@commercelayer/agent-cli 0.8.0 → 1.0.0-dev.0

package/dist/api/stub/management.js

@@ -1,409 +0,0 @@
-// The management API at api.commercelayer.ai: sandboxes, resources, storefront
-// uploads, orders, claims. The CLI's only private API; the store hosts speak UCP.
-import crypto from 'node:crypto';
-import { canonical, IMAGE_PATH } from '../../store.js';
-import { generateKey } from '../../ucp/signing.js';
-import { localesOf } from '../../locales.js';
-import { publicOrders, readDb, SANDBOX_DOMAIN, writeDb } from './db.js';
-import { bearer, error, json, readJson } from './http.js';
-import { createOrder } from './messages.js';
-import { insights, listOrders, opsSnapshot, listShipments, OrderError, orderAction, shipmentAction, showOrder, showShipment } from './orders.js';
-function publicState(r) {
-    const { token: _token, ucp: _ucp, pending: _pending, asset_files: _files, ...state } = r;
-    return { ...state, name: r.name ?? null, policies: r.policies ?? null, theme: r.theme ?? null, storefront_mode: r.storefront_mode ?? 'hosted', locales: r.locales ?? [], assets: r.assets ?? {}, apply: r.apply ?? null, orders: publicOrders(r) };
-}
-/** Like Commerce Layer refusing a sku in an import. Only the stub does this, so tests can exercise apply_failed. */
-const REFUSED = /^REFUSED-/;
-/** C11R_STUB_BUSY_READS=n: the first n reads of a running import answer 503 commercelayer_busy, as when Commerce Layer rate-limits. Per process. */
-let busyReads = Number(process.env.C11R_STUB_BUSY_READS) || 0;
-/** Items an import gets through per read: small, so the CLI polls a few times. */
-const ITEMS_PER_READ = 2;
-/**
- * Move a running apply job forward, as the API does on every read: nothing runs in
- * the background. When it ends, the pending resources are installed, or refused.
- */
-function advance(r) {
-    const job = r.apply;
-    if (!job || job.status !== 'in_progress' || !r.pending)
-        return;
-    job.processed = Math.min(job.total, job.processed + ITEMS_PER_READ);
-    if (job.processed < job.total)
-        return;
-    job.step = 'done';
-    job.finished_at = new Date().toISOString();
-    if (r.pending.refused.length) {
-        job.status = 'failed';
-        job.errors = r.pending.refused.slice(0, 50).map((sku) => ({ sku, message: 'code is invalid' }));
-    }
-    else {
-        job.status = 'completed';
-        r.applied = r.pending.applied;
-        r.applied_hash = job.hash;
-    }
-    delete r.pending;
-}
-function withDefaults(spec) {
-    return { ...spec, starts: spec.starts ?? '2000-01-01T00:00:00Z', ends: spec.ends ?? '2100-01-01T00:00:00Z', exclusive: spec.exclusive ?? false, enabled: spec.enabled ?? true };
-}
-/** As the API lists it: the spec plus status and uses. */
-function listed(p) {
-    const now = Date.now();
-    const status = !p.enabled ? 'disabled' : p.limit !== undefined && p.uses >= p.limit ? 'used_up' : Date.parse(p.ends) <= now ? 'expired' : Date.parse(p.starts) > now ? 'scheduled' : 'active';
-    return { ...p, status, managed: true };
-}
-/** The API checks skus against the last applied catalog. */
-function unknownSkus(r, spec) {
-    const known = r.applied?.products ?? {};
-    const where = [['rules.skus', spec.rules?.skus], ...(spec.actions ?? []).map((a, i) => [`actions[${i}].skus`, 'skus' in a ? a.skus : undefined])];
-    for (const [path, list] of where) {
-        const i = (list ?? []).findIndex((sku) => !(sku in known));
-        if (i >= 0)
-            return error(422, 'invalid_promotion', `${path}[${i}]: ${list[i]} is not a product of the store.`, 'Use skus of applied products: run `c11r apply` first if you just added them.');
-    }
-    return undefined;
-}
-/** As the API lists it: the spec plus the first market's url, every url, and status. */
-function listedLink(l) {
-    const { enabled, urls, ...link } = l;
-    const now = Date.now();
-    const status = !enabled ? 'disabled' : Date.parse(l.ends) <= now ? 'expired' : Date.parse(l.starts) > now ? 'pending' : 'active';
-    return { ...link, url: Object.values(urls)[0], urls, status, managed: true };
-}
-/** The API checks a link against the store: applied skus and markets, draft orders. Answers the markets it gets a link in. */
-function linkMarkets(r, spec) {
-    const known = r.applied?.products ?? {};
-    const f = spec.for;
-    const list = 'sku' in f ? [['for.sku', f.sku]] : 'skus' in f ? f.skus.map((s, i) => [`for.skus[${i}]`, s]) : [];
-    for (const [path, sku] of list)
-        if (!(sku in known))
-            return error(422, 'invalid_link', `${path}: unknown sku ${sku}.`, 'Use skus of applied products: run `c11r apply` first if you just added them.');
-    if ('order' in f) {
-        if (spec.markets)
-            return error(422, 'invalid_link', "markets: an order link uses the order's market.", 'Leave markets out.');
-        // A UCP cart or checkout id names the draft order behind it, read back as its number (the stub's: the id's suffix).
