@open-mercato/core 0.8.1-develop.7228.1.b7ea09d2d3 → 0.8.1-develop.7238.1.3abe669ea5

package/dist/modules/availability/events.js

@@ -0,0 +1,18 @@
+import { createModuleEvents } from "@open-mercato/shared/modules/events";
+const events = [
+  { id: "availability.policy.created", label: "Availability Policy Created", entity: "policy", category: "crud" },
+  { id: "availability.policy.updated", label: "Availability Policy Updated", entity: "policy", category: "crud" },
+  { id: "availability.policy.deleted", label: "Availability Policy Deleted", entity: "policy", category: "crud" }
+];
+const eventsConfig = createModuleEvents({
+  moduleId: "availability",
+  events
+});
+const emitAvailabilityEvent = eventsConfig.emit;
+var events_default = eventsConfig;
+export {
+  events_default as default,
+  emitAvailabilityEvent,
+  eventsConfig
+};
+//# sourceMappingURL=events.js.map

package/dist/modules/availability/events.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/availability/events.ts"],
+  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\nconst events = [\n  { id: 'availability.policy.created', label: 'Availability Policy Created', entity: 'policy', category: 'crud' },\n  { id: 'availability.policy.updated', label: 'Availability Policy Updated', entity: 'policy', category: 'crud' },\n  { id: 'availability.policy.deleted', label: 'Availability Policy Deleted', entity: 'policy', category: 'crud' },\n] as const\n\nexport const eventsConfig = createModuleEvents({\n  moduleId: 'availability',\n  events,\n})\n\nexport const emitAvailabilityEvent = eventsConfig.emit\nexport type AvailabilityEventId = typeof events[number]['id']\n\nexport default eventsConfig\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AAEnC,MAAM,SAAS;AAAA,EACb,EAAE,IAAI,+BAA+B,OAAO,+BAA+B,QAAQ,UAAU,UAAU,OAAO;AAAA,EAC9G,EAAE,IAAI,+BAA+B,OAAO,+BAA+B,QAAQ,UAAU,UAAU,OAAO;AAAA,EAC9G,EAAE,IAAI,+BAA+B,OAAO,+BAA+B,QAAQ,UAAU,UAAU,OAAO;AAChH;AAEO,MAAM,eAAe,mBAAmB;AAAA,EAC7C,UAAU;AAAA,EACV;AACF,CAAC;AAEM,MAAM,wBAAwB,aAAa;AAGlD,IAAO,iBAAQ;",
+  "names": []
+}

package/dist/modules/availability/index.js

@@ -0,0 +1,15 @@
+const metadata = {
+  name: "availability",
+  title: "Availability",
+  version: "0.1.0",
+  description: "Sell-policy layer (stock-managed, backorder, preorder, thresholds) on top of the shared availability contract.",
+  author: "Open Mercato Team",
+  license: "MIT",
+  ejectable: true
+};
+import { features } from "./acl.js";
+export {
+  features,
+  metadata
+};
+//# sourceMappingURL=index.js.map

package/dist/modules/availability/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/availability/index.ts"],
+  "sourcesContent": ["import type { ModuleInfo } from '@open-mercato/shared/modules/registry'\n\nexport const metadata: ModuleInfo = {\n  name: 'availability',\n  title: 'Availability',\n  version: '0.1.0',\n  description: 'Sell-policy layer (stock-managed, backorder, preorder, thresholds) on top of the shared availability contract.',\n  author: 'Open Mercato Team',\n  license: 'MIT',\n  ejectable: true,\n}\n\nexport { features } from './acl'\n"],
+  "mappings": "AAEO,MAAM,WAAuB;AAAA,EAClC,MAAM;AAAA,EACN,OAAO;AAAA,EACP,SAAS;AAAA,EACT,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,WAAW;AACb;AAEA,SAAS,gBAAgB;",
+  "names": []
+}

