@aglyn/plugins-commerce 1.0.0-beta.230 → 1.0.0-beta.232

package/src/lib/server/stripe-refund.d.ts

@@ -0,0 +1,47 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * ONE STRIPE REFUND, the way every commerce refund sends one (AGL-3609).
+ *
+ * Shared by the order dialog's refund (`refund.ts`) and a return at the
+ * register (`pos-return.ts`), so both take the money back the same way:
+ *
+ * - `reverse_transfer`: a destination charge's money sits in the
+ *   merchant's connected account, so the refund pulls it back from there
+ *   rather than out of the platform's balance.
+ * - `refund_application_fee`: the platform hands its fee back on the
+ *   refunded share, as it always has.
+ * - the caller's IDEMPOTENCY KEY, so a retried request is the same refund
+ *   at Stripe and never a second one.
+ */
+export type StripeRefundResult = {
+    ok: true;
+    refundId: string;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+    code: string;
+};
+export declare function createStripeRefund(input: {
+    paymentIntentId: string;
+    amountCents: number;
+    idempotencyKey?: string | null;
+    metadata?: Record<string, string>;
+    fetch?: typeof fetch;
+    secretKey?: string;
+}): Promise<StripeRefundResult>;

package/src/lib/server/stripe-refund.js

@@ -0,0 +1,87 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * ONE STRIPE REFUND, the way every commerce refund sends one (AGL-3609).
+ *
+ * Shared by the order dialog's refund (`refund.ts`) and a return at the
+ * register (`pos-return.ts`), so both take the money back the same way:
+ *
+ * - `reverse_transfer`: a destination charge's money sits in the
+ *   merchant's connected account, so the refund pulls it back from there
+ *   rather than out of the platform's balance.
+ * - `refund_application_fee`: the platform hands its fee back on the
+ *   refunded share, as it always has.
+ * - the caller's IDEMPOTENCY KEY, so a retried request is the same refund
+ *   at Stripe and never a second one.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+export async function createStripeRefund(input) {
+    var _input_secretKey, _input_metadata, _input_fetch, _ref;
+    const secretKey = (_input_secretKey = input.secretKey) != null ? _input_secretKey : process.env.STRIPE_SECRET_KEY;
+    if (!secretKey) {
+        return {
+            ok: false,
+            status: 501,
+            error: 'Payments are not configured.',
+            code: 'not_configured'
+        };
+    }
+    const params = new URLSearchParams({
+        payment_intent: input.paymentIntentId,
+        amount: String(Math.round(input.amountCents)),
+        reverse_transfer: 'true',
+        refund_application_fee: 'true'
+    });
+    for (const [key, value] of Object.entries((_input_metadata = input.metadata) != null ? _input_metadata : {})){
+        params.set(`metadata[${key}]`, value);
+    }
+    const send = (_input_fetch = input.fetch) != null ? _input_fetch : fetch;
+    const response = await send('https://api.stripe.com/v1/refunds', {
+        method: 'POST',
+        headers: _extends({
+            Authorization: `Bearer ${secretKey}`,
+            'Content-Type': 'application/x-www-form-urlencoded'
+        }, input.idempotencyKey ? {
+            'Idempotency-Key': input.idempotencyKey
+        } : {}),
+        body: params.toString()
+    });
+    const refund = await Promise.resolve().then(()=>response.json()).catch(()=>({}));
+    if (!response.ok) {
+        var _ref1, _ref2;
+        var _refund_error, _refund_error1;
+        const code = String((_ref1 = refund == null ? void 0 : (_refund_error = refund.error) == null ? void 0 : _refund_error.code) != null ? _ref1 : '');
+        if (code === 'charge_disputed' || code === 'refund_disputed_payment') {
+            return {
+                ok: false,
+                status: 409,
+                code,
+                error: 'Stripe refused this refund because the charge is disputed. ' + 'Respond to the dispute or accept it in the Stripe dashboard; ' + 'refund any remainder once it settles.'
+            };
+        }
+        return {
+            ok: false,
+            status: 502,
+            code,
+            error: (_ref2 = refund == null ? void 0 : (_refund_error1 = refund.error) == null ? void 0 : _refund_error1.message) != null ? _ref2 : 'Refund failed'
+        };
+    }
+    return {
+        ok: true,
+        refundId: String((_ref = refund == null ? void 0 : refund.id) != null ? _ref : '')
+    };
+}
+
+//# sourceMappingURL=stripe-refund.js.map

package/src/lib/server/stripe-refund.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/stripe-refund.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * ONE STRIPE REFUND, the way every commerce refund sends one (AGL-3609).\n *\n * Shared by the order dialog's refund (`refund.ts`) and a return at the\n * register (`pos-return.ts`), so both take the money back the same way:\n *\n * - `reverse_transfer`: a destination charge's money sits in the\n *   merchant's connected account, so the refund pulls it back from there\n *   rather than out of the platform's balance.\n * - `refund_application_fee`: the platform hands its fee back on the\n *   refunded share, as it always has.\n * - the caller's IDEMPOTENCY KEY, so a retried request is the same refund\n *   at Stripe and never a second one.\n */\nexport type StripeRefundResult =\n  | { ok: true; refundId: string }\n  | { ok: false; status: number; error: string; code: string }\n\nexport async function createStripeRefund(input: {\n  paymentIntentId: string\n  amountCents: number\n  idempotencyKey?: string | null\n  metadata?: Record<string, string>\n  fetch?: typeof fetch\n  secretKey?: string\n}): Promise<StripeRefundResult> {\n  const secretKey = input.secretKey ?? process.env.STRIPE_SECRET_KEY\n  if (!secretKey) {\n    return { ok: false, status: 501, error: 'Payments are not configured.', code: 'not_configured' }\n  }\n  const params = new URLSearchParams({\n    payment_intent: input.paymentIntentId,\n    amount: String(Math.round(input.amountCents)),\n    reverse_transfer: 'true',\n    refund_application_fee: 'true',\n  })\n  for (const [key, value] of Object.entries(input.metadata ?? {})) {\n    params.set(`metadata[${key}]`, value)\n  }\n  const send = input.fetch ?? fetch\n  const response = await send('https://api.stripe.com/v1/refunds', {\n    method: 'POST',\n    headers: {\n      Authorization: `Bearer ${secretKey}`,\n      'Content-Type': 'application/x-www-form-urlencoded',\n      ...(input.idempotencyKey ? { 'Idempotency-Key': input.idempotencyKey } : {}),\n    },\n    body: params.toString(),\n  })\n  const refund = (await Promise.resolve()\n    .then(() => response.json())\n    .catch(() => ({}))) as {\n    id?: string\n    error?: { code?: string; message?: string }\n  }\n  if (!response.ok) {\n    const code = String(refund?.error?.code ?? '')\n    if (code === 'charge_disputed' || code === 'refund_disputed_payment') {\n      return {\n        ok: false,\n        status: 409,\n        code,\n        error:\n          'Stripe refused this refund because the charge is disputed. ' +\n          'Respond to the dispute or accept it in the Stripe dashboard; ' +\n          'refund any remainder once it settles.',\n      }\n    }\n    return { ok: false, status: 502, code, error: refund?.error?.message ?? 'Refund failed' }\n  }\n  return { ok: true, refundId: String(refund?.id ?? '') }\n}\n"],"names":["createStripeRefund","input","secretKey","process","env","STRIPE_SECRET_KEY","ok","status","error","code","params","URLSearchParams","payment_intent","paymentIntentId","amount","String","Math","round","amountCents","reverse_transfer","refund_application_fee","key","value","Object","entries","metadata","set","send","fetch","response","method","headers","Authorization","idempotencyKey","body","toString","refund","Promise","resolve","then","json","catch","message","refundId","id"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;CAaC;AAKD,OAAO,eAAeA,mBAAmBC,KAOxC;QACmBA,kBAUwBA,iBAG7BA;IAbb,MAAMC,aAAYD,mBAAAA,MAAMC,SAAS,YAAfD,mBAAmBE,QAAQC,GAAG,CAACC,iBAAiB;IAClE,IAAI,CAACH,WAAW;QACd,OAAO;YAAEI,IAAI;YAAOC,QAAQ;YAAKC,OAAO;YAAgCC,MAAM;QAAiB;IACjG;IACA,MAAMC,SAAS,IAAIC,gBAAgB;QACjCC,gBAAgBX,MAAMY,eAAe;QACrCC,QAAQC,OAAOC,KAAKC,KAAK,CAAChB,MAAMiB,WAAW;QAC3CC,kBAAkB;QAClBC,wBAAwB;IAC1B;IACA,KAAK,MAAM,CAACC,KAAKC,MAAM,IAAIC,OAAOC,OAAO,EAACvB,kBAAAA,MAAMwB,QAAQ,YAAdxB,kBAAkB,CAAC,GAAI;QAC/DS,OAAOgB,GAAG,CAAC,CAAC,SAAS,EAAEL,IAAI,CAAC,CAAC,EAAEC;IACjC;IACA,MAAMK,QAAO1B,eAAAA,MAAM2B,KAAK,YAAX3B,eAAe2B;IAC5B,MAAMC,WAAW,MAAMF,KAAK,qCAAqC;QAC/DG,QAAQ;QACRC,SAAS;YACPC,eAAe,CAAC,OAAO,EAAE9B,WAAW;YACpC,gBAAgB;WACZD,MAAMgC,cAAc,GAAG;YAAE,mBAAmBhC,MAAMgC,cAAc;QAAC,IAAI,CAAC;QAE5EC,MAAMxB,OAAOyB,QAAQ;IACvB;IACA,MAAMC,SAAU,MAAMC,QAAQC,OAAO,GAClCC,IAAI,CAAC,IAAMV,SAASW,IAAI,IACxBC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;IAIjB,IAAI,CAACZ,SAASvB,EAAE,EAAE;;YACI8B,eAY0BA;QAZ9C,MAAM3B,OAAOM,gBAAOqB,2BAAAA,gBAAAA,OAAQ5B,KAAK,qBAAb4B,cAAe3B,IAAI,oBAAI;QAC3C,IAAIA,SAAS,qBAAqBA,SAAS,2BAA2B;YACpE,OAAO;gBACLH,IAAI;gBACJC,QAAQ;gBACRE;gBACAD,OACE,gEACA,kEACA;YACJ;QACF;QACA,OAAO;YAAEF,IAAI;YAAOC,QAAQ;YAAKE;YAAMD,KAAK,WAAE4B,2BAAAA,iBAAAA,OAAQ5B,KAAK,qBAAb4B,eAAeM,OAAO,oBAAI;QAAgB;IAC1F;IACA,OAAO;QAAEpC,IAAI;QAAMqC,UAAU5B,eAAOqB,0BAAAA,OAAQQ,EAAE,mBAAI;IAAI;AACxD"}

package/src/lib/server/supplier-update.js

@@ -19,6 +19,9 @@ import { firebaseAdmin, notifyHostManagers } from "@aglyn/tenant-data-admin";
 import { escapeHtml } from "../utils/escape-html.js";
 import { createHmac, timingSafeEqual } from "crypto";
 import { tokenSigningSecret } from "./download.js";
+import { notifyOrderBuyer } from "./order-notifications.js";
+import { ORDER_FULFILLED_EVENT } from "../model/order-events.js";
+import { fulfillmentEventView, stageOrderEvent } from "./order-events.js";
 /**
  * Constant-time compare for the per-order supplier token (AGL-2268).
  *
@@ -232,10 +235,29 @@ import { tokenSigningSecret } from "./download.js";
                     }
                 };
             }
+            // The units still open on the supplier's lines (AGL-3611): the
+            // merchant may already have shipped part of one from the console.
