+    record.contactEmail = contactEmailById.get(id) ?? null;
+  }
+}
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: WarrantyVendorPolicy,
+    idField: "id",
+    orgField: "organizationId",
+    tenantField: "tenantId",
+    softDeleteField: "deletedAt"
+  },
+  indexer: { entityType: E.warranty_claims.warranty_vendor_policy },
+  list: {
+    schema: listSchema,
+    entityId: E.warranty_claims.warranty_vendor_policy,
+    fields: (query) => isDetailQuery(query) ? detailFields : baseListFields,
+    sortFieldMap: {
+      vendorName: F.vendor_name,
+      createdAt: F.created_at,
+      updatedAt: F.updated_at
+    },
+    buildFilters: async (query) => {
+      const filters = {};
+      applyIdsFilter(filters, query);
+      if (query.isActive !== void 0) filters[F.is_active] = { $eq: query.isActive };
+      if (query.autoGenerateRecovery !== void 0) {
+        filters[F.auto_generate_recovery] = { $eq: query.autoGenerateRecovery };
+      }
+      if (query.search) {
+        const pattern = buildIlikeTerm(query.search);
+        filters.$or = [
+          { [F.vendor_name]: { $ilike: pattern } },
+          { [F.vendor_ref]: { $ilike: pattern } }
+        ];
+      }
+      return filters;
+    },
+    transformItem: transformVendorPolicyItem
+  },
+  hooks: {
+    afterList: hydrateDetailContactEmail
+  },
+  create: {
+    schema: rawBodySchema,
+    mapToEntity: (input, ctx) => toVendorPolicyEntityData(parseCreateInput(input, ctx))
+  },
+  update: {
+    schema: rawBodySchema,
+    getId: (input) => {
+      const id = input.id;
+      return typeof id === "string" ? id : "";
+    },
+    applyToEntity: (entity, input, ctx) => {
+      applyVendorPolicyUpdate(entity, parseUpdateInput(input, ctx));
+    },
+    response: () => ({ ok: true })
+  },
+  del: { idFrom: "query", softDelete: true, response: () => ({ ok: true }) }
+});
+const GET = crud.GET;
+const POST = crud.POST;
+const PUT = crud.PUT;
+const DELETE = crud.DELETE;
+const vendorPolicyListItemSchema = z.object({
+  id: z.string().uuid().nullable(),
+  organizationId: z.string().uuid().nullable(),
+  tenantId: z.string().uuid().nullable(),
+  vendorName: z.string().nullable(),
+  vendorRef: z.string().nullable(),
+  coverageMonths: z.number().nullable(),
+  claimableReasonCodes: z.array(z.string()).nullable(),
+  recoveryRatePct: z.string().nullable(),
+  contactEmail: z.string().email().nullable().optional(),
+  autoGenerateRecovery: z.boolean(),
+  isActive: z.boolean(),
+  createdAt: z.string().nullable(),
+  updatedAt: z.string().nullable()
+}).passthrough();
+const openApi = createWarrantyClaimsCrudOpenApi({
+  resourceName: "WarrantyVendorPolicy",
+  pluralName: "WarrantyVendorPolicies",
+  querySchema: listSchema,
+  listResponseSchema: createPagedListResponseSchema(vendorPolicyListItemSchema),
+  create: {
+    schema: vendorPolicyCreateSchema,
+    responseSchema: z.object({ id: z.string().uuid() }),
+    description: "Creates a warranty vendor policy for supplier recovery."
+  },
+  update: {
+    schema: vendorPolicyUpdateSchema,
+    responseSchema: defaultOkResponseSchema,
+    description: "Updates a warranty vendor policy."
+  },
+  del: {
+    schema: vendorPolicyDeleteSchema,
+    responseSchema: defaultOkResponseSchema,
+    description: "Soft-deletes a warranty vendor policy."
