@rovela-ai/sdk 0.4.1 → 0.4.2

package/dist/admin/api/orders.js

@@ -0,0 +1,390 @@
+/**
+ * @rovela/sdk/admin/api/orders
+ *
+ * API route handlers for admin order management.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/orders/route.ts
+ * export { GET } from '@rovela/sdk/admin/api/orders'
+ *
+ * // app/api/admin/orders/[id]/route.ts
+ * export { GET as getOrder, PUT } from '@rovela/sdk/admin/api/orders'
+ * ```
+ */
+import { NextResponse } from 'next/server';
+import { requireAdmin } from '../server/admin-session';
+import { findOrders, findOrderById, countOrders, updateOrderStatus, updateOrderShipping, findSettings, } from '../../core/db/queries';
+import { getShippoRates, purchaseShippoLabel, } from '../../shipping/shippo';
+import { sendOrderShipped, sendOrderDelivered, sendOrderCancelled, formatPrice, formatOrderNumber, } from '../../emails';
+// =============================================================================
+// List Orders
+// =============================================================================
+/**
+ * GET /api/admin/orders
+ *
+ * List orders with filtering and pagination.
+ *
+ * Query Parameters:
+ * - status: Order status filter
+ * - page: number (default 1)
+ * - limit: number (default 20, max 100)
+ */
+export async function GET(request) {
+    // Listing orders — every admin role (fulfillment staff need order visibility).
+    const guard = await requireAdmin({ permission: 'orders.read' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const searchParams = request.nextUrl.searchParams;
+        // Parse pagination
+        const page = Math.max(1, parseInt(searchParams.get('page') || '1', 10));
+        const limit = Math.min(100, Math.max(1, parseInt(searchParams.get('limit') || '20', 10)));
+        const offset = (page - 1) * limit;
+        // Parse status filter
+        const statusParam = searchParams.get('status');
+        const status = isValidStatus(statusParam) ? statusParam : undefined;
+        // Execute queries
+        const [orders, total] = await Promise.all([
+            findOrders({ status, limit, offset }),
+            countOrders({ status }),
+        ]);
+        return NextResponse.json({
+            data: orders,
+            total,
+            page,
+            pageSize: limit,
+            hasMore: offset + orders.length < total,
+        });
+    }
+    catch (error) {
+        console.error('[Admin Orders API] GET error:', error);
+        return NextResponse.json({ error: 'Failed to fetch orders', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+// =============================================================================
+// Single Order Operations
+// =============================================================================
+/**
+ * GET /api/admin/orders/[id]
+ *
+ * Get a single order by ID with items.
+ */
+export async function getOrder(_request, { params }) {
+    // Order detail view — read permission.
+    const guard = await requireAdmin({ permission: 'orders.read' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { id } = await params;
+        const order = await findOrderById(id);
+        if (!order) {
+            return NextResponse.json({ error: 'Order not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        return NextResponse.json({ data: order });
+    }
+    catch (error) {
+        console.error('[Admin Orders API] getOrder error:', error);
+        return NextResponse.json({ error: 'Failed to fetch order', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+/**
+ * PUT /api/admin/orders/[id]
+ *
+ * Update order status.
+ *
+ * Body:
+ * - status: New order status
+ * - notifyCustomer: boolean (default true)
+ * - trackingNumber: string (for shipped status)
+ * - trackingUrl: string (for shipped status)
+ */
+export async function PUT(request, { params }) {
+    // Updating order status / tracking / notes — every admin role can do this
+    // (`user` role exists specifically for fulfillment staff updating tracking).
