npm - @open-mercato/core - Versions diffs - 0.7.1-develop.7130.1.fef2396fd8 → 0.7.1-develop.7135.1.19bf969756 - Mend

@open-mercato/core 0.7.1-develop.7130.1.fef2396fd8 → 0.7.1-develop.7135.1.19bf969756

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (242) hide show

package/dist/modules/warranty_claims/api/return-label/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/warranty_claims/api/return-label/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { WarrantyClaim, WarrantyClaimLine } from '../../data/entities'\nimport { claimSetReturnLabelSchema, type ClaimSetReturnLabelInput } from '../../data/validators'\nimport type { WarrantyReturnLabelProvider } from '../../services/returnLabelProvider'\nimport {\n  WARRANTY_CLAIM_RESOURCE_KIND,\n  enforceWarrantyClaimOptimisticLock,\n  requireScopedClaim,\n} from '../../commands/shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\ntype ActionRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  translate: (key: string, fallback?: string) => string\n}\n\ntype ReturnLabelCreatedResponse = {\n  status: 'created'\n  labelUrl: string | null\n  trackingNumber: string | null\n  carrier: string | null\n}\ntype ReturnLabelCommandResult = Omit<ReturnLabelCreatedResponse, 'status'> & { claimId: string }\n\nconst uuid = z.string().uuid()\nconst returnLabelText = (max: number) => z.string().trim().min(1).max(max).optional()\nconst optimisticLockTokenSchema = z.string().datetime().nullable().optional()\n\nconst returnLabelRequestSchema = z\n  .object({\n    claimId: uuid,\n    manual: z.boolean().optional(),\n    labelUrl: returnLabelText(2048),\n    trackingNumber: returnLabelText(191),\n    carrier: returnLabelText(120),\n    updatedAt: optimisticLockTokenSchema,\n  })\n  .strict()\n\ntype ReturnLabelRequest = z.infer<typeof returnLabelRequestSchema>\n\nconst returnLabelResponseSchema = z.discriminatedUnion('status', [\n  z.object({\n    status: z.literal('created'),\n    labelUrl: z.string().nullable(),\n    trackingNumber: z.string().nullable(),\n    carrier: z.string().nullable(),\n  }),\n  z.object({ status: z.literal('notConfigured') }),\n])\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.claim.manage'] },\n}\n\nfunction translateKey(key: string): string {\n  return key\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nasync function resolveActionContext(req: Request): Promise<ActionRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: 'warranty_claims.errors.unauthorized' })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: 'warranty_claims.errors.organization_required' })\n  }\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    translate: translateKey,\n  }\n}\n\nfunction toReturnLabelRequest(payload: Record<string, unknown>): ReturnLabelRequest {\n  return returnLabelRequestSchema.parse({\n    claimId: payload.claimId ?? payload.id,\n    manual: payload.manual,\n    labelUrl: payload.labelUrl,\n    trackingNumber: payload.trackingNumber,\n    carrier: payload.carrier,\n    updatedAt: payload.updatedAt,\n  })\n}\n\nfunction isManualRequest(input: ReturnLabelRequest): boolean {\n  return input.manual === true\n    || input.labelUrl !== undefined\n    || input.trackingNumber !== undefined\n    || input.carrier !== undefined\n}\n\nfunction toSetReturnLabelInput(\n  input: ReturnLabelRequest,\n  context: ActionRouteContext,\n): ClaimSetReturnLabelInput {\n  const scopedPayload = withScopedPayload({\n    id: input.claimId,\n    labelUrl: input.labelUrl,\n    trackingNumber: input.trackingNumber,\n    carrier: input.carrier,\n    updatedAt: input.updatedAt,\n  }, context.ctx, context.translate)\n  return claimSetReturnLabelSchema.parse(scopedPayload)\n}\n\nasync function runGuard(\n  req: Request,\n  context: ActionRouteContext,\n  input: ReturnLabelRequest,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: 'warranty_claims.errors.unauthorized' })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: input.claimId,\n      operation: 'custom',\n      mutationPayload: { ...input },\n    },\n  })\n}\n\nasync function loadClaimAndLines(\n  context: ActionRouteContext,\n  claimId: string,\n): Promise<{ claim: WarrantyClaim; lines: WarrantyClaimLine[] }> {\n  const scope = { tenantId: context.tenantId, organizationId: context.organizationId }\n  const em = (context.ctx.container.resolve('em') as EntityManager).fork()\n  const claim = await requireScopedClaim(em, claimId, scope)\n  const lines = await findWithDecryption(\n    em,\n    WarrantyClaimLine,\n    { claim: claim.id, tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null },\n    {},\n    scope,\n  )\n  return { claim, lines }\n}\n\nfunction assertGeneratableStatus(claim: WarrantyClaim): void {\n  if (claim.status !== 'approved' && claim.status !== 'awaiting_return') {\n    throw new CrudHttpError(400, { error: 'warranty_claims.errors.returnLabelInvalidStatus' })\n  }\n}\n\nasync function executeSetReturnLabel(\n  commandBus: CommandBus,\n  input: ClaimSetReturnLabelInput,\n  ctx: CommandRuntimeContext,\n): Promise<ReturnLabelCreatedResponse> {\n  const { result } = await commandBus.execute<ClaimSetReturnLabelInput, ReturnLabelCommandResult>(\n    'warranty_claims.claim.set_return_label',\n    { input, ctx },\n  )\n  if (!result) throw new CrudHttpError(400, { error: 'warranty_claims.errors.save_failed' })\n  return {\n    status: 'created',\n    labelUrl: result.labelUrl,\n    trackingNumber: result.trackingNumber,\n    carrier: result.carrier,\n  }\n}\n\nexport function firstTranslatableIssueKey(err: z.ZodError): string {\n  const keyed = err.issues.find(\n    (issue) => typeof issue.message === 'string' && issue.message.startsWith('warranty_claims.'),\n  )?.message\n  return keyed ?? 'warranty_claims.errors.invalidInput'\n}\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveActionContext(req)\n    const requestInput = toReturnLabelRequest(toRecord(await readJsonSafe(req, {})))\n    const guarded = await runGuard(req, context, requestInput)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const guardedInput = guarded.modifiedPayload ? toReturnLabelRequest(guarded.modifiedPayload) : requestInput\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n\n    if (isManualRequest(guardedInput)) {\n      const response = await executeSetReturnLabel(\n        commandBus,\n        toSetReturnLabelInput(guardedInput, context),\n        context.ctx,\n      )\n      await guarded.runAfterSuccess()\n      return NextResponse.json(response)\n    }\n\n    const { claim, lines } = await loadClaimAndLines(context, guardedInput.claimId)\n    assertGeneratableStatus(claim)\n    await enforceWarrantyClaimOptimisticLock(\n      context.ctx,\n      claim,\n      WARRANTY_CLAIM_RESOURCE_KIND,\n      guardedInput.updatedAt ?? undefined,\n    )\n\n    const provider = context.ctx.container.resolve<WarrantyReturnLabelProvider>('warrantyReturnLabelProvider')\n    const result = await provider.createReturnLabel(\n      { claim, lines },\n      { tenantId: context.tenantId, organizationId: context.organizationId },\n      context.ctx.container,\n    )\n\n    if (result.status === 'notConfigured') {\n      return NextResponse.json({ status: 'notConfigured' })\n    }\n\n    const response = await executeSetReturnLabel(\n      commandBus,\n      toSetReturnLabelInput({\n        ...guardedInput,\n        labelUrl: result.labelUrl,\n        trackingNumber: result.trackingNumber,\n        carrier: result.carrier,\n      }, context),\n      context.ctx,\n    )\n    await guarded.runAfterSuccess()\n    return NextResponse.json(response)\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: firstTranslatableIssueKey(err) }, { status: 400 })\n    }\n    logger.error('warranty_claims.return-label.post failed', { err })\n    return NextResponse.json({ error: 'warranty_claims.errors.save_failed' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Create or record a return label for a warranty claim',\n  methods: {\n    POST: {\n      summary: 'Generate a carrier return label or record manual label details',\n      requestBody: { contentType: 'application/json', schema: returnLabelRequestSchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Return label created or provider not configured',\n          schema: returnLabelResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,8BAA6D;AACtE,SAAS,yBAAyB;AAElC,SAAS,0BAA0B;AACnC,SAAwB,yBAAyB;AACjD,SAAS,iCAAgE;AAEzE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAiB7C,MAAM,OAAO,EAAE,OAAO,EAAE,KAAK;AAC7B,MAAM,kBAAkB,CAAC,QAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AACpF,MAAM,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;AAE5E,MAAM,2BAA2B,EAC9B,OAAO;AAAA,EACN,SAAS;AAAA,EACT,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC7B,UAAU,gBAAgB,IAAI;AAAA,EAC9B,gBAAgB,gBAAgB,GAAG;AAAA,EACnC,SAAS,gBAAgB,GAAG;AAAA,EAC5B,WAAW;AACb,CAAC,EACA,OAAO;AAIV,MAAM,4BAA4B,EAAE,mBAAmB,UAAU;AAAA,EAC/D,EAAE,OAAO;AAAA,IACP,QAAQ,EAAE,QAAQ,SAAS;AAAA,IAC3B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,IAC9B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,IACpC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,CAAC;AAAA,EACD,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,eAAe,EAAE,CAAC;AACjD,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAC/E;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO;AACT;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,eAAe,qBAAqB,KAA2C;AAC7E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,EAC/E;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,+CAA+C,CAAC;AAAA,EACxF;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA,WAAW;AAAA,EACb;AACF;AAEA,SAAS,qBAAqB,SAAsD;AAClF,SAAO,yBAAyB,MAAM;AAAA,IACpC,SAAS,QAAQ,WAAW,QAAQ;AAAA,IACpC,QAAQ,QAAQ;AAAA,IAChB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,SAAS,QAAQ;AAAA,IACjB,WAAW,QAAQ;AAAA,EACrB,CAAC;AACH;AAEA,SAAS,gBAAgB,OAAoC;AAC3D,SAAO,MAAM,WAAW,QACnB,MAAM,aAAa,UACnB,MAAM,mBAAmB,UACzB,MAAM,YAAY;AACzB;AAEA,SAAS,sBACP,OACA,SAC0B;AAC1B,QAAM,gBAAgB,kBAAkB;AAAA,IACtC,IAAI,MAAM;AAAA,IACV,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,SAAS,MAAM;AAAA,IACf,WAAW,MAAM;AAAA,EACnB,GAAG,QAAQ,KAAK,QAAQ,SAAS;AACjC,SAAO,0BAA0B,MAAM,aAAa;AACtD;AAEA,eAAe,SACb,KACA,SACA,OACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,EAC/E;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAe,kBACb,SACA,SAC+D;AAC/D,QAAM,QAAQ,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AACnF,QAAM,KAAM,QAAQ,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AACvE,QAAM,QAAQ,MAAM,mBAAmB,IAAI,SAAS,KAAK;AACzD,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,EAAE,OAAO,MAAM,IAAI,UAAU,MAAM,UAAU,gBAAgB,MAAM,gBAAgB,WAAW,KAAK;AAAA,IACnG,CAAC;AAAA,IACD;AAAA,EACF;AACA,SAAO,EAAE,OAAO,MAAM;AACxB;AAEA,SAAS,wBAAwB,OAA4B;AAC3D,MAAI,MAAM,WAAW,cAAc,MAAM,WAAW,mBAAmB;AACrE,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,kDAAkD,CAAC;AAAA,EAC3F;AACF;AAEA,eAAe,sBACb,YACA,OACA,KACqC;AACrC,QAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,IAClC;AAAA,IACA,EAAE,OAAO,IAAI;AAAA,EACf;AACA,MAAI,CAAC,OAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qCAAqC,CAAC;AACzF,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,UAAU,OAAO;AAAA,IACjB,gBAAgB,OAAO;AAAA,IACvB,SAAS,OAAO;AAAA,EAClB;AACF;AAEO,SAAS,0BAA0B,KAAyB;AACjE,QAAM,QAAQ,IAAI,OAAO;AAAA,IACvB,CAAC,UAAU,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,WAAW,kBAAkB;AAAA,EAC7F,GAAG;AACH,SAAO,SAAS;AAClB;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,UAAM,eAAe,qBAAqB,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/E,UAAM,UAAU,MAAM,SAAS,KAAK,SAAS,YAAY;AACzD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,eAAe,QAAQ,kBAAkB,qBAAqB,QAAQ,eAAe,IAAI;AAC/F,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAE7D,QAAI,gBAAgB,YAAY,GAAG;AACjC,YAAMA,YAAW,MAAM;AAAA,QACrB;AAAA,QACA,sBAAsB,cAAc,OAAO;AAAA,QAC3C,QAAQ;AAAA,MACV;AACA,YAAM,QAAQ,gBAAgB;AAC9B,aAAO,aAAa,KAAKA,SAAQ;AAAA,IACnC;AAEA,UAAM,EAAE,OAAO,MAAM,IAAI,MAAM,kBAAkB,SAAS,aAAa,OAAO;AAC9E,4BAAwB,KAAK;AAC7B,UAAM;AAAA,MACJ,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,aAAa,aAAa;AAAA,IAC5B;AAEA,UAAM,WAAW,QAAQ,IAAI,UAAU,QAAqC,6BAA6B;AACzG,UAAM,SAAS,MAAM,SAAS;AAAA,MAC5B,EAAE,OAAO,MAAM;AAAA,MACf,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,MACrE,QAAQ,IAAI;AAAA,IACd;AAEA,QAAI,OAAO,WAAW,iBAAiB;AACrC,aAAO,aAAa,KAAK,EAAE,QAAQ,gBAAgB,CAAC;AAAA,IACtD;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA,sBAAsB;AAAA,QACpB,GAAG;AAAA,QACH,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO;AAAA,QACvB,SAAS,OAAO;AAAA,MAClB,GAAG,OAAO;AAAA,MACV,QAAQ;AAAA,IACV;AACA,UAAM,QAAQ,gBAAgB;AAC9B,WAAO,aAAa,KAAK,QAAQ;AAAA,EACnC,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,0BAA0B,GAAG,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AACA,WAAO,MAAM,4CAA4C,EAAE,IAAI,CAAC;AAChE,WAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,yBAAyB;AAAA,MACjF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { WarrantyClaim, WarrantyClaimLine } from '../../data/entities'\nimport { claimSetReturnLabelSchema, type ClaimSetReturnLabelInput } from '../../data/validators'\nimport type { WarrantyReturnLabelProvider } from '../../services/returnLabelProvider'\nimport {\n  WARRANTY_CLAIM_RESOURCE_KIND,\n  enforceWarrantyClaimOptimisticLock,\n  requireScopedClaim,\n} from '../../commands/shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\ntype ActionRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  translate: (key: string, fallback?: string) => string\n}\n\ntype ReturnLabelCreatedResponse = {\n  status: 'created'\n  labelUrl: string | null\n  trackingNumber: string | null\n  carrier: string | null\n}\ntype ReturnLabelCommandResult = Omit<ReturnLabelCreatedResponse, 'status'> & { claimId: string }\n\nconst uuid = z.string().uuid()\nconst returnLabelText = (max: number) => z.string().trim().min(1).max(max).optional()\nconst optimisticLockTokenSchema = z.string().datetime().nullable().optional()\n\nconst returnLabelRequestSchema = z\n  .object({\n    claimId: uuid,\n    manual: z.boolean().optional(),\n    labelUrl: returnLabelText(2048),\n    trackingNumber: returnLabelText(191),\n    carrier: returnLabelText(120),\n    updatedAt: optimisticLockTokenSchema,\n  })\n  .strict()\n\ntype ReturnLabelRequest = z.infer<typeof returnLabelRequestSchema>\n\nconst returnLabelResponseSchema = z.discriminatedUnion('status', [\n  z.object({\n    status: z.literal('created'),\n    labelUrl: z.string().nullable(),\n    trackingNumber: z.string().nullable(),\n    carrier: z.string().nullable(),\n  }),\n  z.object({ status: z.literal('notConfigured') }),\n])\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.claim.manage'] },\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nasync function resolveActionContext(\n  req: Request,\n  translate: ActionRouteContext['translate'],\n): Promise<ActionRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required.') })\n  }\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    translate,\n  }\n}\n\nfunction toReturnLabelRequest(payload: Record<string, unknown>): ReturnLabelRequest {\n  return returnLabelRequestSchema.parse({\n    claimId: payload.claimId ?? payload.id,\n    manual: payload.manual,\n    labelUrl: payload.labelUrl,\n    trackingNumber: payload.trackingNumber,\n    carrier: payload.carrier,\n    updatedAt: payload.updatedAt,\n  })\n}\n\nfunction isManualRequest(input: ReturnLabelRequest): boolean {\n  return input.manual === true\n    || input.labelUrl !== undefined\n    || input.trackingNumber !== undefined\n    || input.carrier !== undefined\n}\n\nfunction toSetReturnLabelInput(\n  input: ReturnLabelRequest,\n  context: ActionRouteContext,\n): ClaimSetReturnLabelInput {\n  const scopedPayload = withScopedPayload({\n    id: input.claimId,\n    labelUrl: input.labelUrl,\n    trackingNumber: input.trackingNumber,\n    carrier: input.carrier,\n    updatedAt: input.updatedAt,\n  }, context.ctx, context.translate)\n  return claimSetReturnLabelSchema.parse(scopedPayload)\n}\n\nasync function runGuard(\n  req: Request,\n  context: ActionRouteContext,\n  input: ReturnLabelRequest,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: context.translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: input.claimId,\n      operation: 'custom',\n      mutationPayload: { ...input },\n    },\n  })\n}\n\nasync function loadClaimAndLines(\n  context: ActionRouteContext,\n  claimId: string,\n): Promise<{ claim: WarrantyClaim; lines: WarrantyClaimLine[] }> {\n  const scope = { tenantId: context.tenantId, organizationId: context.organizationId }\n  const em = (context.ctx.container.resolve('em') as EntityManager).fork()\n  const claim = await requireScopedClaim(em, claimId, scope, {}, context.translate('warranty_claims.errors.notFound', 'Claim not found.'))\n  const lines = await findWithDecryption(\n    em,\n    WarrantyClaimLine,\n    { claim: claim.id, tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null },\n    {},\n    scope,\n  )\n  return { claim, lines }\n}\n\nfunction assertGeneratableStatus(claim: WarrantyClaim, translate: ActionRouteContext['translate']): void {\n  if (claim.status !== 'approved' && claim.status !== 'awaiting_return') {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.returnLabelInvalidStatus', 'Return labels can only be created for approved claims that are awaiting return.') })\n  }\n}\n\nasync function executeSetReturnLabel(\n  commandBus: CommandBus,\n  input: ClaimSetReturnLabelInput,\n  ctx: CommandRuntimeContext,\n  translate: ActionRouteContext['translate'],\n): Promise<ReturnLabelCreatedResponse> {\n  const { result } = await commandBus.execute<ClaimSetReturnLabelInput, ReturnLabelCommandResult>(\n    'warranty_claims.claim.set_return_label',\n    { input, ctx },\n  )\n  if (!result) throw new CrudHttpError(400, { error: translate('warranty_claims.errors.save_failed', 'Failed to save warranty claim.') })\n  return {\n    status: 'created',\n    labelUrl: result.labelUrl,\n    trackingNumber: result.trackingNumber,\n    carrier: result.carrier,\n  }\n}\n\nexport function firstTranslatableIssueKey(err: z.ZodError): string {\n  const keyed = err.issues.find(\n    (issue) => typeof issue.message === 'string' && issue.message.startsWith('warranty_claims.'),\n  )?.message\n  return keyed ?? 'warranty_claims.errors.invalidInput'\n}\n\nexport async function POST(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const context = await resolveActionContext(req, translate)\n    const requestInput = toReturnLabelRequest(toRecord(await readJsonSafe(req, {})))\n    const guarded = await runGuard(req, context, requestInput)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const guardedInput = guarded.modifiedPayload ? toReturnLabelRequest(guarded.modifiedPayload) : requestInput\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n\n    if (isManualRequest(guardedInput)) {\n      const response = await executeSetReturnLabel(\n        commandBus,\n        toSetReturnLabelInput(guardedInput, context),\n        context.ctx,\n        translate,\n      )\n      await guarded.runAfterSuccess()\n      return NextResponse.json(response)\n    }\n\n    const { claim, lines } = await loadClaimAndLines(context, guardedInput.claimId)\n    assertGeneratableStatus(claim, translate)\n    await enforceWarrantyClaimOptimisticLock(\n      context.ctx,\n      claim,\n      WARRANTY_CLAIM_RESOURCE_KIND,\n      guardedInput.updatedAt ?? undefined,\n    )\n\n    const provider = context.ctx.container.resolve<WarrantyReturnLabelProvider>('warrantyReturnLabelProvider')\n    const result = await provider.createReturnLabel(\n      { claim, lines },\n      { tenantId: context.tenantId, organizationId: context.organizationId },\n      context.ctx.container,\n    )\n\n    if (result.status === 'notConfigured') {\n      return NextResponse.json({ status: 'notConfigured' })\n    }\n\n    const response = await executeSetReturnLabel(\n      commandBus,\n      toSetReturnLabelInput({\n        ...guardedInput,\n        labelUrl: result.labelUrl,\n        trackingNumber: result.trackingNumber,\n        carrier: result.carrier,\n      }, context),\n      context.ctx,\n      translate,\n    )\n    await guarded.runAfterSuccess()\n    return NextResponse.json(response)\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate(firstTranslatableIssueKey(err), 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.return-label.post failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.save_failed', 'Failed to save warranty claim.') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Create or record a return label for a warranty claim',\n  methods: {\n    POST: {\n      summary: 'Generate a carrier return label or record manual label details',\n      requestBody: { contentType: 'application/json', schema: returnLabelRequestSchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Return label created or provider not configured',\n          schema: returnLabelResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,8BAA6D;AACtE,SAAS,yBAAyB;AAElC,SAAS,0BAA0B;AACnC,SAAwB,yBAAyB;AACjD,SAAS,iCAAgE;AAEzE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAiB7C,MAAM,OAAO,EAAE,OAAO,EAAE,KAAK;AAC7B,MAAM,kBAAkB,CAAC,QAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AACpF,MAAM,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;AAE5E,MAAM,2BAA2B,EAC9B,OAAO;AAAA,EACN,SAAS;AAAA,EACT,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC7B,UAAU,gBAAgB,IAAI;AAAA,EAC9B,gBAAgB,gBAAgB,GAAG;AAAA,EACnC,SAAS,gBAAgB,GAAG;AAAA,EAC5B,WAAW;AACb,CAAC,EACA,OAAO;AAIV,MAAM,4BAA4B,EAAE,mBAAmB,UAAU;AAAA,EAC/D,EAAE,OAAO;AAAA,IACP,QAAQ,EAAE,QAAQ,SAAS;AAAA,IAC3B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,IAC9B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,IACpC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,CAAC;AAAA,EACD,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,eAAe,EAAE,CAAC;AACjD,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAC/E;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,eAAe,qBACb,KACA,WAC6B;AAC7B,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,mCAAmC,EAAE,CAAC;AAAA,EACxI;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,SAAsD;AAClF,SAAO,yBAAyB,MAAM;AAAA,IACpC,SAAS,QAAQ,WAAW,QAAQ;AAAA,IACpC,QAAQ,QAAQ;AAAA,IAChB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,SAAS,QAAQ;AAAA,IACjB,WAAW,QAAQ;AAAA,EACrB,CAAC;AACH;AAEA,SAAS,gBAAgB,OAAoC;AAC3D,SAAO,MAAM,WAAW,QACnB,MAAM,aAAa,UACnB,MAAM,mBAAmB,UACzB,MAAM,YAAY;AACzB;AAEA,SAAS,sBACP,OACA,SAC0B;AAC1B,QAAM,gBAAgB,kBAAkB;AAAA,IACtC,IAAI,MAAM;AAAA,IACV,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,SAAS,MAAM;AAAA,IACf,WAAW,MAAM;AAAA,EACnB,GAAG,QAAQ,KAAK,QAAQ,SAAS;AACjC,SAAO,0BAA0B,MAAM,aAAa;AACtD;AAEA,eAAe,SACb,KACA,SACA,OACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAClH;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAe,kBACb,SACA,SAC+D;AAC/D,QAAM,QAAQ,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AACnF,QAAM,KAAM,QAAQ,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AACvE,QAAM,QAAQ,MAAM,mBAAmB,IAAI,SAAS,OAAO,CAAC,GAAG,QAAQ,UAAU,mCAAmC,kBAAkB,CAAC;AACvI,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,EAAE,OAAO,MAAM,IAAI,UAAU,MAAM,UAAU,gBAAgB,MAAM,gBAAgB,WAAW,KAAK;AAAA,IACnG,CAAC;AAAA,IACD;AAAA,EACF;AACA,SAAO,EAAE,OAAO,MAAM;AACxB;AAEA,SAAS,wBAAwB,OAAsB,WAAkD;AACvG,MAAI,MAAM,WAAW,cAAc,MAAM,WAAW,mBAAmB;AACrE,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,mDAAmD,iFAAiF,EAAE,CAAC;AAAA,EACzL;AACF;AAEA,eAAe,sBACb,YACA,OACA,KACA,WACqC;AACrC,QAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,IAClC;AAAA,IACA,EAAE,OAAO,IAAI;AAAA,EACf;AACA,MAAI,CAAC,OAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,sCAAsC,gCAAgC,EAAE,CAAC;AACtI,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,UAAU,OAAO;AAAA,IACjB,gBAAgB,OAAO;AAAA,IACvB,SAAS,OAAO;AAAA,EAClB;AACF;AAEO,SAAS,0BAA0B,KAAyB;AACjE,QAAM,QAAQ,IAAI,OAAO;AAAA,IACvB,CAAC,UAAU,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,WAAW,kBAAkB;AAAA,EAC7F,GAAG;AACH,SAAO,SAAS;AAClB;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,KAAK,SAAS;AACzD,UAAM,eAAe,qBAAqB,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/E,UAAM,UAAU,MAAM,SAAS,KAAK,SAAS,YAAY;AACzD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,eAAe,QAAQ,kBAAkB,qBAAqB,QAAQ,eAAe,IAAI;AAC/F,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAE7D,QAAI,gBAAgB,YAAY,GAAG;AACjC,YAAMA,YAAW,MAAM;AAAA,QACrB;AAAA,QACA,sBAAsB,cAAc,OAAO;AAAA,QAC3C,QAAQ;AAAA,QACR;AAAA,MACF;AACA,YAAM,QAAQ,gBAAgB;AAC9B,aAAO,aAAa,KAAKA,SAAQ;AAAA,IACnC;AAEA,UAAM,EAAE,OAAO,MAAM,IAAI,MAAM,kBAAkB,SAAS,aAAa,OAAO;AAC9E,4BAAwB,OAAO,SAAS;AACxC,UAAM;AAAA,MACJ,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,aAAa,aAAa;AAAA,IAC5B;AAEA,UAAM,WAAW,QAAQ,IAAI,UAAU,QAAqC,6BAA6B;AACzG,UAAM,SAAS,MAAM,SAAS;AAAA,MAC5B,EAAE,OAAO,MAAM;AAAA,MACf,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,MACrE,QAAQ,IAAI;AAAA,IACd;AAEA,QAAI,OAAO,WAAW,iBAAiB;AACrC,aAAO,aAAa,KAAK,EAAE,QAAQ,gBAAgB,CAAC;AAAA,IACtD;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA,sBAAsB;AAAA,QACpB,GAAG;AAAA,QACH,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO;AAAA,QACvB,SAAS,OAAO;AAAA,MAClB,GAAG,OAAO;AAAA,MACV,QAAQ;AAAA,MACR;AAAA,IACF;AACA,UAAM,QAAQ,gBAAgB;AAC9B,WAAO,aAAa,KAAK,QAAQ;AAAA,EACnC,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,0BAA0B,GAAG,GAAG,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjH;AACA,WAAO,MAAM,4CAA4C,EAAE,IAAI,CAAC;AAChE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,gCAAgC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxI;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,yBAAyB;AAAA,MACjF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": ["response"]
 }

