@aglyn/plugins-commerce 1.0.0-beta.231 → 1.0.0-beta.233

package/src/lib/server/products-write.js

@@ -0,0 +1,375 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { createHash } from "node:crypto";
+import { isRefusedIdToken } from "@aglyn/tenant-data-admin/server/id-token-refusal";
+import { createResourceUid } from "@aglyn/aglyn/app-utils/create-resource-uid";
+import { hostRoleCanWrite } from "@aglyn/aglyn/app-utils/organizations";
+import { dropPluginSiteCache } from "@aglyn/aglyn/plugin-manager/plugin-site-cache";
+import { firebaseAdmin, getLockdownVerdict, getOrgForHost, isImpersonationSession } from "@aglyn/tenant-data-admin";
+import { FieldValue } from "firebase-admin/firestore";
+import { productCollectionIds, productEditWrite, productMembershipInput, productSaveFields, smartCollectionRulesOf, stockAdjustmentWrite, validateProduct } from "../model/index.js";
+import { planRefusal, roomRefusal } from "./product-drafts.js";
+const ROLE_REFUSAL = 'Editing requires the editor role';
+const MAX_BODY_BYTES = 256000;
+/** The reasons the Adjust stock dialog offers. */ export const STOCK_ADJUST_REASONS = [
+    'restock',
+    'correction',
+    'damage',
+    'refund'
+];
+function bodyOf(req) {
+    const raw = req.body;
+    if (typeof raw === 'string') {
+        if (raw.length > MAX_BODY_BYTES) return {};
+        try {
+            return JSON.parse(raw || '{}');
+        } catch (unused) {
+            return {};
+        }
+    }
+    return raw != null ? raw : {};
+}
+const validId = (value)=>typeof value === 'string' && /^[A-Za-z0-9_-]{1,128}$/.test(value);
+/**
+ * Who may write this site's products, as the rules decide it. Answers the
+ * caller's reply on a refusal and returns null.
+ */ async function gate(req, res, hostId, deps) {
+    var _req_headers_authorization, _host_get, _ref;
+    var _this;
+    const authorization = String((_req_headers_authorization = req.headers.authorization) != null ? _req_headers_authorization : '');
+    const token = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : '';
+    if (!token) return res.status(401).json({
+        error: 'Unauthenticated'
+    }), null;
+    let decoded;
+    try {
+        decoded = await deps.verifyIdToken(token);
+    } catch (error) {
+        // Only a refused token is the caller's; an Auth outage is a 500 (AGL-2852).
+        if (!isRefusedIdToken(error)) throw error;
+        return res.status(401).json({
+            error: 'Sign in again to continue'
+        }), null;
+    }
+    const staff = decoded['staff'] === true;
+    if (!staff && decoded['email_verified'] !== true && !isImpersonationSession(decoded)) {
+        return res.status(403).json({
+            error: 'Verify your email address to make changes'
+        }), null;
+    }
+    const host = await deps.firestore().collection('hosts').doc(hostId).get();
+    if (!host.exists) return res.status(404).json({
+        error: 'Unknown site'
+    }), null;
+    if (!staff && !hostRoleCanWrite(((_host_get = host.get('memberRoles')) != null ? _host_get : {})[decoded.uid])) {
+        return res.status(403).json({
+            error: ROLE_REFUSAL
+        }), null;
+    }
+    const org = (_ref = (_this = await deps.orgForHost(hostId)) == null ? void 0 : _this.org) != null ? _ref : {};
+    const locked = await deps.lockdown({
+        staff,
+        uid: decoded.uid,
+        org: org,
+        host: host.data(),
+        request: {
+            method: 'POST'
+        }
+    });
+    if (locked) return res.status(423).json({
+        error: 'This site is not accepting changes right now'
+    }), null;
+    return {
+        uid: decoded.uid,
+        staff,
+        host,
+        org
+    };
+}
+/** The site-wide cache drop a product change is owed (AGL-3386): an outbox entry in the write, then the drop. */ function outboxEntry(firestore, hostId) {
+    return {
+        ref: firestore.collection('publishOutbox').doc(createResourceUid()),
+        data: {
+            hostId,
+            paths: [
+                '/'
+            ],
+            createdAt: FieldValue.serverTimestamp(),
+            attempts: 0,
+            entireHost: true
+        }
+    };
+}
+async function settleCache(deps, hostId, entry, reason) {
+    const dropped = await deps.dropCache({
+        hostIds: [
+            hostId
+        ],
+        reason
+    }).catch(()=>({
+            complete: false
+        }));
+    if (dropped.complete) await entry.delete().catch(()=>undefined);
+}
+function resolved(deps) {
+    var _deps_firestore, _deps_verifyIdToken, _deps_orgForHost, _deps_lockdown, _deps_dropCache, _deps_now;
+    return {
+        firestore: (_deps_firestore = deps.firestore) != null ? _deps_firestore : ()=>firebaseAdmin.app().firestore(),
+        verifyIdToken: (_deps_verifyIdToken = deps.verifyIdToken) != null ? _deps_verifyIdToken : (token)=>firebaseAdmin.app().auth().verifyIdToken(token),
+        orgForHost: (_deps_orgForHost = deps.orgForHost) != null ? _deps_orgForHost : (hostId)=>getOrgForHost(hostId),
+        lockdown: (_deps_lockdown = deps.lockdown) != null ? _deps_lockdown : (options)=>getLockdownVerdict(options),
+        dropCache: (_deps_dropCache = deps.dropCache) != null ? _deps_dropCache : dropPluginSiteCache,
+        now: (_deps_now = deps.now) != null ? _deps_now : ()=>Date.now()
+    };
+}
+/**
+ * Saves a product as the console editor does. `create: true` makes a new
+ * product under the client-minted `productId` (a retry finds its own product
+ * and answers `replayed`); otherwise it replaces the live product, keeping
+ * its live stock holds.
