@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/forms/commands/invitation.js

@@ -0,0 +1,333 @@
+import { registerCommand } from "@open-mercato/shared/lib/commands";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { FormDistribution, FormInvitation } from "../data/entities.js";
+import {
+  invitationCreateCommandSchema,
+  invitationRevokeCommandSchema,
+  invitationSendCommandSchema
+} from "../data/validators.js";
+import {
+  generateRawInvitationToken,
+  getInvitationTokenTtlSeconds,
+  hashInvitationToken
+} from "../services/distribution-token.js";
+import { enqueueInvitationEmail } from "../subscribers/invitation-email.js";
+import {
+  emitForms,
+  ensureOrganizationScope,
+  ensureTenantScope,
+  extractUndoPayload,
+  invalidateFormsCacheTags,
+  resolveActorUserId,
+  resolveEntityManager
+} from "./shared.js";
+import { DISTRIBUTION_CACHE_TAGS } from "./distribution.js";
+const FORM_INVITATION_RESOURCE_KIND = "forms.invitation";
+function resolveAppUrl() {
+  const raw = process.env.APP_URL?.trim();
+  if (!raw) return null;
+  return raw.replace(/\/$/, "");
+}
+function buildPersonalLink(rawToken) {
+  const base = resolveAppUrl();
+  if (!base) return null;
+  return `${base}/i/${rawToken}`;
+}
+async function findDistributionInScope(em, distributionId, tenantId, organizationId) {
+  const distribution = await em.findOne(FormDistribution, {
+    id: distributionId,
+    tenantId,
+    organizationId,
+    deletedAt: null
+  });
+  if (!distribution) {
+    throw new CrudHttpError(404, { error: "forms.errors.distribution_not_found" });
+  }
+  return distribution;
+}
+async function findInvitationInScope(em, invitationId, tenantId, organizationId) {
+  const invitation = await findOneWithDecryption(
+    em,
+    FormInvitation,
+    { id: invitationId, tenantId, organizationId, deletedAt: null },
+    void 0,
+    { tenantId, organizationId }
+  );
+  if (!invitation) {
+    throw new CrudHttpError(404, { error: "forms.errors.invitation_not_found" });
+  }
+  return invitation;
+}
+const createInvitationCommand = {
+  id: "forms.invitation.create",
+  async execute(rawInput, ctx) {
+    const parsed = invitationCreateCommandSchema.parse(rawInput);
+    ensureTenantScope(ctx, parsed.tenantId);
+    ensureOrganizationScope(ctx, parsed.organizationId);
+    const actorUserId = resolveActorUserId(ctx);
+    const em = resolveEntityManager(ctx).fork();
+    const distribution = await findDistributionInScope(
+      em,
+      parsed.distributionId,
+      parsed.tenantId,
+      parsed.organizationId
+    );
+    const isPersonal = distribution.mode === "personal";
+    const now = /* @__PURE__ */ new Date();
+    const ttlSeconds = getInvitationTokenTtlSeconds();
+    const created = [];
+    for (const recipient of parsed.recipients) {
+      const rawToken = isPersonal ? generateRawInvitationToken() : null;
+      const expiresAt = recipient.expiresAt ? new Date(recipient.expiresAt) : isPersonal ? new Date(now.getTime() + ttlSeconds * 1e3) : null;
+      const invitation = em.create(FormInvitation, {
+        distributionId: distribution.id,
+        organizationId: parsed.organizationId,
+        tenantId: parsed.tenantId,
+        recipientEmail: recipient.email?.trim() ?? null,
+        recipientName: recipient.name?.trim() ?? null,
+        recipientRef: recipient.ref?.trim() ?? null,
+        role: recipient.role ?? null,
+        tokenHash: rawToken ? hashInvitationToken(rawToken) : null,
+        status: "pending",
+        submissionId: null,
+        locale: recipient.locale ?? null,
+        expiresAt,
+        sentAt: null,
+        openedAt: null,
+        startedAt: null,
+        submittedAt: null,
+        sendCount: 0,
+        lastError: null,
+        createdBy: actorUserId,
+        createdAt: now,
+        updatedAt: now
+      });
+      em.persist(invitation);
+      created.push({ invitation, rawToken });
+    }
+    await em.flush();
+    for (const entry of created) {
+      await emitForms("forms.invitation.created", {
+        invitationId: entry.invitation.id,
+        distributionId: distribution.id
+      });
+    }
+    for (const entry of created) {
+      const email = entry.invitation.recipientEmail?.trim();
+      if (!email || !entry.rawToken) continue;
+      const link = buildPersonalLink(entry.rawToken);
+      const delivered = await enqueueInvitationEmail({
+        em,
+        invitation: entry.invitation,
+        recipientEmail: email,
+        link
+      });
+      if (delivered) {
+        entry.invitation.status = "sent";
+        entry.invitation.sentAt = /* @__PURE__ */ new Date();
+        entry.invitation.sendCount += 1;
+        await em.flush();
+        await emitForms("forms.invitation.sent", {
+          invitationId: entry.invitation.id,
+          distributionId: distribution.id
+        });
+      }
+    }
+    await invalidateFormsCacheTags(ctx, [
+      DISTRIBUTION_CACHE_TAGS.distribution(distribution.id)
+    ]);
+    return {
+      invitations: created.map((entry) => ({ id: entry.invitation.id, rawToken: entry.rawToken }))
+    };
+  },
+  buildLog: async ({ input, result }) => {
+    const { translate } = await resolveTranslations();
+    return {
+      actionLabel: translate("forms.audit.invitation.create", "Create invitation"),
+      resourceKind: FORM_INVITATION_RESOURCE_KIND,
+      resourceId: input.distributionId,
+      tenantId: input.tenantId,
+      organizationId: input.organizationId,
+      payload: { undo: { invitationIds: result.invitations.map((entry) => entry.id) } }
+    };
+  },
+  undo: async ({ logEntry, ctx }) => {
+    const payload = extractUndoPayload(logEntry);
+    const ids = payload?.invitationIds;
+    if (!ids || ids.length === 0) return;
+    const em = resolveEntityManager(ctx).fork();
+    const invitations = await em.find(FormInvitation, { id: { $in: ids } });
+    for (const invitation of invitations) {
+      em.remove(invitation);
+    }
+    await em.flush();
+  }
+};
+const sendInvitationCommand = {
+  id: "forms.invitation.send",
+  async prepare(rawInput, ctx) {
+    const parsed = invitationSendCommandSchema.parse(rawInput);
+    const em = resolveEntityManager(ctx);
+    const invitation = await em.findOne(FormInvitation, {
+      id: parsed.invitationId,
+      tenantId: parsed.tenantId,
+      organizationId: parsed.organizationId,
+      deletedAt: null
+    });
