@openlup/platform 0.17.0 → 0.18.0

package/dist/shipping/shippingRatePorts.d.ts

@@ -0,0 +1,52 @@
+import type { HttpResponse } from "../http/index.js";
+import type { AdminShippingRateResponse, AdminSetShippingRateRequest, AdminSetShippingRateResponse } from "./contracts/shippingRate.js";
+/** Only the incumbent flat-rate reads, writes and best-effort audit. */
+export interface ShippingRateDataPort {
+    getShippingFlatMinor(): Promise<number>;
+    setShippingFlatMinor(minor: number): Promise<void>;
+    recordPromotionAudit(entry: {
+        actorId: string;
+        actorEmail: string | null;
+        action: "shipping_rate_change";
+        promotionId: string;
+        newValue: Record<string, unknown>;
+    }): Promise<void>;
+}
+type Authorization = {
+    ok: true;
+    userId: string;
+    role: "admin" | "distributor";
+    isMachineActor: boolean;
+} | {
+    ok: false;
+    code: "UNAUTHORIZED" | "FORBIDDEN";
+    message: string;
+    identityCode?: string;
+};
+export interface AdminShippingRateHandlerDeps {
+    dataPort: ShippingRateDataPort;
+    authorizeAdmin: () => Promise<Authorization>;
+    /** The host retains its authorization/error response context. */
+    resolveAdmin: (authorizeAdmin: () => Promise<Authorization>, res: HttpResponse) => Promise<{
+        userId: string;
+    } | null>;
+}
+type Schema<T> = {
+    safeParse(input: unknown): {
+        success: true;
+        data: T;
+    } | {
+        success: false;
+        error: {
+            flatten(): unknown;
+        };
+    };
+};
+/** Required host validation; there is no default amount policy. */
+export interface ShippingRateHandlerSchemas {
+    contractVersion: AdminShippingRateResponse["contractVersion"];
+    adminShippingRateResponseSchema: Schema<AdminShippingRateResponse>;
+    adminSetShippingRateRequestSchema: Schema<AdminSetShippingRateRequest>;
+    adminSetShippingRateResponseSchema: Schema<AdminSetShippingRateResponse>;
+}
+export {};

package/dist/shipping/shippingRatePorts.js

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openlup/platform",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "private": false,
   "description": "Runnable server substrate: Node HTTP runtime, BFF dispatch, scheduler, storage, data gateways and bundle composition; development preview.",
   "license": "Apache-2.0",
@@ -31,7 +31,7 @@
     "api:update": "npm run build && node --experimental-strip-types ./scripts/api-contract.ts --update"
   },
   "peerDependencies": {
-    "@openlup/core": "0.17.0",
+    "@openlup/core": "0.18.0",
     "pg": "^8.22.0",
     "@aws-sdk/client-s3": "^3.1144.0",
     "@types/pg": "^8.20.0"
@@ -115,6 +115,66 @@
       "types": "./dist/communications/contracts/index.d.ts",
       "import": "./dist/communications/contracts/index.js",
       "default": "./dist/communications/contracts/index.js"
+    },
+    "./catalog": {
+      "types": "./dist/catalog/index.d.ts",
+      "import": "./dist/catalog/index.js",
+      "default": "./dist/catalog/index.js"
+    },
+    "./catalog/contracts": {
+      "types": "./dist/catalog/contracts/index.d.ts",
+      "import": "./dist/catalog/contracts/index.js",
+      "default": "./dist/catalog/contracts/index.js"
+    },
+    "./pricing": {
+      "types": "./dist/pricing/index.d.ts",
+      "import": "./dist/pricing/index.js",
+      "default": "./dist/pricing/index.js"
+    },
+    "./pricing/contracts": {
+      "types": "./dist/pricing/contracts/index.d.ts",
+      "import": "./dist/pricing/contracts/index.js",
+      "default": "./dist/pricing/contracts/index.js"
+    },
+    "./promotions": {
+      "types": "./dist/promotions/index.d.ts",
+      "import": "./dist/promotions/index.js",
+      "default": "./dist/promotions/index.js"
+    },
+    "./promotions/contracts": {
+      "types": "./dist/promotions/contracts/index.d.ts",
+      "import": "./dist/promotions/contracts/index.js",
+      "default": "./dist/promotions/contracts/index.js"
+    },
