@open-mercato/core 0.9.1-develop.7474.1.51db10479d → 0.9.1-develop.7475.1.28ca93ed97

package/src/modules/catalog/api/prices/history/route.ts

@@ -0,0 +1,139 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
+import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
+import { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+import { getTelemetryRuntime } from '@open-mercato/shared/lib/telemetry/runtime'
+import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
+import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import { CatalogPriceHistoryEntry } from '../../../data/entities'
+import { priceHistoryQuerySchema } from '../../../data/validators'
+import { PRICE_HISTORY_CHANGE_TYPES, PRICE_HISTORY_SOURCES } from '../../../lib/omnibusTypes'
+import {
+  applyPriceHistoryCursor,
+  buildPriceHistoryWhere,
+  decodePriceHistoryCursor,
+  encodePriceHistoryCursor,
+  resolvePriceHistoryOrganizationIds,
+  serializePriceHistoryEntry,
+} from '../../../lib/priceHistoryQuery'
+
+const logger = createLogger('catalog')
+
+export const metadata = {
+  GET: { requireAuth: true, requireFeatures: ['catalog.price_history.view'] },
+}
+
+export async function GET(req: Request) {
+  try {
+    const auth = await getAuthFromRequest(req)
+    if (!auth || !auth.tenantId) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const url = new URL(req.url)
+    const parsed = priceHistoryQuerySchema.safeParse(Object.fromEntries(url.searchParams))
+    if (!parsed.success) {
+      return NextResponse.json(
+        { error: 'Invalid query', details: z.flattenError(parsed.error) },
+        { status: 400 },
+      )
+    }
+    const query = parsed.data
+
+    const container = await createRequestContainer()
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })
+    const tenantId = scope.tenantId ?? auth.tenantId
+    const organizationIds = resolvePriceHistoryOrganizationIds(scope, auth.orgId)
+    if (organizationIds !== null && organizationIds.length === 0) {
+      return NextResponse.json({ items: [], nextCursor: null, ...(query.includeTotal === 'true' ? { total: 0 } : {}) })
+    }
+
+    const em = (container.resolve('em') as EntityManager).fork()
+    const baseWhere = buildPriceHistoryWhere(
+      { tenantId, organizationIds },
+      query,
+    )
+    const cursor = decodePriceHistoryCursor(query.cursor)
+    const rows = await findWithDecryption(
+      em,
+      CatalogPriceHistoryEntry,
+      applyPriceHistoryCursor(baseWhere, cursor),
+      { orderBy: { recordedAt: 'desc', id: 'desc' }, limit: query.pageSize + 1 },
+      { tenantId, organizationId: scope.selectedId ?? auth.orgId ?? null },
+    )
+    const hasMore = rows.length > query.pageSize
+    const pageRows = hasMore ? rows.slice(0, query.pageSize) : rows
+    const items = pageRows.map(serializePriceHistoryEntry)
+    const last = items[items.length - 1]
+    const nextCursor = hasMore && last ? encodePriceHistoryCursor({ recordedAt: last.recordedAt, id: last.id }) : null
+
+    if (query.includeTotal === 'true') {
+      const total = await em.count(CatalogPriceHistoryEntry, baseWhere)
+      return NextResponse.json({ items, nextCursor, total })
+    }
+    return NextResponse.json({ items, nextCursor })
+  } catch (err) {
+    logger.error('catalog.prices.history.GET Unexpected error', { err })
+    getTelemetryRuntime()?.reportError(err, {
+      module: 'catalog',
+      code: 'catalog.price_history_read_failed',
+    })
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
+  }
+}
+
+const priceHistoryItemSchema = z.object({
+  id: z.string().uuid(),
+  priceId: z.string().uuid(),
+  productId: z.string().uuid(),
+  variantId: z.string().uuid().nullable(),
+  offerId: z.string().uuid().nullable(),
+  channelId: z.string().uuid().nullable(),
+  priceKindId: z.string().uuid(),
+  priceKindCode: z.string(),
+  currencyCode: z.string(),
+  unitPriceNet: z.string().nullable(),
+  unitPriceGross: z.string().nullable(),
+  taxRate: z.string().nullable(),
+  taxAmount: z.string().nullable(),
+  minQuantity: z.number().int().nullable(),
+  maxQuantity: z.number().int().nullable(),
+  startsAt: z.string().nullable(),
+  endsAt: z.string().nullable(),
+  recordedAt: z.string(),
+  changeType: z.enum(PRICE_HISTORY_CHANGE_TYPES),
+  source: z.enum(PRICE_HISTORY_SOURCES),
+  isAnnounced: z.boolean(),
+})
+
+const priceHistoryResponseSchema = z.object({
+  items: z.array(priceHistoryItemSchema),