+ */ export function createProductSaveHandler(options = {}) {
+    return async (req, res)=>{
+        if (req.method !== 'POST') return res.status(405).json({
+            error: 'Method not allowed'
+        });
+        const deps = resolved(options);
+        const body = bodyOf(req);
+        const hostId = body['hostId'];
+        const productId = body['productId'];
+        const product = body['product'];
+        if (!validId(hostId) || !validId(productId) || !product || typeof product !== 'object' || !Array.isArray(product.variants)) {
+            return res.status(400).json({
+                error: 'Missing site, product or its variants'
+            });
+        }
+        if (typeof product.name !== 'string' || !product.name.trim()) return res.status(400).json({
+            error: 'Product name is required'
+        });
+        try {
+            const door = await gate(req, res, hostId, deps);
+            if (!door) return;
+            const nowMs = deps.now();
+            const fields = productSaveFields(product, nowMs);
+            const problem = validateProduct(fields);
+            if (problem) return res.status(400).json({
+                error: problem
+            });
+            const db = deps.firestore();
+            const hostRef = db.collection('hosts').doc(hostId);
+            const products = hostRef.collection('products');
+            const productRef = products.doc(productId);
+            const smartQuery = hostRef.collection('collections').where('kind', '==', 'catalog').where('mode', '==', 'smart');
+            const outbox = outboxEntry(db, hostId);
+            const create = body['create'] === true;
+            const answer = await db.runTransaction(async (tx)=>{
+                const [existing, smart] = await Promise.all([
+                    tx.get(productRef),
+                    tx.get(smartQuery)
+                ]);
+                const membership = {
+                    collectionIds: productCollectionIds(productMembershipInput(fields, product), smart.docs.map((doc)=>smartCollectionRulesOf(doc.id, doc.data())))
+                };
+                if (create) {
+                    if (existing.exists) return {
+                        status: 200,
+                        body: {
+                            ok: true,
+                            id: productId,
+                            replayed: true
+                        }
+                    };
+                    const early = planRefusal(door.org);
+                    if (early) return {
+                        status: early.status,
+                        body: {
+                            error: early.error
+                        }
+                    };
+                    const used = (await tx.get(products.count())).data().count;
+                    const room = roomRefusal(door.org, Number(used) || 0);
+                    if (room) return {
+                        status: room.status,
+                        body: {
+                            error: room.error
+                        }
+                    };
+                    tx.create(productRef, _extends({}, fields, membership, {
+                        createdAtMs: nowMs,
+                        deletedAt: null,
+                        createdAt: FieldValue.serverTimestamp(),
+                        updatedAt: FieldValue.serverTimestamp(),
+                        createdBy: door.uid
+                    }));
+                } else {
+                    var _existing_data;
+                    if (!existing.exists || existing.get('deletedAt')) return {
+                        status: 404,
+                        body: {
+                            error: 'This product was deleted'
+                        }
+                    };
+                    tx.set(productRef, _extends({}, storedTimestamps((_existing_data = existing.data()) != null ? _existing_data : {}, product), productEditWrite(fields, existing.get('stockHolds')), membership, {
+                        updatedAt: FieldValue.serverTimestamp()
+                    }));
+                }
+                tx.set(outbox.ref, outbox.data);
+                return {
+                    status: 200,
+                    body: {
+                        ok: true,
+                        id: productId,
+                        replayed: false
+                    }
+                };
+            });
+            if (answer.status === 200 && !answer.body.replayed) {
+                await settleCache(deps, hostId, outbox.ref, 'product saved from the app');
+            }
+            return res.status(answer.status).json(answer.body);
+        } catch (error) {
+            console.error('[commerce/products/save]', error);
+            return res.status(500).json({
+                error: 'The product could not be saved'
+            });
+        }
+    };
+}
+/**
+ * The stored timestamps an edit keeps. The console's replace writes back the
+ * Timestamps its seed carried (`createdAt`, a publish time); a client's JSON
+ * cannot carry one, so each stored Timestamp field the request does not name
+ * is kept as stored.
+ */ export function storedTimestamps(stored, asked) {
+    return Object.fromEntries(Object.entries(stored).filter(([key, value])=>!(key in asked) && typeof (value == null ? void 0 : value.toDate) === 'function'));
+}
