@unchainedshop/api 5.0.0-alpha.1 → 5.0.0-alpha.3

package/lib/resolvers/type/product/product-bundle-types.d.ts

@@ -15,7 +15,7 @@ export declare const BundleProduct: {
         currencyCode?: string;
     }, requestContext: import("../../../context.ts").Context): Promise<{
         minQuantity: number;
-        maxQuantity: number;
+        maxQuantity: number | null;
         price: import("@unchainedshop/core-products").ProductPrice;
     }[]>;
     salesUnit({ commerce }: import("@unchainedshop/core-products").Product): string | null;

package/lib/resolvers/type/product/product-plan-types.d.ts

@@ -15,7 +15,7 @@ export declare const PlanProduct: {
         currencyCode?: string;
     }, requestContext: Context): Promise<{
         minQuantity: number;
-        maxQuantity: number;
+        maxQuantity: number | null;
         price: ProductPrice;
     }[]>;
     salesUnit({ commerce }: ProductType): string | null;

package/lib/resolvers/type/product/product-simple-types.d.ts

@@ -45,7 +45,7 @@ export declare const SimpleProduct: {
         currencyCode?: string;
     }, requestContext: Context): Promise<{
         minQuantity: number;
-        maxQuantity: number;
+        maxQuantity: number | null;
         price: import("@unchainedshop/core-products").ProductPrice;
     }[]>;
     salesUnit({ commerce }: Product): string | null;

package/lib/resolvers/type/product/product-tokenized-types.d.ts

@@ -29,7 +29,7 @@ export declare const TokenizedProduct: {
         currencyCode?: string;
     }, requestContext: Context): Promise<{
         minQuantity: number;
-        maxQuantity: number;
+        maxQuantity: number | null;
         price: import("@unchainedshop/core-products").ProductPrice;
     }[]>;
     salesUnit({ commerce }: Product): string | null;

package/lib/resolvers/type/quotation-types.d.ts

@@ -6,6 +6,10 @@ export declare const Quotation: {
     isExpired: (obj: QuotationType, { referenceDate }: {
         referenceDate: Date;
     }, { modules }: Context) => boolean;
+    price: (obj: QuotationType) => {
+        amount: number;
+        currencyCode: string;
+    } | null;
     product: (obj: QuotationType, _: never, { loaders }: Context) => Promise<import("@unchainedshop/core-products").Product>;
     status: (obj: QuotationType, _: never, { modules }: Context) => import("@unchainedshop/core-quotations").QuotationStatus;
     user: (obj: QuotationType, _: never, { loaders }: Context) => Promise<import("@unchainedshop/core-users").User>;

package/lib/resolvers/type/quotation-types.js

@@ -2,6 +2,7 @@ export const Quotation = {
     country: async (obj, _, { loaders }) => obj.countryCode ? loaders.countryLoader.load({ isoCode: obj.countryCode }) : null,
     currency: async (obj, _, { loaders }) => obj.currencyCode ? loaders.currencyLoader.load({ isoCode: obj.currencyCode }) : null,
     isExpired: (obj, { referenceDate }, { modules }) => modules.quotations.isExpired(obj, { referenceDate }),
+    price: (obj) => obj.price != null && obj.currencyCode ? { amount: obj.price, currencyCode: obj.currencyCode } : null,
     product: async (obj, _, { loaders }) => {
         const product = await loaders.productLoader.load({
             productId: obj.productId,

package/lib/resolvers/type/token-types.d.ts

@@ -3,10 +3,10 @@ import type { TokenSurrogate } from '@unchainedshop/core-warehousing';
 export declare const Token: {
     product: (token: TokenSurrogate, params: never, { loaders }: Context) => Promise<import("@unchainedshop/core-products").Product>;
     user: (token: TokenSurrogate, params: never, { loaders }: Context) => Promise<import("@unchainedshop/core-users").User | null>;
-    status: (token: TokenSurrogate, params: never, { services }: Context) => Promise<import("@unchainedshop/core-warehousing").TokenStatus>;
+    status: (token: TokenSurrogate, params: never, { loaders }: Context) => Promise<import("@unchainedshop/core-warehousing").TokenStatus>;
     ercMetadata: (token: TokenSurrogate, { forceLocale }: {
         forceLocale: string;
     }, context: Context) => Promise<any>;
-    isInvalidateable: (token: TokenSurrogate, _params: never, { services }: Context) => Promise<boolean>;
-    accessKey: (token: TokenSurrogate, params: never, requestContext: Context) => Promise<string | null>;
+    isInvalidateable: (token: TokenSurrogate, _params: never, { loaders, services }: Context) => Promise<boolean>;
+    accessKey: (token: TokenSurrogate, params: never, requestContext: Context) => Promise<string>;
 };

