@aglyn/plugins-commerce 1.0.0-beta.230 → 1.0.0-beta.232

package/src/lib/printing/render-star.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/printing/render-star.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { toPrintable, type PrintDocument } from './print-document'\n\n/**\n * Star command bytes for a {@link PrintDocument} (AGL-3619), served to a\n * CloudPRNT printer as `application/vnd.star.starprntcore`: the subset of\n * StarPRNT that both Star Line Mode and StarPRNT emulation execute, so one\n * job prints on an mC-Print3, a TSP143IV and a legacy TSP650II alike.\n *\n * Every command used here is in that common subset:\n *\n * | bytes                 | command                                   |\n * | --------------------- | ----------------------------------------- |\n * | `1B 40`               | initialize                                |\n * | `1B 1D 61 n`          | alignment (0 left, 1 center, 2 right)     |\n * | `1B 45` / `1B 46`     | emphasis on / off                         |\n * | `1B 69 h w`           | character expansion (0 = normal, 1 = 2x)  |\n * | `1B 62 06 02 02 h d… 1E` | Code128, text below, 3-dot module, `h` dots tall |\n * | `1B 1C 70 n 00`       | print NV logo `n`                         |\n * | `07`                  | drive external device 1 (the cash drawer) |\n * | `1B 64 03`            | feed to the cutter and partial cut        |\n * | `0A`                  | line feed                                 |\n */\nexport const STAR_MEDIA_TYPE = 'application/vnd.star.starprntcore'\n\nconst ESC = 0x1b\nconst GS = 0x1d\nconst LF = 0x0a\n\n/** The drawer kick on its own, the bytes a \"paid out\" job sends: BEL drives drawer 1. */\nexport const STAR_DRAWER_KICK = [0x07] as const\n\nconst BARCODE_HEIGHT_DOTS = 80\n\nfunction ascii(text: string): number[] {\n  return Array.from(toPrintable(text), (char) => char.charCodeAt(0))\n}\n\n/** Star's NV logo number, 1-255; anything else prints no logo. */\nexport function starLogoNumber(logoKey: string | undefined): number | null {\n  const value = Number(String(logoKey ?? '').trim())\n  return Number.isInteger(value) && value >= 1 && value <= 255 ? value : null\n}\n\nexport function renderStar(document: PrintDocument, options: { logoKey?: string } = {}): Uint8Array {\n  const bytes: number[] = [ESC, 0x40]\n  const logo = starLogoNumber(options.logoKey)\n  let align = 0\n  const setAlign = (next: number) => {\n    if (next === align) return\n    bytes.push(ESC, GS, 0x61, next)\n    align = next\n  }\n  for (const op of document.ops) {\n    switch (op.op) {\n      case 'text': {\n        setAlign(op.align === 'center' ? 1 : op.align === 'right' ? 2 : 0)\n        const expand = op.size === 2 ? 1 : 0\n        if (expand) bytes.push(ESC, 0x69, expand, expand)\n        if (op.bold) bytes.push(ESC, 0x45)\n        bytes.push(...ascii(op.text), LF)\n        if (op.bold) bytes.push(ESC, 0x46)\n        if (expand) bytes.push(ESC, 0x69, 0, 0)\n        break\n      }\n      case 'feed':\n        for (let index = 0; index < Math.max(0, Math.min(10, op.lines)); index += 1) bytes.push(LF)\n        break\n      case 'barcode':\n        setAlign(1)\n        bytes.push(ESC, 0x62, 0x06, 0x02, 0x02, BARCODE_HEIGHT_DOTS, ...ascii(op.data), 0x1e, LF)\n        break\n      case 'logo':\n        if (logo !== null) {\n          setAlign(1)\n          bytes.push(ESC, 0x1c, 0x70, logo, 0x00)\n        }\n        break\n      case 'drawer':\n        bytes.push(...STAR_DRAWER_KICK)\n        break\n      case 'cut':\n        bytes.push(ESC, 0x64, 0x03)\n        break\n    }\n  }\n  return Uint8Array.from(bytes)\n}\n"],"names":["toPrintable","STAR_MEDIA_TYPE","ESC","GS","LF","STAR_DRAWER_KICK","BARCODE_HEIGHT_DOTS","ascii","text","Array","from","char","charCodeAt","starLogoNumber","logoKey","value","Number","String","trim","isInteger","renderStar","document","options","bytes","logo","align","setAlign","next","push","op","ops","expand","size","bold","index","Math","max","min","lines","data","Uint8Array"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,WAAW,QAA4B,sBAAkB;AAElE;;;;;;;;;;;;;;;;;;;CAmBC,GACD,OAAO,MAAMC,kBAAkB,oCAAmC;AAElE,MAAMC,MAAM;AACZ,MAAMC,KAAK;AACX,MAAMC,KAAK;AAEX,uFAAuF,GACvF,OAAO,MAAMC,mBAAmB;IAAC;CAAK,CAAS;AAE/C,MAAMC,sBAAsB;AAE5B,SAASC,MAAMC,IAAY;IACzB,OAAOC,MAAMC,IAAI,CAACV,YAAYQ,OAAO,CAACG,OAASA,KAAKC,UAAU,CAAC;AACjE;AAEA,gEAAgE,GAChE,OAAO,SAASC,eAAeC,OAA2B;IACxD,MAAMC,QAAQC,OAAOC,OAAOH,kBAAAA,UAAW,IAAII,IAAI;IAC/C,OAAOF,OAAOG,SAAS,CAACJ,UAAUA,SAAS,KAAKA,SAAS,MAAMA,QAAQ;AACzE;AAEA,OAAO,SAASK,WAAWC,QAAuB,EAAEC,UAAgC,CAAC,CAAC;IACpF,MAAMC,QAAkB;QAACrB;QAAK;KAAK;IACnC,MAAMsB,OAAOX,eAAeS,QAAQR,OAAO;IAC3C,IAAIW,QAAQ;IACZ,MAAMC,WAAW,CAACC;QAChB,IAAIA,SAASF,OAAO;QACpBF,MAAMK,IAAI,CAAC1B,KAAKC,IAAI,MAAMwB;QAC1BF,QAAQE;IACV;IACA,KAAK,MAAME,MAAMR,SAASS,GAAG,CAAE;QAC7B,OAAQD,GAAGA,EAAE;YACX,KAAK;gBAAQ;oBACXH,SAASG,GAAGJ,KAAK,KAAK,WAAW,IAAII,GAAGJ,KAAK,KAAK,UAAU,IAAI;oBAChE,MAAMM,SAASF,GAAGG,IAAI,KAAK,IAAI,IAAI;oBACnC,IAAID,QAAQR,MAAMK,IAAI,CAAC1B,KAAK,MAAM6B,QAAQA;oBAC1C,IAAIF,GAAGI,IAAI,EAAEV,MAAMK,IAAI,CAAC1B,KAAK;oBAC7BqB,MAAMK,IAAI,IAAIrB,MAAMsB,GAAGrB,IAAI,GAAGJ;oBAC9B,IAAIyB,GAAGI,IAAI,EAAEV,MAAMK,IAAI,CAAC1B,KAAK;oBAC7B,IAAI6B,QAAQR,MAAMK,IAAI,CAAC1B,KAAK,MAAM,GAAG;oBACrC;gBACF;YACA,KAAK;gBACH,IAAK,IAAIgC,QAAQ,GAAGA,QAAQC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,GAAG,CAAC,IAAIR,GAAGS,KAAK,IAAIJ,SAAS,EAAGX,MAAMK,IAAI,CAACxB;gBACxF;YACF,KAAK;gBACHsB,SAAS;gBACTH,MAAMK,IAAI,CAAC1B,KAAK,MAAM,MAAM,MAAM,MAAMI,wBAAwBC,MAAMsB,GAAGU,IAAI,GAAG,MAAMnC;gBACtF;YACF,KAAK;gBACH,IAAIoB,SAAS,MAAM;oBACjBE,SAAS;oBACTH,MAAMK,IAAI,CAAC1B,KAAK,MAAM,MAAMsB,MAAM;gBACpC;gBACA;YACF,KAAK;gBACHD,MAAMK,IAAI,IAAIvB;gBACd;YACF,KAAK;gBACHkB,MAAMK,IAAI,CAAC1B,KAAK,MAAM;gBACtB;QACJ;IACF;IACA,OAAOsC,WAAW9B,IAAI,CAACa;AACzB"}

package/src/lib/printing/render-text.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PrintDocument } from './print-document';
+/**
+ * A {@link PrintDocument} as plain text (AGL-3619): the `text/plain` fallback
+ * a CloudPRNT printer may choose, and what a spec snapshots to read a layout
+ * at a glance. Size and emphasis do not exist in plain text; alignment is
+ * padding; a barcode prints its data between brackets; a drawer kick and a
+ * cut print nothing.
+ */
+export declare function renderText(layout: PrintDocument): string;

package/src/lib/printing/render-text.js

@@ -0,0 +1,53 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { toPrintable } from "./print-document.js";
+/**
+ * A {@link PrintDocument} as plain text (AGL-3619): the `text/plain` fallback
+ * a CloudPRNT printer may choose, and what a spec snapshots to read a layout
+ * at a glance. Size and emphasis do not exist in plain text; alignment is
+ * padding; a barcode prints its data between brackets; a drawer kick and a
+ * cut print nothing.
+ */ export function renderText(layout) {
+    const { columns } = layout;
+    const lines = [];
+    for (const op of layout.ops){
+        switch(op.op){
+            case 'text':
+                {
+                    const text = toPrintable(op.text).slice(0, columns);
+                    const gap = columns - text.length;
+                    if (op.align === 'center') lines.push(`${' '.repeat(Math.floor(gap / 2))}${text}`.trimEnd());
+                    else if (op.align === 'right') lines.push(`${' '.repeat(gap)}${text}`);
+                    else lines.push(text);
+                    break;
+                }
+            case 'feed':
+                for(let index = 0; index < op.lines; index += 1)lines.push('');
+                break;
+            case 'barcode':
+                {
+                    const text = `[${toPrintable(op.data)}]`;
+                    lines.push(`${' '.repeat(Math.max(0, Math.floor((columns - text.length) / 2)))}${text}`);
+                    break;
+                }
+            default:
+                break;
+        }
+    }
+    return `${lines.join('\n')}\n`;
+}
+
+//# sourceMappingURL=render-text.js.map

