@aglyn/plugins-commerce 1.0.0-beta.232 → 1.0.0-beta.233

package/src/lib/server/local-fulfillment-status.js

@@ -0,0 +1,379 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { pluginShippingRateQuoter } from "@aglyn/aglyn/plugin-manager/plugin-shipping-rates";
+import { createResourceUid } from "@aglyn/aglyn/server";
+import * as Aglyn from "@aglyn/aglyn/server";
+import { firebaseAdmin, getOrgForHost } from "@aglyn/tenant-data-admin";
+import { isRefusedIdToken } from "@aglyn/tenant-data-admin/server/id-token-refusal";
+import * as CommerceModel from "../model/index.js";
+import { ORDER_DELIVERED_EVENT, ORDER_FULFILLED_EVENT } from "../model/order-events.js";
+import { notifyOrderBuyer } from "./order-notifications.js";
+import { fulfillmentEventView, stageOrderEvent } from "./order-events.js";
+import { placeDeliveryAddress } from "./local-fulfillment.js";
+const PICKUP_ACTIONS = [
+    'ready',
+    'preparing',
+    'picked_up'
+];
+const DELIVERY_ACTIONS = [
+    'out_for_delivery',
+    'delivered',
+    'delivery_failed'
+];
+const NOTE_MAX = 200;
+/**
+ * Moves one order a step. The transaction, with NO authorization — the
+ * caller has already proven the member may.
+ */ export async function moveLocalFulfillment(request) {
+    const { hostId, orderId, action } = request;
+    const firestore = firebaseAdmin.app().firestore();
+    const orderRef = firestore.collection('hosts').doc(hostId).collection('orders').doc(orderId);
+    return firestore.runTransaction(async (transaction)=>{
+        var _snapshot_data, _request_nowMs;
+        const snapshot = await transaction.get(orderRef);
+        if (!snapshot.exists) return {
+            outcome: 'no_such_order'
+        };
+        const raw = (_snapshot_data = snapshot.data()) != null ? _snapshot_data : {};
+        const order = CommerceModel.liftLegacyOrder(raw);
+        const atMs = (_request_nowMs = request.nowMs) != null ? _request_nowMs : Date.now();
+        const isPickup = PICKUP_ACTIONS.includes(action);
+        if (isPickup ? order.fulfillmentMethod !== 'pickup' || !order.pickup : order.fulfillmentMethod !== 'local_delivery' || !order.localDelivery) {
+            return {
+                outcome: 'wrong_method'
+            };
+        }
+        // Nothing to hand over on an order that was cancelled or refunded.
+        if (order.status === 'cancelled' || order.status === 'refunded' || order.status === 'pending') {
+            return {
+                outcome: 'blocked',
+                from: order.status
+            };
+        }
+        const handover = action === 'picked_up' || action === 'delivered';
+        let next;
+        let detail;
+        let event;
+        let notify;
+        let status = order.status;
+        if (isPickup) {
+            var _request_pickedUpBy;
+            const pickup = order.pickup;
+            const from = CommerceModel.orderPickupStatus(pickup.status);
+            const to = action;
+            if (from === to) return {
+                outcome: 'already'
+            };
+            if (!CommerceModel.canTransitionPickup(from, to)) return {
+                outcome: 'blocked',
+                from: CommerceModel.ORDER_PICKUP_STATUS_LABELS[from]
+            };
+            const pickedUpBy = String((_request_pickedUpBy = request.pickedUpBy) != null ? _request_pickedUpBy : '').trim().slice(0, NOTE_MAX);
+            const updated = _extends({}, pickup, {
+                status: to,
+                updatedAtMs: atMs
+            }, to === 'ready' ? {
+                readyAtMs: atMs
+            } : {}, to === 'picked_up' ? _extends({
+                pickedUpAtMs: atMs
+            }, pickedUpBy ? {
+                pickedUpBy
+            } : {}) : {});
+            if (to === 'preparing') delete updated.readyAtMs;
+            next = {
+                pickup: updated
+            };
+            event = to === 'ready' ? 'ready-for-pickup' : to === 'picked_up' ? 'picked-up' : 'pickup-preparing';
+            detail = to === 'ready' ? `Ready for pickup at ${pickup.locationName}` : to === 'picked_up' ? `Picked up at ${pickup.locationName}${pickedUpBy ? ` by ${pickedUpBy}` : ''}` : 'Back to preparing';
+            notify = to === 'ready' ? 'ready_for_pickup' : to === 'picked_up' ? 'picked_up' : null;
+        } else {
+            var _request_reason;
+            const delivery = order.localDelivery;
+            const from = CommerceModel.orderLocalDeliveryStatus(delivery.status);
+            const to = action === 'delivery_failed' ? 'failed' : action;
+            if (from === to) return {
+                outcome: 'already'
+            };
+            if (!CommerceModel.canTransitionLocalDelivery(from, to)) {
+                return {
+                    outcome: 'blocked',
+                    from: CommerceModel.ORDER_LOCAL_DELIVERY_STATUS_LABELS[from]
+                };
+            }
+            const reason = String((_request_reason = request.reason) != null ? _request_reason : '').trim().slice(0, NOTE_MAX);
+            const updated = _extends({}, delivery, {
+                status: to,
+                updatedAtMs: atMs
+            }, to === 'out_for_delivery' ? {
+                outForDeliveryAtMs: atMs
+            } : {}, to === 'delivered' ? {
+                deliveredAtMs: atMs
+            } : {}, to === 'failed' ? _extends({
+                failedAtMs: atMs
+            }, reason ? {
+                failedReason: reason
+            } : {}) : {});
+            next = {
+                localDelivery: updated
+            };
+            event = to === 'out_for_delivery' ? 'out-for-delivery' : to === 'delivered' ? 'delivered-locally' : 'delivery-failed';
+            detail = to === 'out_for_delivery' ? 'Out for delivery' : to === 'delivered' ? 'Delivered by the store' : `Delivery failed${reason ? `: ${reason}` : ''}`;
+            notify = to === 'out_for_delivery' ? 'out_for_delivery' : to === 'delivered' ? 'delivered' : null;
+        }
+        let timeline = CommerceModel.appendOrderEvent(order, event, detail, atMs);
+        let fulfillment = null;
+        if (handover) {
+            var _order_fulfillments;
+            // Every unit still open, whatever it is: the buyer has the whole order.
+            const lines = CommerceModel.orderLineFulfillmentStates(order).filter((state)=>state.remainingQuantity > 0).map((state)=>({
+                    lineItemId: state.lineItemId,
+                    quantity: state.remainingQuantity
+                }));
+            if (lines.length) {
+                fulfillment = {
+                    id: createResourceUid(),
+                    lineItemIds: lines.map((entry)=>entry.lineItemId),
+                    lines,
+                    status: 'active',
+                    handover: isPickup ? 'pickup' : 'local_delivery',
+                    // The buyer is told by this route's own message, never "shipped".
+                    notify: false,
+                    atMs
+                };
+            }
+            const fulfillments = [
+                ...(_order_fulfillments = order.fulfillments) != null ? _order_fulfillments : [],
+                ...fulfillment ? [
+                    fulfillment
+                ] : []
+            ];
+            const fulfilled = CommerceModel.statusFromFulfillments({
+                lineItems: order.lineItems,
+                fulfillments
+            });
+            const through = fulfilled === 'paid' ? 'fulfilled' : fulfilled;
+            if (order.status === 'delivered') {
+                // Marked delivered by hand already: the handover only records itself.
