@zaamx/netme-pos 0.0.15 → 0.0.18

package/.medusa/server/src/api/middlewares.js

@@ -38,6 +38,11 @@ const http_1 = require("@medusajs/framework/http");
 const context_middlewares_1 = require("./admin/netme-pos/products/context-middlewares");
 const ProductsQueryConfig = __importStar(require("./admin/netme-pos/products/query-config"));
 const validators_1 = require("./admin/netme-pos/products/validators");
+const guards_1 = require("./store/netme-pos/draft-orders/guards");
+const scope_1 = require("./store/netme-pos/scope");
+const DraftOrdersQueryConfig = __importStar(require("./store/netme-pos/draft-orders/query-config"));
+const DO = __importStar(require("./store/netme-pos/draft-orders/validators"));
+const FV = __importStar(require("./store/netme-pos/fulfillment-validators"));
 /**
  * Middleware chain for the admin product clone of `GET /store/products`.
  *
@@ -57,6 +62,18 @@ const clearContextKeys = (0, http_1.clearFiltersByKey)([
     "customer",
     "stock_location_id",
 ]);
+/**
+ * Store draft-orders for customer agents (docs/store-draft-orders-spec.md §8).
+ *
+ * `/store/*` already gets the publishable-key middleware and a permissive
+ * (`allowUnauthenticated`) customer auth globally; `authStoreCustomer` is the
+ * STRICT version that rejects anonymous requests.
+ *
+ * Entries WITHOUT a `method` are mounted with `app.use(matcher)`, i.e. they
+ * PREFIX-match: the single `:id` entry guards the whole `/:id/**` subtree.
+ */
+const authStoreCustomer = (0, http_1.authenticate)("customer", ["session", "bearer"]);
+const DRAFT_ORDERS_BASE = "/store/netme-pos/draft-orders";
 exports.default = (0, http_1.defineMiddlewares)({
     routes: [
         {
@@ -86,6 +103,156 @@ exports.default = (0, http_1.defineMiddlewares)({
                 clearContextKeys,
             ],
         },
+        // ------------------------------------------------------------------
+        // Store draft-orders (agent) — auth + ownership guard (prefix-mounted)
+        // ------------------------------------------------------------------
+        {
+            matcher: DRAFT_ORDERS_BASE,
+            middlewares: [authStoreCustomer],
+        },
+        {
+            matcher: `${DRAFT_ORDERS_BASE}/:id`,
+            middlewares: [guards_1.ensureDraftOrderAgent],
+        },
+        {
+            matcher: "/store/netme-pos/payment-collections",
+            middlewares: [authStoreCustomer],
+        },
+        // ------------------------------------------------------------------
+        // Store catalog / locations / shipping for the agent — same pricing
+        // engine as /admin/netme-pos/products, scoped to the publishable key.
+        // ------------------------------------------------------------------
+        {
+            method: ["GET"],
+            matcher: "/store/netme-pos/stock-locations",
+            middlewares: [
+                authStoreCustomer,
+                (0, framework_1.validateAndTransformQuery)(FV.StoreGetStockLocationsParams, FV.listStockLocationsQueryConfig),
+            ],
+        },
+        {
+            method: ["GET"],
+            matcher: "/store/netme-pos/shipping-options",
+            middlewares: [
+                authStoreCustomer,
+                (0, framework_1.validateAndTransformQuery)(FV.StoreGetShippingOptionsParams, FV.listShippingOptionsQueryConfig),
+            ],
+        },
+        {
+            method: ["GET"],
+            matcher: "/store/netme-pos/products",
+            middlewares: [
+                authStoreCustomer,
+                (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetProductsParams, ProductsQueryConfig.listProductQueryConfig),
+                scope_1.scopeProductsToPublishableKey,
+                context_middlewares_1.applyMaybeLinkFilterIfNecessary,
+                scope_1.forcePublishedStatus,
+                (0, context_middlewares_1.normalizeDataForContext)(),
+                (0, context_middlewares_1.setPricingContextFromCustomer)(),
+                (0, context_middlewares_1.setTaxContext)(),
+                clearContextKeys,
+            ],
+        },
+        {
+            method: ["GET"],
+            matcher: "/store/netme-pos/products/:id",
+            middlewares: [
+                authStoreCustomer,