package/src/lib/printing/render-text.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/printing/render-text.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { toPrintable, type PrintDocument } from './print-document'\n\n/**\n * A {@link PrintDocument} as plain text (AGL-3619): the `text/plain` fallback\n * a CloudPRNT printer may choose, and what a spec snapshots to read a layout\n * at a glance. Size and emphasis do not exist in plain text; alignment is\n * padding; a barcode prints its data between brackets; a drawer kick and a\n * cut print nothing.\n */\nexport function renderText(layout: PrintDocument): string {\n  const { columns } = layout\n  const lines: string[] = []\n  for (const op of layout.ops) {\n    switch (op.op) {\n      case 'text': {\n        const text = toPrintable(op.text).slice(0, columns)\n        const gap = columns - text.length\n        if (op.align === 'center') lines.push(`${' '.repeat(Math.floor(gap / 2))}${text}`.trimEnd())\n        else if (op.align === 'right') lines.push(`${' '.repeat(gap)}${text}`)\n        else lines.push(text)\n        break\n      }\n      case 'feed':\n        for (let index = 0; index < op.lines; index += 1) lines.push('')\n        break\n      case 'barcode': {\n        const text = `[${toPrintable(op.data)}]`\n        lines.push(`${' '.repeat(Math.max(0, Math.floor((columns - text.length) / 2)))}${text}`)\n        break\n      }\n      default:\n        break\n    }\n  }\n  return `${lines.join('\\n')}\\n`\n}\n"],"names":["toPrintable","renderText","layout","columns","lines","op","ops","text","slice","gap","length","align","push","repeat","Math","floor","trimEnd","index","data","max","join"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,WAAW,QAA4B,sBAAkB;AAElE;;;;;;CAMC,GACD,OAAO,SAASC,WAAWC,MAAqB;IAC9C,MAAM,EAAEC,OAAO,EAAE,GAAGD;IACpB,MAAME,QAAkB,EAAE;IAC1B,KAAK,MAAMC,MAAMH,OAAOI,GAAG,CAAE;QAC3B,OAAQD,GAAGA,EAAE;YACX,KAAK;gBAAQ;oBACX,MAAME,OAAOP,YAAYK,GAAGE,IAAI,EAAEC,KAAK,CAAC,GAAGL;oBAC3C,MAAMM,MAAMN,UAAUI,KAAKG,MAAM;oBACjC,IAAIL,GAAGM,KAAK,KAAK,UAAUP,MAAMQ,IAAI,CAAC,GAAG,IAAIC,MAAM,CAACC,KAAKC,KAAK,CAACN,MAAM,MAAMF,MAAM,CAACS,OAAO;yBACpF,IAAIX,GAAGM,KAAK,KAAK,SAASP,MAAMQ,IAAI,CAAC,GAAG,IAAIC,MAAM,CAACJ,OAAOF,MAAM;yBAChEH,MAAMQ,IAAI,CAACL;oBAChB;gBACF;YACA,KAAK;gBACH,IAAK,IAAIU,QAAQ,GAAGA,QAAQZ,GAAGD,KAAK,EAAEa,SAAS,EAAGb,MAAMQ,IAAI,CAAC;gBAC7D;YACF,KAAK;gBAAW;oBACd,MAAML,OAAO,CAAC,CAAC,EAAEP,YAAYK,GAAGa,IAAI,EAAE,CAAC,CAAC;oBACxCd,MAAMQ,IAAI,CAAC,GAAG,IAAIC,MAAM,CAACC,KAAKK,GAAG,CAAC,GAAGL,KAAKC,KAAK,CAAC,AAACZ,CAAAA,UAAUI,KAAKG,MAAM,AAAD,IAAK,OAAOH,MAAM;oBACvF;gBACF;YACA;gBACE;QACJ;IACF;IACA,OAAO,GAAGH,MAAMgB,IAAI,CAAC,MAAM,EAAE,CAAC;AAChC"}

package/src/lib/server/api-v1/openapi.js

@@ -109,7 +109,10 @@ export const ORDERS_API_V1_DESCRIPTION = {
     writable: [
         'status',
         'carrier',
-        'trackingNumber'
+        'trackingNumber',
+        'trackingUrl',
+        'lineItems',
+        'notify'
     ],
     writeOnly: {
         status: {
@@ -120,8 +123,18 @@ export const ORDERS_API_V1_DESCRIPTION = {
             ],
             description: 'The status to move the order to.'
         },
-        carrier: str('Free text, e.g. `UPS`. Trimmed to 40 characters.'),
-        trackingNumber: str('Free text. Trimmed to 60 characters.')
+        carrier: str('Free text, e.g. `UPS`. Trimmed to 40 characters. USPS, UPS, FedEx, DHL, Canada Post, Royal Mail and Australia Post get a tracking link.'),
+        trackingNumber: str('Free text. Trimmed to 60 characters.'),
+        trackingUrl: str('An https tracking link, for a carrier the link is not derived for.'),
+        lineItems: {
+            type: 'array',
+            description: 'With `status: fulfilled`, the units this shipment covers: `[{ lineItemId, quantity }]`, where `lineItemId` is the line’s index. Omitted, the shipment covers everything still to ship. More than is left is `409 conflict` (`code: "over_fulfilled"`). Send an `Idempotency-Key` header so a retried partial shipment is recorded once.',
+            items: {
+                type: 'object',
+                additionalProperties: true
+            }
+        },
+        notify: bool('Whether the buyer is told about this shipment. Defaults to true.')
     },
     writeRequired: [
         'status'
@@ -143,9 +156,19 @@ export const ORDERS_API_V1_DESCRIPTION = {
                 additionalProperties: true
             }
         },
-        totals: objectOf('Money totals, in the smallest unit of `currency`.'),
+        totals: objectOf('Money totals, in the smallest unit of `currency`. `extrasCents` is the optional lines the buyer added at checkout, inside `totalCents` and outside `itemsCents`.'),
+        extras: {
+            type: 'array',
+            description: 'Optional lines the buyer added at checkout, such as package protection: `[{ id, pluginId, key, label, amountCents, quoteRef }]`. Empty when there were none.',
+            items: {
+                type: 'object',
+                additionalProperties: true
+            }
+        },
         refundedCents: int('Amount refunded so far.'),
         disputed: bool('Whether a chargeback is open.'),
+        taxMode: nullable(str('The tax regime: `stripe-automatic` (Stripe Tax, collected and remitted by the platform as marketplace facilitator), `manual` (your own rate) or `none`. `null` on an order from before it was recorded.')),
+        taxEngine: nullable(objectOf('The tax service you connected, when one was asked for this sale’s tax: `provider` (`avalara` or `taxjar`), `providerLabel`, `status` (`quoted` when its tax was charged, `fallback` when it did not answer and your own rate was charged), `reason` (`timeout` or `error` on a fallback) and `sandbox`. `null` when no service was asked.')),
         shippingAddress: ADDRESS(),
         couponCode: nullable(str('Coupon applied.')),
         fulfillments: {

