@open-mercato/core 0.9.1-develop.7474.1.51db10479d → 0.9.1-develop.7475.1.28ca93ed97

package/dist/modules/ecommerce/lib/crudEvents.js

@@ -0,0 +1,94 @@
+import { canonicalizeResourceTag, invalidateCrudCache } from "@open-mercato/shared/lib/crud/cache";
+import { emitEcommerceEvent } from "../events.js";
+const ECOMMERCE_EVENTS_MODULE = "ecommerce";
+const STORE_EVENT_ENTITY = "store";
+const STORE_DOMAIN_BINDING_EVENT_ENTITY = "store_domain_binding";
+const STORE_CHANNEL_BINDING_EVENT_ENTITY = "store_channel_binding";
+const previousDomainBindingPlacements = /* @__PURE__ */ new WeakMap();
+const previousChannelBindingStores = /* @__PURE__ */ new WeakMap();
+function rememberDomainBindingPlacement(binding) {
+  previousDomainBindingPlacements.set(binding, { storeId: binding.storeId, domainMappingId: binding.domainMappingId });
+}
+function rememberChannelBindingStore(binding) {
+  previousChannelBindingStores.set(binding, binding.storeId);
+}
+function buildStoreEventPayload(store) {
+  return { id: store.id, tenantId: store.tenantId, organizationId: store.organizationId };
+}
+function buildStoreDomainBindingEventPayload(binding) {
+  const payload = {
+    id: binding.id,
+    storeId: binding.storeId,
+    domainMappingId: binding.domainMappingId,
+    tenantId: binding.tenantId,
+    organizationId: binding.organizationId
+  };
+  const previous = previousDomainBindingPlacements.get(binding);
+  if (previous && previous.storeId !== binding.storeId) payload.previousStoreId = previous.storeId;
+  if (previous && previous.domainMappingId !== binding.domainMappingId) {
+    payload.previousDomainMappingId = previous.domainMappingId;
+  }
+  return payload;
+}
+function buildStoreChannelBindingEventPayload(binding) {
+  const payload = {
+    id: binding.id,
+    storeId: binding.storeId,
+    salesChannelId: binding.salesChannelId,
+    tenantId: binding.tenantId,
+    organizationId: binding.organizationId
+  };
+  const previousStoreId = previousChannelBindingStores.get(binding);
+  if (previousStoreId && previousStoreId !== binding.storeId) payload.previousStoreId = previousStoreId;
+  return payload;
+}
+function resourceKindFor(entity) {
+  const raw = `${ECOMMERCE_EVENTS_MODULE}.${entity}`;
+  return canonicalizeResourceTag(raw) ?? raw;
+}
+async function announceUpdatedRows(container, entity, eventId, rows, buildPayload) {
+  const resourceKind = resourceKindFor(entity);
+  for (const row of rows) {
+    await invalidateCrudCache(
+      container,
+      resourceKind,
+      { id: row.id, tenantId: row.tenantId, organizationId: row.organizationId },
+      row.tenantId,
+      "updated"
+    );
+    await emitEcommerceEvent(eventId, buildPayload(row), {
+      persistent: true,
+      tenantId: row.tenantId,
+      organizationId: row.organizationId
+    });
+  }
+}
+function announceStoresUpdated(container, stores) {
+  return announceUpdatedRows(container, STORE_EVENT_ENTITY, "ecommerce.store.updated", stores, buildStoreEventPayload);
+}
+function announceStoreBrandingUpdated(container, store) {
+  return announceUpdatedRows(container, STORE_EVENT_ENTITY, "ecommerce.store.branding_updated", [store], buildStoreEventPayload);
+}
+function announceStoreDomainBindingsUpdated(container, bindings) {
+  return announceUpdatedRows(container, STORE_DOMAIN_BINDING_EVENT_ENTITY, "ecommerce.store_domain_binding.updated", bindings, buildStoreDomainBindingEventPayload);
+}
+function announceStoreChannelBindingsUpdated(container, bindings) {
+  return announceUpdatedRows(container, STORE_CHANNEL_BINDING_EVENT_ENTITY, "ecommerce.store_channel_binding.updated", bindings, buildStoreChannelBindingEventPayload);
+}
+export {
+  ECOMMERCE_EVENTS_MODULE,
+  STORE_CHANNEL_BINDING_EVENT_ENTITY,
+  STORE_DOMAIN_BINDING_EVENT_ENTITY,
+  STORE_EVENT_ENTITY,
+  announceStoreBrandingUpdated,
+  announceStoreChannelBindingsUpdated,
+  announceStoreDomainBindingsUpdated,
+  announceStoresUpdated,
+  buildStoreChannelBindingEventPayload,
+  buildStoreDomainBindingEventPayload,
+  buildStoreEventPayload,
+  rememberChannelBindingStore,
+  rememberDomainBindingPlacement,
+  resourceKindFor
+};
+//# sourceMappingURL=crudEvents.js.map