package/dist/modules/availability/lib/policyResolution.js

@@ -0,0 +1,155 @@
+import { AvailabilityPolicy } from "../data/entities.js";
+import { tryResolve } from "./tryResolve.js";
+const POLICY_CHAIN_LEVELS = [
+  "variant_store",
+  "variant",
+  "product_store",
+  "product",
+  "store_default",
+  "module_default"
+];
+const NULLABLE_FIELDS = [
+  "backorderLeadTimeDays",
+  "preorderReleaseAt",
+  "lowStockThreshold",
+  "minOrderQuantity",
+  "maxOrderQuantity",
+  "quantityIncrement"
+];
+const BOOLEAN_FIELDS = ["isStockManaged", "allowBackorder", "hideWhenOutOfStock", "isActive"];
+function candidateFilters(scope) {
+  const storeId = scope.storeId ?? null;
+  const variantId = scope.variantId ?? null;
+  const filters = [];
+  if (variantId) {
+    filters.push({ variantId, storeId });
+    filters.push({ variantId, storeId: null });
+  }
+  filters.push({ productId: scope.productId, variantId: null, storeId });
+  filters.push({ productId: scope.productId, variantId: null, storeId: null });
+  filters.push({ productId: null, variantId: null, storeId });
+  if (storeId) filters.push({ productId: null, variantId: null, storeId: null });
+  return filters;
+}
+function matchChainRows(scope, pool) {
+  const storeId = scope.storeId ?? null;
+  const variantId = scope.variantId ?? null;
+  const findMatch = (predicate) => pool.find(predicate) ?? null;
+  const rows = [];
+  if (variantId) {
+    rows.push(findMatch((r) => r.variantId === variantId && (r.storeId ?? null) === storeId));
+    rows.push(findMatch((r) => r.variantId === variantId && (r.storeId ?? null) === null));
+  }
+  rows.push(findMatch((r) => r.productId === scope.productId && !r.variantId && (r.storeId ?? null) === storeId));
+  rows.push(findMatch((r) => r.productId === scope.productId && !r.variantId && (r.storeId ?? null) === null));
+  rows.push(findMatch((r) => !r.productId && !r.variantId && (r.storeId ?? null) === storeId));
+  if (storeId) rows.push(findMatch((r) => !r.productId && !r.variantId && (r.storeId ?? null) === null));
+  return rows;
+}
+function resolveFromRows(rows, isStockManagedModuleDefault) {
+  const firstRow = rows.find((row) => row != null) ?? null;
+  const result = {};
+  for (const field of BOOLEAN_FIELDS) {
+    if (firstRow) {
+      ;
+      result[field] = { value: firstRow[field], policySourceId: firstRow.id };
+    } else {
+      ;
+      result[field] = { value: false, policySourceId: null };
+    }
+  }
+  if (!firstRow) result.isStockManaged = { value: isStockManagedModuleDefault, policySourceId: null };
+  if (!firstRow) result.isActive = { value: true, policySourceId: null };
+  for (const field of NULLABLE_FIELDS) {
+    let resolved = { value: null, policySourceId: null };
+    for (const row of rows) {
+      if (row && row[field] != null) {
+        resolved = { value: row[field], policySourceId: row.id };
+        break;
+      }
+    }
+    ;
+    result[field] = resolved;
+  }
+  return result;
+}
+async function resolveIsStockManagedModuleDefault(em, container, scope) {
+  const ProductInventoryProfile = tryResolve(container, "ProductInventoryProfile");
+  if (!ProductInventoryProfile) return false;
+  const baseFilter = {
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId,
+    catalogProductId: scope.productId,
+    deletedAt: null
+  };
+  if (scope.variantId) {
+    const variantRow = await em.findOne(ProductInventoryProfile, { ...baseFilter, catalogVariantId: scope.variantId });
+    if (variantRow) return true;
+  }
+  const productRow = await em.findOne(ProductInventoryProfile, { ...baseFilter, catalogVariantId: null });
+  return !!productRow;
+}
+async function resolveIsStockManagedModuleDefaultMany(em, container, scopes) {
+  const ProductInventoryProfile = tryResolve(container, "ProductInventoryProfile");
+  const results = /* @__PURE__ */ new Map();
+  if (!ProductInventoryProfile || scopes.length === 0) return results;
+  const first = scopes[0];
+  const productIds = Array.from(new Set(scopes.map((s) => s.productId)));
+  const rows = await em.find(ProductInventoryProfile, {
+    tenantId: first.tenantId,
+    organizationId: first.organizationId,
+    deletedAt: null,
+    catalogProductId: { $in: productIds }
+  });
+  const exists = new Set(rows.map((row) => `${row.catalogProductId}:${row.catalogVariantId ?? ""}`));
+  for (const scope of scopes) {
+    const variantHit = scope.variantId ? exists.has(`${scope.productId}:${scope.variantId}`) : false;
+    const productHit = exists.has(`${scope.productId}:`);
+    results.set(scopeKey(scope), variantHit || productHit);
+  }
+  return results;
+}
+function scopeKey(scope) {
+  return `${scope.productId}:${scope.variantId ?? ""}:${scope.storeId ?? ""}`;
+}
+function createPolicyResolutionService(container) {
+  async function resolveMany(em, scopes) {
+    if (scopes.length === 0) return [];
+    const first = scopes[0];
+    const seen = /* @__PURE__ */ new Set();
+    const orFilters = [];
+    for (const scope of scopes) {
+      for (const filter of candidateFilters(scope)) {
+        const key = JSON.stringify(filter);
+        if (seen.has(key)) continue;
+        seen.add(key);
+        orFilters.push(filter);
+      }
+    }
+    const pool = orFilters.length ? await em.find(AvailabilityPolicy, {
+      tenantId: first.tenantId,
+      organizationId: first.organizationId,
+      deletedAt: null,
+      $or: orFilters
+    }) : [];
+    const rowsByScope = scopes.map((scope) => matchChainRows(scope, pool));
+    const needsModuleDefault = scopes.filter((scope, index) => !rowsByScope[index].some((row) => row != null));
+    const moduleDefaults = await resolveIsStockManagedModuleDefaultMany(em, container, needsModuleDefault);
+    return scopes.map(
+      (scope, index) => resolveFromRows(rowsByScope[index], moduleDefaults.get(scopeKey(scope)) ?? false)
+    );
+  }
+  return {
+    async resolve(em, scope) {
+      const [result] = await resolveMany(em, [scope]);
+      return result;
+    },
+    resolveMany
+  };
+}
+export {
+  POLICY_CHAIN_LEVELS,
+  createPolicyResolutionService,
+  resolveIsStockManagedModuleDefault
+};
+//# sourceMappingURL=policyResolution.js.map

