@unifiedcommerce/core 0.4.3 → 0.4.4

package/dist/interfaces/rest/customer-portal.js

@@ -1,206 +0,0 @@
-import { OpenAPIHono } from "@hono/zod-openapi";
-import { assertPermission } from "../../auth/permissions.js";
-import { getProfileRoute, listAddressesRoute, listCustomerOrdersRoute, getCustomerOrderRoute, getOrderTrackingRoute, getOrderDownloadsRoute, listCoursesRoute, deleteAddressRoute, reorderRoute, updateProfileRoute, createAddressRoute, } from "./schemas/customer-portal.js";
-import { isUUID, mapErrorToStatus } from "./utils.js";
-export function createCustomerPortalRoutes(kernel) {
-    const router = new OpenAPIHono();
-    router.use("*", async (c, next) => {
-        if (!c.get("actor")) {
-            return c.json({ error: { code: "FORBIDDEN", message: "Authentication required." } }, 401);
-        }
-        await next();
-    });
-    /**
-     * Resolves an actor whose userId is the customer profile UUID (not the Better Auth user ID).
-     * Required so that `assertOwnership(actor, order.customerId)` compares UUIDs correctly,
-     * since orders.customer_id stores the customer profile UUID, not the Better Auth string ID.
-     */
-    async function resolveCustomerActor(actor) {
-        const customer = await kernel.services.customers.getByUserId(actor.userId, actor);
-        if (!customer.ok)
-            return null;
-        return { ...actor, userId: customer.value.id };
-    }
-    // @ts-expect-error -- openapi handler union return type
-    router.openapi(getProfileRoute, async (c) => {
-        const actor = c.get("actor");
-        const customer = await kernel.services.customers.getByUserId(actor.userId, actor);
-        if (!customer.ok)
-            return c.json({ error: customer.error }, 404);
-        return c.json({ data: customer.value });
-    });
-    // @ts-expect-error -- openapi handler union return type
-    router.openapi(updateProfileRoute, async (c) => {
-        const actor = c.get("actor");
-        assertPermission(actor, "customers:update:self");
-        const result = await kernel.services.customers.updateByUserId(actor.userId, c.req.valid("json"), actor);
-        if (!result.ok)
-            return c.json({ error: result.error }, 422);
-        return c.json({ data: result.value });
-    });
-    router.openapi(listAddressesRoute, async (c) => {
-        const actor = c.get("actor");
-        const addresses = await kernel.services.customers.getAddresses(actor.userId, actor);
-        return c.json({ data: addresses.ok ? addresses.value : [] });
-    });
-    // @ts-expect-error -- openapi handler union return type
-    router.openapi(createAddressRoute, async (c) => {
-        const actor = c.get("actor");
-        const result = await kernel.services.customers.addAddress(actor.userId, c.req.valid("json"), actor);
-        if (!result.ok)
-            return c.json({ error: result.error }, 422);
-        return c.json({ data: result.value }, 201);
-    });
-    // @ts-expect-error -- openapi handler union return type
-    router.openapi(deleteAddressRoute, async (c) => {
-        const actor = c.get("actor");
-        const result = await kernel.services.customers.deleteAddress(actor.userId, c.req.param("id"), actor);
-        if (!result.ok)
-            return c.json({ error: result.error }, 404);
-        return c.json({ data: { deleted: true } });
-    });
-    // @ts-expect-error -- openapi handler union return type
-    router.openapi(listCustomerOrdersRoute, async (c) => {
-        const actor = c.get("actor");
-        const status = c.req.query("status");
-        // Resolve customer profile UUID from Better Auth userId
-        const customerResult = await kernel.services.customers.getByUserId(actor.userId, actor);
-        if (!customerResult.ok)
-            return c.json({ data: [], meta: { total: 0, page: 1, limit: 20, totalPages: 0 } });
-        const result = await kernel.services.orders.listByCustomer(customerResult.value.id, {
-            page: Number.parseInt(c.req.query("page") ?? "1", 10),
-            limit: Number.parseInt(c.req.query("limit") ?? "20", 10),
-            ...(status !== undefined ? { status } : {}),
-        });
-        if (!result.ok)
-            return c.json({ error: result.error }, 500);
-        return c.json({ data: result.value.items, meta: result.value.pagination });
-    });
-    // @ts-expect-error -- openapi handler union return type
-    router.openapi(getCustomerOrderRoute, async (c) => {
-        const actor = c.get("actor");
-        const id = c.req.param("idOrNumber");
-        const customerActor = await resolveCustomerActor(actor);
-        if (!customerActor)