+    if (!invitation) return {};
+    return {
+      before: {
+        id: invitation.id,
+        organizationId: invitation.organizationId,
+        tenantId: invitation.tenantId,
+        status: invitation.status,
+        sentAt: invitation.sentAt ? invitation.sentAt.toISOString() : null,
+        sendCount: invitation.sendCount
+      }
+    };
+  },
+  async execute(rawInput, ctx) {
+    const parsed = invitationSendCommandSchema.parse(rawInput);
+    ensureTenantScope(ctx, parsed.tenantId);
+    ensureOrganizationScope(ctx, parsed.organizationId);
+    const em = resolveEntityManager(ctx).fork();
+    const invitation = await findInvitationInScope(
+      em,
+      parsed.invitationId,
+      parsed.tenantId,
+      parsed.organizationId
+    );
+    if (invitation.status === "revoked") {
+      throw new CrudHttpError(409, { error: "forms.errors.invitation_revoked" });
+    }
+    if (invitation.status === "submitted") {
+      throw new CrudHttpError(409, { error: "forms.errors.invitation_submitted" });
+    }
+    const recipientEmail = invitation.recipientEmail?.trim();
+    if (!recipientEmail) {
+      throw new CrudHttpError(422, { error: "forms.errors.invitation_no_email" });
+    }
+    if (invitation.status === "pending" || invitation.status === "opened") {
+      invitation.status = "sent";
+    }
+    invitation.sentAt = /* @__PURE__ */ new Date();
+    invitation.sendCount += 1;
+    invitation.updatedAt = /* @__PURE__ */ new Date();
+    await em.flush();
+    await emitForms("forms.invitation.sent", {
+      invitationId: invitation.id,
+      distributionId: invitation.distributionId
+    });
+    await invalidateFormsCacheTags(ctx, [
+      DISTRIBUTION_CACHE_TAGS.distribution(invitation.distributionId)
+    ]);
+    return { invitationId: invitation.id };
+  },
+  buildLog: async ({ result, snapshots }) => {
+    const { translate } = await resolveTranslations();
+    const before = snapshots.before;
+    return {
+      actionLabel: translate("forms.audit.invitation.send", "Send invitation"),
+      resourceKind: FORM_INVITATION_RESOURCE_KIND,
+      resourceId: result.invitationId,
+      tenantId: before?.tenantId ?? null,
+      organizationId: before?.organizationId ?? null,
+      payload: { undo: { before: before ?? null } }
+    };
+  },
+  undo: async ({ logEntry, ctx }) => {
+    const payload = extractUndoPayload(logEntry);
+    const before = payload?.before;
+    if (!before) return;
+    const em = resolveEntityManager(ctx).fork();
+    const invitation = await em.findOne(FormInvitation, { id: before.id });
+    if (!invitation) return;
+    invitation.status = before.status;
+    invitation.sentAt = before.sentAt ? new Date(before.sentAt) : null;
+    invitation.sendCount = before.sendCount;
+    invitation.updatedAt = /* @__PURE__ */ new Date();
+    await em.flush();
+  }
+};
+const revokeInvitationCommand = {
+  id: "forms.invitation.revoke",
+  async prepare(rawInput, ctx) {
+    const parsed = invitationRevokeCommandSchema.parse(rawInput);
+    const em = resolveEntityManager(ctx);
+    const invitation = await em.findOne(FormInvitation, {
+      id: parsed.invitationId,
+      tenantId: parsed.tenantId,
+      organizationId: parsed.organizationId,
+      deletedAt: null
+    });
+    if (!invitation) return {};
+    return {
+      before: {
+        id: invitation.id,
+        organizationId: invitation.organizationId,
+        tenantId: invitation.tenantId,
+        status: invitation.status
+      }
+    };
+  },
+  async execute(rawInput, ctx) {
+    const parsed = invitationRevokeCommandSchema.parse(rawInput);
+    ensureTenantScope(ctx, parsed.tenantId);
+    ensureOrganizationScope(ctx, parsed.organizationId);
+    const em = resolveEntityManager(ctx).fork();
+    const invitation = await em.findOne(FormInvitation, {
+      id: parsed.invitationId,
+      tenantId: parsed.tenantId,
+      organizationId: parsed.organizationId,
+      deletedAt: null
+    });
+    if (!invitation) {
+      throw new CrudHttpError(404, { error: "forms.errors.invitation_not_found" });
+    }
+    if (invitation.status !== "revoked") {
+      invitation.status = "revoked";
+      invitation.updatedAt = /* @__PURE__ */ new Date();
+      await em.flush();
+      await emitForms("forms.invitation.revoked", { invitationId: invitation.id });
+      await invalidateFormsCacheTags(ctx, [
+        DISTRIBUTION_CACHE_TAGS.distribution(invitation.distributionId)
+      ]);
+    }
+    return { invitationId: invitation.id };
+  },
+  buildLog: async ({ result, snapshots }) => {
+    const { translate } = await resolveTranslations();
+    const before = snapshots.before;
+    return {
+      actionLabel: translate("forms.audit.invitation.revoke", "Revoke invitation"),
+      resourceKind: FORM_INVITATION_RESOURCE_KIND,
+      resourceId: result.invitationId,
+      tenantId: before?.tenantId ?? null,
+      organizationId: before?.organizationId ?? null,
+      payload: { undo: { before: before ?? null } }
+    };
+  },
+  undo: async ({ logEntry, ctx }) => {
+    const payload = extractUndoPayload(logEntry);
+    const before = payload?.before;
+    if (!before) return;
+    const em = resolveEntityManager(ctx).fork();
+    const invitation = await em.findOne(FormInvitation, { id: before.id });
+    if (!invitation) return;
+    invitation.status = before.status;
+    invitation.updatedAt = /* @__PURE__ */ new Date();
+    await em.flush();
+  }
+};
+registerCommand(createInvitationCommand);
+registerCommand(sendInvitationCommand);
+registerCommand(revokeInvitationCommand);
+export {
+  FORM_INVITATION_RESOURCE_KIND,
+  createInvitationCommand,
+  revokeInvitationCommand,
+  sendInvitationCommand
+};
+//# sourceMappingURL=invitation.js.map