package/dist/modules/ecommerce/lib/crudEvents.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ecommerce/lib/crudEvents.ts"],
+  "sourcesContent": ["import type { CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { canonicalizeResourceTag, invalidateCrudCache } from '@open-mercato/shared/lib/crud/cache'\nimport type { EcommerceStore, EcommerceStoreChannelBinding, EcommerceStoreDomainBinding } from '../data/entities'\nimport { emitEcommerceEvent, type EcommerceEventId } from '../events'\n\nexport const ECOMMERCE_EVENTS_MODULE = 'ecommerce'\nexport const STORE_EVENT_ENTITY = 'store'\nexport const STORE_DOMAIN_BINDING_EVENT_ENTITY = 'store_domain_binding'\nexport const STORE_CHANNEL_BINDING_EVENT_ENTITY = 'store_channel_binding'\n\nexport type StoreEventPayload = { id: string; tenantId: string; organizationId: string }\nexport type StoreDomainBindingEventPayload = StoreEventPayload & {\n  storeId: string\n  domainMappingId: string\n  previousStoreId?: string\n  previousDomainMappingId?: string\n}\nexport type StoreChannelBindingEventPayload = StoreEventPayload & {\n  storeId: string\n  salesChannelId: string\n  previousStoreId?: string\n}\n\ntype DomainBindingPlacementSnapshot = Pick<EcommerceStoreDomainBinding, 'storeId' | 'domainMappingId'>\n\nconst previousDomainBindingPlacements = new WeakMap<EcommerceStoreDomainBinding, DomainBindingPlacementSnapshot>()\nconst previousChannelBindingStores = new WeakMap<EcommerceStoreChannelBinding, string>()\n\n/**\n * Records where a domain binding pointed before an update, so its `updated` event also names the\n * store and domain mapping it moved away from and their cached storefront entries are evicted.\n */\nexport function rememberDomainBindingPlacement(binding: EcommerceStoreDomainBinding): void {\n  previousDomainBindingPlacements.set(binding, { storeId: binding.storeId, domainMappingId: binding.domainMappingId })\n}\n\n/** Channel-binding counterpart of `rememberDomainBindingPlacement`: the store it moved away from. */\nexport function rememberChannelBindingStore(binding: EcommerceStoreChannelBinding): void {\n  previousChannelBindingStores.set(binding, binding.storeId)\n}\n\nexport function buildStoreEventPayload(store: EcommerceStore): StoreEventPayload {\n  return { id: store.id, tenantId: store.tenantId, organizationId: store.organizationId }\n}\n\nexport function buildStoreDomainBindingEventPayload(binding: EcommerceStoreDomainBinding): StoreDomainBindingEventPayload {\n  const payload: StoreDomainBindingEventPayload = {\n    id: binding.id,\n    storeId: binding.storeId,\n    domainMappingId: binding.domainMappingId,\n    tenantId: binding.tenantId,\n    organizationId: binding.organizationId,\n  }\n  const previous = previousDomainBindingPlacements.get(binding)\n  if (previous && previous.storeId !== binding.storeId) payload.previousStoreId = previous.storeId\n  if (previous && previous.domainMappingId !== binding.domainMappingId) {\n    payload.previousDomainMappingId = previous.domainMappingId\n  }\n  return payload\n}\n\nexport function buildStoreChannelBindingEventPayload(\n  binding: EcommerceStoreChannelBinding,\n): StoreChannelBindingEventPayload {\n  const payload: StoreChannelBindingEventPayload = {\n    id: binding.id,\n    storeId: binding.storeId,\n    salesChannelId: binding.salesChannelId,\n    tenantId: binding.tenantId,\n    organizationId: binding.organizationId,\n  }\n  const previousStoreId = previousChannelBindingStores.get(binding)\n  if (previousStoreId && previousStoreId !== binding.storeId) payload.previousStoreId = previousStoreId\n  return payload\n}\n\nexport function resourceKindFor(entity: string): string {\n  const raw = `${ECOMMERCE_EVENTS_MODULE}.${entity}`\n  return canonicalizeResourceTag(raw) ?? raw\n}\n\ntype ScopedRow = { id: string; tenantId: string; organizationId: string }\n\nasync function announceUpdatedRows<TRow extends ScopedRow>(\n  container: CrudCtx['container'],\n  entity: string,\n  eventId: EcommerceEventId,\n  rows: TRow[],\n  buildPayload: (row: TRow) => StoreEventPayload,\n): Promise<void> {\n  const resourceKind = resourceKindFor(entity)\n  for (const row of rows) {\n    await invalidateCrudCache(\n      container,\n      resourceKind,\n      { id: row.id, tenantId: row.tenantId, organizationId: row.organizationId },\n      row.tenantId,\n      'updated',\n    )\n    await emitEcommerceEvent(eventId, buildPayload(row), {\n      persistent: true,\n      tenantId: row.tenantId,\n      organizationId: row.organizationId,\n    })\n  }\n}\n\nexport function announceStoresUpdated(container: CrudCtx['container'], stores: EcommerceStore[]): Promise<void> {\n  return announceUpdatedRows(container, STORE_EVENT_ENTITY, 'ecommerce.store.updated', stores, buildStoreEventPayload)\n}\n\nexport function announceStoreBrandingUpdated(container: CrudCtx['container'], store: EcommerceStore): Promise<void> {\n  return announceUpdatedRows(container, STORE_EVENT_ENTITY, 'ecommerce.store.branding_updated', [store], buildStoreEventPayload)\n}\n\nexport function announceStoreDomainBindingsUpdated(\n  container: CrudCtx['container'],\n  bindings: EcommerceStoreDomainBinding[],\n): Promise<void> {\n  return announceUpdatedRows(container, STORE_DOMAIN_BINDING_EVENT_ENTITY, 'ecommerce.store_domain_binding.updated', bindings, buildStoreDomainBindingEventPayload)\n}\n\nexport function announceStoreChannelBindingsUpdated(\n  container: CrudCtx['container'],\n  bindings: EcommerceStoreChannelBinding[],\n): Promise<void> {\n  return announceUpdatedRows(container, STORE_CHANNEL_BINDING_EVENT_ENTITY, 'ecommerce.store_channel_binding.updated', bindings, buildStoreChannelBindingEventPayload)\n}\n"],
+  "mappings": "AACA,SAAS,yBAAyB,2BAA2B;AAE7D,SAAS,0BAAiD;AAEnD,MAAM,0BAA0B;AAChC,MAAM,qBAAqB;AAC3B,MAAM,oCAAoC;AAC1C,MAAM,qCAAqC;AAiBlD,MAAM,kCAAkC,oBAAI,QAAqE;AACjH,MAAM,+BAA+B,oBAAI,QAA8C;AAMhF,SAAS,+BAA+B,SAA4C;AACzF,kCAAgC,IAAI,SAAS,EAAE,SAAS,QAAQ,SAAS,iBAAiB,QAAQ,gBAAgB,CAAC;AACrH;AAGO,SAAS,4BAA4B,SAA6C;AACvF,+BAA6B,IAAI,SAAS,QAAQ,OAAO;AAC3D;AAEO,SAAS,uBAAuB,OAA0C;AAC/E,SAAO,EAAE,IAAI,MAAM,IAAI,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AACxF;AAEO,SAAS,oCAAoC,SAAsE;AACxH,QAAM,UAA0C;AAAA,IAC9C,IAAI,QAAQ;AAAA,IACZ,SAAS,QAAQ;AAAA,IACjB,iBAAiB,QAAQ;AAAA,IACzB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,EAC1B;AACA,QAAM,WAAW,gCAAgC,IAAI,OAAO;AAC5D,MAAI,YAAY,SAAS,YAAY,QAAQ,QAAS,SAAQ,kBAAkB,SAAS;AACzF,MAAI,YAAY,SAAS,oBAAoB,QAAQ,iBAAiB;AACpE,YAAQ,0BAA0B,SAAS;AAAA,EAC7C;AACA,SAAO;AACT;AAEO,SAAS,qCACd,SACiC;AACjC,QAAM,UAA2C;AAAA,IAC/C,IAAI,QAAQ;AAAA,IACZ,SAAS,QAAQ;AAAA,IACjB,gBAAgB,QAAQ;AAAA,IACxB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,EAC1B;AACA,QAAM,kBAAkB,6BAA6B,IAAI,OAAO;AAChE,MAAI,mBAAmB,oBAAoB,QAAQ,QAAS,SAAQ,kBAAkB;AACtF,SAAO;AACT;AAEO,SAAS,gBAAgB,QAAwB;AACtD,QAAM,MAAM,GAAG,uBAAuB,IAAI,MAAM;AAChD,SAAO,wBAAwB,GAAG,KAAK;AACzC;AAIA,eAAe,oBACb,WACA,QACA,SACA,MACA,cACe;AACf,QAAM,eAAe,gBAAgB,MAAM;AAC3C,aAAW,OAAO,MAAM;AACtB,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,EAAE,IAAI,IAAI,IAAI,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,MACzE,IAAI;AAAA,MACJ;AAAA,IACF;AACA,UAAM,mBAAmB,SAAS,aAAa,GAAG,GAAG;AAAA,MACnD,YAAY;AAAA,MACZ,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB,CAAC;AAAA,EACH;AACF;AAEO,SAAS,sBAAsB,WAAiC,QAAyC;AAC9G,SAAO,oBAAoB,WAAW,oBAAoB,2BAA2B,QAAQ,sBAAsB;AACrH;AAEO,SAAS,6BAA6B,WAAiC,OAAsC;AAClH,SAAO,oBAAoB,WAAW,oBAAoB,oCAAoC,CAAC,KAAK,GAAG,sBAAsB;AAC/H;AAEO,SAAS,mCACd,WACA,UACe;AACf,SAAO,oBAAoB,WAAW,mCAAmC,0CAA0C,UAAU,mCAAmC;AAClK;AAEO,SAAS,oCACd,WACA,UACe;AACf,SAAO,oBAAoB,WAAW,oCAAoC,2CAA2C,UAAU,oCAAoC;AACrK;",
+  "names": []
+}

package/dist/modules/ecommerce/lib/crudSupport.js

@@ -0,0 +1,64 @@
+import { z } from "zod";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+function resolveWriteScope(ctx) {
+  const tenantId = ctx.auth?.tenantId ?? null;
+  if (!tenantId) throw new CrudHttpError(400, { error: "[internal] ecommerce write scope is missing a tenant id" });
+  const organizationId = resolveScopeOrganizationId(ctx);
+  if (!organizationId) {
+    throw new CrudHttpError(400, { error: "[internal] ecommerce write scope is missing an organization id" });
+  }
+  return { tenantId, organizationId };
+}
+function resolveScopeOrganizationId(ctx) {
+  return ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null;
+}
+const recordIdSchema = z.string().uuid();
+async function assertRecordInWriteScope(ctx, entityName, id, notFound) {
+  const tenantId = ctx.auth?.tenantId ?? null;
+  const organizationId = resolveScopeOrganizationId(ctx);
+  if (typeof id !== "string" || !recordIdSchema.safeParse(id).success || !tenantId || !organizationId) return;
+  const em = ctx.container.resolve("em").fork();
+  const record = await findOneWithDecryption(
+    em,
+    entityName,
+    { id, tenantId, deletedAt: null },
+    void 0,
+    { tenantId, organizationId }
+  );
+  if (!record || record.organizationId === organizationId) return;
+  throw new CrudHttpError(404, { error: await translateEcommerceError(notFound.key, notFound.fallback) });
+}
+function hasOwn(input, key) {
+  return Object.prototype.hasOwnProperty.call(input, key);
+}
+async function translateEcommerceError(key, fallback) {
+  try {
+    const { translate } = await resolveTranslations();
+    return translate(key, fallback);
+  } catch {
+    return fallback;
+  }
+}
+const ECOMMERCE_INTERNAL_ERROR_KEY = "ecommerce.errors.internal";
+const ECOMMERCE_INTERNAL_ERROR_FALLBACK = "Something went wrong. Try again.";
+async function ecommerceInternalErrorBody() {
+  return { error: await translateEcommerceError(ECOMMERCE_INTERNAL_ERROR_KEY, ECOMMERCE_INTERNAL_ERROR_FALLBACK) };
+}
+function fieldError(status, fieldErrors) {
+  const [message] = Object.values(fieldErrors);
+  return new CrudHttpError(status, { error: message, fieldErrors });
+}
+export {
+  ECOMMERCE_INTERNAL_ERROR_FALLBACK,
+  ECOMMERCE_INTERNAL_ERROR_KEY,
+  assertRecordInWriteScope,
+  ecommerceInternalErrorBody,
+  fieldError,
+  hasOwn,
+  resolveScopeOrganizationId,
+  resolveWriteScope,
+  translateEcommerceError
+};
+//# sourceMappingURL=crudSupport.js.map