+    const guard = await requireAdmin({ permission: 'orders.write' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { id } = await params;
+        const body = await request.json();
+        // Validate status
+        if (!body.status || !isValidStatus(body.status)) {
+            return NextResponse.json({ error: 'Valid status is required', code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        // Get existing order
+        const existingOrder = await findOrderById(id);
+        if (!existingOrder) {
+            return NextResponse.json({ error: 'Order not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        // Update status
+        const updatedOrder = await updateOrderStatus(id, body.status);
+        if (!updatedOrder) {
+            return NextResponse.json({ error: 'Failed to update order', code: 'INTERNAL_ERROR' }, { status: 500 });
+        }
+        // Send notification email if requested
+        const notifyCustomer = body.notifyCustomer !== false;
+        if (notifyCustomer && existingOrder.email) {
+            // Fetch store settings for currency
+            const settings = await findSettings().catch(() => null);
+            const currency = settings?.storeCurrency || 'USD';
+            // Get shipping address for shipped notifications
+            const shippingAddress = existingOrder.shippingAddress;
+            await sendStatusNotification(body.status, existingOrder.email, existingOrder.id, existingOrder.total, body.trackingNumber, body.trackingUrl, currency, {
+                carrierName: body.carrierName,
+                shippingAddress: shippingAddress,
+                estimatedDays: body.estimatedDays,
+            });
+        }
+        return NextResponse.json({ success: true, data: updatedOrder });
+    }
+    catch (error) {
+        console.error('[Admin Orders API] PUT error:', error);
+        return NextResponse.json({ error: 'Failed to update order', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+// =============================================================================
+// Helpers
+// =============================================================================
+function isValidStatus(value) {
+    return (value === 'pending' ||
+        value === 'paid' ||
+        value === 'shipped' ||
+        value === 'delivered' ||
+        value === 'cancelled' ||
+        value === 'refunded' ||
+        value === 'return_requested');
+}
+/**
+ * Send status notification email to customer.
+ * Awaits email send to ensure delivery in serverless environments.
+ * Errors are logged but don't throw to avoid blocking the response.
+ */
+async function sendStatusNotification(status, email, orderId, total, trackingNumber, trackingUrl, currency = 'USD', options = {}) {
+    const orderNumber = formatOrderNumber(orderId);
+    const storeUrl = process.env.NEXT_PUBLIC_APP_URL || 'https://store.example.com';
+    // Use shipping address name if available, otherwise fallback to email prefix
+    const shippingAddr = options.shippingAddress;
+    const customerName = shippingAddr
+        ? `${shippingAddr.firstName} ${shippingAddr.lastName}`.trim() || email.split('@')[0]
+        : email.split('@')[0];
+    try {
+        switch (status) {
+            case 'shipped':
+                await sendOrderShipped({
+                    to: email,
+                    customerName,
+                    orderNumber,
+                    trackingNumber: trackingNumber || 'Not available',
+                    carrierName: options.carrierName || 'Standard Shipping',
+                    estimatedDeliveryDate: getEstimatedDelivery(options.estimatedDays),
+                    shippingAddress: shippingAddr
+                        ? {
+                            name: `${shippingAddr.firstName} ${shippingAddr.lastName}`.trim(),
+                            line1: shippingAddr.line1,
+                            line2: shippingAddr.line2,
+                            city: shippingAddr.city,
+                            state: shippingAddr.state,
+                            postalCode: shippingAddr.postalCode,
+                            country: shippingAddr.country,
+                        }
+                        : {
+                            name: customerName,
+                            line1: '',
+                            city: '',
+                            state: '',
+                            postalCode: '',
+                            country: '',
+                        },
+                    trackingUrl: trackingUrl || `${storeUrl}/orders/${orderId}`,
+                });
+                console.log('[Admin Orders] Shipped email sent to:', email);
+                break;
+            case 'delivered':
+                await sendOrderDelivered({
+                    to: email,
+                    customerName,
+                    orderNumber,
+                    deliveryDate: new Date().toLocaleDateString('en-US', {
+                        weekday: 'long',
+                        year: 'numeric',
+                        month: 'long',
+                        day: 'numeric',
+                    }),
+                });
+                console.log('[Admin Orders] Delivered email sent to:', email);
+                break;
+            case 'cancelled':
+                await sendOrderCancelled({
+                    to: email,
+                    customerName,
+                    orderNumber,
+                    cancellationReason: 'Order cancelled by store',
+                    cancellationDate: new Date().toLocaleDateString(),
+                    refundMessage: `Your refund of ${formatPrice(parseFloat(total), currency)} will be processed within 3-5 business days.`,
+                });
+                console.log('[Admin Orders] Cancelled email sent to:', email);
+                break;
+            default:
+                // No notification for other statuses
+                break;
+        }
+    }
+    catch (error) {
+        console.error('[Admin Orders] Failed to send notification:', error);
+        // Don't throw - notifications should not block order updates
+    }
+}
+/**
+ * Get estimated delivery date.
+ * Uses provided days or defaults to 5-7 business days from now.
+ */
+function getEstimatedDelivery(days) {
+    const date = new Date();
+    // Use provided days (from Shippo rate) or default to 7
+    date.setDate(date.getDate() + (days || 7));
+    return date.toLocaleDateString('en-US', {
+        weekday: 'long',
+        year: 'numeric',
+        month: 'long',
+        day: 'numeric',
+    });
+}
+// =============================================================================
+// Shippo Integration Endpoints
+// =============================================================================
+/**
+ * GET /api/admin/orders/[id]/shippo-rates
+ *
+ * Get available Shippo carrier rates for an order.