package/dist/modules/forms/commands/invitation.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/forms/commands/invitation.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { FormDistribution, FormInvitation } from '../data/entities'\nimport {\n  invitationCreateCommandSchema,\n  invitationRevokeCommandSchema,\n  invitationSendCommandSchema,\n  type FormInvitationCreateCommandInput,\n  type FormInvitationRevokeCommandInput,\n  type FormInvitationSendCommandInput,\n} from '../data/validators'\nimport {\n  generateRawInvitationToken,\n  getInvitationTokenTtlSeconds,\n  hashInvitationToken,\n} from '../services/distribution-token'\nimport { enqueueInvitationEmail } from '../subscribers/invitation-email'\nimport {\n  emitForms,\n  ensureOrganizationScope,\n  ensureTenantScope,\n  extractUndoPayload,\n  invalidateFormsCacheTags,\n  resolveActorUserId,\n  resolveEntityManager,\n} from './shared'\nimport { DISTRIBUTION_CACHE_TAGS } from './distribution'\n\nexport const FORM_INVITATION_RESOURCE_KIND = 'forms.invitation'\n\n// ----------------------------------------------------------------------------\n// Snapshots + undo payloads\n// ----------------------------------------------------------------------------\n\ntype FormInvitationSendSnapshot = {\n  id: string\n  organizationId: string\n  tenantId: string\n  status: FormInvitation['status']\n  sentAt: string | null\n  sendCount: number\n}\n\ntype FormInvitationStatusSnapshot = {\n  id: string\n  organizationId: string\n  tenantId: string\n  status: FormInvitation['status']\n}\n\ntype FormInvitationSendUndoPayload = {\n  before?: FormInvitationSendSnapshot | null\n}\n\ntype FormInvitationRevokeUndoPayload = {\n  before?: FormInvitationStatusSnapshot | null\n}\n\n// ----------------------------------------------------------------------------\n// Helpers\n// ----------------------------------------------------------------------------\n\nfunction resolveAppUrl(): string | null {\n  const raw = process.env.APP_URL?.trim()\n  if (!raw) return null\n  return raw.replace(/\\/$/, '')\n}\n\nfunction buildPersonalLink(rawToken: string): string | null {\n  const base = resolveAppUrl()\n  if (!base) return null\n  return `${base}/i/${rawToken}`\n}\n\nasync function findDistributionInScope(\n  em: EntityManager,\n  distributionId: string,\n  tenantId: string,\n  organizationId: string,\n): Promise<FormDistribution> {\n  const distribution = await em.findOne(FormDistribution, {\n    id: distributionId,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n  if (!distribution) {\n    throw new CrudHttpError(404, { error: 'forms.errors.distribution_not_found' })\n  }\n  return distribution\n}\n\nasync function findInvitationInScope(\n  em: EntityManager,\n  invitationId: string,\n  tenantId: string,\n  organizationId: string,\n): Promise<FormInvitation> {\n  const invitation = await findOneWithDecryption(\n    em,\n    FormInvitation,\n    { id: invitationId, tenantId, organizationId, deletedAt: null },\n    undefined,\n    { tenantId, organizationId },\n  )\n  if (!invitation) {\n    throw new CrudHttpError(404, { error: 'forms.errors.invitation_not_found' })\n  }\n  return invitation\n}\n\n// ----------------------------------------------------------------------------\n// forms.invitation.create \u2014 bulk\n// ----------------------------------------------------------------------------\n\ntype InvitationCreateResult = {\n  invitations: Array<{ id: string; rawToken: string | null }>\n}\n\nconst createInvitationCommand: CommandHandler<FormInvitationCreateCommandInput, InvitationCreateResult> = {\n  id: 'forms.invitation.create',\n  async execute(rawInput, ctx) {\n    const parsed = invitationCreateCommandSchema.parse(rawInput)\n    ensureTenantScope(ctx, parsed.tenantId)\n    ensureOrganizationScope(ctx, parsed.organizationId)\n\n    const actorUserId = resolveActorUserId(ctx)\n    const em = resolveEntityManager(ctx).fork()\n    const distribution = await findDistributionInScope(\n      em,\n      parsed.distributionId,\n      parsed.tenantId,\n      parsed.organizationId,\n    )\n\n    const isPersonal = distribution.mode === 'personal'\n    const now = new Date()\n    const ttlSeconds = getInvitationTokenTtlSeconds()\n\n    const created: Array<{ invitation: FormInvitation; rawToken: string | null }> = []\n    for (const recipient of parsed.recipients) {\n      const rawToken = isPersonal ? generateRawInvitationToken() : null\n      const expiresAt = recipient.expiresAt\n        ? new Date(recipient.expiresAt)\n        : isPersonal\n          ? new Date(now.getTime() + ttlSeconds * 1000)\n          : null\n      const invitation = em.create(FormInvitation, {\n        distributionId: distribution.id,\n        organizationId: parsed.organizationId,\n        tenantId: parsed.tenantId,\n        recipientEmail: recipient.email?.trim() ?? null,\n        recipientName: recipient.name?.trim() ?? null,\n        recipientRef: recipient.ref?.trim() ?? null,\n        role: recipient.role ?? null,\n        tokenHash: rawToken ? hashInvitationToken(rawToken) : null,\n        status: 'pending',\n        submissionId: null,\n        locale: recipient.locale ?? null,\n        expiresAt,\n        sentAt: null,\n        openedAt: null,\n        startedAt: null,\n        submittedAt: null,\n        sendCount: 0,\n        lastError: null,\n        createdBy: actorUserId,\n        createdAt: now,\n        updatedAt: now,\n      } as never)\n      em.persist(invitation)\n      created.push({ invitation, rawToken })\n    }\n\n    await em.flush()\n\n    for (const entry of created) {\n      await emitForms('forms.invitation.created', {\n        invitationId: entry.invitation.id,\n        distributionId: distribution.id,\n      })\n    }\n\n    // Inline best-effort personal-link email for recipients that supplied an\n    // email. This is the only point where the raw token is available; the\n    // subscriber resend path cannot rebuild the link.\n    for (const entry of created) {\n      const email = entry.invitation.recipientEmail?.trim()\n      if (!email || !entry.rawToken) continue\n      const link = buildPersonalLink(entry.rawToken)\n      const delivered = await enqueueInvitationEmail({\n        em,\n        invitation: entry.invitation,\n        recipientEmail: email,\n        link,\n      })\n      if (delivered) {\n        entry.invitation.status = 'sent'\n        entry.invitation.sentAt = new Date()\n        entry.invitation.sendCount += 1\n        await em.flush()\n        await emitForms('forms.invitation.sent', {\n          invitationId: entry.invitation.id,\n          distributionId: distribution.id,\n        })\n      }\n    }\n\n    await invalidateFormsCacheTags(ctx, [\n      DISTRIBUTION_CACHE_TAGS.distribution(distribution.id),\n    ])\n\n    return {\n      invitations: created.map((entry) => ({ id: entry.invitation.id, rawToken: entry.rawToken })),\n    }\n  },\n  buildLog: async ({ input, result }) => {\n    const { translate } = await resolveTranslations()\n    return {\n      actionLabel: translate('forms.audit.invitation.create', 