@unifiedcommerce/plugin-marketplace 0.0.1

package/dist/routes/b2b.js

@@ -0,0 +1,156 @@
+import { router } from "@unifiedcommerce/core";
+import { CreateRFQBodySchema, RespondRFQBodySchema, AwardRFQBodySchema, CreateContractPriceBodySchema, UpdateContractPriceBodySchema, } from "../schemas/b2b";
+import { stripUndefined } from "./util";
+export function buildB2BRoutes(services, options) {
+    const allRoutes = [];
+    // ═══════════════════════════════════════════════════════════════════════════
+    // RFQ (Request for Quote)
+    // ═══════════════════════════════════════════════════════════════════════════
+    if (services.rfq) {
+        const rfqSvc = services.rfq;
+        const rfq = router("Marketplace - B2B", "/marketplace/rfq");
+        rfq.post("/")
+            .summary("Create a Request for Quote")
+            .auth()
+            .input(CreateRFQBodySchema)
+            .handler(async ({ input }) => {
+            const body = input;
+            return rfqSvc.create(stripUndefined({
+                buyerId: body.buyerId,
+                title: body.title,
+                description: body.description,
+                categorySlug: body.categorySlug,
+                quantity: body.quantity,
+                budgetCents: body.budgetCents,
+                currency: body.currency,
+                deadlineAt: body.deadlineAt ? new Date(body.deadlineAt) : undefined,
+                metadata: body.metadata,
+            }));
+        });
+        rfq.get("/")
+            .summary("List Requests for Quote")
+            .auth()
+            .handler(async ({ query }) => {
+            return rfqSvc.list(stripUndefined({
+                status: query.status,
+                categorySlug: query.categorySlug,
+            }));
+        });
+        rfq.get("/{id}")
+            .summary("Get RFQ detail")
+            .auth()
+            .handler(async ({ params }) => {
+            const item = await rfqSvc.getById(params.id);
+            if (!item)
+                throw new Error("RFQ not found");
+            const responses = await rfqSvc.getResponses(item.id);
+            return { ...item, responses };
+        });
+        rfq.post("/{id}/respond")
+            .summary("Submit a vendor response to an RFQ")
+            .auth()
+            .input(RespondRFQBodySchema)
+            .handler(async ({ params, input }) => {
+            const body = input;
+            const item = await rfqSvc.getById(params.id);
+            if (!item)
+                throw new Error("RFQ not found");
+            return rfqSvc.respond(item.id, stripUndefined({
+                vendorId: body.vendorId,
+                unitPriceCents: body.unitPriceCents,
+                totalPriceCents: body.totalPriceCents,
+                leadTimeDays: body.leadTimeDays,
+                notes: body.notes,
+            }));
+        });
+        rfq.post("/{id}/award")
+            .summary("Award an RFQ to a vendor")
+            .auth()
+            .permission("marketplace:admin")
+            .input(AwardRFQBodySchema)
+            .handler(async ({ params, input }) => {
+            const body = input;
+            const updated = await rfqSvc.award(params.id, body.vendorId);
+            if (!updated)
+                throw new Error("RFQ not found");
+            return updated;
+        });
+        rfq.post("/{id}/close")
+            .summary("Close an RFQ")
+            .auth()
+            .permission("marketplace:admin")
+            .handler(async ({ params }) => {
+            const updated = await rfqSvc.close(params.id);
+            if (!updated)
+                throw new Error("RFQ not found");
+            return updated;
+        });
+        allRoutes.push(...rfq.routes());
+    }
+    // ═══════════════════════════════════════════════════════════════════════════
+    // CONTRACT PRICES
+    // ═══════════════════════════════════════════════════════════════════════════
+    if (services.contractPrice) {
+        const cpSvc = services.contractPrice;
+        const cp = router("Marketplace - B2B", "/marketplace/contract-prices");
+        cp.get("/")
+            .summary("List contract prices")
+            .auth()
+            .handler(async ({ query }) => {
+            return cpSvc.list(stripUndefined({
+                vendorId: query.vendorId,
+                buyerId: query.buyerId,
+            }));
+        });
+        cp.post("/")
+            .summary("Create a contract price")
+            .auth()
+            .permission("marketplace:admin")
+            .input(CreateContractPriceBodySchema)
+            .handler(async ({ input }) => {
+            const body = input;
+            return cpSvc.create(stripUndefined({
+                vendorId: body.vendorId,
+                buyerId: body.buyerId,
+                entityId: body.entityId,
+                variantId: body.variantId,
+                priceCents: body.priceCents,
+                minQuantity: body.minQuantity,
+                currency: body.currency,
+                validFrom: body.validFrom ? new Date(body.validFrom) : undefined,
+                validUntil: body.validUntil ? new Date(body.validUntil) : undefined,
+            }));
+        });
+        cp.patch("/{id}")
+            .summary("Update a contract price")
+            .auth()
+            .permission("marketplace:admin")
+            .input(UpdateContractPriceBodySchema)
+            .handler(async ({ params, input }) => {
+            const body = input;
+            const updateData = {};
+            if (body.priceCents !== undefined)
+                updateData.priceCents = body.priceCents;
+            if (body.minQuantity !== undefined)
+                updateData.minQuantity = body.minQuantity;
+            if (body.validFrom !== undefined)
+                updateData.validFrom = body.validFrom ? new Date(body.validFrom) : null;
+            if (body.validUntil !== undefined)
+                updateData.validUntil = body.validUntil ? new Date(body.validUntil) : null;
+            const updated = await cpSvc.update(params.id, updateData);
+            if (!updated)
+                throw new Error("Contract price not found");
+            return updated;
+        });
+        cp.delete("/{id}")
+            .summary("Delete a contract price")
+            .auth()
+            .permission("marketplace:admin")
+            .handler(async ({ params }) => {
+            await cpSvc.delete(params.id);
+            return { deleted: true };
+        });
+        allRoutes.push(...cp.routes());
+    }
+    return allRoutes;
+}

