@aglyn/plugins-commerce 1.0.0-beta.230 → 1.0.0-beta.232

package/src/lib/server/shipstation.js

@@ -0,0 +1,483 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { randomBytes, timingSafeEqual } from "crypto";
+import { PLATFORM_BRAND_NAME } from "@aglyn/aglyn/app-utils/platform-brand";
+import { readClientIp } from "@aglyn/aglyn/app-utils/request-ip";
+import { needsReseal, openSecret, sealSecret } from "@aglyn/shared-util-tools/secret-box";
+import { consumeRateLimit, firebaseAdmin } from "@aglyn/tenant-data-admin";
+import * as CommerceModel from "../model/index.js";
+import { recordOrderShipment } from "./fulfill-order.js";
+import { readCommerceSecretKeyring } from "./order-webhooks.js";
+import { connectorHostIdOf, connectorSiteRefusal, connectorText as text, digestSecret, requestIsSecure } from "./shipping-connector-gates.js";
+export { digestSecret, requestIsSecure } from "./shipping-connector-gates.js";
+// lockdown-423: handled — the route asks `lockdownRefusal` itself (through `connectorSiteRefusal`), for the org and site its credentials name, before any read.
+/*
+ * SHIPSTATION'S CUSTOM STORE ENDPOINT (AGL-3613):
+ * `/api/commerce/shipstation/{hostId}`, GET `?action=export` and POST
+ * `?action=shipnotify` — the feed and the notice are pure data in
+ * `model/shipstation.ts`.
+ *
+ * ## A machine's route, with every gate of its own
+ *
+ * ShipStation calls from its own servers with HTTP Basic credentials and
+ * names no member, so the route is registered as a MACHINE's
+ * (`machine: true`): the dispatcher skips its per-site enablement, release
+ * and write-limit gates, and this route answers each of them itself, for
+ * the site its URL names, AFTER the credentials are proven — an unproven
+ * caller learns nothing about the site, not even whether commerce is on.
+ *
+ * - HTTPS only, outside development: the credentials ride every request.
+ * - A per-site, per-address budget (`SHIPSTATION_RATE_LIMIT`); ShipStation
+ *   polls from a handful of addresses shared by every store it serves, which
+ *   is why the dispatcher's address-only bucket was the wrong one.
+ * - Credentials minted per site by the console card. The password is sealed
+ *   with the shared secret box under commerce's keyring
+ *   (`readCommerceSecretKeyring`), bound to its site by the seal's context,
+ *   so a site's admin can show it again and a copied document opens for no
+ *   other site. A request's pair is compared as fixed-length digests in
+ *   constant time.
+ * - The site's commerce must be on, entitled by the plan and released for
+ *   the org; a security or manual lockdown refuses.
+ *
+ * ## Which orders, and why a query
+ *
+ * The feed answers every order MODIFIED in ShipStation's window, whatever
+ * its status — a cancel must reach ShipStation or a merchant ships it. Every
+ * order writer stamps `updatedAtMs`, every creator stamps `requiresShipping`
+ * (`withOrderListFields`), and the feed is ONE indexed query on the pair:
+ * `(requiresShipping ==, updatedAtMs range)`. Pages follow a stored cursor,
+ * so page 5 does not re-read pages 1 to 4; a page asked out of order falls
+ * back to an offset.
+ *
+ * ## The notice is a shipment, recorded once
+ *
+ * A ShipNotice becomes a fulfillment through `recordOrderShipment` — the
+ * console's own transaction, which also emails the buyer — for the items it
+ * names, bounded by what is left to ship. Its tracking number is the
+ * parcel's identity: the same number on the same order is answered
+ * `already` and writes nothing, however often ShipStation retries or
+ * whether the merchant typed it in first.
+ */ /** Where each site's credentials are kept: server-only, every client denied. */ export const SHIPSTATION_CONNECTIONS = 'commerceShipStationConnections';
+/** Requests per minute, per site and per calling address. */ export const SHIPSTATION_RATE_LIMIT = 120;
+/** The largest ShipNotice body read. A notice is a few kilobytes. */ export const SHIPNOTICE_MAX_BYTES = 256 * 1024;
+/** A fresh username and password for a site. */ export function mintShipStationCredentials() {
+    return {
+        username: `aglyn-${randomBytes(6).toString('hex')}`,
+        password: randomBytes(24).toString('base64url')
+    };
+}
+/** What binds a sealed password to its site: a copy opens for no other. */ export const shipStationSealContext = (hostId)=>`${SHIPSTATION_CONNECTIONS}/${hostId}#password`;
+/** The password sealed for a site, with the id of the key that sealed it. */ export function sealShipStationPassword(hostId, password, keyring) {
+    return {
+        sealedPassword: sealSecret(password, keyring.current, {
+            context: shipStationSealContext(hostId)
+        }),
+        passwordKeyId: keyring.current.id
+    };
+}
+/**
+ * A site's password in the clear, and whether it should be sealed again under
+ * the keyring's current key. `null` when it cannot be opened: no keyring, a
+ * key the ring no longer holds, or a document copied from another site.
+ */ export function openShipStationPassword(connection, keyring) {
+    if (!(connection == null ? void 0 : connection.sealedPassword) || !keyring) return null;
+    try {
+        const opened = openSecret(connection.sealedPassword, keyring, {
+            context: shipStationSealContext(connection.hostId)
+        });
+        return {
+            password: opened.plaintext,
+            reseal: needsReseal(opened, keyring)
+        };
+    } catch (unused) {
+        return null;
+    }
+}
+/** The username and password of a Basic `Authorization` header, or `null`. */ export function readBasicAuth(header) {
+    const value = String(header != null ? header : '');
+    const match = /^Basic\s+([A-Za-z0-9+/=_-]+)\s*$/i.exec(value);
+    if (!match) return null;
+    let decoded;
+    try {
+        decoded = Buffer.from(match[1], 'base64').toString('utf8');
+    } catch (unused) {
+        return null;
+    }
+    const colon = decoded.indexOf(':');
+    if (colon < 0) return null;
+    return {
+        username: decoded.slice(0, colon),
+        password: decoded.slice(colon + 1)
+    };
+}
+/**
+ * Whether the presented credentials are the stored ones. Both halves are
+ * compared, always, as fixed-length digests, so neither a wrong username nor
+ * a wrong password answers faster than the other. A password that could not
+ * be opened (`null`) matches nothing.
+ */ export function credentialsMatch(stored, presented) {
+    var _ref, _ref1, _ref2, _ref3;
+    const expectedUser = Buffer.from(digestSecret((_ref = stored == null ? void 0 : stored.username) != null ? _ref : '\u0000'), 'hex');
+    const expectedPass = Buffer.from(digestSecret((_ref1 = stored == null ? void 0 : stored.password) != null ? _ref1 : '\u0000'), 'hex');
+    const user = Buffer.from(digestSecret((_ref2 = presented == null ? void 0 : presented.username) != null ? _ref2 : ''), 'hex');
+    const pass = Buffer.from(digestSecret((_ref3 = presented == null ? void 0 : presented.password) != null ? _ref3 : ''), 'hex');
+    const userOk = timingSafeEqual(user, expectedUser);
+    const passOk = timingSafeEqual(pass, expectedPass);
+    return Boolean(stored && stored.password !== null && presented && userOk && passOk);
+}
+const unauthorized = ()=>text(401, `The ShipStation username or password is wrong. Copy them again from ${PLATFORM_BRAND_NAME}.`, {
+        'www-authenticate': `Basic realm="${PLATFORM_BRAND_NAME.replace(/"/g, '')} ShipStation", charset="UTF-8"`
+    });
+/**
+ * What the feed needs of each product a page names: every variant's weight,
+ * image and option choices, one `getAll` per page.
+ */ export async function shipStationProductsFor(hostRef, orders) {
+    const ids = [
+        ...new Set(orders.flatMap((order)=>{
+            var _order_lineItems;
+            return ((_order_lineItems = order.lineItems) != null ? _order_lineItems : []).map((line)=>line == null ? void 0 : line.productId);
+        }).filter((id)=>Boolean(id)))
+    ].filter((id)=>!id.includes('/'));
+    const products = {};
+    const collection = hostRef.collection('products');
+    for(let at = 0; at < ids.length; at += 100){
+        const docs = await hostRef.firestore.getAll(...ids.slice(at, at + 100).map((id)=>collection.doc(id)));
+        for (const doc of docs){
+            var _, _product_mediaUrls;
+            if (!doc.exists) continue;
+            const product = CommerceModel.liftLegacyProduct(doc.data());
+            const image = (_ = ((_product_mediaUrls = product.mediaUrls) != null ? _product_mediaUrls : [])[0]) != null ? _ : doc.get('imageUrl');
+            const variants = {};
+            const first = product.variants[0];
+            variants[''] = _extends({}, (first == null ? void 0 : first.weightGrams) ? {
+                grams: first.weightGrams
+            } : {}, image ? {
+                imageUrl: image
+            } : {});
+            for (const variant of product.variants){
+                variants[variant.id] = _extends({}, variant.weightGrams ? {
+                    grams: variant.weightGrams
+                } : {}, variant.imageUrl || image ? {
+                    imageUrl: variant.imageUrl || image
+                } : {}, variant.options && Object.keys(variant.options).length ? {
+                    options: variant.options
+                } : {});
+            }
+            products[doc.id] = variants;
+        }
+    }
+    return products;
+}
+/** The window ShipStation asked for, or the sentence explaining why it cannot be read. */ export function readExportWindow(query) {
+    var _query_get;
+    const startMs = CommerceModel.parseShipStationDate(query.get('start_date'));
+    const endMs = CommerceModel.parseShipStationDate(query.get('end_date'));
+    if (startMs === null || endMs === null) {
+        return {
+            problem: 'start_date and end_date must be dates as MM/dd/yyyy HH:mm, in UTC.'
+        };
+    }
+    if (endMs < startMs) return {
+        problem: 'end_date is before start_date.'
+    };
+    if (endMs - startMs > CommerceModel.SHIPSTATION_MAX_WINDOW_MS) {
+        return {
+            problem: 'Ask for at most a year of orders at a time.'
