@porulle/core 0.9.0 → 0.10.0

package/dist/modules/orders/stale-order-cleanup.js

@@ -36,25 +36,34 @@ export const staleOrderCleanupTask = {
     async handler({ input, ctx }) {
         const thresholdHours = input.thresholdHours ?? 48;
         const cutoff = new Date(Date.now() - thresholdHours * 60 * 60 * 1000);
-        // Find stale pending orders
-        const staleOrders = await ctx.db
-            .select()
-            .from(orders)
-            .where(and(eq(orders.status, "pending"), lt(orders.placedAt, cutoff)));
         const cancelledIds = [];
         // Cancel each stale order via the service (triggers inventory release + payment refund)
         const orderService = ctx.services.orders;
-        for (const order of staleOrders) {
-            try {
-                await orderService.cancel(order.id, systemActorForOrg(order.organizationId), `Auto-cancelled: pending for >${thresholdHours}h`);
-                cancelledIds.push(order.id);
-                ctx.logger.info(`Stale order ${order.orderNumber} auto-cancelled`, {
-                    orderId: order.id,
-                    placedAt: order.placedAt,
-                });
-            }
-            catch (error) {
-                ctx.logger.error(`Failed to cancel stale order ${order.orderNumber}`, { error });
+        // This is a cross-org system sweep, but the row reads stay org-scoped: first
+        // enumerate the orgs that have stale orders (id-only projection), then read
+        // each org's stale orders under an explicit organizationId predicate. No
+        // query returns another tenant's order rows.
+        const staleOrgs = await ctx.db
+            .selectDistinct({ organizationId: orders.organizationId })
+            .from(orders)
+            .where(and(eq(orders.status, "pending"), lt(orders.placedAt, cutoff)));
+        for (const { organizationId } of staleOrgs) {
+            const staleOrders = await ctx.db
+                .select()
+                .from(orders)
+                .where(and(eq(orders.organizationId, organizationId), eq(orders.status, "pending"), lt(orders.placedAt, cutoff)));
+            for (const order of staleOrders) {
+                try {
+                    await orderService.cancel(order.id, systemActorForOrg(order.organizationId), `Auto-cancelled: pending for >${thresholdHours}h`);
+                    cancelledIds.push(order.id);
+                    ctx.logger.info(`Stale order ${order.orderNumber} auto-cancelled`, {
+                        orderId: order.id,
+                        placedAt: order.placedAt,
+                    });
+                }
+                catch (error) {
+                    ctx.logger.error(`Failed to cancel stale order ${order.orderNumber}`, { error });
+                }
             }
         }
         return {

package/dist/modules/promotions/repository/index.d.ts

@@ -28,7 +28,7 @@ export declare class PromotionsRepository {
     findUsageById(id: string, ctx?: TxContext): Promise<PromotionUsage | undefined>;
     findUsagesByPromotionId(promotionId: string, ctx?: TxContext): Promise<PromotionUsage[]>;
     findUsagesByCustomerId(customerId: string, ctx?: TxContext): Promise<PromotionUsage[]>;
-    createUsage(data: PromotionUsageInsert, ctx?: TxContext): Promise<PromotionUsage>;
+    createUsage(data: PromotionUsageInsert, orgId: string, ctx?: TxContext): Promise<PromotionUsage>;
     countUsages(promotionId: string, ctx?: TxContext): Promise<number>;
     countUsagesByCustomer(promotionId: string, customerId: string, ctx?: TxContext): Promise<number>;
     isUsageLimitReached(orgId: string, promotionId: string, ctx?: TxContext): Promise<boolean>;