package/lib/resolvers/type/token-types.js

@@ -9,8 +9,8 @@ export const Token = {
             return null;
         return loaders.userLoader.load({ userId: token.userId });
     },
-    status: async (token, params, { services }) => {
-        return services.warehousing.resolveTokenStatus({ token });
+    status: async (token, params, { loaders }) => {
+        return loaders.tokenExportStatusLoader.load({ token });
     },
     ercMetadata: async (token, { forceLocale }, context) => {
         const { loaders, services } = context;
@@ -21,12 +21,13 @@ export const Token = {
             locale: forceLocale ? new Intl.Locale(forceLocale) : context.locale,
         });
     },
-    isInvalidateable: async (token, _params, { services }) => {
-        return services.warehousing.isTokenInvalidateable({ token });
+    isInvalidateable: async (token, _params, { loaders, services }) => {
+        const product = await loaders.productLoader.load({ productId: token.productId });
+        return services.warehousing.isTokenInvalidateable({ token, product });
     },
     accessKey: async (token, params, requestContext) => {
         const { modules } = requestContext;
         await checkAction(requestContext, actions.updateToken, [undefined, { tokenId: token._id }]);
-        return modules.warehousing.buildAccessKeyForToken(token._id);
+        return modules.warehousing.buildAccessKeyFromToken(token);
     },
 };

package/lib/resolvers/type/user-types.d.ts

@@ -20,7 +20,7 @@ export interface PushSubscription {
 }
 export interface Web3Address {
     address: string;
-    nonce?: number;
+    nonce?: string;
     verified: boolean;
 }
 export interface WebAuthnCredentials {

package/lib/resolvers/type/user-types.js

@@ -49,9 +49,9 @@ export const User = {
         return context.modules.bookmarks.findBookmarksByUserId(user._id);
     },
     async cart(user, params, context) {
-        const { modules, countryCode } = context;
+        const { loaders, countryCode } = context;
         await checkAction(context, viewUserOrders, [user, params]);
-        return modules.orders.cart({
+        return loaders.cartLoader.load({
             countryCode,
             orderNumber: params.orderNumber,
             userId: user._id,

package/lib/roles/all.js

@@ -20,7 +20,7 @@ export const all = (role, actions) => {
         if (isOwnedByUser)
             return true;
         const accessKeyHeader = context.getHeader('x-token-accesskey');
-        const accessKey = await context.modules.warehousing.buildAccessKeyForToken(tokenId);
+        const accessKey = await context.modules.warehousing.buildAccessKeyFromToken(token);
         if (accessKeyHeader && accessKey && (await timingSafeStringEqual(accessKeyHeader, accessKey)))
             return true;
         return false;

package/lib/roles/index.js

@@ -60,6 +60,7 @@ const actions = [
     'createEnrollment',
     'updateEnrollment',
     'updateCart',
+    'addCartQuotation',
     'checkoutCart',
     'updateOrder',
     'updateOrderDelivery',
@@ -84,6 +85,7 @@ const actions = [
     'manageQuotations',
     'answerQuotation',
     'bookmarkProduct',
+    'createBookmark',
     'manageBookmarks',
     'search',
     'manageWorker',

package/lib/roles/loggedIn.js

@@ -116,6 +116,14 @@ export const loggedIn = (role, actions) => {
             return true;
         return bookmark.userId === userId;
     };
+    const isOwnBookmarkUser = (obj, { userId: bookmarkUserId }, { userId }) => {
+        return !bookmarkUserId || bookmarkUserId === userId;
+    };
+    const isOwnedCartAndQuotation = async (obj, params, context) => {
+        if (!(await isOwnedOrderOrCart(obj, params, context)))
+            return false;
+        return isOwnedQuotation(obj, params, context);
+    };
     const isOwnedPaymentCredential = async (obj, { paymentCredentialsId }, { modules, userId }) => {
         const credentials = await modules.payment.paymentCredentials.findPaymentCredential({
             paymentCredentialsId,
@@ -155,6 +163,7 @@ export const loggedIn = (role, actions) => {
     role.allow(actions.updateOrderPayment, isOwnedOrderPayment);
     role.allow(actions.checkoutCart, isOwnedOrderOrCart);
     role.allow(actions.updateCart, isOwnedOrderOrCart);
+    role.allow(actions.addCartQuotation, isOwnedCartAndQuotation);
     role.allow(actions.createCart, () => true);
     role.allow(actions.viewEnrollment, isOwnedEnrollment);
     role.allow(actions.updateEnrollment, isOwnedEnrollment);
@@ -163,7 +172,9 @@ export const loggedIn = (role, actions) => {
     role.allow(actions.updateProductReview, isOwnedProductReview);
     role.allow(actions.requestQuotation, () => true);
     role.allow(actions.answerQuotation, isOwnedQuotation);
+    role.allow(actions.viewQuotation, isOwnedQuotation);
     role.allow(actions.manageBookmarks, isOwnedBookmark);
+    role.allow(actions.createBookmark, isOwnBookmarkUser);
     role.allow(actions.bookmarkProduct, () => true);
     role.allow(actions.voteProductReview, () => true);
     role.allow(actions.registerPaymentCredentials, () => true);

