@porulle/core 0.8.0 → 0.10.0

package/dist/modules/webhooks/repository/index.js

@@ -1,4 +1,4 @@
-import { eq, and, lte, isNull, or, desc, sql } from "drizzle-orm";
+import { eq, and, lte, isNull, or, desc, sql, inArray } from "drizzle-orm";
 import { webhookEndpoints, webhookDeliveries } from "../schema.js";
 /**
  * WebhooksRepository provides type-safe database operations for webhooks.
@@ -113,19 +113,25 @@ export class WebhooksRepository {
             .where(and(isNull(webhookDeliveries.deliveredAt), isNull(webhookDeliveries.failedAt), or(isNull(webhookDeliveries.nextRetryAt), lte(webhookDeliveries.nextRetryAt, now))))
             .orderBy(webhookDeliveries.createdAt);
     }
-    async findFailedDeliveries(endpointId, ctx) {
+    async findFailedDeliveries(orgId, endpointId, ctx) {
         const db = this.getDb(ctx);
-        if (endpointId) {
-            return db
-                .select()
-                .from(webhookDeliveries)
-                .where(and(eq(webhookDeliveries.endpointId, endpointId), sql `${webhookDeliveries.failedAt} IS NOT NULL`))
-                .orderBy(desc(webhookDeliveries.failedAt));
-        }
+        // webhook_deliveries has no organizationId column — org lives on the parent
+        // endpoint. Scope failed deliveries to endpoints owned by orgId so this can
+        // never read another tenant's deliveries.
+        const orgEndpointIds = db
+            .select({ id: webhookEndpoints.id })
+            .from(webhookEndpoints)
+            .where(eq(webhookEndpoints.organizationId, orgId));
+        const conditions = [
+            sql `${webhookDeliveries.failedAt} IS NOT NULL`,
+            inArray(webhookDeliveries.endpointId, orgEndpointIds),
+        ];
+        if (endpointId)
+            conditions.push(eq(webhookDeliveries.endpointId, endpointId));
         return db
             .select()
             .from(webhookDeliveries)
-            .where(sql `${webhookDeliveries.failedAt} IS NOT NULL`)
+            .where(and(...conditions))
             .orderBy(desc(webhookDeliveries.failedAt));
     }
     async createDelivery(data, ctx) {

package/dist/runtime/kernel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kernel.d.ts","sourceRoot":"","sources":["../../src/runtime/kernel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAoBzD,OAAO,EAGL,KAAK,MAAM,EACX,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;AAC/C,OAAO,EACL,kBAAkB,EAClB,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAE7B,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CA6H3D"}
+{"version":3,"file":"kernel.d.ts","sourceRoot":"","sources":["../../src/runtime/kernel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAqBzD,OAAO,EAGL,KAAK,MAAM,EACX,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;AAC/C,OAAO,EACL,kBAAkB,EAClB,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAE7B,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CA0I3D"}

package/dist/runtime/kernel.js

@@ -44,8 +44,20 @@ export function createKernel(config) {
     serviceContainer.database = database;
     const db = database.db;
     const jobsTaskMap = new Map((config.jobs?.tasks ?? []).map((t) => [t.slug, t]));
-    const jobsAdapter = new DrizzleJobsAdapter(db, jobsTaskMap);
-    serviceContainer.jobs = jobsAdapter;
+    const jobsEngine = config.jobs?.adapter ?? new DrizzleJobsAdapter(db);
+    const jobLogger = {
+        info: (message, data) => logger.info(message, data),
+        warn: (message, data) => logger.warn(message, data),
+        error: (message, data) => logger.error(message, data),
+    };
+    jobsEngine.register({
+        tasks: jobsTaskMap,
+        context: { logger: jobLogger, db, services: serviceContainer },
+        ...(config.jobs?.processingOrder !== undefined
+            ? { processingOrder: config.jobs.processingOrder }
+            : {}),
+    });
+    serviceContainer.jobs = jobsEngine;
     const topoGraph = kernelModulesForTopoSort();
     const order = topoSortModules(topoGraph);
     const moduleKeys = Object.keys(KERNEL_ALL_MODULES);