+        };
+    }
+    const pageText = (_query_get = query.get('page')) != null ? _query_get : '1';
+    const page = /^\d{1,5}$/.test(pageText) ? Number(pageText) : NaN;
+    if (!Number.isInteger(page) || page < 1) return {
+        problem: 'page must be a whole number from 1.'
+    };
+    // A window's end is a minute, so the whole of its last minute is inside it.
+    return {
+        startMs,
+        endMs: endMs + 59999,
+        page
+    };
+}
+/** One page of the feed, for a site whose request is already proven. */ export async function shipStationExport(hostId, window, connection, options = {}) {
+    var _options_pageSize, _ref, _ref1, _last_get;
+    const firestore = firebaseAdmin.app().firestore();
+    const hostRef = firestore.collection('hosts').doc(hostId);
+    const connectionRef = firestore.collection(SHIPSTATION_CONNECTIONS).doc(hostId);
+    const pageSize = (_options_pageSize = options.pageSize) != null ? _options_pageSize : CommerceModel.SHIPSTATION_PAGE_SIZE;
+    const idPath = firebaseAdmin.firestore.FieldPath.documentId();
+    const base = hostRef.collection('orders').where('requiresShipping', '==', true).where('updatedAtMs', '>=', window.startMs).where('updatedAtMs', '<=', window.endMs);
+    const total = Number((await base.count().get()).data().count) || 0;
+    const pages = Math.max(1, Math.ceil(total / pageSize));
+    const ordered = base.orderBy('updatedAtMs', 'asc').orderBy(idPath, 'asc');
+    const key = `${window.startMs}|${window.endMs}`;
+    const cursor = connection.exportCursor;
+    const followsCursor = window.page > 1 && (cursor == null ? void 0 : cursor.key) === key && cursor.page === window.page - 1;
+    const query = window.page === 1 ? ordered : followsCursor ? ordered.startAfter(...(_ref = cursor == null ? void 0 : cursor.after) != null ? _ref : []) : ordered.offset((window.page - 1) * pageSize);
+    const snapshot = window.page > pages ? null : await query.limit(pageSize).get();
+    const docs = (_ref1 = snapshot == null ? void 0 : snapshot.docs) != null ? _ref1 : [];
+    const sources = docs.map((doc)=>{
+        var _doc_data;
+        return {
+            docId: doc.id,
+            order: (_doc_data = doc.data()) != null ? _doc_data : {}
+        };
+    }).filter((entry)=>CommerceModel.shipStationCanImport(entry.order));
+    const products = await shipStationProductsFor(hostRef, sources.map((entry)=>entry.order));
+    const xml = CommerceModel.shipStationOrdersXml(sources.map((entry)=>CommerceModel.shipStationOrderXml(entry, products)), pages);
+    const last = docs[docs.length - 1];
+    await connectionRef.set(_extends({
+        lastExportAtMs: Date.now()
+    }, last ? {
+        exportCursor: {
+            key,
+            page: window.page,
+            after: [
+                Number((_last_get = last.get('updatedAtMs')) != null ? _last_get : 0),
+                last.id
+            ]
+        }
+    } : {}), {
+        merge: true
+    }).catch((error)=>console.warn('shipstation: cursor not saved', hostId, error));
+    return {
+        xml,
+        pages,
+        orders: sources.length
+    };
+}
+/*==========================================
+ * SHIPNOTIFY
+ *=========================================*/ /** The order a notice names, found by its id first and its number second. */ async function findNoticeOrder(hostRef, notice) {
+    const orders = hostRef.collection('orders');
+    const byId = CommerceModel.parseShippingOrderRef(notice.orderId);
+    if ((byId == null ? void 0 : byId.id) && !byId.id.includes('/')) {
+        const doc = await orders.doc(byId.id).get();
+        if (doc.exists) return doc;
+    }
+    const ref = CommerceModel.parseShippingOrderRef(notice.orderNumber);
+    if (!ref) return null;
+    if (ref.number !== undefined) {
+        const matches = await orders.where('number', '==', ref.number).limit(2).get();
+        // Two orders under one number is a store this route cannot decide for.
+        if (matches.size === 1) return matches.docs[0];
+        if (matches.size > 1) return null;
+    }
+    if (ref.id && !ref.id.includes('/')) {
+        const doc = await orders.doc(ref.id).get();
+        if (doc.exists) return doc;
+    }
+    return null;
+}
+/**
+ * Records one ShipNotice as a fulfillment, once. Every connector that hands
+ * shipments back reads its own wire format into a `ShipNotice` and records
+ * it here, so the parcel-once rule, the bound by what is left and the
+ * shipped email are one implementation (AGL-3613, AGL-3633).
+ */ export async function recordShipNotice(hostId, notice, bodyDigest, options = {}) {
+    var _options_source, _ref, _notice_orderNumber, _doc_data;
+    const source = (_options_source = options.source) != null ? _options_source : 'shipstation';
+    const hostRef = firebaseAdmin.app().firestore().collection('hosts').doc(hostId);
+    const doc = await findNoticeOrder(hostRef, notice);
+    const label = (_ref = (_notice_orderNumber = notice.orderNumber) != null ? _notice_orderNumber : notice.orderId) != null ? _ref : '?';
+    if (!doc) return {
+        status: 404,
+        body: `${PLATFORM_BRAND_NAME} has no order ${label} on this site.`
+    };
+    const order = CommerceModel.liftLegacyOrder((_doc_data = doc.data()) != null ? _doc_data : {});
+    const carrier = CommerceModel.shipStationCarrierName(notice.carrier);
+    const trackingNumber = notice.trackingNumber;
+    if (trackingNumber && CommerceModel.fulfillmentWithTracking(order, trackingNumber)) {
+        return {
+            status: 200,
+            body: 'Already recorded.'
+        };
+    }
+    const named = CommerceModel.shipNoticeLines(order, notice.items);
+    let lineItems;
+    if (named.lines) {
+        var _merged_get;
+        if (!named.lines.length) {
+            return {
+                status: 400,
+                body: `None of the shipped items is on order ${label}: ${named.unknown.join(', ')}.`
+            };
+        }
+        // Bounded by what is left: ShipStation's copy of the order may predate a
+        // parcel the merchant shipped from Aglyn, and asking for more than
+        // remains would refuse the whole notice.
+        const remaining = new Map(CommerceModel.orderLineFulfillmentStates(order).map((state)=>[
+                state.lineItemId,
+                state.remainingQuantity
+            ]));
+        const merged = new Map();
+        for (const entry of named.lines)merged.set(entry.lineItemId, ((_merged_get = merged.get(entry.lineItemId)) != null ? _merged_get : 0) + entry.quantity);
+        lineItems = [
+            ...merged.entries()
+        ].map(([lineItemId, quantity])=>{
+            var _remaining_get;
+            return {
+                lineItemId,
+                quantity: Math.min(quantity, (_remaining_get = remaining.get(lineItemId)) != null ? _remaining_get : 0)
+            };
+        }).filter((entry)=>entry.quantity > 0);
+        if (!lineItems.length) return {
+            status: 200,
+            body: 'Nothing on this notice is left to ship; nothing recorded.'
+        };
+    }
+    const outcome = await recordOrderShipment(_extends({
+        hostId,
+        orderId: doc.id,
+        to: 'fulfilled',
+        carrier,
+        trackingNumber
+    }, lineItems ? {
+        lineItems
+    } : {}, {
+        // The parcel's identity: its tracking number, or — for a "mark as
+        // shipped" with none — the notice itself, so a redelivery is one parcel.
+        idempotencyKey: trackingNumber ? `${source}:${CommerceModel.normalizeTrackingNumber(trackingNumber)}` : `${source}-notice:${bodyDigest}`,
+        onceByTracking: true
+    }));
+    switch(outcome.outcome){
+        case 'recorded':
+            return {
+                status: 200,
+                body: 'Recorded.'
+            };
+        case 'already':
+            return {
+                status: 200,
+                body: 'Already recorded.'
+            };
+        case 'no_such_order':
+            return {
+                status: 404,
+                body: `${PLATFORM_BRAND_NAME} has no order ${label} on this site.`
+            };
+        case 'blocked':
+            return {
+                status: 409,
+                body: `Order ${label} is ${outcome.from.replace(/_/g, ' ')} in ${PLATFORM_BRAND_NAME} and cannot be shipped.`
+            };
+        case 'invalid_lines':
+            return {
+                status: 400,
+                body: outcome.message
+            };
+    }
+}
+/*==========================================
+ * THE ROUTE
+ *=========================================*/ /** `GET|POST /api/commerce/shipstation/{hostId}` — see the block header. */ export async function shipStationRoute(request, context) {
+    var _readClientIp, _ref, _url_searchParams_get;
+    const hostId = connectorHostIdOf(context.params);
+    if (!hostId) return text(404, 'Not found');
+    if (!requestIsSecure(request)) return text(403, `Use the https:// address ${PLATFORM_BRAND_NAME} gave you.`);
+    const ip = (_readClientIp = readClientIp(request.headers)) != null ? _readClientIp : 'unknown';
+    const rate = await consumeRateLimit(`shipstation:${hostId}:${ip}`, {
+        limit: SHIPSTATION_RATE_LIMIT,
+        windowMs: 60000
+    });
+    if (!rate.allowed) {
+        return text(429, 'Too many requests; ShipStation will retry.', {
+            'retry-after': String(Math.max(1, Math.ceil((rate.resetMs - Date.now()) / 1000)))
+        });
+    }
+    const firestore = firebaseAdmin.app().firestore();
+    const connectionRef = firestore.collection(SHIPSTATION_CONNECTIONS).doc(hostId);
+    const stored = await connectionRef.get();
+    const connection = stored.exists ? stored.data() : null;
+    const keyring = readCommerceSecretKeyring();
+    const opened = openShipStationPassword(connection, keyring);
+    if (connection && !opened) console.error('shipstation: the stored password could not be opened', hostId);
+    const presented = readBasicAuth(request.headers.get('authorization'));
+    if (!credentialsMatch(connection ? {
+        username: connection.username,
+        password: (_ref = opened == null ? void 0 : opened.password) != null ? _ref : null
+    } : null, presented)) {
+        return unauthorized();
+    }
+    const proven = connection;
+    if ((opened == null ? void 0 : opened.reseal) && keyring) {
+        // Sealed under a key the ring has since retired from sealing: seal it
+        // again under the current one, so the old key can leave the ring.