package/dist/modules/warranty_claims/api/risk/route.js CHANGED Viewed

@@ -48,6 +48,7 @@ async function resolveRiskContext(req) {
     tenantId: auth.tenantId,
     organizationId,
     scope: { tenantId: auth.tenantId, organizationId },
+    translate,
     em
   };
 }
@@ -56,7 +57,7 @@ async function GET(req) {
     const context = await resolveRiskContext(req);
     const url = new URL(req.url);
     const query = querySchema.parse(Object.fromEntries(url.searchParams));
-    const claim = await requireScopedClaim(context.em, query.claimId, context.scope);
+    const claim = await requireScopedClaim(context.em, query.claimId, context.scope, {}, context.translate("warranty_claims.errors.notFound", "Claim not found."));
     const lines = await findWithDecryption(
       context.em,
       WarrantyClaimLine,

package/dist/modules/warranty_claims/api/risk/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/warranty_claims/api/risk/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WarrantyClaimLine } from '../../data/entities'\nimport { requireScopedClaim, type WarrantyClaimScope } from '../../commands/shared'\nimport { evaluateClaimRisk } from '../../lib/risk'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\nconst querySchema = z.object({\n  claimId: z.string().uuid(),\n}).strict()\n\nconst riskSignalSchema = z.object({\n  id: z.enum(['duplicate_serial', 'duplicate_order_claim', 'outside_return_window', 'over_quantity_claim', 'repeat_claimer', 'value_velocity']),\n  level: z.enum(['low', 'medium', 'high']),\n  messageKey: z.string(),\n  params: z.record(z.string(), z.union([z.string(), z.number()])).optional(),\n  relatedClaimNumbers: z.array(z.string()).optional(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  result: z.object({\n    level: z.enum(['none', 'low', 'medium', 'high']),\n    signals: z.array(riskSignalSchema),\n  }),\n})\n\ntype RiskRouteContext = {\n  tenantId: string\n  organizationId: string\n  scope: WarrantyClaimScope\n  em: EntityManager\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['warranty_claims.claim.view'] },\n}\n\nasync function resolveRiskContext(req: Request): Promise<RiskRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const organizationScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = organizationScope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required') })\n  }\n  const em = container.resolve('em') as EntityManager\n  return {\n    tenantId: auth.tenantId,\n    organizationId,\n    scope: { tenantId: auth.tenantId, organizationId },\n    em,\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const context = await resolveRiskContext(req)\n    const url = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(url.searchParams))\n    const claim = await requireScopedClaim(context.em, query.claimId, context.scope)\n    const lines = await findWithDecryption(\n      context.em,\n      WarrantyClaimLine,\n      { claim: claim.id, tenantId: context.tenantId, organizationId: context.organizationId, deletedAt: null },\n      { orderBy: { lineNo: 'ASC' } },\n      context.scope,\n    )\n    const result = await evaluateClaimRisk(context.em, claim, lines)\n    return NextResponse.json({ ok: true, result })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.risk.get failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.load_failed', 'Failed to load warranty claim data') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Evaluate warranty claim risk',\n  methods: {\n    GET: {\n      summary: 'Evaluate deterministic risk signals for a claim',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Risk assessment',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AAEpC,SAAS,yBAAyB;AAClC,SAAS,0BAAmD;AAC5D,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAE7C,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC,EAAE,OAAO;AAEV,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,KAAK,CAAC,oBAAoB,yBAAyB,yBAAyB,uBAAuB,kBAAkB,gBAAgB,CAAC;AAAA,EAC5I,OAAO,EAAE,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC;AAAA,EACvC,YAAY,EAAE,OAAO;AAAA,EACrB,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,EACzE,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AACpD,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,UAAU,MAAM,CAAC;AAAA,IAC/C,SAAS,EAAE,MAAM,gBAAgB;AAAA,EACnC,CAAC;AACH,CAAC;AASM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC5E;AAEA,eAAe,mBAAmB,KAAyC;AACzE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,oBAAoB,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACpG,QAAM,iBAAiB,mBAAmB,cAAc,KAAK,SAAS;AACtE,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,kCAAkC,EAAE,CAAC;AAAA,EACvI;AACA,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf;AAAA,IACA,OAAO,EAAE,UAAU,KAAK,UAAU,eAAe;AAAA,IACjD;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,UAAU,MAAM,mBAAmB,GAAG;AAC5C,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,YAAY,CAAC;AACpE,UAAM,QAAQ,MAAM,mBAAmB,QAAQ,IAAI,MAAM,SAAS,QAAQ,KAAK;AAC/E,UAAM,QAAQ,MAAM;AAAA,MAClB,QAAQ;AAAA,MACR;AAAA,MACA,EAAE,OAAO,MAAM,IAAI,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,gBAAgB,WAAW,KAAK;AAAA,MACvG,EAAE,SAAS,EAAE,QAAQ,MAAM,EAAE;AAAA,MAC7B,QAAQ;AAAA,IACV;AACA,UAAM,SAAS,MAAM,kBAAkB,QAAQ,IAAI,OAAO,KAAK;AAC/D,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,mCAAmC,EAAE,IAAI,CAAC;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,oCAAoC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5I;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WarrantyClaimLine } from '../../data/entities'\nimport { requireScopedClaim, type WarrantyClaimScope } from '../../commands/shared'\nimport { evaluateClaimRisk } from '../../lib/risk'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\nconst querySchema = z.object({\n  claimId: z.string().uuid(),\n}).strict()\n\nconst riskSignalSchema = z.object({\n  id: z.enum(['duplicate_serial', 'duplicate_order_claim', 'outside_return_window', 'over_quantity_claim', 'repeat_claimer', 'value_velocity']),\n  level: z.enum(['low', 'medium', 'high']),\n  messageKey: z.string(),\n  params: z.record(z.string(), z.union([z.string(), z.number()])).optional(),\n  relatedClaimNumbers: z.array(z.string()).optional(),\n})\n\nconst responseSchema = z.object({\n  ok: z.literal(true),\n  result: z.object({\n    level: z.enum(['none', 'low', 'medium', 'high']),\n    signals: z.array(riskSignalSchema),\n  }),\n})\n\ntype RiskRouteContext = {\n  tenantId: string\n  organizationId: string\n  scope: WarrantyClaimScope\n  translate: (key: string, fallback?: string) => string\n  em: EntityManager\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['warranty_claims.claim.view'] },\n}\n\nasync function resolveRiskContext(req: Request): Promise<RiskRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const organizationScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = organizationScope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required') })\n  }\n  const em = container.resolve('em') as EntityManager\n  return {\n    tenantId: auth.tenantId,\n    organizationId,\n    scope: { tenantId: auth.tenantId, organizationId },\n    translate,\n    em,\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const context = await resolveRiskContext(req)\n    const url = new URL(req.url)\n    const query = querySchema.parse(Object.fromEntries(url.searchParams))\n    const claim = await requireScopedClaim(context.em, query.claimId, context.scope, {}, context.translate('warranty_claims.errors.notFound', 'Claim not found.'))\n    const lines = await findWithDecryption(\n      context.em,\n      WarrantyClaimLine,\n      { claim: claim.id, tenantId: context.tenantId, organizationId: context.organizationId, deletedAt: null },\n      { orderBy: { lineNo: 'ASC' } },\n      context.scope,\n    )\n    const result = await evaluateClaimRisk(context.em, claim, lines)\n    return NextResponse.json({ ok: true, result })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.risk.get failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.load_failed', 'Failed to load warranty claim data') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Evaluate warranty claim risk',\n  methods: {\n    GET: {\n      summary: 'Evaluate deterministic risk signals for a claim',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Risk assessment',\n          schema: responseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AAEpC,SAAS,yBAAyB;AAClC,SAAS,0BAAmD;AAC5D,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAE7C,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC,EAAE,OAAO;AAEV,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,KAAK,CAAC,oBAAoB,yBAAyB,yBAAyB,uBAAuB,kBAAkB,gBAAgB,CAAC;AAAA,EAC5I,OAAO,EAAE,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC;AAAA,EACvC,YAAY,EAAE,OAAO;AAAA,EACrB,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,EACzE,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AACpD,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,QAAQ,EAAE,OAAO;AAAA,IACf,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,UAAU,MAAM,CAAC;AAAA,IAC/C,SAAS,EAAE,MAAM,gBAAgB;AAAA,EACnC,CAAC;AACH,CAAC;AAUM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC5E;AAEA,eAAe,mBAAmB,KAAyC;AACzE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,oBAAoB,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACpG,QAAM,iBAAiB,mBAAmB,cAAc,KAAK,SAAS;AACtE,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,kCAAkC,EAAE,CAAC;AAAA,EACvI;AACA,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf;AAAA,IACA,OAAO,EAAE,UAAU,KAAK,UAAU,eAAe;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,UAAU,MAAM,mBAAmB,GAAG;AAC5C,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY,MAAM,OAAO,YAAY,IAAI,YAAY,CAAC;AACpE,UAAM,QAAQ,MAAM,mBAAmB,QAAQ,IAAI,MAAM,SAAS,QAAQ,OAAO,CAAC,GAAG,QAAQ,UAAU,mCAAmC,kBAAkB,CAAC;AAC7J,UAAM,QAAQ,MAAM;AAAA,MAClB,QAAQ;AAAA,MACR;AAAA,MACA,EAAE,OAAO,MAAM,IAAI,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,gBAAgB,WAAW,KAAK;AAAA,MACvG,EAAE,SAAS,EAAE,QAAQ,MAAM,EAAE;AAAA,MAC7B,QAAQ;AAAA,IACV;AACA,UAAM,SAAS,MAAM,kBAAkB,QAAQ,IAAI,OAAO,KAAK;AAC/D,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,mCAAmC,EAAE,IAAI,CAAC;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,oCAAoC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5I;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/warranty_claims/api/sales-return/route.js CHANGED Viewed