+ * Requires order to have a shipping address.
+ */
+export async function getShippoRatesForOrder(_request, { params }) {
+    // Fetching Shippo rates for an order — read-only, no side effect.
+    const guard = await requireAdmin({ permission: 'orders.read' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { id } = await params;
+        // Get order with shipping address
+        const order = await findOrderById(id);
+        if (!order) {
+            return NextResponse.json({ error: 'Order not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        // Validate order has shipping address
+        const shippingAddress = order.shippingAddress;
+        if (!shippingAddress) {
+            return NextResponse.json({ error: 'Order has no shipping address', code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        // Get store settings for ship-from address and parcel dimensions
+        const settings = await findSettings();
+        if (!settings?.shippoFromAddress) {
+            return NextResponse.json({ error: 'Shippo ship-from address not configured', code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        if (!settings?.shippoDefaultParcel) {
+            return NextResponse.json({ error: 'Shippo default parcel not configured', code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        // Build "to" address from order shipping address
+        const toAddress = {
+            name: shippingAddress.name || `${shippingAddress.firstName || ''} ${shippingAddress.lastName || ''}`.trim() || 'Customer',
+            street1: shippingAddress.street1 || shippingAddress.line1 || '',
+            city: shippingAddress.city,
+            state: shippingAddress.state,
+            zip: shippingAddress.postalCode,
+            country: shippingAddress.country || 'US',
+            phone: shippingAddress.phone,
+        };
+        // Fetch rates from Shippo
+        const rates = await getShippoRates({
+            fromAddress: settings.shippoFromAddress,
+            toAddress,
+            parcel: settings.shippoDefaultParcel,
+        });
+        return NextResponse.json({ rates });
+    }
+    catch (error) {
+        console.error('[Admin Orders API] getShippoRatesForOrder error:', error);
+        return NextResponse.json({ error: 'Failed to fetch Shippo rates', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+/**
+ * POST /api/admin/orders/[id]/ship-with-shippo
+ *
+ * Purchase a shipping label from Shippo and update order with tracking info.
+ *
+ * Body:
+ * - rateId: Shippo rate object ID to purchase
+ * - notifyCustomer: boolean (default true)
+ */
+export async function shipWithShippo(request, { params }) {
+    // Purchasing a shipping label is an order write (updates tracking + status).
+    const guard = await requireAdmin({ permission: 'orders.write' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { id } = await params;
+        const body = await request.json();
+        // Validate rateId
+        if (!body.rateId || typeof body.rateId !== 'string') {
+            return NextResponse.json({ error: 'rateId is required', code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        // Get order
+        const order = await findOrderById(id);
+        if (!order) {
+            return NextResponse.json({ error: 'Order not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        // Validate order status (should be 'paid' to ship)
+        if (order.status !== 'paid') {
+            return NextResponse.json({ error: `Cannot ship order with status '${order.status}'. Order must be 'paid'.`, code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        // Purchase label from Shippo
+        const labelResult = await purchaseShippoLabel({
+            rateId: body.rateId,
+            labelFormat: body.labelFormat || 'PDF_4x6',
+        });
+        // Update order with shipping info and set status to 'shipped'
+        const updatedOrder = await updateOrderShipping(id, {
+            trackingNumber: labelResult.trackingNumber,
+            trackingUrl: labelResult.trackingUrl,
+            carrier: labelResult.carrier,
+            labelUrl: labelResult.labelUrl,
+            shippoRateId: body.rateId,
+            shippingMethod: `${labelResult.carrier.toUpperCase()} Label`,
+            status: 'shipped',
+        });
+        if (!updatedOrder) {
+            return NextResponse.json({ error: 'Failed to update order', code: 'INTERNAL_ERROR' }, { status: 500 });
+        }
+        // Send shipped notification email if requested
+        const notifyCustomer = body.notifyCustomer !== false;
+        if (notifyCustomer && order.email) {
+            // Fetch store settings for currency
+            const settings = await findSettings().catch(() => null);