package/dist/modules/promotions/repository/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/promotions/repository/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG3D,MAAM,MAAM,SAAS,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC;AACvD,MAAM,MAAM,eAAe,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC;AAC7D,MAAM,MAAM,cAAc,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AACjE,MAAM,MAAM,oBAAoB,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AAEvE;;;;;GAKG;AACH,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,eAAe;IAEhD,OAAO,CAAC,KAAK;IAQP,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IASpF,UAAU,CACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAc3B,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAS7D,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAkBhE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAmBnE,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAMlE,MAAM,CACV,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,EAC1C,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAU3B,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IASrD,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAIrE,UAAU,CACd,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAQ3B,aAAa,CACjB,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAShC,uBAAuB,CAC3B,WAAW,EAAE,MAAM,EACnB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,cAAc,EAAE,CAAC;IAQtB,sBAAsB,CAC1B,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,cAAc,EAAE,CAAC;IAQtB,WAAW,CACf,IAAI,EAAE,oBAAoB,EAC1B,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,cAAc,CAAC;IAuCpB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IASlE,qBAAqB,CACzB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC;IAkBZ,mBAAmB,CACvB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,OAAO,CAAC;IASb,2BAA2B,CAC/B,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,OAAO,CAAC;IAab,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,UAAU,CAAC,EAAE,MAAM,EACnB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAiChD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/promotions/repository/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG3D,MAAM,MAAM,SAAS,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC;AACvD,MAAM,MAAM,eAAe,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC;AAC7D,MAAM,MAAM,cAAc,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AACjE,MAAM,MAAM,oBAAoB,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AAEvE;;;;;GAKG;AACH,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,eAAe;IAEhD,OAAO,CAAC,KAAK;IAQP,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IASpF,UAAU,CACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAc3B,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAS7D,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAkBhE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAmBnE,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAMlE,MAAM,CACV,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,EAC1C,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAU3B,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IASrD,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAIrE,UAAU,CACd,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAQ3B,aAAa,CACjB,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAShC,uBAAuB,CAC3B,WAAW,EAAE,MAAM,EACnB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,cAAc,EAAE,CAAC;IAQtB,sBAAsB,CAC1B,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,cAAc,EAAE,CAAC;IAQtB,WAAW,CACf,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,MAAM,EACb,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,cAAc,CAAC;IA0CpB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IASlE,qBAAqB,CACzB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC;IAkBZ,mBAAmB,CACvB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,OAAO,CAAC;IASb,2BAA2B,CAC/B,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,OAAO,CAAC;IAab,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,UAAU,CAAC,EAAE,MAAM,EACnB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAiChD"}

package/dist/modules/promotions/repository/index.js

@@ -112,16 +112,19 @@ export class PromotionsRepository {
             .from(promotionUsages)
             .where(eq(promotionUsages.customerId, customerId));
     }
-    async createUsage(data, ctx) {
+    async createUsage(data, orgId, ctx) {
         const db = this.getDb(ctx);
         // Atomic guard: use INSERT ... SELECT WHERE count < limit to prevent
         // race conditions between concurrent checkouts using the same coupon.
         // A plain count-then-insert has a TOCTOU gap; this single statement
         // ensures the insert only succeeds if the limit has not been reached.
+        // Both reads are scoped by organizationId: these are raw/lock queries that
+        // bypass the scoped-db proxy, so a promotionId from another tenant must
+        // resolve to no row rather than reading/locking a foreign promotion.
         const promo = await db
             .select({ usageLimitTotal: promotions.usageLimitTotal })
             .from(promotions)
-            .where(eq(promotions.id, data.promotionId));
+            .where(and(eq(promotions.id, data.promotionId), eq(promotions.organizationId, orgId)));
         const limit = promo[0]?.usageLimitTotal;
         if (limit != null) {
             // Atomic guard: lock the promotion row and check usage count in the
@@ -131,7 +134,7 @@ export class PromotionsRepository {
             // SELECT ... FOR UPDATE acquires a row-level lock that serializes
             // concurrent callers. If the caller is already inside a transaction
             // (ctx.tx), the lock is held until that transaction commits.
-            await db.execute(sql `SELECT id FROM promotions WHERE id = ${data.promotionId} FOR UPDATE`);
+            await db.execute(sql `SELECT id FROM promotions WHERE id = ${data.promotionId} AND organization_id = ${orgId} FOR UPDATE`);
             const currentCount = await this.countUsages(data.promotionId, ctx);
             if (currentCount >= limit) {
                 throw new Error(`Promotion usage limit reached (${currentCount}/${limit})`);

package/dist/modules/promotions/service.d.ts

@@ -85,6 +85,7 @@ export declare class PromotionService {
     applyPromotions(context: PromotionEvaluationContext, ctx?: TxContext): Promise<Result<PromotionApplicationResult>>;
     recordUsage(input: {
         promotions: AppliedPromotion[];
+        organizationId: string;
         customerId?: string;
         orderId?: string;
     }, ctx?: TxContext): Promise<Result<PromotionUsage[]>>;