package/dist/modules/ecommerce/lib/crudSupport.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ecommerce/lib/crudSupport.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { EntityName, FilterQuery } from '@mikro-orm/core'\nimport type { CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\n\nexport type Translate = (key: string, fallback?: string) => string\n\nexport type EcommerceWriteScope = { tenantId: string; organizationId: string }\n\nexport function resolveWriteScope(ctx: CrudCtx): EcommerceWriteScope {\n  const tenantId = ctx.auth?.tenantId ?? null\n  if (!tenantId) throw new CrudHttpError(400, { error: '[internal] ecommerce write scope is missing a tenant id' })\n  const organizationId = resolveScopeOrganizationId(ctx)\n  if (!organizationId) {\n    throw new CrudHttpError(400, { error: '[internal] ecommerce write scope is missing an organization id' })\n  }\n  return { tenantId, organizationId }\n}\n\nexport function resolveScopeOrganizationId(ctx: CrudCtx): string | null {\n  return ctx.selectedOrganizationId ?? ctx.auth?.orgId ?? null\n}\n\nconst recordIdSchema = z.string().uuid()\n\ntype ScopedRecord = { id: string; tenantId: string; organizationId: string; deletedAt?: Date | null }\n\n/**\n * Writes, reference checks, enrichers and the branding routes all work in the single organization of\n * `resolveWriteScope`, while the CRUD factory also admits descendant organizations. Updates and\n * deletes are held to that organization too, so a parent selection cannot half-edit a child\n * organization's record; a record outside it answers the same 404 as a missing one.\n */\nexport async function assertRecordInWriteScope<T extends ScopedRecord>(\n  ctx: CrudCtx,\n  entityName: EntityName<T>,\n  id: unknown,\n  notFound: { key: string; fallback: string },\n): Promise<void> {\n  const tenantId = ctx.auth?.tenantId ?? null\n  const organizationId = resolveScopeOrganizationId(ctx)\n  if (typeof id !== 'string' || !recordIdSchema.safeParse(id).success || !tenantId || !organizationId) return\n  const em = (ctx.container.resolve('em') as EntityManager).fork()\n  const record = await findOneWithDecryption(\n    em,\n    entityName,\n    { id, tenantId, deletedAt: null } as FilterQuery<T>,\n    undefined,\n    { tenantId, organizationId },\n  )\n  if (!record || record.organizationId === organizationId) return\n  throw new CrudHttpError(404, { error: await translateEcommerceError(notFound.key, notFound.fallback) })\n}\n\nexport function hasOwn(input: object, key: string): boolean {\n  return Object.prototype.hasOwnProperty.call(input, key)\n}\n\n/**\n * A client-facing error message from the `ecommerce.errors.*` catalogue, falling back to `fallback`\n * when translations cannot be loaded (route catch blocks must still answer).\n */\nexport async function translateEcommerceError(key: string, fallback: string): Promise<string> {\n  try {\n    const { translate } = await resolveTranslations()\n    return translate(key, fallback)\n  } catch {\n    return fallback\n  }\n}\n\nexport const ECOMMERCE_INTERNAL_ERROR_KEY = 'ecommerce.errors.internal'\nexport const ECOMMERCE_INTERNAL_ERROR_FALLBACK = 'Something went wrong. Try again.'\n\nexport async function ecommerceInternalErrorBody(): Promise<{ error: string }> {\n  return { error: await translateEcommerceError(ECOMMERCE_INTERNAL_ERROR_KEY, ECOMMERCE_INTERNAL_ERROR_FALLBACK) }\n}\n\nexport function fieldError(status: number, fieldErrors: Record<string, string>): CrudHttpError {\n  const [message] = Object.values(fieldErrors)\n  return new CrudHttpError(status, { error: message, fieldErrors })\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAIlB,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AAM7B,SAAS,kBAAkB,KAAmC;AACnE,QAAM,WAAW,IAAI,MAAM,YAAY;AACvC,MAAI,CAAC,SAAU,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,0DAA0D,CAAC;AAChH,QAAM,iBAAiB,2BAA2B,GAAG;AACrD,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,iEAAiE,CAAC;AAAA,EAC1G;AACA,SAAO,EAAE,UAAU,eAAe;AACpC;AAEO,SAAS,2BAA2B,KAA6B;AACtE,SAAO,IAAI,0BAA0B,IAAI,MAAM,SAAS;AAC1D;AAEA,MAAM,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAUvC,eAAsB,yBACpB,KACA,YACA,IACA,UACe;AACf,QAAM,WAAW,IAAI,MAAM,YAAY;AACvC,QAAM,iBAAiB,2BAA2B,GAAG;AACrD,MAAI,OAAO,OAAO,YAAY,CAAC,eAAe,UAAU,EAAE,EAAE,WAAW,CAAC,YAAY,CAAC,eAAgB;AACrG,QAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,UAAU,WAAW,KAAK;AAAA,IAChC;AAAA,IACA,EAAE,UAAU,eAAe;AAAA,EAC7B;AACA,MAAI,CAAC,UAAU,OAAO,mBAAmB,eAAgB;AACzD,QAAM,IAAI,cAAc,KAAK,EAAE,OAAO,MAAM,wBAAwB,SAAS,KAAK,SAAS,QAAQ,EAAE,CAAC;AACxG;AAEO,SAAS,OAAO,OAAe,KAAsB;AAC1D,SAAO,OAAO,UAAU,eAAe,KAAK,OAAO,GAAG;AACxD;AAMA,eAAsB,wBAAwB,KAAa,UAAmC;AAC5F,MAAI;AACF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,UAAU,KAAK,QAAQ;AAAA,EAChC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,+BAA+B;AACrC,MAAM,oCAAoC;AAEjD,eAAsB,6BAAyD;AAC7E,SAAO,EAAE,OAAO,MAAM,wBAAwB,8BAA8B,iCAAiC,EAAE;AACjH;AAEO,SAAS,WAAW,QAAgB,aAAoD;AAC7F,QAAM,CAAC,OAAO,IAAI,OAAO,OAAO,WAAW;AAC3C,SAAO,IAAI,cAAc,QAAQ,EAAE,OAAO,SAAS,YAAY,CAAC;AAClE;",
+  "names": []
+}

