@revenexx/cover 0.1.0

package/server/api/auth/register.post.ts

@@ -0,0 +1,126 @@
+import { ID } from "@revenexx/sdk";
+
+interface RegistrationProfilePayload {
+	mode: "new" | "existing";
+	company: string;
+	vatId?: string;
+	customerNumber?: string;
+	address?: {
+		street: string;
+		streetNumber: string;
+		zip: string;
+		city: string;
+		country: string;
+	};
+	salutation?: string;
+	jobTitle?: string;
+	phone?: string;
+}
+
+interface RegisterPayload {
+	email: string;
+	password: string;
+	name?: string;
+	profile?: RegistrationProfilePayload;
+}
+
+// B2B registrations arrive as a registration request (BRW/IS8 pattern):
+// the company profile is captured for vetting while the account itself is
+// usable right away (demo persistence).
+async function persistRegistrationRequest(
+	user: { $id: string; name: string; email: string },
+	profile: RegistrationProfilePayload,
+): Promise<void> {
+	try {
+		const store = await readCoverMutableJson<{ requests: unknown[] }>("account/registration-requests.json");
+		store.requests.unshift({
+			id: `REG-${Date.now()}`,
+			userId: user.$id,
+			email: user.email,
+			name: user.name,
+			submittedAt: new Date().toISOString(),
+			...profile,
+		});
+		await writeCoverMutableJson("account/registration-requests.json", store);
+	}
+	catch (persistErr) {
+		getLogService().error("Registration request persistence failed", toErrorContext(persistErr));
+	}
+}
+
+export default defineEventHandler(async (event) => {
+	const body = await readBody<RegisterPayload>(event);
+	const { email, password, name, profile } = body;
+
+	// Mock mode registers offline: the user lands in the registration
+	// request store, which the MockAuthService accepts for login.
+	const serviceKey = resolveAuthServiceKey(event);
+	if (serviceKey === "mock") {
+		const user = {
+			$id: `reg-${Date.now()}`,
+			name: name ?? email,
+			email,
+		};
+		await persistRegistrationRequest(user, profile ?? { mode: "new", company: "" });
+		return user;
+	}
+
+	// Public-API mode: the customers app is the system of record. A company
+	// registration creates the organization (and its platform team) in the
+	// same call; the contact mirrors to a platform user behind the scenes.
+	if (serviceKey === "api") {
+		const fullName = (name ?? "").trim();
+		const splitAt = fullName.lastIndexOf(" ");
+		const firstName = splitAt > 0 ? fullName.slice(0, splitAt) : fullName;
+		const lastName = splitAt > 0 ? fullName.slice(splitAt + 1) : "";
+
+		try {
+			const { contact, user_id: userId } = await useRevenexxApi().post<{
+				contact: { id: string; email: string };
+				user_id: string;
+			}>("/v1/customers/auth/register", {
+				email,
+				password,
+				first_name: firstName || undefined,
+				last_name: lastName || undefined,
+				organization_name: profile?.company || undefined,
+				locale: resolveLocale(event),
+			});
+
+			const user = { $id: userId, name: fullName || email, email: contact.email };
+			if (profile?.company) {
+				await persistRegistrationRequest(user, profile);
+			}
+			return user;
+		}
+		catch (err) {
+			if (isApiUserError(err)) {
+				throw createError({ statusCode: err.statusCode, data: { type: apiAuthErrorType(err) } });
+			}
+			getLogService().error("API request failed: register", apiErrorContext(err));
+			throw createError({ statusCode: 503, data: { type: "service_unavailable" } });
+		}
+	}
+
+	try {
+		const user = await useShopSdkAccount().accountCreate({
+			userId: ID.unique(),
+			email,
+			password,
+			name,
+		});
+
+		if (profile?.company) {
+			await persistRegistrationRequest(user, profile);
+		}
+
+		return { $id: user.$id, name: user.name, email: user.email };
+	}
+	catch (err) {
+		if (isSdkUserError(err)) {
+			throw createError({ statusCode: err.code, data: { type: err.type } });
+		}
+		getLogService().error("SDK request failed: register", sdkErrorContext(err));
+		throw createError({ statusCode: 503, data: { type: "service_unavailable" } });
+	}
+});