package/src/lib/server/api-v1/openapi.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../../libs/plugins/commerce/src/lib/server/api-v1/openapi.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  type ApiV1ResourceDescription,\n  booleanField as bool,\n  integerField as int,\n  nullableField as nullable,\n  objectKindField as OBJECT_FIELD,\n  openObjectField as objectOf,\n  postalAddressField as ADDRESS,\n  queryParam as q,\n  RECORD_STAMPS as STAMPS,\n  stringField as str,\n  stringListField as strList,\n} from '@aglyn/tenant-data-admin/server/api-v1-description'\n\n/**\n * A site's products and orders as the customer API's OpenAPI document\n * describes them — what the console's builder turns into paths, tags and\n * schemas, and the MCP tools derive from. Transcribed unchanged from the\n * builder's own list when the resources moved here (AGL-3080);\n * `api-v1-openapi.spec.ts` holds the document to every endpoint the\n * documentation promises.\n */\nexport const PRODUCTS_API_V1_DESCRIPTION: ApiV1ResourceDescription = {\n  tag: 'Products',\n  description: 'A site’s catalog. Read-only over the API.',\n  schemaName: 'Product',\n  required: ['id', 'object', 'name'],\n  fields: {\n    id: str('Product id.'),\n    object: OBJECT_FIELD('product'),\n    name: str('Product name.'),\n    slug: str('URL slug.'),\n    description: nullable(str('Description.')),\n    type: str('Product type.'),\n    status: str('Publication status.'),\n    tags: strList('Free-form tags.'),\n    categoryIds: strList('Categories this product belongs to.'),\n    mediaUrls: strList('Image URLs.'),\n    options: { type: 'array', description: 'Option definitions, e.g. size.', items: { type: 'object', additionalProperties: true } },\n    variants: { type: 'array', description: 'Purchasable variants.', items: { type: 'object', additionalProperties: true } },\n    inventory: nullable(int('Stock on hand, when tracked.')),\n    subscription: nullable(objectOf('Subscription terms, when the product is one.')),\n    ...STAMPS,\n  },\n  ops: [\n    { path: '/v1/sites/{siteId}/products', method: 'get', operationId: 'listProducts', summary: 'List products', list: true, returns: 'Product', description: 'Rows deleted since they were written are dropped after the read, so pages can come back short.', pathParams: [{ name: 'siteId', description: 'Site id.' }] },\n    { path: '/v1/sites/{siteId}/products/{productId}', method: 'get', operationId: 'getProduct', summary: 'Retrieve a product', returns: 'Product', pathParams: [{ name: 'siteId', description: 'Site id.' }, { name: 'productId', description: 'Product id.' }] },\n  ],\n}\n\nexport const ORDERS_API_V1_DESCRIPTION: ApiV1ResourceDescription = {\n  tag: 'Orders',\n  description: 'A site’s orders. Status moves are constrained.',\n  schemaName: 'Order',\n  required: ['id', 'object', 'number', 'status'],\n  writable: ['status', 'carrier', 'trackingNumber'],\n  writeOnly: {\n    status: { type: 'string', enum: ['fulfilled', 'delivered'], description: 'The status to move the order to.' },\n    carrier: str('Free text, e.g. `UPS`. Trimmed to 40 characters.'),\n    trackingNumber: str('Free text. Trimmed to 60 characters.'),\n  },\n  writeRequired: ['status'],\n  fields: {\n    id: str('Order id.'),\n    object: OBJECT_FIELD('order'),\n    number: int('Human-facing order number.'),\n    status: str('Order status.'),\n    channel: str('`online` by default. Older orders carry no stored value, so `?channel=online` drops them after the read.'),\n    currency: str('ISO 4217 code.'),\n    customerEmail: nullable(str('Customer email.')),\n    customerName: nullable(str('Customer name.')),\n    lineItems: { type: 'array', description: 'What was bought.', items: { type: 'object', additionalProperties: true } },\n    totals: objectOf('Money totals, in the smallest unit of `currency`.'),\n    refundedCents: int('Amount refunded so far.'),\n    disputed: bool('Whether a chargeback is open.'),\n    shippingAddress: ADDRESS(),\n    couponCode: nullable(str('Coupon applied.')),\n    fulfillments: { type: 'array', description: 'Shipments and deliveries.', items: { type: 'object', additionalProperties: true } },\n    created: STAMPS.created,\n  },\n  ops: [\n    { path: '/v1/sites/{siteId}/orders', method: 'get', operationId: 'listOrders', summary: 'List orders', list: true, returns: 'Order', filters: [q('channel', '`online` is a default rather than a stored value, so filtering on it drops older orders after the read.'), q('status', 'Order status.')], pathParams: [{ name: 'siteId', description: 'Site id.' }] },\n    { path: '/v1/sites/{siteId}/orders/{orderId}', method: 'get', operationId: 'getOrder', summary: 'Retrieve an order', returns: 'Order', pathParams: [{ name: 'siteId', description: 'Site id.' }, { name: 'orderId', description: 'Order id.' }] },\n    { path: '/v1/sites/{siteId}/orders/{orderId}', method: 'patch', operationId: 'updateOrder', summary: 'Move an order’s status', accepts: 'OrderWrite', returns: 'Order', description: 'An illegal transition is `409 conflict` (`code: \"order_transition\"`), and the message names the status it is in.', pathParams: [{ name: 'siteId', description: 'Site id.' }, { name: 'orderId', description: 'Order id.' }] },\n  ],\n}\n"],"names":["booleanField","bool","integerField","int","nullableField","nullable","objectKindField","OBJECT_FIELD","openObjectField","objectOf","postalAddressField","ADDRESS","queryParam","q","RECORD_STAMPS","STAMPS","stringField","str","stringListField","strList","PRODUCTS_API_V1_DESCRIPTION","tag","description","schemaName","required","fields","id","object","name","slug","type","status","tags","categoryIds","mediaUrls","options","items","additionalProperties","variants","inventory","subscription","ops","path","method","operationId","summary","list","returns","pathParams","ORDERS_API_V1_DESCRIPTION","writable","writeOnly","enum","carrier","trackingNumber","writeRequired","number","channel","currency","customerEmail","customerName","lineItems","totals","refundedCents","disputed","shippingAddress","couponCode","fulfillments","created","filters","accepts"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAEEA,gBAAgBC,IAAI,EACpBC,gBAAgBC,GAAG,EACnBC,iBAAiBC,QAAQ,EACzBC,mBAAmBC,YAAY,EAC/BC,mBAAmBC,QAAQ,EAC3BC,sBAAsBC,OAAO,EAC7BC,cAAcC,CAAC,EACfC,iBAAiBC,MAAM,EACvBC,eAAeC,GAAG,EAClBC,mBAAmBC,OAAO,QACrB,qDAAoD;AAE3D;;;;;;;CAOC,GACD,OAAO,MAAMC,8BAAwD;IACnEC,KAAK;IACLC,aAAa;IACbC,YAAY;IACZC,UAAU;QAAC;QAAM;QAAU;KAAO;IAClCC,QAAQ;QACNC,IAAIT,IAAI;QACRU,QAAQpB,aAAa;QACrBqB,MAAMX,IAAI;QACVY,MAAMZ,IAAI;QACVK,aAAajB,SAASY,IAAI;QAC1Ba,MAAMb,IAAI;QACVc,QAAQd,IAAI;QACZe,MAAMb,QAAQ;QACdc,aAAad,QAAQ;QACrBe,WAAWf,QAAQ;QACnBgB,SAAS;YAAEL,MAAM;YAASR,aAAa;YAAkCc,OAAO;gBAAEN,MAAM;gBAAUO,sBAAsB;YAAK;QAAE;QAC/HC,UAAU;YAAER,MAAM;YAASR,aAAa;YAAyBc,OAAO;gBAAEN,MAAM;gBAAUO,sBAAsB;YAAK;QAAE;QACvHE,WAAWlC,SAASF,IAAI;QACxBqC,cAAcnC,SAASI,SAAS;OAC7BM;IAEL0B,KAAK;QACH;YAAEC,MAAM;YAA+BC,QAAQ;YAAOC,aAAa;YAAgBC,SAAS;YAAiBC,MAAM;YAAMC,SAAS;YAAWzB,aAAa;YAAkG0B,YAAY;gBAAC;oBAAEpB,MAAM;oBAAUN,aAAa;gBAAW;aAAE;QAAC;QACtT;YAAEoB,MAAM;YAA2CC,QAAQ;YAAOC,aAAa;YAAcC,SAAS;YAAsBE,SAAS;YAAWC,YAAY;gBAAC;oBAAEpB,MAAM;oBAAUN,aAAa;gBAAW;gBAAG;oBAAEM,MAAM;oBAAaN,aAAa;gBAAc;aAAE;QAAC;KAC9P;AACH,EAAC;AAED,OAAO,MAAM2B,4BAAsD;IACjE5B,KAAK;IACLC,aAAa;IACbC,YAAY;IACZC,UAAU;QAAC;QAAM;QAAU;QAAU;KAAS;IAC9C0B,UAAU;QAAC;QAAU;QAAW;KAAiB;IACjDC,WAAW;QACTpB,QAAQ;YAAED,MAAM;YAAUsB,MAAM;gBAAC;gBAAa;aAAY;YAAE9B,aAAa;QAAmC;QAC5G+B,SAASpC,IAAI;QACbqC,gBAAgBrC,IAAI;IACtB;IACAsC,eAAe;QAAC;KAAS;IACzB9B,QAAQ;QACNC,IAAIT,IAAI;QACRU,QAAQpB,aAAa;QACrBiD,QAAQrD,IAAI;QACZ4B,QAAQd,IAAI;QACZwC,SAASxC,IAAI;QACbyC,UAAUzC,IAAI;QACd0C,eAAetD,SAASY,IAAI;QAC5B2C,cAAcvD,SAASY,IAAI;QAC3B4C,WAAW;YAAE/B,MAAM;YAASR,aAAa;YAAoBc,OAAO;gBAAEN,MAAM;gBAAUO,sBAAsB;YAAK;QAAE;QACnHyB,QAAQrD,SAAS;QACjBsD,eAAe5D,IAAI;QACnB6D,UAAU/D,KAAK;QACfgE,iBAAiBtD;QACjBuD,YAAY7D,SAASY,IAAI;QACzBkD,cAAc;YAAErC,MAAM;YAASR,aAAa;YAA6Bc,OAAO;gBAAEN,MAAM;gBAAUO,sBAAsB;YAAK;QAAE;QAC/H+B,SAASrD,OAAOqD,OAAO;IACzB;IACA3B,KAAK;QACH;YAAEC,MAAM;YAA6BC,QAAQ;YAAOC,aAAa;YAAcC,SAAS;YAAeC,MAAM;YAAMC,SAAS;YAASsB,SAAS;gBAACxD,EAAE,WAAW;gBAA4GA,EAAE,UAAU;aAAiB;YAAEmC,YAAY;gBAAC;oBAAEpB,MAAM;oBAAUN,aAAa;gBAAW;aAAE;QAAC;QACjW;YAAEoB,MAAM;YAAuCC,QAAQ;YAAOC,aAAa;YAAYC,SAAS;YAAqBE,SAAS;YAASC,YAAY;gBAAC;oBAAEpB,MAAM;oBAAUN,aAAa;gBAAW;gBAAG;oBAAEM,MAAM;oBAAWN,aAAa;gBAAY;aAAE;QAAC;QAChP;YAAEoB,MAAM;YAAuCC,QAAQ;YAASC,aAAa;YAAeC,SAAS;YAA0ByB,SAAS;YAAcvB,SAAS;YAASzB,aAAa;YAAoH0B,YAAY;gBAAC;oBAAEpB,MAAM;oBAAUN,aAAa;gBAAW;gBAAG;oBAAEM,MAAM;oBAAWN,aAAa;gBAAY;aAAE;QAAC;KACnZ;AACH,EAAC"}
