@porulle/core 0.53.0 → 0.53.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@porulle/core",
-  "version": "0.53.0",
+  "version": "0.53.1",
   "license": "MIT",
   "type": "module",
   "exports": {
@@ -62,8 +62,8 @@
     "eslint": "^9.39.1",
     "typescript": "5.9.2",
     "vitest": "^3.2.4",
-    "@porulle/eslint-config": "0.1.0",
-    "@porulle/typescript-config": "0.1.0"
+    "@porulle/typescript-config": "0.1.0",
+    "@porulle/eslint-config": "0.1.0"
   },
   "publishConfig": {
     "access": "public"

package/src/modules/customers/repository/index.ts

@@ -1,5 +1,6 @@
 import { eq, and, desc } from "drizzle-orm";
 import type { TxContext } from "../../../kernel/database/tx-context.js";
+import { user } from "../../../auth/auth-schema.js";
 import type {
   DrizzleDatabase,
   DbOrTx,
@@ -51,6 +52,27 @@ export class CustomersRepository {
     return rows[0];
   }
 
+  /**
+   * The auth user's email, when no OTHER customer profile in this organization already holds it
+   * (`customers` is unique on organization + email). Undefined otherwise — the caller then leaves the
+   * profile's email as it is rather than fail the whole profile read on the unique index.
+   */
+  async claimableUserEmail(
+    orgId: string,
+    userId: string,
+    ctx?: TxContext,
+  ): Promise<string | undefined> {
+    const db = this.getDb(ctx);
+    const [account] = await db.select({ email: user.email }).from(user).where(eq(user.id, userId));
+    if (!account?.email) return undefined;
+    const [holder] = await db
+      .select({ userId: customers.userId })
+      .from(customers)
+      .where(and(eq(customers.organizationId, orgId), eq(customers.email, account.email)))
+      .limit(1);
+    return holder === undefined || holder.userId === userId ? account.email : undefined;
+  }
+
   async findByUserId(
     orgId: string,
     userId: string,

package/src/modules/customers/service.ts

@@ -177,16 +177,24 @@ export class CustomerService {
     actor: Actor | null,
     ctx?: TxContext,
   ): Promise<Customer> {
+    // The profile carries the shopper's email: it is the key channel redaction uses, so a profile
+    // without one cannot be erased once its orders have been exported. Filled on creation, and on
+    // the next access of a profile created before this (never overwriting an email it has).
     const existing = await this.repo.findByUserId(orgId, userId, ctx);
     if (existing) {
-      return existing;
+      if (existing.email) return existing;
+      const email = await this.repo.claimableUserEmail(orgId, userId, ctx);
+      if (!email) return existing;
+      return (await this.repo.update(existing.id, { email }, ctx)) ?? existing;
     }
 
+    const email = await this.repo.claimableUserEmail(orgId, userId, ctx);
     const customer = await this.repo.create(
       {
         organizationId: orgId,
         userId,
         metadata: {},
+        ...(email !== undefined ? { email } : {}),
       },
       ctx,
     );