+  }
+});
+export {
+  DELETE,
+  GET,
+  POST,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/vendor-policies/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/warranty_claims/api/vendor-policies/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { parseBooleanFromUnknown } from '@open-mercato/shared/lib/boolean'\nimport { buildIlikeTerm } from '@open-mercato/shared/lib/db/buildIlikeTerm'\nimport { applyIdsFilter } from '../../lib/apiIdsFilter'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { E } from '#generated/entities.ids.generated'\nimport * as F from '#generated/entities/warranty_vendor_policy'\nimport { WarrantyVendorPolicy } from '../../data/entities'\nimport {\n  vendorPolicyCreateSchema,\n  vendorPolicyUpdateSchema,\n  vendorPolicyDeleteSchema,\n  type VendorPolicyCreateInput,\n  type VendorPolicyUpdateInput,\n} from '../../data/validators'\nimport {\n  createPagedListResponseSchema,\n  createWarrantyClaimsCrudOpenApi,\n  defaultOkResponseSchema,\n} from '../openapi'\n\nconst rawBodySchema = z.object({}).passthrough()\nconst uuid = z.string().uuid()\n\nconst idsSchema = z.preprocess((value) => {\n  if (typeof value === 'string') {\n    return value\n      .split(',')\n      .map((part) => part.trim())\n      .filter(Boolean)\n  }\n  return value\n}, z.array(uuid).min(1).max(500).optional())\n\nconst booleanQuerySchema = z.preprocess((value) => parseBooleanFromUnknown(value) ?? undefined, z.boolean().optional())\n\nconst listSchema = z\n  .object({\n    id: uuid.optional(),\n    ids: idsSchema,\n    search: z.string().trim().max(300).optional(),\n    isActive: booleanQuerySchema,\n    autoGenerateRecovery: booleanQuerySchema,\n    page: z.coerce.number().int().min(1).default(1),\n    pageSize: z.coerce.number().int().min(1).max(100).default(20),\n    sortField: z.enum(['vendorName', 'updatedAt', 'createdAt']).optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n  })\n  .passthrough()\n\ntype VendorPolicyListQuery = z.infer<typeof listSchema>\ntype RawVendorPolicyInput = z.infer<typeof rawBodySchema>\n\ntype VendorPolicyListPayload = {\n  items?: unknown[]\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['warranty_claims.vendor_policy.manage'] },\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.vendor_policy.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['warranty_claims.vendor_policy.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['warranty_claims.vendor_policy.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst baseListFields = [\n  F.id,\n  F.organization_id,\n  F.tenant_id,\n  F.vendor_name,\n  F.vendor_ref,\n  F.coverage_months,\n  F.claimable_reason_codes,\n  F.recovery_rate_pct,\n  F.auto_generate_recovery,\n  F.is_active,\n  F.created_at,\n  F.updated_at,\n  F.deleted_at,\n]\n\nconst detailFields = [...baseListFields, F.contact_email]\n\nfunction scopeFromContext(ctx: CrudCtx): { organizationId: string; tenantId: string } {\n  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n  const tenantId = ctx.auth?.tenantId ?? null\n  if (!organizationId || !tenantId) {\n    throw new CrudHttpError(400, { error: '[internal] warranty vendor policy scope is missing' })\n  }\n  return { organizationId, tenantId }\n}\n\nfunction parseCreateInput(input: RawVendorPolicyInput, ctx: CrudCtx): VendorPolicyCreateInput {\n  return vendorPolicyCreateSchema.parse({\n    ...input,\n    ...scopeFromContext(ctx),\n  })\n}\n\nfunction parseUpdateInput(input: RawVendorPolicyInput, ctx: CrudCtx): VendorPolicyUpdateInput {\n  return vendorPolicyUpdateSchema.parse({\n    ...input,\n    ...scopeFromContext(ctx),\n  })\n}\n\nfunction hasOwn(input: object, key: string): boolean {\n  return Object.prototype.hasOwnProperty.call(input, key)\n}\n\nfunction toNullableText(value: string | null | undefined): string | null {\n  const trimmed = value?.trim()\n  return trimmed ? trimmed : null\n}\n\nfunction toNullableDecimal(value: number | string | null | undefined): string | null {\n  if (value === null || value === undefined) return null\n  if (typeof value === 'number') return Number.isFinite(value) ? String(value) : null\n  const trimmed = value.trim()\n  return trimmed ? trimmed : null\n}\n\nfunction toVendorPolicyEntityData(input: VendorPolicyCreateInput): Record<string, unknown> {\n  return {\n    vendorName: input.vendorName,\n    vendorRef: input.vendorRef ?? null,\n    coverageMonths: input.coverageMonths ?? null,\n    claimableReasonCodes: input.claimableReasonCodes ?? null,\n    recoveryRatePct: toNullableDecimal(input.recoveryRatePct),\n    contactEmail: input.contactEmail ?? null,\n    autoGenerateRecovery: input.autoGenerateRecovery ?? false,\n    isActive: input.isActive ?? true,\n  }\n}\n\nfunction applyVendorPolicyUpdate(entity: WarrantyVendorPolicy, input: VendorPolicyUpdateInput): void {\n  if (hasOwn(input, 'vendorName') && input.vendorName) entity.vendorName = input.vendorName\n  if (hasOwn(input, 'vendorRef')) entity.vendorRef = input.vendorRef ?? null\n  if (hasOwn(input, 'coverageMonths')) entity.coverageMonths = input.coverageMonths ?? null\n  if (hasOwn(input, 'claimableReasonCodes')) entity.claimableReasonCodes = input.claimableReasonCodes ?? null\n  if (hasOwn(input, 'recoveryRatePct')) entity.recoveryRatePct = toNullableDecimal(input.recoveryRatePct)\n  if (hasOwn(input, 'contactEmail')) entity.contactEmail = input.contactEmail ?? null\n  if (hasOwn(input, 'autoGenerateRecovery')) entity.autoGenerateRecovery = input.autoGenerateRecovery === true\n  if (hasOwn(input, 'isActive')) entity.isActive = input.isActive !== false\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nfunction readString(record: Record<string, unknown>, snakeKey: string, camelKey: string): string | null {\n  const value = record[snakeKey] ?? record[camelKey]\n  return typeof value === 'string' ? value : null\n}\n\nfunction readNumber(record: Record<string, unknown>, snakeKey: string, camelKey: string): number | null {\n  const value = record[snakeKey] ?? record[camelKey]\n  if (typeof value === 'number') return Number.isFinite(value) ? value : null\n  if (typeof value === 'string') {\n    const parsed = Number(value)\n    return Number.isFinite(parsed) ? parsed : null\n  }\n  return null\n}\n\nfunction readBool(record: Record<string, unknown>, snakeKey: string, camelKey: string): boolean {\n  const value = record[snakeKey] ?? record[camelKey]\n  return value === true\n}\n\nfunction readStringArray(record: Record<string, unknown>, snakeKey: string, camelKey: string): string[] | null {\n  const value = record[snakeKey] ?? record[camelKey]\n  if (!Array.isArray(value)) return null\n  return value.filter((entry): entry is string => typeof entry === 'string')\n}\n\nfunction toIso(value: unknown): string | null {\n  if (value instanceof Date) return value.toISOString()\n  if (typeof value === 'string') {\n    const date = new Date(value)\n    return Number.isNaN(date.getTime()) ? value : date.toISOString()\n  }\n  return null\n}\n\nfunction isDetailQuery(query: VendorPolicyListQuery): boolean {\n  if (query.id) return true\n  return Array.isArray(query.ids) && query.ids.length === 1\n}\n\nfunction detailIds(query: VendorPolicyListQuery): string[] {\n  if (query.id) return [query.id]\n  if (Array.isArray(query.ids) && query.ids.length === 1) return query.ids\n  return []\n}\n\nfunction transformVendorPolicyItem(item: unknown): unknown {\n  const record = toRecord(item)\n  if (!Object.keys(record).length) return item\n  const result: Record<string, unknown> = {\n    id: readString(record, 'id', 'id'),\n    organizationId: readString(record, 'organization_id', 'organizationId'),\n    tenantId: readString(record, 'tenant_id', 'tenantId'),\n    vendorName: readString(record, 'vendor_name', 'vendorName'),\n    vendorRef: readString(record, 'vendor_ref', 'vendorRef'),\n    coverageMonths: readNumber(record, 'coverage_months', 'coverageMonths'),\n    claimableReasonCodes: readStringArray(record, 'claimable_reason_codes', 'claimableReasonCodes'),\n    recoveryRatePct: readString(record, 'recovery_rate_pct', 'recoveryRatePct'),\n    autoGenerateRecovery: readBool(record, 'auto_generate_recovery', 'autoGenerateRecovery'),\n    isActive: readBool(record, 'is_active', 'isActive'),\n    createdAt: toIso(record.created_at ?? record.createdAt),\n    updatedAt: toIso(record.updated_at ?? record.updatedAt),\n    deletedAt: toIso(record.deleted_at ?? record.deletedAt),\n  }\n  if (hasOwn(record, 'contact_email') || hasOwn(record, 'contactEmail')) {\n    