package/dist/runtime/server.d.ts

@@ -32,10 +32,7 @@ export declare function createServer(config: CommerceConfig): Promise<{
     kernel: import("./kernel-types.js").Kernel;
     logger: Logger;
     commerce: CommerceInstance;
-    runJobs: (queue?: string, limit?: number) => Promise<{
-        processed: number;
-        failed: number;
-    }>;
+    runJobs: (queue?: string, limit?: number) => Promise<import("../kernel/jobs/adapter.js").RunJobsResult>;
 }>;
 export {};
 //# sourceMappingURL=server.d.ts.map

package/dist/runtime/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/runtime/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAOzD,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAkB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAItE,KAAK,SAAS,GAAG;IACf,SAAS,EAAE;QACT,IAAI,EAAE,YAAY,CAAC;QACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAMvC;AAeD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,cAAc;;;;;sBAuXxB,MAAM,UAAU,MAAM;;;;GAgFtD"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/runtime/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAOzD,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAkB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAItE,KAAK,SAAS,GAAG;IACf,SAAS,EAAE;QACT,IAAI,EAAE,YAAY,CAAC;QACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAMvC;AAeD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,cAAc;;;;;sBAyVxB,MAAM,UAAU,MAAM;GA2FtD"}

package/dist/runtime/server.js

@@ -345,41 +345,15 @@ export async function createServer(config) {
     //   1. autorun: in-process polling (long-running servers)
     //   2. GET /api/jobs/run: cron endpoint (serverless — Vercel, Cloudflare)
     //   3. runPendingJobs() export (custom worker process)
-    const { runPendingJobs } = await import("../kernel/jobs/runner.js");
-    const { runStaleJobReaper, getJobReapThresholdMs, getJobsReaperIntervalMs } = await import("../kernel/jobs/reaper.js");
-    const taskMap = new Map();
-    for (const task of config.jobs?.tasks ?? []) {
-        const t = task;
-        taskMap.set(t.slug ?? t.name ?? "", task);
-    }
-    const jobLogger = {
-        info: (msg, data) => logger.info(data != null ? { data } : {}, msg),
-        warn: (msg, data) => logger.warn(data != null ? { data } : {}, msg),
-        error: (msg, data) => logger.error(data != null ? { data } : {}, msg),
-    };
-    let lastStaleJobReaperAt = 0;
-    const maybeRunStaleJobReaper = async () => {
-        const interval = getJobsReaperIntervalMs();
-        const now = Date.now();
-        if (now - lastStaleJobReaperAt < interval)
-            return;
-        lastStaleJobReaperAt = now;
-        try {
-            await runStaleJobReaper(kernel.database.db, getJobReapThresholdMs(), jobLogger);
-        }
-        catch (err) {
-            logger.error({ err }, "Stale job reaper failed");
-        }
-    };
+    const jobsEngine = kernel.services
+        .jobs;
     const runJobs = async (queue, limit) => {
-        await maybeRunStaleJobReaper();
-        return runPendingJobs({
-            db: kernel.database.db,
-            tasks: taskMap,
+        if (jobsEngine.execution.mode !== "pull") {
+            throw new Error("The configured push execution engine is driven by its native runtime and cannot be polled with runJobs().");
+        }
+        return jobsEngine.execution.run({
             queue: queue ?? "default",
             limit: limit ?? 10,
-            logger: jobLogger,
-            services: kernel.services,
         });
     };
     // Strategy 1: Built-in cron endpoint for serverless deployments.
@@ -405,6 +379,9 @@ export async function createServer(config) {
     // Strategy 2: In-process polling for long-running servers (ECS, Cloud Run, Docker).
     // Enable via config.jobs.autorun.enabled = true
     if (config.jobs?.autorun?.enabled) {
+        if (jobsEngine.execution.mode !== "pull") {
+            throw new Error("jobs.autorun is only valid for pull execution engines. Serve the configured push engine through its native runtime.");
+        }
         const intervalMs = config.jobs.autorun.intervalMs ?? 10_000;
         const jobInterval = setInterval(async () => {
             try {
@@ -420,8 +397,13 @@ export async function createServer(config) {
         logger.info({ intervalMs }, "Job queue autorun started (in-process polling)");
     }
     else {
-        logger.info("Job queue autorun disabled. Use GET /api/jobs/run for serverless cron, " +
-            "or set config.jobs.autorun.enabled = true for in-process polling.");
+        if (jobsEngine.execution.mode === "push") {
+            logger.info("Push job engine registered. Serve it through its native runtime.");
+        }
+        else {
+            logger.info("Job queue autorun disabled. Use GET /api/jobs/run for serverless cron, " +
+                "or set config.jobs.autorun.enabled = true for in-process polling.");
+        }
     }
     const dispatchFetch = app.fetch.bind(app);
     app.fetch = ((input, env, executionCtx) => {

