@porulle/core 0.10.8 → 0.13.0

package/dist/modules/cart/schema.d.ts

@@ -121,6 +121,23 @@ export declare const carts: import("drizzle-orm/pg-core").PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        checkoutClaimToken: import("drizzle-orm/pg-core").PgColumn<{
+            name: "checkout_claim_token";
+            tableName: "carts";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         metadata: import("drizzle-orm/pg-core").PgColumn<{
             name: "metadata";
             tableName: "carts";

package/dist/modules/cart/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/modules/cart/schema.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBf,CAAC;AAEJ,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAexB,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/modules/cart/schema.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0Bf,CAAC;AAEJ,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAexB,CAAC"}

package/dist/modules/cart/schema.js

@@ -14,6 +14,10 @@ export const carts = pgTable("carts", {
     // Shopper contact for guest carts — enables abandoned-checkout recovery
     email: text("email"),
     secret: text("secret"),
+    // Owner of an in-progress `checking_out` claim. Minted by the checkout
+    // attempt that wins the CAS; only that holder may release the claim, so a
+    // losing attempt's failure path cannot unwind the winner's claim.
+    checkoutClaimToken: text("checkout_claim_token"),
     metadata: jsonb("metadata").$type().default({}),
     expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
     createdAt: timestamp("created_at", { withTimezone: true }).defaultNow().notNull(),

package/dist/modules/cart/service.d.ts

@@ -28,9 +28,17 @@ export declare class CartService {
     getById(id: string, actor?: Actor | null, ctx?: TxContext, secret?: string): Promise<Result<Cart & {
         lineItems: CartLineItem[];
     }>>;
-    addItem(input: AddCartItemInput, actor?: Actor | null, ctx?: TxContext): Promise<Result<CartLineItem>>;
-    removeItem(cartId: string, itemId: string, actor?: Actor | null, ctx?: TxContext): Promise<Result<void>>;
-    updateQuantity(input: UpdateCartItemInput, actor?: Actor | null, ctx?: TxContext): Promise<Result<CartLineItem>>;
+    /**
+     * Reads a cart for a trusted server pipeline after the request boundary has
+     * already authenticated the caller. Organization scope is explicit; caller
+     * identity and guest secrets are intentionally not consulted here.
+     */
+    getByIdForInternalUse(id: string, organizationId: string, ctx?: TxContext): Promise<Result<Cart & {
+        lineItems: CartLineItem[];
+    }>>;
+    addItem(input: AddCartItemInput, actor?: Actor | null, ctx?: TxContext, presentedSecret?: string): Promise<Result<CartLineItem>>;
+    removeItem(cartId: string, itemId: string, actor?: Actor | null, ctx?: TxContext, presentedSecret?: string): Promise<Result<void>>;
+    updateQuantity(input: UpdateCartItemInput, actor?: Actor | null, ctx?: TxContext, presentedSecret?: string): Promise<Result<CartLineItem>>;
     merge(sourceCartId: string, targetCartId: string, actor?: Actor | null, ctx?: TxContext): Promise<Result<void>>;
     /**
      * Admin listing of carts with abandoned-checkout recovery filters:
@@ -66,16 +74,21 @@ export declare class CartService {
     abandon(cartId: string, actor?: Actor | null, ctx?: TxContext): Promise<Result<void>>;
     markAsCheckedOut(cartId: string, actor?: Actor | null, ctx?: TxContext): Promise<Result<void>>;
     /**
-     * Atomically transitions a cart from "active" to "checking_out".
-     * Returns Err if the cart was already claimed by a concurrent checkout.
-     * This prevents TOCTOU race conditions on double-checkout.
+     * Atomically transitions a cart from "active" to "checking_out", recording
+     * `claimToken` as the holder. Returns Err if the cart was already claimed by
+     * a concurrent checkout. This prevents TOCTOU race conditions on
+     * double-checkout, and the token is what lets {@link releaseCheckoutClaim}
+     * tell the winner's release from a loser's.
      */
-    claimForCheckout(cartId: string, ctx?: TxContext): Promise<Result<Cart>>;
+    claimForCheckout(cartId: string, claimToken: string, ctx?: TxContext): Promise<Result<Cart>>;
     /**
      * Atomically returns a failed checkout claim to `active`. A checked-out,
-     * merged, abandoned, or already-active cart is left untouched.
+     * merged, abandoned, or already-active cart is left untouched — and so is a
+     * claim held by a different checkout attempt, so a losing attempt's failure
+     * path cannot reopen the cart the winner is still checking out. Returns null
+     * when nothing was released.
      */
-    releaseCheckoutClaim(cartId: string, ctx?: TxContext): Promise<Result<Cart | null>>;
+    releaseCheckoutClaim(cartId: string, claimToken: string, ctx?: TxContext): Promise<Result<Cart | null>>;
     /**
      * Creates an anonymous guest cart with a secret token for access control.
      * The secret must be stored client-side (cookie/local storage) and sent