+        await connectionRef.set(sealShipStationPassword(hostId, opened.password, keyring), {
+            merge: true
+        }).catch((error)=>console.warn('shipstation: password not resealed', hostId, error));
+    }
+    const refused = await connectorSiteRefusal(request, hostId);
+    if (refused) return refused;
+    const url = new URL(request.url);
+    const action = String((_url_searchParams_get = url.searchParams.get('action')) != null ? _url_searchParams_get : '').trim().toLowerCase();
+    if (action === 'export') {
+        if (request.method !== 'GET') return text(405, 'Use GET to export.', {
+            allow: 'GET'
+        });
+        const window = readExportWindow(url.searchParams);
+        if ('problem' in window) return text(400, window.problem);
+        try {
+            const page = await shipStationExport(hostId, window, proven);
+            return new Response(page.xml, {
+                status: 200,
+                headers: {
+                    'content-type': 'application/xml; charset=utf-8'
+                }
+            });
+        } catch (error) {
+            console.error('shipstation: export failed', hostId, error);
+            return text(500, `${PLATFORM_BRAND_NAME} could not read the orders. ShipStation will retry.`);
+        }
+    }
+    if (action === 'shipnotify') {
+        var _request_headers_get;
+        if (request.method !== 'POST') return text(405, 'Use POST to notify a shipment.', {
+            allow: 'POST'
+        });
+        const declared = Number((_request_headers_get = request.headers.get('content-length')) != null ? _request_headers_get : 0);
+        if (declared > SHIPNOTICE_MAX_BYTES) return text(413, 'The notice is too large.');
+        const body = await request.text();
+        if (Buffer.byteLength(body, 'utf8') > SHIPNOTICE_MAX_BYTES) return text(413, 'The notice is too large.');
+        const query = {};
+        for (const name of [
+            'order_number',
+            'carrier',
+            'service',
+            'tracking_number'
+        ]){
+            var _url_searchParams_get1;
+            query[name] = (_url_searchParams_get1 = url.searchParams.get(name)) != null ? _url_searchParams_get1 : undefined;
+        }
+        const notice = CommerceModel.readShipNotice(body, query);
+        if ('problem' in notice) return text(400, notice.problem);
+        if (!notice.orderNumber && !notice.orderId) return text(400, 'The notice names no order.');
+        try {
+            const outcome = await recordShipNotice(hostId, notice, digestSecret(body).slice(0, 32));
+            await connectionRef.set({
+                lastShipNoticeAtMs: Date.now()
+            }, {
+                merge: true
+            }).catch((error)=>console.warn('shipstation: notice time not saved', hostId, error));
+            return text(outcome.status, outcome.body);
+        } catch (error) {
+            console.error('shipstation: shipnotify failed', hostId, error);
+            return text(500, `${PLATFORM_BRAND_NAME} could not record the shipment. ShipStation will retry.`);
+        }
+    }
+    return text(400, 'action must be export or shipnotify.');
+}
+
+//# sourceMappingURL=shipstation.js.map

package/src/lib/server/shipstation.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/shipstation.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { randomBytes, timingSafeEqual } from 'crypto'\nimport { PLATFORM_BRAND_NAME } from '@aglyn/aglyn/app-utils/platform-brand'\nimport { readClientIp } from '@aglyn/aglyn/app-utils/request-ip'\nimport { needsReseal, openSecret, sealSecret, type SecretBoxKeyring } from '@aglyn/shared-util-tools/secret-box'\nimport { consumeRateLimit, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport * as CommerceModel from '../model'\nimport { recordOrderShipment } from './fulfill-order'\nimport { readCommerceSecretKeyring } from './order-webhooks'\nimport {\n  connectorHostIdOf,\n  connectorSiteRefusal,\n  connectorText as text,\n  digestSecret,\n  requestIsSecure,\n} from './shipping-connector-gates'\n\nexport { digestSecret, requestIsSecure } from './shipping-connector-gates'\n\n// lockdown-423: handled — the route asks `lockdownRefusal` itself (through `connectorSiteRefusal`), for the org and site its credentials name, before any read.\n\n/*\n * SHIPSTATION'S CUSTOM STORE ENDPOINT (AGL-3613):\n * `/api/commerce/shipstation/{hostId}`, GET `?action=export` and POST\n * `?action=shipnotify` — the feed and the notice are pure data in\n * `model/shipstation.ts`.\n *\n * ## A machine's route, with every gate of its own\n *\n * ShipStation calls from its own servers with HTTP Basic credentials and\n * names no member, so the route is registered as a MACHINE's\n * (`machine: true`): the dispatcher skips its per-site enablement, release\n * and write-limit gates, and this route answers each of them itself, for\n * the site its URL names, AFTER the credentials are proven — an unproven\n * caller learns nothing about the site, not even whether commerce is on.\n *\n * - HTTPS only, outside development: the credentials ride every request.\n * - A per-site, per-address budget (`SHIPSTATION_RATE_LIMIT`); ShipStation\n *   polls from a handful of addresses shared by every store it serves, which\n *   is why the dispatcher's address-only bucket was the wrong one.\n * - Credentials minted per site by the console card. The password is sealed\n *   with the shared secret box under commerce's keyring\n *   (`readCommerceSecretKeyring`), bound to its site by the seal's context,\n *   so a site's admin can show it again and a copied document opens for no\n *   other site. A request's pair is compared as fixed-length digests in\n *   constant time.\n * - The site's commerce must be on, entitled by the plan and released for\n *   the org; a security or manual lockdown refuses.\n *\n * ## Which orders, and why a query\n *\n * The feed answers every order MODIFIED in ShipStation's window, whatever\n * its status — a cancel must reach ShipStation or a merchant ships it. Every\n * order writer stamps `updatedAtMs`, every creator stamps `requiresShipping`\n * (`withOrderListFields`), and the feed is ONE indexed query on the pair:\n * `(requiresShipping ==, updatedAtMs range)`. Pages follow a stored cursor,\n * so page 5 does not re-read pages 1 to 4; a page asked out of order falls\n * back to an offset.\n *\n * ## The notice is a shipment, recorded once\n *\n * A ShipNotice becomes a fulfillment through `recordOrderShipment` — the\n * console's own transaction, which also emails the buyer — for the items it\n * names, bounded by what is left to ship. Its tracking number is the\n * parcel's identity: the same number on the same order is answered\n * `already` and writes nothing, however often ShipStation retries or\n * whether the merchant typed it in first.