@open-mercato/core 0.9.1-develop.7473.1.de5b22888f → 0.9.1-develop.7475.1.28ca93ed97

package/dist/modules/catalog/lib/productFilters.js

@@ -0,0 +1,273 @@
+import { z } from "zod";
+import { raw } from "@mikro-orm/postgresql";
+import { buildCustomFieldFiltersFromQuery } from "@open-mercato/shared/lib/crud/custom-fields";
+import { buildScopedWhere } from "@open-mercato/shared/lib/api/crud";
+import { parseBooleanFlag } from "@open-mercato/shared/lib/boolean";
+import { sanitizeSearchTerm } from "@open-mercato/shared/lib/query/sanitizeSearchTerm";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { warnOnEncryptedLikeFilter } from "@open-mercato/shared/lib/encryption/likeFilterWarning";
+import { buildAccentInsensitiveContainsPatternSql } from "@open-mercato/shared/lib/db/accentInsensitiveSearch";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { fieldsetCodeRegex } from "@open-mercato/core/modules/entities/data/validators";
+import { E } from "../../../generated/entities.ids.generated.js";
+import {
+  CatalogOffer,
+  CatalogProduct,
+  CatalogProductCategory,
+  CatalogProductCategoryAssignment,
+  CatalogProductTagAssignment
+} from "../data/entities.js";
+import { CATALOG_PRODUCT_TYPES } from "../data/types.js";
+import { PRODUCT_SEARCH_COLUMNS, PRODUCT_SEARCH_EXPRESSION_SQL } from "./productSearch.js";
+const logger = createLogger("catalog");
+const UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/;
+const catalogProductFilterQuerySchema = z.object({
+  page: z.coerce.number().min(1).default(1),
+  pageSize: z.coerce.number().min(1).max(100).default(50),
+  id: z.string().uuid().optional(),
+  search: z.string().optional(),
+  status: z.string().optional(),
+  isActive: z.string().optional(),
+  configurable: z.string().optional(),
+  productType: z.enum(CATALOG_PRODUCT_TYPES).optional(),
+  channelIds: z.string().optional(),
+  channelId: z.string().uuid().optional(),
+  categoryIds: z.string().optional(),
+  tagIds: z.string().optional(),
+  offerId: z.string().uuid().optional(),
+  userId: z.string().uuid().optional(),
+  userGroupId: z.string().uuid().optional(),
+  customerId: z.string().uuid().optional(),
+  customerGroupId: z.string().uuid().optional(),
+  quantity: z.coerce.number().min(1).max(1e5).optional(),
+  quantityUnit: z.string().trim().max(50).optional(),
+  priceDate: z.string().optional(),
+  sortField: z.string().optional(),
+  sortDir: z.enum(["asc", "desc"]).optional(),
+  withDeleted: z.coerce.boolean().optional(),
+  customFieldset: z.string().regex(fieldsetCodeRegex).optional()
+}).passthrough();
+function parseIdList(raw2) {
+  if (!raw2) return [];
+  return raw2.split(",").map((value) => value.trim()).filter((value) => UUID_REGEX.test(value));
+}
+async function buildProductFilters(query, ctx, options = {}) {
+  const filters = {};
+  const em = ctx.container.resolve("em").fork();
+  const restrictedProductIds = { value: null };
+  const intersectProductIds = (ids) => {
+    const normalized = ids.filter(
+      (id) => typeof id === "string" && id.trim().length > 0
+    );
+    const current = new Set(normalized);
+    if (!current.size) {
+      restrictedProductIds.value = /* @__PURE__ */ new Set();
+      return;
+    }
+    if (!restrictedProductIds.value) {
+      restrictedProductIds.value = current;
+      return;
+    }
+    restrictedProductIds.value = new Set(
+      Array.from(restrictedProductIds.value).filter((id) => current.has(id))
+    );
+  };
+  const applyRestrictedProducts = () => {
+    if (!restrictedProductIds.value) return;
+    if (restrictedProductIds.value.size === 0) {
+      filters.id = { $eq: "00000000-0000-0000-0000-000000000000" };
+      return;
+    }
+    const ids = Array.from(restrictedProductIds.value);
+    const existing = filters.id;
+    if (existing && typeof existing === "object") {
+      if ("$eq" in existing && typeof existing.$eq === "string") {
+        const target = existing.$eq;
+        if (!restrictedProductIds.value.has(target)) {
+          filters.id = { $eq: "00000000-0000-0000-0000-000000000000" };
+        }
+        return;
+      }
+      if ("$in" in existing && Array.isArray(existing.$in)) {
+        const subset = existing.$in.filter(
+          (id) => restrictedProductIds.value.has(id)
+        );
+        filters.id = subset.length ? { $in: subset } : { $eq: "00000000-0000-0000-0000-000000000000" };
+        return;
+      }
+    }
+    filters.id = ids.length === 1 ? { $eq: ids[0] } : { $in: ids };
+  };
+  if (query.id) {
+    filters.id = { $eq: query.id };
+  }
+  if (query.status && query.status.trim()) {
+    filters.status_entry_id = { $eq: query.status.trim() };
+  }
+  const active = parseBooleanFlag(query.isActive);
+  if (active !== void 0) {
+    filters.is_active = active;
+  }
+  const configurable = parseBooleanFlag(query.configurable);
+  if (configurable !== void 0) {
+    filters.is_configurable = configurable;
+  }
+  if (query.productType) {
+    filters.product_type = { $eq: query.productType };
+  }
+  const scope = {
+    organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,
+    tenantId: ctx.auth?.tenantId ?? null
+  };
+  const scopeWhere = buildScopedWhere(
+    {},
+    {
+      organizationId: scope.organizationId,
+      organizationIds: ctx.organizationIds ?? void 0,
+      tenantId: scope.tenantId,
+      orgField: ctx.organizationIds === null ? null : void 0,
+      softDeleteField: null
+    }
+  );
+  const term = sanitizeSearchTerm(query.search);
+  const channelFilterIds = parseIdList(query.channelIds);
+  const categoryFilterIds = parseIdList(query.categoryIds);
+  const tagFilterIds = parseIdList(query.tagIds);
+  const customFieldset = typeof query.customFieldset === "string" && query.customFieldset.trim().length ? query.customFieldset.trim() : null;
+  const tenantId = ctx.auth?.tenantId ?? null;
+  const searchTask = async () => {
+    if (!term) return null;
+    const [searchMatches] = await Promise.all([
+      findWithDecryption(
+        em,
+        CatalogProduct,
+        {
+          ...scopeWhere,
+          ...query.withDeleted ? {} : { deletedAt: null },
+          [raw(PRODUCT_SEARCH_EXPRESSION_SQL)]: {
+            $ilike: raw(buildAccentInsensitiveContainsPatternSql(), [term])
+          }
+        },
+        { fields: ["id"] },
+        scope
+      ),
+      warnOnEncryptedLikeFilter({
+        em,
+        entityName: CatalogProduct,
+        likeFields: [...PRODUCT_SEARCH_COLUMNS],
+        tenantId: scope.tenantId
+      })
+    ]);
+    return searchMatches.map((product) => product.id).filter((id) => typeof id === "string" && id.length > 0);
+  };
+  const channelTask = async () => {
+    if (!channelFilterIds.length) return null;
+    const offerRows = await findWithDecryption(
+      em,
+      CatalogOffer,
+      {
+        channelId: { $in: channelFilterIds },
+        deletedAt: null,
+        ...scopeWhere
+      },
+      { fields: ["id", "product"] },
+      scope
+    );
+    return offerRows.map(
+      (offer) => typeof offer.product === "string" ? offer.product : offer.product?.id ?? null
+    ).filter((id) => !!id);
+  };
+  const expandCategoryIds = async () => {
+    if (!options.includeCategoryDescendants) return categoryFilterIds;
+    const categories = await findWithDecryption(
+      em,
+      CatalogProductCategory,
+      { id: { $in: categoryFilterIds }, deletedAt: null, ...scopeWhere },
+      { fields: ["id", "descendantIds"] },
+      scope
+    );
+    const expanded = new Set(categoryFilterIds);
+    for (const category of categories) {
+      const descendants = Array.isArray(category.descendantIds) ? category.descendantIds : [];
+      for (const descendantId of descendants) {
+        if (typeof descendantId === "string" && descendantId.length > 0) {
