@01.software/sdk 0.41.1 → 0.42.0

package/dist/server.cjs

@@ -105,6 +105,26 @@ var TimeoutError = class extends SDKError {
     this.name = "TimeoutError";
   }
 };
+var GoneError = class extends SDKError {
+  constructor(message = "The requested resource is no longer available.", details, userMessage, suggestion) {
+    super("GONE_ERROR", message, 410, details, userMessage, suggestion);
+    this.name = "GoneError";
+  }
+};
+var ServiceUnavailableError = class extends SDKError {
+  constructor(message = "Service temporarily unavailable.", retryAfter, details, userMessage, suggestion) {
+    super(
+      "SERVICE_UNAVAILABLE_ERROR",
+      message,
+      503,
+      details,
+      userMessage,
+      suggestion
+    );
+    this.name = "ServiceUnavailableError";
+    this.retryAfter = retryAfter;
+  }
+};
 var UsageLimitError = class extends SDKError {
   constructor(message, usage, details, userMessage, suggestion) {
     super("USAGE_LIMIT_ERROR", message, 429, details, userMessage, suggestion);
@@ -186,6 +206,14 @@ var createValidationError = (message, details, userMessage, suggestion, status)
 var createApiError = (message, status, details, userMessage, suggestion, requestId) => new ApiError(message, status, details, userMessage, suggestion, requestId);
 var createConfigError = (message, details, userMessage, suggestion) => new ConfigError(message, details, userMessage, suggestion);
 var createTimeoutError = (message, details, userMessage, suggestion) => new TimeoutError(message, details, userMessage, suggestion);
+var createGoneError = (message, details, userMessage, suggestion) => new GoneError(message, details, userMessage, suggestion);
+var createServiceUnavailableError = (message, retryAfter, details, userMessage, suggestion) => new ServiceUnavailableError(
+  message,
+  retryAfter,
+  details,
+  userMessage,
+  suggestion
+);
 var createUsageLimitError = (message, usage, details, userMessage, suggestion) => new UsageLimitError(message, usage, details, userMessage, suggestion);
 var createAuthError = (message, details, userMessage, suggestion, requestId) => new AuthError(message, details, userMessage, suggestion, requestId);
 var createPermissionError = (message, details, userMessage, suggestion, requestId) => new PermissionError(message, details, userMessage, suggestion, requestId);
@@ -210,7 +238,7 @@ function requirePublishableKeyForSecret(apiName, publishableKey, secretKey) {
   return publishableKey ?? "";
 }
 
-// src/core/client/types.ts
+// src/core/internal/utils/api-url.ts
 function resolveApiUrl(apiUrl) {
   if (apiUrl) {
     return apiUrl.replace(/\/$/, "");
@@ -227,7 +255,7 @@ function resolveApiUrl(apiUrl) {
 // src/core/internal/utils/http.ts
 var DEFAULT_TIMEOUT = 3e4;
 var STOREFRONT_BROWSER_TIMEOUT = 15e3;
-var DEFAULT_RETRYABLE_STATUSES = [408, 429, 500, 502, 503, 504];
+var DEFAULT_RETRYABLE_STATUSES = [408, 500, 502, 503, 504];
 var NON_RETRYABLE_STATUSES = [400, 401, 403, 404, 409, 422];
 var SAFE_METHODS = ["GET", "HEAD", "OPTIONS"];
 var DEFAULT_MAX_RETRIES = 3;
@@ -344,7 +372,12 @@ function attachRequestId(err, id) {
   if (id) err.requestId = id;
   return err;
 }
-function createHttpStatusError(status, parsed, details, requestId) {
+function parseRetryAfter(response) {
+  const raw = response.headers.get("Retry-After");
+  if (!raw) return void 0;
+  return parseInt(raw, 10) || void 0;
+}
+function mapResponseToError(status, parsed, details, requestId, retryAfter) {
   const errorDetails = {
     ...details,
     ...parsed.errors && { errors: parsed.errors },
@@ -407,6 +440,41 @@ function createHttpStatusError(status, parsed, details, requestId) {
       requestId
     );
   }
+  if (status === 410) {
+    return attachRequestId(
+      createGoneError(
+        parsed.errorMessage,
+        errorDetails,
+        parsed.userMessage,
+        suggestion
+      ),
+      requestId
+    );
+  }
+  if (status === 429) {
+    return attachRequestId(
+      createRateLimitError(
+        parsed.errorMessage,
+        retryAfter,
+        errorDetails,
+        parsed.userMessage,
+        suggestion
+      ),
+      requestId
+    );
+  }
+  if (status === 503) {
+    return attachRequestId(
+      createServiceUnavailableError(
+        parsed.errorMessage,