package/dist/modules/ecommerce/lib/domainBindingRebind.js

@@ -0,0 +1,99 @@
+import { invalidateCrudCache } from "@open-mercato/shared/lib/crud/cache";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { EcommerceStoreDomainBinding } from "../data/entities.js";
+import { resourceKindFor, STORE_DOMAIN_BINDING_EVENT_ENTITY } from "./crudEvents.js";
+import { domainBindingEvents, domainBindingIndexer } from "./storeBindingCascade.js";
+import {
+  asPayloadRecord,
+  readEventScope,
+  readPayloadString,
+  tryResolveService
+} from "./subscriberSupport.js";
+const logger = createLogger("ecommerce").child({ component: "domain-binding-rebind" });
+function readDomainMappingReplacement(payload, ctx) {
+  const record = asPayloadRecord(payload);
+  const domainMappingId = readPayloadString(record, "id");
+  const replacedDomainMappingId = readPayloadString(record, "replacedDomainId");
+  const { tenantId, organizationId } = readEventScope(record, ctx);
+  if (!domainMappingId || !replacedDomainMappingId || !tenantId || !organizationId) return null;
+  if (domainMappingId === replacedDomainMappingId) return null;
+  return { domainMappingId, replacedDomainMappingId, tenantId, organizationId };
+}
+function prefixKey(binding) {
+  return binding.pathPrefix ?? "";
+}
+function findLiveBindings(em, domainMappingId, replacement) {
+  const scope = { tenantId: replacement.tenantId, organizationId: replacement.organizationId };
+  return findWithDecryption(
+    em,
+    EcommerceStoreDomainBinding,
+    { domainMappingId, ...scope, deletedAt: null },
+    void 0,
+    scope
+  );
+}
+async function announceRebound(ctx, bindings) {
+  const dataEngine = tryResolveService(ctx, "dataEngine");
+  if (dataEngine) {
+    for (const binding of bindings) {
+      dataEngine.markOrmEntityChange({
+        action: "updated",
+        entity: binding,
+        identifiers: { id: binding.id, tenantId: binding.tenantId, organizationId: binding.organizationId },
+        events: domainBindingEvents,
+        indexer: domainBindingIndexer
+      });
+    }
+    await dataEngine.flushOrmEntityChanges();
+  }
+  const container = { resolve: ctx.resolve };
+  const resourceKind = resourceKindFor(STORE_DOMAIN_BINDING_EVENT_ENTITY);
+  for (const binding of bindings) {
+    await invalidateCrudCache(
+      container,
+      resourceKind,
+      { id: binding.id, tenantId: binding.tenantId, organizationId: binding.organizationId },
+      binding.tenantId,
+      "updated"
+    );
+  }
+}
+async function rebindReplacedDomainMapping(ctx, replacement) {
+  const rootEm = tryResolveService(ctx, "em");
+  if (!rootEm) throw new Error("[internal] ecommerce domain re-binding requires the DI entity manager");
+  const em = rootEm.fork();
+  const superseded = await findLiveBindings(em, replacement.replacedDomainMappingId, replacement);
+  if (superseded.length === 0) return { rebound: [], skipped: [] };
+  const existing = await findLiveBindings(em, replacement.domainMappingId, replacement);
+  const takenPrefixes = new Set(existing.map(prefixKey));
+  const rebound = [];
+  const skipped = [];
+  for (const binding of superseded) {
+    const key = prefixKey(binding);
+    if (takenPrefixes.has(key)) {
+      skipped.push(binding);
+      continue;
+    }
+    takenPrefixes.add(key);
+    binding.domainMappingId = replacement.domainMappingId;
+    rebound.push(binding);
+  }
+  if (rebound.length > 0) await em.flush();
+  for (const binding of skipped) {
+    logger.warn("Domain binding not re-pointed: path prefix already bound on the replacement mapping", {
+      bindingId: binding.id,
+      storeId: binding.storeId,
+      pathPrefix: binding.pathPrefix ?? null,
+      domainMappingId: replacement.domainMappingId,
+      replacedDomainMappingId: replacement.replacedDomainMappingId
+    });
+  }
+  if (rebound.length > 0) await announceRebound(ctx, rebound);
+  return { rebound, skipped };
+}
+export {
+  readDomainMappingReplacement,
+  rebindReplacedDomainMapping
+};
+//# sourceMappingURL=domainBindingRebind.js.map