package/dist/routes/commission.d.ts

@@ -0,0 +1,6 @@
+import type { PluginRouteRegistration } from "@unifiedcommerce/core";
+import type { CommissionService } from "../services/commission";
+export declare function buildCommissionRoutes(services: {
+    commission: CommissionService;
+}): PluginRouteRegistration[];
+//# sourceMappingURL=commission.d.ts.map

package/dist/routes/commission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commission.d.ts","sourceRoot":"","sources":["../../src/routes/commission.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAErE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAQhE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE;IAC9C,UAAU,EAAE,iBAAiB,CAAC;CAC/B,GAAG,uBAAuB,EAAE,CAiF5B"}

package/dist/routes/commission.js

@@ -0,0 +1,85 @@
+import { router } from "@unifiedcommerce/core";
+import { CreateCommissionRuleBodySchema, UpdateCommissionRuleBodySchema, PreviewCommissionBodySchema, } from "../schemas/commission";
+import { stripUndefined } from "./util";
+export function buildCommissionRoutes(services) {
+    const r = router("Marketplace - Commission", "/marketplace/commission-rules");
+    // ─── List commission rules ─────────────────────────────────────────────────
+    r.get("/")
+        .summary("List all commission rules")
+        .permission("marketplace:admin")
+        .handler(async () => {
+        return services.commission.listRules();
+    });
+    // ─── Create commission rule ────────────────────────────────────────────────
+    r.post("/")
+        .summary("Create a commission rule")
+        .permission("marketplace:admin")
+        .input(CreateCommissionRuleBodySchema)
+        .handler(async ({ input }) => {
+        const body = input;
+        return services.commission.createRule(stripUndefined({
+            name: body.name,
+            type: body.type,
+            rateBps: body.rateBps,
+            categorySlug: body.categorySlug,
+            vendorId: body.vendorId,
+            vendorTier: body.vendorTier,
+            minVolumeCents: body.minVolumeCents,
+            maxVolumeCents: body.maxVolumeCents,
+            validFrom: body.validFrom ? new Date(body.validFrom) : undefined,
+            validUntil: body.validUntil ? new Date(body.validUntil) : undefined,
+            priority: body.priority,
+        }));
+    });
+    // ─── Update commission rule ────────────────────────────────────────────────
+    r.patch("/{id}")
+        .summary("Update a commission rule")
+        .permission("marketplace:admin")
+        .input(UpdateCommissionRuleBodySchema)
+        .handler(async ({ params, input }) => {
+        const body = input;
+        const updateData = {};
+        if (body.name !== undefined)
+            updateData.name = body.name;
+        if (body.rateBps !== undefined)
+            updateData.rateBps = body.rateBps;
+        if (body.categorySlug !== undefined)
+            updateData.categorySlug = body.categorySlug;
+        if (body.vendorTier !== undefined)
+            updateData.vendorTier = body.vendorTier;
+        if (body.minVolumeCents !== undefined)
+            updateData.minVolumeCents = body.minVolumeCents;
+        if (body.maxVolumeCents !== undefined)
+            updateData.maxVolumeCents = body.maxVolumeCents;
+        if (body.validFrom !== undefined)
+            updateData.validFrom = body.validFrom ? new Date(body.validFrom) : null;
+        if (body.validUntil !== undefined)
+            updateData.validUntil = body.validUntil ? new Date(body.validUntil) : null;
+        if (body.priority !== undefined)
+            updateData.priority = body.priority;
+        if (body.isActive !== undefined)
+            updateData.isActive = body.isActive;
+        const updated = await services.commission.updateRule(params.id, updateData);
+        if (!updated)
+            throw new Error("Commission rule not found");
+        return updated;
+    });
+    // ─── Delete commission rule ────────────────────────────────────────────────
+    r.delete("/{id}")
+        .summary("Delete a commission rule")
+        .permission("marketplace:admin")
+        .handler(async ({ params }) => {
+        await services.commission.deleteRule(params.id);
+        return { deleted: true };
+    });
+    // ─── Preview commission rate ───────────────────────────────────────────────
+    r.post("/preview")
+        .summary("Preview the commission rate for a vendor")
+        .permission("marketplace:admin")
+        .input(PreviewCommissionBodySchema)
+        .handler(async ({ input }) => {
+        const body = input;
+        return services.commission.previewRate(body.vendorId, body.categorySlug, body.volumeCents);
+    });
+    return r.routes();
+}