package/dist/test-utils/create-test-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-test-config.d.ts","sourceRoot":"","sources":["../../src/test-utils/create-test-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAgDzD,wBAAsB,gBAAgB,CACpC,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GACtC,OAAO,CAAC,cAAc,CAAC,CA+GzB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GACtC,OAAO,CAAC;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAUnE"}
+{"version":3,"file":"create-test-config.d.ts","sourceRoot":"","sources":["../../src/test-utils/create-test-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAgDzD,wBAAsB,gBAAgB,CACpC,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GACtC,OAAO,CAAC,cAAc,CAAC,CAiHzB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GACtC,OAAO,CAAC;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAUnE"}

package/dist/test-utils/create-test-config.js

@@ -53,6 +53,7 @@ export async function createTestConfig(overrides = {}) {
             provider: "postgresql",
         },
         auth: {
+            allowTestActor: true,
             defaultOrganizationId: "org_default",
             requireEmailVerification: false,
             apiKeys: { enabled: true, defaultPermissions: ["catalog:read"] },
@@ -70,6 +71,7 @@ export async function createTestConfig(overrides = {}) {
                         "orders:create",
                         "orders:read",
                         "orders:update",
+                        "orders:manage",
                         "cart:create",
                         "cart:update",
                         "customers:update:self",

package/dist/test-utils/order-test-helpers.d.ts

@@ -0,0 +1,12 @@
+import type { Kernel } from "../runtime/kernel.js";
+/**
+ * Mark an order as paid (captured) for tests.
+ *
+ * Refund and return flows require a paid order — a refund moves collected money,
+ * and the order primitive rejects refunds on unpaid/pending orders. There is no
+ * public "set captured amount" service (capture() needs a live payment intent),
+ * so tests set the column here through a single typed helper rather than
+ * scattering raw SQL / `as any` casts across test files.
+ */
+export declare function markOrderPaidForTest(kernel: Kernel, orderId: string, amountCaptured: number, paymentIntentId?: string): Promise<void>;
+//# sourceMappingURL=order-test-helpers.d.ts.map

package/dist/test-utils/order-test-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"order-test-helpers.d.ts","sourceRoot":"","sources":["../../src/test-utils/order-test-helpers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAGnD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/test-utils/order-test-helpers.js

@@ -0,0 +1,18 @@
+import { eq } from "drizzle-orm";
+import { orders } from "../modules/orders/schema.js";
+/**
+ * Mark an order as paid (captured) for tests.
+ *
+ * Refund and return flows require a paid order — a refund moves collected money,
+ * and the order primitive rejects refunds on unpaid/pending orders. There is no
+ * public "set captured amount" service (capture() needs a live payment intent),
+ * so tests set the column here through a single typed helper rather than
+ * scattering raw SQL / `as any` casts across test files.
+ */
+export async function markOrderPaidForTest(kernel, orderId, amountCaptured, paymentIntentId) {
+    const db = kernel.database.db;
+    await db
+        .update(orders)
+        .set({ amountCaptured, ...(paymentIntentId ? { paymentIntentId } : {}) })
+        .where(eq(orders.id, orderId));
+}

package/dist/test-utils/rest-api-test-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rest-api-test-utils.d.ts","sourceRoot":"","sources":["../../src/test-utils/rest-api-test-utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAOpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,KAAK,SAAS,GAAG;IACf,SAAS,EAAE;QACT,IAAI,EAAE,YAAY,CAAC;QACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;KACrB,CAAC;CACH,CAAC;AAiDF;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GACtC,OAAO,CAAC;IACT,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC,CAqDD;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAEnF;AAED;;GAEG;AACH,eAAO,MAAM,SAAS,EAAE,KAmCvB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,KAS3B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,KASzB,CAAC;AAEF;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,WAwBA;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EACvB,OAAO,EAAE;IACP,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,qBAYF"}
+{"version":3,"file":"rest-api-test-utils.d.ts","sourceRoot":"","sources":["../../src/test-utils/rest-api-test-utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAOpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,KAAK,SAAS,GAAG;IACf,SAAS,EAAE;QACT,IAAI,EAAE,YAAY,CAAC;QACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;KACrB,CAAC;CACH,CAAC;AAiDF;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GACtC,OAAO,CAAC;IACT,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC,CAqDD;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAEnF;AAED;;GAEG;AACH,eAAO,MAAM,SAAS,EAAE,KAoCvB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,KAS3B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,KASzB,CAAC;AAEF;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,WAwBA;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EACvB,OAAO,EAAE;IACP,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,qBAYF"}