+          expanded.add(descendantId);
+        }
+      }
+    }
+    return Array.from(expanded);
+  };
+  const categoryTask = async () => {
+    if (!categoryFilterIds.length) return null;
+    const categoryIds2 = await expandCategoryIds();
+    const assignments = await findWithDecryption(
+      em,
+      CatalogProductCategoryAssignment,
+      { category: { $in: categoryIds2 }, ...scopeWhere },
+      { fields: ["id", "product"] },
+      scope
+    );
+    return assignments.map(
+      (assignment) => typeof assignment.product === "string" ? assignment.product : assignment.product?.id ?? null
+    ).filter((id) => !!id);
+  };
+  const tagTask = async () => {
+    if (!tagFilterIds.length) return null;
+    const assignments = await findWithDecryption(
+      em,
+      CatalogProductTagAssignment,
+      { tag: { $in: tagFilterIds }, ...scopeWhere },
+      { fields: ["id", "product"] },
+      scope
+    );
+    return assignments.map(
+      (assignment) => typeof assignment.product === "string" ? assignment.product : assignment.product?.id ?? null
+    ).filter((id) => !!id);
+  };
+  const customFieldTask = async () => {
+    try {
+      const scopedEm = ctx.container.resolve("em");
+      return await buildCustomFieldFiltersFromQuery({
+        entityIds: [E.catalog.catalog_product],
+        query,
+        em: scopedEm,
+        tenantId,
+        fieldset: customFieldset ?? void 0
+      });
+    } catch (err) {
+      logger.debug("catalog.products custom field filter error", { err });
+      return {};
+    }
+  };
+  const [searchIds, channelIds, categoryIds, tagIds, cfFilters] = await Promise.all([
+    searchTask(),
+    channelTask(),
+    categoryTask(),
+    tagTask(),
+    customFieldTask()
+  ]);
+  for (const productIds of [searchIds, channelIds, categoryIds, tagIds]) {
+    if (productIds) intersectProductIds(productIds);
+  }
+  Object.assign(filters, cfFilters);
+  applyRestrictedProducts();
+  return filters;
+}
+function scoreProductSearchRelevance(needle, title, sku) {
+  const t = (title ?? "").toLowerCase();
+  const s = (sku ?? "").toLowerCase();
+  if (t === needle) return 0;
+  if (s === needle) return 1;
+  if (t.startsWith(needle)) return 2;
+  if (s.startsWith(needle)) return 3;
+  if (t.includes(needle)) return 4;
+  if (s.includes(needle)) return 5;
+  return 6;
+}
+export {
+  buildProductFilters,
+  catalogProductFilterQuerySchema,
+  parseIdList,
+  scoreProductSearchRelevance
+};
+//# sourceMappingURL=productFilters.js.map

package/dist/modules/catalog/lib/productFilters.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/catalog/lib/productFilters.ts"],
+  "sourcesContent": ["import { z } from \"zod\";\nimport type { EntityManager } from \"@mikro-orm/postgresql\";\nimport { raw } from \"@mikro-orm/postgresql\";\nimport { buildCustomFieldFiltersFromQuery } from \"@open-mercato/shared/lib/crud/custom-fields\";\nimport type { CrudCtx } from \"@open-mercato/shared/lib/crud/factory\";\nimport { buildScopedWhere } from \"@open-mercato/shared/lib/api/crud\";\nimport { parseBooleanFlag } from \"@open-mercato/shared/lib/boolean\";\nimport { sanitizeSearchTerm } from \"@open-mercato/shared/lib/query/sanitizeSearchTerm\";\nimport { findWithDecryption } from \"@open-mercato/shared/lib/encryption/find\";\nimport { warnOnEncryptedLikeFilter } from \"@open-mercato/shared/lib/encryption/likeFilterWarning\";\nimport { buildAccentInsensitiveContainsPatternSql } from \"@open-mercato/shared/lib/db/accentInsensitiveSearch\";\nimport { createLogger } from \"@open-mercato/shared/lib/logger\";\nimport { fieldsetCodeRegex } from \"@open-mercato/core/modules/entities/data/validators\";\nimport { E } from \"#generated/entities.ids.generated\";\nimport {\n  CatalogOffer,\n  CatalogProduct,\n  CatalogProductCategory,\n  CatalogProductCategoryAssignment,\n  CatalogProductTagAssignment,\n} from \"../data/entities\";\nimport { CATALOG_PRODUCT_TYPES } from \"../data/types\";\nimport { PRODUCT_SEARCH_COLUMNS, PRODUCT_SEARCH_EXPRESSION_SQL } from \"./productSearch\";\n\nconst logger = createLogger('catalog')\n\nconst UUID_REGEX =\n  /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/;\n\nexport const catalogProductFilterQuerySchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    pageSize: z.coerce.number().min(1).max(100).default(50),\n    id: z.string().uuid().optional(),\n    search: z.string().optional(),\n    status: z.string().optional(),\n    isActive: z.string().optional(),\n    configurable: z.string().optional(),\n    productType: z.enum(CATALOG_PRODUCT_TYPES).optional(),\n    channelIds: z.string().optional(),\n    channelId: z.string().uuid().optional(),\n    categoryIds: z.string().optional(),\n    tagIds: z.string().optional(),\n    offerId: z.string().uuid().optional(),\n    userId: z.string().uuid().optional(),\n    userGroupId: z.string().uuid().optional(),\n    customerId: z.string().uuid().optional(),\n    customerGroupId: z.string().uuid().optional(),\n    quantity: z.coerce.number().min(1).max(100000).optional(),\n    quantityUnit: z.string().trim().max(50).optional(),\n    priceDate: z.string().optional(),\n    sortField: z.string().optional(),\n    sortDir: z.enum([\"asc\", \"desc\"]).optional(),\n    withDeleted: z.coerce.boolean().optional(),\n    customFieldset: z.string().regex(fieldsetCodeRegex).optional(),\n  })\n  .passthrough();\n\nexport type CatalogProductFilterQuery = z.infer<typeof catalogProductFilterQuerySchema>;\n\nexport type BuildProductFiltersOptions = {\n  includeCategoryDescendants?: boolean;\n};\n\nexport function parseIdList(raw?: string): string[] {\n  if (!raw) return [];\n  return raw\n    .split(\",\")\n    .map((value) => value.trim())\n    .filter((value) => UUID_REGEX.test(value));\n}\n\nexport async function buildProductFilters(\n  query: CatalogProductFilterQuery,\n  ctx: CrudCtx,\n  options: BuildProductFiltersOptions = {},\n): Promise<Record<string, unknown>> {\n  const filters: Record<string, unknown> = {};\n  const em = (ctx.container.resolve(\"em\") as EntityManager).fork();\n  const restrictedProductIds: { value: Set<string> | null } = { value: null };\n\n  const intersectProductIds = (ids: string[]) => {\n    const normalized = ids.filter(\n      (id): id is string => typeof id === \"string\" && id.trim().length > 0,\n    );\n    const current = new Set(normalized);\n    if (!current.size) {\n      restrictedProductIds.value = new Set();\n      return;\n    }\n    if (!restrictedProductIds.value) {\n      restrictedProductIds.value = current;\n      return;\n    }\n    restrictedProductIds.value = new Set(\n      Array.from(restrictedProductIds.value).filter((id) => current.has(id)),\n    );\n  };\n\n  const applyRestrictedProducts = () => {\n    if (!restrictedProductIds.value) return;\n    if (restrictedProductIds.value.size === 0) {\n      filters.id = { $eq: \"00000000-0000-0000-0000-000000000000\" };\n      return;\n    }\n    const ids = Array.from(restrictedProductIds.value);\n    const existing = filters.id as Record<string, unknown> | undefined;\n    if (existing && typeof existing === \"object\") {\n      if (\n        \"$eq\" in existing &&\n        typeof (existing as { $eq?: unknown }).$eq === \"string\"\n      ) {\n        const target = (existing as { $eq: string }).$eq;\n        if (!restrictedProductIds.value.has(target)) {\n          filters.id = { $eq: \"00000000-0000-0000-0000-000000000000\" };\n        }\n        return;\n      }\n      if (\n        \"$in\" in existing &&\n        Array.isArray((existing as { $in?: unknown }).$in)\n      ) {\n        const subset = (existing as { $in: string[] }).