+                (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetProductsParams, ProductsQueryConfig.retrieveProductQueryConfig),
+                (0, http_1.applyParamsAsFilters)({ id: "id" }),
+                scope_1.scopeProductsToPublishableKey,
+                context_middlewares_1.applyMaybeLinkFilterIfNecessary,
+                scope_1.forcePublishedStatus,
+                (0, context_middlewares_1.normalizeDataForContext)(),
+                (0, context_middlewares_1.setPricingContextFromCustomer)(),
+                (0, context_middlewares_1.setTaxContext)(),
+                clearContextKeys,
+            ],
+        },
+        // ------------------------------------------------------------------
+        // Store draft-orders — per-route validation (§8)
+        // ------------------------------------------------------------------
+        {
+            method: ["GET"],
+            matcher: DRAFT_ORDERS_BASE,
+            middlewares: [
+                (0, framework_1.validateAndTransformQuery)(DO.StoreGetDraftOrdersParams, DraftOrdersQueryConfig.listTransformQueryConfig),
+            ],
+        },
+        {
+            method: ["POST"],
+            matcher: DRAFT_ORDERS_BASE,
+            middlewares: [
+                (0, http_1.validateAndTransformBody)(DO.StoreCreateDraftOrder),
+                (0, framework_1.validateAndTransformQuery)(DO.StoreGetDraftOrderParams, DraftOrdersQueryConfig.retrieveTransformQueryConfig),
+            ],
+        },
+        {
+            method: ["GET"],
+            matcher: `${DRAFT_ORDERS_BASE}/:id`,
+            middlewares: [
+                (0, framework_1.validateAndTransformQuery)(DO.StoreGetDraftOrderParams, DraftOrdersQueryConfig.retrieveTransformQueryConfig),
+            ],
+        },
+        {
+            method: ["POST"],
+            matcher: `${DRAFT_ORDERS_BASE}/:id`,
+            middlewares: [
+                (0, http_1.validateAndTransformBody)(DO.StoreUpdateDraftOrder),
+                (0, framework_1.validateAndTransformQuery)(DO.StoreGetDraftOrderParams, DraftOrdersQueryConfig.retrieveTransformQueryConfig),
+            ],
+        },
+        {
+            method: ["POST"],
+            matcher: `${DRAFT_ORDERS_BASE}/:id/convert-to-order`,
+            middlewares: [
+                (0, framework_1.validateAndTransformQuery)(DO.StoreGetDraftOrderParams, DraftOrdersQueryConfig.retrieveTransformQueryConfig),
+            ],
+        },
+        {
+            method: ["POST"],
+            matcher: `${DRAFT_ORDERS_BASE}/:id/edit/items`,
+            middlewares: [(0, http_1.validateAndTransformBody)(DO.StoreAddDraftOrderItems)],
+        },
+        {
+            method: ["POST"],
+            matcher: `${DRAFT_ORDERS_BASE}/:id/edit/items/item/:item_id`,
+            middlewares: [(0, http_1.validateAndTransformBody)(DO.StoreUpdateDraftOrderItem)],
+        },
+        {
+            method: ["POST"],
+            matcher: `${DRAFT_ORDERS_BASE}/:id/edit/items/:action_id`,
+            middlewares: [
+                (0, http_1.validateAndTransformBody)(DO.StoreUpdateDraftOrderActionItem),
+            ],
+        },
+        {
+            method: ["POST", "DELETE"],
+            matcher: `${DRAFT_ORDERS_BASE}/:id/edit/promotions`,
+            middlewares: [(0, http_1.validateAndTransformBody)(DO.StoreDraftOrderPromotions)],
+        },
+        {
+            method: ["POST"],
+            matcher: `${DRAFT_ORDERS_BASE}/:id/edit/shipping-methods`,
+            middlewares: [
+                (0, http_1.validateAndTransformBody)(DO.StoreAddDraftOrderShippingMethod),
+            ],
+        },
+        {
+            method: ["POST"],
+            matcher: `${DRAFT_ORDERS_BASE}/:id/edit/shipping-methods/method/:method_id`,
+            middlewares: [
+                (0, http_1.validateAndTransformBody)(DO.StoreUpdateDraftOrderShippingMethod),
+            ],
+        },
+        {
+            method: ["POST"],
+            matcher: `${DRAFT_ORDERS_BASE}/:id/edit/shipping-methods/:action_id`,
+            middlewares: [
+                (0, http_1.validateAndTransformBody)(DO.StoreUpdateDraftOrderActionShippingMethod),
+            ],
+        },
+        // edit begin/cancel, request, confirm: auth + guard only (no body).