package/dist/modules/cart/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/modules/cart/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAc5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAExE,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAE5E,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,cAAc,CAAC;IAC3B,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,QAAQ,EAAE,eAAe,CAAC;IAC1B,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AA6BD,qBAAa,WAAW;IAIV,OAAO,CAAC,IAAI;IAHxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;gBAE5B,IAAI,EAAE,eAAe;IAKnC,MAAM,CACV,KAAK,EAAE,eAAe,EACtB,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAwElB,OAAO,CACX,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,EACf,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG;QAAE,SAAS,EAAE,YAAY,EAAE,CAAA;KAAE,CAAC,CAAC;IA6BlD,OAAO,CACX,KAAK,EAAE,gBAAgB,EACvB,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAmH1B,UAAU,CACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAqClB,cAAc,CAClB,KAAK,EAAE,mBAAmB,EAC1B,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAoD1B,KAAK,CACT,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAyCxB;;;;OAIG;IACG,IAAI,CACR,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,IAAI,CAAC;QACjB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EACD,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC;QAAE,KAAK,EAAE,KAAK,CAAC,IAAI,GAAG;YAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAoBrG;;;;;OAKG;IACG,OAAO,CACX,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CACR,MAAM,CAAC;QACL,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC,CACH;IA6CK,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IASrF,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IASxB;;;;OAIG;IACG,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAYxB;;;OAGG;IACG,oBAAoB,CACxB,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAI/B;;;;OAIG;IACG,eAAe,CACnB,QAAQ,SAAQ,EAChB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAqBlD;;;;OAIG;IACG,UAAU,CACd,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,KAAK,EACZ,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IA0CxB;;;;;OAKG;YACW,sBAAsB;IAmBpC;;;;;;;;;;OAUG;YACW,mBAAmB;IAuCjC;;;;;;;;OAQG;YACW,oBAAoB;CA4CnC"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/modules/cart/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAc5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAExE,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAE5E,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,cAAc,CAAC;IAC3B,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,QAAQ,EAAE,eAAe,CAAC;IAC1B,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AA+BD,qBAAa,WAAW;IAIV,OAAO,CAAC,IAAI;IAHxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;gBAE5B,IAAI,EAAE,eAAe;IAKnC,MAAM,CACV,KAAK,EAAE,eAAe,EACtB,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IA0ElB,OAAO,CACX,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,EACf,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG;QAAE,SAAS,EAAE,YAAY,EAAE,CAAA;KAAE,CAAC,CAAC;IA6BxD;;;;OAIG;IACG,qBAAqB,CACzB,EAAE,EAAE,MAAM,EACV,cAAc,EAAE,MAAM,EACtB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG;QAAE,SAAS,EAAE,YAAY,EAAE,CAAA;KAAE,CAAC,CAAC;IAWlD,OAAO,CACX,KAAK,EAAE,gBAAgB,EACvB,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,EACf,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAmH1B,UAAU,CACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,EACf,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAqClB,cAAc,CAClB,KAAK,EAAE,mBAAmB,EAC1B,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,EACf,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAoD1B,KAAK,CACT,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAyCxB;;;;OAIG;IACG,IAAI,CACR,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,IAAI,CAAC;QACjB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EACD,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC;QAAE,KAAK,EAAE,KAAK,CAAC,IAAI,GAAG;YAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAoBrG;;;;;OAKG;IACG,OAAO,CACX,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CACR,MAAM,CAAC;QACL,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC,CACH;IA6CK,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IASrF,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IASxB;;;;;;OAMG;IACG,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAYxB;;;;;;OAMG;IACG,oBAAoB,CACxB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAI/B;;;;OAIG;IACG,eAAe,CACnB,QAAQ,SAAQ,EAChB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAsBlD;;;;OAIG;IACG,UAAU,CACd,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,KAAK,EACZ,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IA0CxB;;;;;OAKG;YACW,sBAAsB;IAmBpC;;;;;;;;;;OAUG;YACW,mBAAmB;IAuCjC;;;;;;;;OAQG;YACW,oBAAoB;CA4CnC"}