\n */\n\n/** Where each site's credentials are kept: server-only, every client denied. */\nexport const SHIPSTATION_CONNECTIONS = 'commerceShipStationConnections'\n\n/** Requests per minute, per site and per calling address. */\nexport const SHIPSTATION_RATE_LIMIT = 120\n\n/** The largest ShipNotice body read. A notice is a few kilobytes. */\nexport const SHIPNOTICE_MAX_BYTES = 256 * 1024\n\n/** A connection as stored. */\nexport interface ShipStationConnection {\n  hostId: string\n  username: string\n  /** The password, sealed with the secret box; never stored in the clear. */\n  sealedPassword: string\n  /** The id of the key that sealed it, for rotation. */\n  passwordKeyId: string\n  createdAtMs: number\n  createdBy: string\n  rotatedAtMs?: number\n  lastExportAtMs?: number\n  lastShipNoticeAtMs?: number\n  /** Where the last export page ended, so the next page starts after it. */\n  exportCursor?: { key: string; page: number; after: [number, string] }\n}\n\n/** A fresh username and password for a site. */\nexport function mintShipStationCredentials(): { username: string; password: string } {\n  return {\n    username: `aglyn-${randomBytes(6).toString('hex')}`,\n    password: randomBytes(24).toString('base64url'),\n  }\n}\n\n/** What binds a sealed password to its site: a copy opens for no other. */\nexport const shipStationSealContext = (hostId: string): string => `${SHIPSTATION_CONNECTIONS}/${hostId}#password`\n\n/** The password sealed for a site, with the id of the key that sealed it. */\nexport function sealShipStationPassword(\n  hostId: string,\n  password: string,\n  keyring: SecretBoxKeyring,\n): Pick<ShipStationConnection, 'sealedPassword' | 'passwordKeyId'> {\n  return {\n    sealedPassword: sealSecret(password, keyring.current, { context: shipStationSealContext(hostId) }),\n    passwordKeyId: keyring.current.id,\n  }\n}\n\n/**\n * A site's password in the clear, and whether it should be sealed again under\n * the keyring's current key. `null` when it cannot be opened: no keyring, a\n * key the ring no longer holds, or a document copied from another site.\n */\nexport function openShipStationPassword(\n  connection: Pick<ShipStationConnection, 'hostId' | 'sealedPassword'> | null,\n  keyring: SecretBoxKeyring | null,\n): { password: string; reseal: boolean } | null {\n  if (!connection?.sealedPassword || !keyring) return null\n  try {\n    const opened = openSecret(connection.sealedPassword, keyring, { context: shipStationSealContext(connection.hostId) })\n    return { password: opened.plaintext, reseal: needsReseal(opened, keyring) }\n  } catch {\n    return null\n  }\n}\n\n/** The username and password of a Basic `Authorization` header, or `null`. */\nexport function readBasicAuth(header: string | null | undefined): { username: string; password: string } | null {\n  const value = String(header ?? '')\n  const match = /^Basic\\s+([A-Za-z0-9+/=_-]+)\\s*$/i.exec(value)\n  if (!match) return null\n  let decoded: string\n  try {\n    decoded = Buffer.from(match[1], 'base64').toString('utf8')\n  } catch {\n    return null\n  }\n  const colon = decoded.indexOf(':')\n  if (colon < 0) return null\n  return { username: decoded.slice(0, colon), password: decoded.slice(colon + 1) }\n}\n\n/**\n * Whether the presented credentials are the stored ones. Both halves are\n * compared, always, as fixed-length digests, so neither a wrong username nor\n * a wrong password answers faster than the other. A password that could not\n * be opened (`null`) matches nothing.\n */\nexport function credentialsMatch(\n  stored: { username: string; password: string | null } | null,\n  presented: { username: string; password: string } | null,\n): boolean {\n  const expectedUser = Buffer.from(digestSecret(stored?.username ?? '\\u0000'), 'hex')\n  const expectedPass = Buffer.from(digestSecret(stored?.password ?? '\\u0000'), 'hex')\n  const user = Buffer.from(digestSecret(presented?.username ?? ''), 'hex')\n  const pass = Buffer.from(digestSecret(presented?.password ?? ''), 'hex')\n  const userOk = timingSafeEqual(user, expectedUser)\n  const passOk = timingSafeEqual(pass, expectedPass)\n  return Boolean(stored && stored.password !== null && presented && userOk && passOk)\n}\n\nconst unauthorized = (): Response =>\n  text(401, `The ShipStation username or password is wrong. Copy them again from ${PLATFORM_BRAND_NAME}.`, {\n    'www-authenticate': `Basic realm=\"${PLATFORM_BRAND_NAME.replace(/\"/g, '')} ShipStation\", charset=\"UTF-8\"`,\n  })\n\n/*==========================================\n * EXPORT\n *=========================================*/\n\ntype Snapshot = FirebaseFirestore.QueryDocumentSnapshot\n\n/**\n * What the feed needs of each product a page names: every variant's weight,\n * image and option choices, one `getAll` per page.\n */\nexport async function shipStationProductsFor(\n  hostRef: FirebaseFirestore.DocumentReference,\n  orders: ReadonlyArray<Partial<CommerceModel.HostOrder>>,\n): Promise<CommerceModel.ShipStationProducts> {\n  const ids = [\n    ...new Set(\n      orders.flatMap((order) => (order.lineItems ?? []).map((line) => line?.productId)).filter((id): id is string => Boolean(id)),\n    ),\n  ].filter((id) => !id.includes('/'))\n  const products: Record<string, Record<string, CommerceModel.ShipStationProductFacts>> = {}\n  const collection = hostRef.collection('products')\n  for (let at = 0; at < ids.length; at += 100) {\n    const docs = await hostRef.firestore.getAll(...ids.slice(at, at + 100).map((id) => collection.doc(id)))\n    for (const doc of docs) {\n      if (!doc.exists) continue\n      const product = CommerceModel.liftLegacyProduct(doc.data() as never)\n      const image = (product.mediaUrls ?? [])[0] ?? (doc.get('imageUrl') as string | undefined)\n      const variants: Record<string, CommerceModel.ShipStationProductFacts> = {}\n      const first = product.variants[0]\n      variants[''] = {\n        ...(first?.weightGrams ? { grams: first.weightGrams } : {}),\n        ...(image ? { imageUrl: image } : {}),\n      }\n      for (const variant of product.variants) {\n        variants[variant.id] = {\n          ...(variant.weightGrams ? { grams: variant.weightGrams } : {}),\n          ...(variant.imageUrl || image ? { imageUrl: variant.imageUrl || image } : {}),\n          ...(variant.options && Object.keys(variant.options).length ? { options: variant.options } : {}),\n        }\n      }\n      products[doc.id] = variants\n    }\n  }\n  return products\n}\n\n/** The window ShipStation asked for, or the sentence explaining why it cannot be read. */\nexport function readExportWindow(\n  query: URLSearchParams,\n): { startMs: number; endMs: number; page: number } | { problem: string } {\n  const startMs = CommerceModel.parseShipStationDate(query.get('start_date'))\n  const endMs = CommerceModel.parseShipStationDate(query.get('end_date'))\n  if (startMs === null || endMs === null) {\n    return { problem: 'start_date and end_date must be dates as MM/dd/yyyy HH:mm, in UTC.' }\n  }\n  if (endMs < startMs) return { problem: 'end_date is before start_date.' }\n  if (endMs - startMs > CommerceModel.SHIPSTATION_MAX_WINDOW_MS) {\n    return { problem: 'Ask for at most a year of orders at a time.' }\n  }\n  const pageText = query.get('page') ?? '1'\n  const page = /^\\d{1,5}$/.test(pageText) ? Number(pageText) : NaN\n  if (!Number.isInteger(page) || page < 1) return { problem: 'page must be a whole number from 1.' }\n  // A window's end is a minute, so the whole of its last minute is inside it.