     ],
 });
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/netme-pos/draft-orders/[id]/convert-to-order/route.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const utils_1 = require("@medusajs/framework/utils");
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+const ensure_agent_can_act_for_1 = require("../../../../../../workflows/ensure-agent-can-act-for");
+const guards_1 = require("../../guards");
+/**
+ * `POST /store/netme-pos/draft-orders/:id/convert-to-order` (spec §7.6).
+ *
+ * ⚠️ Converting does NOT charge: the payment (wallet credit lines included)
+ * must be settled BEFORE converting (spec §10) or it is lost on conversion.
+ */
+async function POST(req, res) {
+    const actorId = req.auth_context.actor_id;
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    // MLM policy re-check on conversion (§3.2) against the order's target.
+    const order = await (0, guards_1.assertAgentDraftOrder)(req.scope, actorId, req.params.id);
+    await (0, ensure_agent_can_act_for_1.ensureAgentCanActForWorkflow)(req.scope).run({
+        input: {
+            agent_customer_id: actorId,
+            target_customer_id: order.customer_id,
+        },
+    });
+    await (0, core_flows_1.convertDraftOrderWorkflow)(req.scope).run({
+        input: {
+            id: req.params.id,
+        },
+    });
+    const result = await query.graph({
+        entity: "orders",
+        filters: { id: req.params.id },
+        fields: req.queryConfig.fields,
+    });
+    res.status(200).json({ order: result.data[0] });
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3N0b3JlL25ldG1lLXBvcy9kcmFmdC1vcmRlcnMvW2lkXS9jb252ZXJ0LXRvLW9yZGVyL3JvdXRlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBZUEsb0JBNkJDO0FBeENELHFEQUFxRTtBQUNyRSw0REFBdUU7QUFDdkUsbUdBQW1HO0FBQ25HLHlDQUFvRDtBQUVwRDs7Ozs7R0FLRztBQUNJLEtBQUssVUFBVSxJQUFJLENBQ3hCLEdBQStCLEVBQy9CLEdBQW1CO0lBRW5CLE1BQU0sT0FBTyxHQUFHLEdBQUcsQ0FBQyxZQUFZLENBQUMsUUFBUSxDQUFBO0lBQ3pDLE1BQU0sS0FBSyxHQUFHLEdBQUcsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLGlDQUF5QixDQUFDLEtBQUssQ0FBQyxDQUFBO0lBRWhFLHVFQUF1RTtJQUN2RSxNQUFNLEtBQUssR0FBRyxNQUFNLElBQUEsOEJBQXFCLEVBQUMsR0FBRyxDQUFDLEtBQUssRUFBRSxPQUFPLEVBQUUsR0FBRyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsQ0FBQTtJQUM1RSxNQUFNLElBQUEsdURBQTRCLEVBQUMsR0FBRyxDQUFDLEtBQUssQ0FBQyxDQUFDLEdBQUcsQ0FBQztRQUNoRCxLQUFLLEVBQUU7WUFDTCxpQkFBaUIsRUFBRSxPQUFPO1lBQzFCLGtCQUFrQixFQUFFLEtBQUssQ0FBQyxXQUFXO1NBQ3RDO0tBQ0YsQ0FBQyxDQUFBO0lBRUYsTUFBTSxJQUFBLHNDQUF5QixFQUFDLEdBQUcsQ0FBQyxLQUFLLENBQUMsQ0FBQyxHQUFHLENBQUM7UUFDN0MsS0FBSyxFQUFFO1lBQ0wsRUFBRSxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsRUFBRTtTQUNsQjtLQUNGLENBQUMsQ0FBQTtJQUVGLE1BQU0sTUFBTSxHQUFHLE1BQU0sS0FBSyxDQUFDLEtBQUssQ0FBQztRQUMvQixNQUFNLEVBQUUsUUFBUTtRQUNoQixPQUFPLEVBQUUsRUFBRSxFQUFFLEVBQUUsR0FBRyxDQUFDLE1BQU0sQ0FBQyxFQUFFLEVBQUU7UUFDOUIsTUFBTSxFQUFFLEdBQUcsQ0FBQyxXQUFXLENBQUMsTUFBTTtLQUMvQixDQUFDLENBQUE7SUFFRixHQUFHLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxDQUFDLElBQUksQ0FBQyxFQUFFLEtBQUssRUFBRSxNQUFNLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUMsQ0FBQTtBQUNqRCxDQUFDIn0=

package/.medusa/server/src/api/store/netme-pos/draft-orders/[id]/edit/confirm/route.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+/**
+ * `POST /store/netme-pos/draft-orders/:id/edit/confirm` (spec §7.10).