$in.filter((id) =>\n          restrictedProductIds.value!.has(id),\n        );\n        filters.id = subset.length\n          ? { $in: subset }\n          : { $eq: \"00000000-0000-0000-0000-000000000000\" };\n        return;\n      }\n    }\n    filters.id = ids.length === 1 ? { $eq: ids[0] } : { $in: ids };\n  };\n  if (query.id) {\n    filters.id = { $eq: query.id };\n  }\n  if (query.status && query.status.trim()) {\n    filters.status_entry_id = { $eq: query.status.trim() };\n  }\n  const active = parseBooleanFlag(query.isActive);\n  if (active !== undefined) {\n    filters.is_active = active;\n  }\n  const configurable = parseBooleanFlag(query.configurable);\n  if (configurable !== undefined) {\n    filters.is_configurable = configurable;\n  }\n  if (query.productType) {\n    filters.product_type = { $eq: query.productType };\n  }\n  const scope = {\n    organizationId: ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null,\n    tenantId: ctx.auth?.tenantId ?? null,\n  };\n  const scopeWhere = buildScopedWhere(\n    {},\n    {\n      organizationId: scope.organizationId,\n      organizationIds: ctx.organizationIds ?? undefined,\n      tenantId: scope.tenantId,\n      orgField: ctx.organizationIds === null ? null : undefined,\n      softDeleteField: null,\n    },\n  );\n  const term = sanitizeSearchTerm(query.search);\n  const channelFilterIds = parseIdList(query.channelIds);\n  const categoryFilterIds = parseIdList(query.categoryIds);\n  const tagFilterIds = parseIdList(query.tagIds);\n  const customFieldset =\n    typeof query.customFieldset === \"string\" &&\n    query.customFieldset.trim().length\n      ? query.customFieldset.trim()\n      : null;\n  const tenantId = ctx.auth?.tenantId ?? null;\n\n  // These prequeries are independent \u2014 each only feeds the final product-id\n  // intersection, none depends on another's result \u2014 so dispatch them together\n  // instead of awaiting one after another (#3179). A task returns null when its\n  // filter is inactive (intersection skipped) or the matched product-id list\n  // (possibly empty) when active, preserving the \"active filter with no matches\n  // => empty result\" behavior.\n  const searchTask = async (): Promise<string[] | null> => {\n    if (!term) return null;\n    // The predicate hides behind a raw() symbol key, which the filter walker in\n    // findWithDecryption cannot see (Object.entries skips symbols), so the\n    // encrypted-ILIKE diagnostic is raised here with the field list instead.\n    // Without it, a tenant that encrypts one of these columns at rest gets an\n    // empty result indistinguishable from a genuine no-match (#5051). It runs\n    // alongside the query rather than before it: it is a development-only\n    // diagnostic and must not add a round trip to the request path.\n    const [searchMatches] = await Promise.all([\n      findWithDecryption(\n        em,\n        CatalogProduct,\n        {\n          ...scopeWhere,\n          ...(query.withDeleted ? {} : { deletedAt: null }),\n          [raw(PRODUCT_SEARCH_EXPRESSION_SQL)]: {\n            $ilike: raw(buildAccentInsensitiveContainsPatternSql(), [term]),\n          },\n        },\n        { fields: [\"id\"] },\n        scope,\n      ),\n      warnOnEncryptedLikeFilter({\n        em,\n        entityName: CatalogProduct,\n        likeFields: [...PRODUCT_SEARCH_COLUMNS],\n        tenantId: scope.tenantId,\n      }),\n    ]);\n    return searchMatches\n      .map((product) => product.id)\n      .filter((id): id is string => typeof id === \"string\" && id.length > 0);\n  };\n\n  const channelTask = async (): Promise<string[] | null> => {\n    if (!channelFilterIds.length) return null;\n    const offerRows = await findWithDecryption(\n      em,\n      CatalogOffer,\n      {\n        channelId: { $in: channelFilterIds },\n        deletedAt: null,\n        ...scopeWhere,\n      },\n      { fields: [\"id\", \"product\"] },\n      scope,\n    );\n    return offerRows\n      .map((offer) =>\n        typeof offer.product === \"string\"\n          ? offer.product\n          : (offer.product?.id ?? null),\n      )\n      .filter((id): id is string => !!id);\n  };\n\n  const expandCategoryIds = async (): Promise<string[]> => {\n    if (!options.includeCategoryDescendants) return categoryFilterIds;\n    const categories = await findWithDecryption(\n      em,\n      CatalogProductCategory,\n      { id: { $in: categoryFilterIds }, deletedAt: null, ...scopeWhere },\n      { fields: [\"id\", \"descendantIds\"] },\n      scope,\n    );\n    const expanded = new Set(categoryFilterIds);\n    for (const category of categories) {\n      const descendants = Array.isArray(category.descendantIds) ? category.descendantIds : [];\n      for (const descendantId of descendants) {\n        if (typeof descendantId === \"string\" && descendantId.length > 0) {\n          expanded.add(descendantId);\n        }\n      }\n    }\n    return Array.from(expanded);\n  };\n\n  const categoryTask = async (): Promise<string[] | null> => {\n    if (!categoryFilterIds.length) return null;\n    const categoryIds = await expandCategoryIds();\n    const assignments = await findWithDecryption(\n      em,\n      CatalogProductCategoryAssignment,\n      { category: { $in: categoryIds }, ...scopeWhere },\n      { fields: [\"id\", \"product\"] },\n      scope,\n    );\n    return assignments\n      .map((assignment) =>\n        typeof assignment.product === \"string\"\n          ? assignment.product\n          : (assignment.product?.id ?? null),\n      )\n      .filter((id): id is string => !!id);\n  };\n\n  const tagTask = async (): Promise<string[] | null> => {\n    if (!tagFilterIds.length) return null;\n    const assignments = await findWithDecryption(\n      em,\n      CatalogProductTagAssignment,\n      { tag: { $in: tagFilterIds }, ...scopeWhere },\n      { fields: [\"id\", \"product\"] },\n      scope,\n    );\n    return assignments\n      .map((assignment) =>\n        typeof assignment.product === \"string\"\n          ? assignment.product\n          : (assignment.product?.id ?? null),\n      )\n      .filter((id): id is string => !!id);\n  };\n\n  const customFieldTask = async (): Promise<Record<string, unknown>> => {\n    try {\n      const scopedEm = ctx.container.resolve(\"em\") as EntityManager;\n      return await buildCustomFieldFiltersFromQuery({\n        entityIds: [E.catalog.catalog_product],\n        query,\n        em: scopedEm,\n        tenantId,\n        fieldset: customFieldset ?? undefined,\n      });\n    } catch (err) {\n      // Custom field filter parsing may fail for non-existent or misconfigured fields.\n      // Fall back to base filters to avoid blocking the product listing.\n      logger.debug('catalog.products custom field filter error', { err });\n      return {};\n    }\n  };\n\n  const [searchIds, channelIds, categoryIds, tagIds, cfFilters] =\n    await Promise.all([\n      searchTask(),\n      channelTask(),\n      categoryTask(),\n      tagTask(),\n      customFieldTask(),\n    ]);\n\n  // Apply intersections in the original order; intersection is commutative, so\n  // the result is identical to the previous sequential pass. An empty array is\n  // still intersected (active filter that matched nothing); null is skipped.