+/** The ledger row id one attempt owns: the same key from the same member is the same row. */ export function stockAttemptId(uid, key) {
+    return 'app-' + createHash('sha256').update(`${uid}:${key}`).digest('hex').slice(0, 40);
+}
+/**
+ * Adjusts one variant's stock as the Adjust stock dialog does: the variants
+ * and stock fields on the product, and one `inventoryAdjustments` row, in one
+ * transaction. The Idempotency-Key names that row, so a retried attempt finds
+ * it and moves nothing twice.
+ */ export function createProductStockHandler(options = {}) {
+    return async (req, res)=>{
+        var _req_headers_idempotencykey;
+        if (req.method !== 'POST') return res.status(405).json({
+            error: 'Method not allowed'
+        });
+        const deps = resolved(options);
+        const body = bodyOf(req);
+        const hostId = body['hostId'];
+        const productId = body['productId'];
+        const variantId = body['variantId'];
+        const key = String((_req_headers_idempotencykey = req.headers['idempotency-key']) != null ? _req_headers_idempotencykey : '').trim().slice(0, 200);
+        const reason = body['reason'];
+        const delta = Math.round(Number(body['delta']));
+        const locationId = typeof body['locationId'] === 'string' && body['locationId'] ? body['locationId'] : undefined;
+        if (!validId(hostId) || !validId(productId) || typeof variantId !== 'string' || !variantId) {
+            return res.status(400).json({
+                error: 'Missing site, product or variant'
+            });
+        }
+        if (!key) return res.status(400).json({
+            error: 'Missing Idempotency-Key'
+        });
+        if (!STOCK_ADJUST_REASONS.includes(reason)) return res.status(400).json({
+            error: 'Unknown reason'
+        });
+        if (!Number.isFinite(delta) || delta === 0) return res.status(400).json({
+            error: 'Enter a number of units'
+        });
+        try {
+            const door = await gate(req, res, hostId, deps);
+            if (!door) return;
+            const db = deps.firestore();
+            const hostRef = db.collection('hosts').doc(hostId);
+            const productRef = hostRef.collection('products').doc(productId);
+            const ledgerRef = hostRef.collection('inventoryAdjustments').doc(stockAttemptId(door.uid, key));
+            const outbox = outboxEntry(db, hostId);
+            const answer = await db.runTransaction(async (tx)=>{
+                var _product_variants, _write_update_inventory;
+                const [ledger, stored] = await Promise.all([
+                    tx.get(ledgerRef),
+                    tx.get(productRef)
+                ]);
+                if (ledger.exists) {
+                    var _stored_get;
+                    return {
+                        status: 200,
+                        body: {
+                            ok: true,
+                            replayed: true,
+                            inventory: (_stored_get = stored.get('inventory')) != null ? _stored_get : null
+                        }
+                    };
+                }
+                if (!stored.exists || stored.get('deletedAt')) return {
+                    status: 404,
+                    body: {
+                        error: 'This product was deleted'
+                    }
+                };
+                const product = stored.data();
+                if (!((_product_variants = product.variants) != null ? _product_variants : []).some((variant)=>variant.id === variantId)) {
+                    return {
+                        status: 404,
+                        body: {
+                            error: 'That variant is no longer on this product'
+                        }
+                    };
+                }
+                const write = stockAdjustmentWrite(product, productId, {
+                    variantId,
+                    delta,
+                    reason,
+                    locationId
+                }, deps.now());
+                if (!write) return {
+                    status: 400,
+                    body: {
+                        error: 'Enter a number of units'
+                    }
+                };
+                tx.update(productRef, write.update);
+                tx.create(ledgerRef, write.ledger);
+                tx.set(outbox.ref, outbox.data);
+                return {
+                    status: 200,
+                    body: {
+                        ok: true,
+                        replayed: false,
+                        inventory: (_write_update_inventory = write.update.inventory) != null ? _write_update_inventory : null
+                    }
+                };
+            });
+            if (answer.status === 200 && !answer.body.replayed) {
+                await settleCache(deps, hostId, outbox.ref, 'stock adjusted from the app');
+            }
+            return res.status(answer.status).json(answer.body);
+        } catch (error) {
+            console.error('[commerce/products/stock]', error);
+            return res.status(500).json({
+                error: 'Stock could not be adjusted'
+            });
+        }
+    };
+}
+export const productSaveHandler = createProductSaveHandler();
+export const productStockHandler = createProductStockHandler();
+
+//# sourceMappingURL=products-write.js.map