+{"version":3,"sources":["../../../../../../../../libs/plugins/commerce/src/lib/server/api-v1/openapi.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  type ApiV1ResourceDescription,\n  booleanField as bool,\n  integerField as int,\n  nullableField as nullable,\n  objectKindField as OBJECT_FIELD,\n  openObjectField as objectOf,\n  postalAddressField as ADDRESS,\n  queryParam as q,\n  RECORD_STAMPS as STAMPS,\n  stringField as str,\n  stringListField as strList,\n} from '@aglyn/tenant-data-admin/server/api-v1-description'\n\n/**\n * A site's products and orders as the customer API's OpenAPI document\n * describes them — what the console's builder turns into paths, tags and\n * schemas, and the MCP tools derive from. Transcribed unchanged from the\n * builder's own list when the resources moved here (AGL-3080);\n * `api-v1-openapi.spec.ts` holds the document to every endpoint the\n * documentation promises.\n */\nexport const PRODUCTS_API_V1_DESCRIPTION: ApiV1ResourceDescription = {\n  tag: 'Products',\n  description: 'A site’s catalog. Read-only over the API.',\n  schemaName: 'Product',\n  required: ['id', 'object', 'name'],\n  fields: {\n    id: str('Product id.'),\n    object: OBJECT_FIELD('product'),\n    name: str('Product name.'),\n    slug: str('URL slug.'),\n    description: nullable(str('Description.')),\n    type: str('Product type.'),\n    status: str('Publication status.'),\n    tags: strList('Free-form tags.'),\n    categoryIds: strList('Categories this product belongs to.'),\n    mediaUrls: strList('Image URLs.'),\n    options: { type: 'array', description: 'Option definitions, e.g. size.', items: { type: 'object', additionalProperties: true } },\n    variants: { type: 'array', description: 'Purchasable variants.', items: { type: 'object', additionalProperties: true } },\n    inventory: nullable(int('Stock on hand, when tracked.')),\n    subscription: nullable(objectOf('Subscription terms, when the product is one.')),\n    ...STAMPS,\n  },\n  ops: [\n    { path: '/v1/sites/{siteId}/products', method: 'get', operationId: 'listProducts', summary: 'List products', list: true, returns: 'Product', description: 'Rows deleted since they were written are dropped after the read, so pages can come back short.', pathParams: [{ name: 'siteId', description: 'Site id.' }] },\n    { path: '/v1/sites/{siteId}/products/{productId}', method: 'get', operationId: 'getProduct', summary: 'Retrieve a product', returns: 'Product', pathParams: [{ name: 'siteId', description: 'Site id.' }, { name: 'productId', description: 'Product id.' }] },\n  ],\n}\n\nexport const ORDERS_API_V1_DESCRIPTION: ApiV1ResourceDescription = {\n  tag: 'Orders',\n  description: 'A site’s orders. Status moves are constrained.',\n  schemaName: 'Order',\n  required: ['id', 'object', 'number', 'status'],\n  writable: ['status', 'carrier', 'trackingNumber', 'trackingUrl', 'lineItems', 'notify'],\n  writeOnly: {\n    status: { type: 'string', enum: ['fulfilled', 'delivered'], description: 'The status to move the order to.' },\n    carrier: str('Free text, e.g. `UPS`. Trimmed to 40 characters. USPS, UPS, FedEx, DHL, Canada Post, Royal Mail and Australia Post get a tracking link.'),\n    trackingNumber: str('Free text. Trimmed to 60 characters.'),\n    trackingUrl: str('An https tracking link, for a carrier the link is not derived for.'),\n    lineItems: {\n      type: 'array',\n      description:\n        'With `status: fulfilled`, the units this shipment covers: `[{ lineItemId, quantity }]`, where `lineItemId` is the line’s index. Omitted, the shipment covers everything still to ship. More than is left is `409 conflict` (`code: \"over_fulfilled\"`). Send an `Idempotency-Key` header so a retried partial shipment is recorded once.',\n      items: { type: 'object', additionalProperties: true },\n    },\n    notify: bool('Whether the buyer is told about this shipment. Defaults to true.'),\n  },\n  writeRequired: ['status'],\n  fields: {\n    id: str('Order id.'),\n    object: OBJECT_FIELD('order'),\n    number: int('Human-facing order number.'),\n    status: str('Order status.'),\n    channel: str('`online` by default. Older orders carry no stored value, so `?channel=online` drops them after the read.'),\n    currency: str('ISO 4217 code.'),\n    customerEmail: nullable(str('Customer email.')),\n    customerName: nullable(str('Customer name.')),\n    lineItems: { type: 'array', description: 'What was bought.', items: { type: 'object', additionalProperties: true } },\n    totals: objectOf('Money totals, in the smallest unit of `currency`. `extrasCents` is the optional lines the buyer added at checkout, inside `totalCents` and outside `itemsCents`.'),\n    extras: { type: 'array', description: 'Optional lines the buyer added at checkout, such as package protection: `[{ id, pluginId, key, label, amountCents, quoteRef }]`. Empty when there were none.', items: { type: 'object', additionalProperties: true } },\n    refundedCents: int('Amount refunded so far.'),\n    disputed: bool('Whether a chargeback is open.'),\n    taxMode: nullable(str('The tax regime: `stripe-automatic` (Stripe Tax, collected and remitted by the platform as marketplace facilitator), `manual` (your own rate) or `none`. `null` on an order from before it was recorded.')),\n    taxEngine: nullable(objectOf('The tax service you connected, when one was asked for this sale’s tax: `provider` (`avalara` or `taxjar`), `providerLabel`, `status` (`quoted` when its tax was charged, `fallback` when it did not answer and your own rate was charged), `reason` (`timeout` or `error` on a fallback) and `sandbox`. `null` when no service was asked.')),\n    shippingAddress: ADDRESS(),\n    couponCode: nullable(str('Coupon applied.')),\n    fulfillments: { type: 'array', description: 'Shipments and deliveries.', items: { type: 'object', additionalProperties: true } },\n    created: STAMPS.created,\n  },\n  ops: [\n    { path: '/v1/sites/{siteId}/orders', method: 'get', operationId: 'listOrders', summary: 'List orders', list: true, returns: 'Order', filters: [q('channel', '`online` is a default rather than a stored value, so filtering on it drops older orders after the read.'), q('status', 'Order status.')], pathParams: [{ name: 'siteId', description: 'Site id.' }] },\n    { path: '/v1/sites/{siteId}/orders/{orderId}', method: 'get', operationId: 'getOrder', summary: 'Retrieve an order', returns: 'Order', pathParams: [{ name: 'siteId', description: 'Site id.' }, { name: 'orderId', description: 'Order id.' }] },\n    { path: '/v1/sites/{siteId}/orders/{orderId}', method: 'patch', operationId: 'updateOrder', summary: 'Move an order’s status', accepts: 'OrderWrite', returns: 'Order', description: 'An illegal transition is `409 conflict` (`code: \"order_transition\"`), and the message names the status it is in.', pathParams: [{ name: 'siteId', description: 'Site id.' }, { name: 'orderId', description: 'Order id.' }] },\n  ],\n}\n"],"names":["booleanField","bool","integerField","int","nullableField","nullable","objectKindField","OBJECT_FIELD","openObjectField","objectOf","postalAddressField","ADDRESS","queryParam","q","RECORD_STAMPS","STAMPS","stringField","str","stringListField","strList","PRODUCTS_API_V1_DESCRIPTION","tag","description","schemaName","required","fields","id","object","name","slug","type","status","tags","categoryIds","mediaUrls","options","items","additionalProperties","variants","inventory","subscription","ops","path","method","operationId","summary","list","returns","pathParams","ORDERS_API_V1_DESCRIPTION","writable","writeOnly","enum","carrier","trackingNumber","trackingUrl","lineItems","notify","writeRequired","number","channel","currency","customerEmail","customerName","totals","extras","refundedCents","disputed","taxMode","taxEngine","shippingAddress","couponCode","fulfillments","created","filters","accepts"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAEEA,gBAAgBC,IAAI,EACpBC,gBAAgBC,GAAG,EACnBC,iBAAiBC,QAAQ,EACzBC,mBAAmBC,YAAY,EAC/BC,mBAAmBC,QAAQ,EAC3BC,sBAAsBC,OAAO,EAC7BC,cAAcC,CAAC,EACfC,iBAAiBC,MAAM,EACvBC,eAAeC,GAAG,EAClBC,mBAAmBC,OAAO,QACrB,qDAAoD;AAE3D;;;;;;;CAOC,GACD,OAAO,MAAMC,8BAAwD;IACnEC,KAAK;IACLC,aAAa;IACbC,YAAY;IACZC,UAAU;QAAC;QAAM;QAAU;KAAO;IAClCC,QAAQ;QACNC,IAAIT,IAAI;QACRU,QAAQpB,aAAa;QACrBqB,MAAMX,IAAI;QACVY,MAAMZ,IAAI;QACVK,aAAajB,SAASY,IAAI;QAC1Ba,MAAMb,IAAI;QACVc,QAAQd,IAAI;QACZe,MAAMb,QAAQ;QACdc,aAAad,QAAQ;QACrBe,WAAWf,QAAQ;QACnBgB,SAAS;YAAEL,MAAM;YAASR,aAAa;YAAkCc,OAAO;gBAAEN,MAAM;gBAAUO,sBAAsB;YAAK;QAAE;QAC/HC,UAAU;YAAER,MAAM;YAASR,aAAa;YAAyBc,OAAO;gBAAEN,MAAM;gBAAUO,sBAAsB;YAAK;QAAE;QACvHE,WAAWlC,SAASF,IAAI;QACxBqC,cAAcnC,SAASI,SAAS;OAC7BM;IAEL0B,KAAK;QACH;YAAEC,MAAM;YAA+BC,QAAQ;YAAOC,aAAa;YAAgBC,SAAS;YAAiBC,MAAM;YAAMC,SAAS;YAAWzB,aAAa;YAAkG0B,YAAY;gBAAC;oBAAEpB,MAAM;oBAAUN,aAAa;gBAAW;aAAE;QAAC;QACtT;YAAEoB,MAAM;YAA2CC,QAAQ;YAAOC,aAAa;YAAcC,SAAS;YAAsBE,SAAS;YAAWC,YAAY;gBAAC;oBAAEpB,MAAM;oBAAUN,aAAa;gBAAW;gBAAG;oBAAEM,MAAM;oBAAaN,aAAa;gBAAc;aAAE;QAAC;KAC9P;AACH,EAAC;AAED,OAAO,MAAM2B,4BAAsD;IACjE5B,KAAK;IACLC,aAAa;IACbC,YAAY;IACZC,UAAU;QAAC;QAAM;QAAU;QAAU;KAAS;IAC9C0B,UAAU;QAAC;QAAU;QAAW;QAAkB;QAAe;QAAa;KAAS;IACvFC,WAAW;QACTpB,QAAQ;YAAED,MAAM;YAAUsB,MAAM;gBAAC;gBAAa;aAAY;YAAE9B,aAAa;QAAmC;QAC5G+B,SAASpC,IAAI;QACbqC,gBAAgBrC,IAAI;QACpBsC,aAAatC,IAAI;QACjBuC,WAAW;YACT1B,MAAM;YACNR,aACE;YACFc,OAAO;gBAAEN,MAAM;gBAAUO,sBAAsB;YAAK;QACtD;QACAoB,QAAQxD,KAAK;IACf;IACAyD,eAAe;QAAC;KAAS;IACzBjC,QAAQ;QACNC,IAAIT,IAAI;QACRU,QAAQpB,aAAa;QACrBoD,QAAQxD,IAAI;QACZ4B,QAAQd,IAAI;QACZ2C,SAAS3C,IAAI;QACb4C,UAAU5C,IAAI;QACd6C,eAAezD,SAASY,IAAI;QAC5B8C,cAAc1D,SAASY,IAAI;QAC3BuC,WAAW;YAAE1B,MAAM;YAASR,aAAa;YAAoBc,OAAO;gBAAEN,MAAM;gBAAUO,sBAAsB;YAAK;QAAE;QACnH2B,QAAQvD,SAAS;QACjBwD,QAAQ;YAAEnC,MAAM;YAASR,aAAa;YAAgKc,OAAO;gBAAEN,MAAM;gBAAUO,sBAAsB;YAAK;QAAE;QAC5P6B,eAAe/D,IAAI;QACnBgE,UAAUlE,KAAK;QACfmE,SAAS/D,SAASY,IAAI;QACtBoD,WAAWhE,SAASI,SAAS;QAC7B6D,iBAAiB3D;QACjB4D,YAAYlE,SAASY,IAAI;QACzBuD,cAAc;YAAE1C,MAAM;YAASR,aAAa;YAA6Bc,OAAO;gBAAEN,MAAM;gBAAUO,sBAAsB;YAAK;QAAE;QAC/HoC,SAAS1D,OAAO0D,OAAO;IACzB;IACAhC,KAAK;QACH;YAAEC,MAAM;YAA6BC,QAAQ;YAAOC,aAAa;YAAcC,SAAS;YAAeC,MAAM;YAAMC,SAAS;YAAS2B,SAAS;gBAAC7D,EAAE,WAAW;gBAA4GA,EAAE,UAAU;aAAiB;YAAEmC,YAAY;gBAAC;oBAAEpB,MAAM;oBAAUN,aAAa;gBAAW;aAAE;QAAC;QACjW;YAAEoB,MAAM;YAAuCC,QAAQ;YAAOC,aAAa;YAAYC,SAAS;YAAqBE,SAAS;YAASC,YAAY;gBAAC;oBAAEpB,MAAM;oBAAUN,aAAa;gBAAW;gBAAG;oBAAEM,MAAM;oBAAWN,aAAa;gBAAY;aAAE;QAAC;QAChP;YAAEoB,MAAM;YAAuCC,QAAQ;YAASC,aAAa;YAAeC,SAAS;YAA0B8B,SAAS;YAAc5B,SAAS;YAASzB,aAAa;YAAoH0B,YAAY;gBAAC;oBAAEpB,MAAM;oBAAUN,aAAa;gBAAW;gBAAG;oBAAEM,MAAM;oBAAWN,aAAa;gBAAY;aAAE;QAAC;KACnZ;AACH,EAAC"}

