@porulle/core 0.64.0 → 0.65.0

package/dist/interfaces/rest/routes/tax.js

@@ -1,6 +1,6 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
 import { createTaxRateRoute, listTaxRatesRoute, updateTaxRateRoute, deleteTaxRateRoute, createTaxClassRoute, listTaxClassesRoute, updateTaxClassRoute, deleteTaxClassRoute, } from "../schemas/tax.js";
-import { mapErrorToResponse, mapErrorToStatus, requirePerm } from "../utils.js";
+import { errorBody, mapErrorToStatus, requirePerm } from "../utils.js";
 export function taxRoutes(kernel) {
     const router = new OpenAPIHono();
     router.use("/rates", requirePerm("tax:manage"));
@@ -11,28 +11,28 @@ export function taxRoutes(kernel) {
     router.openapi(createTaxRateRoute, async (c) => {
         const result = await kernel.services.tax.createTaxRate(c.req.valid("json"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, 201);
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(listTaxRatesRoute, async (c) => {
         const result = await kernel.services.tax.listTaxRates(c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(updateTaxRateRoute, async (c) => {
         const result = await kernel.services.tax.updateTaxRate(c.req.param("id"), c.req.valid("json"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(deleteTaxRateRoute, async (c) => {
         const result = await kernel.services.tax.deleteTaxRate(c.req.param("id"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // ── Product tax classes (issue #57) ───────────────────────────────
@@ -40,28 +40,28 @@ export function taxRoutes(kernel) {
     router.openapi(createTaxClassRoute, async (c) => {
         const result = await kernel.services.tax.createTaxClass(c.req.valid("json"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, 201);
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(listTaxClassesRoute, async (c) => {
         const result = await kernel.services.tax.listTaxClasses(c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(updateTaxClassRoute, async (c) => {
         const result = await kernel.services.tax.updateTaxClass(c.req.param("id"), c.req.valid("json"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(deleteTaxClassRoute, async (c) => {
         const result = await kernel.services.tax.deleteTaxClass(c.req.param("id"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     return router;

package/dist/interfaces/rest/routes/webhooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,KAAK,MAAM,EAAqD,MAAM,aAAa,CAAC;AAE7F,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,gCA2C3C"}
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,KAAK,MAAM,EAA4C,MAAM,aAAa,CAAC;AAEpF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,gCA2C3C"}

package/dist/interfaces/rest/routes/webhooks.js

@@ -1,6 +1,6 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
 import { createWebhookEndpointRoute, listWebhookEndpointsRoute, deleteWebhookEndpointRoute } from "../schemas/webhooks.js";
-import { mapErrorToResponse, mapErrorToStatus, requirePerm } from "../utils.js";
+import { errorBody, mapErrorToStatus, requirePerm } from "../utils.js";
 export function webhookRoutes(kernel) {
     const router = new OpenAPIHono();
     router.use("/*", requirePerm("webhooks:manage"));
@@ -14,7 +14,7 @@ export function webhookRoutes(kernel) {
         const actor = c.get("actor");
         const result = await kernel.services.webhooks.createEndpoint(body, actor);
         if (!result.ok) {
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         }
         return c.json({ data: result.value }, 201);
     });
@@ -22,7 +22,7 @@ export function webhookRoutes(kernel) {
     router.openapi(listWebhookEndpointsRoute, async (c) => {
         const result = await kernel.services.webhooks.listEndpoints(c.get("actor"));
         if (!result.ok) {
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         }
         const sanitized = result.value.map(({ secret: _secret, ...rest }) => rest);
         return c.json({ data: sanitized });
@@ -31,7 +31,7 @@ export function webhookRoutes(kernel) {
     router.openapi(deleteWebhookEndpointRoute, async (c) => {
         const result = await kernel.services.webhooks.deleteEndpoint(c.req.param("id"), c.get("actor"));
         if (!result.ok) {
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         }
         return c.json({ data: { deleted: true } });
     });

package/dist/interfaces/rest/utils.d.ts

@@ -32,7 +32,7 @@ export declare function parseInclude(value?: string): Set<string>;
  * Map an error to a safe client response. Internal errors are sanitized
  * to prevent leaking SQL, schema, or stack trace details.
  */
-export declare function mapErrorToResponse(error: unknown): {
+export declare function errorBody(error: unknown): {
     error: {
         code: string;
         message: string;