+  nextCursor: z.string().nullable(),
+  total: z.number().int().optional(),
+})
+
+const errorSchema = z.object({ error: z.string() })
+
+export const openApi: OpenApiRouteDoc = {
+  tag: 'Catalog',
+  summary: 'Catalog price history',
+  methods: {
+    GET: {
+      summary: 'List recorded price history entries',
+      description:
+        'Returns immutable price history snapshots for one product and/or variant, ordered by recordedAt DESC, id DESC with keyset pagination. At least one of productId or variantId is required (400 otherwise) so every read stays on a scoped index. Monetary values are fixed 4-decimal strings. An invalid cursor returns the first page.',
+      query: priceHistoryQuerySchema,
+      responses: [
+        { status: 200, description: 'Price history page', schema: priceHistoryResponseSchema },
+      ],
+      errors: [
+        { status: 400, description: 'Invalid query, or neither productId nor variantId provided', schema: errorSchema },
+        { status: 401, description: 'Unauthorized', schema: errorSchema },
+        { status: 403, description: 'Missing catalog.price_history.view', schema: errorSchema },
+      ],
+    },
+  },
+}

package/src/modules/catalog/api/prices/omnibus-preview/route.ts

@@ -0,0 +1,202 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
+import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
+import { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+import { getTelemetryRuntime } from '@open-mercato/shared/lib/telemetry/runtime'
+import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
+import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import {
+  CatalogOffer,
+  CatalogPriceKind,
+  CatalogProduct,
+  CatalogProductPrice,
+  CatalogProductVariant,
+} from '../../../data/entities'
+import { omnibusPreviewQuerySchema } from '../../../data/validators'
+import { omnibusBlockSchema } from '../../../lib/omnibusTypes'
+import { resolveOmnibusPresentedEntries } from '../../../lib/omnibusPresentedEntry'
+import { resolvePriceHistoryOrganizationIds } from '../../../lib/priceHistoryQuery'
+import { resolvePriceVariantId, selectBestPrice, type PriceRow } from '../../../lib/pricing'
+import type { CatalogOmnibusService } from '../../../services/catalogOmnibusService'
+
+const logger = createLogger('catalog')
+
+export const metadata = {
+  GET: { requireAuth: true, requireFeatures: ['catalog.price_history.view'] },
+}
+
+const NOT_FOUND = { error: 'Not found' }
+
+function relationId(value: { id: string } | string | null | undefined): string | null {
+  if (!value) return null
+  return typeof value === 'string' ? value : value.id
+}
+
+export async function GET(req: Request) {
+  try {
+    const auth = await getAuthFromRequest(req)
+    if (!auth || !auth.tenantId) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const url = new URL(req.url)
+    const parsed = omnibusPreviewQuerySchema.safeParse(Object.fromEntries(url.searchParams))
+    if (!parsed.success) {
+      return NextResponse.json(
+        { error: 'Invalid query', details: z.flattenError(parsed.error) },
+        { status: 400 },
+      )
+    }
+    const query = parsed.data
+
+    const container = await createRequestContainer()
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })
+    const tenantId = scope.tenantId ?? auth.tenantId
+    const organizationIds = resolvePriceHistoryOrganizationIds(scope, auth.orgId)
+    if (organizationIds !== null && organizationIds.length === 0) {
+      return NextResponse.json(NOT_FOUND, { status: 404 })
+    }
+    const organizationFilter = organizationIds === null ? {} : { organizationId: { $in: organizationIds } }
+    const decryptionScope = { tenantId, organizationId: scope.selectedId ?? auth.orgId ?? null }
+    const em = (container.resolve('em') as EntityManager).fork()
+
+    const offer = query.offerId
+      ? await findOneWithDecryption(
+          em,
+          CatalogOffer,
+          { id: query.offerId, tenantId, deletedAt: null, ...organizationFilter },
+          undefined,
+          decryptionScope,
+        )
+      : null
+    if (query.offerId && !offer) return NextResponse.json(NOT_FOUND, { status: 404 })
+    const variant = query.variantId
+      ? await findOneWithDecryption(
+          em,
+          CatalogProductVariant,
+          { id: query.variantId, tenantId, deletedAt: null, ...organizationFilter },
+          undefined,
+          decryptionScope,