+            const currency = settings?.storeCurrency || 'USD';
+            // Get shipping address from order for the email
+            const shippingAddress = order.shippingAddress;
+            await sendStatusNotification('shipped', order.email, order.id, order.total, labelResult.trackingNumber, labelResult.trackingUrl, currency, {
+                carrierName: labelResult.carrier.toUpperCase(),
+                shippingAddress: shippingAddress,
+                // estimatedDays could be passed from frontend if stored when rate was selected
+                estimatedDays: body.estimatedDays,
+            });
+        }
+        return NextResponse.json({
+            success: true,
+            trackingNumber: labelResult.trackingNumber,
+            labelUrl: labelResult.labelUrl,
+        });
+    }
+    catch (error) {
+        console.error('[Admin Orders API] shipWithShippo error:', error);
+        const errorMessage = error instanceof Error ? error.message : 'Failed to ship with Shippo';
+        return NextResponse.json({ error: errorMessage, code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+//# sourceMappingURL=orders.js.map

package/dist/admin/api/orders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orders.js","sourceRoot":"","sources":["../../../src/admin/api/orders.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EACL,UAAU,EACV,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,GACb,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,cAAc,EACd,mBAAmB,GACpB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,iBAAiB,GAClB,MAAM,cAAc,CAAA;AASrB,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,OAAoB;IAEpB,+EAA+E;IAC/E,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAA;IAC/D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,QAAQ,CAAA;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAA;QAEjD,mBAAmB;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAA;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAC7D,CAAA;QACD,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAA;QAEjC,sBAAsB;QACtB,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;QAEnE,kBAAkB;QAClB,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACrC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;SACxB,CAAC,CAAA;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,MAAM;YACZ,KAAK;YACL,IAAI;YACJ,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK;SACxC,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC3D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,QAAqB,EACrB,EAAE,MAAM,EAAuC;IAE/C,uCAAuC;IACvC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAA;IAC/D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,QAAQ,CAAA;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAA;QAC3B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,CAAA;QAErC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,EAAE,EAC/C,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAA;QAC1D,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC1D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,OAAoB,EACpB,EAAE,MAAM,EAAuC;IAE/C,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAA;IAChE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,QAAQ,CAAA;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAA;QAC3B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAEjC,kBAAkB;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,0BAA0B,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAC/D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,qBAAqB;QACrB,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,CAAA;QAC7C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,EAAE,EAC/C,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,gBAAgB;QAChB,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAE7D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC3D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,KAAK,KAAK,CAAA;QAEpD,IAAI,cAAc,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;YAC1C,oCAAoC;YACpC,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YACvD,MAAM,QAAQ,GAAG,QAAQ,EAAE,aAAa,IAAI,KAAK,CAAA;YAEjD,iDAAiD;YACjD,MAAM,eAAe,GAAG,aAAa,CAAC,eAA8C,CAAA;YAEpF,MAAM,sBAAsB,CAC1B,IAAI,CAAC,MAAM,EACX,aAAa,CAAC,KAAK,EACnB,aAAa,CAAC,EAAE,EAChB,aAAa,CAAC,KAAK,EACnB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,WAAW,EAChB,QAAQ,EACR;gBACE,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,eAAe,EAAE,eAAe;gBAChC,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CACF,CAAA;QACH,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC3D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,aAAa,CAAC,KAAoB;IACzC,OAAO,CACL,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,MAAM;QAChB,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,WAAW;QACrB,KAAK,KAAK,WAAW;QACrB,KAAK,KAAK,UAAU;QACpB,KAAK,KAAK,kBAAkB,CAC