package/dist/test-utils/rest-api-test-utils.js

@@ -130,6 +130,7 @@ export const testActor = {
         "orders:create",
         "orders:read",
         "orders:update",
+        "orders:manage",
         "cart:create",
         "cart:update",
         "cart:read",

package/dist/test-utils/test-actors.js

@@ -28,7 +28,7 @@ export const testStaffActor = {
     role: "staff",
     permissions: [
         "catalog:read", "catalog:create", "catalog:update",
-        "inventory:adjust", "orders:read", "orders:create", "orders:update",
+        "inventory:adjust", "orders:read", "orders:create", "orders:update", "orders:manage",
     ],
 };
 /** Customer with minimal read/write-own permissions. */

package/dist/testing.d.ts

@@ -11,5 +11,6 @@ export { createRepositoryTestHarness } from "./test-utils/create-repository-test
 export { createPluginTestApp, type PluginTestApp, type TestAppEnv } from "./test-utils/create-plugin-test-app.js";
 export { TEST_ORG_ID, testAdminActor, testStaffActor, testCustomerActor, testNoPermActor, jsonHeaders, } from "./test-utils/test-actors.js";
 export { beforeHook, afterHook } from "./test-utils/typed-hooks.js";
+export { markOrderPaidForTest } from "./test-utils/order-test-helpers.js";
 export type { Actor } from "./auth/types.js";
 //# sourceMappingURL=testing.d.ts.map

package/dist/testing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAClH,OAAO,EACL,WAAW,EACX,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAClE,WAAW,GACZ,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAGpE,YAAY,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAClH,OAAO,EACL,WAAW,EACX,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAClE,WAAW,GACZ,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAG1E,YAAY,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/testing.js

@@ -11,3 +11,4 @@ export { createRepositoryTestHarness } from "./test-utils/create-repository-test
 export { createPluginTestApp } from "./test-utils/create-plugin-test-app.js";
 export { TEST_ORG_ID, testAdminActor, testStaffActor, testCustomerActor, testNoPermActor, jsonHeaders, } from "./test-utils/test-actors.js";
 export { beforeHook, afterHook } from "./test-utils/typed-hooks.js";
+export { markOrderPaidForTest } from "./test-utils/order-test-helpers.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@porulle/core",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "license": "MIT",
   "type": "module",
   "exports": {

package/src/auth/middleware.ts

@@ -43,10 +43,10 @@ export function authMiddleware(
     // Resolve the default org from config, falling back to deprecated constant
     const defaultOrgId = config.auth?.defaultOrganizationId ?? DEFAULT_ORG_ID;
 
-    // Test-only actor injection: NODE_ENV === "test" honors x-test-actor for
-    // route-level integration tests that bypass the Better Auth session
-    // round-trip. Production/non-test environments ignore this header entirely.
-    if (process.env.NODE_ENV === "test") {
+    // Test-only actor injection: requires NODE_ENV === "test" AND an explicit
+    // config opt-in so staging/preview deployments left as NODE_ENV=test do not
+    // silently become a full auth bypass.
+    if (process.env.NODE_ENV === "test" && config.auth?.allowTestActor) {
       const testActorHeader = c.req.header("x-test-actor");
       if (testActorHeader) {
         try {
@@ -172,10 +172,29 @@ export function authMiddleware(
         if (result?.valid && result.key) {
           const apiKey = result.key as Record<string, unknown>;
 