package/server/api/cart/calculate.post.ts

@@ -0,0 +1,25 @@
+import type { CartCalculationRequest } from "../../../app/interfaces/cart-calculation";
+
+/**
+ * Calculates the cart: per-line pricing, the ordered totals block, line
+ * hints, orderability and triggered spending limits. Works for guests
+ * (organization defaults) and logged-in users (role, limits, cost centers).
+ */
+export default defineEventHandler(async (event) => {
+	const body = await readBody<CartCalculationRequest>(event);
+	if (!body || !Array.isArray(body.items)) {
+		throw createError({ statusCode: 400, message: "items[] required" });
+	}
+
+	const locale = resolveLocale(event);
+	const user = await getAuthService(event).me(event);
+
+	try {
+		const context = await getB2BContextService(event).getContext(user?.$id ?? null);
+		return await getCartCalculationService().calculate(body, context, locale);
+	}
+	catch (err) {
+		getLogService().error("Service error: cart/calculate", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/cart/export.post.ts

@@ -0,0 +1,81 @@
+import type { CartCalculationRequest } from "../../../app/interfaces/cart-calculation";
+import type { CostCenter } from "../../../app/interfaces/b2b";
+
+/**
+ * Exports the cart as CSV with the standardized 14-column structure
+ * (article number through position texts). Disabled per organization via
+ * settings.cart.exportEnabled.
+ */
+export default defineEventHandler(async (event) => {
+	const body = await readBody<CartCalculationRequest>(event);
+	if (!body || !Array.isArray(body.items) || body.items.length === 0) {
+		throw createError({ statusCode: 400, message: "items[] required" });
+	}
+
+	const locale = resolveLocale(event);
+	const user = await getAuthService(event).me(event);
+	const context = await getB2BContextService(event).getContext(user?.$id ?? null);
+
+	if (!context.settings.cart.exportEnabled) {
+		throw createError({ statusCode: 403, message: "Cart export is disabled" });
+	}
+
+	await preloadLocaleNamespaces(locale, ["cart"]);
+	const t = (key: string) => serverT(key, locale, "cart");
+
+	const calculation = await getCartCalculationService().calculate(body, context, locale);
+	const lineById = new Map(calculation.lines.map(l => [l.id, l]));
+	const costCenterById = new Map<string, CostCenter>(context.costCenters.map(cc => [cc.id, cc]));
+
+	const header = [
+		t("export.columns.sku"),
+		t("export.columns.name"),
+		t("export.columns.dimension"),
+		t("export.columns.quantity"),
+		t("export.columns.lineTotal"),
+		t("export.columns.unitPrice"),
+		t("export.columns.available"),
+		t("export.columns.customSku"),
+		t("export.columns.costCenterCode"),
+		t("export.columns.costCenterLabel"),
+		t("export.columns.positionText1"),
+		t("export.columns.positionText2"),
+		t("export.columns.positionText3"),
+		t("export.columns.positionText4"),
+	];
+
+	const escape = (value: string | number | undefined | null): string => {
+		const s = value === undefined || value === null ? "" : String(value);
+		return /[";\n]/.test(s) ? `"${s.replace(/"/g, "\"\"")}"` : s;
+	};
+
+	const rows = body.items.map((item) => {
+		const line = lineById.get(item.id);
+		const cc = item.costCenterId ? costCenterById.get(item.costCenterId) : undefined;
+		const texts = item.positionTexts ?? [];
+		return [
+			item.sku,
+			item.name,
+			item.name2 ?? "",
+			line?.adjustedQuantity ?? item.quantity,
+			line?.lineTotal ?? "",
+			line?.unitPrice ?? "",
+			line?.availability.availableQuantity ?? "",
+			item.customSku ?? "",
+			cc?.code ?? "",
+			cc?.label ?? "",
+			texts[0] ?? "",
+			texts[1] ?? "",
+			texts[2] ?? "",
+			texts[3] ?? "",
+		].map(escape).join(";");
+	});
+
+	const csv = `\uFEFF${header.map(escape).join(";")}\n${rows.join("\n")}\n`;
+
+	setResponseHeaders(event, {
+		"Content-Type": "text/csv; charset=utf-8",
+		"Content-Disposition": `attachment; filename="cart-export.csv"`,
+	});
+	return csv;
+});

package/server/api/cart/index.delete.ts

@@ -0,0 +1,10 @@
+export default defineEventHandler(async (event) => {
+	try {
+		await getCartService(event).clearItems(event);
+		return { ok: true };
+	}
+	catch (err) {
+		getLogService().error("Service error: cart/clear", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/cart/index.get.ts