+    "./communications/resend": {
+      "types": "./dist/communications/resend/index.d.ts",
+      "import": "./dist/communications/resend/index.js",
+      "default": "./dist/communications/resend/index.js"
+    },
+    "./communications/klaviyo": {
+      "types": "./dist/communications/klaviyo/index.d.ts",
+      "import": "./dist/communications/klaviyo/index.js",
+      "default": "./dist/communications/klaviyo/index.js"
+    },
+    "./inventory": {
+      "types": "./dist/inventory/index.d.ts",
+      "import": "./dist/inventory/index.js",
+      "default": "./dist/inventory/index.js"
+    },
+    "./inventory/contracts": {
+      "types": "./dist/inventory/contracts/index.d.ts",
+      "import": "./dist/inventory/contracts/index.js",
+      "default": "./dist/inventory/contracts/index.js"
+    },
+    "./shipping": {
+      "types": "./dist/shipping/index.d.ts",
+      "import": "./dist/shipping/index.js",
+      "default": "./dist/shipping/index.js"
+    },
+    "./shipping/contracts": {
+      "types": "./dist/shipping/contracts/index.d.ts",
+      "import": "./dist/shipping/contracts/index.js",
+      "default": "./dist/shipping/contracts/index.js"
     }
   },
   "repository": {

package/release-gates.json

@@ -135,7 +135,9 @@
         "test/packageBoundary.test.ts",
         "test/communications/sql.test.ts",
         "test/communications/contribution.test.ts",
-        "test/communications/transportConformance.test.ts"
+        "test/communications/transportConformance.test.ts",
+        "test/communications/marketingSyncConformance.test.ts",
+        "test/communications/marketingSyncCompatibility.test.ts"
       ],
       "entrypoint": "dist/communications/index.d.ts",
       "snapshot": "api/communications.api.md"
@@ -146,31 +148,237 @@
       "compatibilityPolicy": "internal-candidate",
       "packageSmokeEvidence": [
         "test/packageBoundary.test.ts",
-        "test/communications/contracts.test.ts"
+        "test/communications/contracts.test.ts",
+        "test/communications/marketingSyncConformance.test.ts",
+        "test/communications/marketingSyncCompatibility.test.ts"
       ],
       "entrypoint": "dist/communications/contracts/index.d.ts",
       "snapshot": "api/communications-contracts.api.md"
+    },
+    "./catalog": {
+      "role": "capability",
+      "maturity": "experimental",
+      "compatibilityPolicy": "internal-candidate",
+      "packageSmokeEvidence": [
+        "test/packageBoundary.test.ts",
+        "test/catalog/catalogDraftHandler.test.ts",
+        "test/catalog/catalogDraftValidation.test.ts",
+        "test/catalog/resolvedSkuProjection.test.ts",
+        "test/catalog/referenceCatalogHandler.test.ts",
+        "test/catalog/catalogMediaResolution.test.ts",
+        "test/catalog/catalogLifecycleContracts.test.ts",
+        "test/catalog/bundleRules.test.ts",
+        "test/catalog/bundleAvailability.test.ts",
+        "test/catalog/bundleAvailabilityService.test.ts",
+        "test/catalog/bundleCatalogReadPort.test.ts",
+        "test/catalog/sellableBundleHandler.test.ts",
+        "test/catalog/catalogFoundationContracts.test.ts",
+        "test/catalog/catalogDraftContracts.test.ts"
+      ],
+      "entrypoint": "dist/catalog/index.d.ts",
+      "snapshot": "api/catalog.api.md"
+    },
+    "./catalog/contracts": {
+      "role": "capability",
+      "maturity": "experimental",
+      "compatibilityPolicy": "internal-candidate",
+      "packageSmokeEvidence": [
+        "test/packageBoundary.test.ts",
+        "test/catalog/catalogFoundationContracts.test.ts",
+        "test/catalog/catalogProductTypeContracts.test.ts",
+        "test/catalog/catalogDraftContracts.test.ts",
+        "test/catalog/catalogMediaResolution.test.ts",
+        "test/catalog/catalogLifecycleContracts.test.ts"
+      ],
+      "entrypoint": "dist/catalog/contracts/index.d.ts",
+      "snapshot": "api/catalog-contracts.api.md"
+    },
+    "./pricing": {