+        )
+      : null
+    if (query.variantId && !variant) return NextResponse.json(NOT_FOUND, { status: 404 })
+
+    const productIds = new Set(
+      [query.productId ?? null, relationId(offer?.product), relationId(variant?.product)].filter(
+        (id): id is string => typeof id === 'string',
+      ),
+    )
+    if (productIds.size !== 1) return NextResponse.json(NOT_FOUND, { status: 404 })
+    const [productId] = Array.from(productIds)
+    const product = await findOneWithDecryption(
+      em,
+      CatalogProduct,
+      { id: productId, tenantId, deletedAt: null, ...organizationFilter },
+      undefined,
+      decryptionScope,
+    )
+    if (!product) return NextResponse.json(NOT_FOUND, { status: 404 })
+    const organizationId = product.organizationId
+    const productScope = { tenantId, organizationId }
+
+    const priceKind = await findOneWithDecryption(
+      em,
+      CatalogPriceKind,
+      {
+        id: query.priceKindId,
+        tenantId,
+        deletedAt: null,
+        $or: [{ organizationId }, { organizationId: null }],
+      },
+      undefined,
+      productScope,
+    )
+    if (!priceKind) return NextResponse.json(NOT_FOUND, { status: 404 })
+
+    const priceRows = await findWithDecryption<CatalogProductPrice>(
+      em,
+      CatalogProductPrice,
+      {
+        tenantId,
+        organizationId,
+        priceKind: query.priceKindId,
+        currencyCode: query.currencyCode,
+        $or: [{ product: productId }, ...(query.variantId ? [{ variant: query.variantId }] : [])],
+      },
+      { populate: ['offer', 'variant', 'product', 'priceKind'] },
+      productScope,
+    )
+    const scopedRows = (priceRows as PriceRow[]).filter((row) => {
+      const rowVariantId = resolvePriceVariantId(row)
+      return !query.variantId || !rowVariantId || rowVariantId === query.variantId
+    })
+    const presentedPrice = selectBestPrice(scopedRows, {
+      channelId: query.channelId ?? null,
+      offerId: query.offerId ?? null,
+      priceKindId: query.priceKindId,
+      currencyCode: query.currencyCode,
+      quantity: 1,
+      date: new Date(),
+    })
+    const presentedEntries = presentedPrice
+      ? await resolveOmnibusPresentedEntries(em, [presentedPrice])
+      : new Map()
+
+    const service = container.resolve('catalogOmnibusService') as CatalogOmnibusService
+    const block = await service.resolveOmnibusBlock(
+      em,
+      {
+        tenantId,
+        organizationId,
+        productId,
+        variantId: query.variantId ?? null,
+        offerId: query.offerId ?? null,
+        channelId: query.channelId ?? null,
+        priceKindId: query.priceKindId,
+        currencyCode: query.currencyCode,
+        isStorefront: false,
+      },
+      presentedPrice ? presentedEntries.get(presentedPrice.id) ?? null : null,
+      priceKind.isPromotion === true,
+    )
+    return NextResponse.json(block)
+  } catch (err) {
+    logger.error('catalog.prices.omnibus-preview.GET Unexpected error', { err })
+    getTelemetryRuntime()?.reportError(err, {
+      module: 'catalog',
+      code: 'catalog.omnibus_preview_failed',
+    })
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
+  }
+}
+
+const errorSchema = z.object({ error: z.string() })
+
+export const openApi: OpenApiRouteDoc = {
+  tag: 'Catalog',
+  summary: 'Catalog Omnibus reference-price preview',
+  methods: {
+    GET: {
+      summary: 'Preview the Omnibus reference-price block',
+      description:
+        'Resolves the EU Omnibus reference-price block for one product, variant or offer and price kind, using the current active price of that kind as the presented entry. Returns null when Omnibus is disabled for the tenant. Monetary values are fixed 4-decimal strings.',
+      query: omnibusPreviewQuerySchema,
+      responses: [
+        {
+          status: 200,
+          description: 'Omnibus block, or null when Omnibus is disabled',
+          schema: omnibusBlockSchema.nullable(),
+        },
+      ],
+      errors: [
+        { status: 400, description: 'Invalid query', schema: errorSchema },
+        { status: 401, description: 'Unauthorized', schema: errorSchema },
+        { status: 403, description: 'Missing catalog.price_history.view', schema: errorSchema },
+        { status: 404, description: 'Product, variant, offer or price kind not found in scope', schema: errorSchema },
+      ],
+    },
+  },
+}