@@ -0,0 +1,10 @@
+export default defineEventHandler(async (event) => {
+	try {
+		const items = await getCartService(event).getItems(event);
+		return { items };
+	}
+	catch (err) {
+		getLogService().error("Service error: cart/get", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/cart/sync.post.ts

@@ -0,0 +1,14 @@
+import type { CartItem } from "../../../app/interfaces/cart-item";
+
+export default defineEventHandler(async (event) => {
+	const { items } = await readBody<{ items: CartItem[] }>(event);
+
+	try {
+		await getCartService(event).saveItems(event, items ?? []);
+		return { ok: true };
+	}
+	catch (err) {
+		getLogService().error("Service error: cart/sync", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/carts/[id]/activate.post.ts

@@ -0,0 +1,18 @@
+export default defineEventHandler(async (event) => {
+	const manager = getCartManager(event);
+	if (!manager) {
+		throw createError({ statusCode: 501, message: "Multi-cart management needs live mode" });
+	}
+	const id = getRouterParam(event, "id") ?? "";
+	if (!id) {
+		throw createError({ statusCode: 400, message: "Cart id is required" });
+	}
+	try {
+		const items = await manager.activateCart(event, id);
+		return { items };
+	}
+	catch (err) {
+		getLogService().error("Service error: carts/activate", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/carts/[id]/index.delete.ts

@@ -0,0 +1,18 @@
+export default defineEventHandler(async (event) => {
+	const manager = getCartManager(event);
+	if (!manager) {
+		throw createError({ statusCode: 501, message: "Multi-cart management needs live mode" });
+	}
+	const id = getRouterParam(event, "id") ?? "";
+	if (!id) {
+		throw createError({ statusCode: 400, message: "Cart id is required" });
+	}
+	try {
+		await manager.deleteCart(event, id);
+		return { ok: true };
+	}
+	catch (err) {
+		getLogService().error("Service error: carts/delete", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/carts/[id]/index.put.ts

@@ -0,0 +1,19 @@
+export default defineEventHandler(async (event) => {
+	const manager = getCartManager(event);
+	if (!manager) {
+		throw createError({ statusCode: 501, message: "Multi-cart management needs live mode" });
+	}
+	const id = getRouterParam(event, "id") ?? "";
+	const { name } = await readBody<{ name: string }>(event);
+	if (!id || !name?.trim()) {
+		throw createError({ statusCode: 400, message: "Cart id and name are required" });
+	}
+	try {
+		await manager.renameCart(event, id, name);
+		return { ok: true };
+	}
+	catch (err) {
+		getLogService().error("Service error: carts/rename", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/carts/[id]/items.post.ts

@@ -0,0 +1,21 @@
+import type { CartItem } from "../../../../app/interfaces/cart-item";
+
+export default defineEventHandler(async (event) => {
+	const manager = getCartManager(event);
+	if (!manager) {
+		throw createError({ statusCode: 501, message: "Multi-cart management needs live mode" });
+	}
+	const id = getRouterParam(event, "id") ?? "";
+	const { item } = await readBody<{ item: CartItem }>(event);
+	if (!id || !item) {
+		throw createError({ statusCode: 400, message: "Cart id and item are required" });
+	}
+	try {
+		await manager.addItemToCart(event, id, item);
+		return { ok: true };
+	}
+	catch (err) {
+		getLogService().error("Service error: carts/add-item", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/carts/index.get.ts

@@ -0,0 +1,14 @@
+export default defineEventHandler(async (event) => {
+	const manager = getCartManager(event);
+	if (!manager) {
+		// Mock mode: the demo shop manages multiple carts client-side.
+		return { carts: [], activeCartId: null, managed: false };
+	}
+	try {
+		return { ...(await manager.listCarts(event)), managed: true };
+	}
+	catch (err) {
+		getLogService().error("Service error: carts/list", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/carts/index.post.ts

@@ -0,0 +1,14 @@
+export default defineEventHandler(async (event) => {
+	const manager = getCartManager(event);
+	if (!manager) {
+		throw createError({ statusCode: 501, message: "Multi-cart management needs live mode" });
+	}
+	const { name, activate } = await readBody<{ name: string; activate?: boolean }>(event);
+	try {
+		return await manager.createCart(event, name ?? "", Boolean(activate));
+	}
+	catch (err) {
+		getLogService().error("Service error: carts/create", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/categories/[slug].get.ts