'Create invitation'),\n      resourceKind: FORM_INVITATION_RESOURCE_KIND,\n      resourceId: input.distributionId,\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n      payload: { undo: { invitationIds: result.invitations.map((entry) => entry.id) } },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<{ invitationIds?: string[] }>(logEntry)\n    const ids = payload?.invitationIds\n    if (!ids || ids.length === 0) return\n    const em = resolveEntityManager(ctx).fork()\n    const invitations = await em.find(FormInvitation, { id: { $in: ids } })\n    for (const invitation of invitations) {\n      em.remove(invitation)\n    }\n    await em.flush()\n  },\n}\n\n// ----------------------------------------------------------------------------\n// forms.invitation.send \u2014 also the resend path\n// ----------------------------------------------------------------------------\n\nconst sendInvitationCommand: CommandHandler<FormInvitationSendCommandInput, { invitationId: string }> = {\n  id: 'forms.invitation.send',\n  async prepare(rawInput, ctx) {\n    const parsed = invitationSendCommandSchema.parse(rawInput)\n    const em = resolveEntityManager(ctx)\n    const invitation = await em.findOne(FormInvitation, {\n      id: parsed.invitationId,\n      tenantId: parsed.tenantId,\n      organizationId: parsed.organizationId,\n      deletedAt: null,\n    })\n    if (!invitation) return {}\n    return {\n      before: {\n        id: invitation.id,\n        organizationId: invitation.organizationId,\n        tenantId: invitation.tenantId,\n        status: invitation.status,\n        sentAt: invitation.sentAt ? invitation.sentAt.toISOString() : null,\n        sendCount: invitation.sendCount,\n      } satisfies FormInvitationSendSnapshot,\n    }\n  },\n  async execute(rawInput, ctx) {\n    const parsed = invitationSendCommandSchema.parse(rawInput)\n    ensureTenantScope(ctx, parsed.tenantId)\n    ensureOrganizationScope(ctx, parsed.organizationId)\n\n    const em = resolveEntityManager(ctx).fork()\n    const invitation = await findInvitationInScope(\n      em,\n      parsed.invitationId,\n      parsed.tenantId,\n      parsed.organizationId,\n    )\n\n    if (invitation.status === 'revoked') {\n      throw new CrudHttpError(409, { error: 'forms.errors.invitation_revoked' })\n    }\n    if (invitation.status === 'submitted') {\n      throw new CrudHttpError(409, { error: 'forms.errors.invitation_submitted' })\n    }\n    const recipientEmail = invitation.recipientEmail?.trim()\n    if (!recipientEmail) {\n      throw new CrudHttpError(422, { error: 'forms.errors.invitation_no_email' })\n    }\n\n    if (invitation.status === 'pending' || invitation.status === 'opened') {\n      invitation.status = 'sent'\n    }\n    invitation.sentAt = new Date()\n    invitation.sendCount += 1\n    invitation.updatedAt = new Date()\n    await em.flush()\n\n    await emitForms('forms.invitation.sent', {\n      invitationId: invitation.id,\n      distributionId: invitation.distributionId,\n    })\n\n    await invalidateFormsCacheTags(ctx, [\n      DISTRIBUTION_CACHE_TAGS.distribution(invitation.distributionId),\n    ])\n\n    return { invitationId: invitation.id }\n  },\n  buildLog: async ({ result, snapshots }) => {\n    const { translate } = await resolveTranslations()\n    const before = snapshots.before as FormInvitationSendSnapshot | undefined\n    return {\n      actionLabel: translate('forms.audit.invitation.send', 'Send invitation'),\n      resourceKind: FORM_INVITATION_RESOURCE_KIND,\n      resourceId: result.invitationId,\n      tenantId: before?.tenantId ?? null,\n      organizationId: before?.organizationId ?? null,\n      payload: { undo: { before: before ?? null } satisfies FormInvitationSendUndoPayload },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<FormInvitationSendUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = resolveEntityManager(ctx).fork()\n    const invitation = await em.findOne(FormInvitation, { id: before.id })\n    if (!invitation) return\n    invitation.status = before.status\n    invitation.sentAt = before.sentAt ? new Date(before.sentAt) : null\n    invitation.sendCount = before.sendCount\n    invitation.updatedAt = new Date()\n    await em.flush()\n  },\n}\n\n// ----------------------------------------------------------------------------\n// forms.invitation.revoke \u2014 soft revoke (row retained, status only)\n// ----------------------------------------------------------------------------\n\nconst revokeInvitationCommand: CommandHandler<FormInvitationRevokeCommandInput, { invitationId: string }> = {\n  id: 'forms.invitation.revoke',\n  async prepare(rawInput, ctx) {\n    const parsed = invitationRevokeCommandSchema.parse(rawInput)\n    const em = resolveEntityManager(ctx)\n    const invitation = await em.findOne(FormInvitation, {\n      id: parsed.invitationId,\n      tenantId: parsed.tenantId,\n      organizationId: parsed.organizationId,\n      deletedAt: null,\n    })\n    if (!invitation) return {}\n    return {\n      before: {\n        id: invitation.id,\n        organizationId: invitation.organizationId,\n        tenantId: invitation.tenantId,\n        status: invitation.status,\n      } satisfies FormInvitationStatusSnapshot,\n    }\n  },\n  async execute(rawInput, ctx) {\n    const parsed = invitationRevokeCommandSchema.parse(rawInput)\n    ensureTenantScope(ctx, parsed.tenantId)\n    ensureOrganizationScope(ctx, parsed.organizationId)\n\n    const em = resolveEntityManager(ctx).fork()\n    const invitation = await em.findOne(FormInvitation, {\n      id: parsed.invitationId,\n      tenantId: parsed.tenantId,\n      organizationId: parsed.organizationId,\n      deletedAt: null,\n    })\n    if (!invitation) {\n      throw new CrudHttpError(404, { error: 'forms.errors.invitation_not_found' })\n    }\n\n    if (invitation.status !