result.contactEmail = readString(record, 'contact_email', 'contactEmail')\n  }\n  return result\n}\n\nasync function hydrateDetailContactEmail(\n  payload: VendorPolicyListPayload,\n  ctx: CrudCtx & { query: VendorPolicyListQuery },\n): Promise<void> {\n  const ids = detailIds(ctx.query)\n  if (!ids.length || !Array.isArray(payload.items) || !payload.items.length) return\n  const tenantId = ctx.auth?.tenantId ?? null\n  const organizationId = ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n  if (!tenantId || !organizationId) return\n  const em = (ctx.container.resolve('em') as EntityManager).fork()\n  const policies = await findWithDecryption(\n    em,\n    WarrantyVendorPolicy,\n    { id: { $in: ids }, tenantId, organizationId, deletedAt: null },\n    {},\n    { tenantId, organizationId },\n  )\n  const contactEmailById = new Map(policies.map((policy) => [policy.id, policy.contactEmail ?? null]))\n  for (const item of payload.items) {\n    const record = toRecord(item)\n    const id = readString(record, 'id', 'id')\n    if (!id || !contactEmailById.has(id)) continue\n    record.contactEmail = contactEmailById.get(id) ?? null\n  }\n}\n\nconst crud = makeCrudRoute<RawVendorPolicyInput, RawVendorPolicyInput, VendorPolicyListQuery>({\n  metadata: routeMetadata,\n  orm: {\n    entity: WarrantyVendorPolicy,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: { entityType: E.warranty_claims.warranty_vendor_policy },\n  list: {\n    schema: listSchema,\n    entityId: E.warranty_claims.warranty_vendor_policy,\n    fields: (query) => (isDetailQuery(query) ? detailFields : baseListFields),\n    sortFieldMap: {\n      vendorName: F.vendor_name,\n      createdAt: F.created_at,\n      updatedAt: F.updated_at,\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      applyIdsFilter(filters, query)\n      if (query.isActive !== undefined) filters[F.is_active] = { $eq: query.isActive }\n      if (query.autoGenerateRecovery !== undefined) {\n        filters[F.auto_generate_recovery] = { $eq: query.autoGenerateRecovery }\n      }\n      if (query.search) {\n        const pattern = buildIlikeTerm(query.search)\n        filters.$or = [\n          { [F.vendor_name]: { $ilike: pattern } },\n          { [F.vendor_ref]: { $ilike: pattern } },\n        ]\n      }\n      return filters\n    },\n    transformItem: transformVendorPolicyItem,\n  },\n  hooks: {\n    afterList: hydrateDetailContactEmail,\n  },\n  create: {\n    schema: rawBodySchema,\n    mapToEntity: (input, ctx) => toVendorPolicyEntityData(parseCreateInput(input, ctx)),\n  },\n  update: {\n    schema: rawBodySchema,\n    getId: (input) => {\n      const id = input.id\n      return typeof id === 'string' ? id : ''\n    },\n    applyToEntity: (entity, input, ctx) => {\n      applyVendorPolicyUpdate(entity as WarrantyVendorPolicy, parseUpdateInput(input, ctx))\n    },\n    response: () => ({ ok: true }),\n  },\n  del: { idFrom: 'query', softDelete: true, response: () => ({ ok: true }) },\n})\n\nexport const GET = crud.GET\nexport const POST = crud.POST\nexport const PUT = crud.PUT\nexport const DELETE = crud.DELETE\n\nconst vendorPolicyListItemSchema = z.object({\n  id: z.string().uuid().nullable(),\n  organizationId: z.string().uuid().nullable(),\n  tenantId: z.string().uuid().nullable(),\n  vendorName: z.string().nullable(),\n  vendorRef: z.string().nullable(),\n  coverageMonths: z.number().nullable(),\n  claimableReasonCodes: z.array(z.string()).nullable(),\n  recoveryRatePct: z.string().nullable(),\n  contactEmail: z.string().email().nullable().optional(),\n  autoGenerateRecovery: z.boolean(),\n  isActive: z.boolean(),\n  createdAt: z.string().nullable(),\n  updatedAt: z.string().nullable(),\n}).passthrough()\n\nexport const openApi = createWarrantyClaimsCrudOpenApi({\n  resourceName: 'WarrantyVendorPolicy',\n  pluralName: 'WarrantyVendorPolicies',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(vendorPolicyListItemSchema),\n  create: {\n    schema: vendorPolicyCreateSchema,\n    responseSchema: z.object({ id: z.string().uuid() }),\n    description: 'Creates a warranty vendor policy for supplier recovery.',\n  },\n  update: {\n    schema: vendorPolicyUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates a warranty vendor policy.',\n  },\n  del: {\n    schema: vendorPolicyDeleteSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Soft-deletes a warranty vendor policy.