-            return c.json({ error: { code: "NOT_FOUND", message: "Customer profile not found." } }, 404);
-        const result = isUUID(id)
-            ? await kernel.services.orders.getById(id, customerActor)
-            : await kernel.services.orders.getByNumber(id, customerActor);
-        if (!result.ok)
-            return c.json({ error: result.error }, mapErrorToStatus(result.error));
-        return c.json({ data: result.value });
-    });
-    // @ts-expect-error -- openapi handler union return type
-    router.openapi(getOrderTrackingRoute, async (c) => {
-        const actor = c.get("actor");
-        const id = c.req.param("idOrNumber");
-        const customerActor = await resolveCustomerActor(actor);
-        if (!customerActor)
-            return c.json({ error: { code: "NOT_FOUND", message: "Customer profile not found." } }, 404);
-        const orderResult = isUUID(id)
-            ? await kernel.services.orders.getById(id, customerActor)
-            : await kernel.services.orders.getByNumber(id, customerActor);
-        if (!orderResult.ok) {
-            return c.json({ error: orderResult.error }, mapErrorToStatus(orderResult.error));
-        }
-        const fulfillments = await kernel.services.fulfillment.getByOrderId(orderResult.value.id);
-        if (!fulfillments.ok)
-            return c.json({ error: fulfillments.error }, 500);
-        return c.json({
-            data: fulfillments.value.map((item) => ({
-                fulfillmentId: item.id,
-                status: item.status,
-                carrier: item.carrier ?? null,
-                trackingNumber: item.trackingNumber ?? null,
-                trackingUrl: item.trackingUrl ?? null,
-                estimatedDelivery: item.estimatedDelivery ?? null,
-                shippedAt: item.shippedAt ?? null,
-                deliveredAt: item.deliveredAt ?? null,
-                lineItems: item.lineItems,
-            })),
-        });
-    });
-    // @ts-expect-error -- openapi handler union return type
-    router.openapi(getOrderDownloadsRoute, async (c) => {
-        const actor = c.get("actor");
-        const customerActor = await resolveCustomerActor(actor);
-        if (!customerActor)
-            return c.json({ error: { code: "NOT_FOUND", message: "Customer profile not found." } }, 404);
-        const orderResult = await kernel.services.orders.getById(c.req.param("orderId"), customerActor);
-        if (!orderResult.ok) {
-            return c.json({ error: orderResult.error }, mapErrorToStatus(orderResult.error));
-        }
-        const digitalItems = orderResult.value.lineItems.filter((lineItem) => lineItem.entityType === "digitalDownload");
-        const downloads = await Promise.all(digitalItems.map(async (lineItem) => {
-            const result = await kernel.services.fulfillment.getDownloadUrl(orderResult.value.id, lineItem.id, actor.userId, actor);
-            return {
-                lineItemId: lineItem.id,
-                title: lineItem.title,
-                downloadUrl: result.ok ? result.value.url : null,
-                downloadsRemaining: result.ok ? result.value.remaining : 0,
-                expiresAt: result.ok ? result.value.expiresAt : null,
-            };
-        }));
-        return c.json({ data: downloads });
-    });
-    // @ts-expect-error -- openapi handler union return type
-    router.openapi(listCoursesRoute, async (c) => {
-        const actor = c.get("actor");
-        const result = await kernel.services.fulfillment.getDigitalAccess(actor.userId, "course");
-        if (!result.ok)
-            return c.json({ error: result.error }, 500);
-        return c.json({
-            data: result.value.map((item) => ({
-                entityId: item.entityId,
-                title: item.title,
-                accessGrantedAt: item.grantedAt,
-                accessExpiresAt: item.expiresAt,
-                isActive: item.isActive,
-                orderId: item.orderId,
-            })),
-        });
-    });
-    // @ts-expect-error -- openapi handler union return type
-    router.openapi(reorderRoute, async (c) => {
-        const actor = c.get("actor");
-        const customerActor = await resolveCustomerActor(actor);
-        if (!customerActor)
-            return c.json({ error: { code: "NOT_FOUND", message: "Customer profile not found." } }, 404);
-        const orderResult = await kernel.services.orders.getById(c.req.param("orderId"), customerActor);
-        if (!orderResult.ok) {
-            return c.json({ error: orderResult.error }, mapErrorToStatus(orderResult.error));
-        }
-        const cartResult = await kernel.services.cart.create({