+ * Each confirm recalculates totals and creates/updates the draft's payment
+ * collection (`createOrUpdateOrderPaymentCollectionWorkflow` inside core).
+ */
+async function POST(req, res) {
+    const { id } = req.params;
+    const { result } = await (0, core_flows_1.confirmDraftOrderEditWorkflow)(req.scope).run({
+        input: {
+            order_id: id,
+            confirmed_by: req.auth_context.actor_id,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3N0b3JlL25ldG1lLXBvcy9kcmFmdC1vcmRlcnMvW2lkXS9lZGl0L2NvbmZpcm0vcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFXQSxvQkFjQztBQXJCRCw0REFBMkU7QUFFM0U7Ozs7R0FJRztBQUNJLEtBQUssVUFBVSxJQUFJLENBQ3hCLEdBQStCLEVBQy9CLEdBQW1CO0lBRW5CLE1BQU0sRUFBRSxFQUFFLEVBQUUsR0FBRyxHQUFHLENBQUMsTUFBTSxDQUFBO0lBRXpCLE1BQU0sRUFBRSxNQUFNLEVBQUUsR0FBRyxNQUFNLElBQUEsMENBQTZCLEVBQUMsR0FBRyxDQUFDLEtBQUssQ0FBQyxDQUFDLEdBQUcsQ0FBQztRQUNwRSxLQUFLLEVBQUU7WUFDTCxRQUFRLEVBQUUsRUFBRTtZQUNaLFlBQVksRUFBRSxHQUFHLENBQUMsWUFBWSxDQUFDLFFBQVE7U0FDeEM7S0FDRixDQUFDLENBQUE7SUFFRixHQUFHLENBQUMsSUFBSSxDQUFDLEVBQUUsbUJBQW1CLEVBQUUsTUFBTSxFQUFFLENBQUMsQ0FBQTtBQUMzQyxDQUFDIn0=

package/.medusa/server/src/api/store/netme-pos/draft-orders/[id]/edit/items/[action_id]/route.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+exports.DELETE = DELETE;
+const utils_1 = require("@medusajs/framework/utils");
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+/**
+ * `/store/netme-pos/draft-orders/:id/edit/items/:action_id` (spec §7.13) —
+ * update / remove a pending (change-set) item.
+ *
+ * Same bundle protection as §7.12: quantity changes on bundle lines are
+ * blocked. Fails CLOSED: if the action can't be resolved for this order, the
+ * request is rejected (a bundle child is a $0 line — letting an unknown action
+ * through would allow free product).
+ */
+const bundleQuantityLocked = () => new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, "Cannot change the quantity of a bundle line — remove the bundle and add it again");
+const assertNotBundleQuantityChange = async (req, orderId, actionId) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    // `order_change_action` is not an entity of the Order module's joiner config
+    // (2.14.2), so it can't be queried directly — reach it through `order_change`.
+    const { data: changes } = await query.graph({
+        entity: "order_change",
+        filters: { order_id: orderId },
+        fields: ["id", "actions.id", "actions.action", "actions.details"],
+    });
+    const action = changes
+        .flatMap((c) => c.actions ?? [])
+        .find((a) => a?.id === actionId);
+    if (!action) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Action ${actionId} was not found in draft order ${orderId}`);
+    }
+    const details = (action.details ?? {});
+    // ITEM_ADD: the line only exists inside the pending change, so its bundle
+    // metadata lives in `details.metadata` (it is NOT in order.items yet).
+    if (details.metadata?.bundle_type) {
+        throw bundleQuantityLocked();
+    }
+    // ITEM_UPDATE on an existing line: its metadata lives on the order item.