package/dist/modules/promotions/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/modules/promotions/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAOrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAEnE,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,KAAK,EACV,oBAAoB,EACpB,SAAS,EACT,cAAc,EAEf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAIjD,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,oFAAoF;AACpF,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AAEpF,UAAU,oBAAoB;IAC5B,UAAU,EAAE,oBAAoB,CAAC;IACjC,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAkBD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAqDD,qBAAa,gBAAgB;IAKf,OAAO,CAAC,IAAI;IAJxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;gBAE1B,IAAI,EAAE,oBAAoB;IAMxC,MAAM,CACV,KAAK,EAAE,oBAAoB,EAC3B,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAsEvB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAoBxF;;;OAGG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,oBAAoB,EAC3B,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAwEvB,IAAI,CACR,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,qBAAqB,CAAA;KAAE,EAC3C,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAyBzB,UAAU,CACd,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,SAAS,OAAa,EACtB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAQzB,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,0BAA0B,EACnC,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAsBvB,KAAK,CACT,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,0BAA0B,EACnC,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAiBxC,eAAe,CACnB,OAAO,EAAE,0BAA0B,EACnC,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAiExC,WAAW,CACf,KAAK,EAAE;QACL,UAAU,EAAE,gBAAgB,EAAE,CAAC;QAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EACD,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;YAgBtB,2BAA2B;YA0F3B,kBAAkB;YAuBlB,iBAAiB;YA2EjB,uBAAuB;CAmCtC"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/modules/promotions/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAOrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAEnE,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,KAAK,EACV,oBAAoB,EACpB,SAAS,EACT,cAAc,EAEf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAIjD,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,oFAAoF;AACpF,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AAEpF,UAAU,oBAAoB;IAC5B,UAAU,EAAE,oBAAoB,CAAC;IACjC,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAkBD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAqDD,qBAAa,gBAAgB;IAKf,OAAO,CAAC,IAAI;IAJxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;gBAE1B,IAAI,EAAE,oBAAoB;IAMxC,MAAM,CACV,KAAK,EAAE,oBAAoB,EAC3B,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAsEvB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAoBxF;;;OAGG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,oBAAoB,EAC3B,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAwEvB,IAAI,CACR,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,qBAAqB,CAAA;KAAE,EAC3C,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAyBzB,UAAU,CACd,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,EACpB,SAAS,OAAa,EACtB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAQzB,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,0BAA0B,EACnC,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAsBvB,KAAK,CACT,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,0BAA0B,EACnC,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAiBxC,eAAe,CACnB,OAAO,EAAE,0BAA0B,EACnC,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAiExC,WAAW,CACf,KAAK,EAAE;QACL,UAAU,EAAE,gBAAgB,EAAE,CAAC;QAC/B,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EACD,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;YAiBtB,2BAA2B;YA0F3B,kBAAkB;YAuBlB,iBAAiB;YA2EjB,uBAAuB;CAmCtC"}

package/dist/modules/promotions/service.js

@@ -302,7 +302,7 @@ export class PromotionService {
                 promotionId: applied.promotionId,
                 customerId: input.customerId ?? null,
                 orderId: input.orderId ?? null,
-            }, ctx);
+            }, input.organizationId, ctx);
             usages.push(usage);
         }
         return Ok(usages);

package/dist/modules/webhooks/repository/index.d.ts

@@ -29,7 +29,7 @@ export declare class WebhooksRepository {
         limit?: number;
     }, ctx?: TxContext): Promise<WebhookDelivery[]>;
     findPendingDeliveries(ctx?: TxContext): Promise<WebhookDelivery[]>;
-    findFailedDeliveries(endpointId?: string, ctx?: TxContext): Promise<WebhookDelivery[]>;
+    findFailedDeliveries(orgId: string, endpointId?: string, ctx?: TxContext): Promise<WebhookDelivery[]>;
     createDelivery(data: WebhookDeliveryInsert, ctx?: TxContext): Promise<WebhookDelivery>;
     updateDelivery(id: string, data: Partial<Omit<WebhookDeliveryInsert, "id">>, ctx?: TxContext): Promise<WebhookDelivery | undefined>;
     markDelivered(id: string, statusCode: number, ctx?: TxContext): Promise<WebhookDelivery | undefined>;