package/src/lib/server/api-v1/order-view.d.ts

@@ -0,0 +1,67 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The public order shape from an order's data (AGL-3611): the same object the
+ * API returns, so an order event and an outbound webhook carry exactly what
+ * `GET /v1/sites/{id}/orders/{id}` would.
+ */
+export declare function orderViewFromData(id: string, data: Record<string, any>): {
+    id: string;
+    object: string;
+    number: number;
+    status: string;
+    channel: string;
+    currency: string;
+    customerEmail: any;
+    customerName: any;
+    lineItems: unknown;
+    totals: {
+        itemsCents: number;
+        shippingCents: number;
+        taxCents: number;
+        discountCents: number;
+        totalCents: number;
+        feeCents: number;
+        extrasCents: number;
+    };
+    extras: {
+        id: string;
+        pluginId: string;
+        key: string;
+        label: string;
+        amountCents: number;
+        quoteRef: string;
+    }[];
+    refundedCents: number;
+    taxMode: string;
+    taxEngine: import("../../model/commerce-tax-engine").OrderTaxEngineStamp;
+    disputed: boolean;
+    shippingAddress: unknown;
+    couponCode: any;
+    fulfillments: {
+        id: unknown;
+        lineItemIds: unknown[];
+        lines: import("../../model").OrderFulfillmentLine[];
+        status: string;
+        carrier: unknown;
+        trackingNumber: unknown;
+        trackingUrl: string;
+        labelUrl: unknown;
+        at: string;
+    }[];
+    created: unknown;
+};