+        retryAfter,
+        errorDetails,
+        parsed.userMessage,
+        suggestion
+      ),
+      requestId
+    );
+  }
   return attachRequestId(
     createNetworkError(
       parsed.errorMessage,
@@ -525,26 +593,17 @@ async function httpFetch(url, options) {
           method: requestInit.method || "GET",
           attempt: attempt + 1
         };
-        if (NON_RETRYABLE_STATUSES.includes(response.status)) {
-          throw createHttpStatusError(
-            response.status,
-            parsed,
-            details,
-            requestId
-          );
-        }
-        const error = attachRequestId(
-          createNetworkError(
-            parsed.errorMessage,
-            response.status,
-            details,
-            parsed.userMessage,
-            getErrorSuggestion(response.status)
-          ),
-          requestId
+        const retryAfter = parseRetryAfter(response);
+        const error = mapResponseToError(
+          response.status,
+          parsed,
+          details,
+          requestId,
+          retryAfter
         );
         const method2 = (requestInit.method || "GET").toUpperCase();
-        if (attempt < retryConfig.maxRetries && SAFE_METHODS.includes(method2) && retryConfig.retryableStatuses.includes(response.status)) {
+        const isTerminal = error instanceof RateLimitError || error instanceof UsageLimitError;
+        if (attempt < retryConfig.maxRetries && SAFE_METHODS.includes(method2) && !isTerminal && !NON_RETRYABLE_STATUSES.includes(response.status) && retryConfig.retryableStatuses.includes(response.status)) {
           lastError = error;
           const retryDelay = retryConfig.retryDelay(attempt);
           debugLog(debug, "error", `Retrying in ${retryDelay}ms...`, error);
@@ -1614,42 +1673,123 @@ var ModerationApi = class extends BaseApi {
   }
 };
 
+// src/core/api/endpoints.ts
+var COMMERCE_ENDPOINTS = {
+  orders: {
+    create: "/api/orders/create",
+    update: "/api/orders/update",
+    confirmPayment: "/api/orders/confirm-payment",
+    byPayment: "/api/orders/by-payment",
+    cancel: "/api/orders/cancel",
+    resolveCancelRefund: "/api/orders/resolve-cancel-refund",
+    checkout: "/api/orders/checkout",
+    createFulfillment: "/api/orders/create-fulfillment",
+    updateFulfillment: "/api/orders/update-fulfillment"
+  },
+  transactions: {
+    update: "/api/transactions/update"
+  },
+  returns: {
+    create: "/api/returns/create",
+    update: "/api/returns/update",
+    returnRefund: "/api/returns/return-refund"
+  },
+  fulfillmentOrders: {
+    prepare: "/api/fulfillment-orders/prepare-fulfillment-order"
+  },
+  fulfillments: {
+    bulkImport: "/api/fulfillments/bulk-import"
+  },
+  carts: {
+    mine: "/api/carts/mine",
+    merge: "/api/carts/merge",
+    addItem: "/api/carts/add-item",
+    updateItem: "/api/carts/update-item",
+    removeItem: "/api/carts/remove-item",
+    applyDiscount: "/api/carts/apply-discount",
+    removeDiscount: "/api/carts/remove-discount",
+    clear: "/api/carts/clear"
+  }
+};
+var COMMERCE_ENDPOINT_PATHS = Object.values(
+  COMMERCE_ENDPOINTS
+).flatMap((group) => Object.values(group));
+
 // src/core/api/cart-api.ts
 var CartApi = class extends CustomerScopedApi {
   constructor(options) {
-    super("CartApi", options);
+    super("CartApi", { ...options, requiresCredential: false });
   }
   async execute(endpoint, method, body) {
     return this.request(endpoint, { method, body });
   }
-  getCart(cartId) {
+  /**
+   * Create a cart and receive its `cartToken`. Store the token and pass it to
+   * every subsequent cart operation.
+   */
+  createCart(params = {}) {
+    return this.execute("/api/carts/create", "POST", params);
+  }
+  getCart(cartToken) {
+    return this.execute("/api/carts/get", "POST", { cartToken });
+  }
+  merge(params) {
     return this.execute(
-      `/api/carts/${cartId}?depth=0&joins=false`,
-      "GET"
+      COMMERCE_ENDPOINTS.carts.merge,
+      "POST",
+      params
+    );
+  }
+  /**
+   * Resolve the authenticated customer's active cart by JWT (no `cartToken`
+   * required). Returns the cart and its capability handle, or both `null` when
+   * the customer has no active cart. Requires a customer token.