+    const itemId = details.reference_id;
+    if (itemId) {
+        const { data: orders } = await query.graph({
+            entity: "order",
+            filters: { id: orderId },
+            fields: ["id", "items.id", "items.metadata"],
+        });
+        const item = orders[0]?.items?.find((i) => i?.id === itemId);
+        if (item?.metadata?.bundle_type) {
+            throw bundleQuantityLocked();
+        }
+    }
+};
+async function POST(req, res) {
+    const { id, action_id } = req.params;
+    await assertNotBundleQuantityChange(req, id, action_id);
+    const { result } = await (0, core_flows_1.updateDraftOrderActionItemWorkflow)(req.scope).run({
+        input: {
+            data: req.validatedBody,
+            order_id: id,
+            action_id,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+async function DELETE(req, res) {
+    const { id, action_id } = req.params;
+    const { result } = await (0, core_flows_1.removeDraftOrderActionItemWorkflow)(req.scope).run({
+        input: {
+            order_id: id,
+            action_id,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/netme-pos/draft-orders/[id]/edit/items/item/[item_id]/route.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const utils_1 = require("@medusajs/framework/utils");
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+/**
+ * `POST /store/netme-pos/draft-orders/:id/edit/items/item/:item_id`
+ * (spec §7.12) — update an existing item's quantity. No prices.
+ *
+ * Bundle lines are protected: changing the quantity of a bundle parent or
+ * child is blocked (children are $0 lines — a free-product exploit otherwise).
+ * The client removes/re-adds the whole bundle instead, same as the POS front.
+ */
+async function POST(req, res) {
+    const { id, item_id } = req.params;
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { data: orders } = await query.graph({
+        entity: "order",
+        filters: { id },
+        fields: ["id", "items.id", "items.quantity", "items.metadata"],
+    });
+    const item = orders[0]?.items?.find((i) => i?.id === item_id);
+    if (item?.metadata?.bundle_type &&
+        Number(req.validatedBody.quantity) !== Number(item.quantity)) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, "Cannot change the quantity of a bundle line — remove the bundle and add it again");
+    }
+    const { result } = await (0, core_flows_1.updateDraftOrderItemWorkflow)(req.scope).run({
+        input: {
+            ...req.validatedBody,
+            order_id: id,
+            items: [
+                {
+                    ...req.validatedBody,
+                    id: item_id,
+                },
+            ],
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/netme-pos/draft-orders/[id]/edit/items/route.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+const guards_1 = require("../../../guards");
+const pricing_1 = require("../../../pricing");
+/**
+ * `POST /store/netme-pos/draft-orders/:id/edit/items` (spec §7.11) — the main
+ * cart route. The client declares WHAT (variants, quantities, bundle
+ * structure); prices are resolved server-side for the order's TARGET customer
+ * (`buildResolvedLineItems`, §4–§5). Any client-sent price is rejected by the
+ * strict validator.
+ */
+async function POST(req, res) {
+    const { id } = req.params;
+    // Target customer + region come from the order itself, never the client.