package/src/lib/server/api-v1/order-view.js

@@ -0,0 +1,120 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { serialize } from "@aglyn/tenant-data-admin/server/api-v1-kit";
+import { fulfillmentLineQuantities } from "../../model/order-fulfillment.js";
+import { fulfillmentTrackingUrl } from "../../model/tracking-url.js";
+import { orderTaxEngineView } from "../../model/commerce-tax-engine.js";
+/**
+ * The public order shape from an order's data (AGL-3611): the same object the
+ * API returns, so an order event and an outbound webhook carry exactly what
+ * `GET /v1/sites/{id}/orders/{id}` would.
+ */ export function orderViewFromData(id, data) {
+    var _data_totals, _data_amountCents, _data_feeCents, _data_status, _data_channel, _data_customerEmail, _data_customerName, _data_lineItems, _totals_itemsCents, _totals_shippingCents, _totals_taxCents, _totals_discountCents, _totals_extrasCents, _data_refundedCents, _serialize, _data_couponCode, _serialize1;
+    const totals = (_data_totals = data.totals) != null ? _data_totals : {};
+    const legacyTotal = Number((_data_amountCents = data.amountCents) != null ? _data_amountCents : NaN);
+    const totalCents = Number.isFinite(Number(totals.totalCents)) ? Number(totals.totalCents) : Number.isFinite(legacyTotal) ? legacyTotal : null;
+    const legacyFee = Number((_data_feeCents = data.feeCents) != null ? _data_feeCents : NaN);
+    return {
+        id,
+        object: 'order',
+        number: typeof data.number === 'number' ? data.number : null,
+        status: (_data_status = data.status) != null ? _data_status : null,
+        channel: (_data_channel = data.channel) != null ? _data_channel : 'online',
+        currency: 'usd',
+        customerEmail: (_data_customerEmail = data.customerEmail) != null ? _data_customerEmail : null,
+        customerName: (_data_customerName = data.customerName) != null ? _data_customerName : null,
+        lineItems: serialize((_data_lineItems = data.lineItems) != null ? _data_lineItems : []),
+        totals: {
+            itemsCents: Number((_totals_itemsCents = totals.itemsCents) != null ? _totals_itemsCents : 0),
+            shippingCents: Number((_totals_shippingCents = totals.shippingCents) != null ? _totals_shippingCents : 0),
+            taxCents: Number((_totals_taxCents = totals.taxCents) != null ? _totals_taxCents : 0),
+            discountCents: Number((_totals_discountCents = totals.discountCents) != null ? _totals_discountCents : 0),
+            totalCents,
+            // The Connect application fee. NOT subtracted from `totalCents` — it is
+            // Aglyn's cut of a total the shopper already paid in full, so a client
+            // that nets it out of revenue would understate what it collected.
+            feeCents: Number.isFinite(Number(totals.feeCents)) ? Number(totals.feeCents) : Number.isFinite(legacyFee) ? legacyFee : 0,
+            // Optional lines the buyer added at checkout (AGL-3635), inside
+            // `totalCents` and outside `itemsCents`.
+            extrasCents: Number((_totals_extrasCents = totals.extrasCents) != null ? _totals_extrasCents : 0) || 0
+        },
+        // What those lines were and whose offer each was: the fact a plugin that
+        // insures a parcel reads off `order.paid` to know it was bought.
+        extras: (Array.isArray(data.extras) ? data.extras : []).filter((entry)=>entry && typeof entry.id === 'string').map((entry)=>{
+            var _entry_pluginId, _entry_key, _entry_label, _entry_amountCents;
+            return {
+                id: String(entry.id),
+                pluginId: String((_entry_pluginId = entry.pluginId) != null ? _entry_pluginId : ''),
+                key: String((_entry_key = entry.key) != null ? _entry_key : ''),
+                label: String((_entry_label = entry.label) != null ? _entry_label : ''),
+                amountCents: Number((_entry_amountCents = entry.amountCents) != null ? _entry_amountCents : 0) || 0,
+                quoteRef: typeof entry.quoteRef === 'string' ? entry.quoteRef : null
+            };
+        }),
+        // Money already handed back, for any reason. A chargeback lands here too,
+        // so `refundedCents > 0` does not by itself mean the merchant chose it.
+        refundedCents: Number((_data_refundedCents = data.refundedCents) != null ? _data_refundedCents : 0),
+        // Who the tax was charged under (AGL-3614): `stripe-automatic` tax is
+        // Aglyn's to remit as marketplace facilitator and never reaches the
+        // merchant's account, which a ledger posting the sale has to know. An
+        // order from before the regime was recorded says `null`, never a guess.
+        taxMode: typeof data.taxMode === 'string' && data.taxMode ? data.taxMode : null,
+        // The merchant's own tax service (AGL-3631): which one priced the sale, or
+        // that it was asked and the store's own rates were charged instead
+        // (`status: 'fallback'`). `null` when no service was asked. The regime is
+        // still `taxMode` — a service the merchant connected answers for tax the
+        // merchant remits.
+        taxEngine: orderTaxEngineView(data.taxEngine),
+        disputed: Boolean(data.dispute),
+        shippingAddress: (_serialize = serialize(data.shippingAddress)) != null ? _serialize : null,
+        couponCode: (_data_couponCode = data.couponCode) != null ? _data_couponCode : null,
+        // Shipment records — the half of fulfilment an integration can use
+        // without a write (AGL-2460). `status` says an order is `fulfilled`; it
+        // does not say which carrier took it or under what tracking number, so a
+        // 3PL or accounting reconcile could see THAT an order shipped and never
+        // WHICH shipment it was. The console's order dialog shows both, and an
+        // order that has been shipped twice (a split shipment) is indistinguish-
+        // able from one shipped once when only the status is published.
+        //
+        // `atMs` is a number of milliseconds, not a Firestore Timestamp, so
+        // `serialize` passes it through untouched. It is republished as `at` in
+        // ISO 8601 to match `created` and every other time this API emits: one
+        // object publishing two time formats is a bug an integrator finds late,
+        // in their own timezone conversion, and blames on their own code.
+        fulfillments: (Array.isArray(data.fulfillments) ? data.fulfillments : []).map((entry)=>{
+            var _id, _carrier, _trackingNumber, _labelUrl;
+            const atMs = Number((entry != null ? entry : {}).atMs);
+            return {
+                id: (_id = (entry != null ? entry : {}).id) != null ? _id : null,
+                lineItemIds: Array.isArray((entry != null ? entry : {}).lineItemIds) ? entry.lineItemIds : [],
+                // Units per line (AGL-3611); a fulfillment recorded before
+                // quantities shipped every unit of the lines it names.
+                lines: fulfillmentLineQuantities({
+                    lineItems: Array.isArray(data.lineItems) ? data.lineItems : []
+                }, entry != null ? entry : {}),
+                status: (entry != null ? entry : {}).status === 'cancelled' ? 'cancelled' : 'active',
+                carrier: (_carrier = (entry != null ? entry : {}).carrier) != null ? _carrier : null,
+                trackingNumber: (_trackingNumber = (entry != null ? entry : {}).trackingNumber) != null ? _trackingNumber : null,
+                trackingUrl: fulfillmentTrackingUrl(entry != null ? entry : {}),
+                labelUrl: (_labelUrl = (entry != null ? entry : {}).labelUrl) != null ? _labelUrl : null,
+                at: Number.isFinite(atMs) ? new Date(atMs).toISOString() : null
+            };
+        }),
+        created: (_serialize1 = serialize(data.createdAt)) != null ? _serialize1 : null
+    };
+}
+
+//# sourceMappingURL=order-view.js.map

