Class CustomerOriginService

constructor

• new CustomerOriginService(
      __namedParameters: {
          db: B2bDatabase;
          internalEventPublisher: InternalEventPublisher;
          s3Client: S3Client;
      },
  ): CustomerOriginService

  Parameters

  • __namedParameters: {
        db: B2bDatabase;
        internalEventPublisher: InternalEventPublisher;
        s3Client: S3Client;
    }

  Returns CustomerOriginService

Staticinstance

create

• create(
      __namedParameters: { customerId: string; origin: string },
  ): Promise<
      { ok: true; value: CustomerOrigin }
      | { error: ServiceError; ok: false },
  >

  Add an origin to the customer's allowlist and reconcile the buckets. The origin is canonicalized (lower-cased scheme/host) before storage.

  Parameters

  • __namedParameters: { customerId: string; origin: string }

  Returns Promise<
      { ok: true; value: CustomerOrigin }
      | { error: ServiceError; ok: false },
  >

delete

• delete(
      __namedParameters: { customerId: string; id: string },
  ): Promise<
      { ok: true; value: CustomerOrigin }
      | { error: ServiceError; ok: false },
  >

  Remove an origin from the customer's allowlist and reconcile the buckets.

  Parameters

  • __namedParameters: { customerId: string; id: string }

  Returns Promise<
      { ok: true; value: CustomerOrigin }
      | { error: ServiceError; ok: false },
  >

reconcile

• reconcile(): Promise<{ ok: true; value: { origins: string[] } }>

  Push the aggregate origin allowlist (all customers' origins merged with the base origins) onto both entity-document buckets' CORS configuration.

  Standalone repair entrypoint: opens its own transaction, acquires the advisory lock, and reconciles. create/update/delete do NOT call this — they run the reconcile INLINE within their own mutation tx (via reconcileWithin) so the row write and the CORS write are atomic.

  Returns Promise<{ ok: true; value: { origins: string[] } }>

update

• update(
      __namedParameters: {
          customerId: string;
          data: { origin: string };
          id: string;
      },
  ): Promise<
      { ok: true; value: CustomerOrigin }
      | { error: ServiceError; ok: false },
  >

  Replace an allowlist entry's origin and reconcile the buckets.

  Parameters

  • __namedParameters: { customerId: string; data: { origin: string }; id: string }

  Returns Promise<
      { ok: true; value: CustomerOrigin }
      | { error: ServiceError; ok: false },
  >