package/dist/modules/cart/service.js

@@ -1,4 +1,4 @@
-import { resolveOrgId } from "../../auth/org.js";
+import { resolveOrgIdForCommerce } from "../../auth/org.js";
 import { assertPermission } from "../../auth/permissions.js";
 import { CommerceForbiddenError, CommerceNotFoundError, CommerceValidationError, toCommerceError, } from "../../kernel/errors.js";
 import { runAfterHooks, runBeforeHooks } from "../../kernel/hooks/executor.js";
@@ -7,7 +7,7 @@ import { Err, Ok } from "../../kernel/result.js";
 import { createLogger } from "../../utils/logger.js";
 import { paginate } from "../../utils/pagination.js";
 import { defaultCartItemMatcher } from "./matcher.js";
-function makeContext(actor, services, database, tx = null) {
+function makeContext(actor, services, database, config, tx = null) {
     return createHookContext({
         actor,
         tx,
@@ -15,6 +15,7 @@ function makeContext(actor, services, database, tx = null) {
         services,
         context: { moduleName: "cart" },
         database: { db: database.db },
+        commerceConfig: config,
     });
 }
 function isExpired(cart) {
@@ -38,7 +39,7 @@ export class CartService {
         }
         const ttlMinutes = this.deps.config.cart?.ttlMinutes ?? 60 * 24 * 7;
         const now = new Date();
-        const orgId = resolveOrgId(actor ?? null);
+        const orgId = resolveOrgIdForCommerce(actor ?? null, this.deps.config);
         // SECURITY: cart.customerId is service-managed.
         //
         // VAPT r2 (claude-glm) follow-up: the previous "set null for customer
@@ -74,6 +75,7 @@ export class CartService {
                 }
             }
         }
+        const guestSecret = resolvedCustomerId === null ? crypto.randomUUID() : undefined;
         const cart = await this.repo.create({
             organizationId: orgId,
             status: "active",
@@ -81,6 +83,7 @@ export class CartService {
             metadata: input.metadata ?? {},
             expiresAt: new Date(now.getTime() + ttlMinutes * 60 * 1000),
             ...(resolvedCustomerId !== null ? { customerId: resolvedCustomerId } : {}),
+            ...(guestSecret !== undefined ? { secret: guestSecret } : {}),
             ...(input.email !== undefined ? { email: input.email } : {}),
         }, ctx);
         return Ok(cart);
@@ -92,7 +95,7 @@ export class CartService {
         // read any cart's contents, prices, line items, and metadata. This now
         // requires either an authenticated owner/staff actor OR the cart's
         // secret token (returned only at createGuest()).
-        const orgId = resolveOrgId(actor ?? ctx?.actor ?? null);
+        const orgId = resolveOrgIdForCommerce(actor ?? ctx?.actor ?? null, this.deps.config);
         const cart = await this.repo.findById(orgId, id, ctx);
         if (!cart)
             return Err(new CommerceNotFoundError("Cart not found."));
@@ -112,19 +115,34 @@ export class CartService {
             lineItems,
         });
     }
-    async addItem(input, actor, ctx) {
+    /**
+     * Reads a cart for a trusted server pipeline after the request boundary has
+     * already authenticated the caller. Organization scope is explicit; caller
+     * identity and guest secrets are intentionally not consulted here.
+     */
+    async getByIdForInternalUse(id, organizationId, ctx) {
+        const cart = await this.repo.findById(organizationId, id, ctx);
+        if (!cart)
+            return Err(new CommerceNotFoundError("Cart not found."));
+        const lineItems = await this.repo.findLineItemsByCartId(id, ctx);
+        return Ok({
+            ...cart,
+            lineItems,
+        });
+    }
+    async addItem(input, actor, ctx, presentedSecret) {
         try {
             assertPermission(actor ?? null, "cart:update");
         }
         catch (error) {
             return Err(toCommerceError(error));
         }
-        const orgId = resolveOrgId(actor ?? null);
+        const orgId = resolveOrgIdForCommerce(actor ?? null, this.deps.config);
         const cart = await this.repo.findById(orgId, input.cartId, ctx);
         if (!cart)
             return Err(new CommerceNotFoundError("Cart not found."));
         try {
-            await this.assertCartOwnership(actor ?? null, cart, ctx);
+            await this.assertCartOwnership(actor ?? null, cart, ctx, presentedSecret);
         }
         catch (error) {
             return Err(toCommerceError(error));
@@ -153,7 +171,7 @@ export class CartService {
                 },
             ]));
         }
-        const context = makeContext(actor ?? null, this.deps.services, this.deps.database, ctx?.tx);
+        const context = makeContext(actor ?? null, this.deps.services, this.deps.database, this.deps.config, ctx?.tx);
         const beforeHooks = this.deps.hooks.resolve("cart.beforeAddItem");