+                status = 'delivered';
+            } else {
+                if (through !== order.status && !CommerceModel.canTransitionOrder(order.status, through)) {
+                    return {
+                        outcome: 'blocked',
+                        from: order.status
+                    };
+                }
+                status = CommerceModel.canTransitionOrder(through, 'delivered') ? 'delivered' : through;
+            }
+            if (fulfillment) {
+                timeline = [
+                    ...timeline,
+                    {
+                        atMs,
+                        event: 'fulfilled',
+                        detail: isPickup ? 'Handed over at pickup' : 'Handed over on delivery'
+                    }
+                ];
+            }
+            if (status === 'delivered') timeline = [
+                ...timeline,
+                {
+                    atMs,
+                    event: 'delivered'
+                }
+            ];
+            next = _extends({}, next, {
+                fulfillments
+            });
+        }
+        const written = _extends({}, next, {
+            status,
+            updatedAtMs: atMs,
+            timeline
+        });
+        const listFields = CommerceModel.orderLocalFulfillmentListFields(_extends({}, order, written));
+        transaction.update(orderRef, _extends({}, written, listFields != null ? listFields : {}));
+        const after = _extends({}, raw, written);
+        if (fulfillment) {
+            stageOrderEvent(transaction, ORDER_FULFILLED_EVENT, {
+                hostId,
+                orderId,
+                key: fulfillment.id,
+                order: after,
+                extra: {
+                    fulfillment: fulfillmentEventView(order, fulfillment)
+                }
+            });
+        }
+        if (status === 'delivered' && order.status !== 'delivered') {
+            stageOrderEvent(transaction, ORDER_DELIVERED_EVENT, {
+                hostId,
+                orderId,
+                key: 'delivered',
+                order: after
+            });
+        }
+        return {
+            outcome: 'updated',
+            status,
+            notify
+        };
+    });
+}
+function readBody(req) {
+    if (typeof req.body === 'string') {
+        try {
+            const parsed = JSON.parse(req.body || '{}');
+            return parsed && typeof parsed === 'object' ? parsed : {};
+        } catch (unused) {
+            return {};
+        }
+    }
+    return req.body && typeof req.body === 'object' ? req.body : {};
+}
+const badId = (value)=>!value || value.includes('/') || /^__.*__$/.test(value);
+export const localFulfillmentHandler = async (req, res)=>{
+    var _req_headers_authorization, _req_query, _body_hostId, _body_action, _body_orderId;
+    if (req.method !== 'POST' && req.method !== 'GET') {
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const authorization = String((_req_headers_authorization = req.headers.authorization) != null ? _req_headers_authorization : '');
+    if (!authorization.startsWith('Bearer ')) return res.status(401).json({
+        error: 'Unauthenticated'
+    });
+    const body = req.method === 'POST' ? readBody(req) : (_req_query = req.query) != null ? _req_query : {};
+    const hostId = String((_body_hostId = body['hostId']) != null ? _body_hostId : '');
+    if (badId(hostId)) return res.status(400).json({
+        error: 'Missing hostId'
+    });
+    const action = String((_body_action = body['action']) != null ? _body_action : '');
+    const orderId = String((_body_orderId = body['orderId']) != null ? _body_orderId : '');
+    if (req.method === 'POST' && action !== 'locate') {
+        if (!PICKUP_ACTIONS.includes(action) && !DELIVERY_ACTIONS.includes(action)) {
+            return res.status(400).json({
+                error: 'Unknown action'
+            });
+        }
+        if (badId(orderId)) return res.status(400).json({
+            error: 'Missing orderId'
+        });
+    }
+    let uid;
+    try {
+        uid = (await firebaseAdmin.app().auth().verifyIdToken(authorization.slice('Bearer '.length))).uid;
+    } catch (error) {
+        if (!isRefusedIdToken(error)) throw error;
+        return res.status(401).json({
+            error: 'Unauthenticated'
+        });
+    }
+    try {
+        var _host_get;
+        const hostRef = firebaseAdmin.app().firestore().collection('hosts').doc(hostId);
+        const host = await hostRef.get();
+        if (!host.exists) return res.status(404).json({
+            error: 'Unknown site'
+        });
+        const role = ((_host_get = host.get('memberRoles')) != null ? _host_get : {})[uid];
+        if (role !== 'admin' && role !== 'editor') return res.status(403).json({
+            error: 'Not permitted'
+        });
+        if (req.method === 'GET') {
+            // Distance zones need the store and the buyer placed on a map, which
+            // only the shipping plugin's address check can do here.
+            const quoter = pluginShippingRateQuoter();
+            const radius = Boolean((quoter == null ? void 0 : quoter.validateAddress) && await quoter.available(hostId).catch(()=>false));
+            return res.status(200).json({
+                radius
+            });
+        }
+        const ownerOrg = await getOrgForHost(hostId).catch(()=>null);
+        if (!Aglyn.checkEntitlement(ownerOrg == null ? void 0 : ownerOrg.org, 'commerce')) {
+            return res.status(403).json({
+                error: 'Selling is not enabled on this plan'
+            });
+        }
+        if (action === 'locate') {
+            var _body_locationId;
+            const locationId = String((_body_locationId = body['locationId']) != null ? _body_locationId : '');
+            if (badId(locationId)) return res.status(400).json({
+                error: 'Choose the location deliveries leave from'
+            });
+            const location = await hostRef.collection('locations').doc(locationId).get();
+            const address = CommerceModel.normalizePostalAddress(location.get('postalAddress'));
+            if (!location.exists || !(address == null ? void 0 : address.line1) || !address.postalCode || !address.country) {
+                return res.status(409).json({
+                    error: 'Add a full street address to that location first.'
+                });
+            }
+            const coordinates = await placeDeliveryAddress(hostId, _extends({}, address, {
+                country: address.country
+            }));
+            if (!coordinates) {
+                return res.status(409).json({
+                    error: 'Your address check could not place this address on a map. Use postal-code zones instead.'
+                });
+            }
+            return res.status(200).json({
+                ok: true,
+                origin: coordinates
+            });
+        }
+        const outcome = await moveLocalFulfillment({
+            hostId,
+            orderId,
+            action: action,
+            pickedUpBy: typeof body['pickedUpBy'] === 'string' ? body['pickedUpBy'] : undefined,
+            reason: typeof body['reason'] === 'string' ? body['reason'] : undefined
+        });
+        if (outcome.outcome === 'no_such_order') return res.status(404).json({
+            error: 'Unknown order'
+        });
+        if (outcome.outcome === 'wrong_method') {
+            return res.status(409).json({
+                error: PICKUP_ACTIONS.includes(action) ? 'This order is not a pickup order' : 'This order is not a local delivery order'
+            });
+        }
+        if (outcome.outcome === 'blocked') {
+            return res.status(409).json({
+                error: `This order can’t move on from "${outcome.from}"`
+            });
+        }
+        if (outcome.outcome === 'already') return res.status(200).json({
+            ok: true,
+            already: true
+        });
+        // After the write, never inside it, and never failing it (AGL-3610).
+        if (outcome.notify) await notifyOrderBuyer({
+            hostId,
+            orderId
+        }, outcome.notify);
+        return res.status(200).json({
+            ok: true,
+            status: outcome.status
+        });
+    } catch (error) {
+        // The transaction is all-or-nothing: nothing landed, a retry is safe.