\n  return { startMs, endMs: endMs + 59_999, page }\n}\n\n/** One page of the feed, for a site whose request is already proven. */\nexport async function shipStationExport(\n  hostId: string,\n  window: { startMs: number; endMs: number; page: number },\n  connection: ShipStationConnection,\n  options: { pageSize?: number } = {},\n): Promise<{ xml: string; pages: number; orders: number }> {\n  const firestore = firebaseAdmin.app().firestore()\n  const hostRef = firestore.collection('hosts').doc(hostId)\n  const connectionRef = firestore.collection(SHIPSTATION_CONNECTIONS).doc(hostId)\n  const pageSize = options.pageSize ?? CommerceModel.SHIPSTATION_PAGE_SIZE\n  const idPath = firebaseAdmin.firestore.FieldPath.documentId()\n  const base = hostRef\n    .collection('orders')\n    .where('requiresShipping', '==', true)\n    .where('updatedAtMs', '>=', window.startMs)\n    .where('updatedAtMs', '<=', window.endMs)\n  const total = Number((await base.count().get()).data().count) || 0\n  const pages = Math.max(1, Math.ceil(total / pageSize))\n  const ordered = base.orderBy('updatedAtMs', 'asc').orderBy(idPath, 'asc')\n  const key = `${window.startMs}|${window.endMs}`\n  const cursor = connection.exportCursor\n  const followsCursor = window.page > 1 && cursor?.key === key && cursor.page === window.page - 1\n  const query = window.page === 1\n    ? ordered\n    : followsCursor\n      ? ordered.startAfter(...(cursor?.after ?? []))\n      : ordered.offset((window.page - 1) * pageSize)\n  const snapshot = window.page > pages ? null : await query.limit(pageSize).get()\n  const docs: Snapshot[] = snapshot?.docs ?? []\n  const sources = docs\n    .map((doc) => ({ docId: doc.id, order: (doc.data() ?? {}) as CommerceModel.ShipStationOrderSource['order'] }))\n    .filter((entry) => CommerceModel.shipStationCanImport(entry.order))\n  const products = await shipStationProductsFor(hostRef, sources.map((entry) => entry.order))\n  const xml = CommerceModel.shipStationOrdersXml(\n    sources.map((entry) => CommerceModel.shipStationOrderXml(entry, products)),\n    pages,\n  )\n  const last = docs[docs.length - 1]\n  await connectionRef\n    .set(\n      {\n        lastExportAtMs: Date.now(),\n        ...(last\n          ? { exportCursor: { key, page: window.page, after: [Number(last.get('updatedAtMs') ?? 0), last.id] } }\n          : {}),\n      },\n      { merge: true },\n    )\n    .catch((error: unknown) => console.warn('shipstation: cursor not saved', hostId, error))\n  return { xml, pages, orders: sources.length }\n}\n\n/*==========================================\n * SHIPNOTIFY\n *=========================================*/\n\n/** The order a notice names, found by its id first and its number second. */\nasync function findNoticeOrder(\n  hostRef: FirebaseFirestore.DocumentReference,\n  notice: CommerceModel.ShipNotice,\n): Promise<FirebaseFirestore.DocumentSnapshot | null> {\n  const orders = hostRef.collection('orders')\n  const byId = CommerceModel.parseShippingOrderRef(notice.orderId)\n  if (byId?.id && !byId.id.includes('/')) {\n    const doc = await orders.doc(byId.id).get()\n    if (doc.exists) return doc\n  }\n  const ref = CommerceModel.parseShippingOrderRef(notice.orderNumber)\n  if (!ref) return null\n  if (ref.number !== undefined) {\n    const matches = await orders.where('number', '==', ref.number).limit(2).get()\n    // Two orders under one number is a store this route cannot decide for.\n    if (matches.size === 1) return matches.docs[0]\n    if (matches.size > 1) return null\n  }\n  if (ref.id && !ref.id.includes('/')) {\n    const doc = await orders.doc(ref.id).get()\n    if (doc.exists) return doc\n  }\n  return null\n}\n\n/** What a notice came to, for the route to answer ShipStation with. */\nexport type ShipNoticeOutcome =\n  | { status: 200; body: string }\n  | { status: 400 | 404 | 409; body: string }\n\n/** The shipping app a notice came from: the prefix of the parcel's idempotency key. */\nexport type ShipNoticeSource = 'shipstation' | 'shippingeasy'\n\n/**\n * Records one ShipNotice as a fulfillment, once. Every connector that hands\n * shipments back reads its own wire format into a `ShipNotice` and records\n * it here, so the parcel-once rule, the bound by what is left and the\n * shipped email are one implementation (AGL-3613, AGL-3633).\n */\nexport async function recordShipNotice(\n  hostId: string,\n  notice: CommerceModel.ShipNotice,\n  bodyDigest: string,\n  options: { source?: ShipNoticeSource } = {},\n): Promise<ShipNoticeOutcome> {\n  const source = options.source ?? 'shipstation'\n  const hostRef = firebaseAdmin.app().firestore().collection('hosts').doc(hostId)\n  const doc = await findNoticeOrder(hostRef, notice)\n  const label = notice.orderNumber ?? notice.orderId ?? '?'\n  if (!doc) return { status: 404, body: `${PLATFORM_BRAND_NAME} has no order ${label} on this site.` }\n  const order = CommerceModel.liftLegacyOrder((doc.data() ?? {}) as never)\n  const carrier = CommerceModel.shipStationCarrierName(notice.carrier)\n  const trackingNumber = notice.trackingNumber\n\n  if (trackingNumber && CommerceModel.fulfillmentWithTracking(order, trackingNumber)) {\n    return { status: 200, body: 'Already recorded.' }\n  }\n  const named = CommerceModel.shipNoticeLines(order, notice.items)\n  let lineItems: Array<{ lineItemId: number; quantity: number }> | undefined\n  if (named.lines) {\n    if (!named.lines.length) {\n      return { status: 400, body: `None of the shipped items is on order ${label}: ${named.unknown.join(', ')}.` }\n    }\n    // Bounded by what is left: ShipStation's copy of the order may predate a\n    // parcel the merchant shipped from Aglyn, and asking for more than\n    // remains would refuse the whole notice.\n    const remaining = new Map(\n      CommerceModel.orderLineFulfillmentStates(order).map((state) => [state.lineItemId, state.remainingQuantity]),\n    )\n    const merged = new Map<number, number>()\n    for (const entry of named.lines) merged.set(entry.lineItemId, (merged.get(entry.lineItemId) ?? 0) + entry.quantity)\n    lineItems = [...merged.entries()]\n      .map(([lineItemId, quantity]) => ({ lineItemId, quantity: Math.min(quantity, remaining.get(lineItemId) ?? 0) }))\n      .filter((entry) => entry.quantity > 0)\n    if (!lineItems.length) return { status: 200, body: 'Nothing on this notice is left to ship; nothing recorded.' }\n  }\n\n  const outcome = await recordOrderShipment({\n    hostId,\n    orderId: doc.id,\n    to: 'fulfilled',\n    carrier,\n    trackingNumber,\n    ...(lineItems ? { lineItems } : {}),\n    // The parcel's identity: its tracking number, or — for a \"mark as\n    // shipped\" with none — the notice itself, so a redelivery is one parcel.\n    idempotencyKey: trackingNumber\n      ? `${source}:${CommerceModel.normalizeTrackingNumber(trackingNumber)}`\n      : `${source}-notice:${bodyDigest}`,\n    onceByTracking: true,\n  })\n  switch (outcome.outcome) {\n    case 'recorded':\n      return { status: 200, body: 'Recorded.' }\n    case 'already':\n      return { status: 200, body: 'Already recorded.' }\n    case 'no_such_order':\n      return { status: 404, body: `${PLATFORM_BRAND_NAME} has no order ${label} on this site.