package/dist/modules/availability/lib/policyResolution.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/availability/lib/policyResolution.ts"],
+  "sourcesContent": ["/**\n * `AvailabilityPolicy` resolution chain \u2014 six levels, most specific wins.\n *\n * @see .ai/specs/2026-08-14-availability-contract.md \u00A75.2\n *\n * Resolution design (documented here because \u00A75.2 does not fully spell it\n * out \u2014 see PLAN.md \u00A7 Key design decisions):\n *\n * - Boolean columns (`isStockManaged`, `allowBackorder`, `hideWhenOutOfStock`,\n *   `isActive`) are NOT NULL, so a matched row's own value is always\n *   concrete \u2014 there is no \"unset\" to fall through. The single most specific\n *   EXISTING row decides every boolean field.\n * - Nullable columns (`backorderLeadTimeDays`, `preorderReleaseAt`,\n *   `lowStockThreshold`, `minOrderQuantity`, `maxOrderQuantity`,\n *   `quantityIncrement`) genuinely cascade: a matched row that leaves the\n *   field `null` defers to the next-less-specific row, per US-A2's \"which\n *   level currently decides each field\" requirement.\n *\n * `resolveMany()` exists so `wms`'s batched `check()` (\u00A74.2/R4 \u2014 one policy\n * lookup regardless of item count) can soft-resolve this service and still\n * issue exactly one query for the whole batch, rather than one per item.\n * `resolve()` is `resolveMany([scope])[0]`, so single-item callers (the admin\n * check tool, the resolve-preview endpoint) are unaffected.\n */\n\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { AvailabilityPolicy } from '../data/entities'\nimport { tryResolve } from './tryResolve'\n\nexport type PolicyResolutionScope = {\n  tenantId: string\n  organizationId: string\n  storeId?: string | null\n  productId: string\n  variantId?: string | null\n}\n\nexport type ResolvedField<T> = {\n  value: T\n  /** The `AvailabilityPolicy` row id that decided, or `null` for the module default. */\n  policySourceId: string | null\n}\n\nexport type ResolvedAvailabilityPolicy = {\n  isStockManaged: ResolvedField<boolean>\n  allowBackorder: ResolvedField<boolean>\n  backorderLeadTimeDays: ResolvedField<number | null>\n  preorderReleaseAt: ResolvedField<Date | null>\n  lowStockThreshold: ResolvedField<number | null>\n  minOrderQuantity: ResolvedField<number | null>\n  maxOrderQuantity: ResolvedField<number | null>\n  quantityIncrement: ResolvedField<number | null>\n  hideWhenOutOfStock: ResolvedField<boolean>\n  isActive: ResolvedField<boolean>\n}\n\n/** The six chain levels, most specific first. `null` = \"no row matched this level\". */\nexport type PolicyChainLevel =\n  | 'variant_store'\n  | 'variant'\n  | 'product_store'\n  | 'product'\n  | 'store_default'\n  | 'module_default'\n\nexport const POLICY_CHAIN_LEVELS: PolicyChainLevel[] = [\n  'variant_store',\n  'variant',\n  'product_store',\n  'product',\n  'store_default',\n  'module_default',\n]\n\nconst NULLABLE_FIELDS = [\n  'backorderLeadTimeDays',\n  'preorderReleaseAt',\n  'lowStockThreshold',\n  'minOrderQuantity',\n  'maxOrderQuantity',\n  'quantityIncrement',\n] as const\n\nconst BOOLEAN_FIELDS = ['isStockManaged', 'allowBackorder', 'hideWhenOutOfStock', 'isActive'] as const\n\nfunction candidateFilters(scope: PolicyResolutionScope): Array<Record<string, unknown>> {\n  const storeId = scope.storeId ?? null\n  const variantId = scope.variantId ?? null\n  const filters: Array<Record<string, unknown>> = []\n  if (variantId) {\n    filters.push({ variantId, storeId })\n    filters.push({ variantId, storeId: null })\n  }\n  filters.push({ productId: scope.productId, variantId: null, storeId })\n  filters.push({ productId: scope.productId, variantId: null, storeId: null })\n  filters.push({ productId: null, variantId: null, storeId })\n  if (storeId) filters.push({ productId: null, variantId: null, storeId: null })\n  return filters\n}\n\n/** Picks the (up to) five candidate rows for one scope out of a shared, already-loaded candidate pool. */\nfunction matchChainRows(scope: PolicyResolutionScope, pool: AvailabilityPolicy[]): Array<AvailabilityPolicy | null> {\n  const storeId = scope.storeId ?? null\n  const variantId = scope.variantId ?? null\n  const findMatch = (predicate: (row: AvailabilityPolicy) => boolean) => pool.find(predicate) ?? null\n\n  const rows: Array<AvailabilityPolicy | null> = []\n  if (variantId) {\n    rows.push(findMatch((r) => r.variantId === variantId && (r.storeId ?? null) === storeId))\n    rows.push(findMatch((r) => r.variantId === variantId && (r.storeId ?? null) === null))\n  }\n  rows.push(findMatch((r) => r.productId === scope.productId && !r.variantId && (r.storeId ?? null) === storeId))\n  rows.push(findMatch((r) => r.productId === scope.productId && !r.variantId && (r.storeId ?? null) === null))\n  rows.push(findMatch((r) => !r.productId && !r.variantId && (r.storeId ?? null) === storeId))\n  // The store-default level cascades store-specific \u2192 all-stores, same as\n  // the variant/product levels above it (\"store_id null = applies to all\n  // stores in the organization\", \u00A75.1) \u2014 otherwise an org-wide default row\n  // is invisible to any query that names a concrete store.\n  if (storeId) rows.push(findMatch((r) => !r.productId && !r.variantId && (r.storeId ?? null) === null))\n  return rows\n}\n\nfunction resolveFromRows(\n  rows: Array<AvailabilityPolicy | null>,\n  isStockManagedModuleDefault: boolean,\n): ResolvedAvailabilityPolicy {\n  const firstRow = rows.find((row): row is AvailabilityPolicy => row != null) ?? null\n  const result = {} as ResolvedAvailabilityPolicy\n\n  for (const field of BOOLEAN_FIELDS) {\n    if (firstRow) {\n      ;(result as any)[field] = { value: (firstRow as any)[field], policySourceId: firstRow.id }\n    } else {\n      ;(result as any)[field] = { value: false, policySourceId: null }\n    }\n  }\n\n  // is_stock_managed's module default is dynamic (wms + profile existence), not a flat `false`.\n  if (!firstRow) result.isStockManaged = { value: isStockManagedModuleDefault, policySourceId: null }\n  // is_active's module default is \"active\" (nothing to deactivate).\n  if (!firstRow) result.isActive = { value: true, policySourceId: null }\n\n  for (const field of NULLABLE_FIELDS) {\n    let resolved: ResolvedField<unknown> = { value: null, policySourceId: null }\n    for (const row of rows) {\n      if (row && (row as any)[field] != null) {\n        resolved = { value: (row as any)[field], policySourceId: row.id }\n        break\n      }\n    }\n    ;(result as any)[field] = resolved\n  }\n\n  return result\n}\n\n/** `is_stock_managed`'s module default: true when `wms` is enabled and a `ProductInventoryProfile` exists for the item. */\nexport async function resolveIsStockManagedModuleDefault(\n  em: EntityManager,\n  container: { resolve: <T = unknown>(name: string) => T },\n  scope: { tenantId: string; organizationId: string; productId: string; variantId?: string | null },\n): Promise<boolean> {\n  const ProductInventoryProfile = tryResolve<new () => unknown>(container, 'ProductInventoryProfile')\n  if (!ProductInventoryProfile) return false\n\n  const baseFilter = {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    catalogProductId: scope.productId,\n    deletedAt: null,\n  }\n\n  if (scope.variantId) {\n    const variantRow = await em.findOne(ProductInventoryProfile as any, { ...baseFilter, catalogVariantId: scope.variantId })\n    if (variantRow) return true\n  }\n\n  const productRow = await em.findOne(ProductInventoryProfile as any, { ...baseFilter, catalogVariantId: null })\n  return !!productRow\n}\n\n/** Batched module-default check for `resolveMany` \u2014 one query for every