package/dist/routes/disputes-returns-reviews.d.ts

@@ -0,0 +1,10 @@
+import type { PluginRouteRegistration } from "@unifiedcommerce/core";
+import type { DisputeService } from "../services/dispute";
+import type { ReturnService } from "../services/return";
+import type { ReviewService } from "../services/review";
+export declare function buildDisputesReturnsReviewsRoutes(services: {
+    dispute: DisputeService;
+    return: ReturnService;
+    review: ReviewService;
+}): PluginRouteRegistration[];
+//# sourceMappingURL=disputes-returns-reviews.d.ts.map

package/dist/routes/disputes-returns-reviews.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disputes-returns-reviews.d.ts","sourceRoot":"","sources":["../../src/routes/disputes-returns-reviews.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAErE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAaxD,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE;IAC1D,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;CACvB,GAAG,uBAAuB,EAAE,CA0L5B"}

package/dist/routes/disputes-returns-reviews.js

@@ -0,0 +1,179 @@
+import { router } from "@unifiedcommerce/core";
+import { OpenDisputeBodySchema, RespondDisputeBodySchema, ResolveDisputeBodySchema, RequestReturnBodySchema, ShipBackReturnBodySchema, CreateReviewBodySchema, ModerateReviewBodySchema, } from "../schemas/disputes-returns-reviews";
+import { stripUndefined } from "./util";
+export function buildDisputesReturnsReviewsRoutes(services) {
+    // ═══════════════════════════════════════════════════════════════════════════
+    // DISPUTES
+    // ═══════════════════════════════════════════════════════════════════════════
+    const disputes = router("Marketplace - Disputes", "/marketplace/disputes");
+    disputes.post("/")
+        .summary("Open a dispute")
+        .auth()
+        .input(OpenDisputeBodySchema)
+        .handler(async ({ input }) => {
+        const body = input;
+        return services.dispute.open(stripUndefined({
+            subOrderId: body.subOrderId,
+            openedBy: body.openedBy,
+            reason: body.reason,
+            description: body.description,
+        }));
+    });
+    disputes.get("/")
+        .summary("List disputes")
+        .auth()
+        .handler(async ({ query }) => {
+        return services.dispute.list(stripUndefined({
+            status: query.status,
+            subOrderId: query.subOrderId,
+        }));
+    });
+    disputes.get("/{id}")
+        .summary("Get dispute by ID")
+        .auth()
+        .handler(async ({ params }) => {
+        const dispute = await services.dispute.getById(params.id);
+        if (!dispute)
+            throw new Error("Dispute not found");
+        return dispute;
+    });
+    disputes.post("/{id}/respond")
+        .summary("Respond to a dispute")
+        .auth()
+        .input(RespondDisputeBodySchema)
+        .handler(async ({ params, input }) => {
+        const body = input;
+        return services.dispute.respond(params.id, stripUndefined({
+            party: body.party,
+            note: body.note,
+            url: body.url,
+        }));
+    });
+    disputes.post("/{id}/escalate")
+        .summary("Escalate a dispute")
+        .auth()
+        .permission("marketplace:admin")
+        .handler(async ({ params }) => {
+        const updated = await services.dispute.escalate(params.id);
+        if (!updated)
+            throw new Error("Dispute not found");
+        return updated;
+    });
+    disputes.post("/{id}/resolve")
+        .summary("Resolve a dispute")
+        .auth()
+        .permission("marketplace:admin")
+        .input(ResolveDisputeBodySchema)
+        .handler(async ({ params, input }) => {
+        const body = input;
+        const updated = await services.dispute.resolve(params.id, stripUndefined({
+            resolution: body.resolution,
+            notes: body.notes,