+        console.error('[local-fulfillment] move failed', hostId, orderId, action, error);
+        return res.status(500).json({
+            error: 'The order could not be updated'
+        });
+    }
+};
+
+//# sourceMappingURL=local-fulfillment-status.js.map

package/src/lib/server/local-fulfillment-status.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/local-fulfillment-status.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { pluginShippingRateQuoter } from '@aglyn/aglyn/plugin-manager/plugin-shipping-rates'\nimport { createResourceUid, type PluginApiHandler } from '@aglyn/aglyn/server'\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport { firebaseAdmin, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport { isRefusedIdToken } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport * as CommerceModel from '../model'\nimport { ORDER_DELIVERED_EVENT, ORDER_FULFILLED_EVENT } from '../model/order-events'\nimport { notifyOrderBuyer, type OrderBuyerEvent } from './order-notifications'\nimport { fulfillmentEventView, stageOrderEvent } from './order-events'\nimport { placeDeliveryAddress } from './local-fulfillment'\n\n/**\n * `commerce/local-fulfillment` (AGL-3624): the store moving a pickup or a\n * local delivery along — from the console's queue, the order dialog, or the\n * native Aglyn app, which posts the same body with the member's ID token.\n *\n *   POST { hostId, orderId, action }\n *     pickup:   `ready` · `preparing` (undo a ready) · `picked_up`\n *     delivery: `out_for_delivery` · `delivered` · `delivery_failed`\n *   POST { hostId, action: 'locate' }   places the store on the map for\n *     distance zones, through the shipping plugin's address check\n *   GET  ?hostId                        whether distance zones can work here\n *\n * Every status write is ONE transaction that re-reads the order and re-asks\n * the transition, so a stale queue row or a second device cannot skip a\n * step or hand the same order over twice: a repeat of the move the order\n * already made answers `already` and writes nothing.\n *\n * HANDING OVER IS FULFILLING. `picked_up` and `delivered` record a\n * fulfillment covering every unit still open (marked `handover`, so no\n * \"shipped\" message and no carrier), move the order to `fulfilled` and on to\n * `delivered`, and raise `order.fulfilled` and `order.delivered` exactly as a\n * shipment does — accounting, outbound webhooks and workflows hear the same\n * events whichever way the goods left. No stock moves: it came off the\n * location's shelf when the money landed.\n *\n * The buyer hears about each step through the AGL-3610 notifier, once per\n * step, and only after the write lands.\n *\n * Role gate: `admin` and `editor`, as `fulfill-order.ts`.\n */\n\ntype PickupAction = 'ready' | 'preparing' | 'picked_up'\ntype DeliveryAction = 'out_for_delivery' | 'delivered' | 'delivery_failed'\nexport type LocalFulfillmentAction = PickupAction | DeliveryAction\n\nconst PICKUP_ACTIONS: readonly string[] = ['ready', 'preparing', 'picked_up']\nconst DELIVERY_ACTIONS: readonly string[] = ['out_for_delivery', 'delivered', 'delivery_failed']\n\nexport type LocalFulfillmentOutcome =\n  | { outcome: 'updated'; status: CommerceModel.OrderStatus; notify: OrderBuyerEvent | null }\n  | { outcome: 'already' }\n  | { outcome: 'no_such_order' }\n  /** The order is not a pickup (or not a local delivery) order. */\n  | { outcome: 'wrong_method' }\n  /** The step is not allowed from where the order is; `from` names it. */\n  | { outcome: 'blocked'; from: string }\n\nconst NOTE_MAX = 200\n\n/**\n * Moves one order a step. The transaction, with NO authorization — the\n * caller has already proven the member may.\n */\nexport async function moveLocalFulfillment(request: {\n  hostId: string\n  orderId: string\n  action: LocalFulfillmentAction\n  /** `picked_up`: who collected it, when the counter noted a name. */\n  pickedUpBy?: string\n  /** `delivery_failed`: why. */\n  reason?: string\n  nowMs?: number\n}): Promise<LocalFulfillmentOutcome> {\n  const { hostId, orderId, action } = request\n  const firestore = firebaseAdmin.app().firestore()\n  const orderRef = firestore.collection('hosts').doc(hostId).collection('orders').doc(orderId)\n  return firestore.runTransaction(async (transaction): Promise<LocalFulfillmentOutcome> => {\n    const snapshot = await transaction.get(orderRef)\n    if (!snapshot.exists) return { outcome: 'no_such_order' }\n    const raw = (snapshot.data() ?? {}) as Record<string, unknown>\n    const order = CommerceModel.liftLegacyOrder(raw as never)\n    const atMs = request.nowMs ?? Date.now()\n    const isPickup = PICKUP_ACTIONS.includes(action)\n    if (isPickup ? order.fulfillmentMethod !== 'pickup' || !order.pickup : order.fulfillmentMethod !== 'local_delivery' || !order.localDelivery) {\n      return { outcome: 'wrong_method' }\n    }\n    // Nothing to hand over on an order that was cancelled or refunded.\n    if (order.status === 'cancelled' || order.status === 'refunded' || order.status === 'pending') {\n      return { outcome: 'blocked', from: order.status }\n    }\n\n    const handover = action === 'picked_up' || action === 'delivered'\n    let next: Record<string, unknown>\n    let detail: string\n    let event: string\n    let notify: OrderBuyerEvent | null\n    let status: CommerceModel.OrderStatus = order.status\n\n    if (isPickup) {\n      const pickup = order.pickup as CommerceModel.OrderPickup\n      const from = CommerceModel.orderPickupStatus(pickup.status)\n      const to: CommerceModel.OrderPickupStatus = action as PickupAction\n      if (from === to) return { outcome: 'already' }\n      if (!CommerceModel.canTransitionPickup(from, to)) return { outcome: 'blocked', from: CommerceModel.ORDER_PICKUP_STATUS_LABELS[from] }\n      const pickedUpBy = String(request.pickedUpBy ?? '').trim().slice(0, NOTE_MAX)\n      const updated: CommerceModel.OrderPickup = {\n        ...pickup,\n        status: to,\n        updatedAtMs: atMs,\n        ...