-        const cart = /^cart_/.test(f.order) ? r.ucp.carts[f.order] : undefined;
-        // A cart is the same order as the checkout made from it.
-        const ucp = cart ? (Object.values(r.ucp.checkouts).find((c) => c._cart_id === f.order && c.status === 'completed') ?? cart) : /^chk_/.test(f.order) ? r.ucp.checkouts[f.order] : undefined;
-        if (ucp) {
-            const placed = ucp.order?.label;
-            if (ucp.status === 'completed' && placed)
-                return error(422, 'invalid_link', `for.order: order ${placed.replace(/^#/, '')} is placed: a link opens the checkout of a draft or pending order.`, 'Link a cart or checkout that is not completed.');
-            if (ucp.status === 'canceled')
-                return error(422, 'invalid_link', `for.order: no order ${f.order}.`, 'The checkout is canceled: link another cart or checkout.');
-            const market = Object.values(r.applied?.markets ?? {}).find((m) => m.currency === ucp.currency)?.code ?? Object.keys(r.applied?.markets ?? {})[0];
-            spec.for = { order: f.order.replace(/^(cart|chk)_/, '') };
-            return [market];
-        }
-        const draft = r.draft_orders?.[f.order];
-        if (draft)
-            return [draft.market];
-        if (publicOrders(r).some((o) => o.label.replace(/^#/, '') === f.order))
-            return error(422, 'invalid_link', `for.order: order ${f.order} is placed: a link opens the checkout of a draft or pending order.`, 'A placed order opens its thank-you page, not a checkout: link a draft or pending order.');
-        return error(422, 'invalid_link', `for.order: no order ${f.order}.`, 'Use the number of a draft or pending order in the store.');
-    }
-    const applied = Object.keys(r.applied?.markets ?? {});
-    const markets = spec.markets ?? applied;
-    const i = markets.findIndex((m) => !applied.includes(m));
-    if (i >= 0)
-        return error(422, 'invalid_link', `markets[${i}]: unknown market ${markets[i]}.`, 'Use markets that are applied: run `c11r apply` first if you just added it.');
-    return markets;
-}
-export function handleManagement(req) {
-    const db = readDb();
-    const path = req.url.pathname;
-    if (req.method === 'POST' && path === '/sandboxes') {
-        // Like Commerce Layer: the organization is named `name`, and its slug is derived
-        // from it, suffixed -2, -3, ... when taken. The slug is the org and the store host.
