@aglyn/plugins-commerce 1.0.0-beta.143

package/src/lib/server/process-restock.js

@@ -0,0 +1,219 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn/server";
+import * as CommerceModel from "../model/index.js";
+import { firebaseAdmin, getOrgForHost, hostSendingIdentity, meterHostEmail } from "@aglyn/tenant-data-admin";
+import { isDocumentId } from "@aglyn/tenant-data-admin/server/document-id";
+import { isDeferrableSendResult, isEmailConfigured, loadHostEmail, renderLoadedHostEmail, sendEmail } from "@aglyn/shared-util-email";
+import { pluginJobHostGate } from "@aglyn/aglyn/server";
+/**
+ * The back-in-stock pass itself, separated from its HTTP door (AGL-2227).
+ *
+ * Same finding as `process-abandoned.ts` beside it: `x-cron-secret`-gated and
+ * **never invoked by anything**. `commerce/notify-restock` accepts the
+ * shopper's "tell me when it's back" from the storefront and writes
+ * `hosts/{hostId}/restockAlerts`; this is the only thing that would ever mail
+ * them. Shoppers have been entering an address into a queue with no drain.
+ *
+ * Exported so `server.ts` can put it on the platform job beat.
+ */ export async function scanRestockAlerts(/** The lockdown gate, injected by the caller (AGL-2495). Not optional. */ gate) {
+    const firestore = firebaseAdmin.app().firestore();
+    const alerts = await firestore.collectionGroup('restockAlerts').where('notifiedAtMs', '==', null).limit(200).get();
+    let sent = 0;
+    const productCache = new Map();
+    // Resolve each host's designed template once per run (AGL-770).
+    const templateCache = new Map();
+    // White-label brand per host (White-Label Phase 3): resolved once per host
+    // from the owning org doc through the one shared resolver.
+    const brandingByHost = new Map();
+    /*
+   * One identity resolution per SITE, not per message.
+   *
+   * The same reason the branding map above exists: this sweep runs across
+   * every site, and an uncached resolution here would be two Firestore reads
+   * per recipient rather than per host. Scoped to the run, so a domain
+   * un-verified by the re-check sweep is picked up on the next one.
+   */ const identityByHost = new Map();
+    /** Each site's public origin, for the unsubscribe link on the alert. */ const siteBaseByHost = new Map();
+    let skippedLocked = 0;
+    for (const docSnapshot of alerts.docs){
+        var _product_name, _ref, _siteBaseByHost_get;
+        var _brandingByHost_get;
+        const hostRef = docSnapshot.ref.parent.parent;
+        if (!hostRef) continue;
+        // LOCKDOWN (AGL-2495), before anything in this body writes. The poisoned-
+        // row retirement below stamps `notifiedAtMs`, which is a write, and the
+        // email is a message sent in a suspended merchant's name — both wait.
+        //
+        // SKIPPED, NOT DROPPED: an alert that is not stamped is re-scanned on the
+        // next beat, which is exactly the behaviour the `notifiedAtMs == null`
+        // query already relies on.
+        if (await gate.isLocked(hostRef.id)) {
+            skippedLocked += 1;
+            continue;
+        }
+        const data = docSnapshot.data();
+        // AGL-1774: `productId` is a STORED FIELD written by an unauthenticated
+        // POST (`notify-restock.ts`), and this line is where it becomes a path
+        // component. `.doc()` appends a slash-separated path and throws
+        // SYNCHRONOUSLY on an even component count — a throw that landed here,
+        // outside the loop body's own error handling, so it aborted the entire
+        // run. The scan is a `collectionGroup`, so that run is platform-wide;
+        // and because the offending alert was never stamped `notifiedAtMs` it
+        // returned on every subsequent run, taking every alert ordered after it
+        // down too. One anonymous request stopped back-in-stock email for every
+        // merchant, permanently.
+        //
+        // `notify-restock.ts` now refuses such a value at the door, but this
+        // guard is not redundant with that one: rows written BEFORE the fix are
+        // already in the database, and a create-time check does nothing about
+        // them. Treated as "no product" rather than as an error, which is the
+        // correct refusal by AGL-1760's test — there is no product, so there is
+        // no email owed and no work to discard — and it stamps the alert below
+        // so a poisoned row is retired instead of re-scanned forever.
+        const productId = isDocumentId(data.productId) ? data.productId : '';
+        const cacheKey = `${hostRef.id}:${productId}`;
+        if (productId && !productCache.has(cacheKey)) {
+            const productSnapshot = await hostRef.collection('products').doc(productId).get();
+            productCache.set(cacheKey, productSnapshot.exists ? CommerceModel.liftLegacyProduct(productSnapshot.data()) : null);
+        }
+        const product = productId ? productCache.get(cacheKey) : null;
+        if (!product) {
+            await docSnapshot.ref.set({
+                notifiedAtMs: Date.now(),
+                skipped: true
+            }, {
+                merge: true
+            }).catch(()=>undefined);
+            continue;
+        }
+        const total = CommerceModel.productInventory(product);
+        if (total != null && total <= 0) continue;
+        const productUrl = `/products/${product.slug}`;
+        let loaded = templateCache.get(hostRef.id);
+        if (loaded === undefined) {
+            var _Aglyn_hostPublicOrigin;
+            var _this;
+            loaded = await loadHostEmail(firestore, hostRef.id, 'back-in-stock');
+            templateCache.set(hostRef.id, loaded);
+            brandingByHost.set(hostRef.id, Aglyn.resolveBrandingProfile((_this = await getOrgForHost(hostRef.id).catch(()=>null)) == null ? void 0 : _this.org));
+            // The site's own origin, for the unsubscribe link. Resolved once per
+            // host beside the branding, because this sweep is a `collectionGroup`
+            // over every site's alerts and a read per alert would be a read per
+            // shopper.
+            const hostSnapshot = await hostRef.get().catch(()=>null);
+            siteBaseByHost.set(hostRef.id, (_Aglyn_hostPublicOrigin = Aglyn.hostPublicOrigin({
+                cname: hostSnapshot == null ? void 0 : hostSnapshot.get('cname'),
+                subdomain: hostSnapshot == null ? void 0 : hostSnapshot.get('subdomain')
+            })) != null ? _Aglyn_hostPublicOrigin : '');
+        }
+        const designed = loaded ? renderLoadedHostEmail(loaded, {
+            'product.name': String((_product_name = product.name) != null ? _product_name : ''),
+            'product.url': productUrl
+        }, Aglyn.sanitizeAuthorHtml) : null;
+        /*
+     * MARKETING, and `'bulk'` priority, which this sweep is entitled to
+     * because it is resumable: an alert left unstamped is re-scanned by the
+     * `notifiedAtMs == null` query on the next beat, so a refusal means "not
+     * this hour" rather than a shopper who asked to be told and never was.