-            customerId: actor.userId,
-            currency: orderResult.value.currency,
-        }, actor);
-        if (!cartResult.ok)
-            return c.json({ error: cartResult.error }, 500);
-        const addResults = await Promise.all(orderResult.value.lineItems.map((lineItem) => kernel.services.cart.addItem({
-            cartId: cartResult.value.id,
-            entityId: lineItem.entityId,
-            quantity: lineItem.quantity,
-            unitPriceSnapshot: lineItem.unitPrice,
-            currency: orderResult.value.currency,
-            ...(lineItem.variantId != null
-                ? { variantId: lineItem.variantId }
-                : {}),
-        }, actor)));
-        const failures = addResults
-            .map((item, index) => item.ok
-            ? null
-            : {
-                item: orderResult.value.lineItems[index]?.title ?? "unknown",
-                reason: item.error.message,
-            })
-            .filter(Boolean);
-        return c.json({
-            data: {
-                cartId: cartResult.value.id,
-                itemsAdded: addResults.filter((item) => item.ok).length,
-                itemsFailed: failures,
-            },
-        }, 201);
-    });
-    return router;
-}

package/dist/interfaces/rest/router.d.ts

@@ -1,164 +0,0 @@
-/**
- * Type-safe route builder for UnifiedCommerce plugins.
- *
- * Wraps @hono/zod-openapi's createRoute() with sensible defaults:
- * - /api prefix prepended automatically
- * - Error responses (400, 401, 403, 404, 422) injected
- * - Path params auto-detected from {id} patterns
- * - POST defaults to 201, others to 200
- * - .auth() enforces login, .permission() enforces specific scope
- * - Handler receives { input, params, query, actor, services, db, logger }
- * - Return value auto-wrapped in { data: result }
- * - Errors auto-caught and mapped to { error: { code, message } }
- *
- * @example
- * ```typescript
- * import { router, z } from "@unifiedcommerce/core";
- *
- * const vendors = router("Vendors", "/marketplace/vendors");
- *
- * vendors.get("/").summary("List").auth().handler(async ({ actor, services }) => {
- *   return services.vendor.list();
- * });
- *
- * vendors.post("/").summary("Create").permission("marketplace:admin").input(Schema)
- *   .handler(async ({ input, services }) => services.vendor.create(input));
- * ```
- */
-import { z } from "@hono/zod-openapi";
-import type { PluginRouteRegistration } from "../../kernel/plugin/manifest.js";
-export interface RouteHandlerContext {
-    /** Validated request body (from .input()). Undefined if no .input() was called. */
-    input: unknown;
-    /** Validated query parameters (from .query()). Empty object if no .query(). */
-    query: Record<string, unknown>;
-    /** Path parameters, auto-extracted from {id} segments. */
-    params: Record<string, string>;
-    /** Authenticated actor. Guaranteed non-null if .auth() or .permission() was called. */
-    actor: {
-        userId: string;
-        role: string;
-        permissions: string[];
-        vendorId?: string | null;
-        [key: string]: unknown;
-    } | null;
-    /** Resolved organization ID. Derived from actor.organizationId, falls back to DEFAULT_ORG_ID. */
-    orgId: string;
-    /** Kernel services (orders, cart, inventory, etc.) */
-    services: Record<string, unknown>;
-    /** Drizzle database instance */
-    db: unknown;
-    /** Per-request structured logger */
-    logger: unknown;
-    /** Request ID */
-    requestId: string;
-    /** Raw Hono context (escape hatch) */
-    raw: unknown;
-}
-declare class RouteChain {
-    private method;
-    private fullPath;
-    private tag;
-    private routesList;
-    private pluginCtx?;
-    private _summary;
-    private _description;
-    private _input;
-    private _query;
-    private _params;
-    private _requireAuth;
-    private _requiredPermission;
-    constructor(method: string, fullPath: string, tag: string, routesList: PluginRouteRegistration[], pluginCtx?: {
-        services: Record<string, unknown>;
-        db: unknown;
-    } | undefined);
-    /** Set the OpenAPI summary for this route. */
-    summary(text: string): this;
-    /** Set the OpenAPI description for this route. */
-    description(text: string): this;
-    /** Set the request body schema. Only for POST/PATCH/PUT. */
-    input(schema: z.ZodType): this;
-    /** Set the query parameter schema. */
-    query(schema: z.ZodType): this;
-    /** Override the auto-detected path parameter schema. */
-    params(schema: z.ZodType): this;
-    /**
-     * Require authentication. The handler's `actor` is guaranteed non-null.