package/src/lib/server/products-write.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/products-write.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createHash } from 'node:crypto'\nimport { isRefusedIdToken } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport { createResourceUid } from '@aglyn/aglyn/app-utils/create-resource-uid'\nimport { hostRoleCanWrite } from '@aglyn/aglyn/app-utils/organizations'\nimport { dropPluginSiteCache } from '@aglyn/aglyn/plugin-manager/plugin-site-cache'\nimport { type PluginApiHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin, getLockdownVerdict, getOrgForHost, isImpersonationSession } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  type EditedProduct,\n  productCollectionIds,\n  productEditWrite,\n  productMembershipInput,\n  productSaveFields,\n  smartCollectionRulesOf,\n  stockAdjustmentWrite,\n  validateProduct,\n  type InventoryAdjustmentReason,\n} from '../model'\nimport { planRefusal, roomRefusal } from './product-drafts'\n\n/*\n * `POST /api/commerce/products/save` and `POST /api/commerce/products/stock`\n * (AGL-3652): the console product editor's save and its Adjust stock dialog,\n * for the native apps.\n *\n * The console makes both writes from the browser, computing derived fields\n * first (search keys, stock verdict, price, image, smart-collection\n * membership). These routes run THAT computation (`model/product-write.ts`,\n * which the console imports too) and make the same writes, under the gate\n * the Firestore rules put on them: a verified member with a write role on the\n * site (`canWriteHostContent`), or staff, while the site, its org and the\n * platform are not frozen (`hostWritesFrozen`). A new product also meets the\n * create path's own door: the plan's `commerce` entitlement and its\n * `productsPerHost` quota, counted in the same transaction as the create.\n */\n\ntype Firestore = FirebaseFirestore.Firestore\n\nconst ROLE_REFUSAL = 'Editing requires the editor role'\nconst MAX_BODY_BYTES = 256_000\n\n/** The reasons the Adjust stock dialog offers. */\nexport const STOCK_ADJUST_REASONS: readonly InventoryAdjustmentReason[] = ['restock', 'correction', 'damage', 'refund']\n\nexport interface ProductsWriteDeps {\n  firestore?: () => Firestore\n  verifyIdToken?: (token: string) => Promise<Record<string, unknown> & { uid: string }>\n  orgForHost?: (hostId: string) => Promise<{ org: Record<string, unknown> } | null>\n  lockdown?: (options: Parameters<typeof getLockdownVerdict>[0]) => Promise<unknown>\n  dropCache?: typeof dropPluginSiteCache\n  now?: () => number\n}\n\ntype Reply = Parameters<PluginApiHandler>[1]\n\nfunction bodyOf(req: Parameters<PluginApiHandler>[0]): Record<string, unknown> {\n  const raw = req.body\n  if (typeof raw === 'string') {\n    if (raw.length > MAX_BODY_BYTES) return {}\n    try {\n      return JSON.parse(raw || '{}')\n    } catch {\n      return {}\n    }\n  }\n  return (raw ?? {}) as Record<string, unknown>\n}\n\nconst validId = (value: unknown): value is string =>\n  typeof value === 'string' && /^[A-Za-z0-9_-]{1,128}$/.test(value)\n\ninterface Gate {\n  uid: string\n  staff: boolean\n  host: FirebaseFirestore.DocumentSnapshot\n  org: Record<string, unknown>\n}\n\n/**\n * Who may write this site's products, as the rules decide it. Answers the\n * caller's reply on a refusal and returns null.\n */\nasync function gate(req: Parameters<PluginApiHandler>[0], res: Reply, hostId: string, deps: Required<ProductsWriteDeps>): Promise<Gate | null> {\n  const authorization = String(req.headers.authorization ?? '')\n  const token = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : ''\n  if (!token) return void res.status(401).json({ error: 'Unauthenticated' }), null\n  let decoded: Record<string, unknown> & { uid: string }\n  try {\n    decoded = await deps.verifyIdToken(token)\n  } catch (error) {\n    // Only a refused token is the caller's; an Auth outage is a 500 (AGL-2852).\n    if (!isRefusedIdToken(error)) throw error\n    return void res.status(401).json({ error: 'Sign in again to continue' }), null\n  }\n  const staff = decoded['staff'] === true\n  if (!staff && decoded['email_verified'] !== true && !isImpersonationSession(decoded as never)) {\n    return void res.status(403).json({ error: 'Verify your email address to make changes' }), null\n  }\n  const host = await deps.firestore().collection('hosts').doc(hostId).get()\n  if (!host.exists) return void res.status(404).json({ error: 'Unknown site' }), null\n  if (!staff && !hostRoleCanWrite((host.get('memberRoles') ?? {})[decoded.uid])) {\n    return void res.status(403).json({ error: ROLE_REFUSAL }), null\n  }\n  const org = ((await deps.orgForHost(hostId))?.org ?? {}) as Record<string, unknown>\n  const locked = await deps.lockdown({ staff, uid: decoded.uid, org: org as never, host: host.data() as never, request: { method: 'POST' } as never })\n  if (locked) return void res.status(423).json({ error: 'This site is not accepting changes right now' }), null\n  return { uid: decoded.uid, staff, host, org }\n}\n\n/** The site-wide cache drop a product change is owed (AGL-3386): an outbox entry in the write, then the drop. */\nfunction outboxEntry(firestore: Firestore, hostId: string) {\n  return {\n    ref: firestore.collection('publishOutbox').doc(createResourceUid()),\n    data: { hostId, paths: ['/'], createdAt: FieldValue.serverTimestamp(), attempts: 