scope that might need it. */\nasync function resolveIsStockManagedModuleDefaultMany(\n  em: EntityManager,\n  container: { resolve: <T = unknown>(name: string) => T },\n  scopes: PolicyResolutionScope[],\n): Promise<Map<string, boolean>> {\n  const ProductInventoryProfile = tryResolve<new () => unknown>(container, 'ProductInventoryProfile')\n  const results = new Map<string, boolean>()\n  if (!ProductInventoryProfile || scopes.length === 0) return results\n\n  const first = scopes[0]\n  const productIds = Array.from(new Set(scopes.map((s) => s.productId)))\n  const rows = (await em.find(ProductInventoryProfile as any, {\n    tenantId: first.tenantId,\n    organizationId: first.organizationId,\n    deletedAt: null,\n    catalogProductId: { $in: productIds },\n  } as any)) as Array<{ catalogProductId: string; catalogVariantId: string | null }>\n\n  const exists = new Set(rows.map((row) => `${row.catalogProductId}:${row.catalogVariantId ?? ''}`))\n  for (const scope of scopes) {\n    const variantHit = scope.variantId ? exists.has(`${scope.productId}:${scope.variantId}`) : false\n    const productHit = exists.has(`${scope.productId}:`)\n    results.set(scopeKey(scope), variantHit || productHit)\n  }\n  return results\n}\n\nfunction scopeKey(scope: PolicyResolutionScope): string {\n  return `${scope.productId}:${scope.variantId ?? ''}:${scope.storeId ?? ''}`\n}\n\nexport interface PolicyResolutionService {\n  resolve(em: EntityManager, scope: PolicyResolutionScope): Promise<ResolvedAvailabilityPolicy>\n  resolveMany(em: EntityManager, scopes: PolicyResolutionScope[]): Promise<ResolvedAvailabilityPolicy[]>\n}\n\nexport function createPolicyResolutionService(container: {\n  resolve: <T = unknown>(name: string) => T\n}): PolicyResolutionService {\n  async function resolveMany(em: EntityManager, scopes: PolicyResolutionScope[]): Promise<ResolvedAvailabilityPolicy[]> {\n    if (scopes.length === 0) return []\n\n    const first = scopes[0]\n    const seen = new Set<string>()\n    const orFilters: Array<Record<string, unknown>> = []\n    for (const scope of scopes) {\n      for (const filter of candidateFilters(scope)) {\n        const key = JSON.stringify(filter)\n        if (seen.has(key)) continue\n        seen.add(key)\n        orFilters.push(filter)\n      }\n    }\n\n    const pool = orFilters.length\n      ? await em.find(AvailabilityPolicy, {\n          tenantId: first.tenantId,\n          organizationId: first.organizationId,\n          deletedAt: null,\n          $or: orFilters as any,\n        })\n      : []\n\n    // Only scopes that resolve to no row at all need the dynamic is_stock_managed\n    // module default \u2014 batch just those.\n    const rowsByScope = scopes.map((scope) => matchChainRows(scope, pool))\n    const needsModuleDefault = scopes.filter((scope, index) => !rowsByScope[index].some((row) => row != null))\n    const moduleDefaults = await resolveIsStockManagedModuleDefaultMany(em, container, needsModuleDefault)\n\n    return scopes.map((scope, index) =>\n      resolveFromRows(rowsByScope[index], moduleDefaults.get(scopeKey(scope)) ?? false),\n    )\n  }\n\n  return {\n    async resolve(em, scope) {\n      const [result] = await resolveMany(em, [scope])\n      return result\n    },\n    resolveMany,\n  }\n}\n"],