-        const body = readJson(req);
-        const name = String(body?.name ?? 'store');
-        const base = name.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '') || 'store';
-        let slug = base;
-        for (let n = 2; db[slug]; n++)
-            slug = `${base}-${n}`;
-        const expires = new Date(Date.now() + 7 * 24 * 3600 * 1000);
-        expires.setUTCHours(0, 0, 0, 0);
-        const kid = `${slug}-${new Date().toISOString().slice(0, 7)}`;
-        const { privateJwk, publicJwk } = generateKey(kid);
-        const record = {
-            org: slug,
-            token: `sbx_${crypto.randomBytes(16).toString('hex')}`,
-            sandbox: true,
-            ...(body?.test === true ? { test: true } : {}),
-            claimed: false,
-            claim_url: `https://commercelayer.ai/claim/${crypto.randomBytes(6).toString('hex')}`,
-            expires_at: expires.toISOString(),
-            preview_url: `https://${slug}.${SANDBOX_DOMAIN}`,
-            sales_channel_client_id: `sc_${crypto.randomBytes(12).toString('hex')}`,
-            storefront: null,
-            applied: null,
-            applied_hash: null,
-            ucp: { kid, private_jwk: privateJwk, public_jwk: publicJwk, carts: {}, checkouts: {}, orders: {}, idempotency: {}, webhooks: [], tokens: {}, codes: {}, files: {} },
-        };
-        db[slug] = record;
-        writeDb(db);
-        const { org, token, claim_url, expires_at, preview_url, sales_channel_client_id } = record;
-        return json(201, { org, token, claim_url, expires_at, preview_url, sales_channel_client_id });
-    }
-    const m = path.match(/^\/stores\/([^/]+)(\/.*)?$/);
-    if (!m)
-        return error(404, 'not_found', `No route ${req.method} ${path}.`, 'Check the command; run `c11r help`.');
-    const [, org, rest = ''] = m;
-    const record = db[org];
-    if (!record || record.token !== bearer(req)) {
-        return error(401, 'unauthorized', `No sandbox ${org} for this token.`, 'The sandbox may have expired or the credentials file may be stale. Remove .commercelayer/credentials and run `c11r init` again.');
-    }
-    if (new Date(record.expires_at) < new Date() && !record.claimed) {
-        return error(410, 'expired', `Sandbox ${org} expired on ${record.expires_at}.`, 'Remove .commercelayer/credentials and run `c11r init` to create a new sandbox; store.yml is kept.');
-    }
-    if (req.method === 'GET' && rest === '') {
-        if (record.apply?.status === 'in_progress' && busyReads > 0) {
-            busyReads--;
-            return error(503, 'commercelayer_busy', 'Commerce Layer is rate-limiting this organization.', 'Wait a minute and try again; never edit store.yml for this.');
-        }
-        advance(record);
-        writeDb(db);
-        return json(200, publicState(record));
-    }
-    if (req.method === 'PUT' && rest === '/resources') {
-        advance(record);
-        writeDb(db);
-        if (record.apply?.status === 'in_progress')
-            return error(409, 'apply_in_progress', 'Another apply is still running.', 'Run `c11r status` to follow it, then apply again.');
-        const { applied, hash, name, policies, theme, storefront_mode, assets, allow_delete, full } = readJson(req);
-        if (storefront_mode != null && storefront_mode !== 'hosted' && storefront_mode !== 'agent-only')
-            return error(422, 'invalid_storefront', `storefront_mode is "${storefront_mode}".`, 'Use hosted or agent-only.');
-        const before = record.applied?.products ?? {};
-        const removed = Object.keys(before).filter((sku) => !(sku in applied.products));
-        if (removed.length && !allow_delete)
-            return error(409, 'deletes_need_approval', `Apply would delete product ${removed.join(', ')}.`, 'Ask the human whether to delete these. If they agree, run `c11r apply --allow-delete`.');
-        // The name, policies and markets apply in the request; products go through an
-        // import job (SKUs, prices, then cleanups for removals) when any changed.
-        // Locales come from the markets, which apply in the request, as the API derives them.
-        record.locales = localesOf(applied);
-        record.name = name;
-        record.policies = policies ?? {};
-        if (theme !== undefined)
-            record.theme = theme;
-        // Absent or null is hosted, like the API: removing storefront: from store.yml reverts it.
-        record.storefront_mode = (storefront_mode ?? 'hosted');
-        // Images not in the list are no longer used: dropped now. No list (older CLIs): nothing is dropped.
-        if (assets) {
-            for (const p of Object.keys(record.assets ?? {})) {
-                if (!assets.includes(p)) {
-                    delete record.assets[p];
-                    delete record.asset_files[p];
-                }
-            }
-        }
-        // Translations live in applied only: changing them makes no Commerce Layer call, like the API.
-        const commerce = (p) => canonical(p && { ...p, translations: undefined });
-        const changed = Object.keys(applied.products).filter((sku) => full || !(sku in before) || commerce(before[sku]) !== commerce(applied.products[sku]));
-        if (changed.length === 0 && removed.length === 0) {
-            record.applied = applied;
-            record.applied_hash = hash;
-            writeDb(db);
-            return json(200, publicState(record));
-        }
-        record.apply = {
-            id: `apply_${crypto.randomBytes(6).toString('hex')}`,
-            status: 'in_progress',
-            step: 'skus',
-            hash,
-            processed: 0,
-            total: changed.length + removed.length,
-            started_at: new Date().toISOString(),
-            finished_at: null,
-            errors: [],
-        };
-        record.pending = { applied, refused: changed.filter((sku) => REFUSED.test(sku)) };
-        writeDb(db);
-        return json(202, publicState(record));
-    }
-    // Promotions: live, synchronous, keyed by id. Sandboxes have no Rules Engine.