0, entireHost: true },\n  }\n}\n\nasync function settleCache(deps: Required<ProductsWriteDeps>, hostId: string, entry: FirebaseFirestore.DocumentReference, reason: string) {\n  const dropped = await deps.dropCache({ hostIds: [hostId], reason }).catch(() => ({ complete: false }))\n  if (dropped.complete) await entry.delete().catch(() => undefined)\n}\n\nfunction resolved(deps: ProductsWriteDeps): Required<ProductsWriteDeps> {\n  return {\n    firestore: deps.firestore ?? (() => firebaseAdmin.app().firestore() as unknown as Firestore),\n    verifyIdToken: deps.verifyIdToken ?? ((token) => firebaseAdmin.app().auth().verifyIdToken(token) as never),\n    orgForHost: deps.orgForHost ?? ((hostId) => getOrgForHost(hostId) as never),\n    lockdown: deps.lockdown ?? ((options) => getLockdownVerdict(options)),\n    dropCache: deps.dropCache ?? dropPluginSiteCache,\n    now: deps.now ?? (() => Date.now()),\n  }\n}\n\n/**\n * Saves a product as the console editor does. `create: true` makes a new\n * product under the client-minted `productId` (a retry finds its own product\n * and answers `replayed`); otherwise it replaces the live product, keeping\n * its live stock holds.\n */\nexport function createProductSaveHandler(options: ProductsWriteDeps = {}): PluginApiHandler {\n  return async (req, res) => {\n    if (req.method !== 'POST') return res.status(405).json({ error: 'Method not allowed' })\n    const deps = resolved(options)\n    const body = bodyOf(req)\n    const hostId = body['hostId']\n    const productId = body['productId']\n    const product = body['product'] as EditedProduct | undefined\n    if (!validId(hostId) || !validId(productId) || !product || typeof product !== 'object' || !Array.isArray(product.variants)) {\n      return res.status(400).json({ error: 'Missing site, product or its variants' })\n    }\n    if (typeof product.name !== 'string' || !product.name.trim()) return res.status(400).json({ error: 'Product name is required' })\n    try {\n      const door = await gate(req, res, hostId, deps)\n      if (!door) return\n      const nowMs = deps.now()\n      const fields = productSaveFields(product, nowMs)\n      const problem = validateProduct(fields as never)\n      if (problem) return res.status(400).json({ error: problem })\n      const db = deps.firestore()\n      const hostRef = db.collection('hosts').doc(hostId)\n      const products = hostRef.collection('products')\n      const productRef = products.doc(productId)\n      const smartQuery = hostRef.collection('collections').where('kind', '==', 'catalog').where('mode', '==', 'smart')\n      const outbox = outboxEntry(db, hostId)\n      const create = body['create'] === true\n      const answer = await db.runTransaction(async (tx) => {\n        const [existing, smart] = await Promise.all([tx.get(productRef), tx.get(smartQuery)])\n        const membership = {\n          collectionIds: productCollectionIds(\n            productMembershipInput(fields, product) as never,\n            smart.docs.map((doc) => smartCollectionRulesOf(doc.id, doc.data())),\n          ),\n        }\n        if (create) {\n          if (existing.exists) return { status: 200, body: { ok: true, id: productId, replayed: true } }\n          const early = planRefusal(door.org as never)\n          if (early) return { status: early.status, body: { error: early.error } }\n          const used = (await tx.get(products.count())).data().count\n          const room = roomRefusal(door.org as never, Number(used) || 0)\n          if (room) return { status: room.status, body: { error: room.error } }\n          tx.create(productRef, {\n            ...fields,\n            ...membership,\n            createdAtMs: nowMs,\n            deletedAt: null,\n            createdAt: FieldValue.serverTimestamp(),\n            updatedAt: FieldValue.serverTimestamp(),\n            createdBy: door.uid,\n          })\n        } else {\n          if (!existing.exists || existing.get('deletedAt')) return { status: 404, body: { error: 'This product was deleted' } }\n          tx.set(productRef, {\n            ...storedTimestamps(existing.data() ?? {}, product as unknown as Record<string, unknown>),\n            ...productEditWrite(fields, existing.get('stockHolds')),\n            ...membership,\n            updatedAt: FieldValue.serverTimestamp(),\n          })\n        }\n        tx.set(outbox.ref, outbox.data)\n        return { status: 200, body: { ok: true, id: productId, replayed: false } }\n      })\n      if (answer.status === 200 && !(answer.body as { replayed?: boolean }).replayed) {\n        await settleCache(deps, hostId, outbox.ref, 'product saved from the app')\n      }\n      return res.status(answer.status).json(answer.body)\n    } catch (error) {\n      console.error('[commerce/products/save]', error)\n      return res.status(500).json({ error: 'The product could not be saved' })\n    }\n  }\n}\n\n/**\n * The stored timestamps an edit keeps. The console's replace writes back the\n * Timestamps its seed carried (`createdAt`, a publish time); a client's JSON\n * cannot carry one, so each stored Timestamp field the request does not name\n * is kept as stored.\n */\nexport function storedTimestamps(stored: Record<string, unknown>, asked: Record<string, unknown>): Record<string, unknown> {\n  return Object.fromEntries(\n    Object.entries(stored).filter(\n      ([key, value]) => !