\n  for (const productIds of [searchIds, channelIds, categoryIds, tagIds]) {\n    if (productIds) intersectProductIds(productIds);\n  }\n  Object.assign(filters, cfFilters);\n  applyRestrictedProducts();\n  return filters;\n}\n\nexport function scoreProductSearchRelevance(\n  needle: string,\n  title: string | null | undefined,\n  sku: string | null | undefined,\n): number {\n  const t = (title ?? \"\").toLowerCase();\n  const s = (sku ?? \"\").toLowerCase();\n  if (t === needle) return 0;\n  if (s === needle) return 1;\n  if (t.startsWith(needle)) return 2;\n  if (s.startsWith(needle)) return 3;\n  if (t.includes(needle)) return 4;\n  if (s.includes(needle)) return 5;\n  return 6;\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,WAAW;AACpB,SAAS,wCAAwC;AAEjD,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AACjC,SAAS,0BAA0B;AACnC,SAAS,0BAA0B;AACnC,SAAS,iCAAiC;AAC1C,SAAS,gDAAgD;AACzD,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB;AAClC,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,wBAAwB,qCAAqC;AAEtE,MAAM,SAAS,aAAa,SAAS;AAErC,MAAM,aACJ;AAEK,MAAM,kCAAkC,EAC5C,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,aAAa,EAAE,KAAK,qBAAqB,EAAE,SAAS;AAAA,EACpD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACvC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC5C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA,EACxD,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACjD,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACzC,gBAAgB,EAAE,OAAO,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAC/D,CAAC,EACA,YAAY;AAQR,SAAS,YAAYA,MAAwB;AAClD,MAAI,CAACA,KAAK,QAAO,CAAC;AAClB,SAAOA,KACJ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,WAAW,KAAK,KAAK,CAAC;AAC7C;AAEA,eAAsB,oBACpB,OACA,KACA,UAAsC,CAAC,GACL;AAClC,QAAM,UAAmC,CAAC;AAC1C,QAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAM,uBAAsD,EAAE,OAAO,KAAK;AAE1E,QAAM,sBAAsB,CAAC,QAAkB;AAC7C,UAAM,aAAa,IAAI;AAAA,MACrB,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,KAAK,EAAE,SAAS;AAAA,IACrE;AACA,UAAM,UAAU,IAAI,IAAI,UAAU;AAClC,QAAI,CAAC,QAAQ,MAAM;AACjB,2BAAqB,QAAQ,oBAAI,IAAI;AACrC;AAAA,IACF;AACA,QAAI,CAAC,qBAAqB,OAAO;AAC/B,2BAAqB,QAAQ;AAC7B;AAAA,IACF;AACA,yBAAqB,QAAQ,IAAI;AAAA,MAC/B,MAAM,KAAK,qBAAqB,KAAK,EAAE,OAAO,CAAC,OAAO,QAAQ,IAAI,EAAE,CAAC;AAAA,IACvE;AAAA,EACF;AAEA,QAAM,0BAA0B,MAAM;AACpC,QAAI,CAAC,qBAAqB,MAAO;AACjC,QAAI,qBAAqB,MAAM,SAAS,GAAG;AACzC,cAAQ,KAAK,EAAE,KAAK,uCAAuC;AAC3D;AAAA,IACF;AACA,UAAM,MAAM,MAAM,KAAK,qBAAqB,KAAK;AACjD,UAAM,WAAW,QAAQ;AACzB,QAAI,YAAY,OAAO,aAAa,UAAU;AAC5C,UACE,SAAS,YACT,OAAQ,SAA+B,QAAQ,UAC/C;AACA,cAAM,SAAU,SAA6B;AAC7C,YAAI,CAAC,qBAAqB,MAAM,IAAI,MAAM,GAAG;AAC3C,kBAAQ,KAAK,EAAE,KAAK,uCAAuC;AAAA,QAC7D;AACA;AAAA,MACF;AACA,UACE,SAAS,YACT,MAAM,QAAS,SAA+B,GAAG,GACjD;AACA,cAAM,SAAU,SAA+B,IAAI;AAAA,UAAO,CAAC,OACzD,qBAAqB,MAAO,IAAI,EAAE;AAAA,QACpC;AACA,gBAAQ,KAAK,OAAO,SAChB,EAAE,KAAK,OAAO,IACd,EAAE,KAAK,uCAAuC;AAClD;AAAA,MACF;AAAA,IACF;AACA,YAAQ,KAAK,IAAI,WAAW,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,IAAI;AAAA,EAC/D;AACA,MAAI,MAAM,IAAI;AACZ,YAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,EAC/B;AACA,MAAI,MAAM,UAAU,MAAM,OAAO,KAAK,GAAG;AACvC,YAAQ,kBAAkB,EAAE,KAAK,MAAM,OAAO,KAAK,EAAE;AAAA,EACvD;AACA,QAAM,SAAS,iBAAiB,MAAM,QAAQ;AAC9C,MAAI,WAAW,QAAW;AACxB,YAAQ,YAAY;AAAA,EACtB;AACA,QAAM,eAAe,iBAAiB,MAAM,YAAY;AACxD,MAAI,iBAAiB,QAAW;AAC9B,YAAQ,kBAAkB;AAAA,EAC5B;AACA,MAAI,MAAM,aAAa;AACrB,YAAQ,eAAe,EAAE,KAAK,MAAM,YAAY;AAAA,EAClD;AACA,QAAM,QAAQ;AAAA,IACZ,gBAAgB,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAAA,IACjE,UAAU,IAAI,MAAM,YAAY;AAAA,EAClC;AACA,QAAM,aAAa;AAAA,IACjB,CAAC;AAAA,IACD;AAAA,MACE,gBAAgB,MAAM;AAAA,MACtB,iBAAiB,IAAI,mBAAmB;AAAA,MACxC,UAAU,MAAM;AAAA,MAChB,UAAU,IAAI,oBAAoB,OAAO,OAAO;AAAA,MAChD,iBAAiB;AAAA,IACnB;AAAA,EACF;AACA,QAAM,OAAO,mBAAmB,MAAM,MAAM;AAC5C,QAAM,mBAAmB,YAAY,MAAM,UAAU;AACrD,QAAM,oBAAoB,YAAY,MAAM,WAAW;AACvD,QAAM,eAAe,YAAY,MAAM,MAAM;AAC7C,QAAM,iBACJ,OAAO,MAAM,mBAAmB,YAChC,MAAM,eAAe,KAAK,EAAE,SACxB,MAAM,eAAe,KAAK,IAC1B;AACN,QAAM,WAAW,IAAI,MAAM,YAAY;AAQvC,QAAM,aAAa,YAAsC;AACvD,QAAI,CAAC,KAAM,QAAO;AAQlB,UAAM,CAAC,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,MACxC;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE,GAAG;AAAA,UACH,GAAI,MAAM,cAAc,CAAC,IAAI,EAAE,WAAW,KAAK;AAAA,UAC/C,CAAC,IAAI,6BAA6B,CAAC,GAAG;AAAA,YACpC,QAAQ,IAAI,yCAAyC,GAAG,CAAC,IAAI,CAAC;AAAA,UAChE;AAAA,QACF;AAAA,QACA,EAAE,QAAQ,CAAC,IAAI,EAAE;AAAA,QACjB;AAAA,MACF;AAAA,MACA,0BAA0B;AAAA,QACxB;AAAA,QACA,YAAY;AAAA,QACZ,YAAY,CAAC,GAAG,sBAAsB;AAAA,QACtC,UAAU,MAAM;AAAA,MAClB,CAAC;AAAA,IACH,CAAC;AACD,WAAO,cACJ,IAAI,CAAC,YAAY,QAAQ,EAAE,EAC3B,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,EACzE;AAEA,QAAM,cAAc,YAAsC;AACxD,QAAI,CAAC,iBAAiB,OAAQ,QAAO;AACrC,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,EAAE,KAAK,iBAAiB;AAAA,QACnC,WAAW;AAAA,QACX,GAAG;AAAA,MACL;AAAA,MACA,EAAE,QAAQ,CAAC,MAAM,SAAS,EAAE;AAAA,MAC5B;AAAA,IACF;AACA,WAAO,UACJ;AAAA,MAAI,CAAC,UACJ,OAAO,MAAM,YAAY,WACrB,MAAM,UACL,MAAM,SAAS,MAAM;AAAA,IAC5B,EACC,OAAO,CAAC,OAAqB,CAAC,CAAC,EAAE;AAAA,EACtC;AAEA,QAAM,oBAAoB,YAA+B;AACvD,QAAI,CAAC,QAAQ,2BAA4B,QAAO;AAChD,UAAM,aAAa,MAAM;AAAA,MACvB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,EAAE,KAAK,kBAAkB,GAAG,WAAW,MAAM,GAAG,WAAW;AAAA,MACjE,EAAE,QAAQ,CAAC,MAAM,eAAe,EAAE;AAAA,MAClC;AAAA,IACF;AACA,UAAM,WAAW,IAAI,IAAI,iBAAiB;AAC1C,eAAW,YAAY,YAAY;AACjC,YAAM,cAAc,MAAM,QAAQ,SAAS,aAAa,IAAI,SAAS,gBAAgB,CAAC;AACtF,iBAAW,gBAAgB,aAAa;AACtC,YAAI,OAAO,iBAAiB,YAAY,aAAa,SAAS,GAAG;AAC/D,mBAAS,IAAI,YAAY;AAAA,QAC3B;AAAA,MACF;AAAA,IACF;AACA,WAAO,MAAM,KAAK,QAAQ;AAAA,EAC5B;AAEA,QAAM,eAAe,YAAsC;AACzD,QAAI,CAAC,kBAAkB,OAAQ,QAAO;AACtC,UAAMC,eAAc,MAAM,kBAAkB;AAC5C,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,UAAU,EAAE,KAAKA,aAAY,GAAG,GAAG,WAAW;AAAA,MAChD,EAAE,QAAQ,CAAC,MAAM,SAAS,EAAE;AAAA,MAC5B;AAAA,IACF;AACA,WAAO,YACJ;AAAA,MAAI,CAAC,eACJ,OAAO,WAAW,YAAY,WAC1B,WAAW,UACV,WAAW,SAAS,MAAM;AAAA,IACjC,EACC,OAAO,CAAC,OAAqB,CAAC,CAAC,EAAE;AAAA,EACtC;AAEA,QAAM,UAAU,YAAsC;AACpD,QAAI,CAAC,aAAa,OAAQ,QAAO;AACjC,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,KAAK,EAAE,KAAK,aAAa,GAAG,GAAG,WAAW;AAAA,MAC5C,EAAE,QAAQ,CAAC,MAAM,SAAS,EAAE;AAAA,MAC5B;AAAA,IACF;AACA,WAAO,YACJ;AAAA,MAAI,CAAC,eACJ,OAAO,WAAW,YAAY,WAC1B,WAAW,UACV,WAAW,SAAS,MAAM;AAAA,IACjC,EACC,OAAO,CAAC,OAAqB,CAAC,CAAC,EAAE;AAAA,EACtC;AAEA,QAAM,kBAAkB,YAA8C;AACpE,QAAI;AACF,YAAM,WAAW,IAAI,UAAU,QAAQ,IAAI;AAC3C,aAAO,MAAM,iCAAiC;AAAA,QAC5C,WAAW,CAAC,EAAE,QAAQ,eAAe;AAAA,QACrC;AAAA,QACA,IAAI;AAAA,QACJ;AAAA,QACA,UAAU,kBAAkB;AAAA,MAC9B,CAAC;AAAA,IACH,SAAS,KAAK;AAGZ,aAAO,MAAM,8CAA8C,EAAE,IAAI,CAAC;AAClE,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAEA,QAAM,CAAC,WAAW,YAAY,aAAa,QAAQ,SAAS,IAC1D,MAAM,QAAQ,IAAI;AAAA,IAChB,WAAW;AAAA,IACX,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,gBAAgB;AAAA,EAClB,CAAC;AAKH,aAAW,cAAc,CAAC,WAAW,YAAY,aAAa,MAAM,GAAG;AACrE,QAAI,WAAY,qBAAoB,UAAU;AAAA,EAChD;AACA,SAAO,OAAO,SAAS,SAAS;AAChC,0BAAwB;AACxB,SAAO;AACT;AAEO,SAAS,4BACd,QACA,OACA,KACQ;AACR,QAAM,KAAK,SAAS,IAAI,YAAY;AACpC,QAAM,KAAK,OAAO,IAAI,YAAY;AAClC,MAAI,MAAM,OAAQ,QAAO;AACzB,MAAI,MAAM,OAAQ,QAAO;AACzB,MAAI,EAAE,WAAW,MAAM,EAAG,QAAO;AACjC,MAAI,EAAE,WAAW,MAAM,EAAG,QAAO;AACjC,MAAI,EAAE,SAAS,MAAM,EAAG,QAAO;AAC/B,MAAI,EAAE,SAAS,MAAM,EAAG,QAAO;AAC/B,SAAO;AACT;",
+  "names": ["raw", "categoryIds"]
+}

package/dist/modules/catalog/lib/productScopeKeys.js

@@ -0,0 +1,105 @@
+import { sql } from "kysely";
+const PRODUCT_SCOPE_KEYS_ENTITY_TYPE = "catalog:catalog_product";
+const PRODUCT_SCOPE_KEYS_DOC_KEY = "scope_keys";
+const PRODUCT_SCOPE_KEYS_ENRICHER_ID = "catalog.product_scope_keys";
+const PRODUCT_SCOPE_CATEGORY_PREFIX = "cat:";
+const PRODUCT_SCOPE_TAG_PREFIX = "tag:";
+function compareCodeUnits(left, right) {
+  if (left < right) return -1;
+  if (left > right) return 1;
+  return 0;
+}
+function categoryScopeKey(categoryId) {
+  return `${PRODUCT_SCOPE_CATEGORY_PREFIX}${categoryId}`;
+}
+function tagScopeKey(tagId) {
+  return `${PRODUCT_SCOPE_TAG_PREFIX}${tagId}`;
+}
+function buildProductScopeKeys(input) {
+  const keys = /* @__PURE__ */ new Set();
+  for (const category of input.categories) {
+    if (category.categoryId) keys.add(categoryScopeKey(category.categoryId));
+    for (const ancestorId of category.ancestorIds) {
+      if (ancestorId) keys.add(categoryScopeKey(ancestorId));
+    }
+  }
+  for (const tagId of input.tagIds) {
+    if (tagId) keys.add(tagScopeKey(tagId));
+  }
+  return Array.from(keys).sort(compareCodeUnits);
+}
+function isProductScopeIndexed(doc) {
+  if (!doc) return false;