+            const remainingByLine = new Map(CommerceModel.orderLineFulfillmentStates(order).map((state)=>[
+                    state.lineItemId,
+                    state.remainingQuantity
+                ]));
+            const shippedLines = myLines.map((index)=>{
+                var _remainingByLine_get;
+                return {
+                    lineItemId: index,
+                    quantity: (_remainingByLine_get = remainingByLine.get(index)) != null ? _remainingByLine_get : 0
+                };
+            }).filter((entry)=>entry.quantity > 0);
             const fulfillment = _extends({
                 id: `supplier-${Date.now().toString(36)}`,
-                lineItemIds: myLines
-            }, carrier ? {
+                lineItemIds: shippedLines.map((entry)=>entry.lineItemId),
+                lines: shippedLines
+            }, carrier && trackingNumber ? (()=>{
+                const trackingUrl = CommerceModel.trackingUrlFor(carrier, trackingNumber);
+                return trackingUrl ? {
+                    trackingUrl
+                } : {};
+            })() : {}, carrier ? {
                 carrier
             } : {}, trackingNumber ? {
                 trackingNumber
@@ -243,16 +265,27 @@ import { tokenSigningSecret } from "./download.js";
                 atMs: Date.now()
             });
             const remaining = ((_order_lineItems = order.lineItems) != null ? _order_lineItems : []).filter((_line, index)=>!coveredAfter.has(index)).length;
-            transaction.set(orderRef, {
+            const shipped = {
                 status: nextStatus,
                 fulfillments: [
                     ...(_order_fulfillments = order.fulfillments) != null ? _order_fulfillments : [],
                     fulfillment
                 ],
+                updatedAtMs: Date.now(),
                 timeline: CommerceModel.appendOrderEvent(order, nextStatus, `Supplier shipped ${myLines.length} of ${((_order_lineItems1 = order.lineItems) != null ? _order_lineItems1 : []).length} line${((_order_lineItems2 = order.lineItems) != null ? _order_lineItems2 : []).length === 1 ? '' : 's'}` + (trackingNumber ? ` — ${carrier || 'tracking'} ${trackingNumber}` : '') + (remaining > 0 ? `. ${remaining} line${remaining === 1 ? '' : 's'} still to ship.` : ''))
-            }, {
+            };
+            transaction.set(orderRef, shipped, {
                 merge: true
             });
+            stageOrderEvent(transaction, ORDER_FULFILLED_EVENT, {
+                hostId,
+                orderId,
+                key: fulfillment.id,
+                order: _extends({}, orderSnapshot.data(), shipped),
+                extra: {
+                    fulfillment: fulfillmentEventView(order, fulfillment)
+                }
+            });
             return {
                 status: 200,
                 body: {
@@ -263,7 +296,8 @@ import { tokenSigningSecret } from "./download.js";
                 order,
                 nextStatus,
                 remaining,
-                supplierId: postingSupplier
+                supplierId: postingSupplier,
+                fulfillmentId: fulfillment.id
             };
         });
         if (outcome.status !== 200) {
@@ -287,6 +321,13 @@ import { tokenSigningSecret } from "./download.js";
             ].filter(Boolean).join(' ')}.` : ' No tracking number was given.') + (outstanding > 0 ? ` ${outstanding} line${outstanding === 1 ? ' is' : 's are'} still to ship.` : ''),
             link: `/${hostId}/products`
         });
+        // …and the buyer hears their parcel is on its way (AGL-3610).
+        await notifyOrderBuyer({
+            hostId,
+            orderId
+        }, 'shipped', {
+            fulfillmentId: outcome.fulfillmentId
+        });
         return res.status(200).json(outcome.body);
     } catch (error) {
         console.error(error);

package/src/lib/server/supplier-update.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/supplier-update.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport * as CommerceModel from '../model'\nimport { firebaseAdmin, notifyHostManagers } from '@aglyn/tenant-data-admin'\nimport { escapeHtml } from '../utils/escape-html'\nimport { createHmac, timingSafeEqual } from 'crypto'\nimport { tokenSigningSecret } from './download'\nimport { type PluginApiHandler } from '@aglyn/aglyn/server'\n\n/**\n * Constant-time compare for the per-order supplier token (AGL-2268).\n *\n * `!==` on a secret leaks its prefix through response timing, and this token is\n * a bearer credential for a route with no account behind it — the only thing\n * standing between the open internet and marking a merchant's order shipped.\n * `download.ts` has compared its own token this way since it shipped; this is\n * the sibling that did not.\n *\n * Length is compared first and OUTSIDE the constant-time call, because\n * `timingSafeEqual` throws on a length mismatch. That leaks the token's LENGTH\n * and nothing else, which is the same concession `download.ts` makes.\n */\nfunction tokenMatches(stored: unknown, presented: string): boolean {\n  const expected = typeof stored === 'string' ? stored : ''\n  if (!expected || !presented) return false\n  const a = Buffer.from(presented)\n  const b = Buffer.from(expected)\n  if (a.length !== b.length) return false\n  return timingSafeEqual(new Uint8Array(a), new Uint8Array(b))\n}\n\n/**\n * WHICH supplier is posting (AGL-2455), and the observation that makes the\n * issue's \"structural blocker\" not structural after all.\n *\n * The order document holds ONE `supplierToken` field, so the issue's reading\n * was that scoping lines per supplier would strand every other supplier's lines\n * permanently: only the last token written could authenticate, and the others\n * would have no valid credential at all. That reading is right about the stored\n * field and wrong about the token.\n *\n * The token is not a random secret that has to be stored to be known. It is\n * `HMAC(hostId:orderId:supplierId)` under `TOKEN_SIGNING_SECRET`\n * (`billing-webhook.ts`), a pure function of three identifiers the order\n * already carries — `supplierId` is stamped onto every line at purchase time.\n * So the expected token for EVERY supplier on the order can be re-derived here\n * and compared, which both identifies the poster and lets every supplier\n * authenticate. No schema change, no migration, no map.\n *\n * Every candidate is compared even after a match, so the work done is a\n * function of the order's supplier count and not of which supplier posted.\n *\n * Returns `null` when nothing matches; the stored-scalar fallback is the\n * caller's, because only it knows whether that fallback is ambiguous.\n */\nfunction resolvePostingSupplier(\n  hostId: string,\n  orderId: string,\n  order: CommerceModel.HostOrder,\n  presented: string,\n): string | null {\n  let secret: string\n  try {\n    secret = tokenSigningSecret()\n  } catch {\n    // Unset secret: no token could have been MINTED either, so there is nothing\n    // to derive. Fall through to the stored scalar rather than throwing a 500\n    // at a supplier who cannot do anything about it.\n    return null\n  }\n  let matched: string | null = null\n  for (const supplierId of CommerceModel.orderSupplierIds(order)) {\n    const expected = createHmac('sha256', secret)\n      .update(`${hostId}:${orderId}:${supplierId}`)\n      .digest('hex')\n      .slice(0, 32)\n    if (tokenMatches(expected, presented)) matched = supplierId\n  }\n  return matched\n}\n\n\n/**\n * Supplier tracking callback (AGL-289): the routed order carried a\n * per-order token; posting (or GET-ing, for email links) tracking with\n * it fulfills the order. Token-gated — suppliers have no Aglyn account.\n */\nexport const supplierUpdateHandler: PluginApiHandler = async (req, res) => {\n  const source = req.method === 'POST' ? { ...req.query, ...(typeof req.body === 'string' ? JSON.parse(req.body || '{}') : (req.body ?? {})) } : req.query\n  const hostId = String(source.hostId ?? '')\n  const orderId = String(source.orderId ?? '')\n  const token = String(source.token ?? '')\n  const trackingNumber = String(source.trackingNumber ?? '').slice(0, 60)\n  const carrier = String(source.carrier ?? '').slice(0, 40)\n  if (!hostId || !orderId || !token) {\n    return res.status(400).json({ error: 'Missing hostId, orderId, or token' })\n  }\n  // Firestore reserves `__…__` ids and `.doc()` throws SYNCHRONOUSLY on one,\n  // which fell into the catch below and answered 500 to what is a 400\n  // (AGL-2455). `fulfill-order.ts` has had this guard since it shipped; this is\n  // the sibling route that did not.\n  if (/^__.*__$/.test(hostId) || /^__.*__$/.test(orderId)) {\n    return res.status(400).json({ error: 'Missing hostId, orderId, or token' })\n  }\n\n  try {\n    const firestore = firebaseAdmin.app().firestore()\n    const orderRef = firestore\n      .collection('hosts')\n      .doc(hostId)\n      .collection('orders')\n      .doc(orderId)\n    // A GET NEVER MOVES THE ORDER (AGL-2268). The supplier email carries this\n    // URL, and a GET that fulfils means every link scanner, spam filter,\n    // preview generator and browser prefetch on the path between us and the\n    // supplier's inbox marks the order shipped — before anything shipped, and\n    // with no tracking number on it. The link still works and the email is\n    // unchanged: a GET renders a one-button page that POSTs the same\n    // parameters, so the supplier's experience is one extra click and the\n    // machines that open mail for a living take no action at all.