         const afterHooks = this.deps.hooks.resolve("cart.afterAddItem");
         const processed = await runBeforeHooks(beforeHooks, input, "addItem", context);
@@ -188,19 +206,19 @@ export class CartService {
         await runAfterHooks(afterHooks, null, item, "addItem", context);
         return Ok(item);
     }
-    async removeItem(cartId, itemId, actor, ctx) {
+    async removeItem(cartId, itemId, actor, ctx, presentedSecret) {
         try {
             assertPermission(actor ?? null, "cart:update");
         }
         catch (error) {
             return Err(toCommerceError(error));
         }
-        const orgId = resolveOrgId(actor ?? null);
+        const orgId = resolveOrgIdForCommerce(actor ?? null, this.deps.config);
         const cart = await this.repo.findById(orgId, cartId, ctx);
         if (!cart)
             return Err(new CommerceNotFoundError("Cart not found."));
         try {
-            await this.assertCartOwnership(actor ?? null, cart, ctx);
+            await this.assertCartOwnership(actor ?? null, cart, ctx, presentedSecret);
         }
         catch (error) {
             return Err(toCommerceError(error));
@@ -209,7 +227,7 @@ export class CartService {
         if (!existing || existing.cartId !== cartId) {
             return Err(new CommerceNotFoundError("Cart item not found."));
         }
-        const context = makeContext(actor ?? null, this.deps.services, this.deps.database, ctx?.tx);
+        const context = makeContext(actor ?? null, this.deps.services, this.deps.database, this.deps.config, ctx?.tx);
         const beforeHooks = this.deps.hooks.resolve("cart.beforeRemoveItem");
         const afterHooks = this.deps.hooks.resolve("cart.afterRemoveItem");
         await runBeforeHooks(beforeHooks, existing, "removeItem", context);
@@ -217,19 +235,19 @@ export class CartService {
         await runAfterHooks(afterHooks, existing, existing, "removeItem", context);
         return Ok(undefined);
     }
-    async updateQuantity(input, actor, ctx) {
+    async updateQuantity(input, actor, ctx, presentedSecret) {
         try {
             assertPermission(actor ?? null, "cart:update");
         }
         catch (error) {
             return Err(toCommerceError(error));
         }
-        const orgId = resolveOrgId(actor ?? null);
+        const orgId = resolveOrgIdForCommerce(actor ?? null, this.deps.config);
         const cart = await this.repo.findById(orgId, input.cartId, ctx);
         if (!cart)
             return Err(new CommerceNotFoundError("Cart not found."));
         try {
-            await this.assertCartOwnership(actor ?? null, cart, ctx);
+            await this.assertCartOwnership(actor ?? null, cart, ctx, presentedSecret);
         }
         catch (error) {
             return Err(toCommerceError(error));
@@ -241,7 +259,7 @@ export class CartService {
         if (input.quantity <= 0) {
             return Err(new CommerceValidationError("Quantity must be greater than zero."));
         }
-        const context = makeContext(actor ?? null, this.deps.services, this.deps.database, ctx?.tx);
+        const context = makeContext(actor ?? null, this.deps.services, this.deps.database, this.deps.config, ctx?.tx);
         const beforeHooks = this.deps.hooks.resolve("cart.beforeUpdateQuantity");
         const afterHooks = this.deps.hooks.resolve("cart.afterUpdateQuantity");
         await runBeforeHooks(beforeHooks, input, "update", context);
@@ -259,7 +277,7 @@ export class CartService {
         catch (error) {
             return Err(toCommerceError(error));
         }
-        const orgId = resolveOrgId(actor ?? null);
+        const orgId = resolveOrgIdForCommerce(actor ?? null, this.deps.config);
         const source = await this.repo.findById(orgId, sourceCartId, ctx);
         const target = await this.repo.findById(orgId, targetCartId, ctx);
         if (!source || !target)
@@ -294,7 +312,7 @@ export class CartService {
         catch (error) {
             return Err(toCommerceError(error));
         }
-        const orgId = resolveOrgId(actor ?? ctx?.actor ?? null);
+        const orgId = resolveOrgIdForCommerce(actor ?? ctx?.actor ?? null, this.deps.config);
         const rows = await this.repo.list(orgId, {
             ...(filter?.status !== undefined ? { status: filter.status } : {}),
             ...(filter?.olderThan !== undefined ? { olderThan: filter.olderThan } : {}),
@@ -316,7 +334,7 @@ export class CartService {
         catch (error) {
             return Err(toCommerceError(error));
         }
-        const orgId = resolveOrgId(actor ?? ctx?.actor ?? null);
+        const orgId = resolveOrgIdForCommerce(actor ?? ctx?.actor ?? null, this.deps.config);
         const cart = await this.repo.findById(orgId, cartId, ctx);
         if (!cart)