package/dist/modules/webhooks/repository/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/webhooks/repository/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGnE,MAAM,MAAM,eAAe,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAC;AACnE,MAAM,MAAM,qBAAqB,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAC;AACzE,MAAM,MAAM,eAAe,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAC;AACpE,MAAM,MAAM,qBAAqB,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAC;AAE1E;;;;;GAKG;AACH,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,eAAe;IAEhD,OAAO,CAAC,KAAK;IAaP,gBAAgB,CACpB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAcjC,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,EAAE,CAAC;IAQvB,mBAAmB,CACvB,KAAK,EAAE,MAAM,EACb,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,EAAE,CAAC;IAavB,qBAAqB,CACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,EAAE,CAAC;IASvB,cAAc,CAClB,IAAI,EAAE,qBAAqB,EAC3B,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,CAAC;IAMrB,cAAc,CAClB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,EAChD,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAUjC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAS7D,gBAAgB,CACpB,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAIjC,kBAAkB,CACtB,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAQjC,gBAAgB,CACpB,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IASjC,0BAA0B,CAC9B,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAC5B,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,EAAE,CAAC;IAgBvB,qBAAqB,CAAC,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAoBlE,oBAAoB,CACxB,UAAU,CAAC,EAAE,MAAM,EACnB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,EAAE,CAAC;IAuBvB,cAAc,CAClB,IAAI,EAAE,qBAAqB,EAC3B,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,CAAC;IAMrB,cAAc,CAClB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,EAChD,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAUjC,aAAa,CACjB,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAYjC,UAAU,CACd,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,WAAW,CAAC,EAAE,IAAI,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAmBjC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAS7D,4BAA4B,CAChC,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,IAAI,CAAC;CAMjB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/webhooks/repository/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGnE,MAAM,MAAM,eAAe,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAC;AACnE,MAAM,MAAM,qBAAqB,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAC;AACzE,MAAM,MAAM,eAAe,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAC;AACpE,MAAM,MAAM,qBAAqB,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAC;AAE1E;;;;;GAKG;AACH,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,eAAe;IAEhD,OAAO,CAAC,KAAK;IAaP,gBAAgB,CACpB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAcjC,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,EAAE,CAAC;IAQvB,mBAAmB,CACvB,KAAK,EAAE,MAAM,EACb,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,EAAE,CAAC;IAavB,qBAAqB,CACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,EAAE,CAAC;IASvB,cAAc,CAClB,IAAI,EAAE,qBAAqB,EAC3B,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,CAAC;IAMrB,cAAc,CAClB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,EAChD,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAUjC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAS7D,gBAAgB,CACpB,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAIjC,kBAAkB,CACtB,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAQjC,gBAAgB,CACpB,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IASjC,0BAA0B,CAC9B,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAC5B,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,EAAE,CAAC;IAgBvB,qBAAqB,CAAC,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAoBlE,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,EACnB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,EAAE,CAAC;IAwBvB,cAAc,CAClB,IAAI,EAAE,qBAAqB,EAC3B,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,CAAC;IAMrB,cAAc,CAClB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,EAChD,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAUjC,aAAa,CACjB,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAYjC,UAAU,CACd,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,WAAW,CAAC,EAAE,IAAI,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAmBjC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAS7D,4BAA4B,CAChC,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,SAAS,GACd,OAAO,CAAC,IAAI,CAAC;CAMjB"}

package/dist/modules/webhooks/repository/index.js

@@ -1,4 +1,4 @@
-import { eq, and, lte, isNull, or, desc, sql } from "drizzle-orm";
+import { eq, and, lte, isNull, or, desc, sql, inArray } from "drizzle-orm";
 import { webhookEndpoints, webhookDeliveries } from "../schema.js";
 /**
  * WebhooksRepository provides type-safe database operations for webhooks.
@@ -113,19 +113,25 @@ export class WebhooksRepository {
             .where(and(isNull(webhookDeliveries.deliveredAt), isNull(webhookDeliveries.failedAt), or(isNull(webhookDeliveries.nextRetryAt), lte(webhookDeliveries.nextRetryAt, now))))
             .orderBy(webhookDeliveries.createdAt);
     }
-    async findFailedDeliveries(endpointId, ctx) {
+    async findFailedDeliveries(orgId, endpointId, ctx) {
         const db = this.getDb(ctx);
-        if (endpointId) {
-            return db
-                .select()
-                .from(webhookDeliveries)
-                .where(and(eq(webhookDeliveries.endpointId, endpointId), sql `${webhookDeliveries.failedAt} IS NOT NULL`))
-                .orderBy(desc(webhookDeliveries.failedAt));
-        }
+        // webhook_deliveries has no organizationId column — org lives on the parent
+        // endpoint. Scope failed deliveries to endpoints owned by orgId so this can
+        // never read another tenant's deliveries.
+        const orgEndpointIds = db
+            .select({ id: webhookEndpoints.id })
+            .from(webhookEndpoints)
+            .where(eq(webhookEndpoints.organizationId, orgId));
+        const conditions = [
+            sql `${webhookDeliveries.failedAt} IS NOT NULL`,
+            inArray(webhookDeliveries.endpointId, orgEndpointIds),
+        ];
+        if (endpointId)
+            conditions.push(eq(webhookDeliveries.endpointId, endpointId));
         return db
             .select()
             .from(webhookDeliveries)
-            .where(sql `${webhookDeliveries.failedAt} IS NOT NULL`)
+            .where(and(...conditions))
             .orderBy(desc(webhookDeliveries.failedAt));
     }
     async createDelivery(data, ctx) {