7B,CAAA;AACH,CAAC;AAyBD;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CACnC,MAAmB,EACnB,KAAa,EACb,OAAe,EACf,KAAa,EACb,cAAuB,EACvB,WAAoB,EACpB,WAAmB,KAAK,EACxB,UAAsC,EAAE;IAExC,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,2BAA2B,CAAA;IAE/E,6EAA6E;IAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,CAAA;IAC5C,MAAM,YAAY,GAAG,YAAY;QAC/B,CAAC,CAAC,GAAG,YAAY,CAAC,SAAS,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpF,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAEvB,IAAI,CAAC;QACH,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,SAAS;gBACZ,MAAM,gBAAgB,CAAC;oBACrB,EAAE,EAAE,KAAK;oBACT,YAAY;oBACZ,WAAW;oBACX,cAAc,EAAE,cAAc,IAAI,eAAe;oBACjD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,mBAAmB;oBACvD,qBAAqB,EAAE,oBAAoB,CAAC,OAAO,CAAC,aAAa,CAAC;oBAClE,eAAe,EAAE,YAAY;wBAC3B,CAAC,CAAC;4BACE,IAAI,EAAE,GAAG,YAAY,CAAC,SAAS,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;4BACjE,KAAK,EAAE,YAAY,CAAC,KAAK;4BACzB,KAAK,EAAE,YAAY,CAAC,KAAK;4BACzB,IAAI,EAAE,YAAY,CAAC,IAAI;4BACvB,KAAK,EAAE,YAAY,CAAC,KAAK;4BACzB,UAAU,EAAE,YAAY,CAAC,UAAU;4BACnC,OAAO,EAAE,YAAY,CAAC,OAAO;yBAC9B;wBACH,CAAC,CAAC;4BACE,IAAI,EAAE,YAAY;4BAClB,KAAK,EAAE,EAAE;4BACT,IAAI,EAAE,EAAE;4BACR,KAAK,EAAE,EAAE;4BACT,UAAU,EAAE,EAAE;4BACd,OAAO,EAAE,EAAE;yBACZ;oBACL,WAAW,EAAE,WAAW,IAAI,GAAG,QAAQ,WAAW,OAAO,EAAE;iBAC5D,CAAC,CAAA;gBACF,OAAO,CAAC,GAAG,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAA;gBAC3D,MAAK;YAEP,KAAK,WAAW;gBACd,MAAM,kBAAkB,CAAC;oBACvB,EAAE,EAAE,KAAK;oBACT,YAAY;oBACZ,WAAW;oBACX,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE;wBACnD,OAAO,EAAE,MAAM;wBACf,IAAI,EAAE,SAAS;wBACf,KAAK,EAAE,MAAM;wBACb,GAAG,EAAE,SAAS;qBACf,CAAC;iBACH,CAAC,CAAA;gBACF,OAAO,CAAC,GAAG,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAA;gBAC7D,MAAK;YAEP,KAAK,WAAW;gBACd,MAAM,kBAAkB,CAAC;oBACvB,EAAE,EAAE,KAAK;oBACT,YAAY;oBACZ,WAAW;oBACX,kBAAkB,EAAE,0BAA0B;oBAC9C,gBAAgB,EAAE,IAAI,IAAI,EAAE,CAAC,kBAAkB,EAAE;oBACjD,aAAa,EAAE,kBAAkB,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,8CAA8C;iBACxH,CAAC,CAAA;gBACF,OAAO,CAAC,GAAG,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAA;gBAC7D,MAAK;YAEP;gBACE,qCAAqC;gBACrC,MAAK;QACT,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAA;QACnE,6DAA6D;IAC/D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,IAAa;IACzC,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAA;IACvB,uDAAuD;IACvD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;IAC1C,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE;QACtC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,MAAM;QACb,GAAG,EAAE,SAAS;KACf,CAAC,CAAA;AACJ,CAAC;AAED,gFAAgF;AAChF,+BAA+B;AAC/B,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAqB,EACrB,EAAE,MAAM,EAAuC;IAE/C,kEAAkE;IAClE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAA;IAC/D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,QAAQ,CAAA;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAA;QAE3B,kCAAkC;QAClC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,CAAA;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,EAAE,EAC/C,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,eAAe,GAAG,KAAK,CAAC,eAWtB,CAAA;QAER,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,+BAA+B,EAAE,IAAI,EAAE,kBAAkB,EAAE,EACpE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,iEAAiE;QACjE,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;YACjC,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,yCAAyC,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAC9E,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;YACnC,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,sCAAsC,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAC3E,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,iDAAiD;QACjD,MAAM,SAAS,GAAkB;YAC/B,IAAI,EAAE,eAAe,CAAC,IAAI,IAAI,GAAG,eAAe,CAAC,SAAS,IAAI,EAAE,IAAI,eAAe,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,UAAU;YACzH,OAAO,EAAE,eAAe,CAAC,OAAO,IAAI,eAAe,CAAC,KAAK,IAAI,EAAE;YAC/D,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,KAAK,EAAE,eAAe,CAAC,KAAK;YAC5B,GAAG,EAAE,eAAe,CAAC,UAAU;YAC/B,OAAO,EAAE,eAAe,CAAC,OAAO,IAAI,IAAI;YACxC,KAAK,EAAE,eAAe,CAAC,KAAK;SAC7B,CAAA;QAED,0BAA0B;QAC1B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC;YACjC,WAAW,EAAE,QAAQ,CAAC,iBAAkC;YACxD,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,mBAAmB;SACrC,CAAC,CAAA;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAA;QACxE,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,8BAA8B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EACjE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAoB,EACpB,EAAE,MAAM,EAAuC;IAE/C,6EAA6E;IAC7E,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAA;IAChE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,QAAQ,CAAA;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAA;QAC3B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAEjC,kBAAkB;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,kBAAkB,EAAE,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,YAAY;QACZ,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,CAAA;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,EAAE,EAC/C,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,mDAAmD;QACnD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,kCAAkC,KAAK,CAAC,MAAM,0BAA0B,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAC7G,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC;YAC5C,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,SAAS;SAC3C,CAAC,CAAA;QAEF,8DAA8D;QAC9D,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE;YACjD,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,YAAY,EAAE,IAAI,CAAC,MAAM;YACzB,cAAc,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ;YAC5D,MAAM,EAAE,SAAS;SAClB,CAAC,CAAA;QAEF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC3D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,+CAA+C;QAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,KAAK,KAAK,CAAA;QACpD,IAAI,cAAc,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAClC,oCAAoC;YACpC,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YACvD,MAAM,QAAQ,GAAG,QAAQ,EAAE,aAAa,IAAI,KAAK,CAAA;YAEjD,gDAAgD;YAChD,MAAM,eAAe,GAAG,KAAK,CAAC,eAA8C,CAAA;YAE5E,MAAM,sBAAsB,CAC1B,SAAS,EACT,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,KAAK,EACX,WAAW,CAAC,cAAc,EAC1B,WAAW,CAAC,WAAW,EACvB,QAAQ,EACR;gBACE,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE;gBAC9C,eAAe,EAAE,eAAe;gBAChC,+EAA+E;gBAC/E,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CACF,CAAA;QACH,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC;YACvB,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC/B,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAA;QAChE,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAA;QAC1F,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC/C,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/admin/api/products-bulk.d.ts

@@ -0,0 +1,38 @@
+/**
+ * @rovela/sdk/admin/api/products-bulk
+ *
+ * Bulk action handler for the admin product list page.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/products/bulk/route.ts
+ * export { POST } from '@rovela-ai/sdk/admin/api/products-bulk'
+ * ```
+ *
+ * Body: { ids: string[], action: 'activate' | 'archive' | 'delete' }
+ *
+ * Permission gates (one per action):
+ *   - 'activate' / 'archive' → products.write
+ *   - 'delete'               → products.delete
+ *
+ * Behavior:
+ *   - Cap of 100 ids per request (foot-gun protection)
+ *   - Per-id success/failure tracking — partial failures don't roll back
+ *   - 'delete' precondition: every selected product MUST already be archived;
+ *     reject the entire batch with 400 if any non-archived id is present.
+ *     Mirrors the existing single-product DELETE rule (CLAUDE.md §24).
+ *   - Foreign-key violations (products with order_items) are caught and
+ *     reported as per-id failures, not a transaction rollback.
+ */
+import { NextRequest, NextResponse } from 'next/server';
+import type { AdminApiError } from '../types';
+interface BulkResult {
+    succeeded: string[];
+    failed: {
+        id: string;
+        error: string;
+    }[];
+}
+export declare function POST(request: NextRequest): Promise<NextResponse<BulkResult | AdminApiError>>;
+export {};
+//# sourceMappingURL=products-bulk.d.ts.map

package/dist/admin/api/products-bulk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"products-bulk.d.ts","sourceRoot":"","sources":["../../../src/admin/api/products-bulk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAOvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAa7C,UAAU,UAAU;IAClB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACxC;AAcD,wBAAsB,IAAI,CACxB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,UAAU,GAAG,aAAa,CAAC,CAAC,CA2HnD"}

package/dist/admin/api/products-bulk.js

@@ -0,0 +1,135 @@
+/**
+ * @rovela/sdk/admin/api/products-bulk
+ *
+ * Bulk action handler for the admin product list page.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/products/bulk/route.ts
+ * export { POST } from '@rovela-ai/sdk/admin/api/products-bulk'
+ * ```
+ *
+ * Body: { ids: string[], action: 'activate' | 'archive' | 'delete' }
+ *
+ * Permission gates (one per action):
+ *   - 'activate' / 'archive' → products.write
+ *   - 'delete'               → products.delete
+ *
+ * Behavior:
+ *   - Cap of 100 ids per request (foot-gun protection)
+ *   - Per-id success/failure tracking — partial failures don't roll back
+ *   - 'delete' precondition: every selected product MUST already be archived;
+ *     reject the entire batch with 400 if any non-archived id is present.
+ *     Mirrors the existing single-product DELETE rule (CLAUDE.md §24).
