@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/customer_groups/data/validators.js

@@ -0,0 +1,153 @@
+import { z } from "zod";
+const uuid = () => z.string().uuid();
+const emptyStringToNull = (value) => {
+  if (typeof value !== "string") return value;
+  const trimmed = value.trim();
+  return trimmed.length ? trimmed : null;
+};
+const clearableStringSchema = (max) => z.preprocess(emptyStringToNull, z.string().trim().max(max).nullable().optional());
+const clearableDateSchema = z.preprocess(
+  emptyStringToNull,
+  z.coerce.date().nullable().optional()
+);
+const clearableUuidSchema = z.preprocess(emptyStringToNull, uuid().nullable().optional());
+const clearableMetadataSchema = z.preprocess(
+  (value) => value === "" ? null : value,
+  z.record(z.string(), z.unknown()).nullable().optional()
+);
+const codeSchema = z.string().trim().min(1).max(80).regex(/^[a-z0-9_-]+$/, "Code must be lowercase and may contain dashes or underscores");
+const nameSchema = z.string().trim().min(1).max(200);
+const CUSTOMER_GROUP_MAX_ANCESTOR_DEPTH = 5;
+const INT4_MAX = 2147483647;
+const PRIORITY_MIN = -1e9;
+const NUMERIC_16_2_MAX = 9999999999999998e-2;
+const customerGroupKindValues = ["b2c", "b2b", "internal", "partner"];
+const customerGroupKindSchema = z.enum(customerGroupKindValues);
+const customerGroupMembershipSourceValues = ["manual", "import", "rule", "onboarding"];
+const customerGroupMembershipSourceSchema = z.enum(customerGroupMembershipSourceValues);
+const customerGroupBaseShape = {
+  organizationId: uuid().nullable().optional(),
+  tenantId: uuid(),
+  code: codeSchema,
+  name: nameSchema,
+  description: clearableStringSchema(4e3),
+  kind: customerGroupKindSchema,
+  parentId: clearableUuidSchema,
+  // Not floored at 0: reconcile adopt places orphan placeholders below the tenant's
+  // lowest priority (spec §8.2: "priority at the bottom"), which can be negative, and the
+  // edit form must still be able to save such a group.
+  priority: z.number().int().min(PRIORITY_MIN).max(INT4_MAX),
+  isDefault: z.boolean(),
+  isActive: z.boolean(),
+  metadata: clearableMetadataSchema
+};
+const customerGroupCreateSchema = z.object({
+  ...customerGroupBaseShape,
+  isDefault: z.boolean().optional().default(false),
+  isActive: z.boolean().optional().default(true)
+});
+const customerGroupUpdateSchema = z.object({
+  id: uuid()
+}).merge(z.object(customerGroupBaseShape).partial());
+const customerGroupDeleteSchema = z.object({
+  id: uuid()
+});
+const customerGroupMembershipCreateBaseSchema = z.object({
+  organizationId: uuid().nullable().optional(),
+  tenantId: uuid(),
+  groupId: uuid(),
+  customerId: uuid(),
+  source: customerGroupMembershipSourceSchema.optional().default("manual"),
+  validFrom: clearableDateSchema,
+  validUntil: clearableDateSchema,
+  assignedByUserId: clearableUuidSchema,
+  notes: clearableStringSchema(2e3)
+});
+const membershipServerOwnedFields = { organizationId: true, tenantId: true, assignedByUserId: true };
+const customerGroupMembershipCreateRequestSchema = customerGroupMembershipCreateBaseSchema.omit(membershipServerOwnedFields);
+const customerGroupMembershipCreateSchema = customerGroupMembershipCreateBaseSchema.refine(
+  (payload) => !payload.validFrom || !payload.validUntil || payload.validFrom <= payload.validUntil,
+  {
+    message: "validFrom must be before or equal to validUntil",
+    path: ["validUntil"]
+  }
+);
+const customerGroupMembershipUpdateBaseSchema = z.object({
+  id: uuid()
+}).merge(
+  z.object({
+    organizationId: uuid().nullable().optional(),
+    tenantId: uuid(),
+    groupId: uuid().optional(),
+    customerId: uuid().optional(),
+    source: customerGroupMembershipSourceSchema.optional(),
+    validFrom: clearableDateSchema,
+    validUntil: clearableDateSchema,
+    assignedByUserId: clearableUuidSchema,
+    notes: clearableStringSchema(2e3)
+  })
+);
+const customerGroupMembershipUpdateRequestSchema = customerGroupMembershipUpdateBaseSchema.omit(membershipServerOwnedFields);
+const customerGroupMembershipUpdateSchema = customerGroupMembershipUpdateBaseSchema.refine(
+  (payload) => !payload.validFrom || !payload.validUntil || payload.validFrom <= payload.validUntil,
+  {
+    message: "validFrom must be before or equal to validUntil",
+    path: ["validUntil"]
+  }
+);
+const customerGroupMembershipDeleteSchema = z.object({
+  id: uuid()
+});
+const customerGroupReorderSchema = z.object({
+  tenantId: uuid(),
+  ids: z.array(uuid()).min(1)
+});
+const clearableNonNegativeIntSchema = z.preprocess(
+  emptyStringToNull,
+  z.coerce.number().int().min(0).max(INT4_MAX).nullable().optional()
+);
+const clearableNonNegativeNumberSchema = z.preprocess(
+  emptyStringToNull,
+  z.coerce.number().min(0).max(NUMERIC_16_2_MAX).nullable().optional()
+);
+const currencyCodeSchema = clearableStringSchema(4);
+const customerGroupTermsBaseShape = {
+  organizationId: uuid().nullable().optional(),
+  tenantId: uuid(),
+  groupId: uuid(),
+  priceKindId: clearableUuidSchema,
+  paymentTermsDays: clearableNonNegativeIntSchema,
+  allowPurchaseOnAccount: z.boolean().nullable().optional(),
+  defaultCreditLimit: clearableNonNegativeNumberSchema,
+  creditCurrencyCode: currencyCodeSchema,
+  approvalRequiredAbove: clearableNonNegativeNumberSchema,
+  minOrderValue: clearableNonNegativeNumberSchema,
+  metadata: clearableMetadataSchema
+};
+const customerGroupTermsCreateSchema = z.object(customerGroupTermsBaseShape);
+const customerGroupTermsUpdateSchema = z.object({
+  id: uuid()
+}).merge(z.object(customerGroupTermsBaseShape).partial());
+const customerGroupTermsDeleteSchema = z.object({
+  id: uuid()
+});
+export {
+  CUSTOMER_GROUP_MAX_ANCESTOR_DEPTH,
+  customerGroupCreateSchema,
+  customerGroupDeleteSchema,
+  customerGroupKindSchema,
+  customerGroupKindValues,
+  customerGroupMembershipCreateRequestSchema,
+  customerGroupMembershipCreateSchema,
+  customerGroupMembershipDeleteSchema,
+  customerGroupMembershipSourceSchema,
+  customerGroupMembershipSourceValues,
+  customerGroupMembershipUpdateRequestSchema,
+  customerGroupMembershipUpdateSchema,
+  customerGroupReorderSchema,
+  customerGroupTermsCreateSchema,
+  customerGroupTermsDeleteSchema,
+  customerGroupTermsUpdateSchema,
+  customerGroupUpdateSchema
+};
+//# sourceMappingURL=validators.js.map