package/dist/modules/ecommerce/lib/domainBindingRebind.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ecommerce/lib/domainBindingRebind.ts"],
+  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport { invalidateCrudCache } from '@open-mercato/shared/lib/crud/cache'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { EcommerceStoreDomainBinding } from '../data/entities'\nimport { resourceKindFor, STORE_DOMAIN_BINDING_EVENT_ENTITY } from './crudEvents'\nimport { domainBindingEvents, domainBindingIndexer } from './storeBindingCascade'\nimport {\n  asPayloadRecord,\n  readEventScope,\n  readPayloadString,\n  tryResolveService,\n  type EcommerceSubscriberContext,\n} from './subscriberSupport'\n\n/**\n * Follows `customer_accounts` domain supersession (SPEC-029 \u00A75.2, D5): when a replacement mapping\n * becomes active, `customer_accounts.domain_mapping.replaced` carries the new mapping as `id` and the\n * superseded one as `replacedDomainId`. Every live binding on the superseded id is re-pointed to the\n * new id within the same tenant and organization. Re-running is a no-op because no binding is left\n * on the superseded id; a binding whose `path_prefix` is already taken on the new mapping stays on\n * the superseded id (dangling, R3) and is logged.\n */\n\nexport type DomainMappingReplacement = {\n  domainMappingId: string\n  replacedDomainMappingId: string\n  tenantId: string\n  organizationId: string\n}\n\nexport type DomainBindingRebindResult = {\n  rebound: EcommerceStoreDomainBinding[]\n  skipped: EcommerceStoreDomainBinding[]\n}\n\nconst logger = createLogger('ecommerce').child({ component: 'domain-binding-rebind' })\n\nexport function readDomainMappingReplacement(\n  payload: unknown,\n  ctx: EcommerceSubscriberContext,\n): DomainMappingReplacement | null {\n  const record = asPayloadRecord(payload)\n  const domainMappingId = readPayloadString(record, 'id')\n  const replacedDomainMappingId = readPayloadString(record, 'replacedDomainId')\n  const { tenantId, organizationId } = readEventScope(record, ctx)\n  if (!domainMappingId || !replacedDomainMappingId || !tenantId || !organizationId) return null\n  if (domainMappingId === replacedDomainMappingId) return null\n  return { domainMappingId, replacedDomainMappingId, tenantId, organizationId }\n}\n\nfunction prefixKey(binding: EcommerceStoreDomainBinding): string {\n  return binding.pathPrefix ?? ''\n}\n\nfunction findLiveBindings(\n  em: EntityManager,\n  domainMappingId: string,\n  replacement: DomainMappingReplacement,\n): Promise<EcommerceStoreDomainBinding[]> {\n  const scope = { tenantId: replacement.tenantId, organizationId: replacement.organizationId }\n  return findWithDecryption(\n    em,\n    EcommerceStoreDomainBinding,\n    { domainMappingId, ...scope, deletedAt: null } as FilterQuery<EcommerceStoreDomainBinding>,\n    undefined,\n    scope,\n  )\n}\n\nasync function announceRebound(\n  ctx: EcommerceSubscriberContext,\n  bindings: EcommerceStoreDomainBinding[],\n): Promise<void> {\n  const dataEngine = tryResolveService<DataEngine>(ctx, 'dataEngine')\n  if (dataEngine) {\n    for (const binding of bindings) {\n      dataEngine.markOrmEntityChange({\n        action: 'updated',\n        entity: binding,\n        identifiers: { id: binding.id, tenantId: binding.tenantId, organizationId: binding.organizationId },\n        events: domainBindingEvents,\n        indexer: domainBindingIndexer,\n      })\n    }\n    await dataEngine.flushOrmEntityChanges()\n  }\n  const container = { resolve: ctx.resolve } as unknown as AwilixContainer\n  const resourceKind = resourceKindFor(STORE_DOMAIN_BINDING_EVENT_ENTITY)\n  for (const binding of bindings) {\n    await invalidateCrudCache(\n      container,\n      resourceKind,\n      { id: binding.id, tenantId: binding.tenantId, organizationId: binding.organizationId },\n      binding.tenantId,\n      'updated',\n    )\n  }\n}\n\nexport async function rebindReplacedDomainMapping(\n  ctx: EcommerceSubscriberContext,\n  replacement: DomainMappingReplacement,\n): Promise<DomainBindingRebindResult> {\n  const rootEm = tryResolveService<EntityManager>(ctx, 'em')\n  if (!rootEm) throw new Error('[internal] ecommerce domain re-binding requires the DI entity manager')\n  const em = rootEm.fork()\n  const superseded = await findLiveBindings(em, replacement.replacedDomainMappingId, replacement)\n  if (superseded.length === 0) return { rebound: [], skipped: [] }\n  const existing = await findLiveBindings(em, replacement.domainMappingId, replacement)\n  const takenPrefixes = new Set(existing.map(prefixKey))\n  const rebound: EcommerceStoreDomainBinding[] = []\n  const skipped: EcommerceStoreDomainBinding[] = []\n  for (const binding of superseded) {\n    const key = prefixKey(binding)\n    if (takenPrefixes.has(key)) {\n      skipped.push(binding)\n      continue\n    }\n    takenPrefixes.add(key)\n    binding.domainMappingId = replacement.domainMappingId\n    rebound.push(binding)\n  }\n  if (rebound.length > 0) await em.flush()\n  for (const binding of skipped) {\n    logger.warn('Domain binding not re-pointed: path prefix already bound on the replacement mapping', {\n      bindingId: binding.id,\n      storeId: binding.storeId,\n      pathPrefix: binding.pathPrefix ?? null,\n      domainMappingId: replacement.domainMappingId,\n      replacedDomainMappingId: replacement.replacedDomainMappingId,\n    })\n  }\n  if (rebound.length > 0) await announceRebound(ctx, rebound)\n  return { rebound, skipped }\n}\n"],
+  "mappings": "AAGA,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,mCAAmC;AAC5C,SAAS,iBAAiB,yCAAyC;AACnE,SAAS,qBAAqB,4BAA4B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAuBP,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,wBAAwB,CAAC;AAE9E,SAAS,6BACd,SACA,KACiC;AACjC,QAAM,SAAS,gBAAgB,OAAO;AACtC,QAAM,kBAAkB,kBAAkB,QAAQ,IAAI;AACtD,QAAM,0BAA0B,kBAAkB,QAAQ,kBAAkB;AAC5E,QAAM,EAAE,UAAU,eAAe,IAAI,eAAe,QAAQ,GAAG;AAC/D,MAAI,CAAC,mBAAmB,CAAC,2BAA2B,CAAC,YAAY,CAAC,eAAgB,QAAO;AACzF,MAAI,oBAAoB,wBAAyB,QAAO;AACxD,SAAO,EAAE,iBAAiB,yBAAyB,UAAU,eAAe;AAC9E;AAEA,SAAS,UAAU,SAA8C;AAC/D,SAAO,QAAQ,cAAc;AAC/B;AAEA,SAAS,iBACP,IACA,iBACA,aACwC;AACxC,QAAM,QAAQ,EAAE,UAAU,YAAY,UAAU,gBAAgB,YAAY,eAAe;AAC3F,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,EAAE,iBAAiB,GAAG,OAAO,WAAW,KAAK;AAAA,IAC7C;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,gBACb,KACA,UACe;AACf,QAAM,aAAa,kBAA8B,KAAK,YAAY;AAClE,MAAI,YAAY;AACd,eAAW,WAAW,UAAU;AAC9B,iBAAW,oBAAoB;AAAA,QAC7B,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,aAAa,EAAE,IAAI,QAAQ,IAAI,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,QAClG,QAAQ;AAAA,QACR,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,UAAM,WAAW,sBAAsB;AAAA,EACzC;AACA,QAAM,YAAY,EAAE,SAAS,IAAI,QAAQ;AACzC,QAAM,eAAe,gBAAgB,iCAAiC;AACtE,aAAW,WAAW,UAAU;AAC9B,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,EAAE,IAAI,QAAQ,IAAI,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,MACrF,QAAQ;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,4BACpB,KACA,aACoC;AACpC,QAAM,SAAS,kBAAiC,KAAK,IAAI;AACzD,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,uEAAuE;AACpG,QAAM,KAAK,OAAO,KAAK;AACvB,QAAM,aAAa,MAAM,iBAAiB,IAAI,YAAY,yBAAyB,WAAW;AAC9F,MAAI,WAAW,WAAW,EAAG,QAAO,EAAE,SAAS,CAAC,GAAG,SAAS,CAAC,EAAE;AAC/D,QAAM,WAAW,MAAM,iBAAiB,IAAI,YAAY,iBAAiB,WAAW;AACpF,QAAM,gBAAgB,IAAI,IAAI,SAAS,IAAI,SAAS,CAAC;AACrD,QAAM,UAAyC,CAAC;AAChD,QAAM,UAAyC,CAAC;AAChD,aAAW,WAAW,YAAY;AAChC,UAAM,MAAM,UAAU,OAAO;AAC7B,QAAI,cAAc,IAAI,GAAG,GAAG;AAC1B,cAAQ,KAAK,OAAO;AACpB;AAAA,IACF;AACA,kBAAc,IAAI,GAAG;AACrB,YAAQ,kBAAkB,YAAY;AACtC,YAAQ,KAAK,OAAO;AAAA,EACtB;AACA,MAAI,QAAQ,SAAS,EAAG,OAAM,GAAG,MAAM;AACvC,aAAW,WAAW,SAAS;AAC7B,WAAO,KAAK,uFAAuF;AAAA,MACjG,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ;AAAA,MACjB,YAAY,QAAQ,cAAc;AAAA,MAClC,iBAAiB,YAAY;AAAA,MAC7B,yBAAyB,YAAY;AAAA,IACvC,CAAC;AAAA,EACH;AACA,MAAI,QAAQ,SAAS,EAAG,OAAM,gBAAgB,KAAK,OAAO;AAC1D,SAAO,EAAE,SAAS,QAAQ;AAC5B;",
+  "names": []
+}

package/dist/modules/ecommerce/lib/domainMappingSummaries.js

@@ -0,0 +1,39 @@
+const DOMAIN_MAPPING_STATUSES = ["pending", "verified", "active", "dns_failed", "tls_failed"];
+function isDomainMappingStatus(value) {
+  return typeof value === "string" && DOMAIN_MAPPING_STATUSES.includes(value);
+}
+function toIsoString(value) {
+  if (!value) return null;
+  const date = value instanceof Date ? value : new Date(value);
+  return Number.isNaN(date.getTime()) ? null : date.toISOString();
+}
+function toSummary(record) {
+  return {
+    id: record.id,
+    hostname: record.hostname,
+    status: record.status ?? "pending",
+    lastDnsCheckAt: toIsoString(record.lastDnsCheckAt),
+    dnsFailureReason: record.dnsFailureReason ?? null,
+    tlsFailureReason: record.tlsFailureReason ?? null
+  };
+}
+function resolveDomainMappingReader(container) {
+  try {
+    const service = container.resolve("domainMappingService");
+    return service && typeof service.findByOrganization === "function" ? service : null;
+  } catch {
+    return null;
+  }
+}
+async function loadOrganizationDomainMappings(container, scope) {
+  const reader = resolveDomainMappingReader(container);
+  if (!reader) return null;
+  const records = await reader.findByOrganization(scope.organizationId, { tenantId: scope.tenantId });
+  return records.filter((record) => record.tenantId === scope.tenantId && record.organizationId === scope.organizationId).map(toSummary);
+}
+export {
+  DOMAIN_MAPPING_STATUSES,
+  isDomainMappingStatus,
+  loadOrganizationDomainMappings
+};
+//# sourceMappingURL=domainMappingSummaries.js.map