+ *   - Foreign-key violations (products with order_items) are caught and
+ *     reported as per-id failures, not a transaction rollback.
+ */
+import { NextResponse } from 'next/server';
+import { requireAdmin } from '../server/admin-session';
+import { findProductById, updateProduct, hardDeleteProduct, } from '../../core/db/queries';
+const MAX_BULK_SIZE = 100;
+const PERMISSION_BY_ACTION = {
+    activate: 'products.write',
+    archive: 'products.write',
+    delete: 'products.delete',
+};
+// =============================================================================
+// Handler
+// =============================================================================
+export async function POST(request) {
+    let body;
+    try {
+        body = await request.json();
+    }
+    catch {
+        return NextResponse.json({ error: 'Invalid JSON body', code: 'VALIDATION_ERROR' }, { status: 400 });
+    }
+    // Validate shape
+    if (!Array.isArray(body.ids) || body.ids.length === 0) {
+        return NextResponse.json({ error: '`ids` must be a non-empty string array', code: 'VALIDATION_ERROR' }, { status: 400 });
+    }
+    if (body.ids.some((id) => typeof id !== 'string' || id.length === 0)) {
+        return NextResponse.json({ error: '`ids` must contain non-empty strings', code: 'VALIDATION_ERROR' }, { status: 400 });
+    }
+    if (body.ids.length > MAX_BULK_SIZE) {
+        return NextResponse.json({
+            error: `Maximum ${MAX_BULK_SIZE} products per request`,
+            code: 'VALIDATION_ERROR',
+        }, { status: 400 });
+    }
+    if (body.action !== 'activate' &&
+        body.action !== 'archive' &&
+        body.action !== 'delete') {
+        return NextResponse.json({
+            error: '`action` must be "activate" | "archive" | "delete"',
+            code: 'VALIDATION_ERROR',
+        }, { status: 400 });
+    }
+    const action = body.action;
+    const ids = body.ids;
+    // Per-action permission gate
+    const guard = await requireAdmin({ permission: PERMISSION_BY_ACTION[action] });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    // Hard-delete precondition: every selected product must already be archived.
+    // Validate up-front so we don't half-delete and bail out mid-batch.
+    if (action === 'delete') {
+        const checks = await Promise.all(ids.map(async (id) => ({ id, product: await findProductById(id) })));
+        const notArchived = checks
+            .filter((c) => c.product && c.product.status !== 'archived')
+            .map((c) => c.id);
+        if (notArchived.length > 0) {
+            return NextResponse.json({
+                error: 'Cannot delete non-archived products. Archive them first, then try delete again.',
+                code: 'VALIDATION_ERROR',
+            }, { status: 400 });
+        }
+    }
+    // Execute. Per-id loop, collect succeeded + failed.
+    const succeeded = [];
+    const failed = [];
+    for (const id of ids) {
+        try {
+            if (action === 'activate') {
+                const updated = await updateProduct(id, { status: 'active' });
+                if (!updated) {
+                    failed.push({ id, error: 'Product not found' });
+                }
+                else {
+                    succeeded.push(id);
+                }
+            }
+            else if (action === 'archive') {
+                const updated = await updateProduct(id, { status: 'archived' });
+                if (!updated) {
+                    failed.push({ id, error: 'Product not found' });
+                }
+                else {
+                    succeeded.push(id);
+                }
+            }
+            else {
+                // delete (already validated to be archived above)
+                const ok = await hardDeleteProduct(id);
+                if (!ok) {
+                    failed.push({ id, error: 'Product not found' });
+                }
+                else {
+                    succeeded.push(id);
+                }
+            }
+        }
+        catch (err) {
+            // Most likely cause for delete: FK violation from order_items references.