(to === 'ready' ? { readyAtMs: atMs } : {}),\n        ...(to === 'picked_up' ? { pickedUpAtMs: atMs, ...(pickedUpBy ? { pickedUpBy } : {}) } : {}),\n      }\n      if (to === 'preparing') delete updated.readyAtMs\n      next = { pickup: updated }\n      event = to === 'ready' ? 'ready-for-pickup' : to === 'picked_up' ? 'picked-up' : 'pickup-preparing'\n      detail =\n        to === 'ready'\n          ? `Ready for pickup at ${pickup.locationName}`\n          : to === 'picked_up'\n            ? `Picked up at ${pickup.locationName}${pickedUpBy ? ` by ${pickedUpBy}` : ''}`\n            : 'Back to preparing'\n      notify = to === 'ready' ? 'ready_for_pickup' : to === 'picked_up' ? 'picked_up' : null\n    } else {\n      const delivery = order.localDelivery as CommerceModel.OrderLocalDelivery\n      const from = CommerceModel.orderLocalDeliveryStatus(delivery.status)\n      const to: CommerceModel.OrderLocalDeliveryStatus =\n        action === 'delivery_failed' ? 'failed' : (action as 'out_for_delivery' | 'delivered')\n      if (from === to) return { outcome: 'already' }\n      if (!CommerceModel.canTransitionLocalDelivery(from, to)) {\n        return { outcome: 'blocked', from: CommerceModel.ORDER_LOCAL_DELIVERY_STATUS_LABELS[from] }\n      }\n      const reason = String(request.reason ?? '').trim().slice(0, NOTE_MAX)\n      const updated: CommerceModel.OrderLocalDelivery = {\n        ...delivery,\n        status: to,\n        updatedAtMs: atMs,\n        ...(to === 'out_for_delivery' ? { outForDeliveryAtMs: atMs } : {}),\n        ...(to === 'delivered' ? { deliveredAtMs: atMs } : {}),\n        ...(to === 'failed' ? { failedAtMs: atMs, ...(reason ? { failedReason: reason } : {}) } : {}),\n      }\n      next = { localDelivery: updated }\n      event = to === 'out_for_delivery' ? 'out-for-delivery' : to === 'delivered' ? 'delivered-locally' : 'delivery-failed'\n      detail =\n        to === 'out_for_delivery'\n          ? 'Out for delivery'\n          : to === 'delivered'\n            ? 'Delivered by the store'\n            : `Delivery failed${reason ? `: ${reason}` : ''}`\n      notify = to === 'out_for_delivery' ? 'out_for_delivery' : to === 'delivered' ? 'delivered' : null\n    }\n\n    let timeline = CommerceModel.appendOrderEvent(order, event, detail, atMs)\n    let fulfillment: CommerceModel.OrderFulfillment | null = null\n    if (handover) {\n      // Every unit still open, whatever it is: the buyer has the whole order.\n      const lines = CommerceModel.orderLineFulfillmentStates(order)\n        .filter((state) => state.remainingQuantity > 0)\n        .map((state) => ({ lineItemId: state.lineItemId, quantity: state.remainingQuantity }))\n      if (lines.length) {\n        fulfillment = {\n          id: createResourceUid(),\n          lineItemIds: lines.map((entry) => entry.lineItemId),\n          lines,\n          status: 'active',\n          handover: isPickup ? 'pickup' : 'local_delivery',\n          // The buyer is told by this route's own message, never \"shipped\".\n          notify: false,\n          atMs,\n        }\n      }\n      const fulfillments = [...(order.fulfillments ?? []), ...(fulfillment ? [fulfillment] : [])]\n      const fulfilled = CommerceModel.statusFromFulfillments({ lineItems: order.lineItems, fulfillments })\n      const through = fulfilled === 'paid' ? 'fulfilled' : fulfilled\n      if (order.status === 'delivered') {\n        // Marked delivered by hand already: the handover only records itself.\n        status = 'delivered'\n      } else {\n        if (through !== order.status && !CommerceModel.canTransitionOrder(order.status, through)) {\n          return { outcome: 'blocked', from: order.status }\n        }\n        status = CommerceModel.canTransitionOrder(through, 'delivered') ? 'delivered' : through\n      }\n      if (fulfillment) {\n        timeline = [...timeline, { atMs, event: 'fulfilled', detail: isPickup ? 'Handed over at pickup' : 'Handed over on delivery' }]\n      }\n      if (status === 'delivered') timeline = [...timeline, { atMs, event: 'delivered' }]\n      next = { ...next, fulfillments }\n    }\n    const written = {\n      ...next,\n      status,\n      updatedAtMs: atMs,\n      timeline,\n    }\n    const listFields = CommerceModel.orderLocalFulfillmentListFields({\n      ...order,\n      ...(written as Partial<CommerceModel.HostOrder>),\n    })\n    transaction.update(orderRef, { ...written, ...(listFields ?? {}) })\n    const after = { ...raw, ...written }\n    if (fulfillment) {\n      stageOrderEvent(transaction, ORDER_FULFILLED_EVENT, {\n        hostId,\n        orderId,\n        key: fulfillment.id,\n        order: after,\n        extra: { fulfillment: fulfillmentEventView(order, fulfillment) },\n      })\n    }\n    if (status === 'delivered' && order.status !