+  "mappings": "AA0BA,SAAS,0BAA0B;AACnC,SAAS,kBAAkB;AAsCpB,MAAM,sBAA0C;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,kBAAkB;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,iBAAiB,CAAC,kBAAkB,kBAAkB,sBAAsB,UAAU;AAE5F,SAAS,iBAAiB,OAA8D;AACtF,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,YAAY,MAAM,aAAa;AACrC,QAAM,UAA0C,CAAC;AACjD,MAAI,WAAW;AACb,YAAQ,KAAK,EAAE,WAAW,QAAQ,CAAC;AACnC,YAAQ,KAAK,EAAE,WAAW,SAAS,KAAK,CAAC;AAAA,EAC3C;AACA,UAAQ,KAAK,EAAE,WAAW,MAAM,WAAW,WAAW,MAAM,QAAQ,CAAC;AACrE,UAAQ,KAAK,EAAE,WAAW,MAAM,WAAW,WAAW,MAAM,SAAS,KAAK,CAAC;AAC3E,UAAQ,KAAK,EAAE,WAAW,MAAM,WAAW,MAAM,QAAQ,CAAC;AAC1D,MAAI,QAAS,SAAQ,KAAK,EAAE,WAAW,MAAM,WAAW,MAAM,SAAS,KAAK,CAAC;AAC7E,SAAO;AACT;AAGA,SAAS,eAAe,OAA8B,MAA8D;AAClH,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,YAAY,MAAM,aAAa;AACrC,QAAM,YAAY,CAAC,cAAoD,KAAK,KAAK,SAAS,KAAK;AAE/F,QAAM,OAAyC,CAAC;AAChD,MAAI,WAAW;AACb,SAAK,KAAK,UAAU,CAAC,MAAM,EAAE,cAAc,cAAc,EAAE,WAAW,UAAU,OAAO,CAAC;AACxF,SAAK,KAAK,UAAU,CAAC,MAAM,EAAE,cAAc,cAAc,EAAE,WAAW,UAAU,IAAI,CAAC;AAAA,EACvF;AACA,OAAK,KAAK,UAAU,CAAC,MAAM,EAAE,cAAc,MAAM,aAAa,CAAC,EAAE,cAAc,EAAE,WAAW,UAAU,OAAO,CAAC;AAC9G,OAAK,KAAK,UAAU,CAAC,MAAM,EAAE,cAAc,MAAM,aAAa,CAAC,EAAE,cAAc,EAAE,WAAW,UAAU,IAAI,CAAC;AAC3G,OAAK,KAAK,UAAU,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,EAAE,cAAc,EAAE,WAAW,UAAU,OAAO,CAAC;AAK3F,MAAI,QAAS,MAAK,KAAK,UAAU,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,EAAE,cAAc,EAAE,WAAW,UAAU,IAAI,CAAC;AACrG,SAAO;AACT;AAEA,SAAS,gBACP,MACA,6BAC4B;AAC5B,QAAM,WAAW,KAAK,KAAK,CAAC,QAAmC,OAAO,IAAI,KAAK;AAC/E,QAAM,SAAS,CAAC;AAEhB,aAAW,SAAS,gBAAgB;AAClC,QAAI,UAAU;AACZ;AAAC,MAAC,OAAe,KAAK,IAAI,EAAE,OAAQ,SAAiB,KAAK,GAAG,gBAAgB,SAAS,GAAG;AAAA,IAC3F,OAAO;AACL;AAAC,MAAC,OAAe,KAAK,IAAI,EAAE,OAAO,OAAO,gBAAgB,KAAK;AAAA,IACjE;AAAA,EACF;AAGA,MAAI,CAAC,SAAU,QAAO,iBAAiB,EAAE,OAAO,6BAA6B,gBAAgB,KAAK;AAElG,MAAI,CAAC,SAAU,QAAO,WAAW,EAAE,OAAO,MAAM,gBAAgB,KAAK;AAErE,aAAW,SAAS,iBAAiB;AACnC,QAAI,WAAmC,EAAE,OAAO,MAAM,gBAAgB,KAAK;AAC3E,eAAW,OAAO,MAAM;AACtB,UAAI,OAAQ,IAAY,KAAK,KAAK,MAAM;AACtC,mBAAW,EAAE,OAAQ,IAAY,KAAK,GAAG,gBAAgB,IAAI,GAAG;AAChE;AAAA,MACF;AAAA,IACF;AACA;AAAC,IAAC,OAAe,KAAK,IAAI;AAAA,EAC5B;AAEA,SAAO;AACT;AAGA,eAAsB,mCACpB,IACA,WACA,OACkB;AAClB,QAAM,0BAA0B,WAA8B,WAAW,yBAAyB;AAClG,MAAI,CAAC,wBAAyB,QAAO;AAErC,QAAM,aAAa;AAAA,IACjB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,kBAAkB,MAAM;AAAA,IACxB,WAAW;AAAA,EACb;AAEA,MAAI,MAAM,WAAW;AACnB,UAAM,aAAa,MAAM,GAAG,QAAQ,yBAAgC,EAAE,GAAG,YAAY,kBAAkB,MAAM,UAAU,CAAC;AACxH,QAAI,WAAY,QAAO;AAAA,EACzB;AAEA,QAAM,aAAa,MAAM,GAAG,QAAQ,yBAAgC,EAAE,GAAG,YAAY,kBAAkB,KAAK,CAAC;AAC7G,SAAO,CAAC,CAAC;AACX;AAGA,eAAe,uCACb,IACA,WACA,QAC+B;AAC/B,QAAM,0BAA0B,WAA8B,WAAW,yBAAyB;AAClG,QAAM,UAAU,oBAAI,IAAqB;AACzC,MAAI,CAAC,2BAA2B,OAAO,WAAW,EAAG,QAAO;AAE5D,QAAM,QAAQ,OAAO,CAAC;AACtB,QAAM,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACrE,QAAM,OAAQ,MAAM,GAAG,KAAK,yBAAgC;AAAA,IAC1D,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,WAAW;AAAA,IACX,kBAAkB,EAAE,KAAK,WAAW;AAAA,EACtC,CAAQ;AAER,QAAM,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,IAAI,IAAI,oBAAoB,EAAE,EAAE,CAAC;AACjG,aAAW,SAAS,QAAQ;AAC1B,UAAM,aAAa,MAAM,YAAY,OAAO,IAAI,GAAG,MAAM,SAAS,IAAI,MAAM,SAAS,EAAE,IAAI;AAC3F,UAAM,aAAa,OAAO,IAAI,GAAG,MAAM,SAAS,GAAG;AACnD,YAAQ,IAAI,SAAS,KAAK,GAAG,cAAc,UAAU;AAAA,EACvD;AACA,SAAO;AACT;AAEA,SAAS,SAAS,OAAsC;AACtD,SAAO,GAAG,MAAM,SAAS,IAAI,MAAM,aAAa,EAAE,IAAI,MAAM,WAAW,EAAE;AAC3E;AAOO,SAAS,8BAA8B,WAElB;AAC1B,iBAAe,YAAY,IAAmB,QAAwE;AACpH,QAAI,OAAO,WAAW,EAAG,QAAO,CAAC;AAEjC,UAAM,QAAQ,OAAO,CAAC;AACtB,UAAM,OAAO,oBAAI,IAAY;AAC7B,UAAM,YAA4C,CAAC;AACnD,eAAW,SAAS,QAAQ;AAC1B,iBAAW,UAAU,iBAAiB,KAAK,GAAG;AAC5C,cAAM,MAAM,KAAK,UAAU,MAAM;AACjC,YAAI,KAAK,IAAI,GAAG,EAAG;AACnB,aAAK,IAAI,GAAG;AACZ,kBAAU,KAAK,MAAM;AAAA,MACvB;AAAA,IACF;AAEA,UAAM,OAAO,UAAU,SACnB,MAAM,GAAG,KAAK,oBAAoB;AAAA,MAChC,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,WAAW;AAAA,MACX,KAAK;AAAA,IACP,CAAC,IACD,CAAC;AAIL,UAAM,cAAc,OAAO,IAAI,CAAC,UAAU,eAAe,OAAO,IAAI,CAAC;AACrE,UAAM,qBAAqB,OAAO,OAAO,CAAC,OAAO,UAAU,CAAC,YAAY,KAAK,EAAE,KAAK,CAAC,QAAQ,OAAO,IAAI,CAAC;AACzG,UAAM,iBAAiB,MAAM,uCAAuC,IAAI,WAAW,kBAAkB;AAErG,WAAO,OAAO;AAAA,MAAI,CAAC,OAAO,UACxB,gBAAgB,YAAY,KAAK,GAAG,eAAe,IAAI,SAAS,KAAK,CAAC,KAAK,KAAK;AAAA,IAClF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,QAAQ,IAAI,OAAO;AACvB,YAAM,CAAC,MAAM,IAAI,MAAM,YAAY,IAAI,CAAC,KAAK,CAAC;AAC9C,aAAO;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/availability/lib/tryResolve.js