(key in asked) && typeof (value as { toDate?: unknown } | null)?.toDate === 'function',\n    ),\n  )\n}\n\n/** The ledger row id one attempt owns: the same key from the same member is the same row. */\nexport function stockAttemptId(uid: string, key: string): string {\n  return 'app-' + createHash('sha256').update(`${uid}:${key}`).digest('hex').slice(0, 40)\n}\n\n/**\n * Adjusts one variant's stock as the Adjust stock dialog does: the variants\n * and stock fields on the product, and one `inventoryAdjustments` row, in one\n * transaction. The Idempotency-Key names that row, so a retried attempt finds\n * it and moves nothing twice.\n */\nexport function createProductStockHandler(options: ProductsWriteDeps = {}): PluginApiHandler {\n  return async (req, res) => {\n    if (req.method !== 'POST') return res.status(405).json({ error: 'Method not allowed' })\n    const deps = resolved(options)\n    const body = bodyOf(req)\n    const hostId = body['hostId']\n    const productId = body['productId']\n    const variantId = body['variantId']\n    const key = String(req.headers['idempotency-key'] ?? '').trim().slice(0, 200)\n    const reason = body['reason'] as InventoryAdjustmentReason\n    const delta = Math.round(Number(body['delta']))\n    const locationId = typeof body['locationId'] === 'string' && body['locationId'] ? body['locationId'] : undefined\n    if (!validId(hostId) || !validId(productId) || typeof variantId !== 'string' || !variantId) {\n      return res.status(400).json({ error: 'Missing site, product or variant' })\n    }\n    if (!key) return res.status(400).json({ error: 'Missing Idempotency-Key' })\n    if (!STOCK_ADJUST_REASONS.includes(reason)) return res.status(400).json({ error: 'Unknown reason' })\n    if (!Number.isFinite(delta) || delta === 0) return res.status(400).json({ error: 'Enter a number of units' })\n    try {\n      const door = await gate(req, res, hostId, deps)\n      if (!door) return\n      const db = deps.firestore()\n      const hostRef = db.collection('hosts').doc(hostId)\n      const productRef = hostRef.collection('products').doc(productId)\n      const ledgerRef = hostRef.collection('inventoryAdjustments').doc(stockAttemptId(door.uid, key))\n      const outbox = outboxEntry(db, hostId)\n      const answer = await db.runTransaction(async (tx) => {\n        const [ledger, stored] = await Promise.all([tx.get(ledgerRef), tx.get(productRef)])\n        if (ledger.exists) {\n          return { status: 200, body: { ok: true, replayed: true, inventory: stored.get('inventory') ?? null } }\n        }\n        if (!stored.exists || stored.get('deletedAt')) return { status: 404, body: { error: 'This product was deleted' } }\n        const product = stored.data() as never as Parameters<typeof stockAdjustmentWrite>[0]\n        if (!(product.variants ?? []).some((variant) => variant.id === variantId)) {\n          return { status: 404, body: { error: 'That variant is no longer on this product' } }\n        }\n        const write = stockAdjustmentWrite(product, productId, { variantId, delta, reason, locationId }, deps.now())\n        if (!write) return { status: 400, body: { error: 'Enter a number of units' } }\n        tx.update(productRef, write.update)\n        tx.create(ledgerRef, write.ledger)\n        tx.set(outbox.ref, outbox.data)\n        return { status: 200, body: { ok: true, replayed: false, inventory: (write.update as { inventory?: unknown }).inventory ?? null } }\n      })\n      if (answer.status === 200 && !(answer.body as { replayed?: boolean }).replayed) {\n        await settleCache(deps, hostId, outbox.ref, 'stock adjusted from the app')\n      }\n      return res.status(answer.status).json(answer.body)\n    } catch (error) {\n      console.error('[commerce/products/stock]', error)\n      return res.status(500).json({ error: 'Stock could not be adjusted' })\n    }\n  }\n}\n\nexport const productSaveHandler = createProductSaveHandler()\nexport const productStockHandler = createProductStockHandler()\n"],"names":["createHash","isRefusedIdToken","createResourceUid","hostRoleCanWrite","dropPluginSiteCache","firebaseAdmin","getLockdownVerdict","getOrgForHost","isImpersonationSession","FieldValue","productCollectionIds","productEditWrite","productMembershipInput","productSaveFields","smartCollectionRulesOf","stockAdjustmentWrite","validateProduct","planRefusal","roomRefusal","ROLE_REFUSAL","MAX_BODY_BYTES","STOCK_ADJUST_REASONS","bodyOf","req","raw","body","length","JSON","parse","validId","value","test","gate","res","hostId","deps","host","authorization","String","headers","token","startsWith","slice","status","json","error","decoded","verifyIdToken","staff","firestore","collection","doc","get","exists","uid","org","orgForHost","locked","lockdown","data","request","method","outboxEntry","ref","paths","createdAt","serverTimestamp","attempts","entireHost","settleCache","entry","reason","dropped","dropCache","hostIds","catch","complete","delete","undefined","resolved","app","auth","options","now","Date","createProductSaveHandler","productId","product","Array","isArray","variants","name","trim","door","nowMs","fields","problem","db","hostRef","products","productRef","smartQuery","where","outbox","create","answer","runTransaction","tx","existing","smart","Promise","all","membership","collectionIds","docs","map","id","ok","replayed","early","used","count","room","Number","createdAtMs","deletedAt","updatedAt","createdBy