package/lib/schema/inputTypes.js

@@ -8,7 +8,7 @@ export default [
     input UserProfileInput {
       displayName: String
       birthday: Timestamp
-      phoneMobile: String
+      phoneMobile: PhoneNumber
       gender: String
       address: AddressInput
     }
@@ -27,7 +27,7 @@ export default [
 
     input ContactInput {
       emailAddress: String
-      telNumber: String
+      telNumber: PhoneNumber
     }
 
     input CreateLanguageInput {
@@ -105,7 +105,7 @@ export default [
 
     input UpdateProductCommercePricingInput {
       amount: Int!
-      maxQuantity: Int
+      minQuantity: Int
       isTaxable: Boolean
       isNetPrice: Boolean
       currencyCode: String!

package/lib/schema/scalars.js

@@ -6,5 +6,6 @@ export default [
     scalar Timestamp
     scalar LowerCaseString
     scalar Locale
+    scalar PhoneNumber
   `,
 ];

package/lib/schema/types/filter.js

@@ -49,14 +49,14 @@ export default [
     type LoadedFilterOption @cacheControl(maxAge: 180) {
       filteredProductsCount: Int!
       definition: FilterOption!
-      isSelected: Boolean
+      isSelected: Boolean!
     }
 
     type LoadedFilter @cacheControl(maxAge: 180) {
       productsCount: Int!
       filteredProductsCount: Int!
       definition: Filter!
-      isSelected: Boolean
+      isSelected: Boolean!
       options: [LoadedFilterOption!]
     }
   `,

package/lib/schema/types/product/product.js

@@ -139,7 +139,7 @@ export default [
       country: Country!
       currency: Currency!
       amount: Int!
-      maxQuantity: Int
+      minQuantity: Int
     }
 
     union ConfigurableOrBundleProduct = BundleProduct | ConfigurableProduct

package/lib/schema/types/quotation.js

@@ -57,6 +57,11 @@ export default [
       country: Country
       currency: Currency
       configuration: [ProductConfigurationParameter!]
+
+      """
+      Proposed unit price (minor units of the quotation's currency), set when the quotation reaches PROPOSED
+      """
+      price: Price
     }
   `,
 ];

package/lib/schema/types/user.js

@@ -82,7 +82,7 @@ export default [
 
     type Web3Address {
       address: String!
-      nonce: Int
+      nonce: String
       verified: Boolean!
     }
 

package/lib/utils/optionalPeerError.d.ts

@@ -0,0 +1 @@
+export declare function isPeerNotInstalledError(packageName: string, error: unknown): boolean;