@@ -0,0 +1,22 @@
+export default defineEventHandler(async (event) => {
+	const locale = resolveLocale(event);
+	const slug = getRouterParam(event, "slug");
+	if (!slug) {
+		throw createError({ status: 400, message: "Missing slug" });
+	}
+
+	try {
+		const category = await getCategoryService(event).getCategoryBySlug(slug, locale);
+		if (!category) {
+			throw createError({ status: 404, message: "Category not found" });
+		}
+		return category;
+	}
+	catch (err) {
+		if (err !== null && typeof err === "object" && "statusCode" in err) {
+			throw err;
+		}
+		getLogService().error("Service error: categories/by-slug", { slug, ...toErrorContext(err) });
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/categories/index.get.ts

@@ -0,0 +1,11 @@
+export default defineEventHandler(async (event) => {
+	const locale = resolveLocale(event);
+
+	try {
+		return await getCategoryService(event).listCategories(locale);
+	}
+	catch (err) {
+		getLogService().error("Service error: categories/list", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/checkout/profile.get.ts

@@ -0,0 +1,21 @@
+export default defineEventHandler(async (event) => {
+	// Resolved through the registered auth service (mock or sdk); guests
+	// receive the guest checkout options when guest ordering is enabled.
+	const user = await getAuthService(event).me(event);
+
+	if (!user) {
+		const context = await getB2BContextService(event).getContext(null);
+		const guest = context.settings.checkout.guestOrdering;
+		if (!guest.b2b && !guest.b2c) {
+			throw createError({ statusCode: 401, message: "Unauthorized" });
+		}
+	}
+
+	try {
+		return await getCheckoutProfileService().getProfile(user?.$id ?? null);
+	}
+	catch (err) {
+		getLogService().error("Service error: checkout/profile", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/checkout/schema/[key].get.ts

@@ -0,0 +1,19 @@
+export default defineEventHandler(async (event) => {
+	const locale = resolveLocale(event);
+	const key = getRouterParam(event, "key");
+
+	if (!key) {
+		throw createError({ statusCode: 400, message: "Missing schema key" });
+	}
+
+	try {
+		return await getSchemaService(event).getSchema(key, locale);
+	}
+	catch (err) {
+		if (err !== null && typeof err === "object" && "statusCode" in err) {
+			throw err;
+		}
+		getLogService().error("Service error: checkout/schema", { key, ...toErrorContext(err) });
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});

package/server/api/checkout/session.post.ts

@@ -0,0 +1,8 @@
+/**
+ * Issues a one-time checkout session token. The one-page checkout fetches
+ * a fresh token right before submitting; the orders endpoint consumes it
+ * (see server/utils/checkoutSession.ts).
+ */
+export default defineEventHandler(() => {
+	return { checkoutSessionToken: createCheckoutSession() };
+});

package/server/api/images/detail/[filename].get.ts

@@ -0,0 +1,18 @@
+import { readFile } from "node:fs/promises";
+import { join, basename } from "node:path";
+
+export default defineEventHandler(async (event) => {
+	const filename = getRouterParam(event, "filename") ?? "";
+
+	if (filename !== basename(filename) || filename.includes("..")) {
+		throw createError({ statusCode: 400, message: "Invalid filename" });
+	}
+
+	const buffer = await readCoverDataRaw(`list/${filename}`);
+	if (!buffer) {
+		getLogService().error("Failed to read image asset", { filename });
+		throw createError({ statusCode: 404, message: "Image not found" });
+	}
+	setResponseHeader(event, "Content-Type", "image/png");
+	return buffer;
+});

package/server/api/images/list/[filename].get.ts

@@ -0,0 +1,17 @@
+import { basename } from "node:path";
+
+export default defineEventHandler(async (event) => {
+	const filename = getRouterParam(event, "filename") ?? "";
+
+	if (filename !== basename(filename) || filename.includes("..")) {
+		throw createError({ statusCode: 400, message: "Invalid filename" });
+	}
+
+	const buffer = await readCoverDataRaw(`list/${filename}`);
+	if (!buffer) {
+		getLogService().error("Failed to read image asset", { filename });
+		throw createError({ statusCode: 404, message: "Image not found" });
+	}
+	setResponseHeader(event, "Content-Type", "image/png");
+	return buffer;
+});

package/server/api/markets.get.ts

@@ -0,0 +1,9 @@
+export default defineEventHandler(async (event) => {
+	try {
+		return await getMarketService(event).listMarkets();
+	}
+	catch (err) {
+		getLogService().error("Service error: markets/list", toErrorContext(err));
+		throw createError({ statusCode: 500, message: "Internal server error" });
+	}
+});