package/dist/interfaces/rest/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/interfaces/rest/utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAMjD,eAAO,MAAM,sBAAsB,eAAyC,CAAC;AAM7E,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,CAAC,CAKtF;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,CAAC,CAE7E;AAED,KAAK,iBAAiB,GAAG;IACvB,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,aAAa,CAAC,GAAG,IAAI,CAAC;IACzE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7C,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CACzB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG;IACnB,SAAS,EAAE;QACT,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;CACH,CAAC;AAIF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAOA;AAED,wBAAgB,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAQxD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAO/F;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAE5B;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,OACf,iBAAiB,QAAQ,MAAM,OAAO,CAAC,IAAI,CAAC,sBAmB1E;AAED,wBAAgB,cAAc,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,OAC9B,iBAAiB,QAAQ,MAAM,OAAO,CAAC,IAAI,CAAC,sBAkB1E;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,OAEjD,iBAAiB,QAAQ,MAAM,OAAO,CAAC,IAAI,CAAC,sBAQ1E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAIjF;AAED,wBAAgB,SAAS,CACvB,KAAK,CAAC,EAAE,MAAM,GAEZ;IACF,KAAK,EAAE,WAAW,GAAG,WAAW,GAAG,MAAM,CAAC;IAC1C,SAAS,EAAE,KAAK,GAAG,MAAM,CAAC;CAC3B,GACG,SAAS,CASZ;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE7C"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/interfaces/rest/utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAOjD,eAAO,MAAM,sBAAsB,eAAyC,CAAC;AAM7E,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,CAAC,CAKtF;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,CAAC,CAE7E;AAED,KAAK,iBAAiB,GAAG;IACvB,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,aAAa,CAAC,GAAG,IAAI,CAAC;IACzE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7C,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CACzB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG;IACnB,SAAS,EAAE;QACT,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;CACH,CAAC;AAIF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAOA;AAED,wBAAgB,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAQxD;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAOtF;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAE5B;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,OACf,iBAAiB,QAAQ,MAAM,OAAO,CAAC,IAAI,CAAC,sBAY1E;AAED,wBAAgB,cAAc,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,OAC9B,iBAAiB,QAAQ,MAAM,OAAO,CAAC,IAAI,CAAC,sBAc1E;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,OAEjD,iBAAiB,QAAQ,MAAM,OAAO,CAAC,IAAI,CAAC,sBAQ1E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAIjF;AAED,wBAAgB,SAAS,CACvB,KAAK,CAAC,EAAE,MAAM,GAEZ;IACF,KAAK,EAAE,WAAW,GAAG,WAAW,GAAG,MAAM,CAAC;IAC1C,SAAS,EAAE,KAAK,GAAG,MAAM,CAAC;CAC3B,GACG,SAAS,CASZ;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE7C"}

package/dist/interfaces/rest/utils.js

@@ -1,6 +1,6 @@
 import { mapErrorToStatus } from "../../kernel/error-mapper.js";
 import { toCommerceError } from "../../kernel/errors.js";
-import { AUTHENTICATION_REQUIRED_MESSAGE, isUnauthenticatedActor, } from "../../auth/permissions.js";
+import { AUTHENTICATION_REQUIRED_MESSAGE, isUnauthenticatedActor, hasPermissionFromList, } from "../../auth/permissions.js";
 export const ROUTE_PERMISSION_GUARD = Symbol("porulle.routePermissionGuard");
 export function markRoutePermissionGuard(handler, methods) {
     if (typeof handler === "function") {
@@ -32,7 +32,7 @@ export function parseInclude(value) {
  * Map an error to a safe client response. Internal errors are sanitized
  * to prevent leaking SQL, schema, or stack trace details.
  */
-export function mapErrorToResponse(error) {
+export function errorBody(error) {
     const ce = toCommerceError(error);
     if (ce.code === "INTERNAL_ERROR") {
         // Sanitize internal errors -- do not expose raw messages to clients
@@ -49,14 +49,7 @@ export { mapErrorToStatus };
 export function requirePerm(permission) {
     const middleware = async (c, next) => {
         const actor = c.get("actor");
-        const perms = actor?.permissions ?? [];
-        if (perms.includes(permission) || perms.includes("*:*")) {
-            await next();
-            return;
-        }
-        // Check resource-level wildcard (e.g., "catalog:*" matches "catalog:create")
-        const [resource] = permission.split(":");
-        if (resource && perms.includes(`${resource}:*`)) {
+        if (hasPermissionFromList(actor?.permissions ?? [], permission)) {
             await next();
             return;
         }
@@ -71,9 +64,7 @@ export function requireAnyPerm(permissions) {
     const middleware = async (c, next) => {
         const actor = c.get("actor");
         const granted = actor?.permissions ?? [];
-        const allowed = permissions.some((permission) => granted.includes(permission) ||
-            granted.includes("*:*") ||
-            granted.includes(`${permission.split(":")[0]}:*`));
+        const allowed = permissions.some((permission) => hasPermissionFromList(granted, permission));
         if (allowed) {
             await next();
             return;