+            const msg = err instanceof Error ? err.message : 'Unknown error';
+            const friendly = action === 'delete' && msg.toLowerCase().includes('foreign key')
+                ? 'Product has order history and cannot be permanently deleted'
+                : msg;
+            failed.push({ id, error: friendly });
+            console.error(`[Admin Products Bulk] ${action} failed for ${id}:`, err);
+        }
+    }
+    return NextResponse.json({ succeeded, failed });
+}
+//# sourceMappingURL=products-bulk.js.map

package/dist/admin/api/products-bulk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"products-bulk.js","sourceRoot":"","sources":["../../../src/admin/api/products-bulk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EACL,eAAe,EACf,aAAa,EACb,iBAAiB,GAClB,MAAM,uBAAuB,CAAA;AAmB9B,MAAM,aAAa,GAAG,GAAG,CAAA;AAEzB,MAAM,oBAAoB,GAA6D;IACrF,QAAQ,EAAE,gBAAgB;IAC1B,OAAO,EAAE,gBAAgB;IACzB,MAAM,EAAE,iBAAiB;CAC1B,CAAA;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,OAAoB;IAEpB,IAAI,IAA0B,CAAA;IAC9B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,kBAAkB,EAAE,EACxD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,wCAAwC,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAC7E,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACrE,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,sCAAsC,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAC3E,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QACpC,OAAO,YAAY,CAAC,IAAI,CACtB;YACE,KAAK,EAAE,WAAW,aAAa,uBAAuB;YACtD,IAAI,EAAE,kBAAkB;SACzB,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;IACD,IACE,IAAI,CAAC,MAAM,KAAK,UAAU;QAC1B,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,IAAI,CAAC,MAAM,KAAK,QAAQ,EACxB,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,CACtB;YACE,KAAK,EAAE,oDAAoD;YAC3D,IAAI,EAAE,kBAAkB;SACzB,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;IAEpB,6BAA6B;IAC7B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC9E,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,QAAQ,CAAA;IACvB,CAAC;IAED,6EAA6E;IAC7E,oEAAoE;IACpE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CACpE,CAAA;QACD,MAAM,WAAW,GAAG,MAAM;aACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC;aAC3D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACnB,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,KAAK,EACH,iFAAiF;gBACnF,IAAI,EAAE,kBAAkB;aACzB,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,MAAM,MAAM,GAAoC,EAAE,CAAA;IAElD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;gBAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;gBACjD,CAAC;qBAAM,CAAC;oBACN,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACpB,CAAC;YACH,CAAC;iBAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;gBAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;gBACjD,CAAC;qBAAM,CAAC;oBACN,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACpB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,kDAAkD;gBAClD,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAA;gBACtC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;gBACjD,CAAC;qBAAM,CAAC;oBACN,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0EAA0E;YAC1E,MAAM,GAAG,GACP,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAA;YACtD,MAAM,QAAQ,GACZ,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC9D,CAAC,CAAC,6DAA6D;gBAC/D,CAAC,CAAC,GAAG,CAAA;YACT,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;YACpC,OAAO,CAAC,KAAK,CACX,yBAAyB,MAAM,eAAe,EAAE,GAAG,EACnD,GAAG,CACJ,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;AACjD,CAAC"}

package/dist/admin/api/products-stats.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @rovela/sdk/admin/api/products-stats
+ *
+ * Aggregate metrics for the admin product list page.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/products/stats/route.ts
+ * export { GET } from '@rovela-ai/sdk/admin/api/products-stats'
+ * ```
+ *
+ * Returns: { activeCount, outOfStockCount, bestSeller }
+ *
+ * Pattern mirrors `admin/api/stats.ts` — three helpers in parallel via
+ * `Promise.all`. Single round-trip for the three metric cards.
+ */
+import { NextRequest, NextResponse } from 'next/server';
+import type { AdminApiError } from '../types';
+interface ProductMetricsResponse {
+    data: {
+        activeCount: number;
+        outOfStockCount: number;
+        /** Top-selling product over the last 30 days (units). Null if none. */
+        bestSeller: {
+            id: string;
+            name: string;
+            unitsSold: number;
+            revenue: string;
+        } | null;
+    };
+}
+export declare function GET(_request: NextRequest): Promise<NextResponse<ProductMetricsResponse | AdminApiError>>;
+export {};
+//# sourceMappingURL=products-stats.d.ts.map

package/dist/admin/api/products-stats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"products-stats.d.ts","sourceRoot":"","sources":["../../../src/admin/api/products-stats.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAOvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAM7C,UAAU,sBAAsB;IAC9B,IAAI,EAAE;QACJ,WAAW,EAAE,MAAM,CAAA;QACnB,eAAe,EAAE,MAAM,CAAA;QACvB,uEAAuE;QACvE,UAAU,EAAE;YACV,EAAE,EAAE,MAAM,CAAA;YACV,IAAI,EAAE,MAAM,CAAA;YACZ,SAAS,EAAE,MAAM,CAAA;YACjB,OAAO,EAAE,MAAM,CAAA;SAChB,GAAG,IAAI,CAAA;KACT,CAAA;CACF;AAMD,wBAAsB,GAAG,CACvB,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,YAAY,CAAC,sBAAsB,GAAG,aAAa,CAAC,CAAC,CAuB/D"}