package/src/lib/server/api-v1/order-view.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/plugins/commerce/src/lib/server/api-v1/order-view.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { serialize } from '@aglyn/tenant-data-admin/server/api-v1-kit'\nimport { fulfillmentLineQuantities } from '../../model/order-fulfillment'\nimport { fulfillmentTrackingUrl } from '../../model/tracking-url'\nimport { orderTaxEngineView } from '../../model/commerce-tax-engine'\n\n/**\n * The public order shape from an order's data (AGL-3611): the same object the\n * API returns, so an order event and an outbound webhook carry exactly what\n * `GET /v1/sites/{id}/orders/{id}` would.\n */\nexport function orderViewFromData(id: string, data: Record<string, any>) {\n  const totals = (data.totals ?? {}) as Record<string, unknown>\n  const legacyTotal = Number(data.amountCents ?? NaN)\n  const totalCents = Number.isFinite(Number(totals.totalCents))\n    ? Number(totals.totalCents)\n    : Number.isFinite(legacyTotal)\n      ? legacyTotal\n      : null\n  const legacyFee = Number(data.feeCents ?? NaN)\n  return {\n    id,\n    object: 'order',\n    number: typeof data.number === 'number' ? data.number : null,\n    status: (data.status as string) ?? null,\n    channel: (data.channel as string) ?? 'online',\n    currency: 'usd',\n    customerEmail: data.customerEmail ?? null,\n    customerName: data.customerName ?? null,\n    lineItems: serialize(data.lineItems ?? []),\n    totals: {\n      itemsCents: Number(totals.itemsCents ?? 0),\n      shippingCents: Number(totals.shippingCents ?? 0),\n      taxCents: Number(totals.taxCents ?? 0),\n      discountCents: Number(totals.discountCents ?? 0),\n      totalCents,\n      // The Connect application fee. NOT subtracted from `totalCents` — it is\n      // Aglyn's cut of a total the shopper already paid in full, so a client\n      // that nets it out of revenue would understate what it collected.\n      feeCents: Number.isFinite(Number(totals.feeCents))\n        ? Number(totals.feeCents)\n        : Number.isFinite(legacyFee)\n          ? legacyFee\n          : 0,\n      // Optional lines the buyer added at checkout (AGL-3635), inside\n      // `totalCents` and outside `itemsCents`.\n      extrasCents: Number(totals.extrasCents ?? 0) || 0,\n    },\n    // What those lines were and whose offer each was: the fact a plugin that\n    // insures a parcel reads off `order.paid` to know it was bought.\n    extras: (Array.isArray(data.extras) ? data.extras : [])\n      .filter((entry: Record<string, unknown>) => entry && typeof entry.id === 'string')\n      .map((entry: Record<string, unknown>) => ({\n        id: String(entry.id),\n        pluginId: String(entry.pluginId ?? ''),\n        key: String(entry.key ?? ''),\n        label: String(entry.label ?? ''),\n        amountCents: Number(entry.amountCents ?? 0) || 0,\n        quoteRef: typeof entry.quoteRef === 'string' ? entry.quoteRef : null,\n      })),\n    // Money already handed back, for any reason. A chargeback lands here too,\n    // so `refundedCents > 0` does not by itself mean the merchant chose it.\n    refundedCents: Number(data.refundedCents ?? 0),\n    // Who the tax was charged under (AGL-3614): `stripe-automatic` tax is\n    // Aglyn's to remit as marketplace facilitator and never reaches the\n    // merchant's account, which a ledger posting the sale has to know. An\n    // order from before the regime was recorded says `null`, never a guess.\n    taxMode: typeof data.taxMode === 'string' && data.taxMode ? data.taxMode : null,\n    // The merchant's own tax service (AGL-3631): which one priced the sale, or\n    // that it was asked and the store's own rates were charged instead\n    // (`status: 'fallback'`). `null` when no service was asked. The regime is\n    // still `taxMode` — a service the merchant connected answers for tax the\n    // merchant remits.\n    taxEngine: orderTaxEngineView(data.taxEngine),\n    disputed: Boolean(data.dispute),\n    shippingAddress: serialize(data.shippingAddress) ?? null,\n    couponCode: data.couponCode ?? null,\n    // Shipment records — the half of fulfilment an integration can use\n    // without a write (AGL-2460). `status` says an order is `fulfilled`; it\n    // does not say which carrier took it or under what tracking number, so a\n    // 3PL or accounting reconcile could see THAT an order shipped and never\n    // WHICH shipment it was. The console's order dialog shows both, and an\n    // order that has been shipped twice (a split shipment) is indistinguish-\n    // able from one shipped once when only the status is published.\n    //\n    // `atMs` is a number of milliseconds, not a Firestore Timestamp, so\n    // `serialize` passes it through untouched. It is republished as `at` in\n    // ISO 8601 to match `created` and every other time this API emits: one\n    // object publishing two time formats is a bug an integrator finds late,\n    // in their own timezone conversion, and blames on their own code.\n    fulfillments: (Array.isArray(data.fulfillments) ? data.fulfillments : []).map(\n      (entry: Record<string, unknown>) => {\n        const atMs = Number((entry ?? {}).atMs)\n        return {\n          id: (entry ?? {}).id ?? null,\n          lineItemIds: Array.isArray((entry ?? {}).lineItemIds)\n            ? (entry as { lineItemIds: unknown[] }).lineItemIds\n            : [],\n          // Units per line (AGL-3611); a fulfillment recorded before\n          // quantities shipped every unit of the lines it names.\n          lines: fulfillmentLineQuantities(\n            { lineItems: Array.isArray(data.lineItems) ? data.lineItems : [] },\n            (entry ?? {}) as never,\n          ),\n          status: (entry ?? {}).status === 'cancelled' ? 'cancelled' : 'active',\n          carrier: (entry ?? {}).carrier ?? null,\n          trackingNumber: (entry ?? {}).trackingNumber ?? null,\n          trackingUrl: fulfillmentTrackingUrl((entry ?? {}) as never),\n          labelUrl: (entry ?? {}).labelUrl ?? null,\n          at: Number.isFinite(atMs) ? new Date(atMs).toISOString() : null,\n        }\n      },\n    ),\n    created: serialize(data.createdAt) ?? null,\n  }\n}\n\n"],"names":["serialize","fulfillmentLineQuantities","fulfillmentTrackingUrl","orderTaxEngineView","orderViewFromData","id","data","totals","legacyTotal","Number","amountCents","NaN","totalCents","isFinite","legacyFee","feeCents","object","number","status","channel","currency","customerEmail","customerName","lineItems","itemsCents","shippingCents","taxCents","discountCents","extrasCents","extras","Array","isArray","filter","entry","map","String","pluginId","key","label","quoteRef","refundedCents","taxMode","taxEngine","disputed","Boolean","dispute","shippingAddress","couponCode","fulfillments","atMs","lineItemIds","lines","carrier","trackingNumber","trackingUrl","labelUrl","at","Date","toISOString","created","createdAt"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,SAAS,QAAQ,6CAA4C;AACtE,SAASC,yBAAyB,QAAQ,mCAA+B;AACzE,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,kBAAkB,QAAQ,qCAAiC;AAEpE;;;;CAIC,GACD,OAAO,SAASC,kBAAkBC,EAAU,EAAEC,IAAyB;QACrDA,cACWA,mBAMFA,gBAKdA,cACCA,eAEKA,qBACDA,oBACOA,iBAEAC,oBACGA,uBACLA,kBACKA,uBAYFA,qBAgBAD,qBAaLN,YACLM,kBAqCHN;IArGX,MAAMO,UAAUD,eAAAA,KAAKC,MAAM,YAAXD,eAAe,CAAC;IAChC,MAAME,cAAcC,QAAOH,oBAAAA,KAAKI,WAAW,YAAhBJ,oBAAoBK;IAC/C,MAAMC,aAAaH,OAAOI,QAAQ,CAACJ,OAAOF,OAAOK,UAAU,KACvDH,OAAOF,OAAOK,UAAU,IACxBH,OAAOI,QAAQ,CAACL,eACdA,cACA;IACN,MAAMM,YAAYL,QAAOH,iBAAAA,KAAKS,QAAQ,YAAbT,iBAAiBK;IAC1C,OAAO;QACLN;QACAW,QAAQ;QACRC,QAAQ,OAAOX,KAAKW,MAAM,KAAK,WAAWX,KAAKW,MAAM,GAAG;QACxDC,MAAM,GAAGZ,eAAAA,KAAKY,MAAM,YAAXZ,eAA0B;QACnCa,OAAO,GAAGb,gBAAAA,KAAKa,OAAO,YAAZb,gBAA2B;QACrCc,UAAU;QACVC,aAAa,GAAEf,sBAAAA,KAAKe,aAAa,YAAlBf,sBAAsB;QACrCgB,YAAY,GAAEhB,qBAAAA,KAAKgB,YAAY,YAAjBhB,qBAAqB;QACnCiB,WAAWvB,WAAUM,kBAAAA,KAAKiB,SAAS,YAAdjB,kBAAkB,EAAE;QACzCC,QAAQ;YACNiB,YAAYf,QAAOF,qBAAAA,OAAOiB,UAAU,YAAjBjB,qBAAqB;YACxCkB,eAAehB,QAAOF,wBAAAA,OAAOkB,aAAa,YAApBlB,wBAAwB;YAC9CmB,UAAUjB,QAAOF,mBAAAA,OAAOmB,QAAQ,YAAfnB,mBAAmB;YACpCoB,eAAelB,QAAOF,wBAAAA,OAAOoB,aAAa,YAApBpB,wBAAwB;YAC9CK;YACA,wEAAwE;YACxE,uEAAuE;YACvE,kEAAkE;YAClEG,UAAUN,OAAOI,QAAQ,CAACJ,OAAOF,OAAOQ,QAAQ,KAC5CN,OAAOF,OAAOQ,QAAQ,IACtBN,OAAOI,QAAQ,CAACC,aACdA,YACA;YACN,gEAAgE;YAChE,yCAAyC;YACzCc,aAAanB,QAAOF,sBAAAA,OAAOqB,WAAW,YAAlBrB,sBAAsB,MAAM;QAClD;QACA,yEAAyE;QACzE,iEAAiE;QACjEsB,QAAQ,AAACC,CAAAA,MAAMC,OAAO,CAACzB,KAAKuB,MAAM,IAAIvB,KAAKuB,MAAM,GAAG,EAAE,AAAD,EAClDG,MAAM,CAAC,CAACC,QAAmCA,SAAS,OAAOA,MAAM5B,EAAE,KAAK,UACxE6B,GAAG,CAAC,CAACD;gBAEaA,iBACLA,YACEA,cACMA;mBALoB;gBACxC5B,IAAI8B,OAAOF,MAAM5B,EAAE;gBACnB+B,UAAUD,QAAOF,kBAAAA,MAAMG,QAAQ,YAAdH,kBAAkB;gBACnCI,KAAKF,QAAOF,aAAAA,MAAMI,GAAG,YAATJ,aAAa;gBACzBK,OAAOH,QAAOF,eAAAA,MAAMK,KAAK,YAAXL,eAAe;gBAC7BvB,aAAaD,QAAOwB,qBAAAA,MAAMvB,WAAW,YAAjBuB,qBAAqB,MAAM;gBAC/CM,UAAU,OAAON,MAAMM,QAAQ,KAAK,WAAWN,MAAMM,QAAQ,GAAG;YAClE;;QACF,0EAA0E;QAC1E,wEAAwE;QACxEC,eAAe/B,QAAOH,sBAAAA,KAAKkC,aAAa,YAAlBlC,sBAAsB;QAC5C,sEAAsE;QACtE,oEAAoE;QACpE,sEAAsE;QACtE,wEAAwE;QACxEmC,SAAS,OAAOnC,KAAKmC,OAAO,KAAK,YAAYnC,KAAKmC,OAAO,GAAGnC,KAAKmC,OAAO,GAAG;QAC3E,2EAA2E;QAC3E,mEAAmE;QACnE,0EAA0E;QAC1E,yEAAyE;QACzE,mBAAmB;QACnBC,WAAWvC,mBAAmBG,KAAKoC,SAAS;QAC5CC,UAAUC,QAAQtC,KAAKuC,OAAO;QAC9BC,eAAe,GAAE9C,aAAAA,UAAUM,KAAKwC,eAAe,aAA9B9C,aAAmC;QACpD+C,UAAU,GAAEzC,mBAAAA,KAAKyC,UAAU,YAAfzC,mBAAmB;QAC/B,mEAAmE;QACnE,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,gEAAgE;QAChE,EAAE;QACF,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,kEAAkE;QAClE0C,cAAc,AAAClB,CAAAA,MAAMC,OAAO,CAACzB,KAAK0C,YAAY,IAAI1C,KAAK0C,YAAY,GAAG,EAAE,AAAD,EAAGd,GAAG,CAC3E,CAACD;gBAGO,KAWK,UACO,iBAEN;YAhBZ,MAAMgB,OAAOxC,OAAO,CAACwB,gBAAAA,QAAS,CAAC,GAAGgB,IAAI;YACtC,OAAO;gBACL5C,EAAE,GAAE,MAAA,CAAC4B,gBAAAA,QAAS,CAAC,GAAG5B,EAAE,YAAhB,MAAoB;gBACxB6C,aAAapB,MAAMC,OAAO,CAAC,CAACE,gBAAAA,QAAS,CAAC,GAAGiB,WAAW,IAChD,AAACjB,MAAqCiB,WAAW,GACjD,EAAE;gBACN,2DAA2D;gBAC3D,uDAAuD;gBACvDC,OAAOlD,0BACL;oBAAEsB,WAAWO,MAAMC,OAAO,CAACzB,KAAKiB,SAAS,IAAIjB,KAAKiB,SAAS,GAAG,EAAE;gBAAC,GAChEU,gBAAAA,QAAS,CAAC;gBAEbf,QAAQ,CAACe,gBAAAA,QAAS,CAAC,GAAGf,MAAM,KAAK,cAAc,cAAc;gBAC7DkC,OAAO,GAAE,WAAA,CAACnB,gBAAAA,QAAS,CAAC,GAAGmB,OAAO,YAArB,WAAyB;gBAClCC,cAAc,GAAE,kBAAA,CAACpB,gBAAAA,QAAS,CAAC,GAAGoB,cAAc,YAA5B,kBAAgC;gBAChDC,aAAapD,uBAAwB+B,gBAAAA,QAAS,CAAC;gBAC/CsB,QAAQ,GAAE,YAAA,CAACtB,gBAAAA,QAAS,CAAC,GAAGsB,QAAQ,YAAtB,YAA0B;gBACpCC,IAAI/C,OAAOI,QAAQ,CAACoC,QAAQ,IAAIQ,KAAKR,MAAMS,WAAW,KAAK;YAC7D;QACF;QAEFC,OAAO,GAAE3D,cAAAA,UAAUM,KAAKsD,SAAS,aAAxB5D,cAA6B;IACxC;AACF"}