+  const keys = doc[PRODUCT_SCOPE_KEYS_DOC_KEY];
+  if (!Array.isArray(keys)) return false;
+  return keys.every((entry) => typeof entry === "string");
+}
+function readJsonIdList(value) {
+  let parsed = value;
+  if (typeof value === "string") {
+    try {
+      parsed = JSON.parse(value);
+    } catch {
+      return [];
+    }
+  }
+  if (!Array.isArray(parsed)) return [];
+  return parsed.filter((entry) => typeof entry === "string" && entry.length > 0);
+}
+function scopeEquals(column, value) {
+  return value === null ? sql`${sql.ref(column)} is null` : sql`${sql.ref(column)} = ${value}`;
+}
+async function computeProductScopeKeys(db, productIds, scope) {
+  const ids = Array.from(new Set(productIds.filter((id) => typeof id === "string" && id.length > 0)));
+  const result = /* @__PURE__ */ new Map();
+  if (!ids.length) return result;
+  const categoryRows = await db.selectFrom("catalog_product_category_assignments as a").innerJoin("catalog_product_categories as c", "c.id", "a.category_id").select(["a.product_id as product_id", "a.category_id as category_id", "c.ancestor_ids as ancestor_ids"]).where("a.product_id", "in", ids).where("c.deleted_at", "is", null).where(scopeEquals("a.tenant_id", scope.tenantId)).where(scopeEquals("a.organization_id", scope.organizationId)).where(scopeEquals("c.tenant_id", scope.tenantId)).where(scopeEquals("c.organization_id", scope.organizationId)).execute();
+  const tagRows = await db.selectFrom("catalog_product_tag_assignments as t").select(["t.product_id as product_id", "t.tag_id as tag_id"]).where("t.product_id", "in", ids).where(scopeEquals("t.tenant_id", scope.tenantId)).where(scopeEquals("t.organization_id", scope.organizationId)).execute();
+  const inputs = /* @__PURE__ */ new Map();
+  for (const id of ids) inputs.set(id, { categories: [], tagIds: [] });
+  for (const row of categoryRows) {
+    const entry = inputs.get(String(row.product_id));
+    if (!entry) continue;
+    entry.categories.push({ categoryId: String(row.category_id), ancestorIds: readJsonIdList(row.ancestor_ids) });
+  }
+  for (const row of tagRows) {
+    const entry = inputs.get(String(row.product_id));
+    if (!entry) continue;
+    entry.tagIds.push(String(row.tag_id));
+  }
+  for (const [id, input] of inputs) result.set(id, buildProductScopeKeys(input));
+  return result;
+}
+const catalogProductScopeKeysEnricher = {
+  id: PRODUCT_SCOPE_KEYS_ENRICHER_ID,
+  entityType: PRODUCT_SCOPE_KEYS_ENTITY_TYPE,
+  keys: [PRODUCT_SCOPE_KEYS_DOC_KEY],
+  async enrich(records, ctx) {
+    const keysByProduct = await computeProductScopeKeys(
+      ctx.db,
+      records.map((record) => record.recordId),
+      { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    );
+    const out = /* @__PURE__ */ new Map();
+    for (const [productId, keys] of keysByProduct) {
+      out.set(productId, { [PRODUCT_SCOPE_KEYS_DOC_KEY]: keys });
+    }
+    return out;
+  }
+};
+export {
+  PRODUCT_SCOPE_CATEGORY_PREFIX,
+  PRODUCT_SCOPE_KEYS_DOC_KEY,
+  PRODUCT_SCOPE_KEYS_ENRICHER_ID,
+  PRODUCT_SCOPE_KEYS_ENTITY_TYPE,
+  PRODUCT_SCOPE_TAG_PREFIX,
+  buildProductScopeKeys,
+  catalogProductScopeKeysEnricher,
+  categoryScopeKey,
+  compareCodeUnits,
+  computeProductScopeKeys,
+  isProductScopeIndexed,
+  readJsonIdList,
+  tagScopeKey
+};
+//# sourceMappingURL=productScopeKeys.js.map

package/dist/modules/catalog/lib/productScopeKeys.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/catalog/lib/productScopeKeys.ts"],
+  "sourcesContent": ["import { sql, type Kysely, type RawBuilder } from 'kysely'\nimport type {\n  IndexDocEnricher,\n  IndexDocEnricherContext,\n  IndexDocEnricherRecord,\n  IndexDocEnrichment,\n} from '@open-mercato/core/modules/query_index/lib/doc-enrichers'\n\n/**\n * Denormalized assortment keys on the `catalog:catalog_product` index document\n * (Storefront Public API \u00A73.3, decision D9).\n *\n * `scope_keys` is a sorted, de-duplicated jsonb string array:\n * - `cat:<uuid>` for every assigned, non-deleted category AND each of its `ancestor_ids`\n *   (so \"a category includes its descendants\" is a plain overlap test);\n * - `tag:<uuid>` for every assigned tag.\n *\n * Ids only \u2014 never encrypted, never translated. A document whose `scope_keys` is `null`\n * (enricher failure) or absent (not reindexed since the enricher shipped) is NOT indexed:\n * consumers MUST fail closed on it, never read it as \"no assignments\" \u2014 see\n * `isProductScopeIndexed`.\n */\nexport const PRODUCT_SCOPE_KEYS_ENTITY_TYPE = 'catalog:catalog_product'\nexport const PRODUCT_SCOPE_KEYS_DOC_KEY = 'scope_keys'\nexport const PRODUCT_SCOPE_KEYS_ENRICHER_ID = 'catalog.product_scope_keys'\nexport const PRODUCT_SCOPE_CATEGORY_PREFIX = 'cat:'\nexport const PRODUCT_SCOPE_TAG_PREFIX = 'tag:'\n\nexport function compareCodeUnits(left: string, right: string): number {\n  if (left < right) return -1\n  if (left > right) return 1\n  return 0\n}\n\nexport function categoryScopeKey(categoryId: string): string {\n  return `${PRODUCT_SCOPE_CATEGORY_PREFIX}${categoryId}`\n}\n\nexport function tagScopeKey(tagId: string): string {\n  return `${PRODUCT_SCOPE_TAG_PREFIX}${tagId}`\n}\n\nexport type ProductScopeKeyInput = {\n  categories: ReadonlyArray<{ categoryId: string; ancestorIds: readonly string[] }>\n  tagIds: readonly string[]\n}\n\nexport function buildProductScopeKeys(input: ProductScopeKeyInput): string[] {\n  const keys = new Set<string>()\n  for (const category of input.categories) {\n    if (category.categoryId) keys.add(categoryScopeKey(category.categoryId))\n    for (const ancestorId of category.ancestorIds) {\n      if (ancestorId) keys.add(categoryScopeKey(ancestorId))\n    }\n  }\n  for (const tagId of input.tagIds) {\n    if (tagId) keys.add(tagScopeKey(tagId))\n  }\n  return Array.from(keys).sort(compareCodeUnits)\n}\n\nexport function isProductScopeIndexed(doc: Readonly<Record<string, unknown>> | null | undefined): boolean {\n  if (!doc) return false\n  const keys = doc[PRODUCT_SCOPE_KEYS_DOC_KEY]\n  if (!Array.isArray(keys)) return false\n  return keys.every((entry) => typeof entry === 'string')\n}\n\nexport function readJsonIdList(value: unknown): string[] {\n  let parsed: unknown = value\n  if (typeof value === 'string') {\n    try {\n      parsed = JSON.parse(value)\n    } catch {\n      return []\n    }\n  }\n  if (!Array.isArray(parsed)) return []\n  return parsed.filter((entry): entry is string => typeof entry === 'string' && entry.length > 0)\n}\n\ntype ScopeFilter = { tenantId: string | null; organizationId: string | null }\n\nfunction scopeEquals(column: string, value: string | null): RawBuilder<boolean> {\n  return value === null\n    ? sql<boolean>`${sql.ref(column)} is null`\n    : sql<boolean>`${sql.ref(column)} = ${value}`\n}\n\ntype CategoryAssignmentRow = { product_id: string; category_id: string; ancestor_ids: unknown }\ntype TagAssignmentRow = { product_id: string; tag_id: string }\n\n/**\n * Computes `scope_keys` for a batch of products in two queries (category assignments joined\n * with their categories, then tag assignments). Every requested product gets an entry \u2014 a\n * product without assignments maps to `[]`, which is \"indexed, no keys\", not \"unknown\".