== 'revoked') {\n      invitation.status = 'revoked'\n      invitation.updatedAt = new Date()\n      await em.flush()\n      await emitForms('forms.invitation.revoked', { invitationId: invitation.id })\n      await invalidateFormsCacheTags(ctx, [\n        DISTRIBUTION_CACHE_TAGS.distribution(invitation.distributionId),\n      ])\n    }\n\n    return { invitationId: invitation.id }\n  },\n  buildLog: async ({ result, snapshots }) => {\n    const { translate } = await resolveTranslations()\n    const before = snapshots.before as FormInvitationStatusSnapshot | undefined\n    return {\n      actionLabel: translate('forms.audit.invitation.revoke', 'Revoke invitation'),\n      resourceKind: FORM_INVITATION_RESOURCE_KIND,\n      resourceId: result.invitationId,\n      tenantId: before?.tenantId ?? null,\n      organizationId: before?.organizationId ?? null,\n      payload: { undo: { before: before ?? null } satisfies FormInvitationRevokeUndoPayload },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<FormInvitationRevokeUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = resolveEntityManager(ctx).fork()\n    const invitation = await em.findOne(FormInvitation, { id: before.id })\n    if (!invitation) return\n    invitation.status = before.status\n    invitation.updatedAt = new Date()\n    await em.flush()\n  },\n}\n\nregisterCommand(createInvitationCommand)\nregisterCommand(sendInvitationCommand)\nregisterCommand(revokeInvitationCommand)\n\nexport {\n  createInvitationCommand,\n  sendInvitationCommand,\n  revokeInvitationCommand,\n}\n"],
+  "mappings": "AACA,SAAS,uBAAuB;AAChC,SAAS,2BAA2B;AAEpC,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,kBAAkB,sBAAsB;AACjD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AAEjC,MAAM,gCAAgC;AAkC7C,SAAS,gBAA+B;AACtC,QAAM,MAAM,QAAQ,IAAI,SAAS,KAAK;AACtC,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEA,SAAS,kBAAkB,UAAiC;AAC1D,QAAM,OAAO,cAAc;AAC3B,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,GAAG,IAAI,MAAM,QAAQ;AAC9B;AAEA,eAAe,wBACb,IACA,gBACA,UACA,gBAC2B;AAC3B,QAAM,eAAe,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACtD,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,EAC/E;AACA,SAAO;AACT;AAEA,eAAe,sBACb,IACA,cACA,UACA,gBACyB;AACzB,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,cAAc,UAAU,gBAAgB,WAAW,KAAK;AAAA,IAC9D;AAAA,IACA,EAAE,UAAU,eAAe;AAAA,EAC7B;AACA,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,EAC7E;AACA,SAAO;AACT;AAUA,MAAM,0BAAoG;AAAA,EACxG,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,8BAA8B,MAAM,QAAQ;AAC3D,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAElD,UAAM,cAAc,mBAAmB,GAAG;AAC1C,UAAM,KAAK,qBAAqB,GAAG,EAAE,KAAK;AAC1C,UAAM,eAAe,MAAM;AAAA,MACzB;AAAA,MACA,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAEA,UAAM,aAAa,aAAa,SAAS;AACzC,UAAM,MAAM,oBAAI,KAAK;AACrB,UAAM,aAAa,6BAA6B;AAEhD,UAAM,UAA0E,CAAC;AACjF,eAAW,aAAa,OAAO,YAAY;AACzC,YAAM,WAAW,aAAa,2BAA2B,IAAI;AAC7D,YAAM,YAAY,UAAU,YACxB,IAAI,KAAK,UAAU,SAAS,IAC5B,aACE,IAAI,KAAK,IAAI,QAAQ,IAAI,aAAa,GAAI,IAC1C;AACN,YAAM,aAAa,GAAG,OAAO,gBAAgB;AAAA,QAC3C,gBAAgB,aAAa;AAAA,QAC7B,gBAAgB,OAAO;AAAA,QACvB,UAAU,OAAO;AAAA,QACjB,gBAAgB,UAAU,OAAO,KAAK,KAAK;AAAA,QAC3C,eAAe,UAAU,MAAM,KAAK,KAAK;AAAA,QACzC,cAAc,UAAU,KAAK,KAAK,KAAK;AAAA,QACvC,MAAM,UAAU,QAAQ;AAAA,QACxB,WAAW,WAAW,oBAAoB,QAAQ,IAAI;AAAA,QACtD,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,QAAQ,UAAU,UAAU;AAAA,QAC5B;AAAA,QACA,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,WAAW;AAAA,QACX,aAAa;AAAA,QACb,WAAW;AAAA,QACX,WAAW;AAAA,QACX,WAAW;AAAA,QACX,WAAW;AAAA,QACX,WAAW;AAAA,MACb,CAAU;AACV,SAAG,QAAQ,UAAU;AACrB,cAAQ,KAAK,EAAE,YAAY,SAAS,CAAC;AAAA,IACvC;AAEA,UAAM,GAAG,MAAM;AAEf,eAAW,SAAS,SAAS;AAC3B,YAAM,UAAU,4BAA4B;AAAA,QAC1C,cAAc,MAAM,WAAW;AAAA,QAC/B,gBAAgB,aAAa;AAAA,MAC/B,CAAC;AAAA,IACH;AAKA,eAAW,SAAS,SAAS;AAC3B,YAAM,QAAQ,MAAM,WAAW,gBAAgB,KAAK;AACpD,UAAI,CAAC,SAAS,CAAC,MAAM,SAAU;AAC/B,YAAM,OAAO,kBAAkB,MAAM,QAAQ;AAC7C,YAAM,YAAY,MAAM,uBAAuB;AAAA,QAC7C;AAAA,QACA,YAAY,MAAM;AAAA,QAClB,gBAAgB;AAAA,QAChB;AAAA,MACF,CAAC;AACD,UAAI,WAAW;AACb,cAAM,WAAW,SAAS;AAC1B,cAAM,WAAW,SAAS,oBAAI,KAAK;AACnC,cAAM,WAAW,aAAa;AAC9B,cAAM,GAAG,MAAM;AACf,cAAM,UAAU,yBAAyB;AAAA,UACvC,cAAc,MAAM,WAAW;AAAA,UAC/B,gBAAgB,aAAa;AAAA,QAC/B,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,yBAAyB,KAAK;AAAA,MAClC,wBAAwB,aAAa,aAAa,EAAE;AAAA,IACtD,CAAC;AAED,WAAO;AAAA,MACL,aAAa,QAAQ,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,WAAW,IAAI,UAAU,MAAM,SAAS,EAAE;AAAA,IAC7F;AAAA,EACF;AAAA,EACA,UAAU,OAAO,EAAE,OAAO,OAAO,MAAM;AACrC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,MACL,aAAa,UAAU,iCAAiC,mBAAmB;AAAA,MAC3E,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,SAAS,EAAE,MAAM,EAAE,eAAe,OAAO,YAAY,IAAI,CAAC,UAAU,MAAM,EAAE,EAAE,EAAE;AAAA,IAClF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAiD,QAAQ;AACzE,UAAM,MAAM,SAAS;AACrB,QAAI,CAAC,OAAO,IAAI,WAAW,EAAG;AAC9B,UAAM,KAAK,qBAAqB,GAAG,EAAE,KAAK;AAC1C,UAAM,cAAc,MAAM,GAAG,KAAK,gBAAgB,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;AACtE,eAAW,cAAc,aAAa;AACpC,SAAG,OAAO,UAAU;AAAA,IACtB;AACA,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAMA,MAAM,wBAAkG;AAAA,EACtG,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,4BAA4B,MAAM,QAAQ;AACzD,UAAM,KAAK,qBAAqB,GAAG;AACnC,UAAM,aAAa,MAAM,GAAG,QAAQ,gBAAgB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,WAAY,QAAO,CAAC;AACzB,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,IAAI,WAAW;AAAA,QACf,gBAAgB,WAAW;AAAA,QAC3B,UAAU,WAAW;AAAA,QACrB,QAAQ,WAAW;AAAA,QACnB,QAAQ,WAAW,SAAS,WAAW,OAAO,YAAY,IAAI;AAAA,QAC9D,WAAW,WAAW;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,4BAA4B,MAAM,QAAQ;AACzD,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAElD,UAAM,KAAK,qBAAqB,GAAG,EAAE,KAAK;AAC1C,UAAM,aAAa,MAAM;AAAA,MACvB;AAAA,MACA,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAEA,QAAI,WAAW,WAAW,WAAW;AACnC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,kCAAkC,CAAC;AAAA,IAC3E;AACA,QAAI,WAAW,WAAW,aAAa;AACrC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,IAC7E;AACA,UAAM,iBAAiB,WAAW,gBAAgB,KAAK;AACvD,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,IAC5E;AAEA,QAAI,WAAW,WAAW,aAAa,WAAW,WAAW,UAAU;AACrE,iBAAW,SAAS;AAAA,IACtB;AACA,eAAW,SAAS,oBAAI,KAAK;AAC7B,eAAW,aAAa;AACxB,eAAW,YAAY,oBAAI,KAAK;AAChC,UAAM,GAAG,MAAM;AAEf,UAAM,UAAU,yBAAyB;AAAA,MACvC,cAAc,WAAW;AAAA,MACzB,gBAAgB,WAAW;AAAA,IAC7B,CAAC;AAED,UAAM,yBAAyB,KAAK;AAAA,MAClC,wBAAwB,aAAa,WAAW,cAAc;AAAA,IAChE,CAAC;AAED,WAAO,EAAE,cAAc,WAAW,GAAG;AAAA,EACvC;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,UAAU,MAAM;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,SAAS,UAAU;AACzB,WAAO;AAAA,MACL,aAAa,UAAU,+BAA+B,iBAAiB;AAAA,MACvE,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,QAAQ,YAAY;AAAA,MAC9B,gBAAgB,QAAQ,kBAAkB;AAAA,MAC1C,SAAS,EAAE,MAAM,EAAE,QAAQ,UAAU,KAAK,EAA0C;AAAA,IACtF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAkD,QAAQ;AAC1E,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAK,qBAAqB,GAAG,EAAE,KAAK;AAC1C,UAAM,aAAa,MAAM,GAAG,QAAQ,gBAAgB,EAAE,IAAI,OAAO,GAAG,CAAC;AACrE,QAAI,CAAC,WAAY;AACjB,eAAW,SAAS,OAAO;AAC3B,eAAW,SAAS,OAAO,SAAS,IAAI,KAAK,OAAO,MAAM,IAAI;AAC9D,eAAW,YAAY,OAAO;AAC9B,eAAW,YAAY,oBAAI,KAAK;AAChC,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAMA,MAAM,0BAAsG;AAAA,EAC1G,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,8BAA8B,MAAM,QAAQ;AAC3D,UAAM,KAAK,qBAAqB,GAAG;AACnC,UAAM,aAAa,MAAM,GAAG,QAAQ,gBAAgB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,WAAY,QAAO,CAAC;AACzB,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,IAAI,WAAW;AAAA,QACf,gBAAgB,WAAW;AAAA,QAC3B,UAAU,WAAW;AAAA,QACrB,QAAQ,WAAW;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,8BAA8B,MAAM,QAAQ;AAC3D,sBAAkB,KAAK,OAAO,QAAQ;AACtC,4BAAwB,KAAK,OAAO,cAAc;AAElD,UAAM,KAAK,qBAAqB,GAAG,EAAE,KAAK;AAC1C,UAAM,aAAa,MAAM,GAAG,QAAQ,gBAAgB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,IAC7E;AAEA,QAAI,WAAW,WAAW,WAAW;AACnC,iBAAW,SAAS;AACpB,iBAAW,YAAY,oBAAI,KAAK;AAChC,YAAM,GAAG,MAAM;AACf,YAAM,UAAU,4BAA4B,EAAE,cAAc,WAAW,GAAG,CAAC;AAC3E,YAAM,yBAAyB,KAAK;AAAA,QAClC,wBAAwB,aAAa,WAAW,cAAc;AAAA,MAChE,CAAC;AAAA,IACH;AAEA,WAAO,EAAE,cAAc,WAAW,GAAG;AAAA,EACvC;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,UAAU,MAAM;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,SAAS,UAAU;AACzB,WAAO;AAAA,MACL,aAAa,UAAU,iCAAiC,mBAAmB;AAAA,MAC3E,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,QAAQ,YAAY;AAAA,MAC9B,gBAAgB,QAAQ,kBAAkB;AAAA,MAC1C,SAAS,EAAE,MAAM,EAAE,QAAQ,UAAU,KAAK,EAA4C;AAAA,IACxF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAoD,QAAQ;AAC5E,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAK,qBAAqB,GAAG,EAAE,KAAK;AAC1C,UAAM,aAAa,MAAM,GAAG,QAAQ,gBAAgB,EAAE,IAAI,OAAO,GAAG,CAAC;AACrE,QAAI,CAAC,WAAY;AACjB,eAAW,SAAS,OAAO;AAC3B,eAAW,YAAY,oBAAI,KAAK;AAChC,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,gBAAgB,uBAAuB;AACvC,gBAAgB,qBAAqB;AACrC,gBAAgB,uBAAuB;",
+  "names": []
+}

package/dist/modules/forms/commands/shared.js

@@ -0,0 +1,151 @@
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import {
+  ensureOrganizationScope,
+  ensureSameScope,
+  ensureTenantScope
+} from "@open-mercato/shared/lib/commands/scope";
+import { extractUndoPayload } from "@open-mercato/shared/lib/commands/undo";
+import { Form, FormVersion } from "../data/entities.js";
+import { emitFormsEvent } from "../events.js";
+import { formsEventPayloadSchemas } from "../events-payloads.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("forms").child({ component: "commands" });
+const FORMS_CACHE_TAGS = {
+  formList: (organizationId) => `forms.form.list:${organizationId}`,
+  form: (formId) => `forms.form:${formId}`,
+  formVersion: (versionId) => `forms.form_version:${versionId}`
+};
+const FORM_RESOURCE_KIND = "forms.form";
+const FORM_VERSION_RESOURCE_KIND = "forms.form_version";
+function resolveEntityManager(ctx) {
+  return ctx.container.resolve("em");
+}
+async function findFormInScope(em, id, tenantId, organizationId) {
+  const form = await em.findOne(Form, {
+    id,
+    tenantId,
+    organizationId,
+    deletedAt: null
+  });
+  if (!form) {
+    throw new CrudHttpError(404, { error: "forms.errors.form_not_found" });
+  }
+  return form;
+}
+function resolveFormLocaleUpdate(input) {
+  const nextSupported = input.supportedLocales !== void 0 ? Array.from(new Set(input.supportedLocales)) : [...input.current.supportedLocales];
+  if (nextSupported.length === 0) {
+    throw new CrudHttpError(422, { error: "forms.errors.locales_empty" });
+  }
+  const nextDefault = input.defaultLocale ?? input.current.defaultLocale;
+  if (!nextSupported.includes(nextDefault)) {
+    throw new CrudHttpError(422, { error: "forms.errors.default_locale_unsupported" });
+  }
+  return { defaultLocale: nextDefault, supportedLocales: nextSupported };
+}
+async function findFormVersionInScope(em, id, tenantId, organizationId) {
+  const version = await em.findOne(FormVersion, {
+    id,
+    tenantId,
+    organizationId
+  });
+  if (!version) {
+    throw new CrudHttpError(404, { error: "forms.errors.version_not_found" });
+  }
+  return version;
+}
+async function emitForms(eventId, payload) {
+  const schema = formsEventPayloadSchemas[eventId];
+  const validated = schema ? schema.parse(payload) : payload;
+  await emitFormsEvent(eventId, validated);
+}
+async function invalidateFormsCacheTags(ctx, tags) {
+  if (!tags.length) return;
+  if (typeof ctx.container.hasRegistration === "function" && !ctx.container.hasRegistration("cacheService")) {
+    return;
+  }
+  try {
+    const cacheService = ctx.container.resolve("cacheService");
+    if (!cacheService || typeof cacheService.deleteByTags !== "function") return;
+    await cacheService.deleteByTags(tags);
+  } catch (error) {
+    if (process.env.NODE_ENV !== "test") {
+      logger.warn("cache invalidation failed", {
+        tags,
+        err: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
+}
+const UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/;
+function resolveActorUserId(ctx) {
+  const auth = ctx.auth;
+  if (!auth) return null;
+  if (auth.isApiKey) return null;
+  const sub = typeof auth.sub === "string" ? auth.sub.trim() : "";
+  if (!sub || !UUID_REGEX.test(sub)) return null;
+  return sub;
+}
+function serializeFormSnapshot(form) {
+  return {
+    id: form.id,
+    organizationId: form.organizationId,
+    tenantId: form.tenantId,
+    key: form.key,
+    name: form.name,
+    description: form.description ?? null,
+    status: form.status,
+    currentPublishedVersionId: form.currentPublishedVersionId ?? null,
+    defaultLocale: form.defaultLocale,
+    supportedLocales: [...form.supportedLocales],
+    retentionDays: form.retentionDays ?? null,
+    createdBy: form.createdBy,
+    archivedAt: form.archivedAt ? form.archivedAt.toISOString() : null,
+    createdAt: form.createdAt.toISOString(),
+    updatedAt: form.updatedAt.toISOString()
+  };
+}
+function serializeFormVersionSnapshot(version) {
+  return {
+    id: version.id,
+    formId: version.formId,
+    organizationId: version.organizationId,
+    tenantId: version.tenantId,
+    versionNumber: version.versionNumber,
+    status: version.status,
+    schema: cloneJson(version.schema),
+    uiSchema: cloneJson(version.uiSchema),
+    roles: [...version.roles],
+    schemaHash: version.schemaHash,
+    registryVersion: version.registryVersion,
+    publishedAt: version.publishedAt ? version.publishedAt.toISOString() : null,
+    publishedBy: version.publishedBy ?? null,
+    changelog: version.changelog ?? null,
