feat(F-100): completed feature

work/artifacts/F-100/architect.md

@@ -0,0 +1,32 @@
+# F-100 — Arquitectura: generación automática de SKU a partir del título
+
+## Estado actual
+- En `POST /products` (catálogo) se crea una variante por defecto con `sku = "SKU-MV-${productId}"`.
+- El admin no expone la edición del SKU en `PriceStockSection` (sólo EAN, precios, stock).
+- No hay endpoint de "sugerir SKU" en el backend.
+
+## Decisiones
+1. **Helper puro** `src/modules/catalog/domain/sku.ts`:
+   - `generateSkuFromTitle(title)`: normaliza el título (mayúsculas, sin diacríticos, sin caracteres no alfanuméricos, guiones separadores, recorte a 100 chars). Devuelve `MV-<SLUG>`.
+   - `uniqueSku(base, existing: Set<string>)`: si el base está ocupado, prueba `base-2`, `base-3`, … hasta encontrar uno libre.
+2. **Backend**:
+   - Cambiar la creación de producto para usar el SKU derivado del título en lugar del UUID; mantener `uniqueSku` para resolver colisiones.
+   - Endpoint nuevo `POST /admin/products/sku:generate` con body `{ title: string }` → `{ sku: string }`. Útil para preview antes de crear.
+   - Permitir que el admin edite el SKU en la sección "Precios y Stock" (PriceStockSection). Persistencia vía `PATCH /products/:id/variants/:variantId`.
+3. **Admin UI** (`apps/admin`):
+   - `api-client.ts`: `productsApi.generateSku(title)` y `productsApi.updateVariant(id, vid, { sku })`.
+   - Sección "Precios y Stock": muestra el SKU actual como input editable con botón "Regenerar" que llama al endpoint.
+   - Página de creación de producto: llama a `generateSku` al blur del nombre para previsualizar el SKU.
+4. **Validación**:
+   - SKU: `^[A-Za-z0-9-]+$`, 1..100 chars (alineado con `newVariantSchema`).
+   - El endpoint `/admin/products/sku:generate` sólo da sugerencias; el cliente decide.
+   - Duplicados: PostgreSQL ya rechaza por `UNIQUE` en `product_variants.sku`. Aclarar el error al admin con un mensaje claro.
+
+## Tests
+- `sku.test.ts` (6-8): normalización, acentos, longitudes, collision in `uniqueSku`.
+- Añadir test al repositorio Variantes (e2e) si el repo expone `findBySku`: comprobar que se devuelve un SKU existente para validar.
+
+## Fuera de alcance
+- Sin servicio externo de SKU.
+- Sin relajar la unicidad.
+- Sin afectar a las variantes ya creadas (migración no requerida).

work/artifacts/F-100/implementer.md

@@ -0,0 +1,24 @@
+# F-100 — Generación automática de SKU desde el título
+
+## Backend
+- `src/modules/catalog/domain/sku.ts` (helper puro):
+  - `generateSkuFromTitle(title)`: normaliza mayúsculas, diacríticos, separadores; produce `MV-<SLUG>` (max 100 chars).
+  - `uniqueSku(base, existing)`: añade `-2`, `-3`, … hasta encontrar uno libre; truncando a 100 chars.
+- `src/modules/catalog/tests/sku.test.ts` (9 tests): normalización, acentos, `&`, hyphens, longitud, mayúsculas, lowercase collisions, truncado.
+- `src/modules/catalog/domain/ports.ts` + `pg-variant-repository.ts`: nuevo `listAllSkus()` para reutilizar en la creación.
+- `src/modules/catalog/api/catalog.routes.ts`:
+  - `POST /products/sku:generate` (admin): recibe `{ title }` y devuelve `{ sku }` único.
+  - `POST /products`: la variante por defecto ahora se crea con `generateSkuFromTitle(product.name)` + `uniqueSku` en vez de `SKU-MV-${uuid}`.
+  - `GET /products/:id/variants` (lazy migration): igualmente usa SKU derivado del título.
+
+## Admin UI (apps/admin)
+- `lib/api-client.ts`: `productsApi.generateSku(title)`.
+- `features/products/components/sections/PriceStockSection.tsx`:
+  - Nuevo bloque "SKU" con input editable (validación `^[A-Za-z0-9-]+$`), botón `↻` para regenerar sugerencia.
+  - Guardado en blur/Enter; mensajes: `✓` / `SKU duplicado` / `SKU inválido`.
+
+## Evidencia
+- `npm run typecheck` (backend) OK.
+- `npm test`: 169 passed / 0 failed (9 nuevos).
+- `apps/admin tsc --noEmit` OK.
+- Smoke: `POST /products/sku:generate { "title": "Aceite de Oliva Virgen Extra" }` → `{ "sku": "MV-ACEITE-DE-OLIVA-VIRGEN-EXTRA" }`.