             return Err(new CommerceNotFoundError("Cart not found."));
@@ -328,7 +346,7 @@ export class CartService {
         const expiresAt = new Date(Date.now() + ttlMinutes * 60 * 1000);
         const updated = await this.repo.update(cart.id, { status: "active", secret, expiresAt }, ctx);
         const afterHooks = this.deps.hooks.resolve("cart.afterRecover");
-        await runAfterHooks(afterHooks, null, updated ?? cart, "recover", makeContext(actor ?? null, this.deps.services, this.deps.database, ctx?.tx ?? null));
+        await runAfterHooks(afterHooks, null, updated ?? cart, "recover", makeContext(actor ?? null, this.deps.services, this.deps.database, this.deps.config, ctx?.tx ?? null));
         return Ok({
             cartId: cart.id,
             secret,
@@ -339,7 +357,7 @@ export class CartService {
         });
     }
     async abandon(cartId, actor, ctx) {
-        const orgId = resolveOrgId(actor ?? ctx?.actor ?? null);
+        const orgId = resolveOrgIdForCommerce(actor ?? ctx?.actor ?? null, this.deps.config);
         const cart = await this.repo.findById(orgId, cartId, ctx);
         if (!cart)
             return Err(new CommerceNotFoundError("Cart not found."));
@@ -347,20 +365,22 @@ export class CartService {
         return Ok(undefined);
     }
     async markAsCheckedOut(cartId, actor, ctx) {
-        const orgId = resolveOrgId(actor ?? ctx?.actor ?? null);
+        const orgId = resolveOrgIdForCommerce(actor ?? ctx?.actor ?? null, this.deps.config);
         const cart = await this.repo.findById(orgId, cartId, ctx);
         if (!cart)
             return Err(new CommerceNotFoundError("Cart not found."));
-        await this.repo.updateStatus(cartId, "checked_out", ctx);
+        await this.repo.update(cartId, { status: "checked_out", checkoutClaimToken: null }, ctx);
         return Ok(undefined);
     }
     /**
-     * Atomically transitions a cart from "active" to "checking_out".
-     * Returns Err if the cart was already claimed by a concurrent checkout.
-     * This prevents TOCTOU race conditions on double-checkout.
+     * Atomically transitions a cart from "active" to "checking_out", recording
+     * `claimToken` as the holder. Returns Err if the cart was already claimed by
+     * a concurrent checkout. This prevents TOCTOU race conditions on
+     * double-checkout, and the token is what lets {@link releaseCheckoutClaim}
+     * tell the winner's release from a loser's.
      */
-    async claimForCheckout(cartId, ctx) {
-        const claimed = await this.repo.transitionToCheckingOut(cartId, ctx);
+    async claimForCheckout(cartId, claimToken, ctx) {
+        const claimed = await this.repo.transitionToCheckingOut(cartId, claimToken, ctx);
         if (!claimed) {
             return Err(new CommerceValidationError("Cart is not available for checkout. It may have already been checked out by a concurrent request."));
         }
@@ -368,10 +388,13 @@ export class CartService {
     }
     /**
      * Atomically returns a failed checkout claim to `active`. A checked-out,
-     * merged, abandoned, or already-active cart is left untouched.
+     * merged, abandoned, or already-active cart is left untouched — and so is a
+     * claim held by a different checkout attempt, so a losing attempt's failure
+     * path cannot reopen the cart the winner is still checking out. Returns null
+     * when nothing was released.
      */
-    async releaseCheckoutClaim(cartId, ctx) {
-        return Ok((await this.repo.releaseCheckoutClaim(cartId, ctx)) ?? null);
+    async releaseCheckoutClaim(cartId, claimToken, ctx) {
+        return Ok((await this.repo.releaseCheckoutClaim(cartId, claimToken, ctx)) ?? null);
     }
     /**
      * Creates an anonymous guest cart with a secret token for access control.
@@ -383,7 +406,8 @@ export class CartService {
         const ttlMinutes = this.deps.config.cart?.ttlMinutes ?? 60 * 24 * 7;
         const now = new Date();
         const cart = await this.repo.create({
-            organizationId: resolveOrgId(null),
+            // Actor-less by design; resolves to the deployment's declared organization.
+            organizationId: resolveOrgIdForCommerce(null, this.deps.config),
             customerId: undefined,
             status: "active",
             currency,
@@ -399,7 +423,7 @@ export class CartService {
      * The source cart's secret must be provided for access control.
      */
     async mergeCarts(targetCartId, sourceCartId, sourceSecret, actor, ctx) {
-        const orgId = resolveOrgId(actor);
+        const orgId = resolveOrgIdForCommerce(actor, this.deps.config);
         const sourceCart = await this.repo.findById(orgId, sourceCartId, ctx);
         if (!sourceCart || sourceCart.secret !== sourceSecret) {
             return Err(new CommerceValidationError("Invalid cart or cart secret."));