","set","storedTimestamps","console","stored","asked","Object","fromEntries","entries","filter","key","toDate","stockAttemptId","update","digest","createProductStockHandler","variantId","delta","Math","round","locationId","includes","isFinite","ledgerRef","ledger","inventory","some","variant","write","productSaveHandler","productStockHandler"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,QAAQ,cAAa;AACxC,SAASC,gBAAgB,QAAQ,mDAAkD;AACnF,SAASC,iBAAiB,QAAQ,6CAA4C;AAC9E,SAASC,gBAAgB,QAAQ,uCAAsC;AACvE,SAASC,mBAAmB,QAAQ,gDAA+C;AAEnF,SAASC,aAAa,EAAEC,kBAAkB,EAAEC,aAAa,EAAEC,sBAAsB,QAAQ,2BAA0B;AACnH,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAEEC,oBAAoB,EACpBC,gBAAgB,EAChBC,sBAAsB,EACtBC,iBAAiB,EACjBC,sBAAsB,EACtBC,oBAAoB,EACpBC,eAAe,QAEV,oBAAU;AACjB,SAASC,WAAW,EAAEC,WAAW,QAAQ,sBAAkB;AAoB3D,MAAMC,eAAe;AACrB,MAAMC,iBAAiB;AAEvB,gDAAgD,GAChD,OAAO,MAAMC,uBAA6D;IAAC;IAAW;IAAc;IAAU;CAAS,CAAA;AAavH,SAASC,OAAOC,GAAoC;IAClD,MAAMC,MAAMD,IAAIE,IAAI;IACpB,IAAI,OAAOD,QAAQ,UAAU;QAC3B,IAAIA,IAAIE,MAAM,GAAGN,gBAAgB,OAAO,CAAC;QACzC,IAAI;YACF,OAAOO,KAAKC,KAAK,CAACJ,OAAO;QAC3B,EAAE,eAAM;YACN,OAAO,CAAC;QACV;IACF;IACA,OAAQA,cAAAA,MAAO,CAAC;AAClB;AAEA,MAAMK,UAAU,CAACC,QACf,OAAOA,UAAU,YAAY,yBAAyBC,IAAI,CAACD;AAS7D;;;CAGC,GACD,eAAeE,KAAKT,GAAoC,EAAEU,GAAU,EAAEC,MAAc,EAAEC,IAAiC;QACxFZ,4BAiBIa;QAGnB;IApBd,MAAMC,gBAAgBC,QAAOf,6BAAAA,IAAIgB,OAAO,CAACF,aAAa,YAAzBd,6BAA6B;IAC1D,MAAMiB,QAAQH,cAAcI,UAAU,CAAC,aAAaJ,cAAcK,KAAK,CAAC,UAAUhB,MAAM,IAAI;IAC5F,IAAI,CAACc,OAAO,OAAO,AAAKP,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB,IAAI;IAC5E,IAAIC;IACJ,IAAI;QACFA,UAAU,MAAMX,KAAKY,aAAa,CAACP;IACrC,EAAE,OAAOK,OAAO;QACd,4EAA4E;QAC5E,IAAI,CAAC5C,iBAAiB4C,QAAQ,MAAMA;QACpC,OAAO,AAAKZ,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA4B,IAAI;IAC5E;IACA,MAAMG,QAAQF,OAAO,CAAC,QAAQ,KAAK;IACnC,IAAI,CAACE,SAASF,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAACtC,uBAAuBsC,UAAmB;QAC7F,OAAO,AAAKb,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA4C,IAAI;IAC5F;IACA,MAAMT,OAAO,MAAMD,KAAKc,SAAS,GAAGC,UAAU,CAAC,SAASC,GAAG,CAACjB,QAAQkB,GAAG;IACvE,IAAI,CAAChB,KAAKiB,MAAM,EAAE,OAAO,AAAKpB,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAe,IAAI;IAC/E,IAAI,CAACG,SAAS,CAAC7C,iBAAiB,EAACiC,YAAAA,KAAKgB,GAAG,CAAC,0BAAThB,YAA2B,CAAC,EAAE,CAACU,QAAQQ,GAAG,CAAC,GAAG;QAC7E,OAAO,AAAKrB,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO1B;QAAa,IAAI;IAC7D;IACA,MAAMoC,eAAQ,QAAA,MAAMpB,KAAKqB,UAAU,CAACtB,4BAAvB,AAAC,MAAgCqB,GAAG,mBAAI,CAAC;IACtD,MAAME,SAAS,MAAMtB,KAAKuB,QAAQ,CAAC;QAAEV;QAAOM,KAAKR,QAAQQ,GAAG;QAAEC,KAAKA;QAAcnB,MAAMA,KAAKuB,IAAI;QAAaC,SAAS;YAAEC,QAAQ;QAAO;IAAW;IAClJ,IAAIJ,QAAQ,OAAO,AAAKxB,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAA+C,IAAI;IACzG,OAAO;QAAES,KAAKR,QAAQQ,GAAG;QAAEN;QAAOZ;QAAMmB;IAAI;AAC9C;AAEA,+GAA+G,GAC/G,SAASO,YAAYb,SAAoB,EAAEf,MAAc;IACvD,OAAO;QACL6B,KAAKd,UAAUC,UAAU,CAAC,iBAAiBC,GAAG,CAACjD;QAC/CyD,MAAM;YAAEzB;YAAQ8B,OAAO;gBAAC;aAAI;YAAEC,WAAWxD,WAAWyD,eAAe;YAAIC,UAAU;YAAGC,YAAY;QAAK;IACvG;AACF;AAEA,eAAeC,YAAYlC,IAAiC,EAAED,MAAc,EAAEoC,KAA0C,EAAEC,MAAc;IACtI,MAAMC,UAAU,MAAMrC,KAAKsC,SAAS,CAAC;QAAEC,SAAS;YAACxC;SAAO;QAAEqC;IAAO,GAAGI,KAAK,CAAC,IAAO,CAAA;YAAEC,UAAU;QAAM,CAAA;IACnG,IAAIJ,QAAQI,QAAQ,EAAE,MAAMN,MAAMO,MAAM,GAAGF,KAAK,CAAC,IAAMG;AACzD;AAEA,SAASC,SAAS5C,IAAuB;QAE1BA,iBACIA,qBACHA,kBACFA,gBACCA,iBACNA;IANP,OAAO;QACLc,SAAS,GAAEd,kBAAAA,KAAKc,SAAS,YAAdd,kBAAmB,IAAM9B,cAAc2E,GAAG,GAAG/B,SAAS;QACjEF,aAAa,GAAEZ,sBAAAA,KAAKY,aAAa,YAAlBZ,sBAAuB,CAACK,QAAUnC,cAAc2E,GAAG,GAAGC,IAAI,GAAGlC,aAAa,CAACP;QAC1FgB,UAAU,GAAErB,mBAAAA,KAAKqB,UAAU,YAAfrB,mBAAoB,CAACD,SAAW3B,cAAc2B;QAC1DwB,QAAQ,GAAEvB,iBAAAA,KAAKuB,QAAQ,YAAbvB,iBAAkB,CAAC+C,UAAY5E,mBAAmB4E;QAC5DT,SAAS,GAAEtC,kBAAAA,KAAKsC,SAAS,YAAdtC,kBAAkB/B;QAC7B+E,GAAG,GAAEhD,YAAAA,KAAKgD,GAAG,YAARhD,YAAa,IAAMiD,KAAKD,GAAG;IAClC;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASE,yBAAyBH,UAA6B,CAAC,CAAC;IACtE,OAAO,OAAO3D,KAAKU;QACjB,IAAIV,IAAIsC,MAAM,KAAK,QAAQ,OAAO5B,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACrF,MAAMV,OAAO4C,SAASG;QACtB,MAAMzD,OAAOH,OAAOC;QACpB,MAAMW,SAAST,IAAI,CAAC,SAAS;QAC7B,MAAM6D,YAAY7D,IAAI,CAAC,YAAY;QACnC,MAAM8D,UAAU9D,IAAI,CAAC,UAAU;QAC/B,IAAI,CAACI,QAAQK,WAAW,CAACL,QAAQyD,cAAc,CAACC,WAAW,OAAOA,YAAY,YAAY,CAACC,MAAMC,OAAO,CAACF,QAAQG,QAAQ,GAAG;YAC1H,OAAOzD,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAwC;QAC/E;QACA,IAAI,OAAO0C,QAAQI,IAAI,KAAK,YAAY,CAACJ,QAAQI,IAAI,CAACC,IAAI,IAAI,OAAO3D,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA2B;QAC9H,IAAI;YACF,MAAMgD,OAAO,MAAM7D,KAAKT,KAAKU,KAAKC,QAAQC;YAC1C,IAAI,CAAC0D,MAAM;YACX,MAAMC,QAAQ3D,KAAKgD,GAAG;YACtB,MAAMY,SAASlF,kBAAkB0E,SAASO;YAC1C,MAAME,UAAUhF,gBAAgB+E;YAChC,IAAIC,SAAS,OAAO/D,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOmD;YAAQ;YAC1D,MAAMC,KAAK9D,KAAKc,SAAS;YACzB,MAAMiD,UAAUD,GAAG/C,UAAU,CAAC,SAASC,GAAG,CAACjB;YAC3C,MAAMiE,WAAWD,QAAQhD,UAAU,CAAC;YACpC,MAAMkD,aAAaD,SAAShD,GAAG,CAACmC;YAChC,MAAMe,aAAaH,QAAQhD,UAAU,CAAC,eAAeoD,KAAK,CAAC,QAAQ,MAAM,WAAWA,KAAK,CAAC,QAAQ,MAAM;YACxG,MAAMC,SAASzC,YAAYmC,IAAI/D;YAC/B,MAAMsE,SAAS/E,IAAI,CAAC,SAAS,KAAK;YAClC,MAAMgF,SAAS,MAAMR,GAAGS,cAAc,CAAC,OAAOC;gBAC5C,MAAM,CAACC,UAAUC,MAAM,GAAG,MAAMC,QAAQC,GAAG,CAAC;oBAACJ,GAAGvD,GAAG,CAACgD;oBAAaO,GAAGvD,GAAG,CAACiD;iBAAY;gBACpF,MAAMW,aAAa;oBACjBC,eAAevG,qBACbE,uBAAuBmF,QAAQR,UAC/BsB,MAAMK,IAAI,CAACC,GAAG,CAAC,CAAChE,MAAQrC,uBAAuBqC,IAAIiE,EAAE,EAAEjE,IAAIQ,IAAI;gBAEnE;gBACA,IAAI6C,QAAQ;oBACV,IAAII,SAASvD,MAAM,EAAE,OAAO;wBAAEV,QAAQ;wBAAKlB,MAAM;4BAAE4F,IAAI;4BAAMD,IAAI9B;