+            refundAmountCents: body.refundAmountCents,
+            resolvedBy: body.resolvedBy,
+        }));
+        if (!updated)
+            throw new Error("Dispute not found");
+        return updated;
+    });
+    // ═══════════════════════════════════════════════════════════════════════════
+    // RETURNS
+    // ═══════════════════════════════════════════════════════════════════════════
+    const returns = router("Marketplace - Returns", "/marketplace/returns");
+    returns.post("/")
+        .summary("Request a return")
+        .auth()
+        .input(RequestReturnBodySchema)
+        .handler(async ({ input }) => {
+        const body = input;
+        return services.return.request(stripUndefined({
+            subOrderId: body.subOrderId,
+            customerId: body.customerId,
+            reason: body.reason,
+            description: body.description,
+            lineItems: body.lineItems,
+        }));
+    });
+    returns.get("/")
+        .summary("List returns")
+        .auth()
+        .handler(async ({ query }) => {
+        return services.return.list(stripUndefined({
+            subOrderId: query.subOrderId,
+            status: query.status,
+        }));
+    });
+    returns.get("/{id}")
+        .summary("Get return by ID")
+        .auth()
+        .handler(async ({ params }) => {
+        const ret = await services.return.getById(params.id);
+        if (!ret)
+            throw new Error("Return not found");
+        return ret;
+    });
+    returns.post("/{id}/ship-back")
+        .summary("Ship back a return")
+        .auth()
+        .input(ShipBackReturnBodySchema)
+        .handler(async ({ params, input }) => {
+        const body = input;
+        const updated = await services.return.shipBack(params.id, body.trackingNumber);
+        if (!updated)
+            throw new Error("Return not found");
+        return updated;
+    });
+    returns.post("/{id}/receive")
+        .summary("Mark a return as received")
+        .auth()
+        .handler(async ({ params }) => {
+        const updated = await services.return.receive(params.id);
+        if (!updated)
+            throw new Error("Return not found");
+        return updated;
+    });
+    // ═══════════════════════════════════════════════════════════════════════════
+    // REVIEWS
+    // ═══════════════════════════════════════════════════════════════════════════
+    const vendorReviews = router("Marketplace - Reviews", "/marketplace/vendors");
+    vendorReviews.post("/{id}/reviews")
+        .summary("Create a vendor review")
+        .auth()
+        .input(CreateReviewBodySchema)
+        .handler(async ({ params, input }) => {
+        const body = input;
+        return services.review.create(stripUndefined({
+            vendorId: params.id,
+            customerId: body.customerId,
+            orderId: body.orderId,
+            rating: body.rating,
+            title: body.title,
+            body: body.body,
+        }));
+    });
+    vendorReviews.get("/{id}/reviews")
+        .summary("List reviews for a vendor")
+        .auth()
+        .handler(async ({ params }) => {
+        return services.review.getForVendor(params.id);
+    });
+    const reviewsMod = router("Marketplace - Reviews", "/marketplace/reviews");
+    reviewsMod.patch("/{id}")
+        .summary("Moderate a review (update status)")
+        .auth()
+        .permission("marketplace:admin")
+        .input(ModerateReviewBodySchema)
+        .handler(async ({ params, input }) => {
+        const body = input;
+        const updated = await services.review.moderate(params.id, body.status);
+        if (!updated)
+            throw new Error("Review not found");
+        return updated;
+    });
+    return [
+        ...disputes.routes(),
+        ...returns.routes(),
+        ...vendorReviews.routes(),
+        ...reviewsMod.routes(),
+    ];
+}