+   */
+  mine() {
+    return this.execute(
+      COMMERCE_ENDPOINTS.carts.mine,
+      "POST",
+      {}
     );
   }
   addItem(params) {
-    return this.execute("/api/carts/add-item", "POST", params);
+    return this.execute(
+      COMMERCE_ENDPOINTS.carts.addItem,
+      "POST",
+      params
+    );
   }
   updateItem(params) {
-    return this.execute("/api/carts/update-item", "POST", params);
+    return this.execute(
+      COMMERCE_ENDPOINTS.carts.updateItem,
+      "POST",
+      params
+    );
   }
   removeItem(params) {
     return this.execute(
-      "/api/carts/remove-item",
+      COMMERCE_ENDPOINTS.carts.removeItem,
       "POST",
       params
     );
   }
   applyDiscount(params) {
-    return this.execute("/api/carts/apply-discount", "POST", params);
+    return this.execute(
+      COMMERCE_ENDPOINTS.carts.applyDiscount,
+      "POST",
+      params
+    );
   }
   removeDiscount(params) {
-    return this.execute("/api/carts/remove-discount", "POST", params);
+    return this.execute(
+      COMMERCE_ENDPOINTS.carts.removeDiscount,
+      "POST",
+      params
+    );
   }
   clearCart(params) {
     return this.execute(
-      "/api/carts/clear",
+      COMMERCE_ENDPOINTS.carts.clear,
       "POST",
       params
     );
@@ -2460,6 +2600,7 @@ function compareVariantOrder(a, b) {
 function getVariantAvailableForSale(variant) {
   if (variant.isActive === false) return false;
   if (variant.isUnlimited) return true;
+  if (variant.inventoryPolicy === "continue") return true;
   return (variant.stock ?? 0) - (variant.reservedStock ?? 0) > 0;
 }
 function isVariantAvailableForSale(variant) {
@@ -2925,26 +3066,61 @@ var OrderApi = class extends BaseApi {
     const { idempotencyKey } = params;
     const normalizedBody = normalizeCreateOrderBody(params);
     return this.request(
-      "/api/orders/create",
+      COMMERCE_ENDPOINTS.orders.create,
       normalizedBody,
       idempotencyRequestOptions(idempotencyKey)
     );
   }
   updateOrder(params) {
-    return this.request("/api/orders/update", params);
+    return this.request(COMMERCE_ENDPOINTS.orders.update, params);
   }
   updateTransaction(params) {
-    return this.request("/api/transactions/update", params);
+    return this.request(
+      COMMERCE_ENDPOINTS.transactions.update,
+      params
+    );
   }
   confirmPayment(params) {
     const { body, idempotencyKey } = splitIdempotencyKey(params);
     const headerKey = idempotencyKey ?? params.providerEventId;
     return this.request(
-      "/api/orders/confirm-payment",
+      COMMERCE_ENDPOINTS.orders.confirmPayment,
       body,
       idempotencyRequestOptions(headerKey)
     );
   }
+  /**
+   * Resolve an order + its payment transaction by PG payment id. Replaces raw
+   * `transactions.find({ where: { pgPaymentId } })` + a local file index in
+   * storefronts. Server-only (sk01_) read of the full populated Order.
+   */
+  getByPaymentId(params) {
+    const query = new URLSearchParams({
+      pgProvider: params.pgProvider,
+      pgPaymentId: params.pgPaymentId
+    }).toString();
+    return this.request(
+      `${COMMERCE_ENDPOINTS.orders.byPayment}?${query}`,
+      void 0,
+      { method: "GET" }
+    );
+  }
+  /**
+   * Composed facade: confirm a provider payment, then resolve the
+   * depth-populated order/transaction by the same payment id. `confirmPayment`'s
+   * wire response carries only IDs (its contract is `.strict()`); this returns
+   * the populated `Order` so storefronts stop reconstructing order state
+   * locally. Two round trips by design — the alternative (widening the strict
+   * confirm-payment wire contract to embed a full Order) is rejected.