+      "role": "capability",
+      "maturity": "experimental",
+      "compatibilityPolicy": "internal-candidate",
+      "packageSmokeEvidence": [
+        "test/packageBoundary.test.ts",
+        "test/pricing/commercePriceAuthority.test.ts",
+        "test/pricing/subscriptionPricePolicy.test.ts",
+        "test/pricing/pricingPolicyToken.test.ts",
+        "test/pricing/commercePricingPolicyErrors.test.ts",
+        "test/pricing/quoteContracts.test.ts",
+        "test/pricing/catalogFactsProvenance.test.ts",
+        "test/pricing/commerceTaxProfileGuard.test.ts",
+        "test/pricing/dbBackedCommerceQuotePort.test.ts",
+        "test/pricing/dbBackedCommerceQuoteHelpers.test.ts",
+        "test/pricing/commerceQuoteSnapshotExpect.test.ts",
+        "test/pricing/dbBackedCommerceQuoteSnapshotVerifier.test.ts",
+        "test/pricing/commerceQuoteHandler.test.ts",
+        "test/pricing/commerceQuoteBatchHandler.test.ts",
+        "test/pricing/commerceOfferPricing.test.ts",
+        "test/pricing/commerceOfferPricingHandler.test.ts",
+        "test/pricing/commerceOfferPricingCache.test.ts",
+        "test/pricing/offerPolicyReadiness.test.ts",
+        "test/pricing/acquisition.test.ts",
+        "test/pricing/offerPricingContracts.test.ts"
+      ],
+      "entrypoint": "dist/pricing/index.d.ts",
+      "snapshot": "api/pricing.api.md"
+    },
+    "./pricing/contracts": {
+      "role": "capability",
+      "maturity": "experimental",
+      "compatibilityPolicy": "internal-candidate",
+      "packageSmokeEvidence": [
+        "test/packageBoundary.test.ts",
+        "test/pricing/subscriptionPricePolicy.test.ts",
+        "test/pricing/quoteContracts.test.ts",
+        "test/pricing/offerPricingContracts.test.ts"
+      ],
+      "entrypoint": "dist/pricing/contracts/index.d.ts",
+      "snapshot": "api/pricing-contracts.api.md"
+    },
+    "./promotions": {
+      "role": "capability",
+      "maturity": "experimental",
+      "compatibilityPolicy": "internal-candidate",
+      "packageSmokeEvidence": [
+        "test/packageBoundary.test.ts",
+        "test/promotions/applicationConformance.test.ts",
+        "test/promotions/acceptanceCallbacks.test.ts",
+        "test/promotions/quotePromotionV2.test.ts",
+        "test/promotions/quotePromotionV2.legacyCodeOutcomes.test.ts",
+        "test/promotions/quoteAutomaticPromotions.test.ts",
+        "test/promotions/quotePromoDiscounts.test.ts",
+        "test/promotions/quotePromotionCodeAdjustments.test.ts",
+        "test/promotions/promotionBenefitDefinition.test.ts",
+        "test/promotions/promoDataPort.test.ts",
+        "test/promotions/promotionCodeQuotePort.test.ts",
+        "test/promotions/promotionCodePreview.test.ts",
+        "test/promotions/promotionQuoteBinding.test.ts",
+        "test/promotions/promotionQuoteAcceptance.test.ts",
+        "test/promotions/adminPromotionCodesDataPort.test.ts",
+        "test/promotions/adminPromotionCodesContracts.test.ts",
+        "test/promotions/promotionClaimSweepPort.test.ts",
+        "test/promotions/promotionClaims.test.ts"
+      ],
+      "entrypoint": "dist/promotions/index.d.ts",
+      "snapshot": "api/promotions.api.md"
+    },
+    "./promotions/contracts": {
+      "role": "capability",
+      "maturity": "experimental",
+      "compatibilityPolicy": "internal-candidate",
+      "packageSmokeEvidence": [
+        "test/packageBoundary.test.ts",
+        "test/promotions/applicationConformance.test.ts",
+        "test/promotions/promotionCodePreview.test.ts",
+        "test/promotions/adminPromotionCodesContracts.test.ts"
+      ],
+      "entrypoint": "dist/promotions/contracts/index.d.ts",
+      "snapshot": "api/promotions-contracts.api.md"
+    },
+    "./communications/resend": {
+      "role": "capability",
+      "maturity": "experimental",
+      "compatibilityPolicy": "internal-candidate",
+      "packageSmokeEvidence": [
+        "test/communications/resend/egress.test.ts",