package/dist/modules/ecommerce/lib/domainMappingSummaries.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ecommerce/lib/domainMappingSummaries.ts"],
+  "sourcesContent": ["export const DOMAIN_MAPPING_STATUSES = ['pending', 'verified', 'active', 'dns_failed', 'tls_failed'] as const\n\nexport type DomainMappingStatus = (typeof DOMAIN_MAPPING_STATUSES)[number]\n\nexport type DomainMappingSummary = {\n  id: string\n  hostname: string\n  status: string\n  lastDnsCheckAt: string | null\n  dnsFailureReason: string | null\n  tlsFailureReason: string | null\n}\n\ntype DomainMappingRecord = {\n  id: string\n  hostname: string\n  organizationId: string\n  tenantId: string\n  status?: string | null\n  lastDnsCheckAt?: Date | string | null\n  dnsFailureReason?: string | null\n  tlsFailureReason?: string | null\n}\n\ntype DomainMappingReader = {\n  findByOrganization(organizationId: string, scope?: { tenantId?: string }): Promise<DomainMappingRecord[]>\n}\n\ntype ContainerLike = { resolve(name: string): unknown }\n\nexport function isDomainMappingStatus(value: unknown): value is DomainMappingStatus {\n  return typeof value === 'string' && (DOMAIN_MAPPING_STATUSES as readonly string[]).includes(value)\n}\n\nfunction toIsoString(value: Date | string | null | undefined): string | null {\n  if (!value) return null\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? null : date.toISOString()\n}\n\nfunction toSummary(record: DomainMappingRecord): DomainMappingSummary {\n  return {\n    id: record.id,\n    hostname: record.hostname,\n    status: record.status ?? 'pending',\n    lastDnsCheckAt: toIsoString(record.lastDnsCheckAt),\n    dnsFailureReason: record.dnsFailureReason ?? null,\n    tlsFailureReason: record.tlsFailureReason ?? null,\n  }\n}\n\nfunction resolveDomainMappingReader(container: unknown): DomainMappingReader | null {\n  try {\n    const service = (container as ContainerLike).resolve('domainMappingService') as DomainMappingReader | null | undefined\n    return service && typeof service.findByOrganization === 'function' ? service : null\n  } catch {\n    return null\n  }\n}\n\nexport async function loadOrganizationDomainMappings(\n  container: unknown,\n  scope: { organizationId: string; tenantId: string },\n): Promise<DomainMappingSummary[] | null> {\n  const reader = resolveDomainMappingReader(container)\n  if (!reader) return null\n  const records = await reader.findByOrganization(scope.organizationId, { tenantId: scope.tenantId })\n  return records\n    .filter((record) => record.tenantId === scope.tenantId && record.organizationId === scope.organizationId)\n    .map(toSummary)\n}\n"],
+  "mappings": "AAAO,MAAM,0BAA0B,CAAC,WAAW,YAAY,UAAU,cAAc,YAAY;AA8B5F,SAAS,sBAAsB,OAA8C;AAClF,SAAO,OAAO,UAAU,YAAa,wBAA8C,SAAS,KAAK;AACnG;AAEA,SAAS,YAAY,OAAwD;AAC3E,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,YAAY;AAChE;AAEA,SAAS,UAAU,QAAmD;AACpE,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,UAAU,OAAO;AAAA,IACjB,QAAQ,OAAO,UAAU;AAAA,IACzB,gBAAgB,YAAY,OAAO,cAAc;AAAA,IACjD,kBAAkB,OAAO,oBAAoB;AAAA,IAC7C,kBAAkB,OAAO,oBAAoB;AAAA,EAC/C;AACF;AAEA,SAAS,2BAA2B,WAAgD;AAClF,MAAI;AACF,UAAM,UAAW,UAA4B,QAAQ,sBAAsB;AAC3E,WAAO,WAAW,OAAO,QAAQ,uBAAuB,aAAa,UAAU;AAAA,EACjF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,+BACpB,WACA,OACwC;AACxC,QAAM,SAAS,2BAA2B,SAAS;AACnD,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,UAAU,MAAM,OAAO,mBAAmB,MAAM,gBAAgB,EAAE,UAAU,MAAM,SAAS,CAAC;AAClG,SAAO,QACJ,OAAO,CAAC,WAAW,OAAO,aAAa,MAAM,YAAY,OAAO,mBAAmB,MAAM,cAAc,EACvG,IAAI,SAAS;AAClB;",
+  "names": []
+}

package/dist/modules/ecommerce/lib/exclusiveFlag.js

@@ -0,0 +1,57 @@
+import { isUniqueViolation } from "@open-mercato/shared/lib/crud/errors";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+const PROMOTION_ATTEMPTS = 3;
+function flaggedRowsWhere(config, scope, keepId) {
+  const where = { ...scope, [config.flag]: true, deletedAt: null };
+  if (keepId) where.id = { $ne: keepId };
+  return where;
+}
+function ownRowWhere(scope, id) {
+  return { ...scope, id, deletedAt: null };
+}
+function flagData(config, value, now) {
+  const data = { [config.flag]: value };
+  if (now) data.updatedAt = now;
+  return data;
+}
+async function clearExclusiveFlag(em, config, scope, keepId) {
+  const where = flaggedRowsWhere(config, scope, keepId);
+  const cleared = await findWithDecryption(em, config.entity, where, void 0, {
+    tenantId: scope.tenantId ?? null,
+    organizationId: scope.organizationId ?? null
+  });
+  if (!cleared.length) return [];
+  await em.nativeUpdate(config.entity, where, flagData(config, false, /* @__PURE__ */ new Date()));
+  return cleared;
+}
+async function promoteExclusiveFlag(em, config, scope, id, now) {
+  for (let attempt = 1; ; attempt += 1) {
+    try {
+      const cleared = await em.transactional(async (tem) => {
+        const rows = await clearExclusiveFlag(tem, config, scope, id);
+        await tem.nativeUpdate(config.entity, ownRowWhere(scope, id), flagData(config, true, now));
+        return rows;
+      });
+      return { promoted: true, cleared };
+    } catch (err) {
+      if (!isUniqueViolation(err, config.constraint)) throw err;
+      if (attempt >= PROMOTION_ATTEMPTS) return { promoted: false, cleared: [] };
+    }
+  }
+}
+async function assignExclusiveFlag(em, config, scope, id, toConflict) {
+  try {
+    const cleared = await clearExclusiveFlag(em, config, scope, id);
+    await em.nativeUpdate(config.entity, ownRowWhere(scope, id), flagData(config, true));
+    return cleared;
+  } catch (err) {
+    if (isUniqueViolation(err, config.constraint)) throw toConflict();
+    throw err;
+  }
+}
+export {
+  assignExclusiveFlag,
+  clearExclusiveFlag,
+  promoteExclusiveFlag
+};
+//# sourceMappingURL=exclusiveFlag.js.map