@@ -0,0 +1,11 @@
+function tryResolve(resolver, name) {
+  try {
+    return resolver.resolve(name);
+  } catch {
+    return void 0;
+  }
+}
+export {
+  tryResolve
+};
+//# sourceMappingURL=tryResolve.js.map

package/dist/modules/availability/lib/tryResolve.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/availability/lib/tryResolve.ts"],
+  "sourcesContent": ["/** Per-module local soft-resolve helper \u2014 see `packages/core/AGENTS.md` \u00A7 Cross-Module Coupling. */\nexport function tryResolve<T>(resolver: { resolve: <R = unknown>(name: string) => R }, name: string): T | undefined {\n  try {\n    return resolver.resolve<T>(name)\n  } catch {\n    return undefined\n  }\n}\n"],
+  "mappings": "AACO,SAAS,WAAc,UAAyD,MAA6B;AAClH,MAAI;AACF,WAAO,SAAS,QAAW,IAAI;AAAA,EACjC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}

package/dist/modules/availability/migrations/Migration20260922095844_availability.js

@@ -0,0 +1,16 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260922095844_availability extends Migration {
+  constructor() {
+    super(...arguments);
+    this.name = "Migration20260922095844";
+  }
+  up() {
+    this.addSql(`create table "availability_policies" ("id" uuid not null default gen_random_uuid(), "organization_id" uuid not null, "tenant_id" uuid not null, "store_id" uuid null, "product_id" uuid null, "variant_id" uuid null, "is_stock_managed" boolean not null default false, "allow_backorder" boolean not null default false, "backorder_lead_time_days" int null, "preorder_release_at" timestamptz null, "low_stock_threshold" int null, "min_order_quantity" int null, "max_order_quantity" int null, "quantity_increment" int null, "hide_when_out_of_stock" boolean not null default false, "is_active" boolean not null default true, "created_at" timestamptz not null, "updated_at" timestamptz not null, "deleted_at" timestamptz null, primary key ("id"));`);
+    this.addSql(`create unique index "availability_policies_scope_target_unique" on "availability_policies" ("tenant_id", "organization_id", "store_id", "product_id", "variant_id") nulls not distinct where deleted_at is null;`);
+    this.addSql(`create index "availability_policies_scope_idx" on "availability_policies" ("tenant_id", "organization_id");`);
+  }
+}
+export {
+  Migration20260922095844_availability
+};
+//# sourceMappingURL=Migration20260922095844_availability.js.map

package/dist/modules/availability/migrations/Migration20260922095844_availability.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/availability/migrations/Migration20260922095844_availability.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260922095844_availability extends Migration {\n\n  override name = 'Migration20260922095844';\n\n  override up(): void | Promise<void> {\n    this.addSql(`create table \"availability_policies\" (\"id\" uuid not null default gen_random_uuid(), \"organization_id\" uuid not null, \"tenant_id\" uuid not null, \"store_id\" uuid null, \"product_id\" uuid null, \"variant_id\" uuid null, \"is_stock_managed\" boolean not null default false, \"allow_backorder\" boolean not null default false, \"backorder_lead_time_days\" int null, \"preorder_release_at\" timestamptz null, \"low_stock_threshold\" int null, \"min_order_quantity\" int null, \"max_order_quantity\" int null, \"quantity_increment\" int null, \"hide_when_out_of_stock\" boolean not null default false, \"is_active\" boolean not null default true, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, \"deleted_at\" timestamptz null, primary key (\"id\"));`);\n    this.addSql(`create unique index \"availability_policies_scope_target_unique\" on \"availability_policies\" (\"tenant_id\", \"organization_id\", \"store_id\", \"product_id\", \"variant_id\") nulls not distinct where deleted_at is null;`);\n    this.addSql(`create index \"availability_policies_scope_idx\" on \"availability_policies\" (\"tenant_id\", \"organization_id\");`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,6CAA6C,UAAU;AAAA,EAA7D;AAAA;AAEL,SAAS,OAAO;AAAA;AAAA,EAEP,KAA2B;AAClC,SAAK,OAAO,ouBAAouB;AAChvB,SAAK,OAAO,kNAAkN;AAC9N,SAAK,OAAO,6GAA6G;AAAA,EAC3H;AAEF;",
+  "names": []
+}

package/dist/modules/availability/setup.js

@@ -0,0 +1,12 @@
+const setup = {
+  defaultRoleFeatures: {
+    admin: ["availability.*"],
+    employee: ["availability.policies.view"]
+  }
+};
+var setup_default = setup;
+export {
+  setup_default as default,
+  setup
+};
+//# sourceMappingURL=setup.js.map

package/dist/modules/availability/setup.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/availability/setup.ts"],
+  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\n\nexport const setup: ModuleSetupConfig = {\n  defaultRoleFeatures: {\n    admin: ['availability.*'],\n    employee: ['availability.policies.view'],\n  },\n}\n\nexport default setup\n"],
+  "mappings": "AAEO,MAAM,QAA2B;AAAA,EACtC,qBAAqB;AAAA,IACnB,OAAO,CAAC,gBAAgB;AAAA,IACxB,UAAU,CAAC,4BAA4B;AAAA,EACzC;AACF;AAEA,IAAO,gBAAQ;",
+  "names": []
+}