package/dist/runtime/kernel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kernel.d.ts","sourceRoot":"","sources":["../../src/runtime/kernel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAoBzD,OAAO,EAGL,KAAK,MAAM,EACX,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;AAC/C,OAAO,EACL,kBAAkB,EAClB,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAE7B,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CA6H3D"}
+{"version":3,"file":"kernel.d.ts","sourceRoot":"","sources":["../../src/runtime/kernel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAqBzD,OAAO,EAGL,KAAK,MAAM,EACX,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;AAC/C,OAAO,EACL,kBAAkB,EAClB,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAE7B,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CA0I3D"}

package/dist/runtime/kernel.js

@@ -44,8 +44,20 @@ export function createKernel(config) {
     serviceContainer.database = database;
     const db = database.db;
     const jobsTaskMap = new Map((config.jobs?.tasks ?? []).map((t) => [t.slug, t]));
-    const jobsAdapter = new DrizzleJobsAdapter(db, jobsTaskMap);
-    serviceContainer.jobs = jobsAdapter;
+    const jobsEngine = config.jobs?.adapter ?? new DrizzleJobsAdapter(db);
+    const jobLogger = {
+        info: (message, data) => logger.info(message, data),
+        warn: (message, data) => logger.warn(message, data),
+        error: (message, data) => logger.error(message, data),
+    };
+    jobsEngine.register({
+        tasks: jobsTaskMap,
+        context: { logger: jobLogger, db, services: serviceContainer },
+        ...(config.jobs?.processingOrder !== undefined
+            ? { processingOrder: config.jobs.processingOrder }
+            : {}),
+    });
+    serviceContainer.jobs = jobsEngine;
     const topoGraph = kernelModulesForTopoSort();
     const order = topoSortModules(topoGraph);
     const moduleKeys = Object.keys(KERNEL_ALL_MODULES);

package/dist/runtime/server.d.ts

@@ -32,10 +32,7 @@ export declare function createServer(config: CommerceConfig): Promise<{
     kernel: import("./kernel-types.js").Kernel;
     logger: Logger;
     commerce: CommerceInstance;
-    runJobs: (queue?: string, limit?: number) => Promise<{
-        processed: number;
-        failed: number;
-    }>;
+    runJobs: (queue?: string, limit?: number) => Promise<import("../kernel/jobs/adapter.js").RunJobsResult>;
 }>;
 export {};
 //# sourceMappingURL=server.d.ts.map

package/dist/runtime/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/runtime/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAOzD,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAkB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAItE,KAAK,SAAS,GAAG;IACf,SAAS,EAAE;QACT,IAAI,EAAE,YAAY,CAAC;QACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAMvC;AAeD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,cAAc;;;;;sBAuXxB,MAAM,UAAU,MAAM;;;;GAgFtD"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/runtime/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAOzD,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAkB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAItE,KAAK,SAAS,GAAG;IACf,SAAS,EAAE;QACT,IAAI,EAAE,YAAY,CAAC;QACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAMvC;AAeD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,cAAc;;;;;sBAyVxB,MAAM,UAAU,MAAM;GA2FtD"}