package/dist/modules/customer_groups/data/validators.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_groups/data/validators.ts"],
+  "sourcesContent": ["import { z } from 'zod'\n\nconst uuid = () => z.string().uuid()\n\nconst emptyStringToNull = (value: unknown): unknown => {\n  if (typeof value !== 'string') return value\n  const trimmed = value.trim()\n  return trimmed.length ? trimmed : null\n}\n\n// Plain optional string fields that map to nullable columns: blanking a previously-set\n// value on edit must transmit null to clear it, not be silently dropped. Mirrors\n// `clearableStringSchema` in `customers/data/validators.ts`.\nconst clearableStringSchema = (max: number) =>\n  z.preprocess(emptyStringToNull, z.string().trim().max(max).nullable().optional())\n\nconst clearableDateSchema = z.preprocess(\n  emptyStringToNull,\n  z.coerce.date().nullable().optional(),\n)\n\nconst clearableUuidSchema = z.preprocess(emptyStringToNull, uuid().nullable().optional())\n\nconst clearableMetadataSchema = z.preprocess(\n  (value) => (value === '' ? null : value),\n  z.record(z.string(), z.unknown()).nullable().optional(),\n)\n\n// Slug-safe identifier used as the stable code across imports and rules (spec \u00A75.1:\n// \"stable identifier used in imports and rules\"). Mirrors the `tagCreateSchema.slug`\n// pattern in `customers/data/validators.ts`.\nconst codeSchema = z\n  .string()\n  .trim()\n  .min(1)\n  .max(80)\n  .regex(/^[a-z0-9_-]+$/, 'Code must be lowercase and may contain dashes or underscores')\n\nconst nameSchema = z.string().trim().min(1).max(200)\n\n// Spec \u00A75.1: a group's ancestor chain (the group itself plus every parent up to the\n// root) is capped at 5 levels. Also the walk limit of `customerGroupsService`'s\n// ancestor resolution \u2014 anything deeper would silently lose inherited terms.\nexport const CUSTOMER_GROUP_MAX_ANCESTOR_DEPTH = 5\n\n// Column bounds: without them an out-of-range value reaches Postgres and fails as a raw\n// numeric-overflow 500 instead of a 400. `int4` is the `int` column type of `priority`\n// and `payment_terms_days`; `numeric(16,2)` holds at most 14 integer digits.\nconst INT4_MAX = 2147483647\n// Priorities are floored well above `int4`'s minimum: reorder parks rows below the\n// tenant's lowest priority and adopt places placeholders 10 below it, and both must stay\n// inside `int4` or they fail as a raw overflow 500.\nconst PRIORITY_MIN = -1000000000\nconst NUMERIC_16_2_MAX = 99999999999999.99\n\nexport const customerGroupKindValues = ['b2c', 'b2b', 'internal', 'partner'] as const\nexport const customerGroupKindSchema = z.enum(customerGroupKindValues)\n\nexport const customerGroupMembershipSourceValues = ['manual', 'import', 'rule', 'onboarding'] as const\nexport const customerGroupMembershipSourceSchema = z.enum(customerGroupMembershipSourceValues)\n\n// Default-free field set shared by the create and update schemas. Zod v4's `.partial()`\n// keeps an inner `.default()`, so deriving the update schema from the create schema\n// injected `isDefault: false` / `isActive: true` into every partial update and silently\n// overwrote stored values. Defaults live on the create schema only.\nconst customerGroupBaseShape = {\n  organizationId: uuid().nullable().optional(),\n  tenantId: uuid(),\n  code: codeSchema,\n  name: nameSchema,\n  description: clearableStringSchema(4000),\n  kind: customerGroupKindSchema,\n  parentId: clearableUuidSchema,\n  // Not floored at 0: reconcile adopt places orphan placeholders below the tenant's\n  // lowest priority (spec \u00A78.2: \"priority at the bottom\"), which can be negative, and the\n  // edit form must still be able to save such a group.\n  priority: z.number().int().min(PRIORITY_MIN).max(INT4_MAX),\n  isDefault: z.boolean(),\n  isActive: z.boolean(),\n  metadata: clearableMetadataSchema,\n}\n\nexport const customerGroupCreateSchema = z.object({\n  ...customerGroupBaseShape,\n  isDefault: z.boolean().optional().default(false),\n  isActive: z.boolean().optional().default(true),\n})\n\nexport type CustomerGroupCreateInput = z.infer<typeof customerGroupCreateSchema>\n\nexport const customerGroupUpdateSchema = z\n  .object({\n    id: uuid(),\n  })\n  .merge(z.object(customerGroupBaseShape).partial())\n\nexport type CustomerGroupUpdateInput = z.infer<typeof customerGroupUpdateSchema>\n\nexport const customerGroupDeleteSchema = z.object({\n  id: uuid(),\n})\n\nexport type CustomerGroupDeleteInput = z.infer<typeof customerGroupDeleteSchema>\n\nconst customerGroupMembershipCreateBaseSchema = z.object({\n  organizationId: uuid().nullable().optional(),\n  tenantId: uuid(),\n  groupId: uuid(),\n  customerId: uuid(),\n  source: customerGroupMembershipSourceSchema.optional().default('manual'),\n  validFrom: clearableDateSchema,\n  validUntil: clearableDateSchema,\n  assignedByUserId: clearableUuidSchema,\n  notes: clearableStringSchema(2000),\n})\n\n// Server-owned fields: the tenant comes from the session, the organization from the\n// referenced customer, and `assignedByUserId` from the acting user.\nconst membershipServerOwnedFields = { organizationId: true, tenantId: true, assignedByUserId: true } as const\n\nexport const customerGroupMembershipCreateRequestSchema =\n  customerGroupMembershipCreateBaseSchema.omit(membershipServerOwnedFields)\n\nexport const customerGroupMembershipCreateSchema = customerGroupMembershipCreateBaseSchema\n  .refine(\n    (payload) =>\n      !payload.validFrom || !payload.validUntil || payload.validFrom <= payload.validUntil,\n    {\n      message: 'validFrom must be before or equal to validUntil',\n      path: ['validUntil'],\n    },\n  )\n\nexport type CustomerGroupMembershipCreateInput = z.infer<typeof customerGroupMembershipCreateSchema>\n\nconst customerGroupMembershipUpdateBaseSchema = z\n  .object({\n    id: uuid(),\n  })\n  .merge(\n    z.object({\n      organizationId: uuid().nullable().optional(),\n      tenantId: uuid(),\n      groupId: uuid().optional(),\n      customerId: uuid().optional(),\n      source: customerGroupMembershipSourceSchema.optional(),\n      validFrom: clearableDateSchema,\n      validUntil: clearableDateSchema,\n      assignedByUserId: clearableUuidSchema,\n      notes: clearableStringSchema(2000),\n    }),\n  )\n\nexport const customerGroupMembershipUpdateRequestSchema =\n  customerGroupMembershipUpdateBaseSchema.omit(membershipServerOwnedFields)\n\nexport const customerGroupMembershipUpdateSchema = customerGroupMembershipUpdateBaseSchema.refine(\n  (payload) =>\n    !payload.validFrom || !payload.validUntil || payload.validFrom <= payload.validUntil,\n  {\n    message: 'validFrom must be before or equal to validUntil',\n    path: ['validUntil'],\n  },\n)\n\nexport type CustomerGroupMembershipUpdateInput = z.infer<typeof customerGroupMembershipUpdateSchema>\n\nexport const customerGroupMembershipDeleteSchema = z.object({\n  id: uuid(),\n})\n\nexport type CustomerGroupMembershipDeleteInput = z.infer<typeof customerGroupMembershipDeleteSchema>\n\n// Drag-reorder payload for the admin group list (Step 1.7): an ordered array of\n// `CustomerGroup` ids. A full ordering renumbers `priority` in gaps of 10; a partial\n// one permutes the listed groups' existing priorities \u2014 see commands/reorderGroups.ts.