package/src/lib/server/api-v1/orders-and-products.js

@@ -19,6 +19,7 @@ import { ApiErrors, apiJson, listResponse } from "@aglyn/tenant-data-admin";
 import { paginate, readJsonBody, requireScope, serialize } from "@aglyn/tenant-data-admin/server/api-v1-kit";
 import { BUNDLE_ID } from "../../constants/bundle-common.js";
 import { recordOrderShipment } from "../fulfill-order.js";
+import { orderViewFromData } from "./order-view.js";
 /**
  * A site's orders and products on the customer REST API,
  * `/v1/sites/{siteId}/orders/…` and `/v1/sites/{siteId}/products/…`
@@ -61,66 +62,8 @@ function hostRef(ctx, hostId) {
  * for the same reason the console's list does — an absent channel is a
  * pre-channel order, not an unknown one.
  */ function orderView(doc) {
-    var _doc_data, _data_totals, _data_amountCents, _data_feeCents, _data_status, _data_channel, _data_customerEmail, _data_customerName, _data_lineItems, _totals_itemsCents, _totals_shippingCents, _totals_taxCents, _totals_discountCents, _data_refundedCents, _serialize, _data_couponCode, _serialize1;
-    const data = (_doc_data = doc.data()) != null ? _doc_data : {};
-    const totals = (_data_totals = data.totals) != null ? _data_totals : {};
-    const legacyTotal = Number((_data_amountCents = data.amountCents) != null ? _data_amountCents : NaN);
-    const totalCents = Number.isFinite(Number(totals.totalCents)) ? Number(totals.totalCents) : Number.isFinite(legacyTotal) ? legacyTotal : null;
-    const legacyFee = Number((_data_feeCents = data.feeCents) != null ? _data_feeCents : NaN);
-    return {
-        id: doc.id,
-        object: 'order',
-        number: typeof data.number === 'number' ? data.number : null,
-        status: (_data_status = data.status) != null ? _data_status : null,
-        channel: (_data_channel = data.channel) != null ? _data_channel : 'online',
-        currency: 'usd',
-        customerEmail: (_data_customerEmail = data.customerEmail) != null ? _data_customerEmail : null,
-        customerName: (_data_customerName = data.customerName) != null ? _data_customerName : null,
-        lineItems: serialize((_data_lineItems = data.lineItems) != null ? _data_lineItems : []),
-        totals: {
-            itemsCents: Number((_totals_itemsCents = totals.itemsCents) != null ? _totals_itemsCents : 0),
-            shippingCents: Number((_totals_shippingCents = totals.shippingCents) != null ? _totals_shippingCents : 0),
-            taxCents: Number((_totals_taxCents = totals.taxCents) != null ? _totals_taxCents : 0),
-            discountCents: Number((_totals_discountCents = totals.discountCents) != null ? _totals_discountCents : 0),
-            totalCents,
-            // The Connect application fee. NOT subtracted from `totalCents` — it is
-            // Aglyn's cut of a total the shopper already paid in full, so a client
-            // that nets it out of revenue would understate what it collected.
-            feeCents: Number.isFinite(Number(totals.feeCents)) ? Number(totals.feeCents) : Number.isFinite(legacyFee) ? legacyFee : 0
-        },
-        // Money already handed back, for any reason. A chargeback lands here too,
-        // so `refundedCents > 0` does not by itself mean the merchant chose it.
-        refundedCents: Number((_data_refundedCents = data.refundedCents) != null ? _data_refundedCents : 0),
-        disputed: Boolean(data.dispute),
-        shippingAddress: (_serialize = serialize(data.shippingAddress)) != null ? _serialize : null,
-        couponCode: (_data_couponCode = data.couponCode) != null ? _data_couponCode : null,
-        // Shipment records — the half of fulfilment an integration can use
-        // without a write (AGL-2460). `status` says an order is `fulfilled`; it
-        // does not say which carrier took it or under what tracking number, so a
-        // 3PL or accounting reconcile could see THAT an order shipped and never
-        // WHICH shipment it was. The console's order dialog shows both, and an
-        // order that has been shipped twice (a split shipment) is indistinguish-
-        // able from one shipped once when only the status is published.
-        //
-        // `atMs` is a number of milliseconds, not a Firestore Timestamp, so
-        // `serialize` passes it through untouched. It is republished as `at` in
-        // ISO 8601 to match `created` and every other time this API emits: one
-        // object publishing two time formats is a bug an integrator finds late,
-        // in their own timezone conversion, and blames on their own code.
-        fulfillments: (Array.isArray(data.fulfillments) ? data.fulfillments : []).map((entry)=>{
-            var _id, _carrier, _trackingNumber, _trackingUrl;
-            const atMs = Number((entry != null ? entry : {}).atMs);
-            return {
-                id: (_id = (entry != null ? entry : {}).id) != null ? _id : null,
-                lineItemIds: Array.isArray((entry != null ? entry : {}).lineItemIds) ? entry.lineItemIds : [],
-                carrier: (_carrier = (entry != null ? entry : {}).carrier) != null ? _carrier : null,
-                trackingNumber: (_trackingNumber = (entry != null ? entry : {}).trackingNumber) != null ? _trackingNumber : null,
-                trackingUrl: (_trackingUrl = (entry != null ? entry : {}).trackingUrl) != null ? _trackingUrl : null,
-                at: Number.isFinite(atMs) ? new Date(atMs).toISOString() : null
-            };
-        }),
-        created: (_serialize1 = serialize(data.createdAt)) != null ? _serialize1 : null
-    };
+    var _doc_data;
+    return orderViewFromData(doc.id, (_doc_data = doc.data()) != null ? _doc_data : {});
 }
 export async function handleOrders(request, ctx, segments, url) {
     const [, hostId, , orderId] = segments;
@@ -183,6 +126,14 @@ export async function handleOrders(request, ctx, segments, url) {
     'fulfilled',
     'delivered'
 ];
+/** The keys a PATCH may carry (AGL-3611 added the last three). */ const ORDER_WRITABLE_KEYS = [
+    'status',
+    'carrier',
+    'trackingNumber',
+    'trackingUrl',
+    'lineItems',
+    'notify'
+];
 /**
  * Transitions that exist in the commerce model and are DELIBERATELY not
  * reachable here — refused by name with a 400 that says why, never silently
@@ -241,16 +192,16 @@ export async function handleOrders(request, ctx, segments, url) {
  * AND returns the same `200` with the same order body — the contract
  * `updateRecord`, `updateContact` and `updateFormSubmission` are held to.
  */ async function updateOrder(request, ctx, hostId, orderId) {
-    var _body_status, _body_carrier, _body_trackingNumber;
+    var _body_status, _body_carrier, _body_trackingNumber, _request_headers_get;
     const body = await readJsonBody(request);
-    const unknown = Object.keys(body).filter((key)=>key !== 'status' && key !== 'carrier' && key !== 'trackingNumber');
+    const unknown = Object.keys(body).filter((key)=>!ORDER_WRITABLE_KEYS.includes(key));
     if (unknown.length > 0) {
         // Named, not dropped — the `updateFormSubmission` / `updateContact` rule.
         // A silently ignored `trackingUrl` here reads as "we recorded your
         // shipment as you described it" when half of it went nowhere, and the
         // caller is a warehouse system that will never look again.
         return ApiErrors.badRequest({
-            message: 'Only `status`, `carrier` and `trackingNumber` can be set on an order',
+            message: 'Only `status`, `carrier`, `trackingNumber`, `trackingUrl`, `lineItems` and `notify` can be set on an order',
             code: 'validation_failed',
             fields: Object.fromEntries(unknown.map((key)=>[
                     key,
@@ -285,6 +236,26 @@ export async function handleOrders(request, ctx, segments, url) {
     // used to stuff an order document through a door the console keeps narrow.
     const carrier = String((_body_carrier = body.carrier) != null ? _body_carrier : '').slice(0, 40);
     const trackingNumber = String((_body_trackingNumber = body.trackingNumber) != null ? _body_trackingNumber : '').slice(0, 60);
+    // Partial shipments (AGL-3611): `lineItems: [{ lineItemId, quantity }]`.
+    // Absent keeps the old meaning, everything still to ship.
+    let lineItems;
+    if (body.lineItems !== undefined) {
+        if (status !== 'fulfilled' || !Array.isArray(body.lineItems) || body.lineItems.length === 0) {
+            return ApiErrors.badRequest({
+                message: 'Order failed validation',
+                code: 'validation_failed',
+                fields: {
+                    lineItems: status !== 'fulfilled' ? 'Only a `fulfilled` update names line items' : 'Must be a non-empty array of { lineItemId, quantity }'
+                },
+                headers: ctx.headers
+            });
+        }
+        lineItems = body.lineItems.slice(0, 500).map((entry)=>({
+                lineItemId: Number(entry == null ? void 0 : entry.lineItemId),
+                quantity: Number(entry == null ? void 0 : entry.quantity)
+            }));
+    }
+    const idempotencyKey = (_request_headers_get = request.headers.get('idempotency-key')) != null ? _request_headers_get : undefined;
     // Gate 4: this plugin, on for this site.
     const hostSnap = await hostRef(ctx, hostId).get();
     if (!isHostPluginEnabled(ctx.org, hostSnap.data(), BUNDLE_ID)) {
@@ -293,13 +264,35 @@ export async function handleOrders(request, ctx, segments, url) {
             headers: ctx.headers
         });
     }
-    const outcome = await recordOrderShipment({
+    const outcome = await recordOrderShipment(_extends({
         hostId,
         orderId,
         to: status,
         carrier,
         trackingNumber
-    });
+    }, lineItems ? {
+        lineItems
+    } : {}, typeof body.trackingUrl === 'string' ? {
+        trackingUrl: body.trackingUrl
+    } : {}, body.notify === false ? {
+        notify: false
+    } : {}, idempotencyKey ? {
+        idempotencyKey
+    } : {}));
+    if (outcome.outcome === 'invalid_lines') {
+        return outcome.problem.problem === 'over_fulfilled' ? ApiErrors.conflict({
+            message: outcome.message,
+            code: 'over_fulfilled',
+            headers: ctx.headers
+        }) : ApiErrors.badRequest({
+            message: 'Order failed validation',
+            code: 'validation_failed',
+            fields: {
+                lineItems: outcome.message
+            },
+            headers: ctx.headers
+        });
+    }
     if (outcome.outcome === 'no_such_order') {
         return ApiErrors.notFound({
             message: 'No such order',