+    const order = await (0, guards_1.assertAgentDraftOrder)(req.scope, req.auth_context.actor_id, id);
+    const resolved = await (0, pricing_1.buildResolvedLineItems)(req.scope, {
+        customerId: order.customer_id,
+        regionId: order.region_id,
+        items: req.validatedBody.items,
+    });
+    const { result } = await (0, core_flows_1.addDraftOrderItemsWorkflow)(req.scope).run({
+        input: {
+            items: resolved,
+            order_id: id,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3N0b3JlL25ldG1lLXBvcy9kcmFmdC1vcmRlcnMvW2lkXS9lZGl0L2l0ZW1zL3JvdXRlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBZ0JBLG9CQTJCQztBQXZDRCw0REFBd0U7QUFDeEUsNENBQXVEO0FBQ3ZELDhDQUF5RDtBQUd6RDs7Ozs7O0dBTUc7QUFDSSxLQUFLLFVBQVUsSUFBSSxDQUN4QixHQUE0RCxFQUM1RCxHQUFtQjtJQUVuQixNQUFNLEVBQUUsRUFBRSxFQUFFLEdBQUcsR0FBRyxDQUFDLE1BQU0sQ0FBQTtJQUV6Qix5RUFBeUU7SUFDekUsTUFBTSxLQUFLLEdBQUcsTUFBTSxJQUFBLDhCQUFxQixFQUN2QyxHQUFHLENBQUMsS0FBSyxFQUNULEdBQUcsQ0FBQyxZQUFZLENBQUMsUUFBUSxFQUN6QixFQUFFLENBQ0gsQ0FBQTtJQUVELE1BQU0sUUFBUSxHQUFHLE1BQU0sSUFBQSxnQ0FBc0IsRUFBQyxHQUFHLENBQUMsS0FBSyxFQUFFO1FBQ3ZELFVBQVUsRUFBRSxLQUFLLENBQUMsV0FBVztRQUM3QixRQUFRLEVBQUUsS0FBSyxDQUFDLFNBQVM7UUFDekIsS0FBSyxFQUFFLEdBQUcsQ0FBQyxhQUFhLENBQUMsS0FBSztLQUMvQixDQUFDLENBQUE7SUFFRixNQUFNLEVBQUUsTUFBTSxFQUFFLEdBQUcsTUFBTSxJQUFBLHVDQUEwQixFQUFDLEdBQUcsQ0FBQyxLQUFLLENBQUMsQ0FBQyxHQUFHLENBQUM7UUFDakUsS0FBSyxFQUFFO1lBQ0wsS0FBSyxFQUFFLFFBQVE7WUFDZixRQUFRLEVBQUUsRUFBRTtTQUNiO0tBQ0YsQ0FBQyxDQUFBO0lBRUYsR0FBRyxDQUFDLElBQUksQ0FBQyxFQUFFLG1CQUFtQixFQUFFLE1BQU0sRUFBRSxDQUFDLENBQUE7QUFDM0MsQ0FBQyJ9

package/.medusa/server/src/api/store/netme-pos/draft-orders/[id]/edit/promotions/route.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+exports.DELETE = DELETE;
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+/**
+ * `/store/netme-pos/draft-orders/:id/edit/promotions` (spec §7.14) —
+ * add / remove promo codes. Any public promo code is accepted (an allowlist
+ * per agent can be layered on later if the business requires it).
+ */
+async function POST(req, res) {
+    const { id } = req.params;
+    const { result } = await (0, core_flows_1.addDraftOrderPromotionWorkflow)(req.scope).run({
+        input: {
+            ...req.validatedBody,
+            order_id: id,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+async function DELETE(req, res) {
+    const { id } = req.params;
+    const { result } = await (0, core_flows_1.removeDraftOrderPromotionsWorkflow)(req.scope).run({
+        input: {
+            ...req.validatedBody,
+            order_id: id,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/netme-pos/draft-orders/[id]/edit/request/route.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+/** `POST /store/netme-pos/draft-orders/:id/edit/request` (spec §7.9). */
+async function POST(req, res) {
+    const { id } = req.params;
+    const { result } = await (0, core_flows_1.requestDraftOrderEditWorkflow)(req.scope).run({
+        input: {
+            order_id: id,
+            requested_by: req.auth_context.actor_id,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/netme-pos/draft-orders/[id]/edit/route.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+exports.DELETE = DELETE;
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+/**
+ * `/store/netme-pos/draft-orders/:id/edit` — begin / cancel the edit cycle
+ * (spec §7.7–§7.8).