== 'delivered') {\n      stageOrderEvent(transaction, ORDER_DELIVERED_EVENT, { hostId, orderId, key: 'delivered', order: after })\n    }\n    return { outcome: 'updated', status, notify }\n  })\n}\n\nfunction readBody(req: Parameters<PluginApiHandler>[0]): Record<string, unknown> {\n  if (typeof req.body === 'string') {\n    try {\n      const parsed = JSON.parse(req.body || '{}')\n      return parsed && typeof parsed === 'object' ? parsed : {}\n    } catch {\n      return {}\n    }\n  }\n  return req.body && typeof req.body === 'object' ? (req.body as Record<string, unknown>) : {}\n}\n\nconst badId = (value: string) => !value || value.includes('/') || /^__.*__$/.test(value)\n\nexport const localFulfillmentHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST' && req.method !== 'GET') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const authorization = String(req.headers.authorization ?? '')\n  if (!authorization.startsWith('Bearer ')) return res.status(401).json({ error: 'Unauthenticated' })\n  const body = req.method === 'POST' ? readBody(req) : ((req.query ?? {}) as Record<string, unknown>)\n  const hostId = String(body['hostId'] ?? '')\n  if (badId(hostId)) return res.status(400).json({ error: 'Missing hostId' })\n  const action = String(body['action'] ?? '')\n  const orderId = String(body['orderId'] ?? '')\n  if (req.method === 'POST' && action !== 'locate') {\n    if (!PICKUP_ACTIONS.includes(action) && !DELIVERY_ACTIONS.includes(action)) {\n      return res.status(400).json({ error: 'Unknown action' })\n    }\n    if (badId(orderId)) return res.status(400).json({ error: 'Missing orderId' })\n  }\n\n  let uid: string\n  try {\n    uid = (await firebaseAdmin.app().auth().verifyIdToken(authorization.slice('Bearer '.length))).uid\n  } catch (error) {\n    if (!isRefusedIdToken(error)) throw error\n    return res.status(401).json({ error: 'Unauthenticated' })\n  }\n  try {\n    const hostRef = firebaseAdmin.app().firestore().collection('hosts').doc(hostId)\n    const host = await hostRef.get()\n    if (!host.exists) return res.status(404).json({ error: 'Unknown site' })\n    const role = (host.get('memberRoles') ?? {})[uid]\n    if (role !== 'admin' && role !== 'editor') return res.status(403).json({ error: 'Not permitted' })\n\n    if (req.method === 'GET') {\n      // Distance zones need the store and the buyer placed on a map, which\n      // only the shipping plugin's address check can do here.\n      const quoter = pluginShippingRateQuoter()\n      const radius = Boolean(\n        quoter?.validateAddress && (await quoter.available(hostId).catch(() => false)),\n      )\n      return res.status(200).json({ radius })\n    }\n\n    const ownerOrg = await getOrgForHost(hostId).catch(() => null)\n    if (!Aglyn.checkEntitlement(ownerOrg?.org as any, 'commerce')) {\n      return res.status(403).json({ error: 'Selling is not enabled on this plan' })\n    }\n\n    if (action === 'locate') {\n      const locationId = String(body['locationId'] ?? '')\n      if (badId(locationId)) return res.status(400).json({ error: 'Choose the location deliveries leave from' })\n      const location = await hostRef.collection('locations').doc(locationId).get()\n      const address = CommerceModel.normalizePostalAddress(location.get('postalAddress'))\n      if (!location.exists || !address?.line1 || !address.postalCode || !address.country) {\n        return res.status(409).json({ error: 'Add a full street address to that location first.' })\n      }\n      const coordinates = await placeDeliveryAddress(hostId, { ...address, country: address.country })\n      if (!coordinates) {\n        return res.status(409).json({\n          error: 'Your address check could not place this address on a map. Use postal-code zones instead.',\n        })\n      }\n      return res.status(200).json({ ok: true, origin: coordinates })\n    }\n\n    const outcome = await moveLocalFulfillment({\n      hostId,\n      orderId,\n      action: action as LocalFulfillmentAction,\n      pickedUpBy: typeof body['pickedUpBy'] === 'string' ? body['pickedUpBy'] : undefined,\n      reason: typeof body['reason'] === 'string' ? body['reason'] : undefined,\n    })\n    if (outcome.outcome === 'no_such_order') return res.status(404).json({ error: 'Unknown order' })\n    if (outcome.outcome === 'wrong_method') {\n      return res.status(409).json({\n        error: PICKUP_ACTIONS.includes(action)\n          ? 'This order is not a pickup order'\n          : 'This order is not a local delivery order',\n      })\n    }\n    if (outcome.outcome === 'blocked') {\n      return res.status(409).json({ error: `This order can’t move on from \"${outcome.from}\"` })\n    }\n    if (outcome.outcome === 'already') return res.status(200).json({ ok: true, already: true })\n    // After the write, never inside it, and never failing it (AGL-3610).\n    if (outcome.notify) await notifyOrderBuyer({ hostId, orderId }, outcome.notify)\n    return res.status(200).json({ ok: true, status: outcome.status })\n  } catch (error) {\n    // The transaction is all-or-nothing: nothing landed, a retry is safe.