+     *
+     * The gate adds the unsubscribe header pair and a visible link, checks
+     * both suppression lists, and counts this against how much mail the
+     * shopper has had from this site today.
+     */ const result = await sendEmail(_extends({
+            to: String(data.email),
+            subject: (_ref = designed == null ? void 0 : designed.subject) != null ? _ref : `Back in stock: ${product.name}`,
+            text: (designed == null ? void 0 : designed.text) || `${product.name} is available again — grab it before it sells ` + `out:\n\n${productUrl}`
+        }, (designed == null ? void 0 : designed.html) ? {
+            html: designed.html
+        } : {}, {
+            fromName: (_brandingByHost_get = brandingByHost.get(hostRef.id)) == null ? void 0 : _brandingByHost_get.fromName,
+            sendingIdentity: await hostSendingIdentity(hostRef.id, identityByHost),
+            audience: 'tenant',
+            context: 'restock alert',
+            priority: 'bulk',
+            /*
+       * A restock alert IS the "Product updates" stream — the catalog entry
+       * names restocks in its own description. Declared so a shopper who
+       * unticked that stream on the preference page is not mailed it: the
+       * gate asks the topic only for callers that name one, so a sender that
+       * left this off would keep mailing them.
+       */ marketing: {
+                hostId: hostRef.id,
+                siteBase: (_siteBaseByHost_get = siteBaseByHost.get(hostRef.id)) != null ? _siteBaseByHost_get : '',
+                topicId: Aglyn.EMAIL_TOPIC_PRODUCT_UPDATES
+            }
+        }));
+        /*
+     * SKIPPED, NOT DROPPED — the lockdown rule above, applied to the two
+     * refusals a later beat can pass.
+     *
+     * `notifiedAtMs` is what retires an alert from this sweep. Stamping it
+     * after the hourly ceiling or the frequency cap refused would drop a
+     * request from a shopper who asked to be told; NOT stamping it after a
+     * suppression or a rejection would re-read the same doomed row forever,
+     * inside a window of two hundred, starving every alert behind it.
+     */ if (isDeferrableSendResult(result)) continue;
+        // Cost meter (AGL-1438). One alert per shopper who asked to be told,
+        // like the abandoned-checkout reminder beside it, and on the DELIVERED
+        // message only — a suppressed recipient produced no message and no cost.
+        if (result.sent) await meterHostEmail(hostRef.id);
+        await docSnapshot.ref.set({
+            notifiedAtMs: Date.now()
+        }, {
+            merge: true
+        }).catch(()=>undefined);
+        if (result.sent) sent += 1;
+    }
+    return {
+        scanned: alerts.size,
+        sent,
+        skippedLocked
+    };
+}
+/**
+ * HTTP door for the pass above (AGL-326), kept for manual/ops invocation and
+ * for the console's "send now" control.
+ */ export const processRestockHandler = async (req, res)=>{
+    if (req.method !== 'POST') {
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const cronSecret = process.env.CRON_SECRET;
+    if (!cronSecret || req.headers['x-cron-secret'] !== cronSecret) {
+        return res.status(401).json({
+            error: 'Unauthorized'
+        });
+    }
+    if (!isEmailConfigured()) {
+        return res.status(501).json({
+            error: 'Email is not configured.'
+        });
+    }
+    try {
+        // The manual door asks the same question the beat does (AGL-2495).
+        return res.status(200).json(await scanRestockAlerts(pluginJobHostGate()));
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({
+            error: 'Processing failed'
+        });
+    }
+};
+
+//# sourceMappingURL=process-restock.js.map

package/src/lib/server/process-restock.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/process-restock.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport * as CommerceModel from '../model'\nimport {\n  firebaseAdmin,\n  getOrgForHost,\n  hostSendingIdentity,\n  meterHostEmail,\n} from '@aglyn/tenant-data-admin'\nimport { isDocumentId } from '@aglyn/tenant-data-admin/server/document-id'\nimport {\n  isDeferrableSendResult,\n  isEmailConfigured,\n  loadHostEmail,\n  renderLoadedHostEmail,\n  sendEmail,\n  type LoadedHostEmail,\n} from '@aglyn/shared-util-email'\nimport {\n  type PluginApiHandler,\n  type PluginJobHostGate,\n  pluginJobHostGate,\n} from '@aglyn/aglyn/server'\n\nexport interface RestockScanResult {\n  scanned: number\n  sent: number\n  /** Alerts left unstamped because their site is locked (AGL-2495). */\n  skippedLocked: number\n}\n\n/**\n * The back-in-stock pass itself, separated from its HTTP door (AGL-2227).\n *\n * Same finding as `process-abandoned.ts` beside it: `x-cron-secret`-gated and\n * **never invoked by anything**. `commerce/notify-restock` accepts the\n * shopper's \"tell me when it's back\" from the storefront and writes\n * `hosts/{hostId}/restockAlerts`; this is the only thing that would ever mail\n * them. Shoppers have been entering an address into a queue with no drain.\n *\n * Exported so `server.ts` can put it on the platform job beat.