-     * Returns 401 if the request has no authenticated actor.
-     */
-    auth(): this;
-    /**
-     * Require a specific permission scope. Implies .auth().
-     * Returns 401 if not authenticated, 403 if the actor lacks the permission.
-     *
-     * Permission scopes should be declared in the plugin's `permissions` manifest.
-     * The wildcard `*:*` always passes.
-     *
-     * @example
-     * ```typescript
-     * vendors.post("/").permission("marketplace:admin").handler(...)
-     * wishlist.post("/").permission("wishlist:write").handler(...)
-     * ```
-     */
-    permission(scope: string): this;
-    /**
-     * Register the handler for this route.
-     *
-     * The handler receives a context object with typed input, params, query,
-     * actor, services, and db. Return data is auto-wrapped in { data: result }.
-     * Thrown errors are auto-caught and mapped to { error: { code, message } }.
-     */
-    handler(fn: (ctx: RouteHandlerContext) => Promise<unknown>): void;
-}
-declare class RouterImpl {
-    private tag;
-    private _routes;
-    private _prefix;
-    private _pluginCtx;
-    constructor(tag: string, prefix: string, pluginCtx?: {
-        services?: Record<string, unknown>;
-        database?: {
-            db: unknown;
-        };
-    });
-    /** @internal — used by RouteChain to wire plugin context into handlers */
-    get pluginContext(): {
-        services: Record<string, unknown>;
-        db: unknown;
-    } | undefined;
-    private resolvePath;
-    get(path: string): RouteChain;
-    post(path: string): RouteChain;
-    patch(path: string): RouteChain;
-    delete(path: string): RouteChain;
-    put(path: string): RouteChain;
-    /** Returns all registered routes as PluginRouteRegistration[] */
-    routes(): PluginRouteRegistration[];
-}
-/**
- * Create a typed route group for plugin routes.
- *
- * @param tag — OpenAPI tag for Swagger UI grouping
- * @param prefix — Path prefix without /api (e.g., "/marketplace/vendors"). /api is prepended automatically.
- * @param ctx — Optional PluginContext. When provided, handler receives { services, db } from the plugin.
- *
- * @example
- * ```typescript
- * // In plugin routes callback:
- * routes: (ctx) => {
- *   const r = router("Vendors", "/marketplace/vendors", ctx);
- *   r.get("/").summary("List").handler(async ({ services }) => {
- *     return (services as VendorServices).vendor.list();
- *   });
- *   return r.routes();
- * }
- * ```
- */
-export declare function router(tag: string, prefix: string, ctx?: {
-    services?: Record<string, unknown>;
-    database?: {
-        db: unknown;
-    };
-}): RouterImpl;
-export {};
-//# sourceMappingURL=router.d.ts.map

package/dist/interfaces/rest/router.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../../src/interfaces/rest/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAe,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAGnD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAwB/E,MAAM,WAAW,mBAAmB;IAClC,mFAAmF;IACnF,KAAK,EAAE,OAAO,CAAC;IACf,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,uFAAuF;IACvF,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACxH,iGAAiG;IACjG,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,gCAAgC;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,oCAAoC;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,GAAG,EAAE,OAAO,CAAC;CACd;AAID,cAAM,UAAU;IASZ,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,SAAS,CAAC;IAZpB,OAAO,CAAC,QAAQ,CAAM;IACtB,OAAO,CAAC,YAAY,CAAM;IAC1B,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,mBAAmB,CAAqB;gBAEtC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,uBAAuB,EAAE,EACrC,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,YAAA;IAUxE,8CAA8C;IAC9C,OAAO,CAAC,IAAI,EAAE,MAAM;IAEpB,kDAAkD;IAClD,WAAW,CAAC,IAAI,EAAE,MAAM;IAExB,4DAA4D;IAC5D,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO;IAEvB,sCAAsC;IACtC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO;IAEvB,wDAAwD;IACxD,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO;IAExB;;;OAGG;IACH,IAAI;IAEJ;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM;IAMxB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,mBAAmB,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI;CAkHlE;AAID,cAAM,UAAU;IAMZ,OAAO,CAAC,GAAG;IALb,OAAO,CAAC,OAAO,CAAiC;IAChD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAAiE;gBAGzE,GAAG,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,QAAQ,CAAC,EAAE;YAAE,EAAE,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE;IAgBhF,0EAA0E;IAC1E,IAAI,aAAa;kBAtBe,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;YAAM,OAAO;kBAsBrB;IAE/C,OAAO,CAAC,WAAW;IAMnB,GAAG,CAAC,IAAI,EAAE,MAAM;IAChB,IAAI,CAAC,IAAI,EAAE,MAAM;IACjB,KAAK,CAAC,IAAI,EAAE,MAAM;IAClB,MAAM,CAAC,IAAI,EAAE,MAAM;IACnB,GAAG,CAAC,IAAI,EAAE,MAAM;IAEhB,iEAAiE;IACjE,MAAM,IAAI,uBAAuB,EAAE;CACpC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GAAG,UAAU,CAExI"}