@@ -4,7 +4,9 @@ import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
 import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
 import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
 import { claimCreateSalesReturnSchema } from "../../data/validators.js";
@@ -27,22 +29,19 @@ const errorResponseSchema = z.object({
 const metadata = {
   POST: { requireAuth: true, requireFeatures: ["warranty_claims.claim.manage", "sales.returns.create"] }
 };
-function translateKey(key) {
-  return key;
-}
 function toRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
-async function resolveActionContext(req) {
+async function resolveActionContext(req, translate) {
   const container = await createRequestContainer();
   const auth = await getAuthFromRequest(req);
   if (!auth || !auth.tenantId) {
-    throw new CrudHttpError(401, { error: "warranty_claims.errors.unauthorized" });
+    throw new CrudHttpError(401, { error: translate("warranty_claims.errors.unauthorized", "Unauthorized") });
   }
   const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
   const organizationId = scope?.selectedId ?? auth.orgId ?? null;
   if (!organizationId) {
-    throw new CrudHttpError(400, { error: "warranty_claims.errors.organization_required" });
+    throw new CrudHttpError(400, { error: translate("warranty_claims.errors.organization_required", "Organization context is required.") });
   }
   return {
     ctx: {
@@ -55,7 +54,7 @@ async function resolveActionContext(req) {
     },
     tenantId: auth.tenantId,
     organizationId,
-    translate: translateKey
+    translate
   };
 }
 function toSalesReturnRequest(payload) {
@@ -74,7 +73,7 @@ function toCommandInput(input, context) {
 async function runGuard(req, context, input) {
   const userId = context.ctx.auth?.sub;
   if (!userId) {
-    throw new CrudHttpError(401, { error: "warranty_claims.errors.unauthorized" });
+    throw new CrudHttpError(401, { error: context.translate("warranty_claims.errors.unauthorized", "Unauthorized") });
   }
   return runRouteMutationGuards({
     container: context.ctx.container,
@@ -93,8 +92,9 @@ async function runGuard(req, context, input) {
   });
 }
 async function POST(req) {
+  const { translate } = await resolveTranslations();
   try {
-    const context = await resolveActionContext(req);
+    const context = await resolveActionContext(req, translate);
     const requestInput = toSalesReturnRequest(toRecord(await readJsonSafe(req, {})));
     const guarded = await runGuard(req, context, requestInput);
     if (!guarded.ok) {
@@ -106,16 +106,20 @@ async function POST(req) {
       "warranty_claims.claim.create_sales_return",
       { input: toCommandInput(guardedInput, context), ctx: context.ctx }
     );
-    if (!result) throw new CrudHttpError(400, { error: "warranty_claims.errors.save_failed" });
+    if (!result) throw new CrudHttpError(400, { error: translate("warranty_claims.errors.save_failed", "Failed to save warranty claim.") });
     await guarded.runAfterSuccess();
     return NextResponse.json({ salesReturnId: result.salesReturnId, skippedLineIds: result.skippedLineIds });
   } catch (err) {
     if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    const interceptorRejection = getCommandInterceptorHttpRejection(err);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
     if (err instanceof z.ZodError) {
-      return NextResponse.json({ error: "warranty_claims.errors.invalidInput" }, { status: 400 });
+      return NextResponse.json({ error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });
     }
     logger.error("warranty_claims.sales-return.post failed", { err });
-    return NextResponse.json({ error: "warranty_claims.errors.save_failed" }, { status: 500 });
+    return NextResponse.json({ error: translate("warranty_claims.errors.save_failed", "Failed to save warranty claim.") }, { status: 500 });
   }
 }
 const openApi = {

package/dist/modules/warranty_claims/api/sales-return/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/warranty_claims/api/sales-return/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { claimCreateSalesReturnSchema, type ClaimCreateSalesReturnInput } from '../../data/validators'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../commands/shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\ntype ActionRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  translate: (key: string, fallback?: string) => string\n}\n\ntype SalesReturnCommandResult = {\n  claimId: string\n  salesReturnId: string\n  salesReturnUpdatedAt: string | null\n  skippedLineIds: string[]\n}\n\nconst uuid = z.string().uuid()\nconst optimisticLockTokenSchema = z.string().datetime().nullable().optional()\n\nconst salesReturnRequestSchema = z\n  .object({\n    claimId: uuid,\n    updatedAt: optimisticLockTokenSchema,\n  })\n  .strict()\n\ntype SalesReturnRequest = z.infer<typeof salesReturnRequestSchema>\n\nconst salesReturnResponseSchema = z.object({\n  salesReturnId: z.string(),\n  skippedLineIds: z.array(z.string()),\n})\n\nconst errorResponseSchema = z.object({\n  error: z.string(),\n})\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.claim.manage', 'sales.returns.create'] },\n}\n\nfunction translateKey(key: string): string {\n  return key\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nasync function resolveActionContext(req: Request): Promise<ActionRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: 'warranty_claims.errors.unauthorized' })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: 'warranty_claims.errors.organization_required' })\n  }\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    translate: translateKey,\n  }\n}\n\nfunction toSalesReturnRequest(payload: Record<string, unknown>): SalesReturnRequest {\n  return salesReturnRequestSchema.parse({\n    claimId: payload.claimId ?? payload.id,\n    updatedAt: payload.updatedAt,\n  })\n}\n\nfunction toCommandInput(input: SalesReturnRequest, context: ActionRouteContext): ClaimCreateSalesReturnInput {\n  const scopedPayload = withScopedPayload({\n    id: input.claimId,\n    updatedAt: input.updatedAt,\n  }, context.ctx, context.translate)\n  return claimCreateSalesReturnSchema.parse(scopedPayload)\n}\n\nasync function runGuard(\n  req: Request,\n  context: ActionRouteContext,\n  input: SalesReturnRequest,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: 'warranty_claims.errors.unauthorized' })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: input.claimId,\n      operation: 'custom',\n      mutationPayload: { ...input },\n    },\n  })\n}\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveActionContext(req)\n    const requestInput = toSalesReturnRequest(toRecord(await readJsonSafe(req, {})))\n    const guarded = await runGuard(req, context, requestInput)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const guardedInput = guarded.modifiedPayload ? toSalesReturnRequest(guarded.modifiedPayload) : requestInput\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute<ClaimCreateSalesReturnInput, SalesReturnCommandResult>(\n      'warranty_claims.claim.create_sales_return',\n      { input: toCommandInput(guardedInput, context), ctx: context.ctx },\n    )\n    if (!result) throw new CrudHttpError(400, { error: 'warranty_claims.errors.save_failed' })\n    await guarded.runAfterSuccess()\n    return NextResponse.json({ salesReturnId: result.salesReturnId, skippedLineIds: result.skippedLineIds })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n    }\n    logger.error('warranty_claims.sales-return.post failed', { err })\n    return NextResponse.json({ error: 'warranty_claims.errors.save_failed' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Create a sales return from an approved warranty claim',\n  methods: {\n    POST: {\n      summary: 'Create a sales return document from the claim\\'s eligible lines and link it to the claim',\n      requestBody: {\n        contentType: 'application/json',\n        schema: salesReturnRequestSchema,\n        description: 'Use claimId to identify the warranty claim. The id field is also accepted as an alias for claimId.',\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Sales return created and linked; lines without an order-line reference are reported as skipped',\n          schema: salesReturnResponseSchema,\n        },\n        { status: 400, description: 'Invalid request or claim is not eligible for sales-return creation', schema: errorResponseSchema },\n        { status: 401, description: 'Authentication required', schema: errorResponseSchema },\n        { status: 403, description: 'Insufficient permissions', schema: errorResponseSchema },\n        { status: 409, description: 'Optimistic lock conflict', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,8BAA6D;AACtE,SAAS,yBAAyB;AAElC,SAAS,oCAAsE;AAC/E,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAgB7C,MAAM,OAAO,EAAE,OAAO,EAAE,KAAK;AAC7B,MAAM,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;AAE5E,MAAM,2BAA2B,EAC9B,OAAO;AAAA,EACN,SAAS;AAAA,EACT,WAAW;AACb,CAAC,EACA,OAAO;AAIV,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,eAAe,EAAE,OAAO;AAAA,EACxB,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC;AACpC,CAAC;AAED,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,OAAO,EAAE,OAAO;AAClB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,sBAAsB,EAAE;AACvG;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO;AACT;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,eAAe,qBAAqB,KAA2C;AAC7E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,EAC/E;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,+CAA+C,CAAC;AAAA,EACxF;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA,WAAW;AAAA,EACb;AACF;AAEA,SAAS,qBAAqB,SAAsD;AAClF,SAAO,yBAAyB,MAAM;AAAA,IACpC,SAAS,QAAQ,WAAW,QAAQ;AAAA,IACpC,WAAW,QAAQ;AAAA,EACrB,CAAC;AACH;AAEA,SAAS,eAAe,OAA2B,SAA0D;AAC3G,QAAM,gBAAgB,kBAAkB;AAAA,IACtC,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,EACnB,GAAG,QAAQ,KAAK,QAAQ,SAAS;AACjC,SAAO,6BAA6B,MAAM,aAAa;AACzD;AAEA,eAAe,SACb,KACA,SACA,OACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,EAC/E;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,UAAM,eAAe,qBAAqB,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/E,UAAM,UAAU,MAAM,SAAS,KAAK,SAAS,YAAY;AACzD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,eAAe,QAAQ,kBAAkB,qBAAqB,QAAQ,eAAe,IAAI;AAC/F,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAC7D,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA,EAAE,OAAO,eAAe,cAAc,OAAO,GAAG,KAAK,QAAQ,IAAI;AAAA,IACnE;AACA,QAAI,CAAC,OAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qCAAqC,CAAC;AACzF,UAAM,QAAQ,gBAAgB;AAC9B,WAAO,aAAa,KAAK,EAAE,eAAe,OAAO,eAAe,gBAAgB,OAAO,eAAe,CAAC;AAAA,EACzG,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC5F;AACA,WAAO,MAAM,4CAA4C,EAAE,IAAI,CAAC;AAChE,WAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,sEAAsE,QAAQ,oBAAoB;AAAA,QAC9H,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,oBAAoB;AAAA,QACnF,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { claimCreateSalesReturnSchema, type ClaimCreateSalesReturnInput } from '../../data/validators'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../commands/shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\ntype ActionRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  translate: (key: string, fallback?: string) => string\n}\n\ntype SalesReturnCommandResult = {\n  claimId: string\n  salesReturnId: string\n  salesReturnUpdatedAt: string | null\n  skippedLineIds: string[]\n}\n\nconst uuid = z.string().uuid()\nconst optimisticLockTokenSchema = z.string().datetime().nullable().optional()\n\nconst salesReturnRequestSchema = z\n  .object({\n    claimId: uuid,\n    updatedAt: optimisticLockTokenSchema,\n  })\n  .strict()\n\ntype SalesReturnRequest = z.infer<typeof salesReturnRequestSchema>\n\nconst salesReturnResponseSchema = z.object({\n  salesReturnId: z.string(),\n  skippedLineIds: z.array(z.string()),\n})\n\nconst errorResponseSchema = z.object({\n  error: z.string(),\n})\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.claim.manage', 'sales.returns.create'] },\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nasync function resolveActionContext(\n  req: Request,\n  translate: ActionRouteContext['translate'],\n): Promise<ActionRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required.') })\n  }\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    translate,\n  }\n}\n\nfunction toSalesReturnRequest(payload: Record<string, unknown>): SalesReturnRequest {\n  return salesReturnRequestSchema.parse({\n    claimId: payload.claimId ?? payload.id,\n    updatedAt: payload.updatedAt,\n  })\n}\n\nfunction toCommandInput(input: SalesReturnRequest, context: ActionRouteContext): ClaimCreateSalesReturnInput {\n  const scopedPayload = withScopedPayload({\n    id: input.claimId,\n    updatedAt: input.updatedAt,\n  }, context.ctx, context.translate)\n  return claimCreateSalesReturnSchema.parse(scopedPayload)\n}\n\nasync function runGuard(\n  req: Request,\n  context: ActionRouteContext,\n  input: SalesReturnRequest,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: context.translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: input.claimId,\n      operation: 'custom',\n      mutationPayload: { ...input },\n    },\n  })\n}\n\nexport async function POST(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const context = await resolveActionContext(req, translate)\n    const requestInput = toSalesReturnRequest(toRecord(await readJsonSafe(req, {})))\n    const guarded = await runGuard(req, context, requestInput)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const guardedInput = guarded.modifiedPayload ? toSalesReturnRequest(guarded.modifiedPayload) : requestInput\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute<ClaimCreateSalesReturnInput, SalesReturnCommandResult>(\n      'warranty_claims.claim.create_sales_return',\n      { input: toCommandInput(guardedInput, context), ctx: context.ctx },\n    )\n    if (!result) throw new CrudHttpError(400, { error: translate('warranty_claims.errors.save_failed', 'Failed to save warranty claim.') })\n    await guarded.runAfterSuccess()\n    return NextResponse.json({ salesReturnId: result.salesReturnId, skippedLineIds: result.skippedLineIds })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.sales-return.post failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.save_failed', 'Failed to save warranty claim.') }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Create a sales return from an approved warranty claim',\n  methods: {\n    POST: {\n      summary: 'Create a sales return document from the claim\\'s eligible lines and link it to the claim',\n      requestBody: {\n        contentType: 'application/json',\n        schema: salesReturnRequestSchema,\n        description: 'Use claimId to identify the warranty claim. The id field is also accepted as an alias for claimId.',\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Sales return created and linked; lines without an order-line reference are reported as skipped',\n          schema: salesReturnResponseSchema,\n        },\n        { status: 400, description: 'Invalid request or claim is not eligible for sales-return creation', schema: errorResponseSchema },\n        { status: 401, description: 'Authentication required', schema: errorResponseSchema },\n        { status: 403, description: 'Insufficient permissions', schema: errorResponseSchema },\n        { status: 409, description: 'Optimistic lock conflict', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,8BAA6D;AACtE,SAAS,yBAAyB;AAElC,SAAS,oCAAsE;AAC/E,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAgB7C,MAAM,OAAO,EAAE,OAAO,EAAE,KAAK;AAC7B,MAAM,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;AAE5E,MAAM,2BAA2B,EAC9B,OAAO;AAAA,EACN,SAAS;AAAA,EACT,WAAW;AACb,CAAC,EACA,OAAO;AAIV,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,eAAe,EAAE,OAAO;AAAA,EACxB,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC;AACpC,CAAC;AAED,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,OAAO,EAAE,OAAO;AAClB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,sBAAsB,EAAE;AACvG;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,eAAe,qBACb,KACA,WAC6B;AAC7B,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,mCAAmC,EAAE,CAAC;AAAA,EACxI;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,SAAsD;AAClF,SAAO,yBAAyB,MAAM;AAAA,IACpC,SAAS,QAAQ,WAAW,QAAQ;AAAA,IACpC,WAAW,QAAQ;AAAA,EACrB,CAAC;AACH;AAEA,SAAS,eAAe,OAA2B,SAA0D;AAC3G,QAAM,gBAAgB,kBAAkB;AAAA,IACtC,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,EACnB,GAAG,QAAQ,KAAK,QAAQ,SAAS;AACjC,SAAO,6BAA6B,MAAM,aAAa;AACzD;AAEA,eAAe,SACb,KACA,SACA,OACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAClH;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,KAAK,SAAS;AACzD,UAAM,eAAe,qBAAqB,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/E,UAAM,UAAU,MAAM,SAAS,KAAK,SAAS,YAAY;AACzD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,eAAe,QAAQ,kBAAkB,qBAAqB,QAAQ,eAAe,IAAI;AAC/F,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAC7D,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA,EAAE,OAAO,eAAe,cAAc,OAAO,GAAG,KAAK,QAAQ,IAAI;AAAA,IACnE;AACA,QAAI,CAAC,OAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,sCAAsC,gCAAgC,EAAE,CAAC;AACtI,UAAM,QAAQ,gBAAgB;AAC9B,WAAO,aAAa,KAAK,EAAE,eAAe,OAAO,eAAe,gBAAgB,OAAO,eAAe,CAAC;AAAA,EACzG,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,4CAA4C,EAAE,IAAI,CAAC;AAChE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,gCAAgC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxI;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,sEAAsE,QAAQ,oBAAoB;AAAA,QAC9H,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,oBAAoB;AAAA,QACnF,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/warranty_claims/api/settings-general/route.js CHANGED Viewed