-          // v1.5+ renamed userId → referenceId on the apikey table.
-          const userId = (apiKey.referenceId ?? "") as string;
           const name = (apiKey.name ?? "API Key") as string;
-          const orgId = (apiKey.organizationId ?? defaultOrgId) as string;
+          // Read the org (and operator identity) from key metadata when present.
+          // POS shift keys carry { organizationId, operatorId } in metadata so the
+          // operator is scoped to their store WITHOUT any org membership/role
+          // (SEC-16 / R-01). Other keys fall back to the key's organizationId.
+          const rawMeta = apiKey.metadata;
+          const meta =
+            rawMeta && typeof rawMeta === "object"
+              ? (rawMeta as Record<string, unknown>)
+              : typeof rawMeta === "string"
+                ? (() => {
+                    try {
+                      return JSON.parse(rawMeta) as Record<string, unknown>;
+                    } catch {
+                      return null;
+                    }
+                  })()
+                : null;
+          const metaOrg = typeof meta?.organizationId === "string" ? meta.organizationId : undefined;
+          const orgId = (metaOrg ?? apiKey.organizationId ?? defaultOrgId) as string;
+          const userId = ((typeof meta?.operatorId === "string" ? meta.operatorId : undefined)
+            ?? apiKey.referenceId
+            ?? "") as string;
 
           // Better Auth stores permissions as Record<string, string[]>
           // (e.g. {"catalog":["read","create"]}).  Flatten to the

package/src/auth/setup.ts

@@ -7,13 +7,13 @@ import type { CommerceConfig } from "../config/types.js";
 import type { DatabaseAdapter } from "../kernel/database/adapter.js";
 import * as authSchema from "./auth-schema.js";
 
-type BetterAuthDbProvider = "pg" | "mysql" | "sqlite";
+type BetterAuthDbProvider = "pg";
 
 function resolveAuthDbProvider(provider: string): BetterAuthDbProvider {
   if (provider === "postgres" || provider === "postgresql" || provider === "pg") return "pg";
-  if (provider === "mysql") return "mysql";
-  if (provider === "sqlite") return "sqlite";
-  throw new Error(`Unsupported auth database provider "${provider}".`);
+  throw new Error(
+    `Unsupported auth database provider "${provider}". Only PostgreSQL is supported.`,
+  );
 }
 
 interface AuthEmailPayload {
@@ -91,6 +91,12 @@ export function createAuth(
           }
         : {}),
       ...(scope.keyExpiration ? { keyExpiration: scope.keyExpiration } : {}),
+      ...("references" in scope && scope.references
+        ? { references: scope.references as "user" | "organization" }
+        : {}),
+      ...(scope.enableMetadata || scope.references === "organization"
+        ? { enableMetadata: true }
+        : {}),
     }));
     plugins.push(apiKey(apiKeyConfigs));
   } else if (config.auth?.apiKeys?.enabled) {

package/src/config/defaults.ts

@@ -17,7 +17,7 @@ export const defaultConfig: Partial<CommerceConfig> = {
     },
     roles: {
       owner: { permissions: ["*:*"] },
-      admin: { permissions: ["*:*", "compensation:admin"] },
+      admin: { permissions: ["*:*", "catalog:sync", "compensation:admin"] },
       manager: {
         permissions: [
           "catalog:create",
@@ -27,7 +27,9 @@ export const defaultConfig: Partial<CommerceConfig> = {
           "inventory:read",
           "inventory:adjust",
           "orders:read",
+          "orders:create",
           "orders:update",
+          "orders:manage",
           "cart:create",
           "cart:update",
           "cart:manage",

package/src/config/types.ts

@@ -8,8 +8,11 @@ import type { AuthInstance } from "../auth/setup.js";
 import type { DatabaseAdapter } from "../kernel/database/adapter.js";
 import type { TaxAdapter } from "../modules/tax/adapter.js";
 import type { SearchAdapter } from "../modules/search/adapter.js";
-import type { JobsAdapter } from "../kernel/jobs/adapter.js";
-import type { TaskDefinition } from "../kernel/jobs/types.js";
+import type { ExecutionEngine } from "../kernel/jobs/adapter.js";
+import type {
+  JobProcessingOrder,
+  TaskDefinition,
+} from "../kernel/jobs/types.js";
 