\nexport const customerGroupReorderSchema = z.object({\n  tenantId: uuid(),\n  ids: z.array(uuid()).min(1),\n})\n\nexport type CustomerGroupReorderInput = z.infer<typeof customerGroupReorderSchema>\n\n// Optional/nullable non-negative number field (payment days, credit/order thresholds):\n// blanking a previously-set value on edit must transmit null to clear it (same rationale\n// as `clearableStringSchema` above), and negative input is rejected server-side to match\n// the UI's inline validation (spec acceptance criterion: \"Numeric fields... reject\n// negative input inline\").\nconst clearableNonNegativeIntSchema = z.preprocess(\n  emptyStringToNull,\n  z.coerce.number().int().min(0).max(INT4_MAX).nullable().optional(),\n)\n\nconst clearableNonNegativeNumberSchema = z.preprocess(\n  emptyStringToNull,\n  z.coerce.number().min(0).max(NUMERIC_16_2_MAX).nullable().optional(),\n)\n\nconst currencyCodeSchema = clearableStringSchema(4)\n\n// Default-free, for the same reason as `customerGroupBaseShape` above.\nconst customerGroupTermsBaseShape = {\n  organizationId: uuid().nullable().optional(),\n  tenantId: uuid(),\n  groupId: uuid(),\n  priceKindId: clearableUuidSchema,\n  paymentTermsDays: clearableNonNegativeIntSchema,\n  allowPurchaseOnAccount: z.boolean().nullable().optional(),\n  defaultCreditLimit: clearableNonNegativeNumberSchema,\n  creditCurrencyCode: currencyCodeSchema,\n  approvalRequiredAbove: clearableNonNegativeNumberSchema,\n  minOrderValue: clearableNonNegativeNumberSchema,\n  metadata: clearableMetadataSchema,\n}\n\nexport const customerGroupTermsCreateSchema = z.object(customerGroupTermsBaseShape)\n\nexport type CustomerGroupTermsCreateInput = z.infer<typeof customerGroupTermsCreateSchema>\n\nexport const customerGroupTermsUpdateSchema = z\n  .object({\n    id: uuid(),\n  })\n  .merge(z.object(customerGroupTermsBaseShape).partial())\n\nexport type CustomerGroupTermsUpdateInput = z.infer<typeof customerGroupTermsUpdateSchema>\n\nexport const customerGroupTermsDeleteSchema = z.object({\n  id: uuid(),\n})\n\nexport type CustomerGroupTermsDeleteInput = z.infer<typeof customerGroupTermsDeleteSchema>\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,MAAM,OAAO,MAAM,EAAE,OAAO,EAAE,KAAK;AAEnC,MAAM,oBAAoB,CAAC,UAA4B;AACrD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,UAAU;AACpC;AAKA,MAAM,wBAAwB,CAAC,QAC7B,EAAE,WAAW,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC;AAElF,MAAM,sBAAsB,EAAE;AAAA,EAC5B;AAAA,EACA,EAAE,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS;AACtC;AAEA,MAAM,sBAAsB,EAAE,WAAW,mBAAmB,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;AAExF,MAAM,0BAA0B,EAAE;AAAA,EAChC,CAAC,UAAW,UAAU,KAAK,OAAO;AAAA,EAClC,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AACxD;AAKA,MAAM,aAAa,EAChB,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,EAAE,EACN,MAAM,iBAAiB,8DAA8D;AAExF,MAAM,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAK5C,MAAM,oCAAoC;AAKjD,MAAM,WAAW;AAIjB,MAAM,eAAe;AACrB,MAAM,mBAAmB;AAElB,MAAM,0BAA0B,CAAC,OAAO,OAAO,YAAY,SAAS;AACpE,MAAM,0BAA0B,EAAE,KAAK,uBAAuB;AAE9D,MAAM,sCAAsC,CAAC,UAAU,UAAU,QAAQ,YAAY;AACrF,MAAM,sCAAsC,EAAE,KAAK,mCAAmC;AAM7F,MAAM,yBAAyB;AAAA,EAC7B,gBAAgB,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,UAAU,KAAK;AAAA,EACf,MAAM;AAAA,EACN,MAAM;AAAA,EACN,aAAa,sBAAsB,GAAI;AAAA,EACvC,MAAM;AAAA,EACN,UAAU;AAAA;AAAA;AAAA;AAAA,EAIV,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,YAAY,EAAE,IAAI,QAAQ;AAAA,EACzD,WAAW,EAAE,QAAQ;AAAA,EACrB,UAAU,EAAE,QAAQ;AAAA,EACpB,UAAU;AACZ;AAEO,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,GAAG;AAAA,EACH,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC/C,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAC/C,CAAC;AAIM,MAAM,4BAA4B,EACtC,OAAO;AAAA,EACN,IAAI,KAAK;AACX,CAAC,EACA,MAAM,EAAE,OAAO,sBAAsB,EAAE,QAAQ,CAAC;AAI5C,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,IAAI,KAAK;AACX,CAAC;AAID,MAAM,0CAA0C,EAAE,OAAO;AAAA,EACvD,gBAAgB,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,UAAU,KAAK;AAAA,EACf,SAAS,KAAK;AAAA,EACd,YAAY,KAAK;AAAA,EACjB,QAAQ,oCAAoC,SAAS,EAAE,QAAQ,QAAQ;AAAA,EACvE,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,kBAAkB;AAAA,EAClB,OAAO,sBAAsB,GAAI;AACnC,CAAC;AAID,MAAM,8BAA8B,EAAE,gBAAgB,MAAM,UAAU,MAAM,kBAAkB,KAAK;AAE5F,MAAM,6CACX,wCAAwC,KAAK,2BAA2B;AAEnE,MAAM,sCAAsC,wCAChD;AAAA,EACC,CAAC,YACC,CAAC,QAAQ,aAAa,CAAC,QAAQ,cAAc,QAAQ,aAAa,QAAQ;AAAA,EAC5E;AAAA,IACE,SAAS;AAAA,IACT,MAAM,CAAC,YAAY;AAAA,EACrB;AACF;AAIF,MAAM,0CAA0C,EAC7C,OAAO;AAAA,EACN,IAAI,KAAK;AACX,CAAC,EACA;AAAA,EACC,EAAE,OAAO;AAAA,IACP,gBAAgB,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,IAC3C,UAAU,KAAK;AAAA,IACf,SAAS,KAAK,EAAE,SAAS;AAAA,IACzB,YAAY,KAAK,EAAE,SAAS;AAAA,IAC5B,QAAQ,oCAAoC,SAAS;AAAA,IACrD,WAAW;AAAA,IACX,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,OAAO,sBAAsB,GAAI;AAAA,EACnC,CAAC;AACH;AAEK,MAAM,6CACX,wCAAwC,KAAK,2BAA2B;AAEnE,MAAM,sCAAsC,wCAAwC;AAAA,EACzF,CAAC,YACC,CAAC,QAAQ,aAAa,CAAC,QAAQ,cAAc,QAAQ,aAAa,QAAQ;AAAA,EAC5E;AAAA,IACE,SAAS;AAAA,IACT,MAAM,CAAC,YAAY;AAAA,EACrB;AACF;AAIO,MAAM,sCAAsC,EAAE,OAAO;AAAA,EAC1D,IAAI,KAAK;AACX,CAAC;AAOM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,UAAU,KAAK;AAAA,EACf,KAAK,EAAE,MAAM,KAAK,CAAC,EAAE,IAAI,CAAC;AAC5B,CAAC;AASD,MAAM,gCAAgC,EAAE;AAAA,EACtC;AAAA,EACA,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,QAAQ,EAAE,SAAS,EAAE,SAAS;AACnE;AAEA,MAAM,mCAAmC,EAAE;AAAA,EACzC;AAAA,EACA,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,gBAAgB,EAAE,SAAS,EAAE,SAAS;AACrE;AAEA,MAAM,qBAAqB,sBAAsB,CAAC;AAGlD,MAAM,8BAA8B;AAAA,EAClC,gBAAgB,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,UAAU,KAAK;AAAA,EACf,SAAS,KAAK;AAAA,EACd,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,wBAAwB,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,oBAAoB;AAAA,EACpB,oBAAoB;AAAA,EACpB,uBAAuB;AAAA,EACvB,eAAe;AAAA,EACf,UAAU;AACZ;AAEO,MAAM,iCAAiC,EAAE,OAAO,2BAA2B;AAI3E,MAAM,iCAAiC,EAC3C,OAAO;AAAA,EACN,IAAI,KAAK;AACX,CAAC,EACA,MAAM,EAAE,OAAO,2BAA2B,EAAE,QAAQ,CAAC;AAIjD,MAAM,iCAAiC,EAAE,OAAO;AAAA,EACrD,IAAI,KAAK;AACX,CAAC;",
+  "names": []
+}