package/dist/modules/ecommerce/lib/exclusiveFlag.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ecommerce/lib/exclusiveFlag.ts"],
+  "sourcesContent": ["import type { EntityData, EntityManager, EntityName, FilterQuery } from '@mikro-orm/postgresql'\nimport { isUniqueViolation } from '@open-mercato/shared/lib/crud/errors'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\n\nexport type ExclusiveFlagRow = { id: string }\n\nexport type ExclusiveFlagConfig<T extends ExclusiveFlagRow> = {\n  entity: EntityName<T>\n  flag: 'isPrimary' | 'isDefault'\n  constraint: string\n}\n\nexport type ExclusiveFlagScope = Record<string, string>\n\nconst PROMOTION_ATTEMPTS = 3\n\nfunction flaggedRowsWhere<T extends ExclusiveFlagRow>(\n  config: ExclusiveFlagConfig<T>,\n  scope: ExclusiveFlagScope,\n  keepId: string | null,\n): FilterQuery<T> {\n  const where: Record<string, unknown> = { ...scope, [config.flag]: true, deletedAt: null }\n  if (keepId) where.id = { $ne: keepId }\n  return where as FilterQuery<T>\n}\n\nfunction ownRowWhere<T extends ExclusiveFlagRow>(scope: ExclusiveFlagScope, id: string): FilterQuery<T> {\n  return { ...scope, id, deletedAt: null } as FilterQuery<T>\n}\n\nfunction flagData<T extends ExclusiveFlagRow>(config: ExclusiveFlagConfig<T>, value: boolean, now?: Date): EntityData<T> {\n  const data: Record<string, unknown> = { [config.flag]: value }\n  if (now) data.updatedAt = now\n  return data as EntityData<T>\n}\n\nexport async function clearExclusiveFlag<T extends ExclusiveFlagRow>(\n  em: EntityManager,\n  config: ExclusiveFlagConfig<T>,\n  scope: ExclusiveFlagScope,\n  keepId: string | null,\n): Promise<T[]> {\n  const where = flaggedRowsWhere(config, scope, keepId)\n  const cleared = await findWithDecryption(em, config.entity, where, undefined, {\n    tenantId: scope.tenantId ?? null,\n    organizationId: scope.organizationId ?? null,\n  })\n  if (!cleared.length) return []\n  await em.nativeUpdate(config.entity, where, flagData(config, false, new Date()))\n  return cleared\n}\n\nexport async function promoteExclusiveFlag<T extends ExclusiveFlagRow>(\n  em: EntityManager,\n  config: ExclusiveFlagConfig<T>,\n  scope: ExclusiveFlagScope,\n  id: string,\n  now: Date,\n): Promise<{ promoted: boolean; cleared: T[] }> {\n  for (let attempt = 1; ; attempt += 1) {\n    try {\n      const cleared = await em.transactional(async (tem) => {\n        const rows = await clearExclusiveFlag(tem, config, scope, id)\n        await tem.nativeUpdate(config.entity, ownRowWhere<T>(scope, id), flagData(config, true, now))\n        return rows\n      })\n      return { promoted: true, cleared }\n    } catch (err) {\n      if (!isUniqueViolation(err, config.constraint)) throw err\n      if (attempt >= PROMOTION_ATTEMPTS) return { promoted: false, cleared: [] }\n    }\n  }\n}\n\nexport async function assignExclusiveFlag<T extends ExclusiveFlagRow>(\n  em: EntityManager,\n  config: ExclusiveFlagConfig<T>,\n  scope: ExclusiveFlagScope,\n  id: string,\n  toConflict: () => unknown,\n): Promise<T[]> {\n  try {\n    const cleared = await clearExclusiveFlag(em, config, scope, id)\n    await em.nativeUpdate(config.entity, ownRowWhere<T>(scope, id), flagData(config, true))\n    return cleared\n  } catch (err) {\n    if (isUniqueViolation(err, config.constraint)) throw toConflict()\n    throw err\n  }\n}\n"],
+  "mappings": "AACA,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AAYnC,MAAM,qBAAqB;AAE3B,SAAS,iBACP,QACA,OACA,QACgB;AAChB,QAAM,QAAiC,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,GAAG,MAAM,WAAW,KAAK;AACxF,MAAI,OAAQ,OAAM,KAAK,EAAE,KAAK,OAAO;AACrC,SAAO;AACT;AAEA,SAAS,YAAwC,OAA2B,IAA4B;AACtG,SAAO,EAAE,GAAG,OAAO,IAAI,WAAW,KAAK;AACzC;AAEA,SAAS,SAAqC,QAAgC,OAAgB,KAA2B;AACvH,QAAM,OAAgC,EAAE,CAAC,OAAO,IAAI,GAAG,MAAM;AAC7D,MAAI,IAAK,MAAK,YAAY;AAC1B,SAAO;AACT;AAEA,eAAsB,mBACpB,IACA,QACA,OACA,QACc;AACd,QAAM,QAAQ,iBAAiB,QAAQ,OAAO,MAAM;AACpD,QAAM,UAAU,MAAM,mBAAmB,IAAI,OAAO,QAAQ,OAAO,QAAW;AAAA,IAC5E,UAAU,MAAM,YAAY;AAAA,IAC5B,gBAAgB,MAAM,kBAAkB;AAAA,EAC1C,CAAC;AACD,MAAI,CAAC,QAAQ,OAAQ,QAAO,CAAC;AAC7B,QAAM,GAAG,aAAa,OAAO,QAAQ,OAAO,SAAS,QAAQ,OAAO,oBAAI,KAAK,CAAC,CAAC;AAC/E,SAAO;AACT;AAEA,eAAsB,qBACpB,IACA,QACA,OACA,IACA,KAC8C;AAC9C,WAAS,UAAU,KAAK,WAAW,GAAG;AACpC,QAAI;AACF,YAAM,UAAU,MAAM,GAAG,cAAc,OAAO,QAAQ;AACpD,cAAM,OAAO,MAAM,mBAAmB,KAAK,QAAQ,OAAO,EAAE;AAC5D,cAAM,IAAI,aAAa,OAAO,QAAQ,YAAe,OAAO,EAAE,GAAG,SAAS,QAAQ,MAAM,GAAG,CAAC;AAC5F,eAAO;AAAA,MACT,CAAC;AACD,aAAO,EAAE,UAAU,MAAM,QAAQ;AAAA,IACnC,SAAS,KAAK;AACZ,UAAI,CAAC,kBAAkB,KAAK,OAAO,UAAU,EAAG,OAAM;AACtD,UAAI,WAAW,mBAAoB,QAAO,EAAE,UAAU,OAAO,SAAS,CAAC,EAAE;AAAA,IAC3E;AAAA,EACF;AACF;AAEA,eAAsB,oBACpB,IACA,QACA,OACA,IACA,YACc;AACd,MAAI;AACF,UAAM,UAAU,MAAM,mBAAmB,IAAI,QAAQ,OAAO,EAAE;AAC9D,UAAM,GAAG,aAAa,OAAO,QAAQ,YAAe,OAAO,EAAE,GAAG,SAAS,QAAQ,IAAI,CAAC;AACtF,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,kBAAkB,KAAK,OAAO,UAAU,EAAG,OAAM,WAAW;AAChE,UAAM;AAAA,EACR;AACF;",
+  "names": []
+}

package/dist/modules/ecommerce/lib/references.js

@@ -0,0 +1,70 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CatalogPriceKind } from "@open-mercato/core/modules/catalog/data/entities";
+import { SalesChannel } from "@open-mercato/core/modules/sales/data/entities";
+import { EcommerceStore } from "../data/entities.js";
+import { fieldError } from "./crudSupport.js";
+async function assertStoreInScope(em, storeId, scope, translate) {
+  const store = await findOneWithDecryption(
+    em,
+    EcommerceStore,
+    { id: storeId, tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null },
+    void 0,
+    scope
+  );
+  if (store) return;
+  throw fieldError(400, {
+    storeId: translate("ecommerce.errors.storeNotFound", "The selected store does not exist in this organization.")
+  });
+}
+async function assertDomainMappingInScope(container, domainMappingId, scope, translate) {
+  const service = container.resolve("domainMappingService");
+  const mapping = await service.findById(domainMappingId, { tenantId: scope.tenantId });
+  if (mapping && mapping.tenantId === scope.tenantId && mapping.organizationId === scope.organizationId) return;
+  throw fieldError(400, {
+    domainMappingId: translate(
+      "ecommerce.errors.domainMappingNotFound",
+      "The selected domain does not belong to this organization."
+    )
+  });
+}
+async function assertSalesChannelInScope(em, salesChannelId, scope, translate) {
+  const channel = await findOneWithDecryption(
+    em,
+    SalesChannel,
+    { id: salesChannelId, tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null },
+    void 0,
+    scope
+  );
+  if (channel) return;
+  throw fieldError(400, {
+    salesChannelId: translate(
+      "ecommerce.errors.salesChannelNotFound",
+      "The selected sales channel does not exist in this organization."
+    )
+  });
+}
+async function assertPriceKindInScope(em, priceKindId, scope, translate) {
+  const priceKind = await findOneWithDecryption(
+    em,
+    CatalogPriceKind,
+    {
+      id: priceKindId,
+      tenantId: scope.tenantId,
+      deletedAt: null,
+      $or: [{ organizationId: null }, { organizationId: scope.organizationId }]
+    },
+    void 0,
+    scope
+  );
+  if (priceKind) return;
+  throw fieldError(400, {
+    priceKindId: translate("ecommerce.errors.priceKindNotFound", "The selected price kind does not exist in this organization.")
+  });
+}
+export {
+  assertDomainMappingInScope,
+  assertPriceKindInScope,
+  assertSalesChannelInScope,
+  assertStoreInScope
+};
+//# sourceMappingURL=references.js.map