\n */\nexport async function computeProductScopeKeys(\n  db: Kysely<any>,\n  productIds: readonly string[],\n  scope: ScopeFilter,\n): Promise<Map<string, string[]>> {\n  const ids = Array.from(new Set(productIds.filter((id) => typeof id === 'string' && id.length > 0)))\n  const result = new Map<string, string[]>()\n  if (!ids.length) return result\n\n  const categoryRows = (await db\n    .selectFrom('catalog_product_category_assignments as a')\n    .innerJoin('catalog_product_categories as c', 'c.id', 'a.category_id')\n    .select(['a.product_id as product_id', 'a.category_id as category_id', 'c.ancestor_ids as ancestor_ids'])\n    .where('a.product_id', 'in', ids)\n    .where('c.deleted_at', 'is', null)\n    .where(scopeEquals('a.tenant_id', scope.tenantId))\n    .where(scopeEquals('a.organization_id', scope.organizationId))\n    .where(scopeEquals('c.tenant_id', scope.tenantId))\n    .where(scopeEquals('c.organization_id', scope.organizationId))\n    .execute()) as CategoryAssignmentRow[]\n\n  const tagRows = (await db\n    .selectFrom('catalog_product_tag_assignments as t')\n    .select(['t.product_id as product_id', 't.tag_id as tag_id'])\n    .where('t.product_id', 'in', ids)\n    .where(scopeEquals('t.tenant_id', scope.tenantId))\n    .where(scopeEquals('t.organization_id', scope.organizationId))\n    .execute()) as TagAssignmentRow[]\n\n  const inputs = new Map<string, { categories: Array<{ categoryId: string; ancestorIds: string[] }>; tagIds: string[] }>()\n  for (const id of ids) inputs.set(id, { categories: [], tagIds: [] })\n  for (const row of categoryRows) {\n    const entry = inputs.get(String(row.product_id))\n    if (!entry) continue\n    entry.categories.push({ categoryId: String(row.category_id), ancestorIds: readJsonIdList(row.ancestor_ids) })\n  }\n  for (const row of tagRows) {\n    const entry = inputs.get(String(row.product_id))\n    if (!entry) continue\n    entry.tagIds.push(String(row.tag_id))\n  }\n  for (const [id, input] of inputs) result.set(id, buildProductScopeKeys(input))\n  return result\n}\n\nexport const catalogProductScopeKeysEnricher: IndexDocEnricher = {\n  id: PRODUCT_SCOPE_KEYS_ENRICHER_ID,\n  entityType: PRODUCT_SCOPE_KEYS_ENTITY_TYPE,\n  keys: [PRODUCT_SCOPE_KEYS_DOC_KEY],\n  async enrich(\n    records: readonly IndexDocEnricherRecord[],\n    ctx: IndexDocEnricherContext,\n  ): Promise<Map<string, IndexDocEnrichment>> {\n    const keysByProduct = await computeProductScopeKeys(\n      ctx.db,\n      records.map((record) => record.recordId),\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n    const out = new Map<string, IndexDocEnrichment>()\n    for (const [productId, keys] of keysByProduct) {\n      out.set(productId, { [PRODUCT_SCOPE_KEYS_DOC_KEY]: keys })\n    }\n    return out\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,WAAyC;AAsB3C,MAAM,iCAAiC;AACvC,MAAM,6BAA6B;AACnC,MAAM,iCAAiC;AACvC,MAAM,gCAAgC;AACtC,MAAM,2BAA2B;AAEjC,SAAS,iBAAiB,MAAc,OAAuB;AACpE,MAAI,OAAO,MAAO,QAAO;AACzB,MAAI,OAAO,MAAO,QAAO;AACzB,SAAO;AACT;AAEO,SAAS,iBAAiB,YAA4B;AAC3D,SAAO,GAAG,6BAA6B,GAAG,UAAU;AACtD;AAEO,SAAS,YAAY,OAAuB;AACjD,SAAO,GAAG,wBAAwB,GAAG,KAAK;AAC5C;AAOO,SAAS,sBAAsB,OAAuC;AAC3E,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,YAAY,MAAM,YAAY;AACvC,QAAI,SAAS,WAAY,MAAK,IAAI,iBAAiB,SAAS,UAAU,CAAC;AACvE,eAAW,cAAc,SAAS,aAAa;AAC7C,UAAI,WAAY,MAAK,IAAI,iBAAiB,UAAU,CAAC;AAAA,IACvD;AAAA,EACF;AACA,aAAW,SAAS,MAAM,QAAQ;AAChC,QAAI,MAAO,MAAK,IAAI,YAAY,KAAK,CAAC;AAAA,EACxC;AACA,SAAO,MAAM,KAAK,IAAI,EAAE,KAAK,gBAAgB;AAC/C;AAEO,SAAS,sBAAsB,KAAoE;AACxG,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,OAAO,IAAI,0BAA0B;AAC3C,MAAI,CAAC,MAAM,QAAQ,IAAI,EAAG,QAAO;AACjC,SAAO,KAAK,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ;AACxD;AAEO,SAAS,eAAe,OAA0B;AACvD,MAAI,SAAkB;AACtB,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI;AACF,eAAS,KAAK,MAAM,KAAK;AAAA,IAC3B,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AACA,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AACpC,SAAO,OAAO,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;AAChG;AAIA,SAAS,YAAY,QAAgB,OAA2C;AAC9E,SAAO,UAAU,OACb,MAAe,IAAI,IAAI,MAAM,CAAC,aAC9B,MAAe,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK;AAC/C;AAUA,eAAsB,wBACpB,IACA,YACA,OACgC;AAChC,QAAM,MAAM,MAAM,KAAK,IAAI,IAAI,WAAW,OAAO,CAAC,OAAO,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC;AAClG,QAAM,SAAS,oBAAI,IAAsB;AACzC,MAAI,CAAC,IAAI,OAAQ,QAAO;AAExB,QAAM,eAAgB,MAAM,GACzB,WAAW,2CAA2C,EACtD,UAAU,mCAAmC,QAAQ,eAAe,EACpE,OAAO,CAAC,8BAA8B,gCAAgC,gCAAgC,CAAC,EACvG,MAAM,gBAAgB,MAAM,GAAG,EAC/B,MAAM,gBAAgB,MAAM,IAAI,EAChC,MAAM,YAAY,eAAe,MAAM,QAAQ,CAAC,EAChD,MAAM,YAAY,qBAAqB,MAAM,cAAc,CAAC,EAC5D,MAAM,YAAY,eAAe,MAAM,QAAQ,CAAC,EAChD,MAAM,YAAY,qBAAqB,MAAM,cAAc,CAAC,EAC5D,QAAQ;AAEX,QAAM,UAAW,MAAM,GACpB,WAAW,sCAAsC,EACjD,OAAO,CAAC,8BAA8B,oBAAoB,CAAC,EAC3D,MAAM,gBAAgB,MAAM,GAAG,EAC/B,MAAM,YAAY,eAAe,MAAM,QAAQ,CAAC,EAChD,MAAM,YAAY,qBAAqB,MAAM,cAAc,CAAC,EAC5D,QAAQ;AAEX,QAAM,SAAS,oBAAI,IAAoG;AACvH,aAAW,MAAM,IAAK,QAAO,IAAI,IAAI,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;AACnE,aAAW,OAAO,cAAc;AAC9B,UAAM,QAAQ,OAAO,IAAI,OAAO,IAAI,UAAU,CAAC;AAC/C,QAAI,CAAC,MAAO;AACZ,UAAM,WAAW,KAAK,EAAE,YAAY,OAAO,IAAI,WAAW,GAAG,aAAa,eAAe,IAAI,YAAY,EAAE,CAAC;AAAA,EAC9G;AACA,aAAW,OAAO,SAAS;AACzB,UAAM,QAAQ,OAAO,IAAI,OAAO,IAAI,UAAU,CAAC;AAC/C,QAAI,CAAC,MAAO;AACZ,UAAM,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC;AAAA,EACtC;AACA,aAAW,CAAC,IAAI,KAAK,KAAK,OAAQ,QAAO,IAAI,IAAI,sBAAsB,KAAK,CAAC;AAC7E,SAAO;AACT;AAEO,MAAM,kCAAoD;AAAA,EAC/D,IAAI;AAAA,EACJ,YAAY;AAAA,EACZ,MAAM,CAAC,0BAA0B;AAAA,EACjC,MAAM,OACJ,SACA,KAC0C;AAC1C,UAAM,gBAAgB,MAAM;AAAA,MAC1B,IAAI;AAAA,MACJ,QAAQ,IAAI,CAAC,WAAW,OAAO,QAAQ;AAAA,MACvC,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AACA,UAAM,MAAM,oBAAI,IAAgC;AAChD,eAAW,CAAC,WAAW,IAAI,KAAK,eAAe;AAC7C,UAAI,IAAI,WAAW,EAAE,CAAC,0BAA0B,GAAG,KAAK,CAAC;AAAA,IAC3D;AACA,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}

package/dist/modules/catalog/lib/productScopeReindex.js

@@ -0,0 +1,73 @@
+import { sql } from "kysely";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { PRODUCT_SCOPE_KEYS_ENTITY_TYPE, readJsonIdList } from "./productScopeKeys.js";
+const logger = createLogger("catalog").child({ component: "product-scope-reindex" });
+const PRODUCT_SCOPE_REINDEX_UPSERT_LIMIT = 500;
+function readNonEmptyString(value) {
+  return typeof value === "string" && value.length > 0 ? value : null;
+}
+function parseCategoryScopeTarget(payload) {
+  const categoryId = readNonEmptyString(payload?.id);
+  const tenantId = readNonEmptyString(payload?.tenantId);
+  const organizationId = readNonEmptyString(payload?.organizationId);
+  if (!categoryId || !tenantId || !organizationId) return null;
+  return {
+    categoryId,
+    tenantId,
+    organizationId,
+    extraCategoryIds: readJsonIdList(payload?.previousDescendantIds)
+  };
+}
+async function collectCategorySubtreeProductIds(db, target, limit) {
+  const category = await db.selectFrom("catalog_product_categories").select(["id", "descendant_ids"]).where("id", "=", target.categoryId).where("tenant_id", "=", target.tenantId).where("organization_id", "=", target.organizationId).executeTakeFirst();
+  const categoryIds = Array.from(/* @__PURE__ */ new Set([
+    target.categoryId,
+    ...readJsonIdList(category?.descendant_ids),
+    ...target.extraCategoryIds
+  ]));
+  const rows = await db.selectFrom("catalog_product_category_assignments as a").innerJoin("catalog_products as p", "p.id", "a.product_id").select("a.product_id as product_id").distinct().where("a.category_id", "in", categoryIds).where("a.tenant_id", "=", target.tenantId).where("a.organization_id", "=", target.organizationId).where(sql`${sql.ref("p.deleted_at")} is null`).limit(limit + 1).execute();
+  return rows.map((row) => String(row.product_id));
+}
+async function reindexProductsForCategorySubtree(payload, ctx, limit = PRODUCT_SCOPE_REINDEX_UPSERT_LIMIT) {
+  const target = parseCategoryScopeTarget(payload);
+  if (!target) {
+    logger.warn("Category scope change without id/tenant/organization; product scope keys not refreshed", {
+      categoryId: readNonEmptyString(payload?.id)
+    });
+    return { mode: "skipped", productCount: 0 };
+  }
+  const em = ctx.resolve("em");
+  const db = em.getKysely();
+  const bus = ctx.resolve("eventBus");
+  const productIds = await collectCategorySubtreeProductIds(db, target, limit);