package/dist/runtime/server.js

@@ -345,41 +345,15 @@ export async function createServer(config) {
     //   1. autorun: in-process polling (long-running servers)
     //   2. GET /api/jobs/run: cron endpoint (serverless — Vercel, Cloudflare)
     //   3. runPendingJobs() export (custom worker process)
-    const { runPendingJobs } = await import("../kernel/jobs/runner.js");
-    const { runStaleJobReaper, getJobReapThresholdMs, getJobsReaperIntervalMs } = await import("../kernel/jobs/reaper.js");
-    const taskMap = new Map();
-    for (const task of config.jobs?.tasks ?? []) {
-        const t = task;
-        taskMap.set(t.slug ?? t.name ?? "", task);
-    }
-    const jobLogger = {
-        info: (msg, data) => logger.info(data != null ? { data } : {}, msg),
-        warn: (msg, data) => logger.warn(data != null ? { data } : {}, msg),
-        error: (msg, data) => logger.error(data != null ? { data } : {}, msg),
-    };
-    let lastStaleJobReaperAt = 0;
-    const maybeRunStaleJobReaper = async () => {
-        const interval = getJobsReaperIntervalMs();
-        const now = Date.now();
-        if (now - lastStaleJobReaperAt < interval)
-            return;
-        lastStaleJobReaperAt = now;
-        try {
-            await runStaleJobReaper(kernel.database.db, getJobReapThresholdMs(), jobLogger);
-        }
-        catch (err) {
-            logger.error({ err }, "Stale job reaper failed");
-        }
-    };
+    const jobsEngine = kernel.services
+        .jobs;
     const runJobs = async (queue, limit) => {
-        await maybeRunStaleJobReaper();
-        return runPendingJobs({
-            db: kernel.database.db,
-            tasks: taskMap,
+        if (jobsEngine.execution.mode !== "pull") {
+            throw new Error("The configured push execution engine is driven by its native runtime and cannot be polled with runJobs().");
+        }
+        return jobsEngine.execution.run({
             queue: queue ?? "default",
             limit: limit ?? 10,
-            logger: jobLogger,
-            services: kernel.services,
         });
     };
     // Strategy 1: Built-in cron endpoint for serverless deployments.
@@ -405,6 +379,9 @@ export async function createServer(config) {
     // Strategy 2: In-process polling for long-running servers (ECS, Cloud Run, Docker).
     // Enable via config.jobs.autorun.enabled = true
     if (config.jobs?.autorun?.enabled) {
+        if (jobsEngine.execution.mode !== "pull") {
+            throw new Error("jobs.autorun is only valid for pull execution engines. Serve the configured push engine through its native runtime.");
+        }
         const intervalMs = config.jobs.autorun.intervalMs ?? 10_000;
         const jobInterval = setInterval(async () => {
             try {
@@ -420,8 +397,13 @@ export async function createServer(config) {
         logger.info({ intervalMs }, "Job queue autorun started (in-process polling)");
     }
     else {
-        logger.info("Job queue autorun disabled. Use GET /api/jobs/run for serverless cron, " +
-            "or set config.jobs.autorun.enabled = true for in-process polling.");
+        if (jobsEngine.execution.mode === "push") {
+            logger.info("Push job engine registered. Serve it through its native runtime.");
+        }
+        else {
+            logger.info("Job queue autorun disabled. Use GET /api/jobs/run for serverless cron, " +
+                "or set config.jobs.autorun.enabled = true for in-process polling.");
+        }
     }
     const dispatchFetch = app.fetch.bind(app);
     app.fetch = ((input, env, executionCtx) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@porulle/core",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "license": "MIT",
   "type": "module",
   "exports": {

package/src/config/defaults.ts

@@ -17,7 +17,7 @@ export const defaultConfig: Partial<CommerceConfig> = {
     },
     roles: {
       owner: { permissions: ["*:*"] },
-      admin: { permissions: ["*:*", "compensation:admin"] },
+      admin: { permissions: ["*:*", "catalog:sync", "compensation:admin"] },
       manager: {
         permissions: [
           "catalog:create",

package/src/config/types.ts

@@ -8,8 +8,11 @@ import type { AuthInstance } from "../auth/setup.js";
 import type { DatabaseAdapter } from "../kernel/database/adapter.js";
 import type { TaxAdapter } from "../modules/tax/adapter.js";
 import type { SearchAdapter } from "../modules/search/adapter.js";
-import type { JobsAdapter } from "../kernel/jobs/adapter.js";
-import type { TaskDefinition } from "../kernel/jobs/types.js";
+import type { ExecutionEngine } from "../kernel/jobs/adapter.js";
+import type {
+  JobProcessingOrder,
+  TaskDefinition,
+} from "../kernel/jobs/types.js";
 
 export interface RoleDefinition {
   permissions: string[];
@@ -353,8 +356,9 @@ export interface CommerceConfig {
   analytics?: AnalyticsConfig;
   search?: SearchConfig;
   jobs?: {
-    adapter?: JobsAdapter;
+    adapter?: ExecutionEngine;
     tasks?: TaskDefinition[];
+    processingOrder?: JobProcessingOrder;
     autorun?: {
       enabled: boolean;
       intervalMs?: number;

package/src/generated/plugin-capabilities.d.ts

@@ -3,6 +3,7 @@
 
 export interface PluginCapabilityRegistryShape {
   "appointments": Record<string, unknown>;
+  "channel-connector": Record<string, unknown>;
   "gift-cards": Record<string, unknown>;
   "layaway": Record<string, unknown>;
   "loyalty": Record<string, unknown>;

package/src/generated/plugin-manifest.ts

@@ -4,6 +4,7 @@
 
 export const resolvedPluginManifest = [
   { id: "appointments", directory: "plugin-appointments" },
+  { id: "channel-connector", directory: "plugin-channel-connector" },
   { id: "gift-cards", directory: "plugin-gift-cards" },
   { id: "layaway", directory: "plugin-layaway" },
   { id: "loyalty", directory: "plugin-loyalty" },