\n    if (req.method === 'GET') {\n      res.setHeader('Content-Type', 'text/html')\n      const field = (name: string, value: string) =>\n        `<input type=\"hidden\" name=\"${name}\" value=\"${escapeHtml(value)}\">`\n      // The carrier and the number are FIELDS the supplier fills in\n      // (AGL-3432), so the emailed link needs no placeholders for them to\n      // edit in the URL. A value a link does carry arrives filled in.\n      const input = (name: string, label: string, value: string) =>\n        `<p><label>${label}<br>` +\n        `<input type=\"text\" name=\"${name}\" value=\"${escapeHtml(value)}\"></label></p>`\n      return res.status(200).send(\n        '<h3>Record this shipment</h3>' +\n          '<p>Enter the carrier and tracking number, then press the button ' +\n          'to record it against the order.</p>' +\n          '<form method=\"POST\">' +\n          field('hostId', hostId) +\n          field('orderId', orderId) +\n          field('token', token) +\n          input('carrier', 'Carrier', carrier) +\n          input('trackingNumber', 'Tracking number', trackingNumber) +\n          '<button type=\"submit\">Mark as shipped</button>' +\n          '</form>',\n      )\n    }\n\n    // THE READ, THE TRANSITION CHECK AND THE WRITE ARE ONE ACT (AGL-2268).\n    // They used to be a plain `get()`, a check, and a `set(…, {merge:true})`,\n    // which is the exact stale-read hole AGL-1808/1818/1819 closed on the\n    // console's own fulfil, cancel and refund routes — reopened here, on the\n    // one door with no account behind it. A supplier POST racing a refund read\n    // `paid`, the refund landed, and the POST then wrote `fulfilled` over\n    // `refunded`. `ORDER_TRANSITIONS` says `refunded: []`, and the cost is not\n    // cosmetic: `gate.ts`, `download.ts`, `membership-account.ts` and\n    // `reviews.ts` all withdraw a shopper's entitlement by matching that\n    // literal, so the refunded buyer got their downloads back.\n    const outcome = await firebaseAdmin\n      .app()\n      .firestore()\n      .runTransaction(async (transaction) => {\n        const orderSnapshot = await transaction.get(orderRef)\n        if (!orderSnapshot.exists) {\n          return { status: 404, body: { error: 'Unknown order' } as any }\n        }\n        const order = CommerceModel.liftLegacyOrder(orderSnapshot.data() as any)\n        // ONE SUPPLIER SHIPS ONE SUPPLIER'S LINES (AGL-2455).\n        //\n        // `lineItemIds` used to be every index on the order and the status was\n        // written as the literal `'fulfilled'`, so the first supplier to post\n        // marked the whole order shipped — lines they had never seen included —\n        // and the second supplier's POST met a 409. The buyer was told\n        // everything shipped with one carrier and one tracking number.\n        const suppliers = CommerceModel.orderSupplierIds(order)\n        const postingSupplier = resolvePostingSupplier(\n          hostId,\n          orderId,\n          order,\n          token,\n        )\n        let myLines: number[]\n        if (postingSupplier) {\n          myLines = CommerceModel.supplierLineItemIds(order, postingSupplier)\n        } else if (tokenMatches(orderSnapshot.get('supplierToken'), token)) {\n          // The STORED scalar matched but no supplier on the order derives to\n          // it — an order whose lines carry no `supplierId`, which is every\n          // order routed before that field was stamped.\n          //\n          // With at most one supplier there is only one door, so claiming every\n          // line is the same answer this route has always given and is right.\n          // With TWO OR MORE, the scalar cannot say whose token it is, and\n          // guessing would either close lines a supplier never shipped (the\n          // defect) or strand them (the naive fix). REFUSED LOUDLY instead:\n          // the merchant fulfils from the console, where they can see the\n          // lines, and the message says so rather than leaving them to work it\n          // out from an order that silently went quiet.\n          if (suppliers.length > 1) {\n            return {\n              status: 409,\n              body: {\n                error:\n                  'This order has more than one supplier and the link cannot ' +\n                  'say which of them you are. Nothing was changed. Please ask ' +\n                  'the merchant to record this shipment from their console.',\n              } as any,\n            }\n          }\n          myLines = (order.lineItems ?? []).map((_line, index) => index)\n        } else {\n          return { status: 403, body: { error: 'Invalid token' } as any }\n        }\n        if (myLines.length === 0) {\n          return {\n            status: 409,\n            body: { error: 'No lines on this order are yours' } as any,\n          }\n        }\n        const coveredBefore = CommerceModel.coveredLineItemIds(order)\n        if (myLines.every((index) => coveredBefore.has(index))) {\n          // Every line of theirs is already shipped: a redelivered POST, or the\n          // supplier pressing the emailed button twice. Refused rather than\n          // appending a second copy of the same fulfillment — the same rule\n          // `fulfill-order.ts` applies to a retried click.\n          return {\n            status: 409,\n            body: {\n              error:\n                suppliers.length > 1\n                  ? 'Your lines on this order are already marked shipped'\n                  : `Order is already ${order.status}`,\n            } as any,\n          }\n        }\n        const coveredAfter = new Set([...coveredBefore, ...myLines])\n        // COMPUTED, not written as a literal. `partially_fulfilled` has been in\n        // `ORDER_TRANSITIONS` since orders shipped and nothing ever wrote it.\n        const nextStatus = CommerceModel.statusAfterFulfilling(\n          order,\n          coveredAfter,\n        )\n        // Re-asked inside the transaction that writes, as AGL-2268 established:\n        // a supplier POST racing a refund must not write over `refunded`. Only\n        // when the status actually MOVES — a second supplier posting onto an\n        // already `partially_fulfilled` order changes nothing about the status\n        // and must not be refused by a table that has no self-edge.\n        if (\n          nextStatus !== order.status &&\n          !CommerceModel.canTransitionOrder(order.status, nextStatus)\n        ) {\n          return {\n            status: 409,\n            body: { error: `Order is already ${order.status}` } as any,\n          }\n        }\n        const fulfillment: CommerceModel.OrderFulfillment = {\n          id: `supplier-${Date.now().toString(36)}`,\n          lineItemIds: myLines,\n          ...(carrier ? { carrier } : {}),\n          ...(trackingNumber ? { trackingNumber } : {}),\n          atMs: Date.now(),\n        }\n        const remaining = (order.lineItems ?? []).filter(\n          (_line, index) => !coveredAfter.has(index),\n        ).length\n        transaction.set(\n          orderRef,\n          {\n            status: nextStatus,\n            fulfillments: [...(order.fulfillments ?? []), fulfillment],\n            timeline: CommerceModel.appendOrderEvent(\n              order,\n              nextStatus,\n              `Supplier shipped ${myLines.length} of ${\n                (order.lineItems ?? []).length\n              } line${(order.lineItems ?? []).length === 1 ? '' : 's'}` +\n                (trackingNumber\n                  ? ` — ${carrier || 'tracking'} ${trackingNumber}`\n                  : '') +\n                (remaining > 0\n                  ? `. ${remaining} line${remaining === 1 ? '' : 's'} still to ship.`\n                  : ''),\n            ),\n          },\n          { merge: true },\n        )\n        return {\n          status: 200,\n          body: { ok: true, lineItemIds: myLines, orderStatus: nextStatus } as any,\n          order,\n          nextStatus,\n          remaining,\n          supplierId: postingSupplier,\n        }\n      })\n    if (outcome.status !== 200) {\n      return res.status(outcome.status).json(outcome.body)\n    }\n    // The merchant is told what is STILL OUTSTANDING (AGL-2455). \"Supplier\n    // shipped #1042\" on an order where one of three suppliers has posted reads\n    // as done, which is the same misreport the status literal made — the\n    // merchant would stop watching an order that is two thirds unshipped.\n    const outstanding = Number((outcome as any).remaining ?? 0)\n    const orderLabel = CommerceModel.formatOrderNumber(\n      outcome.order as CommerceModel.HostOrder,\n      orderId,\n    )\n    // Which supplier, which order, where, and the tracking (AGL-3432).