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,+BAA+B;AACxC,SAAS,sBAAsB;AAC/B,SAAS,sBAAsB;AAC/B,SAAS,0BAA0B;AACnC,SAAS,SAAS;AAClB,YAAY,OAAO;AACnB,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAC/C,MAAM,OAAO,EAAE,OAAO,EAAE,KAAK;AAE7B,MAAM,YAAY,EAAE,WAAW,CAAC,UAAU;AACxC,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,MACJ,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AAAA,EACnB;AACA,SAAO;AACT,GAAG,EAAE,MAAM,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,CAAC;AAE3C,MAAM,qBAAqB,EAAE,WAAW,CAAC,UAAU,wBAAwB,KAAK,KAAK,QAAW,EAAE,QAAQ,EAAE,SAAS,CAAC;AAEtH,MAAM,aAAa,EAChB,OAAO;AAAA,EACN,IAAI,KAAK,SAAS;AAAA,EAClB,KAAK;AAAA,EACL,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC5C,UAAU;AAAA,EACV,sBAAsB;AAAA,EACtB,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EAC5D,WAAW,EAAE,KAAK,CAAC,cAAc,aAAa,WAAW,CAAC,EAAE,SAAS;AAAA,EACrE,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC,EACA,YAAY;AASf,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sCAAsC,EAAE;AAAA,EACpF,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sCAAsC,EAAE;AAAA,EACrF,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sCAAsC,EAAE;AAAA,EACpF,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,sCAAsC,EAAE;AACzF;AAEO,MAAM,WAAW;AAExB,MAAM,iBAAiB;AAAA,EACrB,EAAE;AAAA,EACF,EAAE;AAAA,EACF,EAAE;AAAA,EACF,EAAE;AAAA,EACF,EAAE;AAAA,EACF,EAAE;AAAA,EACF,EAAE;AAAA,EACF,EAAE;AAAA,EACF,EAAE;AAAA,EACF,EAAE;AAAA,EACF,EAAE;AAAA,EACF,EAAE;AAAA,EACF,EAAE;AACJ;AAEA,MAAM,eAAe,CAAC,GAAG,gBAAgB,EAAE,aAAa;AAExD,SAAS,iBAAiB,KAA4D;AACpF,QAAM,iBAAiB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AACxE,QAAM,WAAW,IAAI,MAAM,YAAY;AACvC,MAAI,CAAC,kBAAkB,CAAC,UAAU;AAChC,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qDAAqD,CAAC;AAAA,EAC9F;AACA,SAAO,EAAE,gBAAgB,SAAS;AACpC;AAEA,SAAS,iBAAiB,OAA6B,KAAuC;AAC5F,SAAO,yBAAyB,MAAM;AAAA,IACpC,GAAG;AAAA,IACH,GAAG,iBAAiB,GAAG;AAAA,EACzB,CAAC;AACH;AAEA,SAAS,iBAAiB,OAA6B,KAAuC;AAC5F,SAAO,yBAAyB,MAAM;AAAA,IACpC,GAAG;AAAA,IACH,GAAG,iBAAiB,GAAG;AAAA,EACzB,CAAC;AACH;AAEA,SAAS,OAAO,OAAe,KAAsB;AACnD,SAAO,OAAO,UAAU,eAAe,KAAK,OAAO,GAAG;AACxD;AAEA,SAAS,eAAe,OAAiD;AACvE,QAAM,UAAU,OAAO,KAAK;AAC5B,SAAO,UAAU,UAAU;AAC7B;AAEA,SAAS,kBAAkB,OAA0D;AACnF,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,SAAS,KAAK,IAAI,OAAO,KAAK,IAAI;AAC/E,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,UAAU,UAAU;AAC7B;AAEA,SAAS,yBAAyB,OAAyD;AACzF,SAAO;AAAA,IACL,YAAY,MAAM;AAAA,IAClB,WAAW,MAAM,aAAa;AAAA,IAC9B,gBAAgB,MAAM,kBAAkB;AAAA,IACxC,sBAAsB,MAAM,wBAAwB;AAAA,IACpD,iBAAiB,kBAAkB,MAAM,eAAe;AAAA,IACxD,cAAc,MAAM,gBAAgB;AAAA,IACpC,sBAAsB,MAAM,wBAAwB;AAAA,IACpD,UAAU,MAAM,YAAY;AAAA,EAC9B;AACF;AAEA,SAAS,wBAAwB,QAA8B,OAAsC;AACnG,MAAI,OAAO,OAAO,YAAY,KAAK,MAAM,WAAY,QAAO,aAAa,MAAM;AAC/E,MAAI,OAAO,OAAO,WAAW,EAAG,QAAO,YAAY,MAAM,aAAa;AACtE,MAAI,OAAO,OAAO,gBAAgB,EAAG,QAAO,iBAAiB,MAAM,kBAAkB;AACrF,MAAI,OAAO,OAAO,sBAAsB,EAAG,QAAO,uBAAuB,MAAM,wBAAwB;AACvG,MAAI,OAAO,OAAO,iBAAiB,EAAG,QAAO,kBAAkB,kBAAkB,MAAM,eAAe;AACtG,MAAI,OAAO,OAAO,cAAc,EAAG,QAAO,eAAe,MAAM,gBAAgB;AAC/E,MAAI,OAAO,OAAO,sBAAsB,EAAG,QAAO,uBAAuB,MAAM,yBAAyB;AACxG,MAAI,OAAO,OAAO,UAAU,EAAG,QAAO,WAAW,MAAM,aAAa;AACtE;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,SAAS,WAAW,QAAiC,UAAkB,UAAiC;AACtG,QAAM,QAAQ,OAAO,QAAQ,KAAK,OAAO,QAAQ;AACjD,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAEA,SAAS,WAAW,QAAiC,UAAkB,UAAiC;AACtG,QAAM,QAAQ,OAAO,QAAQ,KAAK,OAAO,QAAQ;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,SAAS,OAAO,KAAK;AAC3B,WAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAAA,EAC5C;AACA,SAAO;AACT;AAEA,SAAS,SAAS,QAAiC,UAAkB,UAA2B;AAC9F,QAAM,QAAQ,OAAO,QAAQ,KAAK,OAAO,QAAQ;AACjD,SAAO,UAAU;AACnB;AAEA,SAAS,gBAAgB,QAAiC,UAAkB,UAAmC;AAC7G,QAAM,QAAQ,OAAO,QAAQ,KAAK,OAAO,QAAQ;AACjD,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAClC,SAAO,MAAM,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC3E;AAEA,SAAS,MAAM,OAA+B;AAC5C,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,WAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AAAA,EACjE;AACA,SAAO;AACT;AAEA,SAAS,cAAc,OAAuC;AAC5D,MAAI,MAAM,GAAI,QAAO;AACrB,SAAO,MAAM,QAAQ,MAAM,GAAG,KAAK,MAAM,IAAI,WAAW;AAC1D;AAEA,SAAS,UAAU,OAAwC;AACzD,MAAI,MAAM