@@ -5,6 +5,7 @@ import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
 import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
 import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
 import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
@@ -127,6 +128,10 @@ async function PUT(req) {
     });
   } catch (err) {
     if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    const interceptorRejection = getCommandInterceptorHttpRejection(err);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
     const { translate } = await resolveTranslations();
     if (err instanceof z.ZodError) {
       return NextResponse.json({ error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });

package/dist/modules/warranty_claims/api/settings-general/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/warranty_claims/api/settings-general/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  warrantyClaimSettingsSaveSchema,\n  warrantyClaimSettingsUpdateSchema,\n  type WarrantyClaimSettingsSaveInput,\n} from '../../data/validators'\nimport {\n  loadWarrantyClaimSettings,\n  resolveEffectiveWarrantyClaimSettings,\n  type WarrantyClaimEffectiveSettings,\n} from '../../lib/settings'\nimport { WARRANTY_CLAIM_SETTINGS_RESOURCE_KIND, type SaveWarrantyClaimSettingsResult } from '../../commands/settings'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['warranty_claims.settings.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['warranty_claims.settings.manage'] },\n}\n\ntype SettingsRouteContext = {\n  ctx: CommandRuntimeContext\n  em: EntityManager\n  tenantId: string\n  organizationId: string\n  userId: string\n  translate: (key: string, fallback?: string) => string\n}\n\ntype SettingsResponseResult = WarrantyClaimEffectiveSettings & {\n  returnWindowDays: number | null\n  updatedAt: string | null\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nfunction toIso(value: Date | string | null | undefined): string | null {\n  if (!value) return null\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? null : date.toISOString()\n}\n\nasync function resolveSettingsContext(req: Request): Promise<SettingsRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required') })\n  }\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: organizationId,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n  return {\n    ctx,\n    em: container.resolve('em') as EntityManager,\n    tenantId: auth.tenantId,\n    organizationId,\n    userId: auth.sub ?? '',\n    translate,\n  }\n}\n\nasync function buildSettingsResult(\n  em: EntityManager,\n  scope: { tenantId: string; organizationId: string },\n): Promise<SettingsResponseResult> {\n  const record = await loadWarrantyClaimSettings(em, scope)\n  const effectiveSettings = await resolveEffectiveWarrantyClaimSettings(em, scope)\n  return {\n    ...effectiveSettings,\n    returnWindowDays: record?.returnWindowDays ?? null,\n    updatedAt: toIso(record?.updatedAt),\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const { em, tenantId, organizationId } = await resolveSettingsContext(req)\n    const result = await buildSettingsResult(em, { tenantId, organizationId })\n    return NextResponse.json({ ok: true, result })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const { translate } = await resolveTranslations()\n    logger.error('warranty_claims.settings-general.get failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.load_failed', 'Failed to load warranty claim data.') }, { status: 500 })\n  }\n}\n\nexport async function PUT(req: Request) {\n  try {\n    const { ctx, em, tenantId, organizationId, userId, translate } = await resolveSettingsContext(req)\n    const payload = toRecord(await readJsonSafe(req, {}))\n    const parsed = warrantyClaimSettingsUpdateSchema.parse(payload)\n    const parsedPayload: Record<string, unknown> = { ...parsed }\n    const existing = await loadWarrantyClaimSettings(em, { tenantId, organizationId })\n    const guarded = await runRouteMutationGuards({\n      container: ctx.container,\n      req,\n      auth: { userId, tenantId, organizationId },\n      input: {\n        resourceKind: WARRANTY_CLAIM_SETTINGS_RESOURCE_KIND,\n        resourceId: existing?.id ?? null,\n        operation: existing ? 'update' : 'create',\n        mutationPayload: parsedPayload,\n      },\n    })\n    if (!guarded.ok) return guarded.response\n\n    const guardedPayload = guarded.modifiedPayload\n      ? warrantyClaimSettingsUpdateSchema.parse({ ...parsedPayload, ...guarded.modifiedPayload })\n      : parsed\n    const commandInput = warrantyClaimSettingsSaveSchema.parse(withScopedPayload({ ...guardedPayload }, ctx, translate))\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute<\n      WarrantyClaimSettingsSaveInput,\n      SaveWarrantyClaimSettingsResult\n    >('warranty_claims.settings.save', { input: commandInput, ctx })\n\n    await guarded.runAfterSuccess()\n\n    return NextResponse.json({\n      ok: true,\n      result: {\n        slaHours: result.slaHours,\n        slaPauseOnInfoRequested: result.slaPauseOnInfoRequested,\n        slaAtRiskThresholdPct: result.slaAtRiskThresholdPct,\n        autoApproveEnabled: result.autoApproveEnabled,\n        autoApproveMaxAmount: result.autoApproveMaxAmount,\n        autoApproveCurrencyCode: result.autoApproveCurrencyCode,\n        autoApproveRequireInWarranty: result.autoApproveRequireInWarranty,\n        defaultWarrantyMonths: result.defaultWarrantyMonths,\n        businessHours: result.businessHours,\n        escalationTiers: result.escalationTiers,\n        adjudicationUseRules: result.adjudicationUseRules,\n        quarantineGrades: result.quarantineGrades,\n        returnLabelProvider: result.returnLabelProvider,\n        returnWindowDays: result.returnWindowDays,\n        updatedAt: result.updatedAt,\n      },\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.settings-general.put failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.save_failed', 'Failed to save warranty claim') }, { status: 400 })\n  }\n}\n\nconst settingsResultSchema = z.object({\n  slaHours: z.number(),\n  slaPauseOnInfoRequested: z.boolean(),\n  slaAtRiskThresholdPct: z.number(),\n  autoApproveEnabled: z.boolean(),\n  autoApproveMaxAmount: z.number().nullable(),\n  autoApproveCurrencyCode: z.string().nullable(),\n  autoApproveRequireInWarranty: z.boolean(),\n  defaultWarrantyMonths: z.number().nullable(),\n  businessHours: z.record(z.string(), z.unknown()).nullable(),\n  escalationTiers: z.array(z.unknown()).nullable(),\n  adjudicationUseRules: z.boolean(),\n  quarantineGrades: z.array(z.string()).nullable(),\n  returnLabelProvider: z.string().nullable(),\n  returnWindowDays: z.number().nullable(),\n  updatedAt: z.string().nullable(),\n})\n\nconst settingsResponseSchema = z.object({\n  ok: z.boolean(),\n  result: settingsResultSchema,\n})\n\nconst settingsErrorSchema = z.object({\n  error: z.string(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Warranty claim general settings',\n  methods: {\n    GET: {\n      summary: 'Get warranty claim general settings',\n      responses: [\n        { status: 200, description: 'Current warranty claim general settings', schema: settingsResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: settingsErrorSchema },\n        { status: 400, description: 'Invalid scope', schema: settingsErrorSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update warranty claim general settings',\n      requestBody: {\n        contentType: 'application/json',\n        schema: warrantyClaimSettingsUpdateSchema,\n      },\n      responses: [\n        { status: 200, description: 'Updated warranty claim general settings', schema: settingsResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: settingsErrorSchema },\n        { status: 400, description: 'Invalid payload', schema: settingsErrorSchema },\n        { status: 409, description: 'Optimistic lock conflict', schema: settingsErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,yBAAyB;AAElC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,6CAAmF;AAC5F,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAEtC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iCAAiC,EAAE;AAAA,EAC/E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iCAAiC,EAAE;AACjF;AAgBA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,SAAS,MAAM,OAAwD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,YAAY;AAChE;AAEA,eAAe,uBAAuB,KAA6C;AACjF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,kCAAkC,EAAE,CAAC;AAAA,EACvI;AACA,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB;AAAA,IACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AACA,SAAO;AAAA,IACL;AAAA,IACA,IAAI,UAAU,QAAQ,IAAI;AAAA,IAC1B,UAAU,KAAK;AAAA,IACf;AAAA,IACA,QAAQ,KAAK,OAAO;AAAA,IACpB;AAAA,EACF;AACF;AAEA,eAAe,oBACb,IACA,OACiC;AACjC,QAAM,SAAS,MAAM,0BAA0B,IAAI,KAAK;AACxD,QAAM,oBAAoB,MAAM,sCAAsC,IAAI,KAAK;AAC/E,SAAO;AAAA,IACL,GAAG;AAAA,IACH,kBAAkB,QAAQ,oBAAoB;AAAA,IAC9C,WAAW,MAAM,QAAQ,SAAS;AAAA,EACpC;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,IAAI,UAAU,eAAe,IAAI,MAAM,uBAAuB,GAAG;AACzE,UAAM,SAAS,MAAM,oBAAoB,IAAI,EAAE,UAAU,eAAe,CAAC;AACzE,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,+CAA+C,EAAE,IAAI,CAAC;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,qCAAqC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7I;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,KAAK,IAAI,UAAU,gBAAgB,QAAQ,UAAU,IAAI,MAAM,uBAAuB,GAAG;AACjG,UAAM,UAAU,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACpD,UAAM,SAAS,kCAAkC,MAAM,OAAO;AAC9D,UAAM,gBAAyC,EAAE,GAAG,OAAO;AAC3D,UAAM,WAAW,MAAM,0BAA0B,IAAI,EAAE,UAAU,eAAe,CAAC;AACjF,UAAM,UAAU,MAAM,uBAAuB;AAAA,MAC3C,WAAW,IAAI;AAAA,MACf;AAAA,MACA,MAAM,EAAE,QAAQ,UAAU,eAAe;AAAA,MACzC,OAAO;AAAA,QACL,cAAc;AAAA,QACd,YAAY,UAAU,MAAM;AAAA,QAC5B,WAAW,WAAW,WAAW;AAAA,QACjC,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,UAAM,iBAAiB,QAAQ,kBAC3B,kCAAkC,MAAM,EAAE,GAAG,eAAe,GAAG,QAAQ,gBAAgB,CAAC,IACxF;AACJ,UAAM,eAAe,gCAAgC,MAAM,kBAAkB,EAAE,GAAG,eAAe,GAAG,KAAK,SAAS,CAAC;AACnH,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAGlC,iCAAiC,EAAE,OAAO,cAAc,IAAI,CAAC;AAE/D,UAAM,QAAQ,gBAAgB;AAE9B,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,QAAQ;AAAA,QACN,UAAU,OAAO;AAAA,QACjB,yBAAyB,OAAO;AAAA,QAChC,uBAAuB,OAAO;AAAA,QAC9B,oBAAoB,OAAO;AAAA,QAC3B,sBAAsB,OAAO;AAAA,QAC7B,yBAAyB,OAAO;AAAA,QAChC,8BAA8B,OAAO;AAAA,QACrC,uBAAuB,OAAO;AAAA,QAC9B,eAAe,OAAO;AAAA,QACtB,iBAAiB,OAAO;AAAA,QACxB,sBAAsB,OAAO;AAAA,QAC7B,kBAAkB,OAAO;AAAA,QACzB,qBAAqB,OAAO;AAAA,QAC5B,kBAAkB,OAAO;AAAA,QACzB,WAAW,OAAO;AAAA,MACpB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,+CAA+C,EAAE,IAAI,CAAC;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,+BAA+B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvI;AACF;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,UAAU,EAAE,OAAO;AAAA,EACnB,yBAAyB,EAAE,QAAQ;AAAA,EACnC,uBAAuB,EAAE,OAAO;AAAA,EAChC,oBAAoB,EAAE,QAAQ;AAAA,EAC9B,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,yBAAyB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7C,8BAA8B,EAAE,QAAQ;AAAA,EACxC,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3C,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC1D,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/C,sBAAsB,EAAE,QAAQ;AAAA,EAChC,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAC/C,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,IAAI,EAAE,QAAQ;AAAA,EACd,QAAQ;AACV,CAAC;AAED,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,OAAO,EAAE,OAAO;AAClB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C,QAAQ,uBAAuB;AAAA,QACtG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,oBAAoB;AAAA,MAC3E;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C,QAAQ,uBAAuB;AAAA,QACtG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,oBAAoB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  warrantyClaimSettingsSaveSchema,\n  warrantyClaimSettingsUpdateSchema,\n  type WarrantyClaimSettingsSaveInput,\n} from '../../data/validators'\nimport {\n  loadWarrantyClaimSettings,\n  resolveEffectiveWarrantyClaimSettings,\n  type WarrantyClaimEffectiveSettings,\n} from '../../lib/settings'\nimport { WARRANTY_CLAIM_SETTINGS_RESOURCE_KIND, type SaveWarrantyClaimSettingsResult } from '../../commands/settings'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['warranty_claims.settings.