+        "test/communications/resend/protocol.test.ts"
+      ],
+      "entrypoint": "dist/communications/resend/index.d.ts",
+      "snapshot": "api/communications-resend.api.md"
+    },
+    "./communications/klaviyo": {
+      "role": "capability",
+      "maturity": "experimental",
+      "compatibilityPolicy": "internal-candidate",
+      "packageSmokeEvidence": [
+        "test/communications/klaviyo/portConformance.test.ts",
+        "test/communications/klaviyo/protocol.test.ts",
+        "test/communications/klaviyo/permissions.test.ts"
+      ],
+      "entrypoint": "dist/communications/klaviyo/index.d.ts",
+      "snapshot": "api/communications-klaviyo.api.md"
+    },
+    "./inventory": {
+      "role": "capability",
+      "maturity": "experimental",
+      "compatibilityPolicy": "internal-candidate",
+      "packageSmokeEvidence": [
+        "test/packageBoundary.test.ts",
+        "test/inventory/contracts.test.ts",
+        "test/inventory/adminInventoryConformance.test.ts",
+        "test/inventory/inventoryAvailabilityCharacterization.test.ts",
+        "test/inventory/newPurchaseStockBoundary.test.ts",
+        "test/inventory/reservationPolicyConformance.test.ts",
+        "test/inventory/subscriptionForecastCalculation.test.ts"
+      ],
+      "entrypoint": "dist/inventory/index.d.ts",
+      "snapshot": "api/inventory.api.md"
+    },
+    "./inventory/contracts": {
+      "role": "capability",
+      "maturity": "experimental",
+      "compatibilityPolicy": "internal-candidate",
+      "packageSmokeEvidence": [
+        "test/packageBoundary.test.ts",
+        "test/inventory/contracts.test.ts",
+        "test/inventory/newPurchaseStockBoundary.test.ts",
+        "test/inventory/reservationPolicyConformance.test.ts",
+        "test/inventory/subscriptionForecastCalculation.test.ts"
+      ],
+      "entrypoint": "dist/inventory/contracts/index.d.ts",
+      "snapshot": "api/inventory-contracts.api.md"
+    },
+    "./shipping": {
+      "role": "capability",
+      "maturity": "experimental",
+      "compatibilityPolicy": "internal-candidate",
+      "packageSmokeEvidence": [
+        "test/packageBoundary.test.ts",
+        "test/shipping/deliveryConformance.test.ts",
+        "test/shipping/addressConformance.test.ts",
+        "test/shipping/shippingRateConformance.test.ts"
+      ],
+      "entrypoint": "dist/shipping/index.d.ts",
+      "snapshot": "api/shipping.api.md"
+    },
+    "./shipping/contracts": {
+      "role": "capability",
+      "maturity": "experimental",
+      "compatibilityPolicy": "internal-candidate",
+      "packageSmokeEvidence": [
+        "test/packageBoundary.test.ts",
+        "test/shipping/deliveryConformance.test.ts",
+        "test/shipping/addressConformance.test.ts",
+        "test/shipping/shippingRateConformance.test.ts"
+      ],
+      "entrypoint": "dist/shipping/contracts/index.d.ts",
+      "snapshot": "api/shipping-contracts.api.md"
     }
   },
   "pack": {
     "code": {
-      "maxPackedBytes": 440320,
-      "maxFiles": 800
+      "maxPackedBytes": 1126400,
+      "maxFiles": 2000
     },
     "docs": {
       "maxPackedBytes": 40960,
       "maxFiles": 10
     },
-    "maxPackedBytes": 522240,
-    "maxUnpackedBytes": 2088960,
-    "maxFiles": 800,
+    "maxPackedBytes": 1351680,
+    "maxUnpackedBytes": 5734400,
+    "maxFiles": 2100,
     "baseline": {
-      "version": "0.16.0",
-      "packedBytes": 256973
+      "version": "0.17.0",
+      "packedBytes": 414220
     },
     "browserEntries": {
       "./communications/contracts": 11776,
-      "./identity/contracts": 4800
+      "./identity/contracts": 4800,
+      "./catalog/contracts": 4096,
+      "./pricing/contracts": 416,
+      "./promotions/contracts": 32,
+      "./inventory/contracts": 32,
+      "./shipping/contracts": 32
     }
   }
 }

package/sql/20260807140000_read_parity_catalog.sql

@@ -0,0 +1,94 @@
+-- Public platform read surface: catalog, pricing and settings.