\n */\nexport async function scanRestockAlerts(\n  /** The lockdown gate, injected by the caller (AGL-2495). Not optional. */\n  gate: PluginJobHostGate,\n): Promise<RestockScanResult> {\n  const firestore = firebaseAdmin.app().firestore()\n  const alerts = await firestore\n    .collectionGroup('restockAlerts')\n    .where('notifiedAtMs', '==', null)\n    .limit(200)\n    .get()\n  let sent = 0\n  const productCache = new Map<string, CommerceModel.HostProduct | null>()\n  // Resolve each host's designed template once per run (AGL-770).\n  const templateCache = new Map<string, LoadedHostEmail | null>()\n  // White-label brand per host (White-Label Phase 3): resolved once per host\n  // from the owning org doc through the one shared resolver.\n  const brandingByHost = new Map<string, Aglyn.ResolvedBrandingProfile>()\n  /*\n   * One identity resolution per SITE, not per message.\n   *\n   * The same reason the branding map above exists: this sweep runs across\n   * every site, and an uncached resolution here would be two Firestore reads\n   * per recipient rather than per host. Scoped to the run, so a domain\n   * un-verified by the re-check sweep is picked up on the next one.\n   */\n  const identityByHost = new Map<\n    string,\n    Awaited<ReturnType<typeof hostSendingIdentity>>\n  >()\n  /** Each site's public origin, for the unsubscribe link on the alert. */\n  const siteBaseByHost = new Map<string, string>()\n  let skippedLocked = 0\n  for (const docSnapshot of alerts.docs) {\n    const hostRef = docSnapshot.ref.parent.parent\n    if (!hostRef) continue\n    // LOCKDOWN (AGL-2495), before anything in this body writes. The poisoned-\n    // row retirement below stamps `notifiedAtMs`, which is a write, and the\n    // email is a message sent in a suspended merchant's name — both wait.\n    //\n    // SKIPPED, NOT DROPPED: an alert that is not stamped is re-scanned on the\n    // next beat, which is exactly the behaviour the `notifiedAtMs == null`\n    // query already relies on.\n    if (await gate.isLocked(hostRef.id)) {\n      skippedLocked += 1\n      continue\n    }\n    const data = docSnapshot.data() as any\n    // AGL-1774: `productId` is a STORED FIELD written by an unauthenticated\n    // POST (`notify-restock.ts`), and this line is where it becomes a path\n    // component. `.doc()` appends a slash-separated path and throws\n    // SYNCHRONOUSLY on an even component count — a throw that landed here,\n    // outside the loop body's own error handling, so it aborted the entire\n    // run. The scan is a `collectionGroup`, so that run is platform-wide;\n    // and because the offending alert was never stamped `notifiedAtMs` it\n    // returned on every subsequent run, taking every alert ordered after it\n    // down too. One anonymous request stopped back-in-stock email for every\n    // merchant, permanently.\n    //\n    // `notify-restock.ts` now refuses such a value at the door, but this\n    // guard is not redundant with that one: rows written BEFORE the fix are\n    // already in the database, and a create-time check does nothing about\n    // them. Treated as \"no product\" rather than as an error, which is the\n    // correct refusal by AGL-1760's test — there is no product, so there is\n    // no email owed and no work to discard — and it stamps the alert below\n    // so a poisoned row is retired instead of re-scanned forever.\n    const productId = isDocumentId(data.productId) ? data.productId : ''\n    const cacheKey = `${hostRef.id}:${productId}`\n    if (productId && !productCache.has(cacheKey)) {\n      const productSnapshot = await hostRef\n        .collection('products')\n        .doc(productId)\n        .get()\n      productCache.set(\n        cacheKey,\n        productSnapshot.exists\n          ? CommerceModel.liftLegacyProduct(productSnapshot.data() as any)\n          : null,\n      )\n    }\n    const product = productId ? productCache.get(cacheKey) : null\n    if (!product) {\n      await docSnapshot.ref\n        .set({ notifiedAtMs: Date.now(), skipped: true }, { merge: true })\n        .catch(() => undefined)\n      continue\n    }\n    const total = CommerceModel.productInventory(product)\n    if (total != null && total <= 0) continue\n    const productUrl = `/products/${product.slug}`\n    let loaded = templateCache.get(hostRef.id)\n    if (loaded === undefined) {\n      loaded = await loadHostEmail(firestore, hostRef.id, 'back-in-stock')\n      templateCache.set(hostRef.id, loaded)\n      brandingByHost.set(\n        hostRef.id,\n        Aglyn.resolveBrandingProfile(\n          (await getOrgForHost(hostRef.id).catch(() => null))?.org as never,\n        ),\n      )\n      // The site's own origin, for the unsubscribe link. Resolved once per\n      // host beside the branding, because this sweep is a `collectionGroup`\n      // over every site's alerts and a read per alert would be a read per\n      // shopper.\n      const hostSnapshot = await hostRef.get().catch(() => null)\n      siteBaseByHost.set(\n        hostRef.id,\n        Aglyn.hostPublicOrigin({\n          cname: hostSnapshot?.get('cname'),\n          subdomain: hostSnapshot?.get('subdomain'),\n        }) ?? '',\n      )\n    }\n    const designed = loaded\n      ? renderLoadedHostEmail(\n          loaded,\n          {\n            'product.name': String(product.name ?? ''),\n            'product.url': productUrl,\n          },\n          Aglyn.sanitizeAuthorHtml,\n        )\n      : null\n    /*\n     * MARKETING, and `'bulk'` priority, which this sweep is entitled to\n     * because it is resumable: an alert left unstamped is re-scanned by the\n     * `notifiedAtMs == null` query on the next beat, so a refusal means \"not\n     * this hour\" rather than a shopper who asked to be told and never was.