package/src/generated/plugin-repositories.d.ts

@@ -3,6 +3,7 @@
 
 export interface PluginRepositoryRegistryShape {
   "appointments": Record<string, unknown>;
+  "channel-connector": Record<string, unknown>;
   "gift-cards": Record<string, unknown>;
   "layaway": Record<string, unknown>;
   "loyalty": Record<string, unknown>;

package/src/index.ts

@@ -32,6 +32,7 @@ export type { Kernel } from "./runtime/kernel.js";
 
 export type { Actor } from "./auth/types.js";
 export { resolveOrgId, ensureDefaultOrg, DEFAULT_ORG_ID } from "./auth/org.js";
+export { createSystemActor } from "./auth/system-actor.js";
 export { OrganizationService } from "./modules/organization/service.js";
 export { createScopedDb } from "./kernel/database/scoped-db.js";
 export type { ScopedOrganizationId } from "./kernel/database/scoped-db.js";
@@ -61,7 +62,15 @@ export type {
 export { runBeforeHooks, runAfterHooks } from "./kernel/hooks/executor.js";
 export { createHookContext } from "./kernel/hooks/create-context.js";
 export type { CreateHookContextArgs } from "./kernel/hooks/create-context.js";
-export type { JobsAdapter, EnqueueOptions } from "./kernel/jobs/adapter.js";
+export type {
+  JobsAdapter,
+  EnqueueOptions,
+  ExecutionDriver,
+  ExecutionEngine,
+  ExecutionEngineSetup,
+  RunJobsOptions,
+  RunJobsResult,
+} from "./kernel/jobs/adapter.js";
 export { NullJobsAdapter } from "./kernel/jobs/adapter.js";
 export { DrizzleJobsAdapter } from "./kernel/jobs/drizzle-adapter.js";
 export { runPendingJobs } from "./kernel/jobs/runner.js";
@@ -71,6 +80,9 @@ export type {
   TaskContext,
   TaskJobMeta,
   TaskRetryConfig,
+  JobProcessingOrder,
+  JobProcessingOrderField,
+  JobProcessingOrderRecord,
 } from "./kernel/jobs/types.js";
 export { BUILTIN_JOB_TASK_SLUGS } from "./kernel/jobs/types.js";
 export {
@@ -127,6 +139,24 @@ export type {
   PaymentRefund,
   PaymentWebhookEvent,
 } from "./modules/payments/adapter.js";
+export { defineChannelConnector } from "./modules/channels/adapter.js";
+export type {
+  ChannelCatalogItem,
+  ChannelCatalogPage,
+  ChannelCatalogVariant,
+  ChannelConnector,
+  ChannelConnectorCapabilities,
+  ChannelInventoryLevel,
+  ChannelOrderLine,
+  ChannelOrderSlice,
+  ChannelConnectorError,
+  ChannelOrderStatus,
+  ChannelPushOrderResult,
+  ChannelRefundResult,
+  ChannelReservation,
+  ChannelStore,
+  ChannelWebhookEvent,
+} from "./modules/channels/adapter.js";
 export type { StorageAdapter } from "./modules/media/adapter.js";
 export { noopStorageAdapter } from "./modules/media/noop-adapter.js";
 export type {

package/src/interfaces/rest/router.ts

@@ -240,6 +240,8 @@ class RouteChain {
 
         const result = await fn(handlerCtx);
 
+        if (result instanceof Response) return result;
+
         if (result === undefined || result === null) {
           return ctx.json({ data: null }, successStatus);
         }

package/src/interfaces/rest/routes/checkout.ts

@@ -286,6 +286,7 @@ export function checkoutRoutes(kernel: Kernel) {
       if (order.ok && (processed.appliedPromotions?.length ?? 0) > 0) {
         await kernel.services.promotions.recordUsage({
           promotions: processed.appliedPromotions ?? [],
+          organizationId: order.value.organizationId,
           orderId: order.value.id,
           ...(customerUuid !== undefined
             ? { customerId: customerUuid }

package/src/kernel/database/scoped-db.ts

@@ -32,25 +32,23 @@ function tableHasOrganizationId(table: unknown): boolean {
 }
 