package/dist/routes/payouts.d.ts

@@ -0,0 +1,6 @@
+import type { PluginRouteRegistration } from "@unifiedcommerce/core";
+import type { PayoutService } from "../services/payout";
+export declare function buildPayoutRoutes(services: {
+    payout: PayoutService;
+}): PluginRouteRegistration[];
+//# sourceMappingURL=payouts.d.ts.map

package/dist/routes/payouts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payouts.d.ts","sourceRoot":"","sources":["../../src/routes/payouts.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGxD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,aAAa,CAAC;CACvB,GAAG,uBAAuB,EAAE,CAyC5B"}

package/dist/routes/payouts.js

@@ -0,0 +1,40 @@
+import { router } from "@unifiedcommerce/core";
+import { stripUndefined } from "./util";
+export function buildPayoutRoutes(services) {
+    const r = router("Marketplace - Payouts", "/marketplace/payouts");
+    // ─── List payouts ──────────────────────────────────────────────────────────
+    r.get("/")
+        .summary("List payouts")
+        .permission("marketplace:admin")
+        .handler(async ({ query }) => {
+        return services.payout.listPayouts(stripUndefined({
+            vendorId: query.vendorId,
+            status: query.status,
+        }));
+    });
+    // ─── Run payout cycle ──────────────────────────────────────────────────────
+    r.post("/run")
+        .summary("Run a payout cycle")
+        .permission("marketplace:admin")
+        .handler(async () => {
+        return services.payout.runPayoutCycle();
+    });
+    // ─── Retry payout ──────────────────────────────────────────────────────────
+    r.post("/{id}/retry")
+        .summary("Retry a failed payout")
+        .permission("marketplace:admin")
+        .handler(async ({ params }) => {
+        return services.payout.retryPayout(params.id);
+    });
+    // ─── Get payout by id ──────────────────────────────────────────────────────
+    r.get("/{id}")
+        .summary("Get payout by ID")
+        .permission("marketplace:admin")
+        .handler(async ({ params }) => {
+        const payout = await services.payout.getPayoutById(params.id);
+        if (!payout)
+            throw new Error("Payout not found");
+        return payout;
+    });
+    return r.routes();
+}

package/dist/routes/sub-orders.d.ts

@@ -0,0 +1,6 @@
+import type { PluginRouteRegistration } from "@unifiedcommerce/core";
+import type { SubOrderService } from "../services/sub-order";
+export declare function buildSubOrderRoutes(services: {
+    subOrder: SubOrderService;
+}): PluginRouteRegistration[];
+//# sourceMappingURL=sub-orders.d.ts.map

package/dist/routes/sub-orders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sub-orders.d.ts","sourceRoot":"","sources":["../../src/routes/sub-orders.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAErE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAK7D,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,eAAe,CAAC;CAC3B,GAAG,uBAAuB,EAAE,CA2C5B"}

package/dist/routes/sub-orders.js

@@ -0,0 +1,44 @@
+import { router } from "@unifiedcommerce/core";
+import { UpdateSubOrderStatusBodySchema } from "../schemas/sub-orders";
+import { stripUndefined } from "./util";
+export function buildSubOrderRoutes(services) {
+    const r = router("Marketplace - Sub-Orders", "/marketplace/sub-orders");
+    // ─── List sub-orders ───────────────────────────────────────────────────────
+    r.get("/")
+        .summary("List sub-orders")
+        .permission("marketplace:admin")
+        .handler(async ({ query }) => {
+        return services.subOrder.list(stripUndefined({
+            orderId: query.orderId,
+            vendorId: query.vendorId,
+            status: query.status,
+        }));
+    });
+    // ─── Get sub-order by id ───────────────────────────────────────────────────
+    r.get("/{id}")
+        .summary("Get sub-order by ID")
+        .permission("marketplace:admin")
+        .handler(async ({ params }) => {
+        const subOrder = await services.subOrder.getById(params.id);
+        if (!subOrder)
+            throw new Error("Sub-order not found");
+        return subOrder;
+    });
+    // ─── Force status change ───────────────────────────────────────────────────
+    r.patch("/{id}/status")
+        .summary("Force a sub-order status change")
+        .permission("marketplace:admin")
+        .input(UpdateSubOrderStatusBodySchema)
+        .handler(async ({ params, input }) => {
+        const body = input;
+        const subOrder = await services.subOrder.getById(params.id);
+        if (!subOrder)
+            throw new Error("Sub-order not found");
+        // Use cancel() for cancelled status to trigger side effects
+        // (inventory release + ledger reversal)
+        return body.status === "cancelled"
+            ? services.subOrder.cancel(params.id, "Admin force cancel")
+            : services.subOrder.forceStatus(params.id, body.status);
+    });
+    return r.routes();
+}