\n     *\n     * The gate adds the unsubscribe header pair and a visible link, checks\n     * both suppression lists, and counts this against how much mail the\n     * shopper has had from this site today.\n     */\n    const result = await sendEmail({\n      to: String(data.email),\n      subject: designed?.subject ?? `Back in stock: ${product.name}`,\n      text:\n        designed?.text ||\n        `${product.name} is available again — grab it before it sells ` +\n          `out:\\n\\n${productUrl}`,\n      ...(designed?.html ? { html: designed.html } : {}),\n      fromName: brandingByHost.get(hostRef.id)?.fromName,\n      sendingIdentity: await hostSendingIdentity(hostRef.id, identityByHost),\n      audience: 'tenant',\n      context: 'restock alert',\n      priority: 'bulk',\n      /*\n       * A restock alert IS the \"Product updates\" stream — the catalog entry\n       * names restocks in its own description. Declared so a shopper who\n       * unticked that stream on the preference page is not mailed it: the\n       * gate asks the topic only for callers that name one, so a sender that\n       * left this off would keep mailing them.\n       */\n      marketing: {\n        hostId: hostRef.id,\n        siteBase: siteBaseByHost.get(hostRef.id) ?? '',\n        topicId: Aglyn.EMAIL_TOPIC_PRODUCT_UPDATES,\n      },\n    })\n    /*\n     * SKIPPED, NOT DROPPED — the lockdown rule above, applied to the two\n     * refusals a later beat can pass.\n     *\n     * `notifiedAtMs` is what retires an alert from this sweep. Stamping it\n     * after the hourly ceiling or the frequency cap refused would drop a\n     * request from a shopper who asked to be told; NOT stamping it after a\n     * suppression or a rejection would re-read the same doomed row forever,\n     * inside a window of two hundred, starving every alert behind it.\n     */\n    if (isDeferrableSendResult(result)) continue\n    // Cost meter (AGL-1438). One alert per shopper who asked to be told,\n    // like the abandoned-checkout reminder beside it, and on the DELIVERED\n    // message only — a suppressed recipient produced no message and no cost.\n    if (result.sent) await meterHostEmail(hostRef.id)\n    await docSnapshot.ref\n      .set({ notifiedAtMs: Date.now() }, { merge: true })\n      .catch(() => undefined)\n    if (result.sent) sent += 1\n  }\n  return { scanned: alerts.size, sent, skippedLocked }\n}\n\n/**\n * HTTP door for the pass above (AGL-326), kept for manual/ops invocation and\n * for the console's \"send now\" control.\n */\nexport const processRestockHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const cronSecret = process.env.CRON_SECRET\n  if (!cronSecret || req.headers['x-cron-secret'] !== cronSecret) {\n    return res.status(401).json({ error: 'Unauthorized' })\n  }\n  if (!isEmailConfigured()) {\n    return res.status(501).json({ error: 'Email is not configured.' })\n  }\n  try {\n    // The manual door asks the same question the beat does (AGL-2495).\n    return res.status(200).json(await scanRestockAlerts(pluginJobHostGate()))\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'Processing failed' })\n  }\n}\n"],"names":["Aglyn","CommerceModel","firebaseAdmin","getOrgForHost","hostSendingIdentity","meterHostEmail","isDocumentId","isDeferrableSendResult","isEmailConfigured","loadHostEmail","renderLoadedHostEmail","sendEmail","pluginJobHostGate","scanRestockAlerts","gate","firestore","app","alerts","collectionGroup","where","limit","get","sent","productCache","Map","templateCache","brandingByHost","identityByHost","siteBaseByHost","skippedLocked","docSnapshot","docs","product","hostRef","ref","parent","isLocked","id","data","productId","cacheKey","has","productSnapshot","collection","doc","set","exists","liftLegacyProduct","notifiedAtMs","Date","now","skipped","merge","catch","undefined","total","productInventory","productUrl","slug","loaded","resolveBrandingProfile","org","hostSnapshot","hostPublicOrigin","cname","subdomain","designed","String","name","sanitizeAuthorHtml","result","to","email","subject","text","html","fromName","sendingIdentity","audience","context","priority","marketing","hostId","siteBase","topicId","EMAIL_TOPIC_PRODUCT_UPDATES","scanned","size","processRestockHandler","req","res","method","status","json","error","cronSecret","process","env","CRON_SECRET","headers","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,sBAAqB;AAC5C,YAAYC,mBAAmB,oBAAU;AACzC,SACEC,aAAa,EACbC,aAAa,EACbC,mBAAmB,EACnBC,cAAc,QACT,2BAA0B;AACjC,SAASC,YAAY,QAAQ,8CAA6C;AAC1E,SACEC,sBAAsB,EACtBC,iBAAiB,EACjBC,aAAa,EACbC,qBAAqB,EACrBC,SAAS,QAEJ,2BAA0B;AACjC,SAGEC,iBAAiB,QACZ,sBAAqB;AAS5B;;;;;;;;;;CAUC,GACD,OAAO,eAAeC,kBACpB,wEAAwE,GACxEC,IAAuB;IAEvB,MAAMC,YAAYb,cAAcc,GAAG,GAAGD,SAAS;IAC/C,MAAME,SAAS,MAAMF,UAClBG,eAAe,CAAC,iBAChBC,KAAK,CAAC,gBAAgB,MAAM,MAC5BC,KAAK,CAAC,KACNC,GAAG;IACN,IAAIC,OAAO;IACX,MAAMC,eAAe,IAAIC;IACzB,gEAAgE;IAChE,MAAMC,gBAAgB,IAAID;IAC1B,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAME,iBAAiB,IAAIF;IAC3B;;;;;;;GAOC,GACD,MAAMG,iBAAiB,IAAIH;IAI3