Add entity customer numbers and scope APIs via selected company.

Entity gets an optional unique-per-company number with allocate/peek/isNumberFree helpers. Company-scoped store methods no longer take companyId and resolve google_auth.selected_company instead.

src/store/customergroup/create.js

@@ -1,6 +1,6 @@
 import { CREATE, GET_NEXT_SORT } from '../../sql/customergroup.js';
 import { POS_GROUP_NAME, SUPPLIER_GROUP_NAME } from '../../sql/entity.js';
-import resolveCompanyAccess from '../companyuser/resolveCompanyAccess.js';
+import resolveSelectedCompanyAccess from '../companyuser/resolveSelectedCompanyAccess.js';
 
 const RESERVED_NAMES = new Set([POS_GROUP_NAME, SUPPLIER_GROUP_NAME]);
 
@@ -16,13 +16,13 @@ function shape(row) {
  *
  * @example
  * const fn = create(pool);
- * const group = await fn(42, 1, { name: 'Wholesale' });
+ * const group = await fn(42, { name: 'Wholesale' });
  * // => { id, name, sort }
  */
 export default function create(pool) {
-  const access = resolveCompanyAccess(pool);
+  const access = resolveSelectedCompanyAccess(pool);
 
-  return async (googleAuthId, companyId, { name } = {}) => {
+  return async (googleAuthId, { name } = {}) => {
     const cleaned = name?.trim();
     if (!cleaned) {
       throw new Error('Name required');
@@ -31,7 +31,7 @@ export default function create(pool) {
       throw new Error('Name not allowed');
     }
 
-    await access(googleAuthId, companyId);
+    const { companyId } = await access(googleAuthId);
 
     const next = await pool
       .request()

src/store/customergroup/delete.js

@@ -1,5 +1,5 @@
 import { DELETE_BY_COMPANY_AND_ID } from '../../sql/customergroup.js';
-import resolveCompanyAccess from '../companyuser/resolveCompanyAccess.js';
+import resolveSelectedCompanyAccess from '../companyuser/resolveSelectedCompanyAccess.js';
 
 /**
  * Deletes a customer group for a company by its id.
@@ -9,17 +9,17 @@ import resolveCompanyAccess from '../companyuser/resolveCompanyAccess.js';
  *
  * @example
  * const fn = del(pool);
- * await fn(42, 1, 5);
+ * await fn(42, 5);
  */
 export default function del(pool) {
-  const access = resolveCompanyAccess(pool);
+  const access = resolveSelectedCompanyAccess(pool);
 
-  return async (googleAuthId, companyId, id) => {
+  return async (googleAuthId, id) => {
     if (!Number.isFinite(id)) {
       throw new Error('Customer group not found');
     }
 
-    await access(googleAuthId, companyId);
+    const { companyId } = await access(googleAuthId);
 
     try {
       const result = await pool

src/store/customergroup/list.js

@@ -1,5 +1,5 @@
 import { LIST_BY_COMPANY } from '../../sql/customergroup.js';
-import resolveCompanyAccess from '../companyuser/resolveCompanyAccess.js';
+import resolveSelectedCompanyAccess from '../companyuser/resolveSelectedCompanyAccess.js';
 
 /**
  * Lists the customer groups of a company.
@@ -9,14 +9,14 @@ import resolveCompanyAccess from '../companyuser/resolveCompanyAccess.js';
  *
  * @example
  * const fn = list(pool);
- * const groups = await fn(42, 1);
+ * const groups = await fn(42);
  * // => [{ id, name, sort }]
  */
 export default function list(pool) {
-  const access = resolveCompanyAccess(pool);
+  const access = resolveSelectedCompanyAccess(pool);
 
-  return async (googleAuthId, companyId) => {
-    await access(googleAuthId, companyId);
+  return async (googleAuthId) => {
+    const { companyId } = await access(googleAuthId);
 
     const result = await pool
       .request()

src/store/customergroup/order.js

@@ -3,7 +3,7 @@ import {
   UPDATE_SORT,
 } from '../../sql/customergroup.js';
 import request from '../request.js';
-import resolveCompanyAccess from '../companyuser/resolveCompanyAccess.js';
+import resolveSelectedCompanyAccess from '../companyuser/resolveSelectedCompanyAccess.js';
 
 /**
  * Reorders the customer groups of a company.
@@ -13,18 +13,18 @@ import resolveCompanyAccess from '../companyuser/resolveCompanyAccess.js';
  *
  * @example
  * const fn = order(pool);
- * const result = await fn(42, 1, { customergroupIds: [3, 1, 2] });
+ * const result = await fn(42, { customergroupIds: [3, 1, 2] });
  * // => { customergroupIds: [3, 1, 2] }
  */
 export default function order(pool) {
-  const access = resolveCompanyAccess(pool);
+  const access = resolveSelectedCompanyAccess(pool);
 
-  return async (googleAuthId, companyId, { customergroupIds } = {}) => {
+  return async (googleAuthId, { customergroupIds } = {}) => {
     if (!Array.isArray(customergroupIds)) {
       throw new Error('Invalid customer group order');
     }
 
-    await access(googleAuthId, companyId);
+    const { companyId } = await access(googleAuthId);
 
     const groups = await pool
       .request()

src/store/customergroup/update.js

@@ -1,6 +1,6 @@
 import { GET_BY_COMPANY_AND_ID, UPDATE } from '../../sql/customergroup.js';
 import { POS_GROUP_NAME, SUPPLIER_GROUP_NAME } from '../../sql/entity.js';
-import resolveCompanyAccess from '../companyuser/resolveCompanyAccess.js';
+import resolveSelectedCompanyAccess from '../companyuser/resolveSelectedCompanyAccess.js';
 
 const LOCKED_NAMES = new Set([POS_GROUP_NAME, SUPPLIER_GROUP_NAME]);
 
@@ -16,13 +16,13 @@ function shape(row) {
  *
  * @example
  * const fn = update(pool);
- * const group = await fn(42, 1, 5, { name: 'Retail' });
+ * const group = await fn(42, 5, { name: 'Retail' });
  * // => { id, name, sort }
  */
 export default function update(pool) {
-  const access = resolveCompanyAccess(pool);
+  const access = resolveSelectedCompanyAccess(pool);
 
-  return async (googleAuthId, companyId, id, { name } = {}) => {
+  return async (googleAuthId, id, { name } = {}) => {
     if (!Number.isFinite(id)) {
       throw new Error('Customer group not found');
     }
@@ -32,7 +32,7 @@ export default function update(pool) {
       throw new Error('Name required');
     }
 
-    await access(googleAuthId, companyId);
+    const { companyId } = await access(googleAuthId);
 
     const existing = await pool
       .request()