 export interface RoleDefinition {
   permissions: string[];
@@ -113,6 +116,10 @@ export interface ApiKeyScopeDefinition {
     minExpiresIn?: number;
     maxExpiresIn?: number;
   };
+  /** Better Auth ownership model — POS shift keys bind to an organization. */
+  references?: "user" | "organization";
+  /** Allow metadata on keys minted under this scope (e.g. operatorId on POS shift keys). */
+  enableMetadata?: boolean;
 }
 
 export interface AuthConfig {
@@ -214,6 +221,11 @@ export interface AuthConfig {
    * Appended to the core plugin list (organization, bearer, jwt, etc.).
    */
   extraAuthPlugins?: unknown[];
+  /**
+   * When true (and NODE_ENV === "test"), the `x-test-actor` header may inject
+   * a trusted actor for integration tests. Default false.
+   */
+  allowTestActor?: boolean;
 }
 
 export interface CartConfig {
@@ -344,8 +356,9 @@ export interface CommerceConfig {
   analytics?: AnalyticsConfig;
   search?: SearchConfig;
   jobs?: {
-    adapter?: JobsAdapter;
+    adapter?: ExecutionEngine;
     tasks?: TaskDefinition[];
+    processingOrder?: JobProcessingOrder;
     autorun?: {
       enabled: boolean;
       intervalMs?: number;

package/src/generated/plugin-capabilities.d.ts

@@ -3,6 +3,7 @@
 
 export interface PluginCapabilityRegistryShape {
   "appointments": Record<string, unknown>;
+  "channel-connector": Record<string, unknown>;
   "gift-cards": Record<string, unknown>;
   "layaway": Record<string, unknown>;
   "loyalty": Record<string, unknown>;

package/src/generated/plugin-manifest.ts

@@ -4,6 +4,7 @@
 
 export const resolvedPluginManifest = [
   { id: "appointments", directory: "plugin-appointments" },
+  { id: "channel-connector", directory: "plugin-channel-connector" },
   { id: "gift-cards", directory: "plugin-gift-cards" },
   { id: "layaway", directory: "plugin-layaway" },
   { id: "loyalty", directory: "plugin-loyalty" },

package/src/generated/plugin-repositories.d.ts

@@ -3,6 +3,7 @@
 
 export interface PluginRepositoryRegistryShape {
   "appointments": Record<string, unknown>;
+  "channel-connector": Record<string, unknown>;
   "gift-cards": Record<string, unknown>;
   "layaway": Record<string, unknown>;
   "loyalty": Record<string, unknown>;

package/src/hooks/checkout-completion.ts

@@ -13,14 +13,14 @@ interface InventoryServiceLike {
     quantity: number;
     orderId: string;
     performedBy: string;
-  }): Promise<{ ok: boolean; error?: { message: string } }>;
+  }, actor?: unknown): Promise<{ ok: boolean; error?: { message: string } }>;
   release(input: {
     entityId: string;
     variantId?: string;
     quantity: number;
     orderId: string;
     performedBy: string;
-  }): Promise<unknown>;
+  }, actor?: unknown): Promise<unknown>;
 }
 
 interface PaymentsServiceLike {
@@ -80,13 +80,16 @@ export const reserveInventoryStep: Step<
     const performedBy = ctx.hook.actor?.userId ?? "system";
 
     for (const item of data.lineItems) {
-      const result = await inventory.reserve({
-        entityId: item.entityId,
-        ...(item.variantId != null ? { variantId: item.variantId } : {}),
-        quantity: item.quantity,
-        orderId: data.checkoutId,
-        performedBy,
-      });
+      const result = await inventory.reserve(
+        {
+          entityId: item.entityId,
+          ...(item.variantId != null ? { variantId: item.variantId } : {}),
+          quantity: item.quantity,
+          orderId: data.checkoutId,
+          performedBy,
+        },
+        ctx.hook.actor,
+      );
 
       if (!result.ok) {
         return Err(
@@ -112,13 +115,16 @@ export const reserveInventoryStep: Step<
     const performedBy = ctx.hook.actor?.userId ?? "system";
 
     for (const r of reservations) {
-      await inventory.release({
-        entityId: r.entityId,
-        ...(r.variantId != null ? { variantId: r.variantId } : {}),
-        quantity: r.quantity,
-        orderId: r.orderId,
-        performedBy,
-      });
+      await inventory.release(
+        {
+          entityId: r.entityId,
+          ...(r.variantId != null ? { variantId: r.variantId } : {}),
+          quantity: r.quantity,
+          orderId: r.orderId,
+          performedBy,
+        },
+        ctx.hook.actor,
+      );
     }
   },
 };