,GAAI,QAAO,CAAC,MAAM,EAAE;AAC9B,MAAI,MAAM,QAAQ,MAAM,GAAG,KAAK,MAAM,IAAI,WAAW,EAAG,QAAO,MAAM;AACrE,SAAO,CAAC;AACV;AAEA,SAAS,0BAA0B,MAAwB;AACzD,QAAM,SAAS,SAAS,IAAI;AAC5B,MAAI,CAAC,OAAO,KAAK,MAAM,EAAE,OAAQ,QAAO;AACxC,QAAM,SAAkC;AAAA,IACtC,IAAI,WAAW,QAAQ,MAAM,IAAI;AAAA,IACjC,gBAAgB,WAAW,QAAQ,mBAAmB,gBAAgB;AAAA,IACtE,UAAU,WAAW,QAAQ,aAAa,UAAU;AAAA,IACpD,YAAY,WAAW,QAAQ,eAAe,YAAY;AAAA,IAC1D,WAAW,WAAW,QAAQ,cAAc,WAAW;AAAA,IACvD,gBAAgB,WAAW,QAAQ,mBAAmB,gBAAgB;AAAA,IACtE,sBAAsB,gBAAgB,QAAQ,0BAA0B,sBAAsB;AAAA,IAC9F,iBAAiB,WAAW,QAAQ,qBAAqB,iBAAiB;AAAA,IAC1E,sBAAsB,SAAS,QAAQ,0BAA0B,sBAAsB;AAAA,IACvF,UAAU,SAAS,QAAQ,aAAa,UAAU;AAAA,IAClD,WAAW,MAAM,OAAO,cAAc,OAAO,SAAS;AAAA,IACtD,WAAW,MAAM,OAAO,cAAc,OAAO,SAAS;AAAA,IACtD,WAAW,MAAM,OAAO,cAAc,OAAO,SAAS;AAAA,EACxD;AACA,MAAI,OAAO,QAAQ,eAAe,KAAK,OAAO,QAAQ,cAAc,GAAG;AACrE,WAAO,eAAe,WAAW,QAAQ,iBAAiB,cAAc;AAAA,EAC1E;AACA,SAAO;AACT;AAEA,eAAe,0BACb,SACA,KACe;AACf,QAAM,MAAM,UAAU,IAAI,KAAK;AAC/B,MAAI,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,QAAQ,KAAK,KAAK,CAAC,QAAQ,MAAM,OAAQ;AAC3E,QAAM,WAAW,IAAI,MAAM,YAAY;AACvC,QAAM,iBAAiB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AACxE,MAAI,CAAC,YAAY,CAAC,eAAgB;AAClC,QAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,IAAI,GAAG,UAAU,gBAAgB,WAAW,KAAK;AAAA,IAC9D,CAAC;AAAA,IACD,EAAE,UAAU,eAAe;AAAA,EAC7B;AACA,QAAM,mBAAmB,IAAI,IAAI,SAAS,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,OAAO,gBAAgB,IAAI,CAAC,CAAC;AACnG,aAAW,QAAQ,QAAQ,OAAO;AAChC,UAAM,SAAS,SAAS,IAAI;AAC5B,UAAM,KAAK,WAAW,QAAQ,MAAM,IAAI;AACxC,QAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,EAAG;AACtC,WAAO,eAAe,iBAAiB,IAAI,EAAE,KAAK;AAAA,EACpD;AACF;AAEA,MAAM,OAAO,cAAiF;AAAA,EAC5F,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS,EAAE,YAAY,EAAE,gBAAgB,uBAAuB;AAAA,EAChE,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,gBAAgB;AAAA,IAC5B,QAAQ,CAAC,UAAW,cAAc,KAAK,IAAI,eAAe;AAAA,IAC1D,cAAc;AAAA,MACZ,YAAY,EAAE;AAAA,MACd,WAAW,EAAE;AAAA,MACb,WAAW,EAAE;AAAA,IACf;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAC1C,qBAAe,SAAS,KAAK;AAC7B,UAAI,MAAM,aAAa,OAAW,SAAQ,EAAE,SAAS,IAAI,EAAE,KAAK,MAAM,SAAS;AAC/E,UAAI,MAAM,yBAAyB,QAAW;AAC5C,gBAAQ,EAAE,sBAAsB,IAAI,EAAE,KAAK,MAAM,qBAAqB;AAAA,MACxE;AACA,UAAI,MAAM,QAAQ;AAChB,cAAM,UAAU,eAAe,MAAM,MAAM;AAC3C,gBAAQ,MAAM;AAAA,UACZ,EAAE,CAAC,EAAE,WAAW,GAAG,EAAE,QAAQ,QAAQ,EAAE;AAAA,UACvC,EAAE,CAAC,EAAE,UAAU,GAAG,EAAE,QAAQ,QAAQ,EAAE;AAAA,QACxC;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,eAAe;AAAA,EACjB;AAAA,EACA,OAAO;AAAA,IACL,WAAW;AAAA,EACb;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,aAAa,CAAC,OAAO,QAAQ,yBAAyB,iBAAiB,OAAO,GAAG,CAAC;AAAA,EACpF;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,OAAO,CAAC,UAAU;AAChB,YAAM,KAAK,MAAM;AACjB,aAAO,OAAO,OAAO,WAAW,KAAK;AAAA,IACvC;AAAA,IACA,eAAe,CAAC,QAAQ,OAAO,QAAQ;AACrC,8BAAwB,QAAgC,iBAAiB,OAAO,GAAG,CAAC;AAAA,IACtF;AAAA,IACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,EAC9B;AAAA,EACA,KAAK,EAAE,QAAQ,SAAS,YAAY,MAAM,UAAU,OAAO,EAAE,IAAI,KAAK,GAAG;AAC3E,CAAC;AAEM,MAAM,MAAM,KAAK;AACjB,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAE3B,MAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,sBAAsB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACnD,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS;AAAA,EACrD,sBAAsB,EAAE,QAAQ;AAAA,EAChC,UAAU,EAAE,QAAQ;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC,EAAE,YAAY;AAER,MAAM,UAAU,gCAAgC;AAAA,EACrD,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,0BAA0B;AAAA,EAC5E,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAClD,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
+  "names": []
+}

package/dist/modules/warranty_claims/api/vendor-recovery/route.js

@@ -0,0 +1,130 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
+import { vendorRecoveryInputSchema } from "../../data/validators.js";
+import { WARRANTY_CLAIM_RESOURCE_KIND } from "../../commands/shared.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("warranty_claims");
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["warranty_claims.claim.manage"] }
+};
+function toRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+async function resolveActionContext(req) {
+  const container = await createRequestContainer();
+  const auth = await getAuthFromRequest(req);
+  const { translate } = await resolveTranslations();