\n    const supplierId = (outcome as any).supplierId as string | null\n    const supplierName = supplierId\n      ? String(\n          (await firestore\n            .collection('hosts')\n            .doc(hostId)\n            .collection('suppliers')\n            .doc(supplierId)\n            .get()\n            .then((snapshot) => snapshot.get('name'))\n            .catch(() => '')) ?? '',\n        ).trim()\n      : ''\n    void notifyHostManagers(hostId, {\n      type: 'content.order',\n      title: `Supplier shipped ${orderLabel}${outstanding > 0 ? ` — ${outstanding} line${outstanding === 1 ? '' : 's'} still to ship` : ''}`,\n      body:\n        `${supplierName || 'Your supplier'} shipped their part of order ` +\n        `${orderLabel} on {site}.` +\n        (trackingNumber\n          ? ` Tracking: ${[carrier, trackingNumber].filter(Boolean).join(' ')}.`\n          : ' No tracking number was given.') +\n        (outstanding > 0\n          ? ` ${outstanding} line${outstanding === 1 ? ' is' : 's are'} still to ship.`\n          : ''),\n      link: `/${hostId}/products`,\n    })\n    return res.status(200).json(outcome.body)\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'Update failed' })\n  }\n}\n"],"names":["CommerceModel","firebaseAdmin","notifyHostManagers","escapeHtml","createHmac","timingSafeEqual","tokenSigningSecret","tokenMatches","stored","presented","expected","a","Buffer","from","b","length","Uint8Array","resolvePostingSupplier","hostId","orderId","order","secret","matched","supplierId","orderSupplierIds","update","digest","slice","supplierUpdateHandler","req","res","source","method","query","body","JSON","parse","String","token","trackingNumber","carrier","status","json","error","test","firestore","app","orderRef","collection","doc","setHeader","field","name","value","input","label","send","outcome","runTransaction","transaction","orderSnapshot","get","exists","liftLegacyOrder","data","suppliers","postingSupplier","myLines","supplierLineItemIds","lineItems","map","_line","index","coveredBefore","coveredLineItemIds","every","has","coveredAfter","Set","nextStatus","statusAfterFulfilling","canTransitionOrder","fulfillment","id","Date","now","toString","lineItemIds","atMs","remaining","filter","set","fulfillments","timeline","appendOrderEvent","merge","ok","orderStatus","outstanding","Number","orderLabel","formatOrderNumber","supplierName","then","snapshot","catch","trim","type","title","Boolean","join","link","console"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,YAAYA,mBAAmB,oBAAU;AACzC,SAASC,aAAa,EAAEC,kBAAkB,QAAQ,2BAA0B;AAC5E,SAASC,UAAU,QAAQ,0BAAsB;AACjD,SAASC,UAAU,EAAEC,eAAe,QAAQ,SAAQ;AACpD,SAASC,kBAAkB,QAAQ,gBAAY;AAG/C;;;;;;;;;;;;CAYC,GACD,SAASC,aAAaC,MAAe,EAAEC,SAAiB;IACtD,MAAMC,WAAW,OAAOF,WAAW,WAAWA,SAAS;IACvD,IAAI,CAACE,YAAY,CAACD,WAAW,OAAO;IACpC,MAAME,IAAIC,OAAOC,IAAI,CAACJ;IACtB,MAAMK,IAAIF,OAAOC,IAAI,CAACH;IACtB,IAAIC,EAAEI,MAAM,KAAKD,EAAEC,MAAM,EAAE,OAAO;IAClC,OAAOV,gBAAgB,IAAIW,WAAWL,IAAI,IAAIK,WAAWF;AAC3D;AAEA;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GACD,SAASG,uBACPC,MAAc,EACdC,OAAe,EACfC,KAA8B,EAC9BX,SAAiB;IAEjB,IAAIY;IACJ,IAAI;QACFA,SAASf;IACX,EAAE,eAAM;QACN,4EAA4E;QAC5E,0EAA0E;QAC1E,iDAAiD;QACjD,OAAO;IACT;IACA,IAAIgB,UAAyB;IAC7B,KAAK,MAAMC,cAAcvB,cAAcwB,gBAAgB,CAACJ,OAAQ;QAC9D,MAAMV,WAAWN,WAAW,UAAUiB,QACnCI,MAAM,CAAC,GAAGP,OAAO,CAAC,EAAEC,QAAQ,CAAC,EAAEI,YAAY,EAC3CG,MAAM,CAAC,OACPC,KAAK,CAAC,GAAG;QACZ,IAAIpB,aAAaG,UAAUD,YAAYa,UAAUC;IACnD;IACA,OAAOD;AACT;AAGA;;;;CAIC,GACD,OAAO,MAAMM,wBAA0C,OAAOC,KAAKC;QACyDD,WACpGE,gBACCA,iBACFA,eACSA,wBACPA;IALvB,MAAMA,SAASF,IAAIG,MAAM,KAAK,SAAS,aAAKH,IAAII,KAAK,EAAM,OAAOJ,IAAIK,IAAI,KAAK,WAAWC,KAAKC,KAAK,CAACP,IAAIK,IAAI,IAAI,SAASL,YAAAA,IAAIK,IAAI,YAARL,YAAY,CAAC,KAAQA,IAAII,KAAK;IACxJ,MAAMf,SAASmB,QAAON,iBAAAA,OAAOb,MAAM,YAAba,iBAAiB;IACvC,MAAMZ,UAAUkB,QAAON,kBAAAA,OAAOZ,OAAO,YAAdY,kBAAkB;IACzC,MAAMO,QAAQD,QAAON,gBAAAA,OAAOO,KAAK,YAAZP,gBAAgB;IACrC,MAAMQ,iBAAiBF,QAAON,yBAAAA,OAAOQ,cAAc,YAArBR,yBAAyB,IAAIJ,KAAK,CAAC,GAAG;IACpE,MAAMa,UAAUH,QAAON,kBAAAA,OAAOS,OAAO,YAAdT,kBAAkB,IAAIJ,KAAK,CAAC,GAAG;IACtD,IAAI,CAACT,UAAU,CAACC,WAAW,CAACmB,OAAO;QACjC,OAAOR,IAAIW,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAoC;IAC3E;IACA,2EAA2E;IAC3E,oEAAoE;IACpE,8EAA8E;IAC9E,kCAAkC;IAClC,IAAI,WAAWC,IAAI,CAAC1B,WAAW,WAAW0B,IAAI,CAACzB,UAAU;QACvD,OAAOW,IAAIW,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAoC;IAC3E;IAEA,IAAI;YAkMyB,oBASpB;QA1MP,MAAME,YAAY5C,cAAc6C,GAAG,GAAGD,SAAS;QAC/C,MAAME,WAAWF,UACdG,UAAU,CAAC,SACXC,GAAG,CAAC/B,QACJ8B,UAAU,CAAC,UACXC,GAAG,CAAC9B;QACP,0EAA0E;QAC1E,qEAAqE;QACrE,wEAAwE;QACxE,0EAA0E;QAC1E,uEAAuE;QACvE,iEAAiE;QACjE,sEAAsE;QACtE,8DAA8D;QAC9D,IAAIU,IAAIG,MAAM,KAAK,OAAO;YACxBF,IAAIoB,SAAS,CAAC,gBAAgB;YAC9B,MAAMC,QAAQ,CAACC,MAAcC,QAC3B,CAAC,2BAA2B,EAAED,KAAK,SAAS,EAAEjD,WAAWkD,OAAO,EAAE,CAAC;YACrE,8DAA8D;YAC9D,oEAAoE;YACpE,gEAAgE;YAChE,MAAMC,QAAQ,CAACF,MAAcG,OAAeF,QAC1C,CAAC,UAAU,EAAEE,MAAM,IAAI,CAAC,GACxB,CAAC,yBAAyB,EAAEH,KAAK,SAAS,EAAEjD,WAAWkD,OAAO,cAAc,CAAC;YAC/E,OAAOvB,IAAIW,MAAM,CAAC,KAAKe,IAAI,CACzB,kCACE,qEACA,wCACA,yBACAL,MAAM,UAAUjC,UAChBiC,MAAM,WAAWhC,WACjBgC,MAAM,SAASb,SACfgB,MAAM,WAAW,WAAWd,WAC5Bc,MAAM,kBAAkB,mBAAmBf,kBAC3C,mDACA;QAEN;QAEA,uEAAuE;QACvE,0EAA0E;QAC1E,sEAAsE;QACtE,yEAAyE;QACzE,2EAA2E;QAC3E,sEAAsE;QACtE,2EAA2E;QAC3E,kEAAkE;QAClE,qEAAqE;QACrE,2DAA2D;QAC3D,MAAMkB,UAAU,MAAMxD,cACnB6C,GAAG,GACHD,SAAS,GACTa,cAAc,CAAC,OAAOC;gBAqGFvC,kBAOIA,qBAKdA,mBACMA;YAjHf,MAAMwC,gBAAgB,MAAMD,YAAYE,GAAG,CAACd;YAC5C,IAAI,CAACa,cAAcE,MAAM,EAAE;gBACzB,OAAO;oBAAErB,QAAQ;oBAAKP,MAAM;wBAAES,OAAO;oBAAgB;gBAAS;YAChE;YACA,MAAMvB,QAAQpB,cAAc+D,eAAe,CAACH,cAAcI,IAAI;YAC9D,sDAAsD;YACtD,EAAE;YACF,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,+DAA+D;YAC/D,+DAA+D;YAC/D,MAAMC,YAAYjE,cAAcwB,gBAAgB,CAACJ;YACjD,MAAM8C,kBAAkBjD,uBACtBC,QACAC,SACAC,OACAkB;YAEF,IAAI6B;YACJ,IAAID,iBAAiB;gBACnBC,UAAUnE,cAAcoE,mBAAmB,CAAChD,OAAO8C;YACrD,OAAO,IAAI3D,aAAaqD,cAAcC,GAAG,CAAC,kBAAkBvB,QAAQ;oBAwBvDlB;gBAvBX,oEAAoE;gBACpE,kEAAkE;gBAClE,8CAA8C;gBAC9C,EAAE;gBACF,sEAAsE;gBACtE,oEAAoE;gBACpE,iEAAiE;gBACjE,kEAAkE;gBAClE,kEAAkE;gBAClE,gEAAgE;gBAChE,qEAAqE;gBACrE,8CAA8C;gBAC9C,IAAI6C,UAAUlD,MAAM,GAAG,GAAG;oBACxB,OAAO;wBACL0B,QAAQ;wBACRP,MAAM;4BACJS,OACE,+DACA,gEACA;wBACJ;oBACF;gBACF;gBACAwB,UAAU,EAAC/C,oBAAAA,MAAMiD,SAAS,YAAfjD,oBAAmB,EAAE,EAAEkD,GAAG,CAAC,CAACC,OAAOC,QAAUA;YAC1D,OAAO;gBACL,OAAO;oBAAE/B,QAAQ;oBAAKP,MAAM;wBAAES,OAAO;oBAAgB;gBAAS;YAChE;YACA,IAAIwB,QAAQpD,MAAM,KAAK,GAAG;gBACxB,OAAO;oBACL0B,QAAQ;oBACRP,MAAM;wBAAES,OAAO;oBAAmC;gBACpD;YACF;YACA,MAAM8B,gBAAgBzE,cAAc0E,kBAAkB,CAACtD;YACvD,IAAI+C,QAAQQ,KAAK,CAAC,CAACH,QAAUC,cAAcG,GAAG,CAACJ,SAAS;gBACtD,sEAAsE;gBACtE,kEAAkE;gBAClE,kEAAkE;gBAClE,iDAAiD;gBACjD,OAAO;oBACL/B,QAAQ;oBACRP,MAAM;wBACJS,OACEsB,UAAUlD,MAAM,GAAG,IACf,wDACA,CAAC,iBAAiB,EAAEK,MAAMqB,MAAM,EAAE;oBAC1C;gBACF;YACF;YACA,MAAMoC,eAAe,IAAIC,IAAI;mBAAIL;mBAAkBN;aAAQ;YAC3D,wEAAwE;YACxE,sEAAsE;YACtE,MAAMY,aAAa/E,cAAcgF,qBAAqB,CACpD5D,OACAyD;YAEF,wEAAwE;YACxE,uEAAuE;YACvE,qEAAqE;YACrE,uEAAuE;YACvE,4DAA4D;YAC5D,IACEE,eAAe3D,MAAMqB,MAAM,IAC3B,CAACzC,cAAciF,kBAAkB,CAAC7D,MAAMqB,MAAM,EAAEsC,aAChD;gBACA,OAAO;oBACLtC,QAAQ;oBACRP,MAAM;wBAAES,OAAO,CAAC,iBAAiB,EAAEvB,MAAMqB,MAAM,EAAE;oBAAC;gBACpD;YACF;YACA,MAAMyC,cAA8C;gBAClDC,IAAI,CAAC,SAAS,EAAEC,KAAKC,GAAG,GAAGC,QAAQ,CAAC,KAAK;gBACzCC,aAAapB;eACT3B,UAAU;gBAAEA;YAAQ,IAAI,CAAC,GACzBD,iBAAiB;gBAAEA;YAAe,IAAI,CAAC;gBAC3CiD,MAAMJ,KAAKC,GAAG;;YAEhB,MAAMI,YAAY,EAACrE,mBAAAA,MAAMiD,SAAS,YAAfjD,mBAAmB,EAAE,EAAEsE,MAAM,CAC9C,CAACnB,OAAOC,QAAU,CAACK,aAAaD,GAAG,CAACJ,QACpCzD,MAAM;YACR4C,YAAYgC,GAAG,CACb5C,UACA;gBACEN,QAAQsC;gBACRa,cAAc;wBAAKxE,sBAAAA,MAAMwE,YAAY,YAAlBxE,sBAAsB,EAAE;oBAAG8D;iBAAY;gBAC1DW,UAAU7F,cAAc8F,gBAAgB,CACtC1E,OACA2D,YACA,CAAC,iBAAiB,EAAEZ,QAAQpD,MAAM,CAAC,IAAI,EACrC,EAACK,oBAAAA,MAAMiD,SAAS,YAAfjD,oBAAmB,EAAE,EAAEL,MAAM,CAC/B,KAAK,EAAE,EAACK,oBAAAA,MAAMiD,SAAS,YAAfjD,oBAAmB,EAAE,EAAEL,MAAM,KAAK,IAAI,KAAK,KAAK,GACtDwB,CAAAA,iBACG,CAAC,GAAG,EAAEC,WAAW,WAAW,CAAC,EAAED,gBAAgB,GAC/C,EAAC,IACJkD,CAAAA,YAAY,IACT,CAAC,EAAE,EAAEA,UAAU,KAAK,EAAEA,cAAc,IAAI,KAAK,IAAI,eAAe,CAAC,GACjE,EAAC;YAEX,GACA;gBAAEM,OAAO;YAAK;YAEhB,OAAO;gBACLtD,QAAQ;gBACRP,MAAM;oBAAE8D,IAAI;oBAAMT,aAAapB;oBAAS8B,aAAalB;gBAAW;gBAChE3D;gBACA2D;gBACAU;gBACAlE,YAAY2C;YACd;QACF;QACF,IAAIT,QAAQhB,MAAM,KAAK,KAAK;YAC1B,OAAOX,IAAIW,MAAM,CAACgB,QAAQhB,MAAM,EAAEC,IAAI,CAACe,QAAQvB,IAAI;QACrD;QACA,uEAAuE;QACvE,2EAA2E;QAC3E,qEAAqE;QACrE,sEAAsE;QACtE,MAAMgE,cAAcC,QAAO,qBAAA,AAAC1C,QAAgBgC,SAAS,YAA1B,qBAA8B;QACzD,MAAMW,aAAapG,cAAcqG,iBAAiB,CAChD5C,QAAQrC,KAAK,EACbD;QAEF,mEAAmE;QACnE,MAAMI,aAAa,AAACkC,QAAgBlC,UAAU;QAC9C,MAAM+E,eAAe/E,aACjBc,QACG,OAAA,MAAMQ,UACJG,UAAU,CAAC,SACXC,GAAG,CAAC/B,QACJ8B,UAAU,CAAC,aACXC,GAAG,CAAC1B,YACJsC,GAAG,GACH0C,IAAI,CAAC,CAACC,WAAaA,SAAS3C,GAAG,CAAC,SAChC4C,KAAK,CAAC,IAAM,eAPd,OAOsB,IACvBC,IAAI,KACN;QACJ,KAAKxG,mBAAmBgB,QAAQ;YAC9ByF,MAAM;YACNC,OAAO,CAAC,iBAAiB,EAAER,aAAaF,cAAc,IAAI,CAAC,GAAG,EAAEA,YAAY,KAAK,EAAEA,gBAAgB,IAAI,KAAK,IAAI,cAAc,CAAC,GAAG,IAAI;YACtIhE,MACE,GAAGoE,gBAAgB,gBAAgB,6BAA6B,CAAC,GACjE,GAAGF,WAAW,WAAW,CAAC,GACzB7D,CAAAA,iBACG,CAAC,WAAW,EAAE;gBAACC;gBAASD;aAAe,CAACmD,MAAM,CAACmB,SAASC,IAAI,CAAC,KAAK,CAAC,CAAC,GACpE,gCAA+B,IAClCZ,CAAAA,cAAc,IACX,CAAC,CAAC,EAAEA,YAAY,KAAK,EAAEA,gBAAgB,IAAI,QAAQ,QAAQ,eAAe,CAAC,GAC3E,EAAC;YACPa,MAAM,CAAC,CAAC,EAAE7F,OAAO,SAAS,CAAC;QAC7B;QACA,OAAOY,IAAIW,MAAM,CAAC,KAAKC,IAAI,CAACe,QAAQvB,IAAI;IAC1C,EAAE,OAAOS,OAAO;QACdqE,QAAQrE,KAAK,CAACA;QACd,OAAOb,IAAIW,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAgB;IACvD;AACF,EAAC"}