package/dist/interfaces/rest/router.js

@@ -1,259 +0,0 @@
-/**
- * Type-safe route builder for UnifiedCommerce plugins.
- *
- * Wraps @hono/zod-openapi's createRoute() with sensible defaults:
- * - /api prefix prepended automatically
- * - Error responses (400, 401, 403, 404, 422) injected
- * - Path params auto-detected from {id} patterns
- * - POST defaults to 201, others to 200
- * - .auth() enforces login, .permission() enforces specific scope
- * - Handler receives { input, params, query, actor, services, db, logger }
- * - Return value auto-wrapped in { data: result }
- * - Errors auto-caught and mapped to { error: { code, message } }
- *
- * @example
- * ```typescript
- * import { router, z } from "@unifiedcommerce/core";
- *
- * const vendors = router("Vendors", "/marketplace/vendors");
- *
- * vendors.get("/").summary("List").auth().handler(async ({ actor, services }) => {
- *   return services.vendor.list();
- * });
- *
- * vendors.post("/").summary("Create").permission("marketplace:admin").input(Schema)
- *   .handler(async ({ input, services }) => services.vendor.create(input));
- * ```
- */
-import { createRoute, z } from "@hono/zod-openapi";
-import { ErrorSchema } from "./schemas/shared.js";
-import { mapErrorToResponse, mapErrorToStatus } from "./utils.js";
-import { createScopedDb } from "../../kernel/database/scoped-db.js";
-import { resolveOrgId } from "../../auth/org.js";
-// ─── Shared OpenAPI Error Responses ──────────────────────────────────────────
-const errorResponses = {
-    400: { content: { "application/json": { schema: ErrorSchema } }, description: "Bad request." },
-    401: { content: { "application/json": { schema: ErrorSchema } }, description: "Unauthorized." },
-    403: { content: { "application/json": { schema: ErrorSchema } }, description: "Forbidden." },
-    404: { content: { "application/json": { schema: ErrorSchema } }, description: "Not found." },
-    422: { content: { "application/json": { schema: ErrorSchema } }, description: "Validation error." },
-};
-function wrapJson(schema) {
-    return { content: { "application/json": { schema } }, description: "Success" };
-}
-function extractPathParams(path) {
-    return [...path.matchAll(/\{(\w+)\}/g)].map((m) => m[1]);
-}
-// ─── Route Chain ─────────────────────────────────────────────────────────────
-class RouteChain {
-    method;
-    fullPath;
-    tag;
-    routesList;
-    pluginCtx;
-    _summary = "";
-    _description = "";
-    _input;
-    _query;
-    _params;
-    _requireAuth = false;
-    _requiredPermission;
-    constructor(method, fullPath, tag, routesList, pluginCtx) {
-        this.method = method;
-        this.fullPath = fullPath;
-        this.tag = tag;
-        this.routesList = routesList;
-        this.pluginCtx = pluginCtx;
-        const paramNames = extractPathParams(fullPath);
-        if (paramNames.length > 0) {
-            this._params = z.object(Object.fromEntries(paramNames.map((n) => [n, z.uuid()])));
-        }
-    }
-    /** Set the OpenAPI summary for this route. */
-    summary(text) { this._summary = text; return this; }
-    /** Set the OpenAPI description for this route. */
-    description(text) { this._description = text; return this; }
-    /** Set the request body schema. Only for POST/PATCH/PUT. */
-    input(schema) { this._input = schema; return this; }
-    /** Set the query parameter schema. */
-    query(schema) { this._query = schema; return this; }
-    /** Override the auto-detected path parameter schema. */
-    params(schema) { this._params = schema; return this; }
-    /**
-     * Require authentication. The handler's `actor` is guaranteed non-null.