-    if (rest === '/promotions' || rest.startsWith('/promotions/')) {
-        const store = (record.promotions ??= {});
-        const [, , rawId, verb] = rest.split('/');
-        const id = rawId === undefined ? undefined : decodeURIComponent(rawId);
-        const save = () => writeDb(db);
-        const flexRefused = (spec) => (spec.flex ? error(422, 'flex_unavailable', 'Flex promotions need the Rules Engine, which this organization does not have.', 'Tell the human flex promotions need a Commerce Layer plan with the Rules Engine; build the promotion from the standard rules and actions if you can.') : undefined);
-        if (id === undefined) {
-            if (req.method === 'GET')
-                return json(200, { promotions: Object.keys(store).sort().map((k) => listed(store[k])) });
-            if (req.method === 'POST') {
-                const spec = readJson(req);
-                if (store[spec.id])
-                    return error(409, 'promotion_exists', `There is already a promotion ${spec.id}.`, 'Use `c11r promotions update <id>` to change it, or pick another id.');
-                const refused = flexRefused(spec) ?? unknownSkus(record, spec);
-                if (refused)
-                    return refused;
-                store[spec.id] = { ...withDefaults(spec), uses: 0 };
-                save();
-                return json(201, listed(store[spec.id]));
-            }
-        }
-        else {
-            const p = store[id];
-            if (!p)
-                return error(404, 'not_found', `There is no promotion ${id}.`, 'Run `c11r promotions list`.');
-            if (verb === undefined && req.method === 'GET')
-                return json(200, listed(p));
-            if (verb === undefined && req.method === 'PUT') {
-                const spec = readJson(req);
-                if (spec.id !== id)
-                    return error(422, 'invalid_promotion', `id: the body has ${spec.id}, the path ${id}.`, 'An id never changes.');
-                const refused = flexRefused(spec) ?? unknownSkus(record, spec);
-                if (refused)
-                    return refused;
-                store[id] = { ...withDefaults(spec), uses: p.uses };
-                save();
-                return json(200, listed(store[id]));
-            }
-            if (verb === undefined && req.method === 'DELETE') {
-                delete store[id];
-                save();
-                return { status: 204, headers: {}, body: '' };
-            }
-            if ((verb === 'enable' || verb === 'disable') && req.method === 'POST') {
-                p.enabled = verb === 'enable';
-                save();
-                return json(200, listed(p));
-            }
-        }
-    }
-    // Links: live, synchronous, keyed by id; one Commerce Layer link per market.
-    if (rest === '/links' || rest.startsWith('/links/')) {
-        const store = (record.links ??= {});
-        const [, , rawId, verb] = rest.split('/');
-        const id = rawId === undefined ? undefined : decodeURIComponent(rawId);
-        const save = () => writeDb(db);
-        if (id === undefined) {
-            if (req.method === 'GET')
-                return json(200, { links: Object.keys(store).sort().map((k) => listedLink(store[k])) });
-            if (req.method === 'POST') {
-                const spec = readJson(req);
-                if (store[spec.id])
-                    return error(409, 'link_exists', `There is already a link ${spec.id}.`, 'Pick another id, or delete the link and create it again.');
-                const markets = linkMarkets(record, spec);
-                if (!Array.isArray(markets))
-                    return markets;
-                // One Commerce Layer link per market: a scope with several markets does not open.
-                const urls = Object.fromEntries(markets.map((m) => [m, `https://c11.page/${crypto.randomBytes(6).toString('base64url')}`]));
-                // An order link reads back with the order's market.