package/dist/modules/catalog/brand-service.js

@@ -1,4 +1,4 @@
-import { resolveOrgId } from "../../auth/org.js";
+import { resolveOrgIdForCommerce } from "../../auth/org.js";
 import { assertPermission } from "../../auth/permissions.js";
 import { CommerceConflictError, CommerceNotFoundError, toCommerceError, } from "../../kernel/errors.js";
 import { Err, Ok } from "../../kernel/result.js";
@@ -13,13 +13,13 @@ export class BrandService {
     assertSameOrg(resource, actor) {
         if (!resource)
             return;
-        const orgId = resolveOrgId(actor);
+        const orgId = resolveOrgIdForCommerce(actor, this.deps.config);
         if (resource.organizationId && resource.organizationId !== orgId) {
             throw new CommerceNotFoundError("Entity not found.");
         }
     }
     async listBrands(ctx) {
-        const allBrands = await this.repo.findAllBrands(resolveOrgId(ctx?.actor ?? null), ctx);
+        const allBrands = await this.repo.findAllBrands(resolveOrgIdForCommerce(ctx?.actor ?? null, this.deps.config), ctx);
         return Ok(allBrands.sort((a, b) => a.displayName.localeCompare(b.displayName)));
     }
     async createBrand(input, actor, ctx) {
@@ -29,7 +29,7 @@ export class BrandService {
             if (existingById)
                 return Err(new CommerceConflictError(`Brand with id ${input.id} already exists.`));
         }
-        const orgId = resolveOrgId(actor);
+        const orgId = resolveOrgIdForCommerce(actor, this.deps.config);
         const existingBySlug = await this.repo.findBrandBySlug(orgId, input.slug, ctx);
         if (existingBySlug)
             return Err(new CommerceConflictError(`Brand with slug ${input.slug} already exists.`));
@@ -47,7 +47,7 @@ export class BrandService {
             return Err(toCommerceError(error));
         }
         if (input.slug) {
-            const existingBySlug = await this.repo.findBrandBySlug(resolveOrgId(actor), input.slug, ctx);
+            const existingBySlug = await this.repo.findBrandBySlug(resolveOrgIdForCommerce(actor, this.deps.config), input.slug, ctx);
             if (existingBySlug && existingBySlug.id !== id)
                 return Err(new CommerceConflictError(`Brand with slug ${input.slug} already exists.`));
         }
@@ -87,7 +87,7 @@ export class BrandService {
         catch (error) {
             return Err(toCommerceError(error));
         }
-        const addBrandOrgId = resolveOrgId(actor ?? ctx?.actor ?? null);
+        const addBrandOrgId = resolveOrgIdForCommerce(actor ?? ctx?.actor ?? null, this.deps.config);
         const isBrandUuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(brandId);
         let brand = isBrandUuid ? await this.repo.findBrandById(brandId, ctx) : null;
         if (!brand)
@@ -117,7 +117,7 @@ export class BrandService {
         const isBrUuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(brandId);
         let brand = isBrUuid ? await this.repo.findBrandById(brandId, ctx) : null;
         if (!brand)
-            brand = await this.repo.findBrandBySlug(resolveOrgId(actor ?? ctx?.actor ?? null), brandId, ctx);
+            brand = await this.repo.findBrandBySlug(resolveOrgIdForCommerce(actor ?? ctx?.actor ?? null, this.deps.config), brandId, ctx);
         const removed = await this.repo.removeEntityFromBrand(entityId, brand?.id ?? brandId, ctx);
         if (!removed)
             return Err(new CommerceNotFoundError("Brand assignment not found."));