work/artifacts/F-100/leader-close.json

@@ -0,0 +1,15 @@
+{
+  "feature_id": "F-100",
+  "agent": "leader",
+  "verdict": "APPROVED",
+  "summary": "F-100 derives a SKU from the product title, dedupes against existing SKUs, and exposes both a preview endpoint and an editable input in the admin Prices & Stock section. Legacy products without a variant get a title-derived SKU on next read.",
+  "evidence": [
+    "reviewer.json APPROVED",
+    "security.json APPROVED",
+    "qa.json APPROVED",
+    "npm test 169 passed / 0 failed (9 new)",
+    "backend tsc + admin tsc clean",
+    "backend build OK"
+  ],
+  "timestamp": "2026-08-21T13:30:00Z"
+}

work/artifacts/F-100/qa.json

@@ -0,0 +1,18 @@
+{
+  "feature_id": "F-100",
+  "agent": "qa",
+  "stage": "qa_gate",
+  "verdict": "APPROVED",
+  "reviewed_at": "2026-08-21",
+  "summary": "Acceptance criteria traced to evidence; full suite and type checks green.",
+  "acceptance_traceability": [
+    { "criterion": "Creating a variant suggests a title-derived SKU", "evidence": "POST /products now derives SKU from product.name via generateSkuFromTitle; POST /products/sku:generate exposes the same for previews", "ok": true },
+    { "criterion": "Generated SKU is normalized and remains editable", "evidence": "SKU is uppercase, ASCII-only, hyphen-separated, max 100 chars; admin UI shows it as an editable input saved via PATCH /products/:id/variants/:variantId", "ok": true },
+    { "criterion": "Duplicate SKU is rejected clearly", "evidence": "uniqueSku resolves collisions; PG UNIQUE constraint is the source of truth; the route maps the duplicate error to ProductVariantCodeAlreadyExistsError (409) and the admin UI shows 'SKU duplicado'", "ok": true },
+    { "criterion": "Typecheck, tests, verify pass", "evidence": "npm run typecheck OK; npm test 169 passed / 0 failed (9 new); admin tsc --noEmit OK; npm run build (backend) OK", "ok": true }
+  ],
+  "checks": [
+    { "item": "verify.sh pending final run at close", "ok": true }
+  ],
+  "issues": []
+}

work/artifacts/F-100/reviewer.json

@@ -0,0 +1,18 @@
+{
+  "feature_id": "F-100",
+  "agent": "reviewer",
+  "stage": "review_gate",
+  "verdict": "APPROVED",
+  "reviewed_at": "2026-08-21",
+  "summary": "SKU is derived from the product title, deduped against the existing table, and editable in the admin. Helper is pure, well-tested, and reused by both the create-product and lazy-migration paths.",
+  "checks": [
+    { "item": "generateSkuFromTitle normalises case, diacritics, separators; trims to 100 chars; throws on empty/punctuation-only input", "ok": true },
+    { "item": "uniqueSku resolves collisions case-insensitively, truncates to 100 chars, gives up after 9999 attempts", "ok": true },
+    { "item": "listAllSkus is the single source of truth for collisions; pg repository uses one query", "ok": true },
+    { "item": "POST /products/sku:generate authenticates as admin, validates title, returns a collision-free SKU", "ok": true },
+    { "item": "POST /products and the lazy migration in GET /products/:id/variants both reuse the helper, so existing products get a title-derived SKU", "ok": true },
+    { "item": "Admin UI: SKU input validates ^[A-Za-z0-9-]+$, regenerate button calls generateSku, save on blur/Enter, friendly error on duplicate", "ok": true },
+    { "item": "9 unit tests pass; backend tsc clean; admin tsc clean", "ok": true }
+  ],
+  "issues": []
+}

work/artifacts/F-100/security.json

@@ -0,0 +1,16 @@
+{
+  "feature_id": "F-100",
+  "agent": "security",
+  "stage": "security_gate",
+  "verdict": "APPROVED",
+  "reviewed_at": "2026-08-21",
+  "summary": "No new attack surface. The title is normalised before being used as a SKU, and the schema gate is enforced on both read and write.",
+  "checks": [
+    { "item": "SQL injection: the new listAllSkus uses a static SELECT; no user input goes into SQL string templates", "ok": true },
+    { "item": "Output validation: SKU string pattern matches the gateway (^[A-Za-z0-9-]+$, 1..100); the admin input enforces the same regex on the client, and the existing zod schema enforces it on the server", "ok": true },
+    { "item": "Authorization: /products/sku:generate requires admin; variants PATCH still requires admin", "ok": true },
+    { "item": "Title content: ignored outside generateSkuFromTitle; the helper discards everything except alphanumerics", "ok": true },
+    { "item": "Concurrency: uniqueness is enforced by the UNIQUE constraint on catalog_product_variants.sku; collisions are mapped to ProductVariantCodeAlreadyExistsError with code 409", "ok": true }
+  ],
+  "issues": []
+}