package/dist/jobs.d.ts

@@ -1,5 +1,6 @@
 export type { JobInstanceStatus, TaskContext, TaskDefinition, TaskJobMeta, TaskRetryConfig, TaskStep, } from "./kernel/jobs/types.js";
 export { TaskNonRetryableError } from "./kernel/jobs/types.js";
 export { createPassThroughTaskStep } from "./kernel/jobs/step.js";
+export { prepareEnqueue, type PreparedEnqueue } from "./kernel/jobs/prepare-enqueue.js";
 export type { EnqueueOptions, ExecutionEngine, ExecutionEngineSetup, JobsAdapter, } from "./kernel/jobs/adapter.js";
 //# sourceMappingURL=jobs.d.ts.map

package/dist/jobs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../src/jobs.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,WAAW,EACX,eAAe,EACf,QAAQ,GACT,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,YAAY,EACV,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,WAAW,GACZ,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../src/jobs.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,WAAW,EACX,eAAe,EACf,QAAQ,GACT,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACxF,YAAY,EACV,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,WAAW,GACZ,MAAM,0BAA0B,CAAC"}

package/dist/jobs.js

@@ -1,2 +1,3 @@
 export { TaskNonRetryableError } from "./kernel/jobs/types.js";
 export { createPassThroughTaskStep } from "./kernel/jobs/step.js";
+export { prepareEnqueue } from "./kernel/jobs/prepare-enqueue.js";

package/dist/kernel/database/adapter.d.ts

@@ -28,5 +28,14 @@ export interface DatabaseConnectionFactoryInput {
  * drizzle-kit (`pushSchema`/introspection), which needs the native result shape.
  */
 export declare function unwrapDb<T>(db: T): T;
+/**
+ * Normalize `db.execute()` so it returns a row array regardless of the
+ * underlying driver. postgres-js returns the rows directly, while neon-http
+ * and node-postgres (and PGlite) return `{ rows, command, rowCount }`.
+ * Without this, raw-SQL code that destructures the result as an array breaks
+ * on the `{ rows }` drivers. We intercept only `execute`; every other method
+ * is bound to the real driver instance so its internals are untouched.
+ */
+export declare function normalizeExecuteShape<T extends object>(db: T): T;
 export declare function createDatabaseConnection(input: DatabaseConnectionFactoryInput): DatabaseAdapter;
 //# sourceMappingURL=adapter.d.ts.map

package/dist/kernel/database/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/kernel/database/adapter.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe,CAAC,SAAS,GAAG,OAAO,EAAE,YAAY,GAAG,OAAO;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,SAAS,CAAC;IACd,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjE;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,eAAe,CAAC;CAC1B;AASD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAMpC;AAwDD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,8BAA8B,GAAG,eAAe,CAY/F"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/kernel/database/adapter.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe,CAAC,SAAS,GAAG,OAAO,EAAE,YAAY,GAAG,OAAO;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,SAAS,CAAC;IACd,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjE;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,eAAe,CAAC;CAC1B;AASD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAMpC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CA4ChE;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,8BAA8B,GAAG,eAAe,CAY/F"}

package/dist/kernel/database/adapter.js

@@ -26,7 +26,7 @@ export function unwrapDb(db) {
  * on the `{ rows }` drivers. We intercept only `execute`; every other method
  * is bound to the real driver instance so its internals are untouched.
  */
-function normalizeExecuteShape(db) {
+export function normalizeExecuteShape(db) {
     return new Proxy(db, {
         get(target, prop, receiver) {
             if (prop === RAW_DB)

package/dist/kernel/database/migrate.d.ts

@@ -31,10 +31,6 @@ export declare function getSchema(): typeof schema;
  * Throws if a plugin table name collides with a core table name.
  */
 export declare function buildSchema(config?: CommerceConfig): Record<string, unknown>;
-/**
- * Returns a list of all schema table names defined by the commerce engine.
- */
-export declare function getTableNames(): string[];
 /**
  * Returns the absolute filesystem path(s) of the combined schema module for
  * use as drizzle-kit's `schema` option in a consumer's `drizzle.config.ts`.