package/dist/modules/catalog/category-service.js

@@ -1,4 +1,4 @@
-import { resolveOrgId } from "../../auth/org.js";
+import { resolveOrgIdForCommerce } from "../../auth/org.js";
 import { assertPermission } from "../../auth/permissions.js";
 import { CommerceConflictError, CommerceNotFoundError, toCommerceError, } from "../../kernel/errors.js";
 import { Err, Ok } from "../../kernel/result.js";
@@ -13,13 +13,13 @@ export class CategoryService {
     assertSameOrg(resource, actor) {
         if (!resource)
             return;
-        const orgId = resolveOrgId(actor);
+        const orgId = resolveOrgIdForCommerce(actor, this.deps.config);
         if (resource.organizationId && resource.organizationId !== orgId) {
             throw new CommerceNotFoundError("Entity not found.");
         }
     }
     async listCategories(ctx, opts) {
-        const allCategories = await this.repo.findAllCategories(resolveOrgId(ctx?.actor ?? null), ctx);
+        const allCategories = await this.repo.findAllCategories(resolveOrgIdForCommerce(ctx?.actor ?? null, this.deps.config), ctx);
         const visible = opts?.includeArchived
             ? allCategories
             : allCategories.filter((c) => (c.status ?? "active") === "active");
@@ -60,7 +60,7 @@ export class CategoryService {
             if (existingById)
                 return Err(new CommerceConflictError(`Category with id ${input.id} already exists.`));
         }
-        const orgId = resolveOrgId(actor);
+        const orgId = resolveOrgIdForCommerce(actor, this.deps.config);
         const existingBySlug = await this.repo.findCategoryBySlug(orgId, input.slug, ctx);
         if (existingBySlug)
             return Err(new CommerceConflictError(`Category with slug ${input.slug} already exists.`));
@@ -79,7 +79,7 @@ export class CategoryService {
             return Err(toCommerceError(error));
         }
         if (input.slug) {
-            const existingBySlug = await this.repo.findCategoryBySlug(resolveOrgId(actor), input.slug, ctx);
+            const existingBySlug = await this.repo.findCategoryBySlug(resolveOrgIdForCommerce(actor, this.deps.config), input.slug, ctx);
             if (existingBySlug && existingBySlug.id !== id)
                 return Err(new CommerceConflictError(`Category with slug ${input.slug} already exists.`));
         }
@@ -119,7 +119,7 @@ export class CategoryService {
         catch (error) {
             return Err(toCommerceError(error));
         }
-        const addCatOrgId = resolveOrgId(actor ?? ctx?.actor ?? null);
+        const addCatOrgId = resolveOrgIdForCommerce(actor ?? ctx?.actor ?? null, this.deps.config);
         const isUuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(categoryId);
         let category = isUuid ? await this.repo.findCategoryById(categoryId, ctx) : null;
         if (!category)
@@ -149,7 +149,7 @@ export class CategoryService {
         const isCatUuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(categoryId);
         let category = isCatUuid ? await this.repo.findCategoryById(categoryId, ctx) : null;
         if (!category)
-            category = await this.repo.findCategoryBySlug(resolveOrgId(actor ?? ctx?.actor ?? null), categoryId, ctx);
+            category = await this.repo.findCategoryBySlug(resolveOrgIdForCommerce(actor ?? ctx?.actor ?? null, this.deps.config), categoryId, ctx);
         const removed = await this.repo.removeEntityFromCategory(entityId, category?.id ?? categoryId, ctx);
         if (!removed)
             return Err(new CommerceNotFoundError("Category assignment not found."));

package/dist/modules/catalog/entity-service.d.ts

@@ -1,28 +1,37 @@
 import type { Actor } from "../../auth/types.js";
 import { type Result } from "../../kernel/result.js";
-import type { TxContext } from "../../kernel/database/tx-context.js";
-import type { CatalogServiceDeps, CatalogEntityHydrated, CatalogListResult, CreateEntityInput, GetOptions, ListParams, SetAttributesInput, UpdateEntityInput, VariantGenerationStrategy, CreateOptionTypeInput, CreateOptionValueInput, CreateVariantInput } from "./service.js";
+import type { CatalogWriteContext, TxContext } from "../../kernel/database/tx-context.js";
+import type { CatalogServiceDeps, CatalogEntityHydrated, CatalogListResult, CreateEntityInput, GetOptions, ListParams, SetAttributesInput, UpdateEntityInput, VariantGenerationStrategy, CreateOptionTypeInput, CreateOptionValueInput, CreateVariantInput, EntityFieldDefinitionResolver } from "./service.js";
 import type { SellableAttribute, OptionType, OptionValue, Variant } from "./repository/index.js";
 export declare class EntityService {
     private readonly deps;
-    constructor(deps: CatalogServiceDeps);
+    private readonly resolveEntityFieldDefinitions;
+    constructor(deps: CatalogServiceDeps, resolveEntityFieldDefinitions: EntityFieldDefinitionResolver);
     private get repo();
     private assertSameOrg;
     private assertEntityWritable;
-    private validateAndCreateCustomFields;
+    private validateCustomFields;
+    private writeCustomFields;
     private hydrateEntity;
     create(input: CreateEntityInput, actor: Actor | null, ctx?: TxContext): Promise<Result<CatalogEntityHydrated>>;
-    update(id: string, input: UpdateEntityInput, actor: Actor | null, ctx?: TxContext): Promise<Result<CatalogEntityHydrated>>;
+    update(id: string, input: UpdateEntityInput, actor: Actor | null, ctx?: CatalogWriteContext): Promise<Result<CatalogEntityHydrated>>;
     delete(id: string, actor: Actor | null, ctx?: TxContext): Promise<Result<void>>;
-    getById(id: string, options?: GetOptions, actor?: Actor | null, ctx?: TxContext): Promise<Result<CatalogEntityHydrated>>;
-    getBySlug(slug: string, options?: GetOptions, actor?: Actor | null, ctx?: TxContext): Promise<Result<CatalogEntityHydrated>>;
-    list(params: ListParams, actor?: Actor | null, ctx?: TxContext): Promise<Result<CatalogListResult>>;
+    getById(id: string, options: GetOptions | undefined, actor: Actor | null, ctx?: TxContext): Promise<Result<CatalogEntityHydrated>>;
+    /**
+     * Reads an entity for a trusted server pipeline after the request boundary
+     * has already authorized the caller. Organization scope is explicit; the
+     * storefront visibility policy is intentionally not applied, so an internal
+     * invariant check never depends on the caller's catalog permissions.
+     */
+    getByIdForInternalUse(id: string, organizationId: string, options?: GetOptions, ctx?: TxContext): Promise<Result<CatalogEntityHydrated>>;
+    getBySlug(slug: string, options: GetOptions | undefined, actor: Actor | null, ctx?: TxContext): Promise<Result<CatalogEntityHydrated>>;
+    list(params: ListParams, actor: Actor | null, ctx?: TxContext): Promise<Result<CatalogListResult>>;
     private changeStatus;
     publish(id: string, actor: Actor | null, ctx?: TxContext): Promise<Result<CatalogEntityHydrated>>;
     archive(id: string, actor: Actor | null, ctx?: TxContext): Promise<Result<CatalogEntityHydrated>>;
     discontinue(id: string, actor: Actor | null, ctx?: TxContext): Promise<Result<CatalogEntityHydrated>>;
-    setAttributes(entityId: string, locale: string, attrs: SetAttributesInput, actor: Actor | null, ctx?: TxContext): Promise<Result<void>>;
-    getAttributes(entityId: string, locale: string, ctx?: TxContext): Promise<Result<SellableAttribute>>;
+    setAttributes(entityId: string, locale: string, attrs: SetAttributesInput, actor: Actor | null, ctx?: CatalogWriteContext): Promise<Result<void>>;
+    getAttributes(entityId: string, locale: string, actor: Actor | null, ctx?: TxContext): Promise<Result<SellableAttribute>>;
     createOptionType(input: CreateOptionTypeInput, actor: Actor | null, ctx?: TxContext): Promise<Result<OptionType>>;
     createOptionValue(input: CreateOptionValueInput, actor: Actor | null, ctx?: TxContext): Promise<Result<OptionValue>>;
     createVariant(input: CreateVariantInput, actor: Actor | null, ctx?: TxContext): Promise<Result<Variant>>;