+    archivedAt: version.archivedAt ? version.archivedAt.toISOString() : null,
+    createdAt: version.createdAt.toISOString(),
+    updatedAt: version.updatedAt.toISOString()
+  };
+}
+function cloneJson(value) {
+  if (!value || typeof value !== "object") return {};
+  return JSON.parse(JSON.stringify(value));
+}
+export {
+  FORMS_CACHE_TAGS,
+  FORM_RESOURCE_KIND,
+  FORM_VERSION_RESOURCE_KIND,
+  emitForms,
+  ensureOrganizationScope,
+  ensureSameScope,
+  ensureTenantScope,
+  extractUndoPayload,
+  findFormInScope,
+  findFormVersionInScope,
+  invalidateFormsCacheTags,
+  resolveActorUserId,
+  resolveEntityManager,
+  resolveFormLocaleUpdate,
+  serializeFormSnapshot,
+  serializeFormVersionSnapshot
+};
+//# sourceMappingURL=shared.js.map

package/dist/modules/forms/commands/shared.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/forms/commands/shared.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  ensureOrganizationScope,\n  ensureSameScope,\n  ensureTenantScope,\n} from '@open-mercato/shared/lib/commands/scope'\nimport { extractUndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { Form, FormVersion } from '../data/entities'\nimport type { FormsEventId } from '../events'\nimport { emitFormsEvent } from '../events'\nimport { formsEventPayloadSchemas } from '../events-payloads'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('forms').child({ component: 'commands' })\n\nexport { ensureOrganizationScope, ensureSameScope, ensureTenantScope }\nexport { extractUndoPayload }\n\n/**\n * Cache tag prefixes \u2014 declared in the phase 1b spec \u00A7 Caching. Mutations\n * should `cacheService.deleteByTags([...])` after every state change.\n */\nexport const FORMS_CACHE_TAGS = {\n  formList: (organizationId: string) => `forms.form.list:${organizationId}`,\n  form: (formId: string) => `forms.form:${formId}`,\n  formVersion: (versionId: string) => `forms.form_version:${versionId}`,\n} as const\n\nexport const FORM_RESOURCE_KIND = 'forms.form'\nexport const FORM_VERSION_RESOURCE_KIND = 'forms.form_version'\n\n/**\n * Resolve the request-scoped EM (forks should be created at command boundary).\n */\nexport function resolveEntityManager(ctx: CommandRuntimeContext): EntityManager {\n  return ctx.container.resolve<EntityManager>('em')\n}\n\n/**\n * Lookup a single form by ID \u2014 scoped to (tenantId, organizationId). Throws\n * 404 with `forms.errors.form_not_found` on miss to keep tenant isolation\n * (prevents probe-by-ID enumeration across orgs).\n */\nexport async function findFormInScope(\n  em: EntityManager,\n  id: string,\n  tenantId: string,\n  organizationId: string,\n): Promise<Form> {\n  const form = await em.findOne(Form, {\n    id,\n    tenantId,\n    organizationId,\n    deletedAt: null,\n  })\n  if (!form) {\n    throw new CrudHttpError(404, { error: 'forms.errors.form_not_found' })\n  }\n  return form\n}\n\n/**\n * Pure resolver for a form locale-set update (W7). Dedupes `supportedLocales`,\n * falls back to the current values when a field is omitted, and enforces the\n * two invariants: at least one locale, and `defaultLocale \u2208 supportedLocales`.\n * Throws a 422 `CrudHttpError` on violation so the route surfaces a stable key.\n * Kept I/O-free so the command layer and unit tests share one source of truth.\n */\nexport function resolveFormLocaleUpdate(input: {\n  current: { defaultLocale: string; supportedLocales: string[] }\n  supportedLocales?: string[]\n  defaultLocale?: string\n}): { defaultLocale: string; supportedLocales: string[] } {\n  const nextSupported =\n    input.supportedLocales !== undefined\n      ? Array.from(new Set(input.supportedLocales))\n      : [...input.current.supportedLocales]\n  if (nextSupported.length === 0) {\n    throw new CrudHttpError(422, { error: 'forms.errors.locales_empty' })\n  }\n  const nextDefault = input.defaultLocale ?? input.current.defaultLocale\n  if (!nextSupported.includes(nextDefault)) {\n    throw new CrudHttpError(422, { error: 'forms.errors.default_locale_unsupported' })\n  }\n  return { defaultLocale: nextDefault, supportedLocales: nextSupported }\n}\n\n/**\n * Lookup a single form version by ID \u2014 scoped to (tenantId, organizationId).\n */\nexport async function findFormVersionInScope(\n  em: EntityManager,\n  id: string,\n  tenantId: string,\n  organizationId: string,\n): Promise<FormVersion> {\n  const version = await em.findOne(FormVersion, {\n    id,\n    tenantId,\n    organizationId,\n  })\n  if (!version) {\n    throw new CrudHttpError(404, { error: 'forms.errors.version_not_found' })\n  }\n  return version\n}\n\n/**\n * Validate-and-emit shorthand. Every emit goes through the catalogued payload\n * schema before reaching the event bus so we keep the cross-module contract\n * tight (matches the SubmissionService convention from phase 1c's DI).\n */\nexport async function emitForms<TId extends FormsEventId>(\n  eventId: TId,\n  payload: unknown,\n): Promise<void> {\n  const schema =\n    formsEventPayloadSchemas[eventId as keyof typeof formsEventPayloadSchemas]\n  const validated = schema ? schema.parse(payload) : payload\n  await emitFormsEvent(eventId, validated as never)\n}\n\n/**\n * Fire-and-best-effort cache invalidation. Cache failures should never block\n * a successful mutation, so any error is logged and swallowed.\n */\nexport async function invalidateFormsCacheTags(\n  ctx: CommandRuntimeContext,\n  tags: string[],\n): Promise<void> {\n  if (!tags.length) return\n  if (\n    typeof ctx.container.hasRegistration === 'function' &&\n    !ctx.container.hasRegistration('cacheService')\n  ) {\n    return\n  }\n  try {\n    const cacheService = ctx.container.resolve<{\n      deleteByTags(tags: string[]): Promise<number>\n    }>('cacheService')\n    if (!cacheService || typeof cacheService.deleteByTags !== 'function') return\n    await cacheService.deleteByTags(tags)\n  } catch (error) {\n    if (process.env.NODE_ENV !== 'test') {\n      logger.warn('cache invalidation failed', {\n        tags,\n        err: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n}\n\n/**\n * Resolve actor user ID from the runtime context. UUID-shaped subjects are\n * preserved as-is; anything else (e.g., API-key IDs) returns `null` so the\n * command writes a NULL `published_by`/`created_by` instead of a non-UUID.