B,sEAAsE,GACtE,MAAMI,iBAAiB,IAAIJ;IAC3B,IAAIK,gBAAgB;IACpB,KAAK,MAAMC,eAAeb,OAAOc,IAAI,CAAE;YAoFNC,qBAsCjBJ;YAdFF;QA3GZ,MAAMO,UAAUH,YAAYI,GAAG,CAACC,MAAM,CAACA,MAAM;QAC7C,IAAI,CAACF,SAAS;QACd,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,EAAE;QACF,0EAA0E;QAC1E,uEAAuE;QACvE,2BAA2B;QAC3B,IAAI,MAAMnB,KAAKsB,QAAQ,CAACH,QAAQI,EAAE,GAAG;YACnCR,iBAAiB;YACjB;QACF;QACA,MAAMS,OAAOR,YAAYQ,IAAI;QAC7B,wEAAwE;QACxE,uEAAuE;QACvE,gEAAgE;QAChE,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,yBAAyB;QACzB,EAAE;QACF,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,8DAA8D;QAC9D,MAAMC,YAAYjC,aAAagC,KAAKC,SAAS,IAAID,KAAKC,SAAS,GAAG;QAClE,MAAMC,WAAW,GAAGP,QAAQI,EAAE,CAAC,CAAC,EAAEE,WAAW;QAC7C,IAAIA,aAAa,CAAChB,aAAakB,GAAG,CAACD,WAAW;YAC5C,MAAME,kBAAkB,MAAMT,QAC3BU,UAAU,CAAC,YACXC,GAAG,CAACL,WACJlB,GAAG;YACNE,aAAasB,GAAG,CACdL,UACAE,gBAAgBI,MAAM,GAClB7C,cAAc8C,iBAAiB,CAACL,gBAAgBJ,IAAI,MACpD;QAER;QACA,MAAMN,UAAUO,YAAYhB,aAAaF,GAAG,CAACmB,YAAY;QACzD,IAAI,CAACR,SAAS;YACZ,MAAMF,YAAYI,GAAG,CAClBW,GAAG,CAAC;gBAAEG,cAAcC,KAAKC,GAAG;gBAAIC,SAAS;YAAK,GAAG;gBAAEC,OAAO;YAAK,GAC/DC,KAAK,CAAC,IAAMC;YACf;QACF;QACA,MAAMC,QAAQtD,cAAcuD,gBAAgB,CAACxB;QAC7C,IAAIuB,SAAS,QAAQA,SAAS,GAAG;QACjC,MAAME,aAAa,CAAC,UAAU,EAAEzB,QAAQ0B,IAAI,EAAE;QAC9C,IAAIC,SAASlC,cAAcJ,GAAG,CAACY,QAAQI,EAAE;QACzC,IAAIsB,WAAWL,WAAW;gBAgBtBtD;gBAVG;YALL2D,SAAS,MAAMlD,cAAcM,WAAWkB,QAAQI,EAAE,EAAE;YACpDZ,cAAcoB,GAAG,CAACZ,QAAQI,EAAE,EAAEsB;YAC9BjC,eAAemB,GAAG,CAChBZ,QAAQI,EAAE,EACVrC,MAAM4D,sBAAsB,EACzB,QAAA,MAAMzD,cAAc8B,QAAQI,EAAE,EAAEgB,KAAK,CAAC,IAAM,0BAA7C,AAAC,MAAoDQ,GAAG;YAG5D,qEAAqE;YACrE,sEAAsE;YACtE,oEAAoE;YACpE,WAAW;YACX,MAAMC,eAAe,MAAM7B,QAAQZ,GAAG,GAAGgC,KAAK,CAAC,IAAM;YACrDzB,eAAeiB,GAAG,CAChBZ,QAAQI,EAAE,GACVrC,0BAAAA,MAAM+D,gBAAgB,CAAC;gBACrBC,KAAK,EAAEF,gCAAAA,aAAczC,GAAG,CAAC;gBACzB4C,SAAS,EAAEH,gCAAAA,aAAczC,GAAG,CAAC;YAC/B,cAHArB,0BAGM;QAEV;QACA,MAAMkE,WAAWP,SACbjD,sBACEiD,QACA;YACE,gBAAgBQ,QAAOnC,gBAAAA,QAAQoC,IAAI,YAAZpC,gBAAgB;YACvC,eAAeyB;QACjB,GACAzD,MAAMqE,kBAAkB,IAE1B;QACJ;;;;;;;;;KASC,GACD,MAAMC,SAAS,MAAM3D,UAAU;YAC7B4D,IAAIJ,OAAO7B,KAAKkC,KAAK;YACrBC,OAAO,UAAEP,4BAAAA,SAAUO,OAAO,mBAAI,CAAC,eAAe,EAAEzC,QAAQoC,IAAI,EAAE;YAC9DM,MACER,CAAAA,4BAAAA,SAAUQ,IAAI,KACd,GAAG1C,QAAQoC,IAAI,CAAC,8CAA8C,CAAC,GAC7D,CAAC,QAAQ,EAAEX,YAAY;WACvBS,CAAAA,4BAAAA,SAAUS,IAAI,IAAG;YAAEA,MAAMT,SAASS,IAAI;QAAC,IAAI,CAAC;YAChDC,QAAQ,GAAElD,sBAAAA,eAAeL,GAAG,CAACY,QAAQI,EAAE,sBAA7BX,oBAAgCkD,QAAQ;YAClDC,iBAAiB,MAAMzE,oBAAoB6B,QAAQI,EAAE,EAAEV;YACvDmD,UAAU;YACVC,SAAS;YACTC,UAAU;YACV;;;;;;OAMC,GACDC,WAAW;gBACTC,QAAQjD,QAAQI,EAAE;gBAClB8C,QAAQ,GAAEvD,sBAAAA,eAAeP,GAAG,CAACY,QAAQI,EAAE,aAA7BT,sBAAkC;gBAC5CwD,SAASpF,MAAMqF,2BAA2B;YAC5C;;QAEF;;;;;;;;;KASC,GACD,IAAI9E,uBAAuB+D,SAAS;QACpC,qEAAqE;QACrE,uEAAuE;QACvE,yEAAyE;QACzE,IAAIA,OAAOhD,IAAI,EAAE,MAAMjB,eAAe4B,QAAQI,EAAE;QAChD,MAAMP,YAAYI,GAAG,CAClBW,GAAG,CAAC;YAAEG,cAAcC,KAAKC,GAAG;QAAG,GAAG;YAAEE,OAAO;QAAK,GAChDC,KAAK,CAAC,IAAMC;QACf,IAAIgB,OAAOhD,IAAI,EAAEA,QAAQ;IAC3B;IACA,OAAO;QAAEgE,SAASrE,OAAOsE,IAAI;QAAEjE;QAAMO;IAAc;AACrD;AAEA;;;CAGC,GACD,OAAO,MAAM2D,wBAA0C,OAAOC,KAAKC;IACjE,IAAID,IAAIE,MAAM,KAAK,QAAQ;QACzB,OAAOD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,aAAaC,QAAQC,GAAG,CAACC,WAAW;IAC1C,IAAI,CAACH,cAAcN,IAAIU,OAAO,CAAC,gBAAgB,KAAKJ,YAAY;QAC9D,OAAOL,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAe;IACtD;IACA,IAAI,CAACtF,qBAAqB;QACxB,OAAOkF,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA2B;IAClE;IACA,IAAI;QACF,mEAAmE;QACnE,OAAOJ,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC,MAAMhF,kBAAkBD;IACtD,EAAE,OAAOkF,OAAO;QACdM,QAAQN,KAAK,CAACA;QACd,OAAOJ,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAoB;IAC3D;AACF,EAAC"}

package/src/lib/server/product-card.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PluginRecordCard } from '@aglyn/aglyn/plugin-manager/plugin-record-cards';
+/**
+ * What a product looks like in one line and one image, for a surface that is
+ * not this plugin's own — a designed email that features it, today.
+ *
+ * The rule that matters is the caption: a product's "from" price is the lowest
+ * variant price, and {@link productPriceRange} is the one place that is worked
+ * out. A caller that read the product document itself would have to import it
+ * to agree, which is how the marketing plugin came to depend on this one.
+ */
+export declare function productCard(productId: string, data: Record<string, any>): PluginRecordCard;
+/** Registered from both server registrars, so either app's handlers can ask. */
+export declare function registerProductCardReader(): void;

package/src/lib/server/product-card.js

@@ -0,0 +1,54 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { registerPluginRecordCardReader } from "@aglyn/aglyn/plugin-manager/plugin-record-cards";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { BUNDLE_ID } from "../constants/bundle-common.js";
+import { productPriceRange } from "../model/index.js";
+/**
+ * What a product looks like in one line and one image, for a surface that is
+ * not this plugin's own — a designed email that features it, today.
+ *
+ * The rule that matters is the caption: a product's "from" price is the lowest
+ * variant price, and {@link productPriceRange} is the one place that is worked
+ * out. A caller that read the product document itself would have to import it
+ * to agree, which is how the marketing plugin came to depend on this one.