-     * Returns 401 if the request has no authenticated actor.
-     */
-    auth() { this._requireAuth = true; return this; }
-    /**
-     * Require a specific permission scope. Implies .auth().
-     * Returns 401 if not authenticated, 403 if the actor lacks the permission.
-     *
-     * Permission scopes should be declared in the plugin's `permissions` manifest.
-     * The wildcard `*:*` always passes.
-     *
-     * @example
-     * ```typescript
-     * vendors.post("/").permission("marketplace:admin").handler(...)
-     * wishlist.post("/").permission("wishlist:write").handler(...)
-     * ```
-     */
-    permission(scope) {
-        this._requireAuth = true;
-        this._requiredPermission = scope;
-        return this;
-    }
-    /**
-     * Register the handler for this route.
-     *
-     * The handler receives a context object with typed input, params, query,
-     * actor, services, and db. Return data is auto-wrapped in { data: result }.
-     * Thrown errors are auto-caught and mapped to { error: { code, message } }.
-     */
-    handler(fn) {
-        const request = {};
-        if (this._input)
-            request.body = { ...wrapJson(this._input), required: true };
-        if (this._query)
-            request.query = this._query;
-        if (this._params)
-            request.params = this._params;
-        const status = this.method === "post" ? 201 : 200;
-        const routeConfig = createRoute({
-            method: this.method,
-            path: this.fullPath,
-            tags: [this.tag],
-            summary: this._summary,
-            ...(this._description ? { description: this._description } : {}),
-            ...(Object.keys(request).length > 0 ? { request } : {}),
-            responses: {
-                [status]: wrapJson(z.object({ data: z.any() })),
-                ...errorResponses,
-            },
-        });
-        const inputSchema = this._input;
-        const querySchema = this._query;
-        const pathParams = extractPathParams(this.fullPath);
-        const successStatus = status;
-        const requireAuth = this._requireAuth;
-        const requiredPermission = this._requiredPermission;
-        const pluginCtx = this.pluginCtx;
-        const honoHandler = async (c) => {
-            const ctx = c;
-            try {
-                // ─── Auth + Permission Check ─────────────────────────────────
-                // .permission() implies .auth() — both are enforced here.
-                // Order: auth first (401), then permission (403).
-                const actor = ctx.get("actor");
-                if ((requireAuth || requiredPermission) && !actor) {
-                    return ctx.json({ error: { code: "UNAUTHORIZED", message: "Authentication required." } }, 401);
-                }
-                if (requiredPermission) {
-                    const perms = actor?.permissions ?? [];
-                    if (!perms.includes(requiredPermission) && !perms.includes("*:*")) {
-                        return ctx.json({
-                            error: { code: "FORBIDDEN", message: `Permission '${requiredPermission}' is required.` },
-                        }, 403);
-                    }
-                }
-                // ─── Extract context ─────────────────────────────────────────
-                const params = {};
-                for (const name of pathParams) {
-                    params[name] = ctx.req.param(name);
-                }
-                // Use plugin context if provided (plugin routes), fallback to kernel on Hono context (core routes)
-                const kernel = pluginCtx ?? ctx.get("kernel");
-                // Scope the database to the actor's organization.
-                // Plugin route handlers receive a db that auto-filters queries
-                // and auto-stamps inserts with the actor's organizationId.