package/dist/modules/entities/cli.js

@@ -14,6 +14,7 @@ import { createKmsService } from "@open-mercato/shared/lib/encryption/kms";
 import {
   decryptWithAesGcm,
   decryptWithAesGcmStrict,
+  isEncryptedPayloadShape,
   TenantDataEncryptionError,
   TenantDataEncryptionErrorCode
 } from "@open-mercato/shared/lib/encryption/aes";
@@ -381,11 +382,6 @@ function resolveMapMeta(map, metaByEntityId, warn = () => {
   if (!tenantId) return null;
   return { entityId, meta, fields, tenantId };
 }
-function isEncryptedPayload(value) {
-  if (typeof value !== "string") return false;
-  const parts = value.split(":");
-  return parts.length === 4 && parts[3] === "v1";
-}
 function formatValueForColumn(prop, value) {
   if (value === null || value === void 0) return value;
   const types = Array.isArray(prop?.columnTypes) ? prop.columnTypes : [];
@@ -474,6 +470,7 @@ const rotateEncryptionKey = {
       return scopes;
     };
     const oldDekCache = /* @__PURE__ */ new Map();
+    const unrecoverableRows = [];
     const dekAvailability = /* @__PURE__ */ new Map();
     const hasExistingDek = async (tenantId) => {
       const cached = dekAvailability.get(tenantId);
@@ -510,6 +507,7 @@ const rotateEncryptionKey = {
       const list = Array.isArray(rows) ? rows : [];
       if (!list.length) return 0;
       const dekAvailable = dryRun ? await hasExistingDek(scope.tenantId) : true;
+      const currentDek = rotate && oldKms ? await encryptionService.getDek(scope.tenantId) : null;
       let updated = 0;
       for (const row of list) {
         const payload = {};
@@ -518,7 +516,7 @@ const rotateEncryptionKey = {
           const col = resolved?.columnName;
           if (!col) continue;
           const rawValue = row[col];
-          if (rotate && !isEncryptedPayload(rawValue)) {
+          if (isEncryptedPayloadShape(rawValue) ? !rotate : rotate) {
             continue;
           }
           payload[rule.field] = rawValue;
@@ -539,10 +537,19 @@ const rotateEncryptionKey = {
           }
           for (const rule of fields) {
             const value = payload[rule.field];
-            if (typeof value !== "string" || !isEncryptedPayload(value)) continue;
+            if (typeof value !== "string" || !isEncryptedPayloadShape(value)) continue;
             const decrypted = decryptWithOldKey(value, oldDek);
-            if (decrypted === null) continue;
-            payload[rule.field] = parseDecryptedFieldValue(decrypted);
+            if (decrypted !== null) {
+              payload[rule.field] = parseDecryptedFieldValue(decrypted);
+              continue;
+            }
+            if (currentDek && decryptWithAesGcm(value, currentDek.key) !== null) continue;
+            delete payload[rule.field];
+            if (rule.hashField) delete payload[rule.hashField];
+            unrecoverableRows.push({ entityId, field: rule.field, rowId: row[pk] });
+            console.warn(
+              `Skipping ${entityId}.${rule.field} for row ${row[pk]}: its ciphertext opens under neither --old-key nor the current tenant key. Re-run with the key that sealed it.`
+            );
           }
         }
         if (!dekAvailable) {
@@ -551,7 +558,7 @@ const rotateEncryptionKey = {
             if (!col) return false;
             const value = row[col];
             if (value === null || value === void 0) return false;
-            return rotate ? isEncryptedPayload(value) : !isEncryptedPayload(value);
+            return rotate ? isEncryptedPayloadShape(value) : !isEncryptedPayloadShape(value);
           });
           if (wouldChange) updated += 1;
           continue;
@@ -570,7 +577,7 @@ const rotateEncryptionKey = {
           if (!col) continue;
           const nextValue = encrypted[rule.field];
           if (nextValue !== void 0 && nextValue !== row[col]) {
-            if (!rotate && isEncryptedPayload(row[col])) continue;
+            if (!rotate && isEncryptedPayloadShape(row[col])) continue;
             updates[col] = formatValueForColumn(resolved?.prop, nextValue);
           }
           if (rule.hashField) {
@@ -615,6 +622,19 @@ const rotateEncryptionKey = {
     } else {
       console.log("All mapped entity fields already encrypted for the selected scope.");
     }
+    if (unrecoverableRows.length) {
+      const maxListed = 20;
+      console.log(
+        `
+\u26A0\uFE0F  ${unrecoverableRows.length} field(s) could not be rotated \u2014 their ciphertext opens under neither --old-key nor the current tenant key, so they were left untouched. See "Key management" in apps/docs/docs/architecture/data-encryption.mdx for how to resolve these manually.`
+      );
+      for (const row of unrecoverableRows.slice(0, maxListed)) {
+        console.log(`  - ${row.entityId}.${row.field} row=${String(row.rowId)}`);
+      }
+      if (unrecoverableRows.length > maxListed) {
+        console.log(`  ... and ${unrecoverableRows.length - maxListed} more`);
+      }
+    }
   }
 };
 const decryptDatabase = {
@@ -1044,8 +1064,9 @@ const backfillSystemEncryption = {
             const resolved = resolveProperty(meta, rule.field);
             if (!resolved.columnName) continue;
             const rawValue = row[resolved.columnName];
+            if (rawValue !== null && rawValue !== void 0 && isEncryptedPayloadShape(rawValue)) continue;
             payload[rule.field] = rawValue;
-            if (rawValue !== null && rawValue !== void 0 && !isEncryptedPayload(rawValue)) hasPlaintext = true;
+            if (rawValue !== null && rawValue !== void 0) hasPlaintext = true;
             if (rule.hashField) {
               const resolvedHash = resolveProperty(meta, rule.hashField);
               if (resolvedHash.columnName) payload[rule.hashField] = row[resolvedHash.columnName];