package/lib/utils/optionalPeerError.js

@@ -0,0 +1,6 @@
+export function isPeerNotInstalledError(packageName, error) {
+    if (error?.code !== 'ERR_MODULE_NOT_FOUND')
+        return false;
+    const match = String(error?.message || '').match(/^Cannot find (?:package|module) '([^']+)'/);
+    return !!match && (match[1] === packageName || match[1].startsWith(`${packageName}/`));
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@unchainedshop/api",
   "description": "GraphQL API layer for the Unchained Engine with Express/Fastify adapters and MCP server",
-  "version": "5.0.0-alpha.1",
+  "version": "5.0.0-alpha.3",
   "main": "lib/api-index.js",
   "types": "lib/api-index.d.ts",
   "type": "module",
@@ -60,26 +60,30 @@
   },
   "homepage": "https://github.com/unchainedshop/unchained#readme",
   "peerDependencies": {
-    "@ai-sdk/mcp": "^1",
+    "@ai-sdk/mcp": "^2.0.29",
     "@fastify/cookie": ">= 11 < 12",
-    "@fastify/multipart": ">= 9 < 10",
-    "@fastify/static": ">= 9 < 10",
-    "@modelcontextprotocol/sdk": ">= 1 < 2",
-    "ai": ">= 6 < 7",
+    "@fastify/multipart": ">= 10 < 11",
+    "@fastify/static": ">= 10.1.3 < 11",
+    "@modelcontextprotocol/server": ">= 2 < 3",
+    "ai": ">= 7 < 8",
     "cookie-parser": ">= 1.4 < 2",
     "express": ">= 5 < 6",
     "fastify": ">= 5.2 < 6",
+    "graphql": ">= 16.14 < 18",
     "graphql-yoga": ">= 5.9 < 6",
     "multer": ">= 2 < 3"
   },
   "peerDependenciesMeta": {
+    "graphql": {
+      "optional": false
+    },
     "graphql-yoga": {
       "optional": false
     },
     "cookie-parser": {
       "optional": false
     },
-    "@modelcontextprotocol/sdk": {
+    "@modelcontextprotocol/server": {
       "optional": true
     },
     "ai": {
@@ -108,31 +112,51 @@
     }
   },
   "dependencies": {
+    "@envelop/core": "^5.6.0",
     "@unchainedshop/core": "^5.0.0-alpha.1",
+    "@unchainedshop/core-assortments": "^5.0.0-alpha.1",
+    "@unchainedshop/core-bookmarks": "^5.0.0-alpha.1",
+    "@unchainedshop/core-countries": "^5.0.0-alpha.1",
+    "@unchainedshop/core-currencies": "^5.0.0-alpha.1",
+    "@unchainedshop/core-delivery": "^5.0.0-alpha.1",
+    "@unchainedshop/core-enrollments": "^5.0.0-alpha.1",
+    "@unchainedshop/core-events": "^5.0.0-alpha.1",
+    "@unchainedshop/core-files": "^5.0.0-alpha.1",
+    "@unchainedshop/core-filters": "^5.0.0-alpha.1",
+    "@unchainedshop/core-languages": "^5.0.0-alpha.1",
+    "@unchainedshop/core-orders": "^5.0.0-alpha.1",
+    "@unchainedshop/core-payment": "^5.0.0-alpha.1",
+    "@unchainedshop/core-products": "^5.0.0-alpha.1",
+    "@unchainedshop/core-quotations": "^5.0.0-alpha.1",
+    "@unchainedshop/core-users": "^5.0.0-alpha.1",
+    "@unchainedshop/core-warehousing": "^5.0.0-alpha.1",
+    "@unchainedshop/core-worker": "^5.0.0-alpha.1",
     "@unchainedshop/events": "^5.0.0-alpha.1",
     "@unchainedshop/logger": "^5.0.0-alpha.1",
+    "@unchainedshop/mongodb": "^5.0.0-alpha.1",
     "@unchainedshop/roles": "^5.0.0-alpha.1",
     "@unchainedshop/utils": "^5.0.0-alpha.1",
     "@whatwg-node/server": "^0.10.18",
     "dataloader": "^2.2.3",
-    "graphql-scalars": "^1.24.2",
+    "graphql-scalars": "^2.0.0",
     "jose": "^6.0.10",
     "mime": ">= 4 < 5",
-    "zod": "^3.25.76 || ^4"
+    "zod": "^4.2.0"
   },
   "devDependencies": {
-    "@ai-sdk/mcp": "^1.0.5",
+    "@ai-sdk/mcp": "^2.0.34",
     "@fastify/cookie": "^11.0.2",
-    "@fastify/multipart": "^9.0.3",
-    "@fastify/static": "^9.0.0",
-    "@modelcontextprotocol/sdk": "^1.15.1",
+    "@fastify/multipart": "^10.0.0",
+    "@fastify/static": "^10.1.3",
+    "@modelcontextprotocol/server": "^2.0.0",
     "@types/cookie-parser": "^1.4.8",
     "@types/express": "^5.0.3",
-    "@types/node": "^25.0.0",
-    "ai": "^6.0.14",
+    "@types/node": "^26.2.0",
+    "ai": "^7.0.73",
     "cookie-parser": "^1.4.7",
     "express": "^5.1.0",
     "fastify": "^5.4.0",
+    "graphql": "^17.0.2",
     "multer": "^2.0.1",
     "typescript": "^5.8.3"
   }