package/dist/modules/customer_groups/di.js

@@ -0,0 +1,20 @@
+import { asFunction, asValue } from "awilix";
+import { createCustomerGroupsService } from "./services/customerGroupsService.js";
+import { CustomerGroup, CustomerGroupMembership } from "./data/entities.js";
+function register(container) {
+  container.register({
+    // `em` is registered per request (`createRequestContainer()` in
+    // packages/shared/src/lib/di/container.ts forks a fresh EntityManager and
+    // builds a brand-new Awilix container for every request), so `.singleton()`
+    // here resolves to "one instance per request container", not one instance for
+    // the process — same pattern as `warrantyClaimNumberGenerator` in
+    // `warranty_claims/di.ts`.
+    customerGroupsService: asFunction(({ em }) => createCustomerGroupsService(em)).singleton().proxy(),
+    CustomerGroup: asValue(CustomerGroup),
+    CustomerGroupMembership: asValue(CustomerGroupMembership)
+  });
+}
+export {
+  register
+};
+//# sourceMappingURL=di.js.map

package/dist/modules/customer_groups/di.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/customer_groups/di.ts"],
+  "sourcesContent": ["import { asFunction, asValue } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { createCustomerGroupsService } from './services/customerGroupsService'\nimport { CustomerGroup, CustomerGroupMembership } from './data/entities'\n\ntype AppCradle = AppContainer['cradle'] & {\n  em: EntityManager\n}\n\nexport function register(container: AppContainer) {\n  container.register({\n    // `em` is registered per request (`createRequestContainer()` in\n    // packages/shared/src/lib/di/container.ts forks a fresh EntityManager and\n    // builds a brand-new Awilix container for every request), so `.singleton()`\n    // here resolves to \"one instance per request container\", not one instance for\n    // the process \u2014 same pattern as `warrantyClaimNumberGenerator` in\n    // `warranty_claims/di.ts`.\n    customerGroupsService: asFunction(({ em }: AppCradle) => createCustomerGroupsService(em))\n      .singleton()\n      .proxy(),\n    CustomerGroup: asValue(CustomerGroup),\n    CustomerGroupMembership: asValue(CustomerGroupMembership),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,eAAe;AAGpC,SAAS,mCAAmC;AAC5C,SAAS,eAAe,+BAA+B;AAMhD,SAAS,SAAS,WAAyB;AAChD,YAAU,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOjB,uBAAuB,WAAW,CAAC,EAAE,GAAG,MAAiB,4BAA4B,EAAE,CAAC,EACrF,UAAU,EACV,MAAM;AAAA,IACT,eAAe,QAAQ,aAAa;AAAA,IACpC,yBAAyB,QAAQ,uBAAuB;AAAA,EAC1D,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/customer_groups/events.js

@@ -0,0 +1,22 @@
+import { createModuleEvents } from "@open-mercato/shared/modules/events";
+const events = [
+  { id: "customer_groups.group.created", label: "Customer Group Created", entity: "group", category: "crud" },
+  { id: "customer_groups.group.updated", label: "Customer Group Updated", entity: "group", category: "crud" },
+  { id: "customer_groups.group.deleted", label: "Customer Group Deleted", entity: "group", category: "crud" },
+  { id: "customer_groups.membership.added", label: "Customer Added to Group", entity: "membership", category: "crud" },
+  { id: "customer_groups.membership.removed", label: "Customer Removed from Group", entity: "membership", category: "crud" },
+  { id: "customer_groups.membership.expired", label: "Group Membership Expired", entity: "membership", category: "lifecycle" },
+  { id: "customer_groups.terms.updated", label: "Customer Group Terms Updated", entity: "terms", category: "crud" }
+];
+const eventsConfig = createModuleEvents({
+  moduleId: "customer_groups",
+  events
+});
+const emitCustomerGroupsEvent = eventsConfig.emit;
+var events_default = eventsConfig;
+export {
+  events_default as default,
+  emitCustomerGroupsEvent,
+  eventsConfig
+};
+//# sourceMappingURL=events.js.map

package/dist/modules/customer_groups/events.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/customer_groups/events.ts"],
+  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\nconst events = [\n  { id: 'customer_groups.group.created', label: 'Customer Group Created', entity: 'group', category: 'crud' },\n  { id: 'customer_groups.group.updated', label: 'Customer Group Updated', entity: 'group', category: 'crud' },\n  { id: 'customer_groups.group.deleted', label: 'Customer Group Deleted', entity: 'group', category: 'crud' },\n  { id: 'customer_groups.membership.added', label: 'Customer Added to Group', entity: 'membership', category: 'crud' },\n  { id: 'customer_groups.membership.removed', label: 'Customer Removed from Group', entity: 'membership', category: 'crud' },\n  { id: 'customer_groups.membership.expired', label: 'Group Membership Expired', entity: 'membership', category: 'lifecycle' },\n  { id: 'customer_groups.terms.updated', label: 'Customer Group Terms Updated', entity: 'terms', category: 'crud' },\n] as const\n\nexport const eventsConfig = createModuleEvents({\n  moduleId: 'customer_groups',\n  events,\n})\n\nexport const emitCustomerGroupsEvent = eventsConfig.emit\n\nexport type CustomerGroupsEventId = typeof events[number]['id']\n\nexport default eventsConfig\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AAEnC,MAAM,SAAS;AAAA,EACb,EAAE,IAAI,iCAAiC,OAAO,0BAA0B,QAAQ,SAAS,UAAU,OAAO;AAAA,EAC1G,EAAE,IAAI,iCAAiC,OAAO,0BAA0B,QAAQ,SAAS,UAAU,OAAO;AAAA,EAC1G,EAAE,IAAI,iCAAiC,OAAO,0BAA0B,QAAQ,SAAS,UAAU,OAAO;AAAA,EAC1G,EAAE,IAAI,oCAAoC,OAAO,2BAA2B,QAAQ,cAAc,UAAU,OAAO;AAAA,EACnH,EAAE,IAAI,sCAAsC,OAAO,+BAA+B,QAAQ,cAAc,UAAU,OAAO;AAAA,EACzH,EAAE,IAAI,sCAAsC,OAAO,4BAA4B,QAAQ,cAAc,UAAU,YAAY;AAAA,EAC3H,EAAE,IAAI,iCAAiC,OAAO,gCAAgC,QAAQ,SAAS,UAAU,OAAO;AAClH;AAEO,MAAM,eAAe,mBAAmB;AAAA,EAC7C,UAAU;AAAA,EACV;AACF,CAAC;AAEM,MAAM,0BAA0B,aAAa;AAIpD,IAAO,iBAAQ;",
+  "names": []
+}

package/dist/modules/customer_groups/index.js

@@ -0,0 +1,15 @@
+const metadata = {
+  name: "customer_groups",
+  title: "Customer Groups & B2B Terms",
+  version: "0.1.0",
+  description: "Customer groups, memberships, and per-group commercial terms consumed by catalog pricing and sales tax resolution.",
+  author: "Open Mercato Team",
+  license: "MIT",
+  ejectable: true
+};
+import { features } from "./acl.js";
+export {
+  features,
+  metadata
+};
+//# sourceMappingURL=index.js.map

package/dist/modules/customer_groups/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/customer_groups/index.ts"],
+  "sourcesContent": ["import type { ModuleInfo } from '@open-mercato/shared/modules/registry'\n\nexport const metadata: ModuleInfo = {\n  name: 'customer_groups',\n  title: 'Customer Groups & B2B Terms',\n  version: '0.1.0',\n  description: 'Customer groups, memberships, and per-group commercial terms consumed by catalog pricing and sales tax resolution.',\n  author: 'Open Mercato Team',\n  license: 'MIT',\n  ejectable: true,\n}\n\nexport { features } from './acl'\n"],
+  "mappings": "AAEO,MAAM,WAAuB;AAAA,EAClC,MAAM;AAAA,EACN,OAAO;AAAA,EACP,SAAS;AAAA,EACT,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,WAAW;AACb;AAEA,SAAS,gBAAgB;",
+  "names": []
+}

package/dist/modules/customer_groups/lib/createConflictRecheck.js

@@ -0,0 +1,29 @@
+import { NextResponse } from "next/server";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+const recheckByRequest = /* @__PURE__ */ new WeakMap();
+function registerCreateConflictRecheck(request, recheck) {
+  if (request) recheckByRequest.set(request, recheck);
+}
+function clearCreateConflictRecheck(request) {
+  if (request) recheckByRequest.delete(request);
+}
+function withCreateConflictRecheck(handler) {
+  return async (request) => {
+    const response = await handler(request);
+    const recheck = recheckByRequest.get(request);
+    recheckByRequest.delete(request);
+    if (!recheck || response.status !== 500) return response;
+    try {
+      await recheck();
+    } catch (err) {
+      if (isCrudHttpError(err) && err.status === 409) return NextResponse.json(err.body, { status: 409 });
+    }
+    return response;
+  };
+}
+export {
+  clearCreateConflictRecheck,
+  registerCreateConflictRecheck,
+  withCreateConflictRecheck
+};
+//# sourceMappingURL=createConflictRecheck.js.map