+  if (!auth || !auth.tenantId) {
+    throw new CrudHttpError(401, { error: translate("warranty_claims.errors.unauthorized", "Unauthorized") });
+  }
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+  const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+  if (!organizationId) {
+    throw new CrudHttpError(400, { error: translate("warranty_claims.errors.organization_required", "Organization context is required") });
+  }
+  return {
+    ctx: {
+      container,
+      auth,
+      organizationScope: scope,
+      selectedOrganizationId: organizationId,
+      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),
+      request: req
+    },
+    tenantId: auth.tenantId,
+    organizationId,
+    translate
+  };
+}
+function toVendorRecoveryInput(scopedPayload) {
+  return vendorRecoveryInputSchema.parse({
+    claimId: scopedPayload.claimId,
+    lineIds: scopedPayload.lineIds,
+    vendorName: scopedPayload.vendorName,
+    vendorRef: scopedPayload.vendorRef
+  });
+}
+async function runGuard(req, context, input) {
+  const userId = context.ctx.auth?.sub;
+  if (!userId) {
+    throw new CrudHttpError(401, { error: context.translate("warranty_claims.errors.unauthorized", "Unauthorized") });
+  }
+  return runRouteMutationGuards({
+    container: context.ctx.container,
+    req,
+    auth: {
+      userId,
+      tenantId: context.tenantId,
+      organizationId: context.organizationId
+    },
+    input: {
+      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,
+      resourceId: input.claimId,
+      operation: "custom",
+      mutationPayload: { ...input }
+    }
+  });
+}
+async function POST(req) {
+  try {
+    const context = await resolveActionContext(req);
+    const payload = toRecord(await readJsonSafe(req, {}));
+    const scopedPayload = withScopedPayload(payload, context.ctx, context.translate);
+    const input = toVendorRecoveryInput(scopedPayload);
+    const guarded = await runGuard(req, context, input);
+    if (!guarded.ok) {
+      return guarded.response;
+    }
+    const commandInput = guarded.modifiedPayload ? toVendorRecoveryInput(guarded.modifiedPayload) : input;
+    const commandBus = context.ctx.container.resolve("commandBus");
+    const { result } = await commandBus.execute(
+      "warranty_claims.claim.create_vendor_recovery",
+      { input: commandInput, ctx: context.ctx }
+    );
+    const createdClaimId = result?.claimId;
+    if (typeof createdClaimId !== "string") {
+      throw new CrudHttpError(400, { error: context.translate("warranty_claims.errors.notFound", "Warranty claim not found.") });
+    }
+    await guarded.runAfterSuccess();
+    return NextResponse.json({ ok: true, claimId: createdClaimId });
+  } catch (err) {
+    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    const { translate } = await resolveTranslations();
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });
+    }
+    logger.error("warranty_claims.vendor-recovery.post failed", { err });
+    return NextResponse.json({ error: translate("warranty_claims.errors.save_failed", "Failed to save warranty claim") }, { status: 400 });
+  }
+}
+const openApi = {
+  tag: "Warranty Claims",
+  summary: "Create vendor recovery claim",
+  methods: {
+    POST: {
+      summary: "Create a linked vendor-recovery claim from resolved source lines",
+      requestBody: { contentType: "application/json", schema: vendorRecoveryInputSchema },
+      responses: [
+        {
+          status: 200,
+          description: "Vendor recovery claim created",
+          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid() })