+   */
+  async confirmPaymentReturningOrder(params) {
+    const confirmation = await this.confirmPayment(params);
+    const { order, transaction } = await this.getByPaymentId({
+      pgProvider: params.pgProvider,
+      pgPaymentId: params.pgPaymentId
+    });
+    return { ...confirmation, order, transaction };
+  }
   cancelOrder(params) {
     const { idempotencyKey } = params;
     const body = {
@@ -2953,14 +3129,14 @@ var OrderApi = class extends BaseApi {
       reasonDetail: params.reasonDetail
     };
     return this.request(
-      "/api/orders/cancel",
+      COMMERCE_ENDPOINTS.orders.cancel,
       body,
       idempotencyKey ? { headers: { "X-Idempotency-Key": idempotencyKey } } : void 0
     );
   }
   resolveCancelRefund(params) {
     return this.request(
-      "/api/orders/resolve-cancel-refund",
+      COMMERCE_ENDPOINTS.orders.resolveCancelRefund,
       {
         orderNumber: params.orderNumber,
         idempotencyKey: params.idempotencyKey,
@@ -2981,7 +3157,7 @@ var OrderApi = class extends BaseApi {
   checkout(params) {
     const { body, idempotencyKey } = splitIdempotencyKey(params);
     return this.request(
-      "/api/orders/checkout",
+      COMMERCE_ENDPOINTS.orders.checkout,
       body,
       idempotencyRequestOptions(idempotencyKey)
     );
@@ -2989,30 +3165,33 @@ var OrderApi = class extends BaseApi {
   createFulfillment(params) {
     const { body, idempotencyKey } = splitIdempotencyKey(params);
     return this.request(
-      "/api/orders/create-fulfillment",
+      COMMERCE_ENDPOINTS.orders.createFulfillment,
       body,
       idempotencyRequestOptions(idempotencyKey)
     );
   }
   prepareFulfillmentOrder(params) {
     return this.request(
-      "/api/fulfillment-orders/prepare-fulfillment-order",
+      COMMERCE_ENDPOINTS.fulfillmentOrders.prepare,
       params
     );
   }
   updateFulfillment(params) {
-    return this.request("/api/orders/update-fulfillment", params);
+    return this.request(
+      COMMERCE_ENDPOINTS.orders.updateFulfillment,
+      params
+    );
   }
   bulkImportFulfillments(params) {
     return this.request(
-      "/api/fulfillments/bulk-import",
+      COMMERCE_ENDPOINTS.fulfillments.bulkImport,
       params
     );
   }
   returnWithRefund(params) {
     const { body, idempotencyKey } = splitIdempotencyKey(params);
     return this.request(
-      "/api/returns/return-refund",
+      COMMERCE_ENDPOINTS.returns.returnRefund,
       body,
       idempotencyRequestOptions(idempotencyKey)
     );
@@ -3020,13 +3199,13 @@ var OrderApi = class extends BaseApi {
   createReturn(params) {
     const { body, idempotencyKey } = splitIdempotencyKey(params);
     return this.request(
-      "/api/returns/create",
+      COMMERCE_ENDPOINTS.returns.create,
       body,
       idempotencyRequestOptions(idempotencyKey)
     );
   }
   updateReturn(params) {
-    return this.request("/api/returns/update", params);
+    return this.request(COMMERCE_ENDPOINTS.returns.update, params);
   }
 };
 
@@ -3112,13 +3291,16 @@ var ServerCommerceClient = class {
       upsert: productApi.upsert.bind(productApi)
     };
     this.cart = {
+      create: cartApi.createCart.bind(cartApi),
       get: cartApi.getCart.bind(cartApi),
       addItem: cartApi.addItem.bind(cartApi),
       updateItem: cartApi.updateItem.bind(cartApi),
       removeItem: cartApi.removeItem.bind(cartApi),
       applyDiscount: cartApi.applyDiscount.bind(cartApi),
       removeDiscount: cartApi.removeDiscount.bind(cartApi),
-      clear: cartApi.clearCart.bind(cartApi)
+      clear: cartApi.clearCart.bind(cartApi),
+      merge: cartApi.merge.bind(cartApi),
+      mine: cartApi.mine.bind(cartApi)
     };
     this.orders = {
       checkout: orderApi.checkout.bind(orderApi),
@@ -3126,6 +3308,8 @@ var ServerCommerceClient = class {
       update: orderApi.updateOrder.bind(orderApi),
       updateTransaction: orderApi.updateTransaction.bind(orderApi),
       confirmPayment: orderApi.confirmPayment.bind(orderApi),
+      confirmPaymentReturningOrder: orderApi.confirmPaymentReturningOrder.bind(orderApi),
+      getByPaymentId: orderApi.getByPaymentId.bind(orderApi),
       cancelOrder: orderApi.cancelOrder.bind(orderApi),
       resolveCancelRefund: orderApi.resolveCancelRefund.bind(orderApi),
       createFulfillment: orderApi.createFulfillment.bind(orderApi),