 /**
- * Pre-apply the org predicate to a WHERE-able builder (UPDATE/DELETE) and wrap
- * its `.where()` so a caller-supplied condition is AND-ed with the org filter
- * rather than replacing it. Pre-applying `orgEq` immediately means a builder
- * executed with NO caller `.where()` (e.g. `update(t).set(...)`) is still
- * constrained to the org — it can never touch another tenant's rows.
+ * Wrap a WHERE-able Drizzle builder so every `.where()` call AND-s `orgEq` in
+ * AND re-wraps its result. Re-wrapping is what makes a chained
+ * `.where(a).where(b)` safe: Drizzle's second `.where()` REPLACES the first, so
+ * without re-wrapping the chained call would reach the raw builder and execute
+ * with only the caller's condition — dropping the org predicate and leaking
+ * across tenants. Every link in the chain re-injects `orgEq`.
  */
-function scopeWhereBuilder(
-  builder: { where: (c: SQL | undefined) => unknown },
-  orgEq: SQL,
-): unknown {
-  const scoped = builder.where(orgEq);
-  return new Proxy(scoped as Record<string, unknown>, {
+function wrapWhereable(builder: unknown, orgEq: SQL): unknown {
+  return new Proxy(builder as Record<string, unknown>, {
     get(st, sp, sr) {
       const sv = Reflect.get(st, sp, sr);
       if (sp === "where" && typeof sv === "function") {
         return (condition?: unknown, ...wRest: unknown[]) => {
           const c = condition as SQL | undefined;
           const merged = c ? and(orgEq, c) : orgEq;
-          return (sv as (...a: unknown[]) => unknown).call(st, merged, ...wRest);
+          const next = (sv as (...a: unknown[]) => unknown).call(st, merged, ...wRest);
+          return wrapWhereable(next, orgEq);
         };
       }
       return typeof sv === "function" ? sv.bind(st) : sv;
@@ -58,6 +56,20 @@ function scopeWhereBuilder(
   });
 }
 
+/**
+ * Pre-apply the org predicate to a WHERE-able builder (UPDATE/DELETE) and wrap
+ * its `.where()` so a caller-supplied condition is AND-ed with the org filter
+ * rather than replacing it. Pre-applying `orgEq` immediately means a builder
+ * executed with NO caller `.where()` (e.g. `update(t).set(...)`) is still
+ * constrained to the org — it can never touch another tenant's rows.
+ */
+function scopeWhereBuilder(
+  builder: { where: (c: SQL | undefined) => unknown },
+  orgEq: SQL,
+): unknown {
+  return wrapWhereable(builder.where(orgEq), orgEq);
+}
+
 export function createScopedDb<TDb>(rawDb: TDb, orgSource: ScopedOrganizationId): TDb {
   if (!rawDb || typeof rawDb !== "object") return rawDb;
 
@@ -112,20 +124,7 @@ export function createScopedDb<TDb>(rawDb: TDb, orgSource: ScopedOrganizationId)
 
                   const orgEq = eq(orgCol, resolveOrganizationId(orgSource));
                   const inner = chain as { where: (c: SQL | undefined) => unknown };
-                  const scoped = inner.where(orgEq);
-                  return new Proxy(scoped as Record<string, unknown>, {
-                    get(st, sp, sr) {
-                      const sv = Reflect.get(st, sp, sr);
-                      if (sp === "where" && typeof sv === "function") {
-                        return (condition?: unknown, ...wRest: unknown[]) => {
-                          const c = condition as SQL | undefined;
-                          const merged = c ? and(orgEq, c) : orgEq;
-                          return sv.call(st, merged, ...wRest);
-                        };
-                      }
-                      return typeof sv === "function" ? sv.bind(st) : sv;
-                    },
-                  });
+                  return wrapWhereable(inner.where(orgEq), orgEq);
                 };
               }
               return typeof sbVal === "function" ? sbVal.bind(sbTarget) : sbVal;

package/src/kernel/errors.ts

@@ -32,6 +32,26 @@ export class CommerceValidationError extends Error implements CommerceError {
   }
 }
 
+/** Canonical message for a missing inventory record — the single source used by
+ * the inventory repository and mapped to the typed error below. */
+export const INVENTORY_RECORD_NOT_FOUND_MESSAGE =
+  "No inventory record found for this entity.";
+
+/** Raised when an inventory reserve/release targets an entity with no inventory
+ * record. Consumers (e.g. order status transitions that tolerate a missing
+ * record) discriminate on `code === "INVENTORY_RECORD_NOT_FOUND"`, never the
+ * message string. */
+export class CommerceInventoryRecordNotFoundError extends Error implements CommerceError {
+  code = "INVENTORY_RECORD_NOT_FOUND" as const;
+  constructor(
+    message: string = INVENTORY_RECORD_NOT_FOUND_MESSAGE,
+    public details?: unknown,
+  ) {
+    super(message);
+    this.name = "CommerceInventoryRecordNotFoundError";
+  }
+}
+
 export class CommerceForbiddenError extends Error implements CommerceError {
   code = "FORBIDDEN" as const;
   constructor(