package/dist/modules/ecommerce/lib/references.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ecommerce/lib/references.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CatalogPriceKind } from '@open-mercato/core/modules/catalog/data/entities'\nimport { SalesChannel } from '@open-mercato/core/modules/sales/data/entities'\nimport { EcommerceStore } from '../data/entities'\nimport { fieldError, type EcommerceWriteScope, type Translate } from './crudSupport'\n\ntype DomainMappingReader = {\n  findById(id: string, scope?: { tenantId?: string }): Promise<{ tenantId: string; organizationId: string } | null>\n}\n\nexport async function assertStoreInScope(\n  em: EntityManager,\n  storeId: string,\n  scope: EcommerceWriteScope,\n  translate: Translate,\n): Promise<void> {\n  const store = await findOneWithDecryption(\n    em,\n    EcommerceStore,\n    { id: storeId, tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null },\n    undefined,\n    scope,\n  )\n  if (store) return\n  throw fieldError(400, {\n    storeId: translate('ecommerce.errors.storeNotFound', 'The selected store does not exist in this organization.'),\n  })\n}\n\nexport async function assertDomainMappingInScope(\n  container: CrudCtx['container'],\n  domainMappingId: string,\n  scope: EcommerceWriteScope,\n  translate: Translate,\n): Promise<void> {\n  const service = container.resolve<DomainMappingReader>('domainMappingService')\n  const mapping = await service.findById(domainMappingId, { tenantId: scope.tenantId })\n  if (mapping && mapping.tenantId === scope.tenantId && mapping.organizationId === scope.organizationId) return\n  throw fieldError(400, {\n    domainMappingId: translate(\n      'ecommerce.errors.domainMappingNotFound',\n      'The selected domain does not belong to this organization.',\n    ),\n  })\n}\n\nexport async function assertSalesChannelInScope(\n  em: EntityManager,\n  salesChannelId: string,\n  scope: EcommerceWriteScope,\n  translate: Translate,\n): Promise<void> {\n  const channel = await findOneWithDecryption(\n    em,\n    SalesChannel,\n    { id: salesChannelId, tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null },\n    undefined,\n    scope,\n  )\n  if (channel) return\n  throw fieldError(400, {\n    salesChannelId: translate(\n      'ecommerce.errors.salesChannelNotFound',\n      'The selected sales channel does not exist in this organization.',\n    ),\n  })\n}\n\nexport async function assertPriceKindInScope(\n  em: EntityManager,\n  priceKindId: string,\n  scope: EcommerceWriteScope,\n  translate: Translate,\n): Promise<void> {\n  const priceKind = await findOneWithDecryption(\n    em,\n    CatalogPriceKind,\n    {\n      id: priceKindId,\n      tenantId: scope.tenantId,\n      deletedAt: null,\n      $or: [{ organizationId: null }, { organizationId: scope.organizationId }],\n    },\n    undefined,\n    scope,\n  )\n  if (priceKind) return\n  throw fieldError(400, {\n    priceKindId: translate('ecommerce.errors.priceKindNotFound', 'The selected price kind does not exist in this organization.'),\n  })\n}\n"],
+  "mappings": "AAEA,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AACjC,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAC/B,SAAS,kBAA4D;AAMrE,eAAsB,mBACpB,IACA,SACA,OACA,WACe;AACf,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,SAAS,UAAU,MAAM,UAAU,gBAAgB,MAAM,gBAAgB,WAAW,KAAK;AAAA,IAC/F;AAAA,IACA;AAAA,EACF;AACA,MAAI,MAAO;AACX,QAAM,WAAW,KAAK;AAAA,IACpB,SAAS,UAAU,kCAAkC,yDAAyD;AAAA,EAChH,CAAC;AACH;AAEA,eAAsB,2BACpB,WACA,iBACA,OACA,WACe;AACf,QAAM,UAAU,UAAU,QAA6B,sBAAsB;AAC7E,QAAM,UAAU,MAAM,QAAQ,SAAS,iBAAiB,EAAE,UAAU,MAAM,SAAS,CAAC;AACpF,MAAI,WAAW,QAAQ,aAAa,MAAM,YAAY,QAAQ,mBAAmB,MAAM,eAAgB;AACvG,QAAM,WAAW,KAAK;AAAA,IACpB,iBAAiB;AAAA,MACf;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,0BACpB,IACA,gBACA,OACA,WACe;AACf,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,gBAAgB,UAAU,MAAM,UAAU,gBAAgB,MAAM,gBAAgB,WAAW,KAAK;AAAA,IACtG;AAAA,IACA;AAAA,EACF;AACA,MAAI,QAAS;AACb,QAAM,WAAW,KAAK;AAAA,IACpB,gBAAgB;AAAA,MACd;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,uBACpB,IACA,aACA,OACA,WACe;AACf,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,MACX,KAAK,CAAC,EAAE,gBAAgB,KAAK,GAAG,EAAE,gBAAgB,MAAM,eAAe,CAAC;AAAA,IAC1E;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,UAAW;AACf,QAAM,WAAW,KAAK;AAAA,IACpB,aAAa,UAAU,sCAAsC,8DAA8D;AAAA,EAC7H,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/ecommerce/lib/seedDraftStore.js

@@ -0,0 +1,99 @@
+import { isUniqueViolation } from "@open-mercato/shared/lib/crud/errors";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { defaultLocale } from "@open-mercato/shared/lib/i18n/config";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { slugify } from "@open-mercato/shared/lib/slugify";
+import { getTelemetryRuntime } from "@open-mercato/shared/lib/telemetry/runtime";
+import { Organization } from "@open-mercato/core/modules/directory/data/entities";
+import { EcommerceStore } from "../data/entities.js";
+import { ecommerceStoreCreateSchema } from "../data/validators.js";
+import { buildStoreEventPayload } from "./crudEvents.js";
+import { emitEcommerceEvent } from "../events.js";
+const logger = createLogger("ecommerce").child({ component: "seed-draft-store" });
+const DEFAULT_DRAFT_STORE_NAME = "Default store";
+const DEFAULT_DRAFT_STORE_CODE = "default";
+const DEFAULT_DRAFT_STORE_CURRENCY = "USD";
+const CODE_MAX_LENGTH = 80;
+function deriveDraftStoreIdentity(organizationName) {
+  const name = (organizationName ?? "").trim().slice(0, 200) || DEFAULT_DRAFT_STORE_NAME;
+  const slug = slugify(name).replace(/-{2,}/g, "-").slice(0, CODE_MAX_LENGTH).replace(/-+$/, "") || DEFAULT_DRAFT_STORE_CODE;
+  return { name, code: slug, slug };
+}
+async function tenantHasStore(em, tenantId) {
+  return await em.count(EcommerceStore, { tenantId }) > 0;
+}
+async function loadOrganizationName(em, scope) {
+  const organization = await findOneWithDecryption(
+    em,
+    Organization,
+    { id: scope.organizationId, tenant: scope.tenantId },
+    void 0,
+    scope
+  );
+  return organization?.name ?? null;
+}
+async function announceCreated(store) {
+  try {
+    await emitEcommerceEvent("ecommerce.store.created", buildStoreEventPayload(store), {
+      persistent: true,
+      tenantId: store.tenantId,
+      organizationId: store.organizationId
+    });
+  } catch (err) {
+    logger.warn("draft store created but the created event could not be emitted", { storeId: store.id, err });
+    getTelemetryRuntime()?.reportError(err, { module: "ecommerce", code: "ecommerce.seed_draft_store_event_failed" });
+  }
+}
+async function seedDraftStore(em, scope, options = {}) {
+  if (await tenantHasStore(em, scope.tenantId)) return { status: "exists" };
+  const identity = deriveDraftStoreIdentity(await loadOrganizationName(em, scope));
+  const resolvedCurrency = options.resolveCurrencyCode ? await options.resolveCurrencyCode() : null;
+  const input = ecommerceStoreCreateSchema.parse({
+    organizationId: scope.organizationId,
+    tenantId: scope.tenantId,
+    code: identity.code,
+    name: identity.name,
+    slug: identity.slug,
+    status: "draft",
+    defaultLocale,
+    supportedLocales: [defaultLocale],
+    defaultCurrencyCode: resolvedCurrency ?? DEFAULT_DRAFT_STORE_CURRENCY,
+    isPrimary: false
+  });
+  let store;
+  try {
+    store = await em.transactional(async (tem) => {
+      const created = tem.create(EcommerceStore, {
+        organizationId: input.organizationId,
+        tenantId: input.tenantId,
+        code: input.code,
+        name: input.name,
+        slug: input.slug,
+        status: input.status,
+        defaultLocale: input.defaultLocale,
+        supportedLocales: input.supportedLocales,
+        defaultCurrencyCode: input.defaultCurrencyCode,
+        isPrimary: false,
+        settings: input.settings
+      });
+      tem.persist(created);
+      await tem.flush();
+      return created;
+    });
+  } catch (err) {
+    if (!isUniqueViolation(err)) throw err;
+    logger.info("draft store already seeded concurrently", { tenantId: scope.tenantId, organizationId: scope.organizationId });
+    return { status: "exists" };
+  }
+  await announceCreated(store);
+  logger.info("draft store seeded", { tenantId: scope.tenantId, organizationId: scope.organizationId, storeId: store.id });
+  return { status: "created", storeId: store.id };
+}
+export {
+  DEFAULT_DRAFT_STORE_CODE,
+  DEFAULT_DRAFT_STORE_CURRENCY,
+  DEFAULT_DRAFT_STORE_NAME,
+  deriveDraftStoreIdentity,
+  seedDraftStore
+};
+//# sourceMappingURL=seedDraftStore.js.map