\n    console.error('[local-fulfillment] move failed', hostId, orderId, action, error)\n    return res.status(500).json({ error: 'The order could not be updated' })\n  }\n}\n"],"names":["pluginShippingRateQuoter","createResourceUid","Aglyn","firebaseAdmin","getOrgForHost","isRefusedIdToken","CommerceModel","ORDER_DELIVERED_EVENT","ORDER_FULFILLED_EVENT","notifyOrderBuyer","fulfillmentEventView","stageOrderEvent","placeDeliveryAddress","PICKUP_ACTIONS","DELIVERY_ACTIONS","NOTE_MAX","moveLocalFulfillment","request","hostId","orderId","action","firestore","app","orderRef","collection","doc","runTransaction","transaction","snapshot","get","exists","outcome","raw","data","order","liftLegacyOrder","atMs","nowMs","Date","now","isPickup","includes","fulfillmentMethod","pickup","localDelivery","status","from","handover","next","detail","event","notify","orderPickupStatus","to","canTransitionPickup","ORDER_PICKUP_STATUS_LABELS","pickedUpBy","String","trim","slice","updated","updatedAtMs","readyAtMs","pickedUpAtMs","locationName","delivery","orderLocalDeliveryStatus","canTransitionLocalDelivery","ORDER_LOCAL_DELIVERY_STATUS_LABELS","reason","outForDeliveryAtMs","deliveredAtMs","failedAtMs","failedReason","timeline","appendOrderEvent","fulfillment","lines","orderLineFulfillmentStates","filter","state","remainingQuantity","map","lineItemId","quantity","length","id","lineItemIds","entry","fulfillments","fulfilled","statusFromFulfillments","lineItems","through","canTransitionOrder","written","listFields","orderLocalFulfillmentListFields","update","after","key","extra","readBody","req","body","parsed","JSON","parse","badId","value","test","localFulfillmentHandler","res","method","json","error","authorization","headers","startsWith","query","uid","auth","verifyIdToken","host","hostRef","role","quoter","radius","Boolean","validateAddress","available","catch","ownerOrg","checkEntitlement","org","locationId","location","address","normalizePostalAddress","line1","postalCode","country","coordinates","ok","origin","undefined","already","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,wBAAwB,QAAQ,oDAAmD;AAC5F,SAASC,iBAAiB,QAA+B,sBAAqB;AAC9E,YAAYC,WAAW,sBAAqB;AAC5C,SAASC,aAAa,EAAEC,aAAa,QAAQ,2BAA0B;AACvE,SAASC,gBAAgB,QAAQ,mDAAkD;AACnF,YAAYC,mBAAmB,oBAAU;AACzC,SAASC,qBAAqB,EAAEC,qBAAqB,QAAQ,2BAAuB;AACpF,SAASC,gBAAgB,QAA8B,2BAAuB;AAC9E,SAASC,oBAAoB,EAAEC,eAAe,QAAQ,oBAAgB;AACtE,SAASC,oBAAoB,QAAQ,yBAAqB;AAqC1D,MAAMC,iBAAoC;IAAC;IAAS;IAAa;CAAY;AAC7E,MAAMC,mBAAsC;IAAC;IAAoB;IAAa;CAAkB;AAWhG,MAAMC,WAAW;AAEjB;;;CAGC,GACD,OAAO,eAAeC,qBAAqBC,OAS1C;IACC,MAAM,EAAEC,MAAM,EAAEC,OAAO,EAAEC,MAAM,EAAE,GAAGH;IACpC,MAAMI,YAAYlB,cAAcmB,GAAG,GAAGD,SAAS;IAC/C,MAAME,WAAWF,UAAUG,UAAU,CAAC,SAASC,GAAG,CAACP,QAAQM,UAAU,CAAC,UAAUC,GAAG,CAACN;IACpF,OAAOE,UAAUK,cAAc,CAAC,OAAOC;YAGxBC,gBAEAX;QAJb,MAAMW,WAAW,MAAMD,YAAYE,GAAG,CAACN;QACvC,IAAI,CAACK,SAASE,MAAM,EAAE,OAAO;YAAEC,SAAS;QAAgB;QACxD,MAAMC,OAAOJ,iBAAAA,SAASK,IAAI,cAAbL,iBAAmB,CAAC;QACjC,MAAMM,QAAQ5B,cAAc6B,eAAe,CAACH;QAC5C,MAAMI,QAAOnB,iBAAAA,QAAQoB,KAAK,YAAbpB,iBAAiBqB,KAAKC,GAAG;QACtC,MAAMC,WAAW3B,eAAe4B,QAAQ,CAACrB;QACzC,IAAIoB,WAAWN,MAAMQ,iBAAiB,KAAK,YAAY,CAACR,MAAMS,MAAM,GAAGT,MAAMQ,iBAAiB,KAAK,oBAAoB,CAACR,MAAMU,aAAa,EAAE;YAC3I,OAAO;gBAAEb,SAAS;YAAe;QACnC;QACA,mEAAmE;QACnE,IAAIG,MAAMW,MAAM,KAAK,eAAeX,MAAMW,MAAM,KAAK,cAAcX,MAAMW,MAAM,KAAK,WAAW;YAC7F,OAAO;gBAAEd,SAAS;gBAAWe,MAAMZ,MAAMW,MAAM;YAAC;QAClD;QAEA,MAAME,WAAW3B,WAAW,eAAeA,WAAW;QACtD,IAAI4B;QACJ,IAAIC;QACJ,IAAIC;QACJ,IAAIC;QACJ,IAAIN,SAAoCX,MAAMW,MAAM;QAEpD,IAAIL,UAAU;gBAMcvB;YAL1B,MAAM0B,SAAST,MAAMS,MAAM;YAC3B,MAAMG,OAAOxC,cAAc8C,iBAAiB,CAACT,OAAOE,MAAM;YAC1D,MAAMQ,KAAsCjC;YAC5C,IAAI0B,SAASO,IAAI,OAAO;gBAAEtB,SAAS;YAAU;YAC7C,IAAI,CAACzB,cAAcgD,mBAAmB,CAACR,MAAMO,KAAK,OAAO;gBAAEtB,SAAS;gBAAWe,MAAMxC,cAAciD,0BAA0B,CAACT,KAAK;YAAC;YACpI,MAAMU,aAAaC,QAAOxC,sBAAAA,QAAQuC,UAAU,YAAlBvC,sBAAsB,IAAIyC,IAAI,GAAGC,KAAK,CAAC,GAAG5C;YACpE,MAAM6C,UAAqC,aACtCjB;gBACHE,QAAQQ;gBACRQ,aAAazB;eACTiB,OAAO,UAAU;gBAAES,WAAW1B;YAAK,IAAI,CAAC,GACxCiB,OAAO,cAAc;gBAAEU,cAAc3B;eAAUoB,aAAa;gBAAEA;YAAW,IAAI,CAAC,KAAO,CAAC;YAE5F,IAAIH,OAAO,aAAa,OAAOO,QAAQE,SAAS;YAChDd,OAAO;gBAAEL,QAAQiB;YAAQ;YACzBV,QAAQG,OAAO,UAAU,qBAAqBA,OAAO,cAAc,cAAc;YACjFJ,SACEI,OAAO,UACH,CAAC,oBAAoB,EAAEV,OAAOqB,YAAY,EAAE,GAC5CX,OAAO,cACL,CAAC,aAAa,EAAEV,OAAOqB,YAAY,GAAGR,aAAa,CAAC,IAAI,EAAEA,YAAY,GAAG,IAAI,GAC7E;YACRL,SAASE,OAAO,UAAU,qBAAqBA,OAAO,cAAc,cAAc;QACpF,OAAO;gBASiBpC;YARtB,MAAMgD,WAAW/B,MAAMU,aAAa;YACpC,MAAME,OAAOxC,cAAc4D,wBAAwB,CAACD,SAASpB,MAAM;YACnE,MAAMQ,KACJjC,WAAW,oBAAoB,WAAYA;YAC7C,IAAI0B,SAASO,IAAI,OAAO;gBAAEtB,SAAS;YAAU;YAC7C,IAAI,CAACzB,cAAc6D,0BAA0B,CAACrB,MAAMO,KAAK;gBACvD,OAAO;oBAAEtB,SAAS;oBAAWe,MAAMxC,cAAc8D,kCAAkC,CAACtB,KAAK;gBAAC;YAC5F;YACA,MAAMuB,SAASZ,QAAOxC,kBAAAA,QAAQoD,MAAM,YAAdpD,kBAAkB,IAAIyC,IAAI,GAAGC,KAAK,CAAC,GAAG5C;YAC5D,MAAM6C,UAA4C,aAC7CK;gBACHpB,QAAQQ;gBACRQ,aAAazB;eACTiB,OAAO,qBAAqB;gBAAEiB,oBAAoBlC;YAAK,IAAI,CAAC,GAC5DiB,OAAO,cAAc;gBAAEkB,eAAenC;YAAK,IAAI,CAAC,GAChDiB,OAAO,WAAW;gBAAEmB,YAAYpC;eAAUiC,SAAS;gBAAEI,cAAcJ;YAAO,IAAI,CAAC,KAAO,CAAC;YAE7FrB,OAAO;gBAAEJ,eAAegB;YAAQ;YAChCV,QAAQG,OAAO,qBAAqB,qBAAqBA,OAAO,cAAc,sBAAsB;YACpGJ,SACEI,OAAO,qBACH,qBACAA,OAAO,cACL,2BACA,CAAC,eAAe,EAAEgB,SAAS,CAAC,EAAE,EAAEA,QAAQ,GAAG,IAAI;YACvDlB,SAASE,OAAO,qBAAqB,qBAAqBA,OAAO,cAAc,cAAc;QAC/F;QAEA,IAAIqB,WAAWpE,cAAcqE,gBAAgB,CAACzC,OAAOgB,OAAOD,QAAQb;QACpE,IAAIwC,cAAqD;QACzD,IAAI7B,UAAU;gBAiBcb;YAhB1B,wEAAwE;YACxE,MAAM2C,QAAQvE,cAAcwE,0BAA0B,CAAC5C,OACpD6C,MAAM,CAAC,CAACC,QAAUA,MAAMC,iBAAiB,GAAG,GAC5CC,GAAG,CAAC,CAACF,QAAW,CAAA;oBAAEG,YAAYH,MAAMG,UAAU;oBAAEC,UAAUJ,MAAMC,iBAAiB;gBAAC,CAAA;YACrF,IAAIJ,MAAMQ,MAAM,EAAE;gBAChBT,cAAc;oBACZU,IAAIrF;oBACJsF,aAAaV,MAAMK,GAAG,CAAC,CAACM,QAAUA,MAAML,UAAU;oBAClDN;oBACAhC,QAAQ;oBACRE,UAAUP,WAAW,WAAW;oBAChC,kEAAkE;oBAClEW,QAAQ;oBACRf;gBACF;YACF;YACA,MAAMqD,eAAe;oBAAKvD,sBAAAA,MAAMuD,YAAY,YAAlBvD,sBAAsB,EAAE;mBAAO0C,cAAc;oBAACA;iBAAY,GAAG,EAAE;aAAE;YAC3F,MAAMc,YAAYpF,cAAcqF,sBAAsB,CAAC;gBAAEC,WAAW1D,MAAM0D,SAAS;gBAAEH;YAAa;YAClG,MAAMI,UAAUH,cAAc,SAAS,cAAcA;YACrD,IAAIxD,MAAMW,MAAM,KAAK,aAAa;gBAChC,sEAAsE;gBACtEA,SAAS;YACX,OAAO;gBACL,IAAIgD,YAAY3D,MAAMW,MAAM,IAAI,CAACvC,cAAcwF,kBAAkB,CAAC5D,MAAMW,MAAM,EAAEgD,UAAU;oBACxF,OAAO;wBAAE9D,SAAS;wBAAWe,MAAMZ,MAAMW,MAAM;oBAAC;gBAClD;gBACAA,SAASvC,cAAcwF,kBAAkB,CAACD,SAAS,eAAe,cAAcA;YAClF;YACA,IAAIjB,aAAa;gBACfF,WAAW;uBAAIA;oBAAU;wBAAEtC;wBAAMc,OAAO;wBAAaD,QAAQT,WAAW,0BAA0B;oBAA0B;iBAAE;YAChI;YACA,IAAIK,WAAW,aAAa6B,WAAW;mBAAIA;gBAAU;oBAAEtC;oBAAMc,OAAO;gBAAY;aAAE;YAClFF,OAAO,aAAKA;gBAAMyC;;QACpB;QACA,MAAMM,UAAU,aACX/C;YACHH;YACAgB,aAAazB;YACbsC;;QAEF,MAAMsB,aAAa1F,cAAc2F,+BAA+B,CAAC,aAC5D/D,OACC6D;QAENpE,YAAYuE,MAAM,CAAC3E,UAAU,aAAKwE,SAAaC,qBAAAA,aAAc,CAAC;QAC9D,MAAMG,QAAQ,aAAKnE,KAAQ+D;QAC3B,IAAInB,aAAa;YACfjE,gBAAgBgB,aAAanB,uBAAuB;gBAClDU;gBACAC;gBACAiF,KAAKxB,YAAYU,EAAE;gBACnBpD,OAAOiE;gBACPE,OAAO;oBAAEzB,aAAalE,qBAAqBwB,OAAO0C;gBAAa;YACjE;QACF;QACA,IAAI/B,WAAW,eAAeX,MAAMW,MAAM,KAAK,aAAa;YAC1DlC,gBAAgBgB,aAAapB,uBAAuB;gBAAEW;gBAAQC;gBAASiF,KAAK;gBAAalE,OAAOiE;YAAM;QACxG;QACA,OAAO;YAAEpE,SAAS;YAAWc;YAAQM;QAAO;IAC9C;AACF;AAEA,SAASmD,SAASC,GAAoC;IACpD,IAAI,OAAOA,IAAIC,IAAI,KAAK,UAAU;QAChC,IAAI;YACF,MAAMC,SAASC,KAAKC,KAAK,CAACJ,IAAIC,IAAI,IAAI;YACtC,OAAOC,UAAU,OAAOA,WAAW,WAAWA,SAAS,CAAC;QAC1D,EAAE,eAAM;YACN,OAAO,CAAC;QACV;IACF;IACA,OAAOF,IAAIC,IAAI,IAAI,OAAOD,IAAIC,IAAI,KAAK,WAAYD,IAAIC,IAAI,GAA+B,CAAC;AAC7F;AAEA,MAAMI,QAAQ,CAACC,QAAkB,CAACA,SAASA,MAAMpE,QAAQ,CAAC,QAAQ,WAAWqE,IAAI,CAACD;AAElF,OAAO,MAAME,0BAA4C,OAAOR,KAAKS;QAItCT,4BAE0BA,YACjCC,cAEAA,cACCA;IATvB,IAAID,IAAIU,MAAM,KAAK,UAAUV,IAAIU,MAAM,KAAK,OAAO;QACjD,OAAOD,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,gBAAgB3D,QAAO8C,6BAAAA,IAAIc,OAAO,CAACD,aAAa,YAAzBb,6BAA6B;IAC1D,IAAI,CAACa,cAAcE,UAAU,CAAC,YAAY,OAAON,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;QAAEC,OAAO;IAAkB;IACjG,MAAMX,OAAOD,IAAIU,MAAM,KAAK,SAASX,SAASC,QAASA,aAAAA,IAAIgB,KAAK,YAAThB,aAAa,CAAC;IACrE,MAAMrF,SAASuC,QAAO+C,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,IAAII,MAAM1F,SAAS,OAAO8F,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;QAAEC,OAAO;IAAiB;IACzE,MAAM/F,SAASqC,QAAO+C,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,MAAMrF,UAAUsC,QAAO+C,gBAAAA,IAAI,CAAC,UAAU,YAAfA,gBAAmB;IAC1C,IAAID,IAAIU,MAAM,KAAK,UAAU7F,WAAW,UAAU;QAChD,IAAI,CAACP,eAAe4B,QAAQ,CAACrB,WAAW,CAACN,iBAAiB2B,QAAQ,CAACrB,SAAS;YAC1E,OAAO4F,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;gBAAEC,OAAO;YAAiB;QACxD;QACA,IAAIP,MAAMzF,UAAU,OAAO6F,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;YAAEC,OAAO;QAAkB;IAC7E;IAEA,IAAIK;IACJ,IAAI;QACFA,MAAM,AAAC,CAAA,MAAMrH,cAAcmB,GAAG,GAAGmG,IAAI,GAAGC,aAAa,CAACN,cAAczD,KAAK,CAAC,UAAU0B,MAAM,EAAC,EAAGmC,GAAG;IACnG,EAAE,OAAOL,OAAO;QACd,IAAI,CAAC9G,iBAAiB8G,QAAQ,MAAMA;QACpC,OAAOH,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;YAAEC,OAAO;QAAkB;IACzD;IACA,IAAI;YAIYQ;QAHd,MAAMC,UAAUzH,cAAcmB,GAAG,GAAGD,SAAS,GAAGG,UAAU,CAAC,SAASC,GAAG,CAACP;QACxE,MAAMyG,OAAO,MAAMC,QAAQ/F,GAAG;QAC9B,IAAI,CAAC8F,KAAK7F,MAAM,EAAE,OAAOkF,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;YAAEC,OAAO;QAAe;QACtE,MAAMU,OAAO,EAACF,YAAAA,KAAK9F,GAAG,CAAC,0BAAT8F,YAA2B,CAAC,EAAE,CAACH,IAAI;QACjD,IAAIK,SAAS,WAAWA,SAAS,UAAU,OAAOb,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;YAAEC,OAAO;QAAgB;QAEhG,IAAIZ,IAAIU,MAAM,KAAK,OAAO;YACxB,qEAAqE;YACrE,wDAAwD;YACxD,MAAMa,SAAS9H;YACf,MAAM+H,SAASC,QACbF,CAAAA,0BAAAA,OAAQG,eAAe,KAAK,MAAMH,OAAOI,SAAS,CAAChH,QAAQiH,KAAK,CAAC,IAAM;YAEzE,OAAOnB,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;gBAAEa;YAAO;QACvC;QAEA,MAAMK,WAAW,MAAMhI,cAAcc,QAAQiH,KAAK,CAAC,IAAM;QACzD,IAAI,CAACjI,MAAMmI,gBAAgB,CAACD,4BAAAA,SAAUE,GAAG,EAAS,aAAa;YAC7D,OAAOtB,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;gBAAEC,OAAO;YAAsC;QAC7E;QAEA,IAAI/F,WAAW,UAAU;gBACGoF;YAA1B,MAAM+B,aAAa9E,QAAO+C,mBAAAA,IAAI,CAAC,aAAa,YAAlBA,mBAAsB;YAChD,IAAII,MAAM2B,aAAa,OAAOvB,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;gBAAEC,OAAO;YAA4C;YACxG,MAAMqB,WAAW,MAAMZ,QAAQpG,UAAU,CAAC,aAAaC,GAAG,CAAC8G,YAAY1G,GAAG;YAC1E,MAAM4G,UAAUnI,cAAcoI,sBAAsB,CAACF,SAAS3G,GAAG,CAAC;YAClE,IAAI,CAAC2G,SAAS1G,MAAM,IAAI,EAAC2G,2BAAAA,QAASE,KAAK,KAAI,CAACF,QAAQG,UAAU,IAAI,CAACH,QAAQI,OAAO,EAAE;gBAClF,OAAO7B,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;oBAAEC,OAAO;gBAAoD;YAC3F;YACA,MAAM2B,cAAc,MAAMlI,qBAAqBM,QAAQ,aAAKuH;gBAASI,SAASJ,QAAQI,OAAO;;YAC7F,IAAI,CAACC,aAAa;gBAChB,OAAO9B,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;oBAC1BC,OAAO;gBACT;YACF;YACA,OAAOH,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;gBAAE6B,IAAI;gBAAMC,QAAQF;YAAY;QAC9D;QAEA,MAAM/G,UAAU,MAAMf,qBAAqB;YACzCE;YACAC;YACAC,QAAQA;YACRoC,YAAY,OAAOgD,IAAI,CAAC,aAAa,KAAK,WAAWA,IAAI,CAAC,aAAa,GAAGyC;YAC1E5E,QAAQ,OAAOmC,IAAI,CAAC,SAAS,KAAK,WAAWA,IAAI,CAAC,SAAS,GAAGyC;QAChE;QACA,IAAIlH,QAAQA,OAAO,KAAK,iBAAiB,OAAOiF,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;YAAEC,OAAO;QAAgB;QAC9F,IAAIpF,QAAQA,OAAO,KAAK,gBAAgB;YACtC,OAAOiF,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;gBAC1BC,OAAOtG,eAAe4B,QAAQ,CAACrB,UAC3B,qCACA;YACN;QACF;QACA,IAAIW,QAAQA,OAAO,KAAK,WAAW;YACjC,OAAOiF,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;gBAAEC,OAAO,CAAC,+BAA+B,EAAEpF,QAAQe,IAAI,CAAC,CAAC,CAAC;YAAC;QACzF;QACA,IAAIf,QAAQA,OAAO,KAAK,WAAW,OAAOiF,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;YAAE6B,IAAI;YAAMG,SAAS;QAAK;QACzF,qEAAqE;QACrE,IAAInH,QAAQoB,MAAM,EAAE,MAAM1C,iBAAiB;YAAES;YAAQC;QAAQ,GAAGY,QAAQoB,MAAM;QAC9E,OAAO6D,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;YAAE6B,IAAI;YAAMlG,QAAQd,QAAQc,MAAM;QAAC;IACjE,EAAE,OAAOsE,OAAO;QACd,sEAAsE;QACtEgC,QAAQhC,KAAK,CAAC,mCAAmCjG,QAAQC,SAASC,QAAQ+F;QAC1E,OAAOH,IAAInE,MAAM,CAAC,KAAKqE,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC"}

package/src/lib/server/local-fulfillment.d.ts

@@ -0,0 +1,190 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginApiHandler } from '@aglyn/aglyn/server';
+import * as CommerceModel from '../model';
+/**
+ * Buy online, pick up in store, and local delivery at checkout (AGL-3624).
