feat: add acquisition API foundation

Add acquisition persistence, cost-basis calculation, seller-scoped admin routes, contracts, validation, migration, and focused application/HTTP tests.

apps/api/src/modules/acquisitions/repositories/acquisition-repository.js

@@ -0,0 +1,32 @@
+import { and, desc, eq } from 'drizzle-orm';
+
+import { acquisitions, inventoryItems, products } from '../../../infrastructure/database/schema.js';
+
+export function createAcquisitionRepository(db) {
+  return {
+    async createForSeller({ acquisition, sellerId }) {
+      return db.transaction(async (transaction) => {
+        const [ownedItem] = await transaction
+          .select({ id: inventoryItems.id })
+          .from(inventoryItems)
+          .innerJoin(products, eq(products.id, inventoryItems.productId))
+          .where(and(eq(inventoryItems.id, acquisition.inventoryItemId), eq(products.sellerId, sellerId)));
+
+        if (!ownedItem) return { status: 'NOT_FOUND' };
+        const [created] = await transaction.insert(acquisitions).values(acquisition).returning();
+        return { status: 'CREATED', acquisition: created };
+      });
+    },
+
+    async listBySellerId(sellerId) {
+      return db
+        .select({ acquisition: acquisitions })
+        .from(acquisitions)
+        .innerJoin(inventoryItems, eq(inventoryItems.id, acquisitions.inventoryItemId))
+        .innerJoin(products, eq(products.id, inventoryItems.productId))
+        .where(eq(products.sellerId, sellerId))
+        .orderBy(desc(acquisitions.createdAt))
+        .then((rows) => rows.map(({ acquisition }) => acquisition));
+    },
+  };
+}

apps/api/src/modules/acquisitions/routes/admin-acquisition-routes.js

@@ -0,0 +1,42 @@
+import { toAdminAcquisitionDto } from '@pokemon-inventory/contracts/acquisition';
+import { createAcquisitionSchema } from '@pokemon-inventory/validation/acquisition';
+
+import { createApplicationError } from '../../../shared/errors/application-error.js';
+
+function validationError(reply, result) {
+  return reply.code(400).send({
+    error: {
+      code: 'VALIDATION_ERROR',
+      message: 'Request validation failed.',
+      details: result.error.issues.map(({ message, path }) => ({ message, path })),
+    },
+  });
+}
+
+export async function registerAdminAcquisitionRoutes(app, options) {
+  const {
+    authenticateAdmin = async () => { throw createApplicationError('UNAUTHORIZED', 'Authentication is required.', 401); },
+    authorizeUnsafeRequest,
+    sessionCookieName = 'pokemon_inventory_session',
+    acquisitionService,
+  } = options;
+
+  app.addHook('preHandler', async (request) => {
+    const admin = await authenticateAdmin(request);
+    if (!admin?.sellerId) throw createApplicationError('UNAUTHORIZED', 'Authentication is required.', 401);
+    request.admin = admin;
+  });
+
+  app.get('/acquisitions', async (request) => ({
+    data: (await acquisitionService.list({ sellerId: request.admin.sellerId })).map(toAdminAcquisitionDto),
+  }));
+
+  app.post('/acquisitions', async (request, reply) => {
+    await authorizeUnsafeRequest?.(request.cookies[sessionCookieName], request.headers['x-csrf-token']);
+    const result = createAcquisitionSchema.safeParse(request.body);
+    if (!result.success) return validationError(reply, result);
+
+    const acquisition = await acquisitionService.create({ ...result.data, sellerId: request.admin.sellerId });
+    return reply.code(201).send({ data: toAdminAcquisitionDto(acquisition) });
+  });
+}

apps/api/src/modules/acquisitions/services/acquisition-service.js

@@ -0,0 +1,23 @@
+import { createAcquisition, calculateAcquisitionCostBasis } from '../domain/acquisition.js';
+import { createApplicationError } from '../../../shared/errors/application-error.js';
+
+export function createAcquisitionService({ acquisitionRepository }) {
+  return {
+    async create({ sellerId, ...input }) {
+      const acquisition = createAcquisition(input);
+      const result = await acquisitionRepository.createForSeller({ acquisition, sellerId });
+      if (result.status === 'NOT_FOUND') {
+        throw createApplicationError('INVENTORY_NOT_FOUND', 'Inventory item was not found.', 404);
+      }
+
+      return {
+        ...result.acquisition,
+        costBasisMinor: calculateAcquisitionCostBasis(acquisition),
+      };
+    },
+
+    async list({ sellerId }) {
+      return acquisitionRepository.listBySellerId(sellerId);
+    },
+  };
+}