+ */ export function productCard(productId, data) {
+    var _data_name, _data_imageUrl, _data_imageUrl1;
+    var _data_mediaUrls, _data_mediaUrls1;
+    const [minPrice] = productPriceRange(data);
+    return _extends({
+        title: String((_data_name = data['name']) != null ? _data_name : productId)
+    }, minPrice ? {
+        caption: `$${minPrice}`
+    } : {}, ((_data_imageUrl = data['imageUrl']) != null ? _data_imageUrl : (_data_mediaUrls = data['mediaUrls']) == null ? void 0 : _data_mediaUrls[0]) ? {
+        imageUrl: (_data_imageUrl1 = data['imageUrl']) != null ? _data_imageUrl1 : (_data_mediaUrls1 = data['mediaUrls']) == null ? void 0 : _data_mediaUrls1[0]
+    } : {}, data['slug'] ? {
+        path: `/products/${data['slug']}`
+    } : {});
+}
+/** Registered from both server registrars, so either app's handlers can ask. */ export function registerProductCardReader() {
+    registerPluginRecordCardReader('product', {
+        async read ({ hostId, id }) {
+            const snapshot = await firebaseAdmin.app().firestore().collection('hosts').doc(hostId).collection('products').doc(id).get();
+            return snapshot.exists ? productCard(id, snapshot.data()) : null;
+        }
+    }, {
+        pluginId: BUNDLE_ID
+    });
+}
+
+//# sourceMappingURL=product-card.js.map

package/src/lib/server/product-card.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/product-card.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  registerPluginRecordCardReader,\n  type PluginRecordCard,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-cards'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { BUNDLE_ID } from '../constants/bundle-common'\nimport { productPriceRange } from '../model'\n\n/**\n * What a product looks like in one line and one image, for a surface that is\n * not this plugin's own — a designed email that features it, today.\n *\n * The rule that matters is the caption: a product's \"from\" price is the lowest\n * variant price, and {@link productPriceRange} is the one place that is worked\n * out. A caller that read the product document itself would have to import it\n * to agree, which is how the marketing plugin came to depend on this one.\n */\nexport function productCard(\n  productId: string,\n  data: Record<string, any>,\n): PluginRecordCard {\n  const [minPrice] = productPriceRange(data as Parameters<typeof productPriceRange>[0])\n  return {\n    title: String(data['name'] ?? productId),\n    ...(minPrice ? { caption: `$${minPrice}` } : {}),\n    ...(data['imageUrl'] ?? data['mediaUrls']?.[0]\n      ? { imageUrl: data['imageUrl'] ?? data['mediaUrls']?.[0] }\n      : {}),\n    ...(data['slug'] ? { path: `/products/${data['slug']}` } : {}),\n  }\n}\n\n/** Registered from both server registrars, so either app's handlers can ask. */\nexport function registerProductCardReader(): void {\n  registerPluginRecordCardReader(\n    'product',\n    {\n      async read({ hostId, id }) {\n        const snapshot = await firebaseAdmin\n          .app()\n          .firestore()\n          .collection('hosts')\n          .doc(hostId)\n          .collection('products')\n          .doc(id)\n          .get()\n        return snapshot.exists\n          ? productCard(id, snapshot.data() as Record<string, any>)\n          : null\n      },\n    },\n    { pluginId: BUNDLE_ID },\n  )\n}\n"],"names":["registerPluginRecordCardReader","firebaseAdmin","BUNDLE_ID","productPriceRange","productCard","productId","data","minPrice","title","String","caption","imageUrl","path","registerProductCardReader","read","hostId","id","snapshot","app","firestore","collection","doc","get","exists","pluginId"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,8BAA8B,QAEzB,kDAAiD;AACxD,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SAASC,SAAS,QAAQ,gCAA4B;AACtD,SAASC,iBAAiB,QAAQ,oBAAU;AAE5C;;;;;;;;CAQC,GACD,OAAO,SAASC,YACdC,SAAiB,EACjBC,IAAyB;QAITA,YAEVA,gBACYA;QADQA,iBACYA;IALtC,MAAM,CAACC,SAAS,GAAGJ,kBAAkBG;IACrC,OAAO;QACLE,OAAOC,QAAOH,aAAAA,IAAI,CAAC,OAAO,YAAZA,aAAgBD;OAC1BE,WAAW;QAAEG,SAAS,CAAC,CAAC,EAAEH,UAAU;IAAC,IAAI,CAAC,GAC1CD,EAAAA,iBAAAA,IAAI,CAAC,WAAW,YAAhBA,kBAAoBA,kBAAAA,IAAI,CAAC,YAAY,qBAAjBA,eAAmB,CAAC,EAAE,IAC1C;QAAEK,QAAQ,GAAEL,kBAAAA,IAAI,CAAC,WAAW,YAAhBA,mBAAoBA,mBAAAA,IAAI,CAAC,YAAY,qBAAjBA,gBAAmB,CAAC,EAAE;IAAC,IACvD,CAAC,GACDA,IAAI,CAAC,OAAO,GAAG;QAAEM,MAAM,CAAC,UAAU,EAAEN,IAAI,CAAC,OAAO,EAAE;IAAC,IAAI,CAAC;AAEhE;AAEA,8EAA8E,GAC9E,OAAO,SAASO;IACdb,+BACE,WACA;QACE,MAAMc,MAAK,EAAEC,MAAM,EAAEC,EAAE,EAAE;YACvB,MAAMC,WAAW,MAAMhB,cACpBiB,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACN,QACJK,UAAU,CAAC,YACXC,GAAG,CAACL,IACJM,GAAG;YACN,OAAOL,SAASM,MAAM,GAClBnB,YAAYY,IAAIC,SAASX,IAAI,MAC7B;QACN;IACF,GACA;QAAEkB,UAAUtB;IAAU;AAE1B"}

package/src/lib/server/product.d.ts

@@ -0,0 +1,70 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginApiHandler } from '@aglyn/aglyn/server';
+import * as CommerceModel from '../model';
+export interface PublicProductDetail {
+    id: string;
+    name: string;
+    slug: string;
+    description?: string;
+    type: CommerceModel.ProductType;
+    mediaUrls: string[];
+    options: CommerceModel.ProductOption[];
+    variants: Array<{
+        id: string;
+        options?: Record<string, string>;
+        priceUsd: number;
+        compareAtPriceUsd?: number;
+        soldOut: boolean;
+        imageUrl?: string;
+        /**
+         * Merchant's stock-keeping unit (AGL-686). Carried into the public DTO
+         * so the server can put `sku` on the Product structured data — Google
+         * Merchant treats it as required for a product offer, and without it a
+         * listing is simply ineligible for rich results rather than warned about.
+         * It is already public information: it prints on receipts and invoices.
+         */
+        sku?: string;
+    }>;
+    tags?: string[];
+    /** Recurring billing (AGL-303) so the PDP frames the price. */
+    subscription?: {
+        interval: 'month' | 'year';
+        trialDays?: number;
+    };
+    /** Buyer may choose one-time OR subscribe (AGL-545). */
+    subscriptionOptional?: boolean;
+}
+/**
+ * Map a lifted product onto the public PDP DTO.
+ *
+ * Extracted (AGL-659) so the site-page resolver can put the SAME payload
+ * into page props as the API returns — the PDP block used to fetch this in
+ * an effect, which meant the server rendered a skeleton and crawlers saw a
+ * product page with no product in it. One definition keeps the server-
+ * rendered and client-fetched shapes from drifting.
+ *
+ * Display-only by design: stock is a `soldOut` boolean rather than a raw
+ * count, and the charge still prices server-side.
+ */
+export declare function toPublicProductDetail(id: string, product: ReturnType<typeof CommerceModel.liftLegacyProduct>): PublicProductDetail;
+/**
+ * Public product detail by slug (AGL-292): everything the PDP block
+ * needs — variants with per-option prices and stock booleans, never raw
+ * counts. Display-only; the charge still prices server-side.