+        }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/warranty_claims/api/vendor-recovery/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/warranty_claims/api/vendor-recovery/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { vendorRecoveryInputSchema, type VendorRecoveryInput } from '../../data/validators'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../commands/shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\ntype ActionRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  translate: (key: string, fallback?: string) => string\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.claim.manage'] },\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nasync function resolveActionContext(req: Request): Promise<ActionRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required') })\n  }\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    translate,\n  }\n}\n\nfunction toVendorRecoveryInput(scopedPayload: Record<string, unknown>): VendorRecoveryInput {\n  return vendorRecoveryInputSchema.parse({\n    claimId: scopedPayload.claimId,\n    lineIds: scopedPayload.lineIds,\n    vendorName: scopedPayload.vendorName,\n    vendorRef: scopedPayload.vendorRef,\n  })\n}\n\nasync function runGuard(\n  req: Request,\n  context: ActionRouteContext,\n  input: VendorRecoveryInput,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: context.translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: input.claimId,\n      operation: 'custom',\n      mutationPayload: { ...input },\n    },\n  })\n}\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveActionContext(req)\n    const payload = toRecord(await readJsonSafe(req, {}))\n    const scopedPayload = withScopedPayload(payload, context.ctx, context.translate)\n    const input = toVendorRecoveryInput(scopedPayload)\n    const guarded = await runGuard(req, context, input)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const commandInput = guarded.modifiedPayload ? toVendorRecoveryInput(guarded.modifiedPayload) : input\n\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute<VendorRecoveryInput, { claimId: string }>(\n      'warranty_claims.claim.create_vendor_recovery',\n      { input: commandInput, ctx: context.ctx },\n    )\n    const createdClaimId = result?.claimId\n    if (typeof createdClaimId !== 'string') {\n      throw new CrudHttpError(400, { error: context.translate('warranty_claims.errors.notFound', 'Warranty claim not found.') })\n    }\n\n    await guarded.runAfterSuccess()\n\n    return NextResponse.json({ ok: true, claimId: createdClaimId })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.vendor-recovery.post failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.save_failed', 'Failed to save warranty claim') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Create vendor recovery claim',\n  methods: {\n    POST: {\n      summary: 'Create a linked vendor-recovery claim from resolved source lines',\n      requestBody: { contentType: 'application/json', schema: vendorRecoveryInputSchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Vendor recovery claim created',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,8BAA6D;AACtE,SAAS,yBAAyB;AAElC,SAAS,iCAA2D;AACpE,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAStC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAC/E;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,eAAe,qBAAqB,KAA2C;AAC7E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,kCAAkC,EAAE,CAAC;AAAA,EACvI;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,sBAAsB,eAA6D;AAC1F,SAAO,0BAA0B,MAAM;AAAA,IACrC,SAAS,cAAc;AAAA,IACvB,SAAS,cAAc;AAAA,IACvB,YAAY,cAAc;AAAA,IAC1B,WAAW,cAAc;AAAA,EAC3B,CAAC;AACH;AAEA,eAAe,SACb,KACA,SACA,OACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAClH;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,UAAM,UAAU,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACpD,UAAM,gBAAgB,kBAAkB,SAAS,QAAQ,KAAK,QAAQ,SAAS;AAC/E,UAAM,QAAQ,sBAAsB,aAAa;AACjD,UAAM,UAAU,MAAM,SAAS,KAAK,SAAS,KAAK;AAClD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,eAAe,QAAQ,kBAAkB,sBAAsB,QAAQ,eAAe,IAAI;AAEhG,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAC7D,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA,EAAE,OAAO,cAAc,KAAK,QAAQ,IAAI;AAAA,IAC1C;AACA,UAAM,iBAAiB,QAAQ;AAC/B,QAAI,OAAO,mBAAmB,UAAU;AACtC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,mCAAmC,2BAA2B,EAAE,CAAC;AAAA,IAC3H;AAEA,UAAM,QAAQ,gBAAgB;AAE9B,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,eAAe,CAAC;AAAA,EAChE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,+CAA+C,EAAE,IAAI,CAAC;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,+BAA+B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvI;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,0BAA0B;AAAA,MAClF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,QAClE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}