package/dist/modules/catalog/entity-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity-service.d.ts","sourceRoot":"","sources":["../../../src/modules/catalog/entity-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAkBjD,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAI9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAEV,iBAAiB,EAGjB,UAAU,EACV,WAAW,EACX,OAAO,EACR,MAAM,uBAAuB,CAAC;AAsC/B,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,kBAAkB;IAErD,OAAO,KAAK,IAAI,GAEf;IAED,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,oBAAoB;YAId,6BAA6B;YAyD7B,aAAa;IAgDrB,MAAM,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAqB9G,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAiB1H,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAgB/E,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IA6BxH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IA+B5H,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YA+D3F,YAAY;IAa1B,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACjG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACjG,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAE/F,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IASvI,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAMpG,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAkBjH,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAcpH,aAAa,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAwBxG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,yBAAyB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YA2DjI,UAAU;YAkCV,iBAAiB;YAUjB,kBAAkB;IAoB1B,kBAAkB,CACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,EAClG,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAuCpD,kBAAkB,CACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;QAAE,IAAI,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,EAC1F,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CA8C5D"}
+{"version":3,"file":"entity-service.d.ts","sourceRoot":"","sources":["../../../src/modules/catalog/entity-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAkBjD,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAK9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAI1F,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,6BAA6B,EAC9B,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAEV,iBAAiB,EAGjB,UAAU,EACV,WAAW,EACX,OAAO,EACR,MAAM,uBAAuB,CAAC;AA8D/B,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,6BAA6B;gBAD7B,IAAI,EAAE,kBAAkB,EACxB,6BAA6B,EAAE,6BAA6B;IAG/E,OAAO,KAAK,IAAI,GAEf;IAED,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,oBAAoB;YAId,oBAAoB;YAkFpB,iBAAiB;YAYjB,aAAa;IAkDrB,MAAM,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAwB9G,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAqBpI,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAgB/E,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAgCxI;;;;;OAKG;IACG,qBAAqB,CACzB,EAAE,EAAE,MAAM,EACV,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE,UAAU,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAMnC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAkCtI,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAuE1F,YAAY;IAa1B,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACjG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACjG,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAE/F,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IA2BjJ,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAczH,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAkBjH,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAcpH,aAAa,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAwBxG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,yBAAyB,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YA2DjI,UAAU;YAkCV,iBAAiB;YAUjB,kBAAkB;IAoB1B,kBAAkB,CACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,EAClG,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAuCpD,kBAAkB,CACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;QAAE,IAAI,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,EAC1F,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CA8C5D"}