package/dist/kernel/database/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/kernel/database/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC;;;GAGG;AACH,wBAAgB,SAAS,kBAExB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAwB5E;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,EAAE,CASxC;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAKzC;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,eAAe,EAAE,OAAO,EACxB,MAAM,CAAC,EAAE,cAAc,GACtB,OAAO,CAAC,IAAI,CAAC,CAqBf"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/kernel/database/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC;;;GAGG;AACH,wBAAgB,SAAS,kBAExB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAwB5E;AAGD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAKzC;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,eAAe,EAAE,OAAO,EACxB,MAAM,CAAC,EAAE,cAAc,GACtB,OAAO,CAAC,IAAI,CAAC,CAmBf"}

package/dist/kernel/database/migrate.js

@@ -52,16 +52,6 @@ export function buildSchema(config) {
     }
     return merged;
 }
-/**
- * Returns a list of all schema table names defined by the commerce engine.
- */
-export function getTableNames() {
-    return Object.entries(schema)
-        .filter(([_, value]) => value != null &&
-        typeof value === "object" &&
-        "getSQL" in value)
-        .map(([key]) => key);
-}
 /**
  * Returns the absolute filesystem path(s) of the combined schema module for
  * use as drizzle-kit's `schema` option in a consumer's `drizzle.config.ts`.
@@ -95,10 +85,8 @@ export async function pushSchema(drizzleInstance, config) {
     catch {
         throw new Error("pushSchema() requires `drizzle-kit` to be installed. Add it to your project: bun add -d drizzle-kit");
     }
-    // With a config, push the merged core + plugin schema so plugin-declared
-    // tables are created too; without one, push core only (backward compatible).
-    const schemaToApply = config ? buildSchema(config) : getSchema();
+    // Core plus any plugin-declared tables in `config.customSchemas`.
     // drizzle-kit needs the native driver result shape; unwrap a normalized db.
-    const { apply } = await drizzleKit.pushSchema(schemaToApply, unwrapDb(drizzleInstance));
+    const { apply } = await drizzleKit.pushSchema(buildSchema(config), unwrapDb(drizzleInstance));
     await apply();
 }

package/dist/kernel/database/pglite-transaction.d.ts

@@ -0,0 +1,28 @@
+/** The one PGlite capability a transaction needs: run a statement on the connection. */
+export interface PGliteExec {
+    exec(statement: string): Promise<unknown>;
+}
+/**
+ * `DatabaseAdapter.transaction` for a PGlite instance.
+ *
+ * Drizzle's own `transaction()` can hang on PGlite, so this drives
+ * BEGIN/COMMIT/ROLLBACK directly and hands the body the same `db` handle.
+ *
+ * PGlite is a single connection, so two bodies awaiting concurrently would
+ * otherwise interleave their statements between one BEGIN and one COMMIT —
+ * the second BEGIN is a no-op Postgres only warns about — and share a snapshot,
+ * each other's row locks and each other's rollback. Bodies are queued instead,
+ * which is what a connection pool does to two transactions competing for the
+ * same rows.
+ *
+ * Only a call made from INSIDE a running body joins it (without savepoints that
+ * is the only sound reading of a nested call). "Inside" is decided by the async
+ * context the call runs in, never by whether some transaction happens to be
+ * open: an unrelated request that arrives mid-body queues behind it.
+ */
+export declare function createPGliteTransaction(pg: PGliteExec, db: unknown): {
+    transaction<T>(fn: (tx: unknown) => Promise<T>): Promise<T>;
+    /** Whether a transaction body is executing right now. */
+    inTransaction(): boolean;
+};
+//# sourceMappingURL=pglite-transaction.d.ts.map

package/dist/kernel/database/pglite-transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pglite-transaction.d.ts","sourceRoot":"","sources":["../../../src/kernel/database/pglite-transaction.ts"],"names":[],"mappings":"AAEA,wFAAwF;AACxF,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,GAAG;IACpE,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5D,yDAAyD;IACzD,aAAa,IAAI,OAAO,CAAC;CAC1B,CA+BA"}