package/dist/modules/customer_groups/lib/createConflictRecheck.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_groups/lib/createConflictRecheck.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\n\ntype ConflictRecheck = () => Promise<void>\n\n// `makeCrudRoute` inserts in its own transaction with no hook around the flush, so a\n// unique violation from a concurrent create reaches the factory's generic 500 branch.\n// A create's `beforeCreate` pre-check registers itself here, keyed by the request, and\n// the wrapped handler re-runs it when the create answered 500: a violated unique index\n// means the conflicting row is committed, so the re-run now finds it and the caller\n// gets the same translated 409 a sequential duplicate gets.\nconst recheckByRequest = new WeakMap<Request, ConflictRecheck>()\n\nexport function registerCreateConflictRecheck(request: Request | undefined, recheck: ConflictRecheck): void {\n  if (request) recheckByRequest.set(request, recheck)\n}\n\n// Reaching `afterCreate` means the insert committed, so a later 500 (a side effect\n// failing) is not a unique violation \u2014 the re-run would only find this request's own row.\nexport function clearCreateConflictRecheck(request: Request | undefined): void {\n  if (request) recheckByRequest.delete(request)\n}\n\nexport function withCreateConflictRecheck(\n  handler: (request: Request) => Promise<Response>,\n): (request: Request) => Promise<Response> {\n  return async (request: Request): Promise<Response> => {\n    const response = await handler(request)\n    const recheck = recheckByRequest.get(request)\n    recheckByRequest.delete(request)\n    if (!recheck || response.status !== 500) return response\n    try {\n      await recheck()\n    } catch (err) {\n      if (isCrudHttpError(err) && err.status === 409) return NextResponse.json(err.body, { status: 409 })\n    }\n    return response\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAUhC,MAAM,mBAAmB,oBAAI,QAAkC;AAExD,SAAS,8BAA8B,SAA8B,SAAgC;AAC1G,MAAI,QAAS,kBAAiB,IAAI,SAAS,OAAO;AACpD;AAIO,SAAS,2BAA2B,SAAoC;AAC7E,MAAI,QAAS,kBAAiB,OAAO,OAAO;AAC9C;AAEO,SAAS,0BACd,SACyC;AACzC,SAAO,OAAO,YAAwC;AACpD,UAAM,WAAW,MAAM,QAAQ,OAAO;AACtC,UAAM,UAAU,iBAAiB,IAAI,OAAO;AAC5C,qBAAiB,OAAO,OAAO;AAC/B,QAAI,CAAC,WAAW,SAAS,WAAW,IAAK,QAAO;AAChD,QAAI;AACF,YAAM,QAAQ;AAAA,IAChB,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,KAAK,IAAI,WAAW,IAAK,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpG;AACA,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}

package/dist/modules/customer_groups/lib/customerScope.js

@@ -0,0 +1,81 @@
+const CUSTOMER_TABLE = "customer_entities";
+async function isCustomerTablePresent(em) {
+  const rows = await em.getConnection().execute("select to_regclass(?) is not null as present", [CUSTOMER_TABLE]);
+  return Array.isArray(rows) && rows[0]?.present === true;
+}
+async function findCustomerInScope(em, customerId, scope, options = {}) {
+  const organizationIds = scope.organizationIds;
+  if (Array.isArray(organizationIds) && organizationIds.length === 0) return null;
+  if (!await isCustomerTablePresent(em)) return null;
+  const params = [customerId, scope.tenantId];
+  let sql = `select organization_id from ${CUSTOMER_TABLE} where id = ? and tenant_id = ?`;
+  if (!options.includeDeleted) sql += " and deleted_at is null";
+  if (Array.isArray(organizationIds)) {
+    sql += ` and organization_id in (${organizationIds.map(() => "?").join(", ")})`;
+    params.push(...organizationIds);
+  }
+  sql += " limit 1";
+  const rows = await em.getConnection().execute(sql, params);
+  if (!Array.isArray(rows) || rows.length === 0) return null;
+  const row = rows[0];
+  const organizationId = row && typeof row.organization_id === "string" ? row.organization_id : null;
+  return { organizationId };
+}
+async function isCustomerInScope(em, customerId, scope, options = {}) {
+  return await findCustomerInScope(em, customerId, scope, options) !== null;
+}
+const MEMBERSHIP_TABLE = "customer_group_memberships";
+async function countGroupMembershipsOutsideScope(em, groupId, scope) {
+  const organizationIds = scope.organizationIds;
+  if (organizationIds === null) return 0;
+  const params = [scope.tenantId, groupId];
+  let sql = `select count(*) as total from ${MEMBERSHIP_TABLE} m where m.tenant_id = ? and m.group_id = ? and m.deleted_at is null`;
+  if (organizationIds.length > 0) {
+    if (!await isCustomerTablePresent(em)) return 0;
+    sql += ` and not exists (select 1 from ${CUSTOMER_TABLE} c where c.id = m.customer_id and c.tenant_id = m.tenant_id`;
+    sql += ` and c.organization_id in (${organizationIds.map(() => "?").join(", ")}))`;
+    params.push(...organizationIds);
+  }
+  const rows = await em.getConnection().execute(sql, params);
+  const total = Array.isArray(rows) ? Number(rows[0]?.total ?? 0) : 0;
+  return Number.isFinite(total) ? total : 0;
+}
+const CUSTOMER_SCOPE_JOIN_ALIAS = "scope_customer";
+const customerScopeJoin = {
+  alias: CUSTOMER_SCOPE_JOIN_ALIAS,
+  table: CUSTOMER_TABLE,
+  from: { field: "customer_id" },
+  to: { field: "id" },
+  type: "inner"
+};
+async function buildCustomerScopeListFilter(em, organizationIds) {
+  const uniqueOrganizationIds = Array.from(new Set(organizationIds));
+  if (uniqueOrganizationIds.length === 0) return null;
+  if (!await isCustomerTablePresent(em)) return null;
+  return { [`${CUSTOMER_SCOPE_JOIN_ALIAS}.organization_id`]: { $in: uniqueOrganizationIds } };
+}
+function organizationIdsFromScope(scope, fallbackOrganizationId) {
+  if (!scope) return fallbackOrganizationId ? [fallbackOrganizationId] : null;
+  const filterIds = Array.isArray(scope.filterIds) ? scope.filterIds.filter((id) => typeof id === "string" && id.length > 0) : null;
+  if (filterIds === null) {
+    if (scope.allowedIds === null) return null;
+    return fallbackOrganizationId ? [fallbackOrganizationId] : null;
+  }
+  if (filterIds.length > 0) return Array.from(new Set(filterIds));
+  if (!fallbackOrganizationId) return [];
+  const allowedIds = Array.isArray(scope.allowedIds) ? scope.allowedIds : null;
+  if (allowedIds === null || allowedIds.length === 0 || allowedIds.includes(fallbackOrganizationId)) {
+    return [fallbackOrganizationId];
+  }
+  return [];
+}
+export {
+  CUSTOMER_SCOPE_JOIN_ALIAS,
+  buildCustomerScopeListFilter,
+  countGroupMembershipsOutsideScope,
+  customerScopeJoin,
+  findCustomerInScope,
+  isCustomerInScope,
+  organizationIdsFromScope
+};
+//# sourceMappingURL=customerScope.js.map