+ */
+async function POST(req, res) {
+    const { id } = req.params;
+    const { result } = await (0, core_flows_1.beginDraftOrderEditWorkflow)(req.scope).run({
+        input: {
+            order_id: id,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+async function DELETE(req, res) {
+    const { id } = req.params;
+    await (0, core_flows_1.cancelDraftOrderEditWorkflow)(req.scope).run({
+        input: {
+            order_id: id,
+        },
+    });
+    res.status(200).json({
+        id,
+        object: "draft-order-edit",
+        deleted: true,
+    });
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3N0b3JlL25ldG1lLXBvcy9kcmFmdC1vcmRlcnMvW2lkXS9lZGl0L3JvdXRlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBY0Esb0JBYUM7QUFFRCx3QkFpQkM7QUExQ0QsNERBR29DO0FBRXBDOzs7R0FHRztBQUVJLEtBQUssVUFBVSxJQUFJLENBQ3hCLEdBQStCLEVBQy9CLEdBQW1CO0lBRW5CLE1BQU0sRUFBRSxFQUFFLEVBQUUsR0FBRyxHQUFHLENBQUMsTUFBTSxDQUFBO0lBRXpCLE1BQU0sRUFBRSxNQUFNLEVBQUUsR0FBRyxNQUFNLElBQUEsd0NBQTJCLEVBQUMsR0FBRyxDQUFDLEtBQUssQ0FBQyxDQUFDLEdBQUcsQ0FBQztRQUNsRSxLQUFLLEVBQUU7WUFDTCxRQUFRLEVBQUUsRUFBRTtTQUNiO0tBQ0YsQ0FBQyxDQUFBO0lBRUYsR0FBRyxDQUFDLElBQUksQ0FBQyxFQUFFLG1CQUFtQixFQUFFLE1BQU0sRUFBRSxDQUFDLENBQUE7QUFDM0MsQ0FBQztBQUVNLEtBQUssVUFBVSxNQUFNLENBQzFCLEdBQStCLEVBQy9CLEdBQW1CO0lBRW5CLE1BQU0sRUFBRSxFQUFFLEVBQUUsR0FBRyxHQUFHLENBQUMsTUFBTSxDQUFBO0lBRXpCLE1BQU0sSUFBQSx5Q0FBNEIsRUFBQyxHQUFHLENBQUMsS0FBSyxDQUFDLENBQUMsR0FBRyxDQUFDO1FBQ2hELEtBQUssRUFBRTtZQUNMLFFBQVEsRUFBRSxFQUFFO1NBQ2I7S0FDRixDQUFDLENBQUE7SUFFRixHQUFHLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxDQUFDLElBQUksQ0FBQztRQUNuQixFQUFFO1FBQ0YsTUFBTSxFQUFFLGtCQUFrQjtRQUMxQixPQUFPLEVBQUUsSUFBSTtLQUNkLENBQUMsQ0FBQTtBQUNKLENBQUMifQ==

package/.medusa/server/src/api/store/netme-pos/draft-orders/[id]/edit/shipping-methods/[action_id]/route.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+exports.DELETE = DELETE;
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+/**
+ * `/store/netme-pos/draft-orders/:id/edit/shipping-methods/:action_id`
+ * (spec §7.17) — update / remove a pending (change-set) shipping method.
+ * No `custom_amount`.
+ */
+async function POST(req, res) {
+    const { id, action_id } = req.params;
+    const { result } = await (0, core_flows_1.updateDraftOrderActionShippingMethodWorkflow)(req.scope).run({
+        input: {
+            data: { ...req.validatedBody },
+            order_id: id,
+            action_id,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+async function DELETE(req, res) {
+    const { id, action_id } = req.params;
+    const { result } = await (0, core_flows_1.removeDraftOrderActionShippingMethodWorkflow)(req.scope).run({
+        input: {
+            order_id: id,
+            action_id,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/netme-pos/draft-orders/[id]/edit/shipping-methods/method/[method_id]/route.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+exports.DELETE = DELETE;
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+/**
+ * `/store/netme-pos/draft-orders/:id/edit/shipping-methods/method/:method_id`
+ * (spec §7.16) — update / remove an existing shipping method. No `custom_amount`.
+ */
+async function POST(req, res) {
+    const { id, method_id } = req.params;
+    const { result } = await (0, core_flows_1.updateDraftOrderShippingMethodWorkflow)(req.scope).run({
+        input: {
+            data: { shipping_method_id: method_id, ...req.validatedBody },
+            order_id: id,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+async function DELETE(req, res) {
+    const { id, method_id } = req.params;
+    const { result } = await (0, core_flows_1.removeDraftOrderShippingMethodWorkflow)(req.scope).run({
+        input: {
+            order_id: id,
+            shipping_method_id: method_id,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/netme-pos/draft-orders/[id]/edit/shipping-methods/route.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+/**
+ * `POST /store/netme-pos/draft-orders/:id/edit/shipping-methods` (spec §7.15).
+ * No `custom_amount` — the amount always comes from the shipping option.
+ */
+async function POST(req, res) {
+    const { id } = req.params;
+    const { result } = await (0, core_flows_1.addDraftOrderShippingMethodsWorkflow)(req.scope).run({
+        input: {
+            order_id: id,
+            ...req.validatedBody,
+        },
+    });
+    res.json({ draft_order_preview: result });
+}
+//# sourceMappingURL=data:application/json;base64,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