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['warranty_claims.settings.manage'] },\n}\n\ntype SettingsRouteContext = {\n  ctx: CommandRuntimeContext\n  em: EntityManager\n  tenantId: string\n  organizationId: string\n  userId: string\n  translate: (key: string, fallback?: string) => string\n}\n\ntype SettingsResponseResult = WarrantyClaimEffectiveSettings & {\n  returnWindowDays: number | null\n  updatedAt: string | null\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nfunction toIso(value: Date | string | null | undefined): string | null {\n  if (!value) return null\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? null : date.toISOString()\n}\n\nasync function resolveSettingsContext(req: Request): Promise<SettingsRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required') })\n  }\n  const ctx: CommandRuntimeContext = {\n    container,\n    auth,\n    organizationScope: scope,\n    selectedOrganizationId: organizationId,\n    organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n    request: req,\n  }\n  return {\n    ctx,\n    em: container.resolve('em') as EntityManager,\n    tenantId: auth.tenantId,\n    organizationId,\n    userId: auth.sub ?? '',\n    translate,\n  }\n}\n\nasync function buildSettingsResult(\n  em: EntityManager,\n  scope: { tenantId: string; organizationId: string },\n): Promise<SettingsResponseResult> {\n  const record = await loadWarrantyClaimSettings(em, scope)\n  const effectiveSettings = await resolveEffectiveWarrantyClaimSettings(em, scope)\n  return {\n    ...effectiveSettings,\n    returnWindowDays: record?.returnWindowDays ?? null,\n    updatedAt: toIso(record?.updatedAt),\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const { em, tenantId, organizationId } = await resolveSettingsContext(req)\n    const result = await buildSettingsResult(em, { tenantId, organizationId })\n    return NextResponse.json({ ok: true, result })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const { translate } = await resolveTranslations()\n    logger.error('warranty_claims.settings-general.get failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.load_failed', 'Failed to load warranty claim data.') }, { status: 500 })\n  }\n}\n\nexport async function PUT(req: Request) {\n  try {\n    const { ctx, em, tenantId, organizationId, userId, translate } = await resolveSettingsContext(req)\n    const payload = toRecord(await readJsonSafe(req, {}))\n    const parsed = warrantyClaimSettingsUpdateSchema.parse(payload)\n    const parsedPayload: Record<string, unknown> = { ...parsed }\n    const existing = await loadWarrantyClaimSettings(em, { tenantId, organizationId })\n    const guarded = await runRouteMutationGuards({\n      container: ctx.container,\n      req,\n      auth: { userId, tenantId, organizationId },\n      input: {\n        resourceKind: WARRANTY_CLAIM_SETTINGS_RESOURCE_KIND,\n        resourceId: existing?.id ?? null,\n        operation: existing ? 'update' : 'create',\n        mutationPayload: parsedPayload,\n      },\n    })\n    if (!guarded.ok) return guarded.response\n\n    const guardedPayload = guarded.modifiedPayload\n      ? warrantyClaimSettingsUpdateSchema.parse({ ...parsedPayload, ...guarded.modifiedPayload })\n      : parsed\n    const commandInput = warrantyClaimSettingsSaveSchema.parse(withScopedPayload({ ...guardedPayload }, ctx, translate))\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute<\n      WarrantyClaimSettingsSaveInput,\n      SaveWarrantyClaimSettingsResult\n    >('warranty_claims.settings.save', { input: commandInput, ctx })\n\n    await guarded.runAfterSuccess()\n\n    return NextResponse.json({\n      ok: true,\n      result: {\n        slaHours: result.slaHours,\n        slaPauseOnInfoRequested: result.slaPauseOnInfoRequested,\n        slaAtRiskThresholdPct: result.slaAtRiskThresholdPct,\n        autoApproveEnabled: result.autoApproveEnabled,\n        autoApproveMaxAmount: result.autoApproveMaxAmount,\n        autoApproveCurrencyCode: result.autoApproveCurrencyCode,\n        autoApproveRequireInWarranty: result.autoApproveRequireInWarranty,\n        defaultWarrantyMonths: result.defaultWarrantyMonths,\n        businessHours: result.businessHours,\n        escalationTiers: result.escalationTiers,\n        adjudicationUseRules: result.adjudicationUseRules,\n        quarantineGrades: result.quarantineGrades,\n        returnLabelProvider: result.returnLabelProvider,\n        returnWindowDays: result.returnWindowDays,\n        updatedAt: result.updatedAt,\n      },\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.settings-general.put failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.save_failed', 'Failed to save warranty claim') }, { status: 400 })\n  }\n}\n\nconst settingsResultSchema = z.object({\n  slaHours: z.number(),\n  slaPauseOnInfoRequested: z.boolean(),\n  slaAtRiskThresholdPct: z.number(),\n  autoApproveEnabled: z.boolean(),\n  autoApproveMaxAmount: z.number().nullable(),\n  autoApproveCurrencyCode: z.string().nullable(),\n  autoApproveRequireInWarranty: z.boolean(),\n  defaultWarrantyMonths: z.number().nullable(),\n  businessHours: z.record(z.string(), z.unknown()).nullable(),\n  escalationTiers: z.array(z.unknown()).nullable(),\n  adjudicationUseRules: z.boolean(),\n  quarantineGrades: z.array(z.string()).nullable(),\n  returnLabelProvider: z.string().nullable(),\n  returnWindowDays: z.number().nullable(),\n  updatedAt: z.string().nullable(),\n})\n\nconst settingsResponseSchema = z.object({\n  ok: z.boolean(),\n  result: settingsResultSchema,\n})\n\nconst settingsErrorSchema = z.object({\n  error: z.string(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Warranty claim general settings',\n  methods: {\n    GET: {\n      summary: 'Get warranty claim general settings',\n      responses: [\n        { status: 200, description: 'Current warranty claim general settings', schema: settingsResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: settingsErrorSchema },\n        { status: 400, description: 'Invalid scope', schema: settingsErrorSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update warranty claim general settings',\n      requestBody: {\n        contentType: 'application/json',\n        schema: warrantyClaimSettingsUpdateSchema,\n      },\n      responses: [\n        { status: 200, description: 'Updated warranty claim general settings', schema: settingsResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: settingsErrorSchema },\n        { status: 400, description: 'Invalid payload', schema: settingsErrorSchema },\n        { status: 409, description: 'Optimistic lock conflict', schema: settingsErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,yBAAyB;AAElC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,6CAAmF;AAC5F,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAEtC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iCAAiC,EAAE;AAAA,EAC/E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iCAAiC,EAAE;AACjF;AAgBA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,SAAS,MAAM,OAAwD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,YAAY;AAChE;AAEA,eAAe,uBAAuB,KAA6C;AACjF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,kCAAkC,EAAE,CAAC;AAAA,EACvI;AACA,QAAM,MAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB;AAAA,IACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACX;AACA,SAAO;AAAA,IACL;AAAA,IACA,IAAI,UAAU,QAAQ,IAAI;AAAA,IAC1B,UAAU,KAAK;AAAA,IACf;AAAA,IACA,QAAQ,KAAK,OAAO;AAAA,IACpB;AAAA,EACF;AACF;AAEA,eAAe,oBACb,IACA,OACiC;AACjC,QAAM,SAAS,MAAM,0BAA0B,IAAI,KAAK;AACxD,QAAM,oBAAoB,MAAM,sCAAsC,IAAI,KAAK;AAC/E,SAAO;AAAA,IACL,GAAG;AAAA,IACH,kBAAkB,QAAQ,oBAAoB;AAAA,IAC9C,WAAW,MAAM,QAAQ,SAAS;AAAA,EACpC;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,IAAI,UAAU,eAAe,IAAI,MAAM,uBAAuB,GAAG;AACzE,UAAM,SAAS,MAAM,oBAAoB,IAAI,EAAE,UAAU,eAAe,CAAC;AACzE,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,+CAA+C,EAAE,IAAI,CAAC;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,qCAAqC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7I;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,KAAK,IAAI,UAAU,gBAAgB,QAAQ,UAAU,IAAI,MAAM,uBAAuB,GAAG;AACjG,UAAM,UAAU,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACpD,UAAM,SAAS,kCAAkC,MAAM,OAAO;AAC9D,UAAM,gBAAyC,EAAE,GAAG,OAAO;AAC3D,UAAM,WAAW,MAAM,0BAA0B,IAAI,EAAE,UAAU,eAAe,CAAC;AACjF,UAAM,UAAU,MAAM,uBAAuB;AAAA,MAC3C,WAAW,IAAI;AAAA,MACf;AAAA,MACA,MAAM,EAAE,QAAQ,UAAU,eAAe;AAAA,MACzC,OAAO;AAAA,QACL,cAAc;AAAA,QACd,YAAY,UAAU,MAAM;AAAA,QAC5B,WAAW,WAAW,WAAW;AAAA,QACjC,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,UAAM,iBAAiB,QAAQ,kBAC3B,kCAAkC,MAAM,EAAE,GAAG,eAAe,GAAG,QAAQ,gBAAgB,CAAC,IACxF;AACJ,UAAM,eAAe,gCAAgC,MAAM,kBAAkB,EAAE,GAAG,eAAe,GAAG,KAAK,SAAS,CAAC;AACnH,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAGlC,iCAAiC,EAAE,OAAO,cAAc,IAAI,CAAC;AAE/D,UAAM,QAAQ,gBAAgB;AAE9B,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,QAAQ;AAAA,QACN,UAAU,OAAO;AAAA,QACjB,yBAAyB,OAAO;AAAA,QAChC,uBAAuB,OAAO;AAAA,QAC9B,oBAAoB,OAAO;AAAA,QAC3B,sBAAsB,OAAO;AAAA,QAC7B,yBAAyB,OAAO;AAAA,QAChC,8BAA8B,OAAO;AAAA,QACrC,uBAAuB,OAAO;AAAA,QAC9B,eAAe,OAAO;AAAA,QACtB,iBAAiB,OAAO;AAAA,QACxB,sBAAsB,OAAO;AAAA,QAC7B,kBAAkB,OAAO;AAAA,QACzB,qBAAqB,OAAO;AAAA,QAC5B,kBAAkB,OAAO;AAAA,QACzB,WAAW,OAAO;AAAA,MACpB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,+CAA+C,EAAE,IAAI,CAAC;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,+BAA+B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvI;AACF;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,UAAU,EAAE,OAAO;AAAA,EACnB,yBAAyB,EAAE,QAAQ;AAAA,EACnC,uBAAuB,EAAE,OAAO;AAAA,EAChC,oBAAoB,EAAE,QAAQ;AAAA,EAC9B,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,yBAAyB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7C,8BAA8B,EAAE,QAAQ;AAAA,EACxC,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3C,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC1D,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/C,sBAAsB,EAAE,QAAQ;AAAA,EAChC,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAC/C,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,IAAI,EAAE,QAAQ;AAAA,EACd,QAAQ;AACV,CAAC;AAED,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,OAAO,EAAE,OAAO;AAClB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C,QAAQ,uBAAuB;AAAA,QACtG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,oBAAoB;AAAA,MAC3E;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C,QAAQ,uBAAuB;AAAA,QACtG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,oBAAoB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/warranty_claims/api/submit/route.js CHANGED Viewed