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/supplier-update.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport * as CommerceModel from '../model'\nimport { firebaseAdmin, notifyHostManagers } from '@aglyn/tenant-data-admin'\nimport { escapeHtml } from '../utils/escape-html'\nimport { createHmac, timingSafeEqual } from 'crypto'\nimport { tokenSigningSecret } from './download'\nimport { notifyOrderBuyer } from './order-notifications'\nimport { ORDER_FULFILLED_EVENT } from '../model/order-events'\nimport { fulfillmentEventView, stageOrderEvent } from './order-events'\nimport { type PluginApiHandler } from '@aglyn/aglyn/server'\n\n/**\n * Constant-time compare for the per-order supplier token (AGL-2268).\n *\n * `!==` on a secret leaks its prefix through response timing, and this token is\n * a bearer credential for a route with no account behind it — the only thing\n * standing between the open internet and marking a merchant's order shipped.\n * `download.ts` has compared its own token this way since it shipped; this is\n * the sibling that did not.\n *\n * Length is compared first and OUTSIDE the constant-time call, because\n * `timingSafeEqual` throws on a length mismatch. That leaks the token's LENGTH\n * and nothing else, which is the same concession `download.ts` makes.\n */\nfunction tokenMatches(stored: unknown, presented: string): boolean {\n  const expected = typeof stored === 'string' ? stored : ''\n  if (!expected || !presented) return false\n  const a = Buffer.from(presented)\n  const b = Buffer.from(expected)\n  if (a.length !== b.length) return false\n  return timingSafeEqual(new Uint8Array(a), new Uint8Array(b))\n}\n\n/**\n * WHICH supplier is posting (AGL-2455), and the observation that makes the\n * issue's \"structural blocker\" not structural after all.\n *\n * The order document holds ONE `supplierToken` field, so the issue's reading\n * was that scoping lines per supplier would strand every other supplier's lines\n * permanently: only the last token written could authenticate, and the others\n * would have no valid credential at all. That reading is right about the stored\n * field and wrong about the token.\n *\n * The token is not a random secret that has to be stored to be known. It is\n * `HMAC(hostId:orderId:supplierId)` under `TOKEN_SIGNING_SECRET`\n * (`billing-webhook.ts`), a pure function of three identifiers the order\n * already carries — `supplierId` is stamped onto every line at purchase time.\n * So the expected token for EVERY supplier on the order can be re-derived here\n * and compared, which both identifies the poster and lets every supplier\n * authenticate. No schema change, no migration, no map.\n *\n * Every candidate is compared even after a match, so the work done is a\n * function of the order's supplier count and not of which supplier posted.\n *\n * Returns `null` when nothing matches; the stored-scalar fallback is the\n * caller's, because only it knows whether that fallback is ambiguous.\n */\nfunction resolvePostingSupplier(\n  hostId: string,\n  orderId: string,\n  order: CommerceModel.HostOrder,\n  presented: string,\n): string | null {\n  let secret: string\n  try {\n    secret = tokenSigningSecret()\n  } catch {\n    // Unset secret: no token could have been MINTED either, so there is nothing\n    // to derive. Fall through to the stored scalar rather than throwing a 500\n    // at a supplier who cannot do anything about it.\n    return null\n  }\n  let matched: string | null = null\n  for (const supplierId of CommerceModel.orderSupplierIds(order)) {\n    const expected = createHmac('sha256', secret)\n      .update(`${hostId}:${orderId}:${supplierId}`)\n      .digest('hex')\n      .slice(0, 32)\n    if (tokenMatches(expected, presented)) matched = supplierId\n  }\n  return matched\n}\n\n\n/**\n * Supplier tracking callback (AGL-289): the routed order carried a\n * per-order token; posting (or GET-ing, for email links) tracking with\n * it fulfills the order. Token-gated — suppliers have no Aglyn account.\n */\nexport const supplierUpdateHandler: PluginApiHandler = async (req, res) => {\n  const source = req.method === 'POST' ? { ...req.query, ...(typeof req.body === 'string' ? JSON.parse(req.body || '{}') : (req.body ?? {})) } : req.query\n  const hostId = String(source.hostId ?? '')\n  const orderId = String(source.orderId ?? '')\n  const token = String(source.token ?? '')\n  const trackingNumber = String(source.trackingNumber ?? '').slice(0, 60)\n  const carrier = String(source.carrier ?? '').slice(0, 40)\n  if (!hostId || !orderId || !token) {\n    return res.status(400).json({ error: 'Missing hostId, orderId, or token' })\n  }\n  // Firestore reserves `__…__` ids and `.doc()` throws SYNCHRONOUSLY on one,\n  // which fell into the catch below and answered 500 to what is a 400\n  // (AGL-2455). `fulfill-order.ts` has had this guard since it shipped; this is\n  // the sibling route that did not.\n  if (/^__.*__$/.test(hostId) || /^__.*__$/.test(orderId)) {\n    return res.status(400).json({ error: 'Missing hostId, orderId, or token' })\n  }\n\n  try {\n    const firestore = firebaseAdmin.app().firestore()\n    const orderRef = firestore\n      .collection('hosts')\n      .doc(hostId)\n      .collection('orders')\n      .doc(orderId)\n    // A GET NEVER MOVES THE ORDER (AGL-2268). The supplier email carries this\n    // URL, and a GET that fulfils means every link scanner, spam filter,\n    // preview generator and browser prefetch on the path between us and the\n    // supplier's inbox marks the order shipped — before anything shipped, and\n    // with no tracking number on it. The link still works and the email is\n    // unchanged: a GET renders a one-button page that POSTs the same\n    // parameters, so the supplier's experience is one extra click and the\n    // machines that open mail for a living take no action at all.\n    if (req.method === 'GET') {\n      res.setHeader('Content-Type', 'text/html')\n      const field = (name: string, value: string) =>\n        `<input type=\"hidden\" name=\"${name}\" value=\"${escapeHtml(value)}\">`\n      // The carrier and the number are FIELDS the supplier fills in\n      // (AGL-3432), so the emailed link needs no placeholders for them to\n      // edit in the URL. A value a link does carry arrives filled in.\n      const input = (name: string, label: string, value: string) =>\n        `<p><label>${label}<br>` +\n        `<input type=\"text\" name=\"${name}\" value=\"${escapeHtml(value)}\"></label></p>`\n      return res.status(200).send(\n        '<h3>Record this shipment</h3>' +\n          '<p>Enter the carrier and tracking number, then press the button ' +\n          'to record it against the order.</p>' +\n          '<form method=\"POST\">' +\n          field('hostId', hostId) +\n          field('orderId', orderId) +\n          field('token', token) +\n          input('carrier', 'Carrier', carrier) +\n          input('trackingNumber', 'Tracking number', trackingNumber) +\n          '<button type=\"submit\">Mark as shipped</button>' +\n          '</form>',\n      )\n    }\n\n    // THE READ, THE TRANSITION CHECK AND THE WRITE ARE ONE ACT (AGL-2268).\n    // They used to be a plain `get()`, a check, and a `set(…, {merge:true})`,\n    // which is the exact stale-read hole AGL-1808/1818/1819 closed on the\n    // console's own fulfil, cancel and refund routes — reopened here, on the\n    // one door with no account behind it. A supplier POST racing a refund read\n    // `paid`, the refund landed, and the POST then wrote `fulfilled` over\n    // `refunded`. `ORDER_TRANSITIONS` says `refunded: []`, and the cost is not\n    // cosmetic: `gate.ts`, `download.ts`, `membership-account.ts` and\n    // `reviews.ts` all withdraw a shopper's entitlement by matching that\n    // literal, so the refunded buyer got their downloads back.\n    const outcome = await firebaseAdmin\n      .app()\n      .firestore()\n      .runTransaction(async (transaction) => {\n        const orderSnapshot = await transaction.get(orderRef)\n        if (!orderSnapshot.exists) {\n          return { status: 404, body: { error: 'Unknown order' } as any }\n        }\n        const order = CommerceModel.liftLegacyOrder(orderSnapshot.data() as any)\n        // ONE SUPPLIER SHIPS ONE SUPPLIER'S LINES (AGL-2455).\n        //\n        // `lineItemIds` used to be every index on the order and the status was\n        // written as the literal `'fulfilled'`, so the first supplier to post\n        // marked the whole order shipped — lines they had never seen included —\n        // and the second supplier's POST met a 409. The buyer was told\n        // everything shipped with one carrier and one tracking number.\n        const suppliers = CommerceModel.orderSupplierIds(order)\n        const postingSupplier = resolvePostingSupplier(\n          hostId,\n          orderId,\n          order,\n          token,\n        )\n        let myLines: number[]\n        if (postingSupplier) {\n          myLines = CommerceModel.supplierLineItemIds(order, postingSupplier)\n        } else if (tokenMatches(orderSnapshot.get('supplierToken'), token)) {\n          // The STORED scalar matched but no supplier on the order derives to\n          // it — an order whose lines carry no `supplierId`, which is every\n          // order routed before that field was stamped.\n          //\n          // With at most one supplier there is only one door, so claiming every\n          // line is the same answer this route has always given and is right.