4BAAWgC,UAAU;wBAAK;oBAAE;oBAC7F,MAAMC,QAAQtG,YAAY4E,KAAKtC,GAAG;oBAClC,IAAIgE,OAAO,OAAO;wBAAE5E,QAAQ4E,MAAM5E,MAAM;wBAAElB,MAAM;4BAAEoB,OAAO0E,MAAM1E,KAAK;wBAAC;oBAAE;oBACvE,MAAM2E,OAAO,AAAC,CAAA,MAAMb,GAAGvD,GAAG,CAAC+C,SAASsB,KAAK,GAAE,EAAG9D,IAAI,GAAG8D,KAAK;oBAC1D,MAAMC,OAAOxG,YAAY2E,KAAKtC,GAAG,EAAWoE,OAAOH,SAAS;oBAC5D,IAAIE,MAAM,OAAO;wBAAE/E,QAAQ+E,KAAK/E,MAAM;wBAAElB,MAAM;4BAAEoB,OAAO6E,KAAK7E,KAAK;wBAAC;oBAAE;oBACpE8D,GAAGH,MAAM,CAACJ,YAAY,aACjBL,QACAiB;wBACHY,aAAa9B;wBACb+B,WAAW;wBACX5D,WAAWxD,WAAWyD,eAAe;wBACrC4D,WAAWrH,WAAWyD,eAAe;wBACrC6D,WAAWlC,KAAKvC,GAAG;;gBAEvB,OAAO;wBAGiBsD;oBAFtB,IAAI,CAACA,SAASvD,MAAM,IAAIuD,SAASxD,GAAG,CAAC,cAAc,OAAO;wBAAET,QAAQ;wBAAKlB,MAAM;4BAAEoB,OAAO;wBAA2B;oBAAE;oBACrH8D,GAAGqB,GAAG,CAAC5B,YAAY,aACd6B,kBAAiBrB,iBAAAA,SAASjD,IAAI,cAAbiD,iBAAmB,CAAC,GAAGrB,UACxC5E,iBAAiBoF,QAAQa,SAASxD,GAAG,CAAC,gBACtC4D;wBACHc,WAAWrH,WAAWyD,eAAe;;gBAEzC;gBACAyC,GAAGqB,GAAG,CAACzB,OAAOxC,GAAG,EAAEwC,OAAO5C,IAAI;gBAC9B,OAAO;oBAAEhB,QAAQ;oBAAKlB,MAAM;wBAAE4F,IAAI;wBAAMD,IAAI9B;wBAAWgC,UAAU;oBAAM;gBAAE;YAC3E;YACA,IAAIb,OAAO9D,MAAM,KAAK,OAAO,CAAC,AAAC8D,OAAOhF,IAAI,CAA4B6F,QAAQ,EAAE;gBAC9E,MAAMjD,YAAYlC,MAAMD,QAAQqE,OAAOxC,GAAG,EAAE;YAC9C;YACA,OAAO9B,IAAIU,MAAM,CAAC8D,OAAO9D,MAAM,EAAEC,IAAI,CAAC6D,OAAOhF,IAAI;QACnD,EAAE,OAAOoB,OAAO;YACdqF,QAAQrF,KAAK,CAAC,4BAA4BA;YAC1C,OAAOZ,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAiC;QACxE;IACF;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASoF,iBAAiBE,MAA+B,EAAEC,KAA8B;IAC9F,OAAOC,OAAOC,WAAW,CACvBD,OAAOE,OAAO,CAACJ,QAAQK,MAAM,CAC3B,CAAC,CAACC,KAAK3G,MAAM,GAAK,CAAE2G,CAAAA,OAAOL,KAAI,KAAM,QAAQtG,yBAAD,AAACA,MAAuC4G,MAAM,MAAK;AAGrG;AAEA,2FAA2F,GAC3F,OAAO,SAASC,eAAerF,GAAW,EAAEmF,GAAW;IACrD,OAAO,SAASzI,WAAW,UAAU4I,MAAM,CAAC,GAAGtF,IAAI,CAAC,EAAEmF,KAAK,EAAEI,MAAM,CAAC,OAAOnG,KAAK,CAAC,GAAG;AACtF;AAEA;;;;;CAKC,GACD,OAAO,SAASoG,0BAA0B5D,UAA6B,CAAC,CAAC;IACvE,OAAO,OAAO3D,KAAKU;YAOEV;QANnB,IAAIA,IAAIsC,MAAM,KAAK,QAAQ,OAAO5B,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACrF,MAAMV,OAAO4C,SAASG;QACtB,MAAMzD,OAAOH,OAAOC;QACpB,MAAMW,SAAST,IAAI,CAAC,SAAS;QAC7B,MAAM6D,YAAY7D,IAAI,CAAC,YAAY;QACnC,MAAMsH,YAAYtH,IAAI,CAAC,YAAY;QACnC,MAAMgH,MAAMnG,QAAOf,8BAAAA,IAAIgB,OAAO,CAAC,kBAAkB,YAA9BhB,8BAAkC,IAAIqE,IAAI,GAAGlD,KAAK,CAAC,GAAG;QACzE,MAAM6B,SAAS9C,IAAI,CAAC,SAAS;QAC7B,MAAMuH,QAAQC,KAAKC,KAAK,CAACvB,OAAOlG,IAAI,CAAC,QAAQ;QAC7C,MAAM0H,aAAa,OAAO1H,IAAI,CAAC,aAAa,KAAK,YAAYA,IAAI,CAAC,aAAa,GAAGA,IAAI,CAAC,aAAa,GAAGqD;QACvG,IAAI,CAACjD,QAAQK,WAAW,CAACL,QAAQyD,cAAc,OAAOyD,cAAc,YAAY,CAACA,WAAW;YAC1F,OAAO9G,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAmC;QAC1E;QACA,IAAI,CAAC4F,KAAK,OAAOxG,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA0B;QACzE,IAAI,CAACxB,qBAAqB+H,QAAQ,CAAC7E,SAAS,OAAOtC,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiB;QAClG,IAAI,CAAC8E,OAAO0B,QAAQ,CAACL,UAAUA,UAAU,GAAG,OAAO/G,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA0B;QAC3G,IAAI;YACF,MAAMgD,OAAO,MAAM7D,KAAKT,KAAKU,KAAKC,QAAQC;YAC1C,IAAI,CAAC0D,MAAM;YACX,MAAMI,KAAK9D,KAAKc,SAAS;YACzB,MAAMiD,UAAUD,GAAG/C,UAAU,CAAC,SAASC,GAAG,CAACjB;YAC3C,MAAMkE,aAAaF,QAAQhD,UAAU,CAAC,YAAYC,GAAG,CAACmC;YACtD,MAAMgE,YAAYpD,QAAQhD,UAAU,CAAC,wBAAwBC,GAAG,CAACwF,eAAe9C,KAAKvC,GAAG,EAAEmF;YAC1F,MAAMlC,SAASzC,YAAYmC,IAAI/D;YAC/B,MAAMuE,SAAS,MAAMR,GAAGS,cAAc,CAAC,OAAOC;oBAOtCpB,mBAQ8D;gBAdpE,MAAM,CAACgE,QAAQpB,OAAO,GAAG,MAAMrB,QAAQC,GAAG,CAAC;oBAACJ,GAAGvD,GAAG,CAACkG;oBAAY3C,GAAGvD,GAAG,CAACgD;iBAAY;gBAClF,IAAImD,OAAOlG,MAAM,EAAE;wBACkD8E;oBAAnE,OAAO;wBAAExF,QAAQ;wBAAKlB,MAAM;4BAAE4F,IAAI;4BAAMC,UAAU;4BAAMkC,SAAS,GAAErB,cAAAA,OAAO/E,GAAG,CAAC,wBAAX+E,cAA2B;wBAAK;oBAAE;gBACvG;gBACA,IAAI,CAACA,OAAO9E,MAAM,IAAI8E,OAAO/E,GAAG,CAAC,cAAc,OAAO;oBAAET,QAAQ;oBAAKlB,MAAM;wBAAEoB,OAAO;oBAA2B;gBAAE;gBACjH,MAAM0C,UAAU4C,OAAOxE,IAAI;gBAC3B,IAAI,CAAC,EAAC4B,oBAAAA,QAAQG,QAAQ,YAAhBH,oBAAoB,EAAE,EAAEkE,IAAI,CAAC,CAACC,UAAYA,QAAQtC,EAAE,KAAK2B,YAAY;oBACzE,OAAO;wBAAEpG,QAAQ;wBAAKlB,MAAM;4BAAEoB,OAAO;wBAA4C;oBAAE;gBACrF;gBACA,MAAM8G,QAAQ5I,qBAAqBwE,SAASD,WAAW;oBAAEyD;oBAAWC;oBAAOzE;oBAAQ4E;gBAAW,GAAGhH,KAAKgD,GAAG;gBACzG,IAAI,CAACwE,OAAO,OAAO;oBAAEhH,QAAQ;oBAAKlB,MAAM;wBAAEoB,OAAO;oBAA0B;gBAAE;gBAC7E8D,GAAGiC,MAAM,CAACxC,YAAYuD,MAAMf,MAAM;gBAClCjC,GAAGH,MAAM,CAAC8C,WAAWK,MAAMJ,MAAM;gBACjC5C,GAAGqB,GAAG,CAACzB,OAAOxC,GAAG,EAAEwC,OAAO5C,IAAI;gBAC9B,OAAO;oBAAEhB,QAAQ;oBAAKlB,MAAM;wBAAE4F,IAAI;wBAAMC,UAAU;wBAAOkC,SAAS,GAAE,0BAAA,AAACG,MAAMf,MAAM,CAA6BY,SAAS,YAAnD,0BAAuD;oBAAK;gBAAE;YACpI;YACA,IAAI/C,OAAO9D,MAAM,KAAK,OAAO,CAAC,AAAC8D,OAAOhF,IAAI,CAA4B6F,QAAQ,EAAE;gBAC9E,MAAMjD,YAAYlC,MAAMD,QAAQqE,OAAOxC,GAAG,EAAE;YAC9C;YACA,OAAO9B,IAAIU,MAAM,CAAC8D,OAAO9D,MAAM,EAAEC,IAAI,CAAC6D,OAAOhF,IAAI;QACnD,EAAE,OAAOoB,OAAO;YACdqF,QAAQrF,KAAK,CAAC,6BAA6BA;YAC3C,OAAOZ,IAAIU,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA8B;QACrE;IACF;AACF;AAEA,OAAO,MAAM+G,qBAAqBvE,2BAA0B;AAC5D,OAAO,MAAMwE,sBAAsBf,4BAA2B"}

package/src/lib/server/refund.js

@@ -342,6 +342,9 @@ import { posRegisterRefundAuthority } from "./pos-refund-authority.js";
                     hostId,
                     orderId,
                     kind: 'commerce-refund',
+                    // The site, as every claim names its scope: the staff claims list
+                    // sorts by `scopeId`, and an `orderBy` drops a claim without it.
+                    scopeId: hostId,
                     status: 'pending',
                     createdAt: firebaseAdmin.firestore.FieldValue.serverTimestamp(),
                     createdAtMs: Date.now(),