@@ -5,6 +5,7 @@ import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
 import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
 import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
 import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
@@ -87,6 +88,10 @@ async function POST(req) {
     return NextResponse.json({ ok: true, claimId: result?.claimId ?? commandInput.id });
   } catch (err) {
     if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    const interceptorRejection = getCommandInterceptorHttpRejection(err);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
     const { translate } = await resolveTranslations();
     if (err instanceof z.ZodError) {
       return NextResponse.json({ error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });

package/dist/modules/warranty_claims/api/submit/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/warranty_claims/api/submit/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../commands/shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\n// Scope is derived from the authenticated principal, never accepted from the body \u2014\n// mirroring the sibling transition/assign routes. `withScopedPayload` prefers a\n// caller-supplied tenantId/organizationId over the actor's context, so admitting them\n// here would let the request choose its own scope.\nconst submitSchema = z\n  .object({\n    id: z.string().uuid(),\n  })\n  .strict()\n\ntype SubmitInput = z.infer<typeof submitSchema>\n\ntype ActionRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  translate: (key: string, fallback?: string) => string\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.claim.manage'] },\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nasync function resolveActionContext(req: Request): Promise<ActionRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required') })\n  }\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    translate,\n  }\n}\n\nasync function runGuard(\n  req: Request,\n  context: ActionRouteContext,\n  input: SubmitInput,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: context.translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: input.id,\n      operation: 'custom',\n      mutationPayload: { ...input },\n    },\n  })\n}\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveActionContext(req)\n    const payload = toRecord(await readJsonSafe(req, {}))\n    const scopedPayload = toRecord(withScopedPayload(payload, context.ctx, context.translate))\n    const input = submitSchema.parse({ id: scopedPayload.id })\n    const guarded = await runGuard(req, context, input)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const commandInput = guarded.modifiedPayload ? submitSchema.parse(guarded.modifiedPayload) : input\n\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute<SubmitInput, { claimId: string }>(\n      'warranty_claims.claim.submit',\n      { input: commandInput, ctx: context.ctx },\n    )\n\n    await guarded.runAfterSuccess()\n\n    return NextResponse.json({ ok: true, claimId: result?.claimId ?? commandInput.id })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.submit.post failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.save_failed', 'Failed to save warranty claim') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Submit warranty claim',\n  methods: {\n    POST: {\n      summary: 'Submit a draft claim',\n      requestBody: { contentType: 'application/json', schema: submitSchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Claim submitted',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,8BAA6D;AACtE,SAAS,yBAAyB;AAElC,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAM7C,MAAM,eAAe,EAClB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC,EACA,OAAO;AAWH,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAC/E;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,eAAe,qBAAqB,KAA2C;AAC7E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,kCAAkC,EAAE,CAAC;AAAA,EACvI;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,SACb,KACA,SACA,OACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAClH;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,UAAM,UAAU,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACpD,UAAM,gBAAgB,SAAS,kBAAkB,SAAS,QAAQ,KAAK,QAAQ,SAAS,CAAC;AACzF,UAAM,QAAQ,aAAa,MAAM,EAAE,IAAI,cAAc,GAAG,CAAC;AACzD,UAAM,UAAU,MAAM,SAAS,KAAK,SAAS,KAAK;AAClD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,eAAe,QAAQ,kBAAkB,aAAa,MAAM,QAAQ,eAAe,IAAI;AAE7F,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAC7D,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA,EAAE,OAAO,cAAc,KAAK,QAAQ,IAAI;AAAA,IAC1C;AAEA,UAAM,QAAQ,gBAAgB;AAE9B,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,QAAQ,WAAW,aAAa,GAAG,CAAC;AAAA,EACpF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,sCAAsC,EAAE,IAAI,CAAC;AAC1D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,+BAA+B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvI;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,aAAa;AAAA,MACrE,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,QAClE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../commands/shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\n// Scope is derived from the authenticated principal, never accepted from the body \u2014\n// mirroring the sibling transition/assign routes. `withScopedPayload` prefers a\n// caller-supplied tenantId/organizationId over the actor's context, so admitting them\n// here would let the request choose its own scope.\nconst submitSchema = z\n  .object({\n    id: z.string().uuid(),\n  })\n  .strict()\n\ntype SubmitInput = z.infer<typeof submitSchema>\n\ntype ActionRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  translate: (key: string, fallback?: string) => string\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.claim.manage'] },\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nasync function resolveActionContext(req: Request): Promise<ActionRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required') })\n  }\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    translate,\n  }\n}\n\nasync function runGuard(\n  req: Request,\n  context: ActionRouteContext,\n  input: SubmitInput,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: context.translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: input.id,\n      operation: 'custom',\n      mutationPayload: { ...input },\n    },\n  })\n}\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveActionContext(req)\n    const payload = toRecord(await readJsonSafe(req, {}))\n    const scopedPayload = toRecord(withScopedPayload(payload, context.ctx, context.translate))\n    const input = submitSchema.parse({ id: scopedPayload.id })\n    const guarded = await runGuard(req, context, input)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const commandInput = guarded.modifiedPayload ? submitSchema.parse(guarded.modifiedPayload) : input\n\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute<SubmitInput, { claimId: string }>(\n      'warranty_claims.claim.submit',\n      { input: commandInput, ctx: context.ctx },\n    )\n\n    await guarded.runAfterSuccess()\n\n    return NextResponse.json({ ok: true, claimId: result?.claimId ?? commandInput.id })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.submit.post failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.save_failed', 'Failed to save warranty claim') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Submit warranty claim',\n  methods: {\n    POST: {\n      summary: 'Submit a draft claim',\n      requestBody: { contentType: 'application/json', schema: submitSchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Claim submitted',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,8BAA6D;AACtE,SAAS,yBAAyB;AAElC,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAM7C,MAAM,eAAe,EAClB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC,EACA,OAAO;AAWH,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAC/E;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,eAAe,qBAAqB,KAA2C;AAC7E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,kCAAkC,EAAE,CAAC;AAAA,EACvI;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,SACb,KACA,SACA,OACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAClH;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,UAAM,UAAU,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACpD,UAAM,gBAAgB,SAAS,kBAAkB,SAAS,QAAQ,KAAK,QAAQ,SAAS,CAAC;AACzF,UAAM,QAAQ,aAAa,MAAM,EAAE,IAAI,cAAc,GAAG,CAAC;AACzD,UAAM,UAAU,MAAM,SAAS,KAAK,SAAS,KAAK;AAClD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,eAAe,QAAQ,kBAAkB,aAAa,MAAM,QAAQ,eAAe,IAAI;AAE7F,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAC7D,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA,EAAE,OAAO,cAAc,KAAK,QAAQ,IAAI;AAAA,IAC1C;AAEA,UAAM,QAAQ,gBAAgB;AAE9B,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,QAAQ,WAAW,aAAa,GAAG,CAAC;AAAA,EACpF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,sCAAsC,EAAE,IAAI,CAAC;AAC1D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,+BAA+B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvI;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,aAAa;AAAA,MACrE,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,QAClE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/warranty_claims/api/transition/route.js CHANGED Viewed