package/src/hooks/checkout.ts

@@ -566,16 +566,19 @@ export const reserveInventory: AfterHook<OrderResult> = async ({ result, context
       quantity: number;
       orderId: string;
       performedBy: string;
-    }): Promise<unknown>;
+    }, actor?: unknown): Promise<unknown>;
   };
   for (const lineItem of result.lineItems ?? []) {
-    await inventory.reserve({
-      entityId: lineItem.entityId,
-      ...(lineItem.variantId != null ? { variantId: lineItem.variantId } : {}),
-      quantity: lineItem.quantity,
-      orderId: result.id,
-      performedBy: context.actor?.userId ?? "system",
-    });
+    await inventory.reserve(
+      {
+        entityId: lineItem.entityId,
+        ...(lineItem.variantId != null ? { variantId: lineItem.variantId } : {}),
+        quantity: lineItem.quantity,
+        orderId: result.id,
+        performedBy: context.actor?.userId ?? "system",
+      },
+      context.actor,
+    );
   }
 };
 

package/src/index.ts

@@ -32,6 +32,7 @@ export type { Kernel } from "./runtime/kernel.js";
 
 export type { Actor } from "./auth/types.js";
 export { resolveOrgId, ensureDefaultOrg, DEFAULT_ORG_ID } from "./auth/org.js";
+export { createSystemActor } from "./auth/system-actor.js";
 export { OrganizationService } from "./modules/organization/service.js";
 export { createScopedDb } from "./kernel/database/scoped-db.js";
 export type { ScopedOrganizationId } from "./kernel/database/scoped-db.js";
@@ -61,7 +62,15 @@ export type {
 export { runBeforeHooks, runAfterHooks } from "./kernel/hooks/executor.js";
 export { createHookContext } from "./kernel/hooks/create-context.js";
 export type { CreateHookContextArgs } from "./kernel/hooks/create-context.js";
-export type { JobsAdapter, EnqueueOptions } from "./kernel/jobs/adapter.js";
+export type {
+  JobsAdapter,
+  EnqueueOptions,
+  ExecutionDriver,
+  ExecutionEngine,
+  ExecutionEngineSetup,
+  RunJobsOptions,
+  RunJobsResult,
+} from "./kernel/jobs/adapter.js";
 export { NullJobsAdapter } from "./kernel/jobs/adapter.js";
 export { DrizzleJobsAdapter } from "./kernel/jobs/drizzle-adapter.js";
 export { runPendingJobs } from "./kernel/jobs/runner.js";
@@ -71,6 +80,9 @@ export type {
   TaskContext,
   TaskJobMeta,
   TaskRetryConfig,
+  JobProcessingOrder,
+  JobProcessingOrderField,
+  JobProcessingOrderRecord,
 } from "./kernel/jobs/types.js";
 export { BUILTIN_JOB_TASK_SLUGS } from "./kernel/jobs/types.js";
 export {
@@ -127,6 +139,24 @@ export type {
   PaymentRefund,
   PaymentWebhookEvent,
 } from "./modules/payments/adapter.js";
+export { defineChannelConnector } from "./modules/channels/adapter.js";
+export type {
+  ChannelCatalogItem,
+  ChannelCatalogPage,
+  ChannelCatalogVariant,
+  ChannelConnector,
+  ChannelConnectorCapabilities,
+  ChannelInventoryLevel,
+  ChannelOrderLine,
+  ChannelOrderSlice,
+  ChannelConnectorError,
+  ChannelOrderStatus,
+  ChannelPushOrderResult,
+  ChannelRefundResult,
+  ChannelReservation,
+  ChannelStore,
+  ChannelWebhookEvent,
+} from "./modules/channels/adapter.js";
 export type { StorageAdapter } from "./modules/media/adapter.js";
 export { noopStorageAdapter } from "./modules/media/noop-adapter.js";
 export type {

package/src/interfaces/rest/router.ts

@@ -240,6 +240,8 @@ class RouteChain {
 
         const result = await fn(handlerCtx);
 
+        if (result instanceof Response) return result;
+
         if (result === undefined || result === null) {
           return ctx.json({ data: null }, successStatus);
         }