package/dist/modules/customer_groups/lib/customerScope.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_groups/lib/customerScope.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OrganizationScope } from '@open-mercato/shared/lib/auth/principal-service'\nimport type { QueryJoinEdge } from '@open-mercato/shared/lib/query/types'\n\n// Groups are tenant-scoped, but the customers a membership points at are\n// organization-scoped. Every membership read/write that names a customer \u2014 and\n// the explain-terms panel \u2014 must therefore check that the customer is visible in\n// the caller's organization scope, or a user limited to organization A could read\n// or change the groups (and so the pricing and terms) of organization B's customers.\n//\n// `customers` is read here purely as data access (raw SQL against its known table\n// name, taken from `customers/data/entities.ts` `@Entity({ tableName })`) \u2014 never as\n// a module import \u2014 the same \"FK-id + snapshot\" coupling rule `lib/reconcile.ts`\n// follows for `catalog`/`sales`.\nconst CUSTOMER_TABLE = 'customer_entities'\n\nexport type CustomerScope = {\n  tenantId: string\n  // Same contract as `CrudCtx.organizationIds`: `null` is an unrestricted caller,\n  // an empty array is a caller with no visible organization.\n  organizationIds: string[] | null\n}\n\nasync function isCustomerTablePresent(em: EntityManager): Promise<boolean> {\n  const rows = await em.getConnection().execute('select to_regclass(?) is not null as present', [CUSTOMER_TABLE])\n  return Array.isArray(rows) && (rows[0] as { present?: unknown } | undefined)?.present === true\n}\n\nexport type CustomerInScope = { organizationId: string | null }\n\n// `customers` is optional: when its table is absent no customer can be resolved, so\n// every reference reads as \"not found\" (the callers' existing 400/404 path).\nexport async function findCustomerInScope(\n  em: EntityManager,\n  customerId: string,\n  scope: CustomerScope,\n  options: { includeDeleted?: boolean } = {},\n): Promise<CustomerInScope | null> {\n  const organizationIds = scope.organizationIds\n  if (Array.isArray(organizationIds) && organizationIds.length === 0) return null\n  if (!(await isCustomerTablePresent(em))) return null\n  const params: string[] = [customerId, scope.tenantId]\n  let sql = `select organization_id from ${CUSTOMER_TABLE} where id = ? and tenant_id = ?`\n  if (!options.includeDeleted) sql += ' and deleted_at is null'\n  if (Array.isArray(organizationIds)) {\n    sql += ` and organization_id in (${organizationIds.map(() => '?').join(', ')})`\n    params.push(...organizationIds)\n  }\n  sql += ' limit 1'\n  const rows = await em.getConnection().execute(sql, params)\n  if (!Array.isArray(rows) || rows.length === 0) return null\n  const row = rows[0] as { organization_id?: unknown } | null | undefined\n  const organizationId = row && typeof row.organization_id === 'string' ? row.organization_id : null\n  return { organizationId }\n}\n\nexport async function isCustomerInScope(\n  em: EntityManager,\n  customerId: string,\n  scope: CustomerScope,\n  options: { includeDeleted?: boolean } = {},\n): Promise<boolean> {\n  return (await findCustomerInScope(em, customerId, scope, options)) !== null\n}\n\nconst MEMBERSHIP_TABLE = 'customer_group_memberships'\n\n// A group write that retires memberships in bulk (the group delete cascade) must not\n// reach a membership the caller could not remove one by one. Counts the group's live\n// memberships whose customer is outside the caller's organizations; an unrestricted\n// caller (`organizationIds: null`) never has any. A customer soft-deleted inside the\n// caller's organizations still counts as in scope, exactly like the membership routes'\n// `includeDeleted` lookup. Without a `customers` table no membership can be checked,\n// and none can have been created through the membership routes, so nothing counts.\nexport async function countGroupMembershipsOutsideScope(\n  em: EntityManager,\n  groupId: string,\n  scope: CustomerScope,\n): Promise<number> {\n  const organizationIds = scope.organizationIds\n  if (organizationIds === null) return 0\n  const params: string[] = [scope.tenantId, groupId]\n  let sql = `select count(*) as total from ${MEMBERSHIP_TABLE} m where m.tenant_id = ? and m.group_id = ? and m.deleted_at is null`\n  if (organizationIds.length > 0) {\n    if (!(await isCustomerTablePresent(em))) return 0\n    sql += ` and not exists (select 1 from ${CUSTOMER_TABLE} c where c.id = m.customer_id and c.tenant_id = m.tenant_id`\n    sql += ` and c.organization_id in (${organizationIds.map(() => '?').join(', ')}))`\n    params.push(...organizationIds)\n  }\n  const rows = await em.getConnection().execute(sql, params)\n  const total = Array.isArray(rows) ? Number((rows[0] as { total?: unknown } | undefined)?.total ?? 0) : 0\n  return Number.isFinite(total) ? total : 0\n}\n\n// Membership lists that do not name a customer (by group, by id, or unfiltered) are\n// narrowed inside the list query itself: the query engine turns a filter on a join\n// alias into a correlated `exists (select 1 from customer_entities ...)` that also\n// carries the query's tenant guard. Its bind parameters grow with the caller's\n// organization count, never with the number of memberships in the tenant.\nexport const CUSTOMER_SCOPE_JOIN_ALIAS = 'scope_customer'\n\nexport const customerScopeJoin: QueryJoinEdge = {\n  alias: CUSTOMER_SCOPE_JOIN_ALIAS,\n  table: CUSTOMER_TABLE,\n  from: { field: 'customer_id' },\n  to: { field: 'id' },\n  type: 'inner',\n}\n\n// Only call it for a restricted caller (`organizationIds` is an array). Returns null\n// when nothing can be visible \u2014 no organization, or no `customers` table to join \u2014\n// so the caller answers with an empty list instead of querying a missing table.\nexport async function buildCustomerScopeListFilter(\n  em: EntityManager,\n  organizationIds: string[],\n): Promise<Record<string, { $in: string[] }> | null> {\n  const uniqueOrganizationIds = Array.from(new Set(organizationIds))\n  if (uniqueOrganizationIds.length === 0) return null\n  if (!(await isCustomerTablePresent(em))) return null\n  return { [`${CUSTOMER_SCOPE_JOIN_ALIAS}.organization_id`]: { $in: uniqueOrganizationIds } }\n}\n\n// Hand-written routes resolve an `OrganizationScope` themselves; this derives the\n// `organizationIds` list exactly the way `makeCrudRoute` derives `ctx.organizationIds`\n// from the same scope, so the memberships CRUD and explain-terms enforce one rule.\nexport function organizationIdsFromScope(\n  scope: OrganizationScope | null,\n  fallbackOrganizationId: string | null,\n): string[] | null {\n  if (!scope) return fallbackOrganizationId ? [fallbackOrganizationId] : null\n  const filterIds = Array.isArray(scope.filterIds)\n    ? scope.filterIds.filter((id): id is string => typeof id === 'string' && id.length > 0)\n    : null\n  if (filterIds === null) {\n    if (scope.allowedIds === null) return null\n    return fallbackOrganizationId ? [fallbackOrganizationId] : null\n  }\n  if (filterIds.length > 0) return Array.from(new Set(filterIds))\n  if (!fallbackOrganizationId) return []\n  const allowedIds = Array.isArray(scope.allowedIds) ? scope.allowedIds : null\n  if (allowedIds === null || allowedIds.length === 0 || allowedIds.includes(fallbackOrganizationId)) {\n    return [fallbackOrganizationId]\n  }\n  return []\n}\n"],
+  "mappings": "AAcA,MAAM,iBAAiB;AASvB,eAAe,uBAAuB,IAAqC;AACzE,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE,QAAQ,gDAAgD,CAAC,cAAc,CAAC;AAC9G,SAAO,MAAM,QAAQ,IAAI,KAAM,KAAK,CAAC,GAAyC,YAAY;AAC5F;AAMA,eAAsB,oBACpB,IACA,YACA,OACA,UAAwC,CAAC,GACR;AACjC,QAAM,kBAAkB,MAAM;AAC9B,MAAI,MAAM,QAAQ,eAAe,KAAK,gBAAgB,WAAW,EAAG,QAAO;AAC3E,MAAI,CAAE,MAAM,uBAAuB,EAAE,EAAI,QAAO;AAChD,QAAM,SAAmB,CAAC,YAAY,MAAM,QAAQ;AACpD,MAAI,MAAM,+BAA+B,cAAc;AACvD,MAAI,CAAC,QAAQ,eAAgB,QAAO;AACpC,MAAI,MAAM,QAAQ,eAAe,GAAG;AAClC,WAAO,4BAA4B,gBAAgB,IAAI,MAAM,GAAG,EAAE,KAAK,IAAI,CAAC;AAC5E,WAAO,KAAK,GAAG,eAAe;AAAA,EAChC;AACA,SAAO;AACP,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE,QAAQ,KAAK,MAAM;AACzD,MAAI,CAAC,MAAM,QAAQ,IAAI,KAAK,KAAK,WAAW,EAAG,QAAO;AACtD,QAAM,MAAM,KAAK,CAAC;AAClB,QAAM,iBAAiB,OAAO,OAAO,IAAI,oBAAoB,WAAW,IAAI,kBAAkB;AAC9F,SAAO,EAAE,eAAe;AAC1B;AAEA,eAAsB,kBACpB,IACA,YACA,OACA,UAAwC,CAAC,GACvB;AAClB,SAAQ,MAAM,oBAAoB,IAAI,YAAY,OAAO,OAAO,MAAO;AACzE;AAEA,MAAM,mBAAmB;AASzB,eAAsB,kCACpB,IACA,SACA,OACiB;AACjB,QAAM,kBAAkB,MAAM;AAC9B,MAAI,oBAAoB,KAAM,QAAO;AACrC,QAAM,SAAmB,CAAC,MAAM,UAAU,OAAO;AACjD,MAAI,MAAM,iCAAiC,gBAAgB;AAC3D,MAAI,gBAAgB,SAAS,GAAG;AAC9B,QAAI,CAAE,MAAM,uBAAuB,EAAE,EAAI,QAAO;AAChD,WAAO,kCAAkC,cAAc;AACvD,WAAO,8BAA8B,gBAAgB,IAAI,MAAM,GAAG,EAAE,KAAK,IAAI,CAAC;AAC9E,WAAO,KAAK,GAAG,eAAe;AAAA,EAChC;AACA,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE,QAAQ,KAAK,MAAM;AACzD,QAAM,QAAQ,MAAM,QAAQ,IAAI,IAAI,OAAQ,KAAK,CAAC,GAAuC,SAAS,CAAC,IAAI;AACvG,SAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AAC1C;AAOO,MAAM,4BAA4B;AAElC,MAAM,oBAAmC;AAAA,EAC9C,OAAO;AAAA,EACP,OAAO;AAAA,EACP,MAAM,EAAE,OAAO,cAAc;AAAA,EAC7B,IAAI,EAAE,OAAO,KAAK;AAAA,EAClB,MAAM;AACR;AAKA,eAAsB,6BACpB,IACA,iBACmD;AACnD,QAAM,wBAAwB,MAAM,KAAK,IAAI,IAAI,eAAe,CAAC;AACjE,MAAI,sBAAsB,WAAW,EAAG,QAAO;AAC/C,MAAI,CAAE,MAAM,uBAAuB,EAAE,EAAI,QAAO;AAChD,SAAO,EAAE,CAAC,GAAG,yBAAyB,kBAAkB,GAAG,EAAE,KAAK,sBAAsB,EAAE;AAC5F;AAKO,SAAS,yBACd,OACA,wBACiB;AACjB,MAAI,CAAC,MAAO,QAAO,yBAAyB,CAAC,sBAAsB,IAAI;AACvE,QAAM,YAAY,MAAM,QAAQ,MAAM,SAAS,IAC3C,MAAM,UAAU,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC,IACpF;AACJ,MAAI,cAAc,MAAM;AACtB,QAAI,MAAM,eAAe,KAAM,QAAO;AACtC,WAAO,yBAAyB,CAAC,sBAAsB,IAAI;AAAA,EAC7D;AACA,MAAI,UAAU,SAAS,EAAG,QAAO,MAAM,KAAK,IAAI,IAAI,SAAS,CAAC;AAC9D,MAAI,CAAC,uBAAwB,QAAO,CAAC;AACrC,QAAM,aAAa,MAAM,QAAQ,MAAM,UAAU,IAAI,MAAM,aAAa;AACxE,MAAI,eAAe,QAAQ,WAAW,WAAW,KAAK,WAAW,SAAS,sBAAsB,GAAG;AACjG,WAAO,CAAC,sBAAsB;AAAA,EAChC;AACA,SAAO,CAAC;AACV;",
+  "names": []
+}