@@ -5,6 +5,7 @@ import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
 import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
 import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
 import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
@@ -93,6 +94,10 @@ async function POST(req) {
     return NextResponse.json({ ok: true, claimId: result?.claimId ?? commandInput.id });
   } catch (err) {
     if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    const interceptorRejection = getCommandInterceptorHttpRejection(err);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
     const { translate } = await resolveTranslations();
     if (err instanceof z.ZodError) {
       return NextResponse.json({ error: translate("warranty_claims.errors.invalidInput", "Invalid input") }, { status: 400 });

package/dist/modules/warranty_claims/api/transition/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/warranty_claims/api/transition/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { transitionClaimInputSchema, type TransitionClaimInput } from '../../data/validators'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../commands/shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\ntype ActionRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  translate: (key: string, fallback?: string) => string\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.claim.manage'] },\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nasync function resolveActionContext(req: Request): Promise<ActionRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required') })\n  }\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    translate,\n  }\n}\n\nfunction toTransitionInput(scopedPayload: Record<string, unknown>): TransitionClaimInput {\n  return transitionClaimInputSchema.parse({\n    id: scopedPayload.id,\n    toStatus: scopedPayload.toStatus,\n    rejectionReasonCode: scopedPayload.rejectionReasonCode,\n    resolutionSummary: scopedPayload.resolutionSummary,\n  })\n}\n\nasync function runGuard(\n  req: Request,\n  context: ActionRouteContext,\n  input: TransitionClaimInput,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: context.translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: input.id,\n      operation: 'custom',\n      mutationPayload: { ...input },\n    },\n  })\n}\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveActionContext(req)\n    const payload = toRecord(await readJsonSafe(req, {}))\n    const scopedPayload = withScopedPayload(payload, context.ctx, context.translate)\n    const input = toTransitionInput(scopedPayload)\n    const guarded = await runGuard(req, context, input)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const commandInput = guarded.modifiedPayload ? toTransitionInput(guarded.modifiedPayload) : input\n\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute<TransitionClaimInput, { claimId: string }>(\n      'warranty_claims.claim.transition',\n      { input: commandInput, ctx: context.ctx },\n    )\n\n    await guarded.runAfterSuccess()\n\n    return NextResponse.json({ ok: true, claimId: result?.claimId ?? commandInput.id })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.transition.post failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.save_failed', 'Failed to save warranty claim') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Transition warranty claim',\n  methods: {\n    POST: {\n      summary: 'Move a claim through the lifecycle',\n      requestBody: { contentType: 'application/json', schema: transitionClaimInputSchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Claim transitioned',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,8BAA6D;AACtE,SAAS,yBAAyB;AAElC,SAAS,kCAA6D;AACtE,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAStC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAC/E;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,eAAe,qBAAqB,KAA2C;AAC7E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,kCAAkC,EAAE,CAAC;AAAA,EACvI;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,eAA8D;AACvF,SAAO,2BAA2B,MAAM;AAAA,IACtC,IAAI,cAAc;AAAA,IAClB,UAAU,cAAc;AAAA,IACxB,qBAAqB,cAAc;AAAA,IACnC,mBAAmB,cAAc;AAAA,EACnC,CAAC;AACH;AAEA,eAAe,SACb,KACA,SACA,OACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAClH;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,UAAM,UAAU,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACpD,UAAM,gBAAgB,kBAAkB,SAAS,QAAQ,KAAK,QAAQ,SAAS;AAC/E,UAAM,QAAQ,kBAAkB,aAAa;AAC7C,UAAM,UAAU,MAAM,SAAS,KAAK,SAAS,KAAK;AAClD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,eAAe,QAAQ,kBAAkB,kBAAkB,QAAQ,eAAe,IAAI;AAE5F,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAC7D,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA,EAAE,OAAO,cAAc,KAAK,QAAQ,IAAI;AAAA,IAC1C;AAEA,UAAM,QAAQ,gBAAgB;AAE9B,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,QAAQ,WAAW,aAAa,GAAG,CAAC;AAAA,EACpF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,0CAA0C,EAAE,IAAI,CAAC;AAC9D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,+BAA+B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvI;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,2BAA2B;AAAA,MACnF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,QAClE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { transitionClaimInputSchema, type TransitionClaimInput } from '../../data/validators'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../commands/shared'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('warranty_claims')\n\ntype ActionRouteContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n  translate: (key: string, fallback?: string) => string\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['warranty_claims.claim.manage'] },\n}\n\nfunction toRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}\n}\n\nasync function resolveActionContext(req: Request): Promise<ActionRouteContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: translate('warranty_claims.errors.organization_required', 'Organization context is required') })\n  }\n  return {\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n    tenantId: auth.tenantId,\n    organizationId,\n    translate,\n  }\n}\n\nfunction toTransitionInput(scopedPayload: Record<string, unknown>): TransitionClaimInput {\n  return transitionClaimInputSchema.parse({\n    id: scopedPayload.id,\n    toStatus: scopedPayload.toStatus,\n    rejectionReasonCode: scopedPayload.rejectionReasonCode,\n    resolutionSummary: scopedPayload.resolutionSummary,\n  })\n}\n\nasync function runGuard(\n  req: Request,\n  context: ActionRouteContext,\n  input: TransitionClaimInput,\n): Promise<RouteMutationGuardResult> {\n  const userId = context.ctx.auth?.sub\n  if (!userId) {\n    throw new CrudHttpError(401, { error: context.translate('warranty_claims.errors.unauthorized', 'Unauthorized') })\n  }\n  return runRouteMutationGuards({\n    container: context.ctx.container,\n    req,\n    auth: {\n      userId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: input.id,\n      operation: 'custom',\n      mutationPayload: { ...input },\n    },\n  })\n}\n\nexport async function POST(req: Request) {\n  try {\n    const context = await resolveActionContext(req)\n    const payload = toRecord(await readJsonSafe(req, {}))\n    const scopedPayload = withScopedPayload(payload, context.ctx, context.translate)\n    const input = toTransitionInput(scopedPayload)\n    const guarded = await runGuard(req, context, input)\n    if (!guarded.ok) {\n      return guarded.response\n    }\n    const commandInput = guarded.modifiedPayload ? toTransitionInput(guarded.modifiedPayload) : input\n\n    const commandBus = context.ctx.container.resolve('commandBus') as CommandBus\n    const { result } = await commandBus.execute<TransitionClaimInput, { claimId: string }>(\n      'warranty_claims.claim.transition',\n      { input: commandInput, ctx: context.ctx },\n    )\n\n    await guarded.runAfterSuccess()\n\n    return NextResponse.json({ ok: true, claimId: result?.claimId ?? commandInput.id })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    logger.error('warranty_claims.transition.post failed', { err })\n    return NextResponse.json({ error: translate('warranty_claims.errors.save_failed', 'Failed to save warranty claim') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims',\n  summary: 'Transition warranty claim',\n  methods: {\n    POST: {\n      summary: 'Move a claim through the lifecycle',\n      requestBody: { contentType: 'application/json', schema: transitionClaimInputSchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Claim transitioned',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,2BAA2B;AACpC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,8BAA6D;AACtE,SAAS,yBAAyB;AAElC,SAAS,kCAA6D;AACtE,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB;AAStC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAC/E;AAEA,SAAS,SAAS,OAAyC;AACzD,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC3G;AAEA,eAAe,qBAAqB,KAA2C;AAC7E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAC1G;AACA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,gDAAgD,kCAAkC,EAAE,CAAC;AAAA,EACvI;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,eAA8D;AACvF,SAAO,2BAA2B,MAAM;AAAA,IACtC,IAAI,cAAc;AAAA,IAClB,UAAU,cAAc;AAAA,IACxB,qBAAqB,cAAc;AAAA,IACnC,mBAAmB,cAAc;AAAA,EACnC,CAAC;AACH;AAEA,eAAe,SACb,KACA,SACA,OACmC;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM;AACjC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,uCAAuC,cAAc,EAAE,CAAC;AAAA,EAClH;AACA,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,IAAI;AAAA,IACvB;AAAA,IACA,MAAM;AAAA,MACJ;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,UAAM,UAAU,SAAS,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACpD,UAAM,gBAAgB,kBAAkB,SAAS,QAAQ,KAAK,QAAQ,SAAS;AAC/E,UAAM,QAAQ,kBAAkB,aAAa;AAC7C,UAAM,UAAU,MAAM,SAAS,KAAK,SAAS,KAAK;AAClD,QAAI,CAAC,QAAQ,IAAI;AACf,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,eAAe,QAAQ,kBAAkB,kBAAkB,QAAQ,eAAe,IAAI;AAE5F,UAAM,aAAa,QAAQ,IAAI,UAAU,QAAQ,YAAY;AAC7D,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA,EAAE,OAAO,cAAc,KAAK,QAAQ,IAAI;AAAA,IAC1C;AAEA,UAAM,QAAQ,gBAAgB;AAE9B,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,QAAQ,WAAW,aAAa,GAAG,CAAC;AAAA,EACpF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,WAAO,MAAM,0CAA0C,EAAE,IAAI,CAAC;AAC9D,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,sCAAsC,+BAA+B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvI;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,2BAA2B;AAAA,MACnF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,QAClE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/warranty_claims/api/troubleshooting-guides/route.js CHANGED Viewed

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { parseBooleanFromUnknown } from "@open-mercato/shared/lib/boolean";
 import { buildIlikeTerm } from "@open-mercato/shared/lib/db/buildIlikeTerm";
 import { applyIdsFilter } from "../../lib/apiIdsFilter.js";
@@ -96,10 +97,22 @@ function toEntitySteps(value) {
   if (value === void 0 || value === null) return null;
   const parsed = parseGuideSteps(value);
   if (!parsed) {
-    throw new CrudHttpError(400, { error: "warranty_claims.errors.invalidTroubleshootingSteps" });
+    throw new CrudHttpError(400, { error: "[internal] troubleshooting steps reached the entity mapper unvalidated" });
   }
   return { prompt: parsed.prompt, options: parsed.options };
 }
+async function assertParsableGuideSteps(input) {
+  if (!hasOwn(input, "steps")) return;
+  const value = input.steps;
+  if (value === void 0 || value === null || parseGuideSteps(value)) return;
+  const { translate } = await resolveTranslations();
+  throw new CrudHttpError(400, {
+    error: translate(
+      "warranty_claims.errors.invalidTroubleshootingSteps",
+      "Troubleshooting steps must include a prompt and valid option branches."
+    )
+  });
+}
 function toTroubleshootingGuideEntityData(input) {
   return {
     claimType: input.claimType ?? null,
@@ -199,6 +212,14 @@ const crud = makeCrudRoute({
     schema: rawBodySchema,
     mapToEntity: (input, ctx) => toTroubleshootingGuideEntityData(parseCreateInput(input, ctx))
   },
+  hooks: {
+    beforeCreate: async (input) => {
+      await assertParsableGuideSteps(input);
+    },
+    beforeUpdate: async (input) => {
+      await assertParsableGuideSteps(input);
+    }
+  },
   update: {
     schema: rawBodySchema,
     getId: (input) => {