\n          // With TWO OR MORE, the scalar cannot say whose token it is, and\n          // guessing would either close lines a supplier never shipped (the\n          // defect) or strand them (the naive fix). REFUSED LOUDLY instead:\n          // the merchant fulfils from the console, where they can see the\n          // lines, and the message says so rather than leaving them to work it\n          // out from an order that silently went quiet.\n          if (suppliers.length > 1) {\n            return {\n              status: 409,\n              body: {\n                error:\n                  'This order has more than one supplier and the link cannot ' +\n                  'say which of them you are. Nothing was changed. Please ask ' +\n                  'the merchant to record this shipment from their console.',\n              } as any,\n            }\n          }\n          myLines = (order.lineItems ?? []).map((_line, index) => index)\n        } else {\n          return { status: 403, body: { error: 'Invalid token' } as any }\n        }\n        if (myLines.length === 0) {\n          return {\n            status: 409,\n            body: { error: 'No lines on this order are yours' } as any,\n          }\n        }\n        const coveredBefore = CommerceModel.coveredLineItemIds(order)\n        if (myLines.every((index) => coveredBefore.has(index))) {\n          // Every line of theirs is already shipped: a redelivered POST, or the\n          // supplier pressing the emailed button twice. Refused rather than\n          // appending a second copy of the same fulfillment — the same rule\n          // `fulfill-order.ts` applies to a retried click.\n          return {\n            status: 409,\n            body: {\n              error:\n                suppliers.length > 1\n                  ? 'Your lines on this order are already marked shipped'\n                  : `Order is already ${order.status}`,\n            } as any,\n          }\n        }\n        const coveredAfter = new Set([...coveredBefore, ...myLines])\n        // COMPUTED, not written as a literal. `partially_fulfilled` has been in\n        // `ORDER_TRANSITIONS` since orders shipped and nothing ever wrote it.\n        const nextStatus = CommerceModel.statusAfterFulfilling(\n          order,\n          coveredAfter,\n        )\n        // Re-asked inside the transaction that writes, as AGL-2268 established:\n        // a supplier POST racing a refund must not write over `refunded`. Only\n        // when the status actually MOVES — a second supplier posting onto an\n        // already `partially_fulfilled` order changes nothing about the status\n        // and must not be refused by a table that has no self-edge.\n        if (\n          nextStatus !== order.status &&\n          !CommerceModel.canTransitionOrder(order.status, nextStatus)\n        ) {\n          return {\n            status: 409,\n            body: { error: `Order is already ${order.status}` } as any,\n          }\n        }\n        // The units still open on the supplier's lines (AGL-3611): the\n        // merchant may already have shipped part of one from the console.\n        const remainingByLine = new Map(\n          CommerceModel.orderLineFulfillmentStates(order).map((state) => [\n            state.lineItemId,\n            state.remainingQuantity,\n          ]),\n        )\n        const shippedLines = myLines\n          .map((index) => ({ lineItemId: index, quantity: remainingByLine.get(index) ?? 0 }))\n          .filter((entry) => entry.quantity > 0)\n        const fulfillment: CommerceModel.OrderFulfillment = {\n          id: `supplier-${Date.now().toString(36)}`,\n          lineItemIds: shippedLines.map((entry) => entry.lineItemId),\n          lines: shippedLines,\n          ...(carrier && trackingNumber\n            ? (() => {\n                const trackingUrl = CommerceModel.trackingUrlFor(carrier, trackingNumber)\n                return trackingUrl ? { trackingUrl } : {}\n              })()\n            : {}),\n          ...(carrier ? { carrier } : {}),\n          ...(trackingNumber ? { trackingNumber } : {}),\n          atMs: Date.now(),\n        }\n        const remaining = (order.lineItems ?? []).filter(\n          (_line, index) => !coveredAfter.has(index),\n        ).length\n        const shipped = {\n            status: nextStatus,\n            fulfillments: [...(order.fulfillments ?? []), fulfillment],\n            updatedAtMs: Date.now(),\n            timeline: CommerceModel.appendOrderEvent(\n              order,\n              nextStatus,\n              `Supplier shipped ${myLines.length} of ${\n                (order.lineItems ?? []).length\n              } line${(order.lineItems ?? []).length === 1 ? '' : 's'}` +\n                (trackingNumber\n                  ? ` — ${carrier || 'tracking'} ${trackingNumber}`\n                  : '') +\n                (remaining > 0\n                  ? `. ${remaining} line${remaining === 1 ? '' : 's'} still to ship.`\n                  : ''),\n            ),\n          }\n        transaction.set(orderRef, shipped, { merge: true })\n        stageOrderEvent(transaction, ORDER_FULFILLED_EVENT, { hostId, orderId, key: fulfillment.id, order: { ...orderSnapshot.data(), ...shipped }, extra: { fulfillment: fulfillmentEventView(order, fulfillment) } })\n        return {\n          status: 200,\n          body: { ok: true, lineItemIds: myLines, orderStatus: nextStatus } as any,\n          order,\n          nextStatus,\n          remaining,\n          supplierId: postingSupplier,\n          fulfillmentId: fulfillment.id,\n        }\n      })\n    if (outcome.status !== 200) {\n      return res.status(outcome.status).json(outcome.body)\n    }\n    // The merchant is told what is STILL OUTSTANDING (AGL-2455). \"Supplier\n    // shipped #1042\" on an order where one of three suppliers has posted reads\n    // as done, which is the same misreport the status literal made — the\n    // merchant would stop watching an order that is two thirds unshipped.\n    const outstanding = Number((outcome as any).remaining ?? 0)\n    const orderLabel = CommerceModel.formatOrderNumber(\n      outcome.order as CommerceModel.HostOrder,\n      orderId,\n    )\n    // Which supplier, which order, where, and the tracking (AGL-3432).\n    const supplierId = (outcome as any).supplierId as string | null\n    const supplierName = supplierId\n      ? String(\n          (await firestore\n            .collection('hosts')\n            .doc(hostId)\n            .collection('suppliers')\n            .doc(supplierId)\n            .get()\n            .then((snapshot) => snapshot.get('name'))\n            .catch(() => '')) ?? '',\n        ).trim()\n      : ''\n    void notifyHostManagers(hostId, {\n      type: 'content.order',\n      title: `Supplier shipped ${orderLabel}${outstanding > 0 ? ` — ${outstanding} line${outstanding === 1 ? '' : 's'} still to ship` : ''}`,\n      body:\n        `${supplierName || 'Your supplier'} shipped their part of order ` +\n        `${orderLabel} on {site}.` +\n        (trackingNumber\n          ? ` Tracking: ${[carrier, trackingNumber].filter(Boolean).join(' ')}.`\n          : ' No tracking number was given.') +\n        (outstanding > 0\n          ? ` ${outstanding} line${outstanding === 1 ? ' is' : 's are'} still to ship.`\n          : ''),\n      link: `/${hostId}/products`,\n    })\n    // …and the buyer hears their parcel is on its way (AGL-3610).\n    await notifyOrderBuyer({ hostId, orderId }, 'shipped', { fulfillmentId: (outcome as any).fulfillmentId })\n    return res.status(200).json(outcome.body)\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'Update failed' })\n  }\n}\n"],"names":["CommerceModel","firebaseAdmin","notifyHostManagers","escapeHtml","createHmac","timingSafeEqual","tokenSigningSecret","notifyOrderBuyer","ORDER_FULFILLED_EVENT","fulfillmentEventView","stageOrderEvent","tokenMatches","stored","presented","expected","a","Buffer","from","b","length","Uint8Array","resolvePostingSupplier","hostId","orderId","order","secret","matched","supplierId","orderSupplierIds","update","digest","slice","supplierUpdateHandler","req","res","source","method","query","body","JSON","parse","String","token","trackingNumber","carrier","status","json","error","test","firestore","app","orderRef","collection","doc","setHeader","field","name","value","input","label","send","outcome","runTransaction","transaction","orderSnapshot","get","exists","liftLegacyOrder","data","suppliers","postingSupplier","myLines","supplierLineItemIds","lineItems","map","_line","index","coveredBefore","coveredLineItemIds","every","has","coveredAfter","Set","nextStatus","statusAfterFulfilling","canTransitionOrder","remainingByLine","Map","orderLineFulfillmentStates","state","lineItemId","remainingQuantity","shippedLines","quantity","filter","entry","fulfillment","id","Date","now","toString","lineItemIds","lines","trackingUrl","trackingUrlFor","atMs","remaining","shipped","fulfillments","updatedAtMs","timeline","appendOrderEvent","set","merge","key","extra","ok","orderStatus","fulfillmentId","outstanding","Number","orderLabel","formatOrderNumber","supplierName","then","snapshot","catch","trim","type","title","Boolean","join","link","console"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,YAAYA,mBAAmB,oBAAU;AACzC,SAASC,aAAa,EAAEC,kBAAkB,QAAQ,2BAA0B;AAC5E,SAASC,UAAU,QAAQ,0BAAsB;AACjD,SAASC,UAAU,EAAEC,eAAe,QAAQ,SAAQ;AACpD,SAASC,kBAAkB,QAAQ,gBAAY;AAC/C,SAASC,gBAAgB,QAAQ,2BAAuB;AACxD,SAASC,qBAAqB,QAAQ,2BAAuB;AAC7D,SAASC,oBAAoB,EAAEC,eAAe,QAAQ,oBAAgB;AAGtE;;;;;;;;;;;;CAYC,GACD,SAASC,aAAaC,MAAe,EAAEC,SAAiB;IACtD,MAAMC,WAAW,OAAOF,WAAW,WAAWA,SAAS;IACvD,IAAI,CAACE,YAAY,CAACD,WAAW,OAAO;IACpC,MAAME,IAAIC,OAAOC,IAAI,CAACJ;IACtB,MAAMK,IAAIF,OAAOC,IAAI,CAACH;IACtB,IAAIC,EAAEI,MAAM,KAAKD,EAAEC,MAAM,EAAE,OAAO;IAClC,OAAOd,gBAAgB,IAAIe,WAAWL,IAAI,IAAIK,WAAWF;AAC3D;AAEA;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GACD,SAASG,uBACPC,MAAc,EACdC,OAAe,EACfC,KAA8B,EAC9BX,SAAiB;IAEjB,IAAIY;IACJ,IAAI;QACFA,SAASnB;IACX,EAAE,eAAM;QACN,4EAA4E;QAC5E,0EAA0E;QAC1E,iDAAiD;QACjD,OAAO;IACT;IACA,IAAIoB,UAAyB;IAC7B,KAAK,MAAMC,cAAc3B,cAAc4B,gBAAgB,CAACJ,OAAQ;QAC9D,MAAMV,WAAWV,WAAW,UAAUqB,QACnCI,MAAM,CAAC,GAAGP,OAAO,CAAC,EAAEC,QAAQ,CAAC,EAAEI,YAAY,EAC3CG,MAAM,CAAC,OACPC,KAAK,CAAC,GAAG;QACZ,IAAIpB,aAAaG,UAAUD,YAAYa,UAAUC;IACnD;IACA,OAAOD;AACT;AAGA;;;;CAIC,GACD,OAAO,MAAMM,wBAA0C,OAAOC,KAAKC;QACyDD,WACpGE,gBACCA,iBACFA,eACSA,wBACPA;IALvB,MAAMA,SAASF,IAAIG,MAAM,KAAK,SAAS,aAAKH,IAAII,KAAK,EAAM,OAAOJ,IAAIK,IAAI,KAAK,WAAWC,KAAKC,KAAK,CAACP,IAAIK,IAAI,IAAI,SAASL,YAAAA,IAAIK,IAAI,YAARL,YAAY,CAAC,KAAQA,IAAII,KAAK;IACxJ,MAAMf,SAASmB,QAAON,iBAAAA,OAAOb,MAAM,YAAba,iBAAiB;IACvC,MAAMZ,UAAUkB,QAAON,kBAAAA,OAAOZ,OAAO,YAAdY,kBAAkB;IACzC,MAAMO,QAAQD,QAAON,gBAAAA,OAAOO,KAAK,YAAZP,gBAAgB;IACrC,MAAMQ,iBAAiBF,QAAON,yBAAAA,OAAOQ,cAAc,YAArBR,yBAAyB,IAAIJ,KAAK,CAAC,GAAG;IACpE,MAAMa,UAAUH,QAAON,kBAAAA,OAAOS,OAAO,YAAdT,kBAAkB,IAAIJ,KAAK,CAAC,GAAG;IACtD,IAAI,CAACT,UAAU,CAACC,WAAW,CAACmB,OAAO;QACjC,OAAOR,IAAIW,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAoC;IAC3E;IACA,2EAA2E;IAC3E,oEAAoE;IACpE,8EAA8E;IAC9E,kCAAkC;IAClC,IAAI,WAAWC,IAAI,CAAC1B,WAAW,WAAW0B,IAAI,CAACzB,UAAU;QACvD,OAAOW,IAAIW,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAoC;IAC3E;IAEA,IAAI;YAoNyB,oBASpB;QA5NP,MAAME,YAAYhD,cAAciD,GAAG,GAAGD,SAAS;QAC/C,MAAME,WAAWF,UACdG,UAAU,CAAC,SACXC,GAAG,CAAC/B,QACJ8B,UAAU,CAAC,UACXC,GAAG,CAAC9B;QACP,0EAA0E;QAC1E,qEAAqE;QACrE,wEAAwE;QACxE,0EAA0E;QAC1E,uEAAuE;QACvE,iEAAiE;QACjE,sEAAsE;QACtE,8DAA8D;QAC9D,IAAIU,IAAIG,MAAM,KAAK,OAAO;YACxBF,IAAIoB,SAAS,CAAC,gBAAgB;YAC9B,MAAMC,QAAQ,CAACC,MAAcC,QAC3B,CAAC,2BAA2B,EAAED,KAAK,SAAS,EAAErD,WAAWsD,OAAO,EAAE,CAAC;YACrE,8DAA8D;YAC9D,oEAAoE;YACpE,gEAAgE;YAChE,MAAMC,QAAQ,CAACF,MAAcG,OAAeF,QAC1C,CAAC,UAAU,EAAEE,MAAM,IAAI,CAAC,GACxB,CAAC,yBAAyB,EAAEH,KAAK,SAAS,EAAErD,WAAWsD,OAAO,cAAc,CAAC;YAC/E,OAAOvB,IAAIW,MAAM,CAAC,KAAKe,IAAI,CACzB,kCACE,qEACA,wCACA,yBACAL,MAAM,UAAUjC,UAChBiC,MAAM,WAAWhC,WACjBgC,MAAM,SAASb,SACfgB,MAAM,WAAW,WAAWd,WAC5Bc,MAAM,kBAAkB,mBAAmBf,kBAC3C,mDACA;QAEN;QAEA,uEAAuE;QACvE,0EAA0E;QAC1E,sEAAsE;QACtE,yEAAyE;QACzE,2EAA2E;QAC3E,sEAAsE;QACtE,2EAA2E;QAC3E,kEAAkE;QAClE,qEAAqE;QACrE,2DAA2D;QAC3D,MAAMkB,UAAU,MAAM5D,cACnBiD,GAAG,GACHD,SAAS,GACTa,cAAc,CAAC,OAAOC;gBAuHFvC,kBAKIA,qBAMdA,mBACMA;YAlIf,MAAMwC,gBAAgB,MAAMD,YAAYE,GAAG,CAACd;YAC5C,IAAI,CAACa,cAAcE,MAAM,EAAE;gBACzB,OAAO;oBAAErB,QAAQ;oBAAKP,MAAM;wBAAES,OAAO;oBAAgB;gBAAS;YAChE;YACA,MAAMvB,QAAQxB,cAAcmE,eAAe,CAACH,cAAcI,IAAI;YAC9D,sDAAsD;YACtD,EAAE;YACF,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,+DAA+D;YAC/D,+DAA+D;YAC/D,MAAMC,YAAYrE,cAAc4B,gBAAgB,CAACJ;YACjD,MAAM8C,kBAAkBjD,uBACtBC,QACAC,SACAC,OACAkB;YAEF,IAAI6B;YACJ,IAAID,iBAAiB;gBACnBC,UAAUvE,cAAcwE,mBAAmB,CAAChD,OAAO8C;YACrD,OAAO,IAAI3D,aAAaqD,cAAcC,GAAG,CAAC,kBAAkBvB,QAAQ;oBAwBvDlB;gBAvBX,oEAAoE;gBACpE,kEAAkE;gBAClE,8CAA8C;gBAC9C,EAAE;gBACF,sEAAsE;gBACtE,oEAAoE;gBACpE,iEAAiE;gBACjE,kEAAkE;gBAClE,kEAAkE;gBAClE,gEAAgE;gBAChE,qEAAqE;gBACrE,8CAA8C;gBAC9C,IAAI6C,UAAUlD,MAAM,GAAG,GAAG;oBACxB,OAAO;wBACL0B,QAAQ;wBACRP,MAAM;4BACJS,OACE,+DACA,gEACA;wBACJ;oBACF;gBACF;gBACAwB,UAAU,EAAC/C,oBAAAA,MAAMiD,SAAS,YAAfjD,oBAAmB,EAAE,EAAEkD,GAAG,CAAC,CAACC,OAAOC,QAAUA;YAC1D,OAAO;gBACL,OAAO;oBAAE/B,QAAQ;oBAAKP,MAAM;wBAAES,OAAO;oBAAgB;gBAAS;YAChE;YACA,IAAIwB,QAAQpD,MAAM,KAAK,GAAG;gBACxB,OAAO;oBACL0B,QAAQ;oBACRP,MAAM;wBAAES,OAAO;oBAAmC;gBACpD;YACF;YACA,MAAM8B,gBAAgB7E,cAAc8E,kBAAkB,CAACtD;YACvD,IAAI+C,QAAQQ,KAAK,CAAC,CAACH,QAAUC,cAAcG,GAAG,CAACJ,SAAS;gBACtD,sEAAsE;gBACtE,kEAAkE;gBAClE,kEAAkE;gBAClE,iDAAiD;gBACjD,OAAO;oBACL/B,QAAQ;oBACRP,MAAM;wBACJS,OACEsB,UAAUlD,MAAM,GAAG,IACf,wDACA,CAAC,iBAAiB,EAAEK,MAAMqB,MAAM,EAAE;oBAC1C;gBACF;YACF;YACA,MAAMoC,eAAe,IAAIC,IAAI;mBAAIL;mBAAkBN;aAAQ;YAC3D,wEAAwE;YACxE,sEAAsE;YACtE,MAAMY,aAAanF,cAAcoF,qBAAqB,CACpD5D,OACAyD;YAEF,wEAAwE;YACxE,uEAAuE;YACvE,qEAAqE;YACrE,uEAAuE;YACvE,4DAA4D;YAC5D,IACEE,eAAe3D,MAAMqB,MAAM,IAC3B,CAAC7C,cAAcqF,kBAAkB,CAAC7D,MAAMqB,MAAM,EAAEsC,aAChD;gBACA,OAAO;oBACLtC,QAAQ;oBACRP,MAAM;wBAAES,OAAO,CAAC,iBAAiB,EAAEvB,MAAMqB,MAAM,EAAE;oBAAC;gBACpD;YACF;YACA,+DAA+D;YAC/D,kEAAkE;YAClE,MAAMyC,kBAAkB,IAAIC,IAC1BvF,cAAcwF,0BAA0B,CAAChE,OAAOkD,GAAG,CAAC,CAACe,QAAU;oBAC7DA,MAAMC,UAAU;oBAChBD,MAAME,iBAAiB;iBACxB;YAEH,MAAMC,eAAerB,QAClBG,GAAG,CAAC,CAACE;oBAA0CU;uBAA/B;oBAAEI,YAAYd;oBAAOiB,QAAQ,GAAEP,uBAAAA,gBAAgBrB,GAAG,CAACW,kBAApBU,uBAA8B;gBAAE;eAC/EQ,MAAM,CAAC,CAACC,QAAUA,MAAMF,QAAQ,GAAG;YACtC,MAAMG,cAA8C;gBAClDC,IAAI,CAAC,SAAS,EAAEC,KAAKC,GAAG,GAAGC,QAAQ,CAAC,KAAK;gBACzCC,aAAaT,aAAalB,GAAG,CAAC,CAACqB,QAAUA,MAAML,UAAU;gBACzDY,OAAOV;eACHhD,WAAWD,iBACX,AAAC,CAAA;gBACC,MAAM4D,cAAcvG,cAAcwG,cAAc,CAAC5D,SAASD;gBAC1D,OAAO4D,cAAc;oBAAEA;gBAAY,IAAI,CAAC;YAC1C,CAAA,MACA,CAAC,GACD3D,UAAU;gBAAEA;YAAQ,IAAI,CAAC,GACzBD,iBAAiB;gBAAEA;YAAe,IAAI,CAAC;gBAC3C8D,MAAMP,KAAKC,GAAG;;YAEhB,MAAMO,YAAY,EAAClF,mBAAAA,MAAMiD,SAAS,YAAfjD,mBAAmB,EAAE,EAAEsE,MAAM,CAC9C,CAACnB,OAAOC,QAAU,CAACK,aAAaD,GAAG,CAACJ,QACpCzD,MAAM;YACR,MAAMwF,UAAU;gBACZ9D,QAAQsC;gBACRyB,cAAc;wBAAKpF,sBAAAA,MAAMoF,YAAY,YAAlBpF,sBAAsB,EAAE;oBAAGwE;iBAAY;gBAC1Da,aAAaX,KAAKC,GAAG;gBACrBW,UAAU9G,cAAc+G,gBAAgB,CACtCvF,OACA2D,YACA,CAAC,iBAAiB,EAAEZ,QAAQpD,MAAM,CAAC,IAAI,EACrC,EAACK,oBAAAA,MAAMiD,SAAS,YAAfjD,oBAAmB,EAAE,EAAEL,MAAM,CAC/B,KAAK,EAAE,EAACK,oBAAAA,MAAMiD,SAAS,YAAfjD,oBAAmB,EAAE,EAAEL,MAAM,KAAK,IAAI,KAAK,KAAK,GACtDwB,CAAAA,iBACG,CAAC,GAAG,EAAEC,WAAW,WAAW,CAAC,EAAED,gBAAgB,GAC/C,EAAC,IACJ+D,CAAAA,YAAY,IACT,CAAC,EAAE,EAAEA,UAAU,KAAK,EAAEA,cAAc,IAAI,KAAK,IAAI,eAAe,CAAC,GACjE,EAAC;YAEX;YACF3C,YAAYiD,GAAG,CAAC7D,UAAUwD,SAAS;gBAAEM,OAAO;YAAK;YACjDvG,gBAAgBqD,aAAavD,uBAAuB;gBAAEc;gBAAQC;gBAAS2F,KAAKlB,YAAYC,EAAE;gBAAEzE,OAAO,aAAKwC,cAAcI,IAAI,IAAOuC;gBAAWQ,OAAO;oBAAEnB,aAAavF,qBAAqBe,OAAOwE;gBAAa;YAAE;YAC7M,OAAO;gBACLnD,QAAQ;gBACRP,MAAM;oBAAE8E,IAAI;oBAAMf,aAAa9B;oBAAS8C,aAAalC;gBAAW;gBAChE3D;gBACA2D;gBACAuB;gBACA/E,YAAY2C;gBACZgD,eAAetB,YAAYC,EAAE;YAC/B;QACF;QACF,IAAIpC,QAAQhB,MAAM,KAAK,KAAK;YAC1B,OAAOX,IAAIW,MAAM,CAACgB,QAAQhB,MAAM,EAAEC,IAAI,CAACe,QAAQvB,IAAI;QACrD;QACA,uEAAuE;QACvE,2EAA2E;QAC3E,qEAAqE;QACrE,sEAAsE;QACtE,MAAMiF,cAAcC,QAAO,qBAAA,AAAC3D,QAAgB6C,SAAS,YAA1B,qBAA8B;QACzD,MAAMe,aAAazH,cAAc0H,iBAAiB,CAChD7D,QAAQrC,KAAK,EACbD;QAEF,mEAAmE;QACnE,MAAMI,aAAa,AAACkC,QAAgBlC,UAAU;QAC9C,MAAMgG,eAAehG,aACjBc,QACG,OAAA,MAAMQ,UACJG,UAAU,CAAC,SACXC,GAAG,CAAC/B,QACJ8B,UAAU,CAAC,aACXC,GAAG,CAAC1B,YACJsC,GAAG,GACH2D,IAAI,CAAC,CAACC,WAAaA,SAAS5D,GAAG,CAAC,SAChC6D,KAAK,CAAC,IAAM,eAPd,OAOsB,IACvBC,IAAI,KACN;QACJ,KAAK7H,mBAAmBoB,QAAQ;YAC9B0G,MAAM;YACNC,OAAO,CAAC,iBAAiB,EAAER,aAAaF,cAAc,IAAI,CAAC,GAAG,EAAEA,YAAY,KAAK,EAAEA,gBAAgB,IAAI,KAAK,IAAI,cAAc,CAAC,GAAG,IAAI;YACtIjF,MACE,GAAGqF,gBAAgB,gBAAgB,6BAA6B,CAAC,GACjE,GAAGF,WAAW,WAAW,CAAC,GACzB9E,CAAAA,iBACG,CAAC,WAAW,EAAE;gBAACC;gBAASD;aAAe,CAACmD,MAAM,CAACoC,SAASC,IAAI,CAAC,KAAK,CAAC,CAAC,GACpE,gCAA+B,IAClCZ,CAAAA,cAAc,IACX,CAAC,CAAC,EAAEA,YAAY,KAAK,EAAEA,gBAAgB,IAAI,QAAQ,QAAQ,eAAe,CAAC,GAC3E,EAAC;YACPa,MAAM,CAAC,CAAC,EAAE9G,OAAO,SAAS,CAAC;QAC7B;QACA,8DAA8D;QAC9D,MAAMf,iBAAiB;YAAEe;YAAQC;QAAQ,GAAG,WAAW;YAAE+F,eAAe,AAACzD,QAAgByD,aAAa;QAAC;QACvG,OAAOpF,IAAIW,MAAM,CAAC,KAAKC,IAAI,CAACe,QAAQvB,IAAI;IAC1C,EAAE,OAAOS,OAAO;QACdsF,QAAQtF,KAAK,CAACA;QACd,OAAOb,IAAIW,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAgB;IACvD;AACF,EAAC"}

package/src/lib/server/tax-engine-quote.d.ts

@@ -0,0 +1,47 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PluginTaxAddress, type PluginTaxEngineQuote } from '@aglyn/aglyn/plugin-manager/plugin-tax-profile';
+import { type OrderTaxEngineStamp } from '../model/commerce-tax-engine';
+export interface SaleTaxEngineRequest {
+    hostId: string;
+    settings: {
+        mode?: string;
+        pricesIncludeTax?: boolean;
+    } | null | undefined;
+    channel: 'online' | 'pos' | 'invoice';
+    currency?: string;
+    lines: ReadonlyArray<{
+        id: string;
+        productId?: string;
+        variantId?: string;
+        sku?: string;
+        description?: string;
+        quantity: number;
+        /** The line's charged amount, after any discount on it, exclusive of tax. */
+        amountCents: number;
+        exempt?: boolean;
+    }>;
+    discountCents?: number;
+    shippingCents?: number;
+    shipTo?: PluginTaxAddress | null;
+    customerEmail?: string | null;
+}
+export interface SaleTaxEngineResult {
+    quote: PluginTaxEngineQuote | null;
+    stamp: OrderTaxEngineStamp | null;
+}
+export declare function quoteSaleTaxWithEngine(request: SaleTaxEngineRequest): Promise<SaleTaxEngineResult>;

package/src/lib/server/tax-engine-quote.js

@@ -0,0 +1,105 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { pluginTaxEngine, quotePluginTaxEngine } from "@aglyn/aglyn/plugin-manager/plugin-tax-profile";
+import { storeTaxAllowsEngine } from "../model/commerce-tax-engine.js";
+/**
+ * Asks the site's outside tax service for a sale's tax (AGL-3631), through
+ * core's `core.tax-engine` contract — commerce never learns which plugin or
+ * vendor answers.