package/dist/modules/customer_groups/lib/groupEvents.js

@@ -0,0 +1,31 @@
+import { canonicalizeResourceTag, invalidateCrudCache } from "@open-mercato/shared/lib/crud/cache";
+import { emitCustomerGroupsEvent } from "../events.js";
+async function emitCustomerGroupLifecycleEvent(eventId, group) {
+  await emitCustomerGroupsEvent(
+    eventId,
+    { id: group.id, organizationId: null, tenantId: group.tenantId },
+    { persistent: true, tenantId: group.tenantId, organizationId: null }
+  );
+}
+const CUSTOMER_GROUP_CACHE_RESOURCE = canonicalizeResourceTag("customer_groups.group") ?? "customer_groups.group";
+const CUSTOMER_GROUP_CACHE_ALIASES = [canonicalizeResourceTag("CustomerGroup") ?? "customer.group"];
+async function announceCustomerGroupTermsUpdated(container, terms) {
+  await invalidateCrudCache(
+    container,
+    CUSTOMER_GROUP_CACHE_RESOURCE,
+    { id: terms.groupId, tenantId: terms.tenantId, organizationId: null },
+    terms.tenantId,
+    "updated",
+    CUSTOMER_GROUP_CACHE_ALIASES
+  );
+  await emitCustomerGroupsEvent(
+    "customer_groups.terms.updated",
+    { id: terms.id, groupId: terms.groupId, organizationId: null, tenantId: terms.tenantId },
+    { persistent: true, tenantId: terms.tenantId, organizationId: null }
+  );
+}
+export {
+  announceCustomerGroupTermsUpdated,
+  emitCustomerGroupLifecycleEvent
+};
+//# sourceMappingURL=groupEvents.js.map

package/dist/modules/customer_groups/lib/groupEvents.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_groups/lib/groupEvents.ts"],
+  "sourcesContent": ["import type { CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { canonicalizeResourceTag, invalidateCrudCache } from '@open-mercato/shared/lib/crud/cache'\nimport { emitCustomerGroupsEvent } from '../events'\n\nexport type CustomerGroupLifecycleEventId =\n  | 'customer_groups.group.created'\n  | 'customer_groups.group.updated'\n  | 'customer_groups.group.deleted'\n\n// For group writes that bypass the group CRUD route (drag-reorder, reconcile adopt).\n// Emits the exact payload and options that route's `events:` config produces through\n// the data engine: `{ id, organizationId, tenantId }`, persistent, with\n// `organizationId: null` because the route declares `orgField: null` (groups are\n// tenant-scoped), so subscribers cannot tell the two write paths apart.\nexport async function emitCustomerGroupLifecycleEvent(\n  eventId: CustomerGroupLifecycleEventId,\n  group: { id: string; tenantId: string },\n): Promise<void> {\n  await emitCustomerGroupsEvent(\n    eventId,\n    { id: group.id, organizationId: null, tenantId: group.tenantId },\n    { persistent: true, tenantId: group.tenantId, organizationId: null },\n  )\n}\n\nconst CUSTOMER_GROUP_CACHE_RESOURCE = canonicalizeResourceTag('customer_groups.group') ?? 'customer_groups.group'\nconst CUSTOMER_GROUP_CACHE_ALIASES = [canonicalizeResourceTag('CustomerGroup') ?? 'customer.group']\n\n// A terms write changes the resolved pricing and terms of every member of the group, so\n// it flushes the owning group's cache tags (the same tags a group update flushes) and\n// announces `customer_groups.terms.updated` for caches keyed on the group or its members.\n// Call it only once the write committed.\nexport async function announceCustomerGroupTermsUpdated(\n  container: CrudCtx['container'],\n  terms: { id: string; groupId: string; tenantId: string },\n): Promise<void> {\n  await invalidateCrudCache(\n    container,\n    CUSTOMER_GROUP_CACHE_RESOURCE,\n    { id: terms.groupId, tenantId: terms.tenantId, organizationId: null },\n    terms.tenantId,\n    'updated',\n    CUSTOMER_GROUP_CACHE_ALIASES,\n  )\n  await emitCustomerGroupsEvent(\n    'customer_groups.terms.updated',\n    { id: terms.id, groupId: terms.groupId, organizationId: null, tenantId: terms.tenantId },\n    { persistent: true, tenantId: terms.tenantId, organizationId: null },\n  )\n}\n"],
+  "mappings": "AACA,SAAS,yBAAyB,2BAA2B;AAC7D,SAAS,+BAA+B;AAYxC,eAAsB,gCACpB,SACA,OACe;AACf,QAAM;AAAA,IACJ;AAAA,IACA,EAAE,IAAI,MAAM,IAAI,gBAAgB,MAAM,UAAU,MAAM,SAAS;AAAA,IAC/D,EAAE,YAAY,MAAM,UAAU,MAAM,UAAU,gBAAgB,KAAK;AAAA,EACrE;AACF;AAEA,MAAM,gCAAgC,wBAAwB,uBAAuB,KAAK;AAC1F,MAAM,+BAA+B,CAAC,wBAAwB,eAAe,KAAK,gBAAgB;AAMlG,eAAsB,kCACpB,WACA,OACe;AACf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,MAAM,SAAS,UAAU,MAAM,UAAU,gBAAgB,KAAK;AAAA,IACpE,MAAM;AAAA,IACN;AAAA,IACA;AAAA,EACF;AACA,QAAM;AAAA,IACJ;AAAA,IACA,EAAE,IAAI,MAAM,IAAI,SAAS,MAAM,SAAS,gBAAgB,MAAM,UAAU,MAAM,SAAS;AAAA,IACvF,EAAE,YAAY,MAAM,UAAU,MAAM,UAAU,gBAAgB,KAAK;AAAA,EACrE;AACF;",
+  "names": []
+}