+--
+-- Authored from scratch for this forward migration. The column set is exactly what
+-- the platform read ports project on the second bundle, not a cut of any historical
+-- migration: no business function, trigger, policy or grant is created here, and the
+-- product-specific attributes that the chain keeps on a sellable unit are deliberately
+-- absent. The capability slice that actually executes them authors them as its own
+-- forward, so this catalog never carries a column nothing here reads.
+
+CREATE TABLE public.catalog_products (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  slug text NOT NULL,
+  status text NOT NULL DEFAULT 'active',
+  name text NOT NULL,
+  description text,
+  CONSTRAINT catalog_products_slug_nonempty_check CHECK (btrim(slug) <> ''),
+  CONSTRAINT catalog_products_name_nonempty_check CHECK (btrim(name) <> ''),
+  CONSTRAINT catalog_products_status_check CHECK (status IN ('draft', 'active', 'archived'))
+);
+
+CREATE UNIQUE INDEX idx_catalog_products_slug ON public.catalog_products (slug);
+
+CREATE TABLE public.catalog_skus (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  product_id uuid NOT NULL REFERENCES public.catalog_products (id) ON DELETE CASCADE,
+  sku text NOT NULL,
+  title text NOT NULL,
+  status text NOT NULL DEFAULT 'active',
+  min_order_qty integer NOT NULL DEFAULT 1,
+  is_addon boolean NOT NULL DEFAULT false,
+  sellable_standalone boolean NOT NULL DEFAULT true,
+  sellable_in_subscription boolean NOT NULL DEFAULT false,
+  CONSTRAINT catalog_skus_sku_nonempty_check CHECK (btrim(sku) <> ''),
+  CONSTRAINT catalog_skus_status_check CHECK (status IN ('draft', 'active', 'archived')),
+  CONSTRAINT catalog_skus_min_order_qty_check CHECK (min_order_qty >= 1)
+);
+
+CREATE UNIQUE INDEX idx_catalog_skus_sku ON public.catalog_skus (sku);
+CREATE INDEX idx_catalog_skus_product_id ON public.catalog_skus (product_id);
+
+CREATE TABLE public.price_lists (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  name text NOT NULL,
+  region_code text NOT NULL,
+  currency text NOT NULL,
+  status text NOT NULL DEFAULT 'active',
+  valid_from timestamptz NOT NULL DEFAULT now(),
+  valid_to timestamptz,
+  CONSTRAINT price_lists_name_nonempty_check CHECK (btrim(name) <> ''),
+  CONSTRAINT price_lists_region_code_check CHECK (char_length(region_code) BETWEEN 2 AND 3),
+  CONSTRAINT price_lists_currency_check CHECK (currency ~ '^[A-Z]{3}$'),
+  CONSTRAINT price_lists_status_check CHECK (status IN ('draft', 'active', 'archived')),
+  CONSTRAINT price_lists_validity_check CHECK (valid_to IS NULL OR valid_to > valid_from)
+);
+
+CREATE INDEX idx_price_lists_region_currency_status
+  ON public.price_lists (region_code, currency, status);
+
+CREATE TABLE public.price_entries (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  price_list_id uuid NOT NULL REFERENCES public.price_lists (id) ON DELETE CASCADE,
+  variant_id uuid NOT NULL REFERENCES public.catalog_skus (id) ON DELETE CASCADE,
+  mode text NOT NULL DEFAULT 'any',
+  min_qty integer NOT NULL DEFAULT 1,
+  unit_price_minor integer NOT NULL,
+  amount_kind text NOT NULL DEFAULT 'gross',
+  active boolean NOT NULL DEFAULT true,
+  valid_from timestamptz NOT NULL DEFAULT now(),
+  valid_to timestamptz,
+  CONSTRAINT price_entries_mode_check CHECK (mode IN ('one_time', 'subscription', 'any')),
+  CONSTRAINT price_entries_amount_kind_check CHECK (amount_kind IN ('gross', 'net')),
+  CONSTRAINT price_entries_min_qty_check CHECK (min_qty >= 1),
+  CONSTRAINT price_entries_unit_price_minor_check CHECK (unit_price_minor >= 0),
+  CONSTRAINT price_entries_validity_check CHECK (valid_to IS NULL OR valid_to > valid_from)
+);
+
+CREATE INDEX idx_price_entries_variant_mode_list
+  ON public.price_entries (variant_id, mode, price_list_id);
+
+CREATE TABLE public.commerce_settings (
+  key text PRIMARY KEY,
+  value_minor integer,
+  value_text text,
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT commerce_settings_key_nonempty_check CHECK (btrim(key) <> '')
+);

package/sql/20260810120000_storefront_catalog_attributes.sql

@@ -0,0 +1,51 @@
+-- Public platform catalogue attributes: the three columns a public listing needs.