+ *
+ * `{ quote: null, stamp: null }` means no service was involved: the store is
+ * not on its own rates, no plugin offers an engine, or the site connected
+ * none. The caller prices the sale exactly as it did before.
+ *
+ * `{ quote: null, stamp: { status: 'fallback' } }` means a connected service
+ * was asked and did not answer in time or refused. The caller STILL prices
+ * the sale its usual way — a checkout that waited on a vendor or failed with
+ * it would lose the sale — and writes the stamp on the order so the merchant
+ * sees which sales were taxed at the store's own rates instead.
+ */ /** How long the status read may take; the quote holds core's own deadline. */ const STATUS_DEADLINE_MS = 2000;
+const NONE = {
+    quote: null,
+    stamp: null
+};
+async function withDeadline(promise, ms, fallback) {
+    let timer;
+    try {
+        return await Promise.race([
+            promise.catch(()=>fallback),
+            new Promise((resolve)=>{
+                timer = setTimeout(()=>resolve(fallback), ms);
+            })
+        ]);
+    } finally{
+        if (timer) clearTimeout(timer);
+    }
+}
+export async function quoteSaleTaxWithEngine(request) {
+    var _request_shipTo, _request_customerEmail;
+    if (!storeTaxAllowsEngine(request.settings)) return NONE;
+    const engine = pluginTaxEngine();
+    if (!engine || request.lines.length === 0) return NONE;
+    const status = await withDeadline(Promise.resolve().then(()=>engine.status(request.hostId)), STATUS_DEADLINE_MS, {
+        connected: false
+    });
+    if (!status.connected || !status.provider) return NONE;
+    const provider = status.provider;
+    const providerLabel = status.providerLabel || provider;
+    const sandbox = status.sandbox === true;
+    const outcome = await quotePluginTaxEngine(_extends({
+        hostId: request.hostId,
+        currency: request.currency || 'usd',
+        channel: request.channel,
+        lines: request.lines
+    }, request.discountCents ? {
+        discountCents: request.discountCents
+    } : {}, request.shippingCents ? {
+        shippingCents: request.shippingCents
+    } : {}, {
+        shipTo: (_request_shipTo = request.shipTo) != null ? _request_shipTo : null,
+        customer: {
+            email: (_request_customerEmail = request.customerEmail) != null ? _request_customerEmail : null
+        }
+    }));
+    if ('quote' in outcome) {
+        const quote = outcome.quote;
+        return {
+            quote,
+            stamp: {
+                provider: quote.provider || provider,
+                providerLabel: quote.providerLabel || providerLabel,
+                status: 'quoted',
+                reason: null,
+                sandbox: quote.sandbox
+            }
+        };
+    }
+    const failed = outcome;
+    console.warn(`[commerce] tax service ${provider} did not price a sale on ${request.hostId} (${failed.reason}): ${failed.message}`);
+    return {
+        quote: null,
+        stamp: {
+            provider,
+            providerLabel,
+            status: 'fallback',
+            reason: failed.reason,
+            sandbox
+        }
+    };
+}
+
+//# sourceMappingURL=tax-engine-quote.js.map

package/src/lib/server/tax-engine-quote.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/tax-engine-quote.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  pluginTaxEngine,\n  quotePluginTaxEngine,\n  type PluginTaxAddress,\n  type PluginTaxEngineQuote,\n} from '@aglyn/aglyn/plugin-manager/plugin-tax-profile'\nimport { storeTaxAllowsEngine, type OrderTaxEngineStamp } from '../model/commerce-tax-engine'\n\n/**\n * Asks the site's outside tax service for a sale's tax (AGL-3631), through\n * core's `core.tax-engine` contract — commerce never learns which plugin or\n * vendor answers.\n *\n * `{ quote: null, stamp: null }` means no service was involved: the store is\n * not on its own rates, no plugin offers an engine, or the site connected\n * none. The caller prices the sale exactly as it did before.\n *\n * `{ quote: null, stamp: { status: 'fallback' } }` means a connected service\n * was asked and did not answer in time or refused. The caller STILL prices\n * the sale its usual way — a checkout that waited on a vendor or failed with\n * it would lose the sale — and writes the stamp on the order so the merchant\n * sees which sales were taxed at the store's own rates instead.\n */\n\n/** How long the status read may take; the quote holds core's own deadline. */\nconst STATUS_DEADLINE_MS = 2_000\n\nexport interface SaleTaxEngineRequest {\n  hostId: string\n  settings: { mode?: string; pricesIncludeTax?: boolean } | null | undefined\n  channel: 'online' | 'pos' | 'invoice'\n  currency?: string\n  lines: ReadonlyArray<{\n    id: string\n    productId?: string\n    variantId?: string\n    sku?: string\n    description?: string\n    quantity: number\n    /** The line's charged amount, after any discount on it, exclusive of tax. */\n    amountCents: number\n    exempt?: boolean\n  }>\n  discountCents?: number\n  shippingCents?: number\n  shipTo?: PluginTaxAddress | null\n  customerEmail?: string | null\n}\n\nexport interface SaleTaxEngineResult {\n  quote: PluginTaxEngineQuote | null\n  stamp: OrderTaxEngineStamp | null\n}\n\nconst NONE: SaleTaxEngineResult = { quote: null, stamp: null }\n\nasync function withDeadline<T>(promise: Promise<T>, ms: number, fallback: T): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined\n  try {\n    return await Promise.race([\n      promise.catch(() => fallback),\n      new Promise<T>((resolve) => {\n        timer = setTimeout(() => resolve(fallback), ms)\n      }),\n    ])\n  } finally {\n    if (timer) clearTimeout(timer)\n  }\n}\n\nexport async function quoteSaleTaxWithEngine(\n  request: SaleTaxEngineRequest,\n): Promise<SaleTaxEngineResult> {\n  if (!storeTaxAllowsEngine(request.settings)) return NONE\n  const engine = pluginTaxEngine()\n  if (!engine || request.lines.length === 0) return NONE\n  const status = await withDeadline(\n    Promise.resolve().then(() => engine.status(request.hostId)),\n    STATUS_DEADLINE_MS,\n    { connected: false } as Awaited<ReturnType<typeof engine.status>>,\n  )\n  if (!status.connected || !status.provider) return NONE\n  const provider = status.provider\n  const providerLabel = status.providerLabel || provider\n  const sandbox = status.sandbox === true\n  const outcome = await quotePluginTaxEngine({\n    hostId: request.hostId,\n    currency: request.currency || 'usd',\n    channel: request.channel,\n    lines: request.lines,\n    ...(request.discountCents ? { discountCents: request.discountCents } : {}),\n    ...(request.shippingCents ? { shippingCents: request.shippingCents } : {}),\n    shipTo: request.shipTo ?? null,\n    customer: { email: request.customerEmail ?? null },\n  })\n  if ('quote' in outcome) {\n    const quote = outcome.quote\n    return {\n      quote,\n      stamp: {\n        provider: quote.provider || provider,\n        providerLabel: quote.providerLabel || providerLabel,\n        status: 'quoted',\n        reason: null,\n        sandbox: quote.sandbox,\n      },\n    }\n  }\n  const failed = outcome as Extract<typeof outcome, { ok: false }>\n  console.warn(\n    `[commerce] tax service ${provider} did not price a sale on ${request.hostId} (${failed.reason}): ${failed.message}`,\n  )\n  return {\n    quote: null,\n    stamp: { provider, providerLabel, status: 'fallback', reason: failed.reason, sandbox },\n  }\n}\n"],"names":["pluginTaxEngine","quotePluginTaxEngine","storeTaxAllowsEngine","STATUS_DEADLINE_MS","NONE","quote","stamp","withDeadline","promise","ms","fallback","timer","Promise","race","catch","resolve","setTimeout","clearTimeout","quoteSaleTaxWithEngine","request","settings","engine","lines","length","status","then","hostId","connected","provider","providerLabel","sandbox","outcome","currency","channel","discountCents","shippingCents","shipTo","customer","email","customerEmail","reason","failed","console","warn","message"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,eAAe,EACfC,oBAAoB,QAGf,iDAAgD;AACvD,SAASC,oBAAoB,QAAkC,kCAA8B;AAE7F;;;;;;;;;;;;;;CAcC,GAED,4EAA4E,GAC5E,MAAMC,qBAAqB;AA6B3B,MAAMC,OAA4B;IAAEC,OAAO;IAAMC,OAAO;AAAK;AAE7D,eAAeC,aAAgBC,OAAmB,EAAEC,EAAU,EAAEC,QAAW;IACzE,IAAIC;IACJ,IAAI;QACF,OAAO,MAAMC,QAAQC,IAAI,CAAC;YACxBL,QAAQM,KAAK,CAAC,IAAMJ;YACpB,IAAIE,QAAW,CAACG;gBACdJ,QAAQK,WAAW,IAAMD,QAAQL,WAAWD;YAC9C;SACD;IACH,SAAU;QACR,IAAIE,OAAOM,aAAaN;IAC1B;AACF;AAEA,OAAO,eAAeO,uBACpBC,OAA6B;QAqBnBA,iBACWA;IApBrB,IAAI,CAACjB,qBAAqBiB,QAAQC,QAAQ,GAAG,OAAOhB;IACpD,MAAMiB,SAASrB;IACf,IAAI,CAACqB,UAAUF,QAAQG,KAAK,CAACC,MAAM,KAAK,GAAG,OAAOnB;IAClD,MAAMoB,SAAS,MAAMjB,aACnBK,QAAQG,OAAO,GAAGU,IAAI,CAAC,IAAMJ,OAAOG,MAAM,CAACL,QAAQO,MAAM,IACzDvB,oBACA;QAAEwB,WAAW;IAAM;IAErB,IAAI,CAACH,OAAOG,SAAS,IAAI,CAACH,OAAOI,QAAQ,EAAE,OAAOxB;IAClD,MAAMwB,WAAWJ,OAAOI,QAAQ;IAChC,MAAMC,gBAAgBL,OAAOK,aAAa,IAAID;IAC9C,MAAME,UAAUN,OAAOM,OAAO,KAAK;IACnC,MAAMC,UAAU,MAAM9B,qBAAqB;QACzCyB,QAAQP,QAAQO,MAAM;QACtBM,UAAUb,QAAQa,QAAQ,IAAI;QAC9BC,SAASd,QAAQc,OAAO;QACxBX,OAAOH,QAAQG,KAAK;OAChBH,QAAQe,aAAa,GAAG;QAAEA,eAAef,QAAQe,aAAa;IAAC,IAAI,CAAC,GACpEf,QAAQgB,aAAa,GAAG;QAAEA,eAAehB,QAAQgB,aAAa;IAAC,IAAI,CAAC;QACxEC,MAAM,GAAEjB,kBAAAA,QAAQiB,MAAM,YAAdjB,kBAAkB;QAC1BkB,UAAU;YAAEC,KAAK,GAAEnB,yBAAAA,QAAQoB,aAAa,YAArBpB,yBAAyB;QAAK;;IAEnD,IAAI,WAAWY,SAAS;QACtB,MAAM1B,QAAQ0B,QAAQ1B,KAAK;QAC3B,OAAO;YACLA;YACAC,OAAO;gBACLsB,UAAUvB,MAAMuB,QAAQ,IAAIA;gBAC5BC,eAAexB,MAAMwB,aAAa,IAAIA;gBACtCL,QAAQ;gBACRgB,QAAQ;gBACRV,SAASzB,MAAMyB,OAAO;YACxB;QACF;IACF;IACA,MAAMW,SAASV;IACfW,QAAQC,IAAI,CACV,CAAC,uBAAuB,EAAEf,SAAS,yBAAyB,EAAET,QAAQO,MAAM,CAAC,EAAE,EAAEe,OAAOD,MAAM,CAAC,GAAG,EAAEC,OAAOG,OAAO,EAAE;IAEtH,OAAO;QACLvC,OAAO;QACPC,OAAO;YAAEsB;YAAUC;YAAeL,QAAQ;YAAYgB,QAAQC,OAAOD,MAAM;YAAEV;QAAQ;IACvF;AACF"}