` }\n    case 'blocked':\n      return { status: 409, body: `Order ${label} is ${outcome.from.replace(/_/g, ' ')} in ${PLATFORM_BRAND_NAME} and cannot be shipped.` }\n    case 'invalid_lines':\n      return { status: 400, body: outcome.message }\n  }\n}\n\n/*==========================================\n * THE ROUTE\n *=========================================*/\n\n/** `GET|POST /api/commerce/shipstation/{hostId}` — see the block header. */\nexport async function shipStationRoute(\n  request: Request,\n  context: { params: Record<string, string | string[]> },\n): Promise<Response> {\n  const hostId = connectorHostIdOf(context.params)\n  if (!hostId) return text(404, 'Not found')\n  if (!requestIsSecure(request)) return text(403, `Use the https:// address ${PLATFORM_BRAND_NAME} gave you.`)\n\n  const ip = readClientIp(request.headers) ?? 'unknown'\n  const rate = await consumeRateLimit(`shipstation:${hostId}:${ip}`, {\n    limit: SHIPSTATION_RATE_LIMIT,\n    windowMs: 60_000,\n  })\n  if (!rate.allowed) {\n    return text(429, 'Too many requests; ShipStation will retry.', {\n      'retry-after': String(Math.max(1, Math.ceil((rate.resetMs - Date.now()) / 1000))),\n    })\n  }\n\n  const firestore = firebaseAdmin.app().firestore()\n  const connectionRef = firestore.collection(SHIPSTATION_CONNECTIONS).doc(hostId)\n  const stored = await connectionRef.get()\n  const connection = stored.exists ? (stored.data() as ShipStationConnection) : null\n  const keyring = readCommerceSecretKeyring()\n  const opened = openShipStationPassword(connection, keyring)\n  if (connection && !opened) console.error('shipstation: the stored password could not be opened', hostId)\n  const presented = readBasicAuth(request.headers.get('authorization'))\n  if (!credentialsMatch(connection ? { username: connection.username, password: opened?.password ?? null } : null, presented)) {\n    return unauthorized()\n  }\n  const proven = connection as ShipStationConnection\n  if (opened?.reseal && keyring) {\n    // Sealed under a key the ring has since retired from sealing: seal it\n    // again under the current one, so the old key can leave the ring.\n    await connectionRef\n      .set(sealShipStationPassword(hostId, opened.password, keyring), { merge: true })\n      .catch((error: unknown) => console.warn('shipstation: password not resealed', hostId, error))\n  }\n\n  const refused = await connectorSiteRefusal(request, hostId)\n  if (refused) return refused\n\n  const url = new URL(request.url)\n  const action = String(url.searchParams.get('action') ?? '').trim().toLowerCase()\n  if (action === 'export') {\n    if (request.method !== 'GET') return text(405, 'Use GET to export.', { allow: 'GET' })\n    const window = readExportWindow(url.searchParams)\n    if ('problem' in window) return text(400, window.problem)\n    try {\n      const page = await shipStationExport(hostId, window, proven)\n      return new Response(page.xml, { status: 200, headers: { 'content-type': 'application/xml; charset=utf-8' } })\n    } catch (error) {\n      console.error('shipstation: export failed', hostId, error)\n      return text(500, `${PLATFORM_BRAND_NAME} could not read the orders. ShipStation will retry.`)\n    }\n  }\n  if (action === 'shipnotify') {\n    if (request.method !== 'POST') return text(405, 'Use POST to notify a shipment.', { allow: 'POST' })\n    const declared = Number(request.headers.get('content-length') ?? 0)\n    if (declared > SHIPNOTICE_MAX_BYTES) return text(413, 'The notice is too large.')\n    const body = await request.text()\n    if (Buffer.byteLength(body, 'utf8') > SHIPNOTICE_MAX_BYTES) return text(413, 'The notice is too large.')\n    const query: Record<string, string | undefined> = {}\n    for (const name of ['order_number', 'carrier', 'service', 'tracking_number']) {\n      query[name] = url.searchParams.get(name) ?? undefined\n    }\n    const notice = CommerceModel.readShipNotice(body, query)\n    if ('problem' in notice) return text(400, notice.problem)\n    if (!notice.orderNumber && !notice.orderId) return text(400, 'The notice names no order.')\n    try {\n      const outcome = await recordShipNotice(hostId, notice, digestSecret(body).slice(0, 32))\n      await connectionRef\n        .set({ lastShipNoticeAtMs: Date.now() }, { merge: true })\n        .catch((error: unknown) => console.warn('shipstation: notice time not saved', hostId, error))\n      return text(outcome.status, outcome.body)\n    } catch (error) {\n      console.error('shipstation: shipnotify failed', hostId, error)\n      return text(500, `${PLATFORM_BRAND_NAME} could not record the shipment. ShipStation will retry.`)\n    }\n  }\n  return text(400, 'action must be export or shipnotify.')\n}\n"],"names":["randomBytes","timingSafeEqual","PLATFORM_BRAND_NAME","readClientIp","needsReseal","openSecret","sealSecret","consumeRateLimit","firebaseAdmin","CommerceModel","recordOrderShipment","readCommerceSecretKeyring","connectorHostIdOf","connectorSiteRefusal","connectorText","text","digestSecret","requestIsSecure","SHIPSTATION_CONNECTIONS","SHIPSTATION_RATE_LIMIT","SHIPNOTICE_MAX_BYTES","mintShipStationCredentials","username","toString","password","shipStationSealContext","hostId","sealShipStationPassword","keyring","sealedPassword","current","context","passwordKeyId","id","openShipStationPassword","connection","opened","plaintext","reseal","readBasicAuth","header","value","String","match","exec","decoded","Buffer","from","colon","indexOf","slice","credentialsMatch","stored","presented","expectedUser","expectedPass","user","pass","userOk","passOk","Boolean","unauthorized","replace","shipStationProductsFor","hostRef","orders","ids","Set","flatMap","order","lineItems","map","line","productId","filter","includes","products","collection","at","length","docs","firestore","getAll","doc","product","exists","liftLegacyProduct","data","image","mediaUrls","get","variants","first","weightGrams","grams","imageUrl","variant","options","Object","keys","readExportWindow","query","startMs","parseShipStationDate","endMs","problem","SHIPSTATION_MAX_WINDOW_MS","pageText","page","test","Number","NaN","isInteger","shipStationExport","window","last","app","connectionRef","pageSize","SHIPSTATION_PAGE_SIZE","idPath","FieldPath","documentId","base","where","total","count","pages","Math","max","ceil","ordered","orderBy","key","cursor","exportCursor","followsCursor","startAfter","after","offset","snapshot","limit","sources","docId","entry","shipStationCanImport","xml","shipStationOrdersXml","shipStationOrderXml","set","lastExportAtMs","Date","now","merge","catch","error","console","warn","findNoticeOrder","notice","byId","parseShippingOrderRef","orderId","ref","orderNumber","number","undefined","matches","size","recordShipNotice","bodyDigest","source","label","status","body","liftLegacyOrder","carrier","shipStationCarrierName","trackingNumber","fulfillmentWithTracking","named","shipNoticeLines","items","lines","merged","unknown","join","remaining","Map","orderLineFulfillmentStates","state","lineItemId","remainingQuantity","quantity","entries","min","outcome","to","idempotencyKey","normalizeTrackingNumber","onceByTracking","message","shipStationRoute","request","url","params","ip","headers","rate","windowMs","allowed","resetMs","proven","refused","URL","action","searchParams","trim","toLowerCase","method","allow","Response","declared","byteLength","name","readShipNotice","lastShipNoticeAtMs"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,WAAW,EAAEC,eAAe,QAAQ,SAAQ;AACrD,SAASC,mBAAmB,QAAQ,wCAAuC;AAC3E,SAASC,YAAY,QAAQ,oCAAmC;AAChE,SAASC,WAAW,EAAEC,UAAU,EAAEC,UAAU,QAA+B,sCAAqC;AAChH,SAASC,gBAAgB,EAAEC,aAAa,QAAQ,2BAA0B;AAC1E,YAAYC,mBAAmB,oBAAU;AACzC,SAASC,mBAAmB,QAAQ,qBAAiB;AACrD,SAASC,yBAAyB,QAAQ,sBAAkB;AAC5D,SACEC,iBAAiB,EACjBC,oBAAoB,EACpBC,iBAAiBC,IAAI,EACrBC,YAAY,EACZC,eAAe,QACV,gCAA4B;AAEnC,SAASD,YAAY,EAAEC,eAAe,QAAQ,gCAA4B;AAE1E,gKAAgK;AAEhK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8CC,GAED,8EAA8E,GAC9E,OAAO,MAAMC,0BAA0B,iCAAgC;AAEvE,2DAA2D,GAC3D,OAAO,MAAMC,yBAAyB,IAAG;AAEzC,mEAAmE,GACnE,OAAO,MAAMC,uBAAuB,MAAM,KAAI;AAmB9C,8CAA8C,GAC9C,OAAO,SAASC;IACd,OAAO;QACLC,UAAU,CAAC,MAAM,EAAEtB,YAAY,GAAGuB,QAAQ,CAAC,QAAQ;QACnDC,UAAUxB,YAAY,IAAIuB,QAAQ,CAAC;IACrC;AACF;AAEA,yEAAyE,GACzE,OAAO,MAAME,yBAAyB,CAACC,SAA2B,GAAGR,wBAAwB,CAAC,EAAEQ,OAAO,SAAS,CAAC,CAAA;AAEjH,2EAA2E,GAC3E,OAAO,SAASC,wBACdD,MAAc,EACdF,QAAgB,EAChBI,OAAyB;IAEzB,OAAO;QACLC,gBAAgBvB,WAAWkB,UAAUI,QAAQE,OAAO,EAAE;YAAEC,SAASN,uBAAuBC;QAAQ;QAChGM,eAAeJ,QAAQE,OAAO,CAACG,EAAE;IACnC;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASC,wBACdC,UAA2E,EAC3EP,OAAgC;IAEhC,IAAI,EAACO,8BAAAA,WAAYN,cAAc,KAAI,CAACD,SAAS,OAAO;IACpD,IAAI;QACF,MAAMQ,SAAS/B,WAAW8B,WAAWN,cAAc,EAAED,SAAS;YAAEG,SAASN,uBAAuBU,WAAWT,MAAM;QAAE;QACnH,OAAO;YAAEF,UAAUY,OAAOC,SAAS;YAAEC,QAAQlC,YAAYgC,QAAQR;QAAS;IAC5E,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA,4EAA4E,GAC5E,OAAO,SAASW,cAAcC,MAAiC;IAC7D,MAAMC,QAAQC,OAAOF,iBAAAA,SAAU;IAC/B,MAAMG,QAAQ,oCAAoCC,IAAI,CAACH;IACvD,IAAI,CAACE,OAAO,OAAO;IACnB,IAAIE;IACJ,IAAI;QACFA,UAAUC,OAAOC,IAAI,CAACJ,KAAK,CAAC,EAAE,EAAE,UAAUpB,QAAQ,CAAC;IACrD,EAAE,eAAM;QACN,OAAO;IACT;IACA,MAAMyB,QAAQH,QAAQI,OAAO,CAAC;IAC9B,IAAID,QAAQ,GAAG,OAAO;IACtB,OAAO;QAAE1B,UAAUuB,QAAQK,KAAK,CAAC,GAAGF;QAAQxB,UAAUqB,QAAQK,KAAK,CAACF,QAAQ;IAAG;AACjF;AAEA;;;;;CAKC,GACD,OAAO,SAASG,iBACdC,MAA4D,EAC5DC,SAAwD;;IAExD,MAAMC,eAAeR,OAAOC,IAAI,CAAC/B,qBAAaoC,0BAAAA,OAAQ9B,QAAQ,mBAAI,WAAW;IAC7E,MAAMiC,eAAeT,OAAOC,IAAI,CAAC/B,sBAAaoC,0BAAAA,OAAQ5B,QAAQ,oBAAI,WAAW;IAC7E,MAAMgC,OAAOV,OAAOC,IAAI,CAAC/B,sBAAaqC,6BAAAA,UAAW/B,QAAQ,oBAAI,KAAK;IAClE,MAAMmC,OAAOX,OAAOC,IAAI,CAAC/B,sBAAaqC,6BAAAA,UAAW7B,QAAQ,oBAAI,KAAK;IAClE,MAAMkC,SAASzD,gBAAgBuD,MAAMF;IACrC,MAAMK,SAAS1D,gBAAgBwD,MAAMF;IACrC,OAAOK,QAAQR,UAAUA,OAAO5B,QAAQ,KAAK,QAAQ6B,aAAaK,UAAUC;AAC9E;AAEA,MAAME,eAAe,IACnB9C,KAAK,KAAK,CAAC,oEAAoE,EAAEb,oBAAoB,CAAC,CAAC,EAAE;QACvG,oBAAoB,CAAC,aAAa,EAAEA,oBAAoB4D,OAAO,CAAC,MAAM,IAAI,8BAA8B,CAAC;IAC3G;AAQF;;;CAGC,GACD,OAAO,eAAeC,uBACpBC,OAA4C,EAC5CC,MAAuD;IAEvD,MAAMC,MAAM;WACP,IAAIC,IACLF,OAAOG,OAAO,CAAC,CAACC;gBAAWA;mBAAD,EAACA,mBAAAA,MAAMC,SAAS,YAAfD,mBAAmB,EAAE,EAAEE,GAAG,CAAC,CAACC,OAASA,wBAAAA,KAAMC,SAAS;WAAGC,MAAM,CAAC,CAACzC,KAAqB2B,QAAQ3B;KAE1H,CAACyC,MAAM,CAAC,CAACzC,KAAO,CAACA,GAAG0C,QAAQ,CAAC;IAC9B,MAAMC,WAAkF,CAAC;IACzF,MAAMC,aAAab,QAAQa,UAAU,CAAC;IACtC,IAAK,IAAIC,KAAK,GAAGA,KAAKZ,IAAIa,MAAM,EAAED,MAAM,IAAK;QAC3C,MAAME,OAAO,MAAMhB,QAAQiB,SAAS,CAACC,MAAM,IAAIhB,IAAIhB,KAAK,CAAC4B,IAAIA,KAAK,KAAKP,GAAG,CAAC,CAACtC,KAAO4C,WAAWM,GAAG,CAAClD;QAClG,KAAK,MAAMkD,OAAOH,KAAM;gBAGR,GAACI;YAFf,IAAI,CAACD,IAAIE,MAAM,EAAE;YACjB,MAAMD,UAAU3E,cAAc6E,iBAAiB,CAACH,IAAII,IAAI;YACxD,MAAMC,SAAQ,IAAA,EAACJ,qBAAAA,QAAQK,SAAS,YAAjBL,qBAAqB,EAAE,CAAC,CAAC,EAAE,YAA5B,IAAiCD,IAAIO,GAAG,CAAC;YACvD,MAAMC,WAAkE,CAAC;YACzE,MAAMC,QAAQR,QAAQO,QAAQ,CAAC,EAAE;YACjCA,QAAQ,CAAC,GAAG,GAAG,aACTC,CAAAA,yBAAAA,MAAOC,WAAW,IAAG;gBAAEC,OAAOF,MAAMC,WAAW;YAAC,IAAI,CAAC,GACrDL,QAAQ;gBAAEO,UAAUP;YAAM,IAAI,CAAC;YAErC,KAAK,MAAMQ,WAAWZ,QAAQO,QAAQ,CAAE;gBACtCA,QAAQ,CAACK,QAAQ/D,EAAE,CAAC,GAAG,aACjB+D,QAAQH,WAAW,GAAG;oBAAEC,OAAOE,QAAQH,WAAW;gBAAC,IAAI,CAAC,GACxDG,QAAQD,QAAQ,IAAIP,QAAQ;oBAAEO,UAAUC,QAAQD,QAAQ,IAAIP;gBAAM,IAAI,CAAC,GACvEQ,QAAQC,OAAO,IAAIC,OAAOC,IAAI,CAACH,QAAQC,OAAO,EAAElB,MAAM,GAAG;oBAAEkB,SAASD,QAAQC,OAAO;gBAAC,IAAI,CAAC;YAEjG;YACArB,QAAQ,CAACO,IAAIlD,EAAE,CAAC,GAAG0D;QACrB;IACF;IACA,OAAOf;AACT;AAEA,wFAAwF,GACxF,OAAO,SAASwB,iBACdC,KAAsB;QAWLA;IATjB,MAAMC,UAAU7F,cAAc8F,oBAAoB,CAACF,MAAMX,GAAG,CAAC;IAC7D,MAAMc,QAAQ/F,cAAc8F,oBAAoB,CAACF,MAAMX,GAAG,CAAC;IAC3D,IAAIY,YAAY,QAAQE,UAAU,MAAM;QACtC,OAAO;YAAEC,SAAS;QAAqE;IACzF;IACA,IAAID,QAAQF,SAAS,OAAO;QAAEG,SAAS;IAAiC;IACxE,IAAID,QAAQF,UAAU7F,cAAciG,yBAAyB,EAAE;QAC7D,OAAO;YAAED,SAAS;QAA8C;IAClE;IACA,MAAME,YAAWN,aAAAA,MAAMX,GAAG,CAAC,mBAAVW,aAAqB;IACtC,MAAMO,OAAO,YAAYC,IAAI,CAACF,YAAYG,OAAOH,YAAYI;IAC7D,IAAI,CAACD,OAAOE,SAAS,CAACJ,SAASA,OAAO,GAAG,OAAO;QAAEH,SAAS;IAAsC;IACjG,4EAA4E;IAC5E,OAAO;QAAEH;QAASE,OAAOA,QAAQ;QAAQI;IAAK;AAChD;AAEA,sEAAsE,GACtE,OAAO,eAAeK,kBACpBvF,MAAc,EACdwF,MAAwD,EACxD/E,UAAiC,EACjC8D,UAAiC,CAAC,CAAC;QAKlBA,gCAkCkDkB;IArCnE,MAAMlC,YAAYzE,cAAc4G,GAAG,GAAGnC,SAAS;IAC/C,MAAMjB,UAAUiB,UAAUJ,UAAU,CAAC,SAASM,GAAG,CAACzD;IAClD,MAAM2F,gBAAgBpC,UAAUJ,UAAU,CAAC3D,yBAAyBiE,GAAG,CAACzD;IACxE,MAAM4F,YAAWrB,oBAAAA,QAAQqB,QAAQ,YAAhBrB,oBAAoBxF,cAAc8G,qBAAqB;IACxE,MAAMC,SAAShH,cAAcyE,SAAS,CAACwC,SAAS,CAACC,UAAU;IAC3D,MAAMC,OAAO3D,QACVa,UAAU,CAAC,UACX+C,KAAK,CAAC,oBAAoB,MAAM,MAChCA,KAAK,CAAC,eAAe,MAAMV,OAAOZ,OAAO,EACzCsB,KAAK,CAAC,eAAe,MAAMV,OAAOV,KAAK;IAC1C,MAAMqB,QAAQf,OAAO,AAAC,CAAA,MAAMa,KAAKG,KAAK,GAAGpC,GAAG,EAAC,EAAGH,IAAI,GAAGuC,KAAK,KAAK;IACjE,MAAMC,QAAQC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,IAAI,CAACL,QAAQP;IAC5C,MAAMa,UAAUR,KAAKS,OAAO,CAAC,eAAe,OAAOA,OAAO,CAACZ,QAAQ;IACnE,MAAMa,MAAM,GAAGnB,OAAOZ,OAAO,CAAC,CAAC,EAAEY,OAAOV,KAAK,EAAE;IAC/C,MAAM8B,SAASnG,WAAWoG,YAAY;IACtC,MAAMC,gBAAgBtB,OAAON,IAAI,GAAG,KAAK0B,CAAAA,0BAAAA,OAAQD,GAAG,MAAKA,OAAOC,OAAO1B,IAAI,KAAKM,OAAON,IAAI,GAAG;IAC9F,MAAMP,QAAQa,OAAON,IAAI,KAAK,IAC1BuB,UACAK,gBACEL,QAAQM,UAAU,YAAKH,0BAAAA,OAAQI,KAAK,mBAAI,EAAE,IAC1CP,QAAQQ,MAAM,CAAC,AAACzB,CAAAA,OAAON,IAAI,GAAG,CAAA,IAAKU;IACzC,MAAMsB,WAAW1B,OAAON,IAAI,GAAGmB,QAAQ,OAAO,MAAM1B,MAAMwC,KAAK,CAACvB,UAAU5B,GAAG;IAC7E,MAAMV,gBAAmB4D,4BAAAA,SAAU5D,IAAI,oBAAI,EAAE;IAC7C,MAAM8D,UAAU9D,KACbT,GAAG,CAAC,CAACY;YAAkCA;eAAzB;YAAE4D,OAAO5D,IAAIlD,EAAE;YAAEoC,KAAK,GAAGc,YAAAA,IAAII,IAAI,cAARJ,YAAc,CAAC;QAAoD;OAC1GT,MAAM,CAAC,CAACsE,QAAUvI,cAAcwI,oBAAoB,CAACD,MAAM3E,KAAK;IACnE,MAAMO,WAAW,MAAMb,uBAAuBC,SAAS8E,QAAQvE,GAAG,CAAC,CAACyE,QAAUA,MAAM3E,KAAK;IACzF,MAAM6E,MAAMzI,cAAc0I,oBAAoB,CAC5CL,QAAQvE,GAAG,CAAC,CAACyE,QAAUvI,cAAc2I,mBAAmB,CAACJ,OAAOpE,YAChEmD;IAEF,MAAMZ,OAAOnC,IAAI,CAACA,KAAKD,MAAM,GAAG,EAAE;IAClC,MAAMsC,cACHgC,GAAG,CACF;QACEC,gBAAgBC,KAAKC,GAAG;OACpBrC,OACA;QAAEoB,cAAc;YAAEF;YAAKzB,MAAMM,OAAON,IAAI;YAAE8B,OAAO;gBAAC5B,QAAOK,YAAAA,KAAKzB,GAAG,CAAC,0BAATyB,YAA2B;gBAAIA,KAAKlF,EAAE;aAAC;QAAC;IAAE,IACnG,CAAC,IAEP;QAAEwH,OAAO;IAAK,GAEfC,KAAK,CAAC,CAACC,QAAmBC,QAAQC,IAAI,CAAC,iCAAiCnI,QAAQiI;IACnF,OAAO;QAAET;QAAKnB;QAAO9D,QAAQ6E,QAAQ/D,MAAM;IAAC;AAC9C;AAEA;;2CAE2C,GAE3C,2EAA2E,GAC3E,eAAe+E,gBACb9F,OAA4C,EAC5C+F,MAAgC;IAEhC,MAAM9F,SAASD,QAAQa,UAAU,CAAC;IAClC,MAAMmF,OAAOvJ,cAAcwJ,qBAAqB,CAACF,OAAOG,OAAO;IAC/D,IAAIF,CAAAA,wBAAAA,KAAM/H,EAAE,KAAI,CAAC+H,KAAK/H,EAAE,CAAC0C,QAAQ,CAAC,MAAM;QACtC,MAAMQ,MAAM,MAAMlB,OAAOkB,GAAG,CAAC6E,KAAK/H,EAAE,EAAEyD,GAAG;QACzC,IAAIP,IAAIE,MAAM,EAAE,OAAOF;IACzB;IACA,MAAMgF,MAAM1J,cAAcwJ,qBAAqB,CAACF,OAAOK,WAAW;IAClE,IAAI,CAACD,KAAK,OAAO;IACjB,IAAIA,IAAIE,MAAM,KAAKC,WAAW;QAC5B,MAAMC,UAAU,MAAMtG,OAAO2D,KAAK,CAAC,UAAU,MAAMuC,IAAIE,MAAM,EAAExB,KAAK,CAAC,GAAGnD,GAAG;QAC3E,uEAAuE;QACvE,IAAI6E,QAAQC,IAAI,KAAK,GAAG,OAAOD,QAAQvF,IAAI,CAAC,EAAE;QAC9C,IAAIuF,QAAQC,IAAI,GAAG,GAAG,OAAO;IAC/B;IACA,IAAIL,IAAIlI,EAAE,IAAI,CAACkI,IAAIlI,EAAE,CAAC0C,QAAQ,CAAC,MAAM;QACnC,MAAMQ,MAAM,MAAMlB,OAAOkB,GAAG,CAACgF,IAAIlI,EAAE,EAAEyD,GAAG;QACxC,IAAIP,IAAIE,MAAM,EAAE,OAAOF;IACzB;IACA,OAAO;AACT;AAUA;;;;;CAKC,GACD,OAAO,eAAesF,iBACpB/I,MAAc,EACdqI,MAAgC,EAChCW,UAAkB,EAClBzE,UAAyC,CAAC,CAAC;QAE5BA,iBAGD8D,MAAAA,qBAE+B5E;IAL7C,MAAMwF,UAAS1E,kBAAAA,QAAQ0E,MAAM,YAAd1E,kBAAkB;IACjC,MAAMjC,UAAUxD,cAAc4G,GAAG,GAAGnC,SAAS,GAAGJ,UAAU,CAAC,SAASM,GAAG,CAACzD;IACxE,MAAMyD,MAAM,MAAM2E,gBAAgB9F,SAAS+F;IAC3C,MAAMa,SAAQb,QAAAA,sBAAAA,OAAOK,WAAW,YAAlBL,sBAAsBA,OAAOG,OAAO,YAApCH,OAAwC;IACtD,IAAI,CAAC5E,KAAK,OAAO;QAAE0F,QAAQ;QAAKC,MAAM,GAAG5K,oBAAoB,cAAc,EAAE0K,MAAM,cAAc,CAAC;IAAC;IACnG,MAAMvG,QAAQ5D,cAAcsK,eAAe,EAAE5F,YAAAA,IAAII,IAAI,cAARJ,YAAc,CAAC;IAC5D,MAAM6F,UAAUvK,cAAcwK,sBAAsB,CAAClB,OAAOiB,OAAO;IACnE,MAAME,iBAAiBnB,OAAOmB,cAAc;IAE5C,IAAIA,kBAAkBzK,cAAc0K,uBAAuB,CAAC9G,OAAO6G,iBAAiB;QAClF,OAAO;YAAEL,QAAQ;YAAKC,MAAM;QAAoB;IAClD;IACA,MAAMM,QAAQ3K,cAAc4K,eAAe,CAAChH,OAAO0F,OAAOuB,KAAK;IAC/D,IAAIhH;IACJ,IAAI8G,MAAMG,KAAK,EAAE;YAWgDC;QAV/D,IAAI,CAACJ,MAAMG,KAAK,CAACxG,MAAM,EAAE;YACvB,OAAO;gBAAE8F,QAAQ;gBAAKC,MAAM,CAAC,sCAAsC,EAAEF,MAAM,EAAE,EAAEQ,MAAMK,OAAO,CAACC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAC;QAC7G;QACA,yEAAyE;QACzE,mEAAmE;QACnE,yCAAyC;QACzC,MAAMC,YAAY,IAAIC,IACpBnL,cAAcoL,0BAA0B,CAACxH,OAAOE,GAAG,CAAC,CAACuH,QAAU;gBAACA,MAAMC,UAAU;gBAAED,MAAME,iBAAiB;aAAC;QAE5G,MAAMR,SAAS,IAAII;QACnB,KAAK,MAAM5C,SAASoC,MAAMG,KAAK,CAAEC,OAAOnC,GAAG,CAACL,MAAM+C,UAAU,EAAE,EAACP,cAAAA,OAAO9F,GAAG,CAACsD,MAAM+C,UAAU,aAA3BP,cAAgC,KAAKxC,MAAMiD,QAAQ;QAClH3H,YAAY;eAAIkH,OAAOU,OAAO;SAAG,CAC9B3H,GAAG,CAAC,CAAC,CAACwH,YAAYE,SAAS;gBAAiDN;mBAA3C;gBAAEI;gBAAYE,UAAUjE,KAAKmE,GAAG,CAACF,WAAUN,iBAAAA,UAAUjG,GAAG,CAACqG,uBAAdJ,iBAA6B;YAAG;WAC5GjH,MAAM,CAAC,CAACsE,QAAUA,MAAMiD,QAAQ,GAAG;QACtC,IAAI,CAAC3H,UAAUS,MAAM,EAAE,OAAO;YAAE8F,QAAQ;YAAKC,MAAM;QAA4D;IACjH;IAEA,MAAMsB,UAAU,MAAM1L,oBAAoB;QACxCgB;QACAwI,SAAS/E,IAAIlD,EAAE;QACfoK,IAAI;QACJrB;QACAE;OACI5G,YAAY;QAAEA;IAAU,IAAI,CAAC;QACjC,kEAAkE;QAClE,yEAAyE;QACzEgI,gBAAgBpB,iBACZ,GAAGP,OAAO,CAAC,EAAElK,cAAc8L,uBAAuB,CAACrB,iBAAiB,GACpE,GAAGP,OAAO,QAAQ,EAAED,YAAY;QACpC8B,gBAAgB;;IAElB,OAAQJ,QAAQA,OAAO;QACrB,KAAK;YACH,OAAO;gBAAEvB,QAAQ;gBAAKC,MAAM;YAAY;QAC1C,KAAK;YACH,OAAO;gBAAED,QAAQ;gBAAKC,MAAM;YAAoB;QAClD,KAAK;YACH,OAAO;gBAAED,QAAQ;gBAAKC,MAAM,GAAG5K,oBAAoB,cAAc,EAAE0K,MAAM,cAAc,CAAC;YAAC;QAC3F,KAAK;YACH,OAAO;gBAAEC,QAAQ;gBAAKC,MAAM,CAAC,MAAM,EAAEF,MAAM,IAAI,EAAEwB,QAAQrJ,IAAI,CAACe,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE5D,oBAAoB,uBAAuB,CAAC;YAAC;QACtI,KAAK;YACH,OAAO;gBAAE2K,QAAQ;gBAAKC,MAAMsB,QAAQK,OAAO;YAAC;IAChD;AACF;AAEA;;2CAE2C,GAE3C,0EAA0E,GAC1E,OAAO,eAAeC,iBACpBC,OAAgB,EAChB5K,OAAsD;QAM3C5B,qBAmCWyM;IAvCtB,MAAMlL,SAASd,kBAAkBmB,QAAQ8K,MAAM;IAC/C,IAAI,CAACnL,QAAQ,OAAOX,KAAK,KAAK;IAC9B,IAAI,CAACE,gBAAgB0L,UAAU,OAAO5L,KAAK,KAAK,CAAC,yBAAyB,EAAEb,oBAAoB,UAAU,CAAC;IAE3G,MAAM4M,MAAK3M,gBAAAA,aAAawM,QAAQI,OAAO,aAA5B5M,gBAAiC;IAC5C,MAAM6M,OAAO,MAAMzM,iBAAiB,CAAC,YAAY,EAAEmB,OAAO,CAAC,EAAEoL,IAAI,EAAE;QACjEjE,OAAO1H;QACP8L,UAAU;IACZ;IACA,IAAI,CAACD,KAAKE,OAAO,EAAE;QACjB,OAAOnM,KAAK,KAAK,8CAA8C;YAC7D,eAAe2B,OAAOsF,KAAKC,GAAG,CAAC,GAAGD,KAAKE,IAAI,CAAC,AAAC8E,CAAAA,KAAKG,OAAO,GAAG5D,KAAKC,GAAG,EAAC,IAAK;QAC5E;IACF;IAEA,MAAMvE,YAAYzE,cAAc4G,GAAG,GAAGnC,SAAS;IAC/C,MAAMoC,gBAAgBpC,UAAUJ,UAAU,CAAC3D,yBAAyBiE,GAAG,CAACzD;IACxE,MAAM0B,SAAS,MAAMiE,cAAc3B,GAAG;IACtC,MAAMvD,aAAaiB,OAAOiC,MAAM,GAAIjC,OAAOmC,IAAI,KAA+B;IAC9E,MAAM3D,UAAUjB;IAChB,MAAMyB,SAASF,wBAAwBC,YAAYP;IACnD,IAAIO,cAAc,CAACC,QAAQwH,QAAQD,KAAK,CAAC,wDAAwDjI;IACjG,MAAM2B,YAAYd,cAAcoK,QAAQI,OAAO,CAACrH,GAAG,CAAC;IACpD,IAAI,CAACvC,iBAAiBhB,aAAa;QAAEb,UAAUa,WAAWb,QAAQ;QAAEE,QAAQ,UAAEY,0BAAAA,OAAQZ,QAAQ,mBAAI;IAAK,IAAI,MAAM6B,YAAY;QAC3H,OAAOQ;IACT;IACA,MAAMuJ,SAASjL;IACf,IAAIC,CAAAA,0BAAAA,OAAQE,MAAM,KAAIV,SAAS;QAC7B,sEAAsE;QACtE,kEAAkE;QAClE,MAAMyF,cACHgC,GAAG,CAAC1H,wBAAwBD,QAAQU,OAAOZ,QAAQ,EAAEI,UAAU;YAAE6H,OAAO;QAAK,GAC7EC,KAAK,CAAC,CAACC,QAAmBC,QAAQC,IAAI,CAAC,sCAAsCnI,QAAQiI;IAC1F;IAEA,MAAM0D,UAAU,MAAMxM,qBAAqB8L,SAASjL;IACpD,IAAI2L,SAAS,OAAOA;IAEpB,MAAMT,MAAM,IAAIU,IAAIX,QAAQC,GAAG;IAC/B,MAAMW,SAAS7K,QAAOkK,wBAAAA,IAAIY,YAAY,CAAC9H,GAAG,CAAC,qBAArBkH,wBAAkC,IAAIa,IAAI,GAAGC,WAAW;IAC9E,IAAIH,WAAW,UAAU;QACvB,IAAIZ,QAAQgB,MAAM,KAAK,OAAO,OAAO5M,KAAK,KAAK,sBAAsB;YAAE6M,OAAO;QAAM;QACpF,MAAM1G,SAASd,iBAAiBwG,IAAIY,YAAY;QAChD,IAAI,aAAatG,QAAQ,OAAOnG,KAAK,KAAKmG,OAAOT,OAAO;QACxD,IAAI;YACF,MAAMG,OAAO,MAAMK,kBAAkBvF,QAAQwF,QAAQkG;YACrD,OAAO,IAAIS,SAASjH,KAAKsC,GAAG,EAAE;gBAAE2B,QAAQ;gBAAKkC,SAAS;oBAAE,gBAAgB;gBAAiC;YAAE;QAC7G,EAAE,OAAOpD,OAAO;YACdC,QAAQD,KAAK,CAAC,8BAA8BjI,QAAQiI;YACpD,OAAO5I,KAAK,KAAK,GAAGb,oBAAoB,mDAAmD,CAAC;QAC9F;IACF;IACA,IAAIqN,WAAW,cAAc;YAEHZ;QADxB,IAAIA,QAAQgB,MAAM,KAAK,QAAQ,OAAO5M,KAAK,KAAK,kCAAkC;YAAE6M,OAAO;QAAO;QAClG,MAAME,WAAWhH,QAAO6F,uBAAAA,QAAQI,OAAO,CAACrH,GAAG,CAAC,6BAApBiH,uBAAyC;QACjE,IAAImB,WAAW1M,sBAAsB,OAAOL,KAAK,KAAK;QACtD,MAAM+J,OAAO,MAAM6B,QAAQ5L,IAAI;QAC/B,IAAI+B,OAAOiL,UAAU,CAACjD,MAAM,UAAU1J,sBAAsB,OAAOL,KAAK,KAAK;QAC7E,MAAMsF,QAA4C,CAAC;QACnD,KAAK,MAAM2H,QAAQ;YAAC;YAAgB;YAAW;YAAW;SAAkB,CAAE;gBAC9DpB;YAAdvG,KAAK,CAAC2H,KAAK,IAAGpB,yBAAAA,IAAIY,YAAY,CAAC9H,GAAG,CAACsI,iBAArBpB,yBAA8BtC;QAC9C;QACA,MAAMP,SAAStJ,cAAcwN,cAAc,CAACnD,MAAMzE;QAClD,IAAI,aAAa0D,QAAQ,OAAOhJ,KAAK,KAAKgJ,OAAOtD,OAAO;QACxD,IAAI,CAACsD,OAAOK,WAAW,IAAI,CAACL,OAAOG,OAAO,EAAE,OAAOnJ,KAAK,KAAK;QAC7D,IAAI;YACF,MAAMqL,UAAU,MAAM3B,iBAAiB/I,QAAQqI,QAAQ/I,aAAa8J,MAAM5H,KAAK,CAAC,GAAG;YACnF,MAAMmE,cACHgC,GAAG,CAAC;gBAAE6E,oBAAoB3E,KAAKC,GAAG;YAAG,GAAG;gBAAEC,OAAO;YAAK,GACtDC,KAAK,CAAC,CAACC,QAAmBC,QAAQC,IAAI,CAAC,sCAAsCnI,QAAQiI;YACxF,OAAO5I,KAAKqL,QAAQvB,MAAM,EAAEuB,QAAQtB,IAAI;QAC1C,EAAE,OAAOnB,OAAO;YACdC,QAAQD,KAAK,CAAC,kCAAkCjI,QAAQiI;YACxD,OAAO5I,KAAK,KAAK,GAAGb,oBAAoB,uDAAuD,CAAC;QAClG;IACF;IACA,OAAOa,KAAK,KAAK;AACnB"}

package/src/lib/server/site-page-resolver.d.ts

@@ -15,6 +15,7 @@
  * limitations under the License.
  */
 import type { SitePageResolver } from '@aglyn/aglyn/server';
+import * as Aglyn from '@aglyn/aglyn/server';
 /**
  * Commerce page resolver (AGL-292/298/418), relocated verbatim from the
  * tenant loader: /products/{slug} renders the host's designated PDP
@@ -24,3 +25,7 @@ import type { SitePageResolver } from '@aglyn/aglyn/server';
  * undefined for everything else so the loader falls through.
  */
 export declare const commerceSitePageResolver: SitePageResolver;
+/** The order-status page's node tree, root first, for the layout's slot. */
+export declare function buildOrderStatusNodes(): Record<string, Aglyn.AglynNodeSchema>;
+/** The return form's node tree, root first, for the layout's slot. */
+export declare function buildReturnRequestNodes(): Record<string, Aglyn.AglynNodeSchema>;