package/dist/kernel/database/pglite-transaction.js

@@ -0,0 +1,52 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+/**
+ * `DatabaseAdapter.transaction` for a PGlite instance.
+ *
+ * Drizzle's own `transaction()` can hang on PGlite, so this drives
+ * BEGIN/COMMIT/ROLLBACK directly and hands the body the same `db` handle.
+ *
+ * PGlite is a single connection, so two bodies awaiting concurrently would
+ * otherwise interleave their statements between one BEGIN and one COMMIT —
+ * the second BEGIN is a no-op Postgres only warns about — and share a snapshot,
+ * each other's row locks and each other's rollback. Bodies are queued instead,
+ * which is what a connection pool does to two transactions competing for the
+ * same rows.
+ *
+ * Only a call made from INSIDE a running body joins it (without savepoints that
+ * is the only sound reading of a nested call). "Inside" is decided by the async
+ * context the call runs in, never by whether some transaction happens to be
+ * open: an unrelated request that arrives mid-body queues behind it.
+ */
+export function createPGliteTransaction(pg, db) {
+    // Each transaction gets its own token; a call joins only when it runs inside
+    // the body of the transaction that is open right now (work a body started
+    // but did not await may outlive it, and must not join a closed transaction).
+    const body = new AsyncLocalStorage();
+    let queue = Promise.resolve();
+    let current = null;
+    async function transaction(fn) {
+        const caller = body.getStore();
+        if (caller !== undefined && caller === current)
+            return fn(db);
+        const run = queue.then(async () => {
+            await pg.exec("BEGIN");
+            const token = {};
+            current = token;
+            try {
+                const result = await body.run(token, () => fn(db));
+                await pg.exec("COMMIT");
+                return result;
+            }
+            catch (error) {
+                await pg.exec("ROLLBACK");
+                throw error;
+            }
+            finally {
+                current = null;
+            }
+        });
+        queue = run.catch(() => undefined);
+        return run;
+    }
+    return { transaction, inTransaction: () => current !== null };
+}

package/dist/kernel/database/tx-context.d.ts

@@ -17,7 +17,6 @@ export interface WithTransactionOptions {
 }
 export declare function createTxContext<TTx>(tx: TTx, options: WithTransactionOptions): TxContext<TTx>;
 export declare function withTransaction<TDb, TTx, TResult>(database: DatabaseAdapter<TDb, TTx>, options: WithTransactionOptions, fn: (ctx: TxContext<TTx>) => Promise<TResult>): Promise<TResult>;
-export declare function reuseOrCreateTxContext<TTx>(tx: TTx, options: WithTransactionOptions, existing?: TxContext<TTx> | null): TxContext<TTx>;
 export declare function resolveWriteContextHookContext(ctx?: CatalogWriteContext): Record<string, unknown> | undefined;
 export declare function isWriteContextTransactional<TTx>(ctx?: CatalogWriteContext<TTx>): ctx is TxContext<TTx>;
 //# sourceMappingURL=tx-context.d.ts.map

package/dist/kernel/database/tx-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tx-context.d.ts","sourceRoot":"","sources":["../../../src/kernel/database/tx-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,WAAW,SAAS,CAAC,GAAG,GAAG,OAAO;IACtC,EAAE,EAAE,GAAG,CAAC;IACR,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,mBAAmB,CAAC,GAAG,GAAG,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC;AAErF,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,wBAAgB,eAAe,CAAC,GAAG,EACjC,EAAE,EAAE,GAAG,EACP,OAAO,EAAE,sBAAsB,GAC9B,SAAS,CAAC,GAAG,CAAC,CAOhB;AAED,wBAAsB,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EACrD,QAAQ,EAAE,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,EACnC,OAAO,EAAE,sBAAsB,EAC/B,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAC5C,OAAO,CAAC,OAAO,CAAC,CAIlB;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EACxC,EAAE,EAAE,GAAG,EACP,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,GAC/B,SAAS,CAAC,GAAG,CAAC,CAKhB;AAUD,wBAAgB,8BAA8B,CAAC,GAAG,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAE7G;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,mBAAmB,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAEtG"}
+{"version":3,"file":"tx-context.d.ts","sourceRoot":"","sources":["../../../src/kernel/database/tx-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,WAAW,SAAS,CAAC,GAAG,GAAG,OAAO;IACtC,EAAE,EAAE,GAAG,CAAC;IACR,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,mBAAmB,CAAC,GAAG,GAAG,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC;AAErF,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,wBAAgB,eAAe,CAAC,GAAG,EACjC,EAAE,EAAE,GAAG,EACP,OAAO,EAAE,sBAAsB,GAC9B,SAAS,CAAC,GAAG,CAAC,CAOhB;AAED,wBAAsB,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EACrD,QAAQ,EAAE,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,EACnC,OAAO,EAAE,sBAAsB,EAC/B,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAC5C,OAAO,CAAC,OAAO,CAAC,CAIlB;AAGD,wBAAgB,8BAA8B,CAAC,GAAG,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAE7G;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,mBAAmB,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAEtG"}

package/dist/kernel/database/tx-context.js

@@ -12,21 +12,9 @@ export async function withTransaction(database, options, fn) {
         return fn(createTxContext(tx, options));
     });
 }
-export function reuseOrCreateTxContext(tx, options, existing) {
-    if (existing) {
-        return existing;
-    }
-    return createTxContext(tx, options);
-}
-function hookContextFromWriteContext(ctx) {
-    return ctx?.hookContext;
-}
-function isTransactionalWriteContext(ctx) {
-    return "tx" in ctx && ctx.tx != null;
-}
 export function resolveWriteContextHookContext(ctx) {
-    return hookContextFromWriteContext(ctx);
+    return ctx?.hookContext;
 }
 export function isWriteContextTransactional(ctx) {
-    return ctx != null && isTransactionalWriteContext(ctx);
+    return ctx != null && "tx" in ctx && ctx.tx != null;
 }