package/dist/routes/util.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Removes keys whose value is `undefined` from an object, returning a
+ * cleaned copy that satisfies `exactOptionalPropertyTypes`.
+ *
+ * Zod's `.optional()` produces `T | undefined` in inferred types, which
+ * can't be assigned to optional properties under `exactOptionalPropertyTypes`.
+ * This helper strips those `undefined` entries at runtime and casts the
+ * result so TypeScript accepts it.
+ */
+export declare function stripUndefined<T>(obj: T): T extends Record<string, any> ? {
+    [K in keyof T]: Exclude<T[K], undefined>;
+} : T;
+/** Keys that must never be exposed in API responses. */
+declare const VENDOR_SECRET_KEYS: readonly ["storeAccessToken", "storeConsumerSecret", "storeWebhookSecret", "bankAccount"];
+/**
+ * Returns a copy of a vendor record with sensitive fields removed.
+ *
+ * Accepts any object with string keys so it works with both single vendor
+ * rows and Drizzle `InferSelectModel` types without importing the schema.
+ */
+export declare function stripVendorSecrets<T extends Record<string, unknown>>(vendor: T): Omit<T, (typeof VENDOR_SECRET_KEYS)[number]>;
+export {};
+//# sourceMappingURL=util.d.ts.map

package/dist/routes/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../src/routes/util.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,wBAAgB,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;CAAE,GAAG,CAAC,CAS1H;AAED,wDAAwD;AACxD,QAAA,MAAM,kBAAkB,2FAKd,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,CAM7H"}

package/dist/routes/util.js

@@ -0,0 +1,41 @@
+/**
+ * Removes keys whose value is `undefined` from an object, returning a
+ * cleaned copy that satisfies `exactOptionalPropertyTypes`.
+ *
+ * Zod's `.optional()` produces `T | undefined` in inferred types, which
+ * can't be assigned to optional properties under `exactOptionalPropertyTypes`.
+ * This helper strips those `undefined` entries at runtime and casts the
+ * result so TypeScript accepts it.
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+export function stripUndefined(obj) {
+    if (obj == null || typeof obj !== "object")
+        return obj;
+    const result = {};
+    for (const [key, value] of Object.entries(obj)) {
+        if (value !== undefined) {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+/** Keys that must never be exposed in API responses. */
+const VENDOR_SECRET_KEYS = [
+    "storeAccessToken",
+    "storeConsumerSecret",
+    "storeWebhookSecret",
+    "bankAccount",
+];
+/**
+ * Returns a copy of a vendor record with sensitive fields removed.
+ *
+ * Accepts any object with string keys so it works with both single vendor
+ * rows and Drizzle `InferSelectModel` types without importing the schema.
+ */
+export function stripVendorSecrets(vendor) {
+    const copy = { ...vendor };
+    for (const key of VENDOR_SECRET_KEYS) {
+        delete copy[key];
+    }
+    return copy;
+}

package/dist/routes/vendor-portal.d.ts

@@ -0,0 +1,14 @@
+import type { PluginRouteRegistration } from "@unifiedcommerce/core";
+import type { VendorService } from "../services/vendor";
+import type { SubOrderService } from "../services/sub-order";
+import type { PayoutService } from "../services/payout";
+import type { ReviewService } from "../services/review";
+import type { ReturnService } from "../services/return";
+export declare function buildVendorPortalRoutes(services: {
+    vendor: VendorService;
+    subOrder: SubOrderService;
+    payout: PayoutService;
+    review: ReviewService;
+    return: ReturnService;
+}): PluginRouteRegistration[];
+//# sourceMappingURL=vendor-portal.d.ts.map

package/dist/routes/vendor-portal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor-portal.d.ts","sourceRoot":"","sources":["../../src/routes/vendor-portal.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAErE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAqBxD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;CACvB,GAAG,uBAAuB,EAAE,CAkP5B"}