package/dist/modules/customer_groups/lib/priceKindScope.js

@@ -0,0 +1,50 @@
+import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
+const PRICE_KIND_TABLE = "catalog_price_kinds";
+async function isPriceKindInTenant(em, priceKindId, tenantId) {
+  const connection = em.getConnection();
+  const tableRows = await connection.execute("select to_regclass(?) is not null as present", [PRICE_KIND_TABLE]);
+  const tablePresent = Array.isArray(tableRows) && tableRows[0]?.present === true;
+  if (!tablePresent) return true;
+  const rows = await connection.execute(
+    `select 1 from ${PRICE_KIND_TABLE} where id = ? and tenant_id = ? and deleted_at is null limit 1`,
+    [priceKindId, tenantId]
+  );
+  return Array.isArray(rows) && rows.length > 0;
+}
+async function listTenantPriceKinds(em, tenantId, options) {
+  const connection = em.getConnection();
+  const tableRows = await connection.execute("select to_regclass(?) is not null as present", [PRICE_KIND_TABLE]);
+  const tablePresent = Array.isArray(tableRows) && tableRows[0]?.present === true;
+  if (!tablePresent) return [];
+  const conditions = ["tenant_id = ?", "deleted_at is null"];
+  const params = [tenantId];
+  if (options.ids && options.ids.length) {
+    conditions.push(`id in (${options.ids.map(() => "?").join(", ")})`);
+    params.push(...options.ids);
+  }
+  const search = options.search?.trim();
+  if (search) {
+    const like = `%${escapeLikePattern(search)}%`;
+    conditions.push("(code ilike ? or title ilike ?)");
+    params.push(like, like);
+  }
+  params.push(options.limit);
+  const rows = await connection.execute(
+    `select id, code, title from ${PRICE_KIND_TABLE} where ${conditions.join(" and ")} order by title asc, code asc limit ?`,
+    params
+  );
+  if (!Array.isArray(rows)) return [];
+  return rows.map((row) => {
+    const record = row;
+    return {
+      id: String(record.id),
+      code: typeof record.code === "string" ? record.code : "",
+      title: typeof record.title === "string" ? record.title : ""
+    };
+  });
+}
+export {
+  isPriceKindInTenant,
+  listTenantPriceKinds
+};
+//# sourceMappingURL=priceKindScope.js.map

package/dist/modules/customer_groups/lib/priceKindScope.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_groups/lib/priceKindScope.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\n\n// Terms reference a `catalog` price kind by id only (FK-id coupling, no module\n// import). `catalog` is optional, so its table may be absent; the id is then only\n// shape-checked, as before, since there is nothing it could resolve against.\nconst PRICE_KIND_TABLE = 'catalog_price_kinds'\n\nexport async function isPriceKindInTenant(\n  em: EntityManager,\n  priceKindId: string,\n  tenantId: string,\n): Promise<boolean> {\n  const connection = em.getConnection()\n  const tableRows = await connection.execute('select to_regclass(?) is not null as present', [PRICE_KIND_TABLE])\n  const tablePresent = Array.isArray(tableRows) && (tableRows[0] as { present?: unknown } | undefined)?.present === true\n  if (!tablePresent) return true\n  const rows = await connection.execute(\n    `select 1 from ${PRICE_KIND_TABLE} where id = ? and tenant_id = ? and deleted_at is null limit 1`,\n    [priceKindId, tenantId],\n  )\n  return Array.isArray(rows) && rows.length > 0\n}\n\nexport type TenantPriceKindOption = { id: string; code: string; title: string }\n\n// Terms managers pick a price kind without holding `catalog.settings.manage` (which\n// gates `/api/catalog/price-kinds`), so the picker reads the same tenant-scoped rows\n// through `customer_groups`' own route. Only id/code/title leave this helper.\nexport async function listTenantPriceKinds(\n  em: EntityManager,\n  tenantId: string,\n  options: { search?: string | null; ids?: string[] | null; limit: number },\n): Promise<TenantPriceKindOption[]> {\n  const connection = em.getConnection()\n  const tableRows = await connection.execute('select to_regclass(?) is not null as present', [PRICE_KIND_TABLE])\n  const tablePresent = Array.isArray(tableRows) && (tableRows[0] as { present?: unknown } | undefined)?.present === true\n  if (!tablePresent) return []\n  const conditions = ['tenant_id = ?', 'deleted_at is null']\n  const params: unknown[] = [tenantId]\n  if (options.ids && options.ids.length) {\n    conditions.push(`id in (${options.ids.map(() => '?').join(', ')})`)\n    params.push(...options.ids)\n  }\n  const search = options.search?.trim()\n  if (search) {\n    const like = `%${escapeLikePattern(search)}%`\n    conditions.push('(code ilike ? or title ilike ?)')\n    params.push(like, like)\n  }\n  params.push(options.limit)\n  const rows = await connection.execute(\n    `select id, code, title from ${PRICE_KIND_TABLE} where ${conditions.join(' and ')} order by title asc, code asc limit ?`,\n    params,\n  )\n  if (!Array.isArray(rows)) return []\n  return rows.map((row) => {\n    const record = row as { id?: unknown; code?: unknown; title?: unknown }\n    return {\n      id: String(record.id),\n      code: typeof record.code === 'string' ? record.code : '',\n      title: typeof record.title === 'string' ? record.title : '',\n    }\n  })\n}\n"],
+  "mappings": "AACA,SAAS,yBAAyB;AAKlC,MAAM,mBAAmB;AAEzB,eAAsB,oBACpB,IACA,aACA,UACkB;AAClB,QAAM,aAAa,GAAG,cAAc;AACpC,QAAM,YAAY,MAAM,WAAW,QAAQ,gDAAgD,CAAC,gBAAgB,CAAC;AAC7G,QAAM,eAAe,MAAM,QAAQ,SAAS,KAAM,UAAU,CAAC,GAAyC,YAAY;AAClH,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,OAAO,MAAM,WAAW;AAAA,IAC5B,iBAAiB,gBAAgB;AAAA,IACjC,CAAC,aAAa,QAAQ;AAAA,EACxB;AACA,SAAO,MAAM,QAAQ,IAAI,KAAK,KAAK,SAAS;AAC9C;AAOA,eAAsB,qBACpB,IACA,UACA,SACkC;AAClC,QAAM,aAAa,GAAG,cAAc;AACpC,QAAM,YAAY,MAAM,WAAW,QAAQ,gDAAgD,CAAC,gBAAgB,CAAC;AAC7G,QAAM,eAAe,MAAM,QAAQ,SAAS,KAAM,UAAU,CAAC,GAAyC,YAAY;AAClH,MAAI,CAAC,aAAc,QAAO,CAAC;AAC3B,QAAM,aAAa,CAAC,iBAAiB,oBAAoB;AACzD,QAAM,SAAoB,CAAC,QAAQ;AACnC,MAAI,QAAQ,OAAO,QAAQ,IAAI,QAAQ;AACrC,eAAW,KAAK,UAAU,QAAQ,IAAI,IAAI,MAAM,GAAG,EAAE,KAAK,IAAI,CAAC,GAAG;AAClE,WAAO,KAAK,GAAG,QAAQ,GAAG;AAAA,EAC5B;AACA,QAAM,SAAS,QAAQ,QAAQ,KAAK;AACpC,MAAI,QAAQ;AACV,UAAM,OAAO,IAAI,kBAAkB,MAAM,CAAC;AAC1C,eAAW,KAAK,iCAAiC;AACjD,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB;AACA,SAAO,KAAK,QAAQ,KAAK;AACzB,QAAM,OAAO,MAAM,WAAW;AAAA,IAC5B,+BAA+B,gBAAgB,UAAU,WAAW,KAAK,OAAO,CAAC;AAAA,IACjF;AAAA,EACF;AACA,MAAI,CAAC,MAAM,QAAQ,IAAI,EAAG,QAAO,CAAC;AAClC,SAAO,KAAK,IAAI,CAAC,QAAQ;AACvB,UAAM,SAAS;AACf,WAAO;AAAA,MACL,IAAI,OAAO,OAAO,EAAE;AAAA,MACpB,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,MACtD,OAAO,OAAO,OAAO,UAAU,WAAW,OAAO,QAAQ;AAAA,IAC3D;AAAA,EACF,CAAC;AACH;",
+  "names": []
+}