package/dist/kernel/database/unique-violation.d.ts

@@ -0,0 +1,3 @@
+/** Whether a database error (or any error it wraps) is a Postgres unique violation (23505). */
+export declare function isUniqueViolation(error: unknown): boolean;
+//# sourceMappingURL=unique-violation.d.ts.map

package/dist/kernel/database/unique-violation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unique-violation.d.ts","sourceRoot":"","sources":["../../../src/kernel/database/unique-violation.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAKzD"}

package/dist/kernel/database/unique-violation.js

@@ -0,0 +1,9 @@
+/** Whether a database error (or any error it wraps) is a Postgres unique violation (23505). */
+export function isUniqueViolation(error) {
+    if (error == null || typeof error !== "object")
+        return false;
+    const value = error;
+    if (value.code === "23505")
+        return true;
+    return isUniqueViolation(value.cause);
+}

package/dist/kernel/error-mapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-mapper.d.ts","sourceRoot":"","sources":["../../src/kernel/error-mapper.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAiBnD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAGrE;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE;QAAE,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACnD,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAaD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,OAAO,EACf,MAAM,CAAC,EAAE,MAAM,GACd,YAAY,CA8Ed"}
+{"version":3,"file":"error-mapper.d.ts","sourceRoot":"","sources":["../../src/kernel/error-mapper.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAkBnD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAGrE;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE;QAAE,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACnD,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAaD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,OAAO,EACf,MAAM,CAAC,EAAE,MAAM,GACd,YAAY,CA8Ed"}

package/dist/kernel/error-mapper.js

@@ -6,6 +6,7 @@ const statusByCode = {
     FORBIDDEN: 403,
     UNAUTHORIZED: 401,
     REAUTH_REQUIRED: 401,
+    TWO_FACTOR_REQUIRED: 403,
     CSRF_ORIGIN_REJECTED: 403,
     CONFLICT: 409,
     INVALID_TRANSITION: 422,

package/dist/kernel/errors.d.ts

@@ -42,6 +42,18 @@ export declare class CommerceReauthRequiredError extends Error implements Commer
     code: "REAUTH_REQUIRED";
     constructor(message: string, details?: unknown | undefined);
 }
+/**
+ * Raised for a signed-in member whose role is listed in
+ * `auth.twoFactor.requiredForRoles` but who has not enabled two-factor
+ * authentication. The client discriminates on `code === "TWO_FACTOR_REQUIRED"`
+ * to send the member to enrolment (`/api/auth/two-factor/enable`) rather than
+ * treating it as a plain refusal.
+ */
+export declare class CommerceTwoFactorRequiredError extends Error implements CommerceError {
+    details?: unknown | undefined;
+    code: "TWO_FACTOR_REQUIRED";
+    constructor(message: string, details?: unknown | undefined);
+}
 export declare class CommerceForbiddenError extends Error implements CommerceError {
     details?: unknown | undefined;
     code: "FORBIDDEN";