+ */
+export declare const productHandler: PluginApiHandler;

package/src/lib/server/product.js

@@ -0,0 +1,105 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import * as CommerceModel from "../model/index.js";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+/**
+ * Map a lifted product onto the public PDP DTO.
+ *
+ * Extracted (AGL-659) so the site-page resolver can put the SAME payload
+ * into page props as the API returns — the PDP block used to fetch this in
+ * an effect, which meant the server rendered a skeleton and crawlers saw a
+ * product page with no product in it. One definition keeps the server-
+ * rendered and client-fetched shapes from drifting.
+ *
+ * Display-only by design: stock is a `soldOut` boolean rather than a raw
+ * count, and the charge still prices server-side.
+ */ export function toPublicProductDetail(id, product) {
+    var _product_mediaUrls, _product_options;
+    var _product_tags;
+    return _extends({
+        id,
+        name: product.name,
+        slug: product.slug
+    }, product.description ? {
+        description: product.description
+    } : {}, {
+        type: product.type,
+        mediaUrls: (_product_mediaUrls = product.mediaUrls) != null ? _product_mediaUrls : product.imageUrl ? [
+            product.imageUrl
+        ] : [],
+        options: (_product_options = product.options) != null ? _product_options : [],
+        variants: product.variants.map((variant)=>_extends({
+                id: variant.id
+            }, variant.options ? {
+                options: variant.options
+            } : {}, {
+                priceUsd: variant.priceUsd
+            }, variant.compareAtPriceUsd ? {
+                compareAtPriceUsd: variant.compareAtPriceUsd
+            } : {}, {
+                soldOut: variant.inventory != null && Number(variant.inventory) <= 0 && product.oversellPolicy !== 'backorder'
+            }, variant.imageUrl ? {
+                imageUrl: variant.imageUrl
+            } : {}, variant.sku ? {
+                sku: variant.sku
+            } : {}))
+    }, ((_product_tags = product.tags) == null ? void 0 : _product_tags.length) ? {
+        tags: product.tags
+    } : {}, product.subscription ? {
+        subscription: product.subscription
+    } : {}, product.subscription && product.subscriptionOptional ? {
+        subscriptionOptional: true
+    } : {});
+}
+/**
+ * Public product detail by slug (AGL-292): everything the PDP block
+ * needs — variants with per-option prices and stock booleans, never raw
+ * counts. Display-only; the charge still prices server-side.
+ */ export const productHandler = async (req, res)=>{
+    var _req_query_hostId, _req_query_slug;
+    const hostId = String((_req_query_hostId = req.query.hostId) != null ? _req_query_hostId : '');
+    const slug = String((_req_query_slug = req.query.slug) != null ? _req_query_slug : '');
+    if (!hostId || !slug) {
+        return res.status(400).json({
+            error: 'Missing hostId or slug'
+        });
+    }
+    try {
+        const firestore = firebaseAdmin.app().firestore();
+        const snapshot = await firestore.collection('hosts').doc(hostId).collection('products').where('slug', '==', slug).limit(1).get();
+        const docSnapshot = snapshot.docs[0];
+        const raw = docSnapshot == null ? void 0 : docSnapshot.data();
+        if (!raw || raw.deletedAt || raw.status !== 'active') {
+            return res.status(404).json({
+                error: 'Unknown product'
+            });
+        }
+        const product = CommerceModel.liftLegacyProduct(raw);
+        const detail = toPublicProductDetail(docSnapshot.id, product);
+        res.setHeader('Cache-Control', 'public, s-maxage=60, stale-while-revalidate=300');
+        return res.status(200).json({
+            product: detail
+        });
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({
+            error: 'Product unavailable'
+        });
+    }
+};
+
+//# sourceMappingURL=product.js.map

package/src/lib/server/product.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/product.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginApiHandler } from '@aglyn/aglyn/server'\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport * as CommerceModel from '../model'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\n\nexport interface PublicProductDetail {\n  id: string\n  name: string\n  slug: string\n  description?: string\n  type: CommerceModel.ProductType\n  mediaUrls: string[]\n  options: CommerceModel.ProductOption[]\n  variants: Array<{\n    id: string\n    options?: Record<string, string>\n    priceUsd: number\n    compareAtPriceUsd?: number\n    soldOut: boolean\n    imageUrl?: string\n    /**\n     * Merchant's stock-keeping unit (AGL-686). Carried into the public DTO\n     * so the server can put `sku` on the Product structured data — Google\n     * Merchant treats it as required for a product offer, and without it a\n     * listing is simply ineligible for rich results rather than warned about.\n     * It is already public information: it prints on receipts and invoices.\n     */\n    sku?: string\n  }>\n  tags?: string[]\n  /** Recurring billing (AGL-303) so the PDP frames the price. */\n  subscription?: { interval: 'month' | 'year'; trialDays?: number }\n  /** Buyer may choose one-time OR subscribe (AGL-545). */\n  subscriptionOptional?: boolean\n}\n\n/**\n * Map a lifted product onto the public PDP DTO.\n *\n * Extracted (AGL-659) so the site-page resolver can put the SAME payload\n * into page props as the API returns — the PDP block used to fetch this in\n * an effect, which meant the server rendered a skeleton and crawlers saw a\n * product page with no product in it. One definition keeps the server-\n * rendered and client-fetched shapes from drifting.