-                const rawDb = kernel?.db;
-                const orgId = resolveOrgId(actor);
-                const scopedDb = rawDb ? createScopedDb(rawDb, orgId) : rawDb;
-                const handlerCtx = {
-                    input: inputSchema ? ctx.req.valid("json") : undefined,
-                    query: querySchema ? ctx.req.valid("query") : {},
-                    params,
-                    actor,
-                    orgId,
-                    services: kernel?.services ?? {},
-                    db: scopedDb,
-                    logger: ctx.get("logger"),
-                    requestId: ctx.get("requestId") ?? "",
-                    raw: c,
-                };
-                const result = await fn(handlerCtx);
-                if (result === undefined || result === null) {
-                    return ctx.json({ data: null }, successStatus);
-                }
-                return ctx.json({ data: result }, successStatus);
-            }
-            catch (error) {
-                try {
-                    return ctx.json(mapErrorToResponse(error), mapErrorToStatus(error));
-                }
-                catch {
-                    // Fallback if mapErrorToResponse/mapErrorToStatus themselves throw
-                    return ctx.json({ error: { code: "INTERNAL_ERROR", message: "An unexpected error occurred." } }, 500);
-                }
-            }
-        };
-        this.routesList.push({ openapi: routeConfig, handler: honoHandler });
-    }
-}
-// ─── Router ──────────────────────────────────────────────────────────────────
-class RouterImpl {
-    tag;
-    _routes = [];
-    _prefix;
-    _pluginCtx;
-    constructor(tag, prefix, pluginCtx) {
-        this.tag = tag;
-        // Normalize: ensure /api prefix, strip trailing slash
-        let p = prefix.startsWith("/api") ? prefix : `/api${prefix}`;
-        p = p.replace(/\/+$/, ""); // remove trailing slashes
-        this._prefix = p;
-        // If plugin context is provided, wire services + db for handler access
-        if (pluginCtx) {
-            this._pluginCtx = {
-                services: pluginCtx.services ?? {},
-                db: pluginCtx.database?.db,
-            };
-        }
-    }
-    /** @internal — used by RouteChain to wire plugin context into handlers */
-    get pluginContext() { return this._pluginCtx; }
-    resolvePath(path) {
-        // "/" means "the resource root" → just the prefix, no trailing slash
-        if (path === "/")
-            return this._prefix;
-        return (this._prefix + path).replace(/\/\/+/g, "/");
-    }
-    get(path) { return new RouteChain("get", this.resolvePath(path), this.tag, this._routes, this._pluginCtx); }
-    post(path) { return new RouteChain("post", this.resolvePath(path), this.tag, this._routes, this._pluginCtx); }
-    patch(path) { return new RouteChain("patch", this.resolvePath(path), this.tag, this._routes, this._pluginCtx); }
-    delete(path) { return new RouteChain("delete", this.resolvePath(path), this.tag, this._routes, this._pluginCtx); }
-    put(path) { return new RouteChain("put", this.resolvePath(path), this.tag, this._routes, this._pluginCtx); }
-    /** Returns all registered routes as PluginRouteRegistration[] */
-    routes() { return this._routes; }
-}
-/**
- * Create a typed route group for plugin routes.
- *
- * @param tag — OpenAPI tag for Swagger UI grouping
- * @param prefix — Path prefix without /api (e.g., "/marketplace/vendors"). /api is prepended automatically.
- * @param ctx — Optional PluginContext. When provided, handler receives { services, db } from the plugin.
- *
- * @example
- * ```typescript
- * // In plugin routes callback:
- * routes: (ctx) => {
- *   const r = router("Vendors", "/marketplace/vendors", ctx);
- *   r.get("/").summary("List").handler(async ({ services }) => {
- *     return (services as VendorServices).vendor.list();
- *   });
- *   return r.routes();
- * }
- * ```
- */
-export function router(tag, prefix, ctx) {
-    return new RouterImpl(tag, prefix, ctx);
-}

package/dist/interfaces/rest/routes/admin-jobs.d.ts

@@ -1,5 +0,0 @@
-import { OpenAPIHono } from "@hono/zod-openapi";
-import type { Kernel } from "../../../runtime/kernel.js";
-import { type AppEnv } from "../utils.js";
-export declare function adminJobRoutes(kernel: Kernel): OpenAPIHono<AppEnv, {}, "/">;
-//# sourceMappingURL=admin-jobs.d.ts.map

package/dist/interfaces/rest/routes/admin-jobs.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-jobs.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/admin-jobs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAGzD,OAAO,EAAE,KAAK,MAAM,EAAe,MAAM,aAAa,CAAC;AAKvD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,gCA8C5C"}