+  if (!productIds.length) return { mode: "skipped", productCount: 0 };
+  if (productIds.length > limit) {
+    await bus.emitEvent(
+      "query_index.reindex",
+      {
+        entityType: PRODUCT_SCOPE_KEYS_ENTITY_TYPE,
+        tenantId: target.tenantId,
+        organizationId: target.organizationId
+      },
+      { persistent: true, deliverInline: false }
+    );
+    return { mode: "reindex", productCount: productIds.length };
+  }
+  for (const productId of productIds) {
+    await bus.emitEvent("query_index.upsert_one", {
+      entityType: PRODUCT_SCOPE_KEYS_ENTITY_TYPE,
+      recordId: productId,
+      tenantId: target.tenantId,
+      organizationId: target.organizationId,
+      crudAction: "updated"
+    });
+  }
+  return { mode: "upsert", productCount: productIds.length };
+}
+export {
+  PRODUCT_SCOPE_REINDEX_UPSERT_LIMIT,
+  collectCategorySubtreeProductIds,
+  parseCategoryScopeTarget,
+  reindexProductsForCategorySubtree
+};
+//# sourceMappingURL=productScopeReindex.js.map

package/dist/modules/catalog/lib/productScopeReindex.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/catalog/lib/productScopeReindex.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql, type Kysely } from 'kysely'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { PRODUCT_SCOPE_KEYS_ENTITY_TYPE, readJsonIdList } from './productScopeKeys'\n\nconst logger = createLogger('catalog').child({ component: 'product-scope-reindex' })\n\n/**\n * Above this many affected products a category hierarchy change requests one scoped\n * `query_index.reindex` job for `catalog:catalog_product` instead of per-record upserts.\n */\nexport const PRODUCT_SCOPE_REINDEX_UPSERT_LIMIT = 500\n\nexport type CategoryScopeChangePayload = {\n  id?: unknown\n  tenantId?: unknown\n  organizationId?: unknown\n  hierarchyChanged?: unknown\n  previousDescendantIds?: unknown\n}\n\nexport type ProductScopeReindexContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\ntype EventBusLike = {\n  emitEvent: (event: string, payload: unknown, options?: Record<string, unknown>) => Promise<void>\n}\n\ntype CategoryScopeTarget = {\n  categoryId: string\n  tenantId: string\n  organizationId: string\n  extraCategoryIds: string[]\n}\n\nexport type ProductScopeReindexResult =\n  | { mode: 'skipped'; productCount: 0 }\n  | { mode: 'upsert'; productCount: number }\n  | { mode: 'reindex'; productCount: number }\n\nfunction readNonEmptyString(value: unknown): string | null {\n  return typeof value === 'string' && value.length > 0 ? value : null\n}\n\nexport function parseCategoryScopeTarget(payload: CategoryScopeChangePayload | null | undefined): CategoryScopeTarget | null {\n  const categoryId = readNonEmptyString(payload?.id)\n  const tenantId = readNonEmptyString(payload?.tenantId)\n  const organizationId = readNonEmptyString(payload?.organizationId)\n  if (!categoryId || !tenantId || !organizationId) return null\n  return {\n    categoryId,\n    tenantId,\n    organizationId,\n    extraCategoryIds: readJsonIdList(payload?.previousDescendantIds),\n  }\n}\n\nexport async function collectCategorySubtreeProductIds(\n  db: Kysely<any>,\n  target: CategoryScopeTarget,\n  limit: number,\n): Promise<string[]> {\n  const category = (await db\n    .selectFrom('catalog_product_categories')\n    .select(['id', 'descendant_ids'])\n    .where('id', '=', target.categoryId)\n    .where('tenant_id', '=', target.tenantId)\n    .where('organization_id', '=', target.organizationId)\n    .executeTakeFirst()) as { id: string; descendant_ids: unknown } | undefined\n\n  const categoryIds = Array.from(new Set([\n    target.categoryId,\n    ...readJsonIdList(category?.descendant_ids),\n    ...target.extraCategoryIds,\n  ]))\n\n  const rows = (await db\n    .selectFrom('catalog_product_category_assignments as a')\n    .innerJoin('catalog_products as p', 'p.id', 'a.product_id')\n    .select('a.product_id as product_id')\n    .distinct()\n    .where('a.category_id', 'in', categoryIds)\n    .where('a.tenant_id', '=', target.tenantId)\n    .where('a.organization_id', '=', target.organizationId)\n    .where(sql<boolean>`${sql.ref('p.deleted_at')} is null`)\n    .limit(limit + 1)\n    .execute()) as Array<{ product_id: string }>\n\n  return rows.map((row) => String(row.product_id))\n}\n\n/**\n * Re-projects `scope_keys` for every product assigned anywhere in a category's subtree\n * (Storefront Public API \u00A73.3, R16). Runs from persistent `catalog.category.*` subscribers,\n * i.e. in the events worker, never in the request that changed the hierarchy.\n */\nexport async function reindexProductsForCategorySubtree(\n  payload: CategoryScopeChangePayload | null | undefined,\n  ctx: ProductScopeReindexContext,\n  limit: number = PRODUCT_SCOPE_REINDEX_UPSERT_LIMIT,\n): Promise<ProductScopeReindexResult> {\n  const target = parseCategoryScopeTarget(payload)\n  if (!target) {\n    logger.warn('Category scope change without id/tenant/organization; product scope keys not refreshed', {\n      categoryId: readNonEmptyString(payload?.id),\n    })\n    return { mode: 'skipped', productCount: 0 }\n  }\n  const em = ctx.resolve<EntityManager>('em')\n  const db = em.getKysely() as Kysely<any>\n  const bus = ctx.resolve<EventBusLike>('eventBus')\n  const productIds = await collectCategorySubtreeProductIds(db, target, limit)\n  if (!productIds.length) return { mode: 'skipped', productCount: 0 }\n\n  if (productIds.length > limit) {\n    await bus.emitEvent(\n      'query_index.reindex',\n      {\n        entityType: PRODUCT_SCOPE_KEYS_ENTITY_TYPE,\n        tenantId: target.tenantId,\n        organizationId: target.organizationId,\n      },\n      { persistent: true, deliverInline: false },\n    )\n    return { mode: 'reindex', productCount: productIds.length }\n  }\n\n  for (const productId of productIds) {\n    await bus.emitEvent('query_index.upsert_one', {\n      entityType: PRODUCT_SCOPE_KEYS_ENTITY_TYPE,\n      recordId: productId,\n      tenantId: target.tenantId,\n      organizationId: target.organizationId,\n      crudAction: 'updated',\n    })\n  }\n  return { mode: 'upsert', productCount: productIds.length }\n}\n"],
+  "mappings": "AACA,SAAS,WAAwB;AACjC,SAAS,oBAAoB;AAC7B,SAAS,gCAAgC,sBAAsB;AAE/D,MAAM,SAAS,aAAa,SAAS,EAAE,MAAM,EAAE,WAAW,wBAAwB,CAAC;AAM5E,MAAM,qCAAqC;AA8BlD,SAAS,mBAAmB,OAA+B;AACzD,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACjE;AAEO,SAAS,yBAAyB,SAAoF;AAC3H,QAAM,aAAa,mBAAmB,SAAS,EAAE;AACjD,QAAM,WAAW,mBAAmB,SAAS,QAAQ;AACrD,QAAM,iBAAiB,mBAAmB,SAAS,cAAc;AACjE,MAAI,CAAC,cAAc,CAAC,YAAY,CAAC,eAAgB,QAAO;AACxD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,kBAAkB,eAAe,SAAS,qBAAqB;AAAA,EACjE;AACF;AAEA,eAAsB,iCACpB,IACA,QACA,OACmB;AACnB,QAAM,WAAY,MAAM,GACrB,WAAW,4BAA4B,EACvC,OAAO,CAAC,MAAM,gBAAgB,CAAC,EAC/B,MAAM,MAAM,KAAK,OAAO,UAAU,EAClC,MAAM,aAAa,KAAK,OAAO,QAAQ,EACvC,MAAM,mBAAmB,KAAK,OAAO,cAAc,EACnD,iBAAiB;AAEpB,QAAM,cAAc,MAAM,KAAK,oBAAI,IAAI;AAAA,IACrC,OAAO;AAAA,IACP,GAAG,eAAe,UAAU,cAAc;AAAA,IAC1C,GAAG,OAAO;AAAA,EACZ,CAAC,CAAC;AAEF,QAAM,OAAQ,MAAM,GACjB,WAAW,2CAA2C,EACtD,UAAU,yBAAyB,QAAQ,cAAc,EACzD,OAAO,4BAA4B,EACnC,SAAS,EACT,MAAM,iBAAiB,MAAM,WAAW,EACxC,MAAM,eAAe,KAAK,OAAO,QAAQ,EACzC,MAAM,qBAAqB,KAAK,OAAO,cAAc,EACrD,MAAM,MAAe,IAAI,IAAI,cAAc,CAAC,UAAU,EACtD,MAAM,QAAQ,CAAC,EACf,QAAQ;AAEX,SAAO,KAAK,IAAI,CAAC,QAAQ,OAAO,IAAI,UAAU,CAAC;AACjD;AAOA,eAAsB,kCACpB,SACA,KACA,QAAgB,oCACoB;AACpC,QAAM,SAAS,yBAAyB,OAAO;AAC/C,MAAI,CAAC,QAAQ;AACX,WAAO,KAAK,0FAA0F;AAAA,MACpG,YAAY,mBAAmB,SAAS,EAAE;AAAA,IAC5C,CAAC;AACD,WAAO,EAAE,MAAM,WAAW,cAAc,EAAE;AAAA,EAC5C;AACA,QAAM,KAAK,IAAI,QAAuB,IAAI;AAC1C,QAAM,KAAK,GAAG,UAAU;AACxB,QAAM,MAAM,IAAI,QAAsB,UAAU;AAChD,QAAM,aAAa,MAAM,iCAAiC,IAAI,QAAQ,KAAK;AAC3E,MAAI,CAAC,WAAW,OAAQ,QAAO,EAAE,MAAM,WAAW,cAAc,EAAE;AAElE,MAAI,WAAW,SAAS,OAAO;AAC7B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,QACE,YAAY;AAAA,QACZ,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO;AAAA,MACzB;AAAA,MACA,EAAE,YAAY,MAAM,eAAe,MAAM;AAAA,IAC3C;AACA,WAAO,EAAE,MAAM,WAAW,cAAc,WAAW,OAAO;AAAA,EAC5D;AAEA,aAAW,aAAa,YAAY;AAClC,UAAM,IAAI,UAAU,0BAA0B;AAAA,MAC5C,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,YAAY;AAAA,IACd,CAAC;AAAA,EACH;AACA,SAAO,EAAE,MAAM,UAAU,cAAc,WAAW,OAAO;AAC3D;",