package/dist/kernel/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/kernel/errors.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,qBAAsB,SAAQ,KAAM,YAAW,aAAa;IAI9D,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,WAAW,CAAU;gBAE1B,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,qBAAa,uBAAwB,SAAQ,KAAM,YAAW,aAAa;IAIhE,WAAW,CAAC,EAAE,UAAU,EAAE;IAC1B,OAAO,CAAC,EAAE,OAAO;IAJ1B,IAAI,EAAG,mBAAmB,CAAU;gBAElC,OAAO,EAAE,MAAM,EACR,WAAW,CAAC,EAAE,UAAU,EAAE,YAAA,EAC1B,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED;mEACmE;AACnE,eAAO,MAAM,kCAAkC,+CACD,CAAC;AAE/C;;;qBAGqB;AACrB,qBAAa,oCAAqC,SAAQ,KAAM,YAAW,aAAa;IAI7E,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,4BAA4B,CAAU;gBAE3C,OAAO,GAAE,MAA2C,EAC7C,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED;;;;;;GAMG;AACH,qBAAa,2BAA4B,SAAQ,KAAM,YAAW,aAAa;IAIpE,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,iBAAiB,CAAU;gBAEhC,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,qBAAa,sBAAuB,SAAQ,KAAM,YAAW,aAAa;IAI/D,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,WAAW,CAAU;gBAE1B,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,qBAAa,yBAA0B,SAAQ,KAAM,YAAW,aAAa;IAEvC,OAAO,CAAC,EAAE,OAAO;IADrD,IAAI,EAAG,cAAc,CAAU;gBACnB,OAAO,EAAE,MAAM,EAAS,OAAO,CAAC,EAAE,OAAO,YAAA;CAItD;AAED,qBAAa,iBAAkB,SAAQ,KAAM,YAAW,aAAa;IAI1D,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,sBAAsB,CAAU;gBAErC,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,qBAAa,qBAAsB,SAAQ,KAAM,YAAW,aAAa;IAI9D,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,UAAU,CAAU;gBAEzB,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,qBAAa,8BAA+B,SAAQ,KAAM,YAAW,aAAa;IAIvE,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,oBAAoB,CAAU;gBAEnC,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,qBAAa,kBAAmB,SAAQ,KAAM,YAAW,aAAa;IAI3D,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,uBAAuB,CAAU;gBAEtC,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAGtE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAgB7D"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/kernel/errors.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,qBAAsB,SAAQ,KAAM,YAAW,aAAa;IAI9D,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,WAAW,CAAU;gBAE1B,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,qBAAa,uBAAwB,SAAQ,KAAM,YAAW,aAAa;IAIhE,WAAW,CAAC,EAAE,UAAU,EAAE;IAC1B,OAAO,CAAC,EAAE,OAAO;IAJ1B,IAAI,EAAG,mBAAmB,CAAU;gBAElC,OAAO,EAAE,MAAM,EACR,WAAW,CAAC,EAAE,UAAU,EAAE,YAAA,EAC1B,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED;mEACmE;AACnE,eAAO,MAAM,kCAAkC,+CACD,CAAC;AAE/C;;;qBAGqB;AACrB,qBAAa,oCAAqC,SAAQ,KAAM,YAAW,aAAa;IAI7E,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,4BAA4B,CAAU;gBAE3C,OAAO,GAAE,MAA2C,EAC7C,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED;;;;;;GAMG;AACH,qBAAa,2BAA4B,SAAQ,KAAM,YAAW,aAAa;IAIpE,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,iBAAiB,CAAU;gBAEhC,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED;;;;;;GAMG;AACH,qBAAa,8BAA+B,SAAQ,KAAM,YAAW,aAAa;IAIvE,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,qBAAqB,CAAU;gBAEpC,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,qBAAa,sBAAuB,SAAQ,KAAM,YAAW,aAAa;IAI/D,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,WAAW,CAAU;gBAE1B,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,qBAAa,yBAA0B,SAAQ,KAAM,YAAW,aAAa;IAEvC,OAAO,CAAC,EAAE,OAAO;IADrD,IAAI,EAAG,cAAc,CAAU;gBACnB,OAAO,EAAE,MAAM,EAAS,OAAO,CAAC,EAAE,OAAO,YAAA;CAItD;AAED,qBAAa,iBAAkB,SAAQ,KAAM,YAAW,aAAa;IAI1D,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,sBAAsB,CAAU;gBAErC,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,qBAAa,qBAAsB,SAAQ,KAAM,YAAW,aAAa;IAI9D,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,UAAU,CAAU;gBAEzB,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,qBAAa,8BAA+B,SAAQ,KAAM,YAAW,aAAa;IAIvE,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,oBAAoB,CAAU;gBAEnC,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,qBAAa,kBAAmB,SAAQ,KAAM,YAAW,aAAa;IAI3D,OAAO,CAAC,EAAE,OAAO;IAH1B,IAAI,EAAG,uBAAuB,CAAU;gBAEtC,OAAO,EAAE,MAAM,EACR,OAAO,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAGtE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAgB7D"}

package/dist/kernel/errors.js

@@ -50,6 +50,22 @@ export class CommerceReauthRequiredError extends Error {
         this.name = "CommerceReauthRequiredError";
     }
 }
+/**
+ * Raised for a signed-in member whose role is listed in
+ * `auth.twoFactor.requiredForRoles` but who has not enabled two-factor
+ * authentication. The client discriminates on `code === "TWO_FACTOR_REQUIRED"`
+ * to send the member to enrolment (`/api/auth/two-factor/enable`) rather than
+ * treating it as a plain refusal.
+ */
+export class CommerceTwoFactorRequiredError extends Error {
+    details;
+    code = "TWO_FACTOR_REQUIRED";
+    constructor(message, details) {
+        super(message);
+        this.details = details;
+        this.name = "CommerceTwoFactorRequiredError";
+    }
+}
 export class CommerceForbiddenError extends Error {
     details;
     code = "FORBIDDEN";