+ *
+ * The buyer chooses at the CART, before payment — the only place the store
+ * still controls what is offered: a Stripe Checkout Session prices shipping
+ * from the options it is created with and asks nothing back. So the cart
+ * declares one of three ways, and this module turns the declaration into the
+ * session it needs, or refuses it in words the cart can show:
+ *
+ *   - `pickup` at one location: no shipping charged, no address collected,
+ *     the stock reserved at that location, and the order routed there.
+ *   - `local_delivery`: the store's OWN driver (not a marketplace courier —
+ *     that is the delivery-apps plugin, which never reads this). The postal
+ *     code — or, for a distance zone, the address — picks a zone, the zone
+ *     prices the fee and enforces its minimum, and the buyer books a window.
+ *     The session carries the fee as its one shipping option and collects an
+ *     address only in the store's country.
+ *   - `shipping`: everything as it was.
+ *
+ * A DECLARATION IS A REQUEST, NEVER A PRICE. The cart sends a location id, a
+ * postal code and a window; the fee, the minimum and whether the window is
+ * still open are all decided here from the store's own settings, on every
+ * attempt.
+ *
+ * DISTANCE ZONES need both ends on a map, and the repository has no geocoder
+ * of its own: the destination is placed by the shipping plugin's address
+ * check (core's `core.shipping-rate-quoter` seam) when its provider returns a
+ * position. Where none does, a distance zone matches nothing and the buyer is
+ * told the store does not deliver there; postal-code zones need nothing.
+ */
+/** What the cart declares. */
+export interface LocalFulfillmentRequest {
+    method: CommerceModel.OrderFulfillmentMethod;
+    locationId?: string;
+    postalCode?: string;
+    windowStartMs?: number;
+    /** The street address, asked only when the store has distance zones. */
+    address?: {
+        line1?: string;
+        line2?: string;
+        city?: string;
+        state?: string;
+        postalCode?: string;
+    };
+    /**
+     * The mobile number the buyer gave AT THE CART for texts about this pickup
+     * or delivery (AGL-3624), in E.164. The only phone an online order's texts
+     * go to: asked for that purpose, never taken from an address.
+     */
+    textPhone?: string;
+}
+/** Reads the cart's declaration; `null` when it made none (a shipped order). */
+export declare function readLocalFulfillmentRequest(value: unknown): LocalFulfillmentRequest | null;
+/** The store's pickup locations and delivery settings, read once per attempt. */
+export interface LocalFulfillmentStore {
+    pickupLocations: CommerceModel.PickupLocationOption[];
+    delivery: CommerceModel.LocalDeliverySettings;
+    timeZone: string;
+}
+/** Reads what checkout and the cart need. Never throws: a failed read offers nothing. */
+export declare function readLocalFulfillmentStore(input: {
+    hostRef: any;
+    /** `settings/store` as already read, to save a read. */
+    storeSettings?: Record<string, unknown> | null;
+    org?: {
+        timeZone?: string;
+    } | null;
+    host?: {
+        timeZone?: string;
+    } | null;
+}): Promise<LocalFulfillmentStore>;
+/** How long checkout waits for an address to be placed on a map. */
+export declare const LOCAL_DELIVERY_GEOCODE_TIMEOUT_MS = 3000;
+/**
+ * Places an address on the map through the shipping plugin's address check,
+ * or answers `null`: no plugin, not available on this site, no position in
+ * the answer, or slower than the timeout. Never throws.
+ */
+export declare function placeDeliveryAddress(hostId: string, address: {
+    line1?: string;
+    line2?: string;
+    city?: string;
+    state?: string;
+    postalCode?: string;
+    country: string;
+}): Promise<CommerceModel.LocalDeliveryCoordinates | null>;
+/** The shipping option id a local delivery fee is declared under. */
+export declare const LOCAL_DELIVERY_RATE_ID = "local-delivery";
+export type LocalFulfillmentPlan = {
+    kind: 'shipping';
+} | {
+    kind: 'refusal';
+    status: 400 | 409;
+    error: string;
+    /** What the cart should re-ask: the options changed under the buyer. */
+    changed?: 'pickup' | 'delivery';
+} | {
+    kind: 'pickup';
+    location: CommerceModel.PickupLocationOption;
+    metadata: Record<string, string>;
+} | {
+    kind: 'local_delivery';
+    zone: CommerceModel.LocalDeliveryZone;
+    window: CommerceModel.LocalDeliveryWindow;
+    feeCents: number;
+    country: string;
+    locationId?: string;
+    option: CommerceModel.ResolvedShippingRate;
+    metadata: Record<string, string>;
+};
+/**
+ * Turns the cart's declaration into what the session needs, or a refusal.
+ * Taken BEFORE any reservation or Stripe call, so a refusal costs nothing
+ * and the buyer's same button works once they choose again.
+ */
+export declare function planLocalFulfillment(input: {
+    hostId: string;
+    request: LocalFulfillmentRequest | null;
+    /** The goods, pre-discount — what a minimum and a free-over threshold read. */
+    itemsCents: number;
+    hasPhysicalLine: boolean;
+    store: LocalFulfillmentStore;
+    nowMs?: number;
+}): Promise<LocalFulfillmentPlan>;
+/** Sets a plan's metadata on a session's form body. */
+export declare function appendLocalFulfillmentMetadata(params: URLSearchParams, metadata: Record<string, string>): void;
+/** The location a plan takes its stock from, if any. */
+export declare function localFulfillmentLocationId(plan: LocalFulfillmentPlan): string | undefined;
+/** A stock refusal for a plan that reserves at one location (AGL-3624). */
+export declare function localStockRefusalMessage(plan: LocalFulfillmentPlan, productName: string): string;
+/** What a paid session's declaration becomes on its order. */
+export interface OrderLocalFulfillment {
+    fields: {
+        fulfillmentMethod: CommerceModel.OrderFulfillmentMethod;
+        pickup?: CommerceModel.OrderPickup;
+        localDelivery?: CommerceModel.OrderLocalDelivery;
+        locationId?: string;
+        /** The number the buyer asked to be texted at, at the cart. */
+        customerPhone?: string;
+    } & CommerceModel.OrderLocalFulfillmentListFields;
+    /** The line the receipt adds, so the buyer knows where and when. */
+    summary: string;
+    /** The address entered at payment is outside the zone the fee was charged for. */
+    outsideZone: boolean;
+}
+/**
+ * Reads a paid session's `fulfillment` metadata into order fields, or `null`
+ * for a shipped order. The location and zone are re-read so the order keeps
+ * their names as they were when the buyer paid.
+ */
+export declare function orderLocalFulfillmentFromSession(input: {
+    hostId: string;
+    hostRef: any;
+    metadata: Record<string, unknown> | null | undefined;
+    /** The address the buyer entered at payment, when the session collected one. */
+    shippingAddress?: {
+        postalCode?: string | null;
+        country?: string | null;
+    } | null;
+    createdAtMs: number;
+}): Promise<OrderLocalFulfillment | null>;
+/**
+ * `POST commerce/local-fulfillment-options` (AGL-3624): what the cart offers
+ * besides shipping — the pickup locations and, with a postal code, the
+ * delivery zone's fee, minimum and the windows open to book.
+ *
+ * Public, because a shopper asks it; it returns only what a storefront would
+ * print anyway (location names, addresses, hours, fees). It reads the
+ * visitor's own cart through the cart cookie and offers nothing for a
+ * basket with nothing physical in it.
+ */
+export declare const localFulfillmentOptionsHandler: PluginApiHandler;