\n *\n * Display-only by design: stock is a `soldOut` boolean rather than a raw\n * count, and the charge still prices server-side.\n */\nexport function toPublicProductDetail(\n  id: string,\n  product: ReturnType<typeof CommerceModel.liftLegacyProduct>,\n): PublicProductDetail {\n  return {\n    id,\n    name: product.name,\n    slug: product.slug,\n    ...(product.description ? { description: product.description } : {}),\n    type: product.type,\n    mediaUrls:\n      product.mediaUrls ?? (product.imageUrl ? [product.imageUrl] : []),\n    options: product.options ?? [],\n    variants: product.variants.map((variant) => ({\n      id: variant.id,\n      ...(variant.options ? { options: variant.options } : {}),\n      priceUsd: variant.priceUsd,\n      ...(variant.compareAtPriceUsd\n        ? { compareAtPriceUsd: variant.compareAtPriceUsd }\n        : {}),\n      soldOut:\n        variant.inventory != null &&\n        Number(variant.inventory) <= 0 &&\n        product.oversellPolicy !== 'backorder',\n      ...(variant.imageUrl ? { imageUrl: variant.imageUrl } : {}),\n      ...(variant.sku ? { sku: variant.sku } : {}),\n    })),\n    ...(product.tags?.length ? { tags: product.tags } : {}),\n    ...(product.subscription ? { subscription: product.subscription } : {}),\n    ...(product.subscription && product.subscriptionOptional\n      ? { subscriptionOptional: true }\n      : {}),\n  }\n}\n\n/**\n * Public product detail by slug (AGL-292): everything the PDP block\n * needs — variants with per-option prices and stock booleans, never raw\n * counts. Display-only; the charge still prices server-side.\n */\nexport const productHandler: PluginApiHandler = async (req, res) => {\n  const hostId = String(req.query.hostId ?? '')\n  const slug = String(req.query.slug ?? '')\n  if (!hostId || !slug) {\n    return res.status(400).json({ error: 'Missing hostId or slug' })\n  }\n  try {\n    const firestore = firebaseAdmin.app().firestore()\n    const snapshot = await firestore\n      .collection('hosts')\n      .doc(hostId)\n      .collection('products')\n      .where('slug', '==', slug)\n      .limit(1)\n      .get()\n    const docSnapshot = snapshot.docs[0]\n    const raw = docSnapshot?.data() as any\n    if (!raw || raw.deletedAt || raw.status !== 'active') {\n      return res.status(404).json({ error: 'Unknown product' })\n    }\n    const product = CommerceModel.liftLegacyProduct(raw)\n    const detail = toPublicProductDetail(docSnapshot.id, product)\n    res.setHeader(\n      'Cache-Control',\n      'public, s-maxage=60, stale-while-revalidate=300',\n    )\n    return res.status(200).json({ product: detail })\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'Product unavailable' })\n  }\n}\n"],"names":["CommerceModel","firebaseAdmin","toPublicProductDetail","id","product","name","slug","description","type","mediaUrls","imageUrl","options","variants","map","variant","priceUsd","compareAtPriceUsd","soldOut","inventory","Number","oversellPolicy","sku","tags","length","subscription","subscriptionOptional","productHandler","req","res","hostId","String","query","status","json","error","firestore","app","snapshot","collection","doc","where","limit","get","docSnapshot","docs","raw","data","deletedAt","liftLegacyProduct","detail","setHeader","console"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAID,YAAYA,mBAAmB,oBAAU;AACzC,SAASC,aAAa,QAAQ,2BAA0B;AAiCxD;;;;;;;;;;;CAWC,GACD,OAAO,SAASC,sBACdC,EAAU,EACVC,OAA2D;QASvDA,oBACOA;QAeLA;IAvBN,OAAO;QACLD;QACAE,MAAMD,QAAQC,IAAI;QAClBC,MAAMF,QAAQE,IAAI;OACdF,QAAQG,WAAW,GAAG;QAAEA,aAAaH,QAAQG,WAAW;IAAC,IAAI,CAAC;QAClEC,MAAMJ,QAAQI,IAAI;QAClBC,SAAS,GACPL,qBAAAA,QAAQK,SAAS,YAAjBL,qBAAsBA,QAAQM,QAAQ,GAAG;YAACN,QAAQM,QAAQ;SAAC,GAAG,EAAE;QAClEC,OAAO,GAAEP,mBAAAA,QAAQO,OAAO,YAAfP,mBAAmB,EAAE;QAC9BQ,UAAUR,QAAQQ,QAAQ,CAACC,GAAG,CAAC,CAACC,UAAa;gBAC3CX,IAAIW,QAAQX,EAAE;eACVW,QAAQH,OAAO,GAAG;gBAAEA,SAASG,QAAQH,OAAO;YAAC,IAAI,CAAC;gBACtDI,UAAUD,QAAQC,QAAQ;eACtBD,QAAQE,iBAAiB,GACzB;gBAAEA,mBAAmBF,QAAQE,iBAAiB;YAAC,IAC/C,CAAC;gBACLC,SACEH,QAAQI,SAAS,IAAI,QACrBC,OAAOL,QAAQI,SAAS,KAAK,KAC7Bd,QAAQgB,cAAc,KAAK;eACzBN,QAAQJ,QAAQ,GAAG;gBAAEA,UAAUI,QAAQJ,QAAQ;YAAC,IAAI,CAAC,GACrDI,QAAQO,GAAG,GAAG;gBAAEA,KAAKP,QAAQO,GAAG;YAAC,IAAI,CAAC;OAExCjB,EAAAA,gBAAAA,QAAQkB,IAAI,qBAAZlB,cAAcmB,MAAM,IAAG;QAAED,MAAMlB,QAAQkB,IAAI;IAAC,IAAI,CAAC,GACjDlB,QAAQoB,YAAY,GAAG;QAAEA,cAAcpB,QAAQoB,YAAY;IAAC,IAAI,CAAC,GACjEpB,QAAQoB,YAAY,IAAIpB,QAAQqB,oBAAoB,GACpD;QAAEA,sBAAsB;IAAK,IAC7B,CAAC;AAET;AAEA;;;;CAIC,GACD,OAAO,MAAMC,iBAAmC,OAAOC,KAAKC;QACpCD,mBACFA;IADpB,MAAME,SAASC,QAAOH,oBAAAA,IAAII,KAAK,CAACF,MAAM,YAAhBF,oBAAoB;IAC1C,MAAMrB,OAAOwB,QAAOH,kBAAAA,IAAII,KAAK,CAACzB,IAAI,YAAdqB,kBAAkB;IACtC,IAAI,CAACE,UAAU,CAACvB,MAAM;QACpB,OAAOsB,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAyB;IAChE;IACA,IAAI;QACF,MAAMC,YAAYlC,cAAcmC,GAAG,GAAGD,SAAS;QAC/C,MAAME,WAAW,MAAMF,UACpBG,UAAU,CAAC,SACXC,GAAG,CAACV,QACJS,UAAU,CAAC,YACXE,KAAK,CAAC,QAAQ,MAAMlC,MACpBmC,KAAK,CAAC,GACNC,GAAG;QACN,MAAMC,cAAcN,SAASO,IAAI,CAAC,EAAE;QACpC,MAAMC,MAAMF,+BAAAA,YAAaG,IAAI;QAC7B,IAAI,CAACD,OAAOA,IAAIE,SAAS,IAAIF,IAAIb,MAAM,KAAK,UAAU;YACpD,OAAOJ,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkB;QACzD;QACA,MAAM9B,UAAUJ,cAAcgD,iBAAiB,CAACH;QAChD,MAAMI,SAAS/C,sBAAsByC,YAAYxC,EAAE,EAAEC;QACrDwB,IAAIsB,SAAS,CACX,iBACA;QAEF,OAAOtB,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE7B,SAAS6C;QAAO;IAChD,EAAE,OAAOf,OAAO;QACdiB,QAAQjB,KAAK,CAACA;QACd,OAAON,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAsB;IAC7D;AACF,EAAC"}