+  "names": []
+}

package/dist/modules/catalog/migrations/Migration20261005105352_catalog.js

@@ -0,0 +1,39 @@
+import { Migration } from "@mikro-orm/migrations";
+const PRICE_ROW_INDEXES = [
+  {
+    name: "catalog_product_variant_prices_customer_idx",
+    definition: '("customer_id", "organization_id", "tenant_id") where "customer_id" is not null'
+  },
+  {
+    name: "catalog_product_variant_prices_customer_group_idx",
+    definition: '("customer_group_id", "organization_id", "tenant_id") where "customer_group_id" is not null'
+  },
+  {
+    name: "catalog_product_variant_prices_product_lookup_idx",
+    definition: '("product_id", "currency_code", "channel_id", "organization_id", "tenant_id")'
+  }
+];
+class Migration20261005105352_catalog extends Migration {
+  constructor() {
+    super(...arguments);
+    this.name = "Migration20261005105352";
+  }
+  isTransactional() {
+    return false;
+  }
+  up() {
+    for (const index of PRICE_ROW_INDEXES) {
+      this.addSql(`drop index concurrently if exists "${index.name}";`);
+      this.addSql(`create index concurrently "${index.name}" on "catalog_product_variant_prices" ${index.definition};`);
+    }
+  }
+  down() {
+    for (const index of PRICE_ROW_INDEXES) {
+      this.addSql(`drop index concurrently if exists "${index.name}";`);
+    }
+  }
+}
+export {
+  Migration20261005105352_catalog
+};
+//# sourceMappingURL=Migration20261005105352_catalog.js.map

package/dist/modules/catalog/migrations/Migration20261005105352_catalog.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/catalog/migrations/Migration20261005105352_catalog.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nconst PRICE_ROW_INDEXES = [\n  {\n    name: 'catalog_product_variant_prices_customer_idx',\n    definition: '(\"customer_id\", \"organization_id\", \"tenant_id\") where \"customer_id\" is not null',\n  },\n  {\n    name: 'catalog_product_variant_prices_customer_group_idx',\n    definition: '(\"customer_group_id\", \"organization_id\", \"tenant_id\") where \"customer_group_id\" is not null',\n  },\n  {\n    name: 'catalog_product_variant_prices_product_lookup_idx',\n    definition: '(\"product_id\", \"currency_code\", \"channel_id\", \"organization_id\", \"tenant_id\")',\n  },\n] as const;\n\nexport class Migration20261005105352_catalog extends Migration {\n\n  override name = 'Migration20261005105352';\n\n  override isTransactional(): boolean {\n    return false;\n  }\n\n  override up(): void | Promise<void> {\n    for (const index of PRICE_ROW_INDEXES) {\n      this.addSql(`drop index concurrently if exists \"${index.name}\";`);\n      this.addSql(`create index concurrently \"${index.name}\" on \"catalog_product_variant_prices\" ${index.definition};`);\n    }\n  }\n\n  override down(): void | Promise<void> {\n    for (const index of PRICE_ROW_INDEXES) {\n      this.addSql(`drop index concurrently if exists \"${index.name}\";`);\n    }\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAE1B,MAAM,oBAAoB;AAAA,EACxB;AAAA,IACE,MAAM;AAAA,IACN,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,YAAY;AAAA,EACd;AACF;AAEO,MAAM,wCAAwC,UAAU;AAAA,EAAxD;AAAA;AAEL,SAAS,OAAO;AAAA;AAAA,EAEP,kBAA2B;AAClC,WAAO;AAAA,EACT;AAAA,EAES,KAA2B;AAClC,eAAW,SAAS,mBAAmB;AACrC,WAAK,OAAO,sCAAsC,MAAM,IAAI,IAAI;AAChE,WAAK,OAAO,8BAA8B,MAAM,IAAI,yCAAyC,MAAM,UAAU,GAAG;AAAA,IAClH;AAAA,EACF;AAAA,EAES,OAA6B;AACpC,eAAW,SAAS,mBAAmB;AACrC,WAAK,OAAO,sCAAsC,MAAM,IAAI,IAAI;AAAA,IAClE;AAAA,EACF;AAEF;",
+  "names": []
+}

package/dist/modules/catalog/migrations/Migration20261005150824_catalog.js

@@ -0,0 +1,39 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20261005150824_catalog extends Migration {
+  constructor() {
+    super(...arguments);
+    this.name = "Migration20261005150824";
+  }
+  up() {
+    this.addSql(`create table "catalog_price_history_entries" ("id" uuid not null default gen_random_uuid(), "tenant_id" uuid not null, "organization_id" uuid not null, "price_id" uuid not null, "product_id" uuid not null, "variant_id" uuid null, "offer_id" uuid null, "channel_id" uuid null, "price_kind_id" uuid not null, "price_kind_code" text not null, "currency_code" varchar(3) not null, "unit_price_net" numeric(16,4) null, "unit_price_gross" numeric(16,4) null, "tax_rate" numeric(7,4) null, "tax_amount" numeric(16,4) null, "min_quantity" int null, "max_quantity" int null, "starts_at" timestamptz null, "ends_at" timestamptz null, "recorded_at" timestamptz not null, "change_type" text not null, "source" text not null, "is_announced" boolean null, "idempotency_key" text null, "metadata" jsonb null, primary key ("id"));`);
+    this.addSql(`create index "catalog_price_history_price_idx" on "catalog_price_history_entries" ("tenant_id", "organization_id", "price_id");`);
+    this.addSql(`create index "catalog_price_history_offer_idx" on "catalog_price_history_entries" ("tenant_id", "organization_id", "offer_id", "price_kind_id", "currency_code", "recorded_at" desc);`);
+    this.addSql(`create index "catalog_price_history_variant_channel_idx" on "catalog_price_history_entries" ("tenant_id", "organization_id", "variant_id", "channel_id", "price_kind_id", "currency_code", "recorded_at" desc);`);
+    this.addSql(`create index "catalog_price_history_variant_idx" on "catalog_price_history_entries" ("tenant_id", "organization_id", "variant_id", "price_kind_id", "currency_code", "recorded_at" desc);`);
+    this.addSql(`create index "catalog_price_history_product_channel_idx" on "catalog_price_history_entries" ("tenant_id", "organization_id", "product_id", "channel_id", "price_kind_id", "currency_code", "recorded_at" desc);`);
+    this.addSql(`create index "catalog_price_history_product_idx" on "catalog_price_history_entries" ("tenant_id", "organization_id", "product_id", "price_kind_id", "currency_code", "recorded_at" desc);`);
+    this.addSql(`alter table "catalog_price_history_entries" add constraint "catalog_price_history_entries_change_type_check" check ("change_type" in ('create', 'update', 'delete', 'undo'));`);
+    this.addSql(`alter table "catalog_price_history_entries" add constraint "catalog_price_history_entries_source_check" check ("source" in ('api', 'system'));`);
+    this.addSql(`create unique index "catalog_price_history_idempotency_uq" on "catalog_price_history_entries" ("tenant_id", "organization_id", "idempotency_key") where "idempotency_key" is not null;`);
+    this.addSql(`-- MANUAL DDL: immutability trigger and role restriction
+CREATE OR REPLACE FUNCTION catalog_price_history_prevent_modification() RETURNS trigger AS $$
+BEGIN
+  RAISE EXCEPTION 'catalog_price_history_entries is immutable';
+END;
+$$ LANGUAGE plpgsql;`);
+    this.addSql(`-- DEPLOY RUNBOOK (production): grant the app role INSERT/SELECT only.
+-- REVOKE UPDATE, DELETE ON catalog_price_history_entries FROM <app_db_role>;
+CREATE OR REPLACE TRIGGER history_immutable
+  BEFORE UPDATE OR DELETE ON catalog_price_history_entries
+  FOR EACH ROW EXECUTE FUNCTION catalog_price_history_prevent_modification();`);
+  }
+  down() {
+    this.addSql(`DROP TRIGGER IF EXISTS history_immutable ON catalog_price_history_entries;`);
+    this.addSql(`DROP FUNCTION IF EXISTS catalog_price_history_prevent_modification();`);
+    this.addSql(`drop table if exists "catalog_price_history_entries" cascade;`);
+  }
+}
+export {
+  Migration20261005150824_catalog
+};
+//# sourceMappingURL=Migration20261005150824_catalog.js.map