package/dist/kernel/hooks/create-context.d.ts

@@ -13,22 +13,31 @@ export interface CreateHookContextArgs {
     origin?: HookOrigin;
     jobs?: JobsAdapter;
     db?: PluginDb;
-    /** Prefer this over {@link CreateHookContextArgs.kernel}. */
     database?: {
         db: PluginDb;
     };
-    /**
-     * @deprecated Pass {@link CreateHookContextArgs.database} or {@link CreateHookContextArgs.db} instead.
-     */
-    kernel?: {
-        database: {
-            db: PluginDb;
-        };
-    };
     commerceConfig?: CommerceConfig | null;
 }
 /**
  * Creates a HookContext with sensible defaults.
  */
 export declare function createHookContext(args: CreateHookContextArgs): HookContext;
+/** What a core module service already holds that its hook context is built from. */
+export interface ModuleHookDeps {
+    services: ServiceContainer;
+    database: {
+        db: unknown;
+    };
+    config: CommerceConfig;
+}
+/**
+ * The hook context a core module hands its hooks. Every module builds it the
+ * same way — its name as `context.moduleName` (which webhook event names are
+ * derived from), a logger scoped to it, the kernel's services (and through them
+ * the jobs engine), the database and the config — so none can leave a field out.
+ */
+export declare function createModuleHookContext(moduleName: string, deps: ModuleHookDeps, actor: Actor | null, tx?: unknown, options?: {
+    logScope?: string;
+    context?: Record<string, unknown>;
+}): HookContext;
 //# sourceMappingURL=create-context.d.ts.map

package/dist/kernel/hooks/create-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-context.d.ts","sourceRoot":"","sources":["../../../src/kernel/hooks/create-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEpF,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,6DAA6D;IAC7D,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,QAAQ,CAAA;KAAE,CAAC;IAC5B;;OAEG;IACH,MAAM,CAAC,EAAE;QAAE,QAAQ,EAAE;YAAE,EAAE,EAAE,QAAQ,CAAA;SAAE,CAAA;KAAE,CAAC;IACxC,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;CACxC;AAID;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,WAAW,CAsB1E"}
+{"version":3,"file":"create-context.d.ts","sourceRoot":"","sources":["../../../src/kernel/hooks/create-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGpF,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,QAAQ,CAAA;KAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;CACxC;AAID;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,WAAW,CAyB1E;AAED,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,EAAE;QAAE,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1B,MAAM,EAAE,cAAc,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,EAAE,GAAE,OAAc,EAClB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAO,GACrE,WAAW,CAUb"}

package/dist/kernel/hooks/create-context.js

@@ -1,13 +1,14 @@
 import { randomUUID } from "node:crypto";
 import { NullJobsAdapter } from "../jobs/adapter.js";
+import { createConsoleLogger } from "../../utils/logger.js";
 const nullJobs = new NullJobsAdapter();
 /**
  * Creates a HookContext with sensible defaults.
  */
 export function createHookContext(args) {
-    const db = args.db ?? args.database?.db ?? args.kernel?.database?.db ?? null;
+    const db = args.db ?? args.database?.db ?? null;
     if (db == null) {
-        throw new Error("createHookContext requires a database: pass `db`, `database: { db }`, or `kernel: { database: { db } }`.");
+        throw new Error("createHookContext requires a database: pass `db` or `database: { db }`.");
     }
     return {
         actor: args.actor,
@@ -17,8 +18,28 @@ export function createHookContext(args) {
         context: args.context ?? {},
         requestId: args.requestId ?? randomUUID(),
         origin: args.origin ?? "rest",
-        jobs: args.jobs ?? nullJobs,
+        // The kernel installs its engine as `services.jobs` before any module is
+        // built, so a context that names no engine still enqueues for real. The
+        // null adapter is for a context with no kernel behind it at all.
+        jobs: args.jobs ?? args.services.jobs ?? nullJobs,
         db,
         ...(args.commerceConfig !== undefined ? { commerceConfig: args.commerceConfig } : {}),
     };
 }
+/**
+ * The hook context a core module hands its hooks. Every module builds it the
+ * same way — its name as `context.moduleName` (which webhook event names are
+ * derived from), a logger scoped to it, the kernel's services (and through them
+ * the jobs engine), the database and the config — so none can leave a field out.
+ */
+export function createModuleHookContext(moduleName, deps, actor, tx = null, options = {}) {
+    return createHookContext({
+        actor,
+        tx,
+        logger: createConsoleLogger(options.logScope ?? moduleName),
+        services: deps.services,
+        context: { moduleName, ...options.context },
+        database: { db: deps.database.db },
+        commerceConfig: deps.config,
+    });
+}