+--
+-- Authored from scratch for this delta. The read-parity forward that created these two
+-- relations deliberately left every sellable attribute out, on the ruling that the slice
+-- which actually executes them would author them as its own forward. This is that slice,
+-- and the demand is no longer a guess: the shipped response contract was validated against
+-- an assembly read out of a live kernel database, and it refused with thirteen issues over
+-- five field paths -- a product line, a positive net weight per sellable unit, a non-empty
+-- declared composition with at least one entry, and a non-empty format label. Every one of
+-- them is `too_small`, which is the schema saying "you gave me nothing", not "you gave me
+-- the wrong thing". Nothing here is optional decoration: without these three columns the
+-- listing route answers 502 for an operator's own rows, on any schema.
+--
+-- WHY THESE THREE NAMES AND NOT THE FIVE THAT WERE SIZED. The neutral projection is served
+-- to BOTH bundles by the discovery harness, so a column this kernel invents and the managed
+-- chain lacks would fail the managed half of the proof on contact. The names below are the
+-- ones that chain already carries with a compatible type and, critically, with no foreign
+-- key. Two further names were sized and are refused here: on the managed chain both are
+-- foreign keys into lookup relations of sellable-unit vocabulary, so honouring them would
+-- force this kernel to grow two dictionaries of exactly the domain language the public
+-- platform must not own. The packaging unit therefore stays at the assembly's own default
+-- and the calorific figures stay absent, which is why the composition this platform can
+-- express is a list of declared entries and not the richer card set an overlay keeps beside
+-- it.
+--
+-- WHY NULLABILITY IS SPENT AS A DEFAULT AND NOT AS NULL. Every column arrives NOT NULL with
+-- a neutral zero value -- an empty array, an empty object, a zero integer -- so an already
+-- populated deployment boots unchanged and no read has to branch on absence. A zero weight
+-- and an empty composition are still refused by the response contract, which is the correct
+-- outcome: the platform now HAS somewhere to put the answer, and an operator who has not
+-- put one there has published nothing, rather than published something broken. No CHECK is
+-- added, for the same reason the managed chain has none on these columns -- the shape that
+-- matters is enforced by the response contract, one layer up, where it can name the field.
+--
+-- NO FUNCTION, NO TRIGGER, NO POLICY, NO GRANT, NO INDEX. Three ALTER TABLE statements and
+-- three comments. The read path that consumes them is a projection widening in application
+-- code, not a database behaviour.
+
+ALTER TABLE public.catalog_products
+  ADD COLUMN ingredients text[] NOT NULL DEFAULT ARRAY[]::text[],
+  ADD COLUMN marketing_content jsonb NOT NULL DEFAULT '{}'::jsonb;
+
+ALTER TABLE public.catalog_skus
+  ADD COLUMN net_weight_g integer NOT NULL DEFAULT 0;
+
+COMMENT ON COLUMN public.catalog_products.ingredients IS
+  'Declared composition, one free-text entry per line. An entry may end in a percentage share; the read splits it, and keeps the whole entry as the label when it does not.';
+COMMENT ON COLUMN public.catalog_products.marketing_content IS
+  'Front-of-house copy the platform stores and never interprets. The public read looks up two keys in it: line_name and format_marketing_copy.';
+COMMENT ON COLUMN public.catalog_skus.net_weight_g IS
+  'Net weight of one sellable unit, in grams. Zero means the operator has not declared one, and the response contract refuses such a unit.';