\n */\nconst UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/\n\nexport function resolveActorUserId(ctx: CommandRuntimeContext): string | null {\n  const auth = ctx.auth\n  if (!auth) return null\n  if (auth.isApiKey) return null\n  const sub = typeof auth.sub === 'string' ? auth.sub.trim() : ''\n  if (!sub || !UUID_REGEX.test(sub)) return null\n  return sub\n}\n\n/**\n * Snapshot serializers \u2014 kept outside `commands/form.ts` and\n * `commands/form-version.ts` so the undo-payload shape is documented in\n * a single place.\n */\n\nexport type FormSnapshot = {\n  id: string\n  organizationId: string\n  tenantId: string\n  key: string\n  name: string\n  description: string | null\n  status: 'draft' | 'active' | 'archived'\n  currentPublishedVersionId: string | null\n  defaultLocale: string\n  supportedLocales: string[]\n  retentionDays: number | null\n  createdBy: string\n  archivedAt: string | null\n  createdAt: string\n  updatedAt: string\n}\n\nexport function serializeFormSnapshot(form: Form): FormSnapshot {\n  return {\n    id: form.id,\n    organizationId: form.organizationId,\n    tenantId: form.tenantId,\n    key: form.key,\n    name: form.name,\n    description: form.description ?? null,\n    status: form.status,\n    currentPublishedVersionId: form.currentPublishedVersionId ?? null,\n    defaultLocale: form.defaultLocale,\n    supportedLocales: [...form.supportedLocales],\n    retentionDays: form.retentionDays ?? null,\n    createdBy: form.createdBy,\n    archivedAt: form.archivedAt ? form.archivedAt.toISOString() : null,\n    createdAt: form.createdAt.toISOString(),\n    updatedAt: form.updatedAt.toISOString(),\n  }\n}\n\nexport type FormVersionSnapshot = {\n  id: string\n  formId: string\n  organizationId: string\n  tenantId: string\n  versionNumber: number\n  status: 'draft' | 'published' | 'archived'\n  schema: Record<string, unknown>\n  uiSchema: Record<string, unknown>\n  roles: string[]\n  schemaHash: string\n  registryVersion: string\n  publishedAt: string | null\n  publishedBy: string | null\n  changelog: string | null\n  archivedAt: string | null\n  createdAt: string\n  updatedAt: string\n}\n\nexport function serializeFormVersionSnapshot(version: FormVersion): FormVersionSnapshot {\n  return {\n    id: version.id,\n    formId: version.formId,\n    organizationId: version.organizationId,\n    tenantId: version.tenantId,\n    versionNumber: version.versionNumber,\n    status: version.status,\n    schema: cloneJson(version.schema),\n    uiSchema: cloneJson(version.uiSchema),\n    roles: [...version.roles],\n    schemaHash: version.schemaHash,\n    registryVersion: version.registryVersion,\n    publishedAt: version.publishedAt ? version.publishedAt.toISOString() : null,\n    publishedBy: version.publishedBy ?? null,\n    changelog: version.changelog ?? null,\n    archivedAt: version.archivedAt ? version.archivedAt.toISOString() : null,\n    createdAt: version.createdAt.toISOString(),\n    updatedAt: version.updatedAt.toISOString(),\n  }\n}\n\nfunction cloneJson(value: Record<string, unknown> | null | undefined): Record<string, unknown> {\n  if (!value || typeof value !== 'object') return {}\n  return JSON.parse(JSON.stringify(value)) as Record<string, unknown>\n}\n"],
+  "mappings": "AACA,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AAEnC,SAAS,MAAM,mBAAmB;AAElC,SAAS,sBAAsB;AAC/B,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO,EAAE,MAAM,EAAE,WAAW,WAAW,CAAC;AAS7D,MAAM,mBAAmB;AAAA,EAC9B,UAAU,CAAC,mBAA2B,mBAAmB,cAAc;AAAA,EACvE,MAAM,CAAC,WAAmB,cAAc,MAAM;AAAA,EAC9C,aAAa,CAAC,cAAsB,sBAAsB,SAAS;AACrE;AAEO,MAAM,qBAAqB;AAC3B,MAAM,6BAA6B;AAKnC,SAAS,qBAAqB,KAA2C;AAC9E,SAAO,IAAI,UAAU,QAAuB,IAAI;AAClD;AAOA,eAAsB,gBACpB,IACA,IACA,UACA,gBACe;AACf,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM;AAAA,IAClC;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,8BAA8B,CAAC;AAAA,EACvE;AACA,SAAO;AACT;AASO,SAAS,wBAAwB,OAIkB;AACxD,QAAM,gBACJ,MAAM,qBAAqB,SACvB,MAAM,KAAK,IAAI,IAAI,MAAM,gBAAgB,CAAC,IAC1C,CAAC,GAAG,MAAM,QAAQ,gBAAgB;AACxC,MAAI,cAAc,WAAW,GAAG;AAC9B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,6BAA6B,CAAC;AAAA,EACtE;AACA,QAAM,cAAc,MAAM,iBAAiB,MAAM,QAAQ;AACzD,MAAI,CAAC,cAAc,SAAS,WAAW,GAAG;AACxC,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,0CAA0C,CAAC;AAAA,EACnF;AACA,SAAO,EAAE,eAAe,aAAa,kBAAkB,cAAc;AACvE;AAKA,eAAsB,uBACpB,IACA,IACA,UACA,gBACsB;AACtB,QAAM,UAAU,MAAM,GAAG,QAAQ,aAAa;AAAA,IAC5C;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,iCAAiC,CAAC;AAAA,EAC1E;AACA,SAAO;AACT;AAOA,eAAsB,UACpB,SACA,SACe;AACf,QAAM,SACJ,yBAAyB,OAAgD;AAC3E,QAAM,YAAY,SAAS,OAAO,MAAM,OAAO,IAAI;AACnD,QAAM,eAAe,SAAS,SAAkB;AAClD;AAMA,eAAsB,yBACpB,KACA,MACe;AACf,MAAI,CAAC,KAAK,OAAQ;AAClB,MACE,OAAO,IAAI,UAAU,oBAAoB,cACzC,CAAC,IAAI,UAAU,gBAAgB,cAAc,GAC7C;AACA;AAAA,EACF;AACA,MAAI;AACF,UAAM,eAAe,IAAI,UAAU,QAEhC,cAAc;AACjB,QAAI,CAAC,gBAAgB,OAAO,aAAa,iBAAiB,WAAY;AACtE,UAAM,aAAa,aAAa,IAAI;AAAA,EACtC,SAAS,OAAO;AACd,QAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,aAAO,KAAK,6BAA6B;AAAA,QACvC;AAAA,QACA,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC5D,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAOA,MAAM,aAAa;AAEZ,SAAS,mBAAmB,KAA2C;AAC5E,QAAM,OAAO,IAAI;AACjB,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,KAAK,SAAU,QAAO;AAC1B,QAAM,MAAM,OAAO,KAAK,QAAQ,WAAW,KAAK,IAAI,KAAK,IAAI;AAC7D,MAAI,CAAC,OAAO,CAAC,WAAW,KAAK,GAAG,EAAG,QAAO;AAC1C,SAAO;AACT;AA0BO,SAAS,sBAAsB,MAA0B;AAC9D,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,gBAAgB,KAAK;AAAA,IACrB,UAAU,KAAK;AAAA,IACf,KAAK,KAAK;AAAA,IACV,MAAM,KAAK;AAAA,IACX,aAAa,KAAK,eAAe;AAAA,IACjC,QAAQ,KAAK;AAAA,IACb,2BAA2B,KAAK,6BAA6B;AAAA,IAC7D,eAAe,KAAK;AAAA,IACpB,kBAAkB,CAAC,GAAG,KAAK,gBAAgB;AAAA,IAC3C,eAAe,KAAK,iBAAiB;AAAA,IACrC,WAAW,KAAK;AAAA,IAChB,YAAY,KAAK,aAAa,KAAK,WAAW,YAAY,IAAI;AAAA,IAC9D,WAAW,KAAK,UAAU,YAAY;AAAA,IACtC,WAAW,KAAK,UAAU,YAAY;AAAA,EACxC;AACF;AAsBO,SAAS,6BAA6B,SAA2C;AACtF,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,QAAQ,QAAQ;AAAA,IAChB,gBAAgB,QAAQ;AAAA,IACxB,UAAU,QAAQ;AAAA,IAClB,eAAe,QAAQ;AAAA,IACvB,QAAQ,QAAQ;AAAA,IAChB,QAAQ,UAAU,QAAQ,MAAM;AAAA,IAChC,UAAU,UAAU,QAAQ,QAAQ;AAAA,IACpC,OAAO,CAAC,GAAG,QAAQ,KAAK;AAAA,IACxB,YAAY,QAAQ;AAAA,IACpB,iBAAiB,QAAQ;AAAA,IACzB,aAAa,QAAQ,cAAc,QAAQ,YAAY,YAAY,IAAI;AAAA,IACvE,aAAa,QAAQ,eAAe;AAAA,IACpC,WAAW,QAAQ,aAAa;AAAA,IAChC,YAAY,QAAQ,aAAa,QAAQ,WAAW,YAAY,IAAI;AAAA,IACpE,WAAW,QAAQ,UAAU,YAAY;AAAA,IACzC,WAAW,QAAQ,UAAU,YAAY;AAAA,EAC3C;AACF;AAEA,SAAS,UAAU,OAA4E;AAC7F,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO,CAAC;AACjD,SAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AACzC;",
+  "names": []
+}