-                store[spec.id] = { ...spec, markets, urls, enabled: true, created_at: new Date().toISOString() };
-                save();
-                return json(201, listedLink(store[spec.id]));
-            }
-        }
-        else {
-            const l = store[id];
-            if (!l)
-                return error(404, 'not_found', `There is no link ${id}.`, 'Run `c11r links list`.');
-            if (verb === undefined && req.method === 'GET')
-                return json(200, listedLink(l));
-            if (verb === undefined && req.method === 'DELETE') {
-                delete store[id];
-                save();
-                return { status: 204, headers: {}, body: '' };
-            }
-            if ((verb === 'enable' || verb === 'disable') && req.method === 'POST') {
-                l.enabled = verb === 'enable';
-                save();
-                return json(200, listedLink(l));
-            }
-        }
-    }
-    if (req.method === 'PUT' && rest === '/assets') {
-        const { files } = readJson(req);
-        let total = 0;
-        for (const f of files ?? []) {
-            if (!IMAGE_PATH.test(f.path) || f.path.includes('..') || f.path.includes('//'))
-                return error(422, 'invalid_asset', `${f.path} is not an image path the store host serves.`, 'Use img/<file> with letters, digits, . _ - and /, and an image extension.');
-            const bytes = Buffer.from(f.content_base64, 'base64');
-            if (crypto.createHash('sha256').update(bytes).digest('hex') !== f.sha256)
-                return error(422, 'asset_mismatch', `${f.path} does not hash to the sha256 sent.`, 'Run `c11r apply` again.');
-            if (bytes.length > 5 * 1024 * 1024)
-                return error(413, 'asset_too_large', `${f.path} is larger than 5 MB.`, 'Make the image smaller and apply again.');
-            total += bytes.length;
-        }
-        if (total > 25 * 1024 * 1024)
-            return error(413, 'upload_too_large', 'The upload is larger than 25 MB.', 'This is a bug in the CLI: it batches uploads. Tell the human, with this output.');
-        record.assets ??= {};
-        record.asset_files ??= {};
-        for (const f of files ?? []) {
-            record.assets[f.path] = f.sha256;
-            record.asset_files[f.path] = f.content_base64;
-        }
-        writeDb(db);
-        return json(200, { assets: record.assets });
-    }
-    if (req.method === 'PUT' && rest === '/storefront') {
-        const { path: dir, files } = readJson(req);
-        if (!files?.some((f) => f.path === 'index.html')) {
-            return error(422, 'no_storefront', 'The upload has no index.html.', 'Run `c11r storefront init` to create one, or set storefront.path in store.yml to the folder that has index.html.');
-        }
-        record.ucp.files = Object.fromEntries(files.map((f) => [f.path, f.content_base64]));
-        record.storefront = { path: dir, files: files.length, published_at: new Date().toISOString() };
-        writeDb(db);
-        return json(200, record.storefront);
-    }
-    // The merchant's orders and shipments (view=merchant); a bare GET /orders stays the UCP list older CLIs read.
-    const merchant = (run, save = false) => {
-        try {
-            const out = run();
-            if (save)
-                writeDb(db);
-            return json(200, out);
-        }
-        catch (e) {
-            if (e instanceof OrderError)
-                return error(e.status, e.code, e.message, e.hint);
-            throw e;
-        }
-    };
-    const q = req.url.searchParams;
-    const merchantView = q.get('view') === 'merchant';
-    if (req.method === 'GET' && rest === '/orders' && merchantView)
-        return merchant(() => listOrders(record, q));
-    if (req.method === 'POST' && rest === '/orders') {
-        try {
-            const out = createOrder(record, readJson(req));
-            writeDb(db);
-            return json(out.status, out.body);
-        }
-        catch (e) {
-            if (e instanceof OrderError)
-                return error(e.status, e.code, e.message, e.hint, e.path);
-            throw e;
-        }
-    }
-    const act = rest.match(/^\/orders\/([^/]+)\/(place|approve|capture|cancel|refund|archive|unarchive)$/);
-    if (req.method === 'POST' && act)
-        return merchant(() => orderAction(record, decodeURIComponent(act[1]), act[2], readJson(req) ?? {}), true);
-    if (req.method === 'GET' && rest === '/shipments')
-        return merchant(() => listShipments(record, q));
-    if (req.method === 'GET' && rest === '/insights')
-        return merchant(() => insights(record, q));
-    if (req.method === 'GET' && rest === '/ops')
-        return merchant(() => opsSnapshot(record, q));
-    const ship = rest.match(/^\/shipments\/(.+?)(?:\/(hold|pick|pack|ready|ship|deliver))?$/);
-    if (ship && req.method === 'POST' && ship[2])
-        return merchant(() => shipmentAction(record, decodeURIComponent(ship[1]), ship[2], readJson(req) ?? {}), true);
-    if (ship && req.method === 'GET' && !ship[2])
-        return merchant(() => showShipment(record, decodeURIComponent(ship[1])));
-    if (req.method === 'GET' && rest === '/orders')
-        return json(200, publicOrders(record));
-    const one = rest.match(/^\/orders\/([^/]+)$/);
-    if (req.method === 'GET' && one && merchantView)
-        return merchant(() => showOrder(record, decodeURIComponent(one[1])));
-    if (req.method === 'GET' && one) {
-        const wanted = decodeURIComponent(one[1]);
-        const found = publicOrders(record).find((o) => o.id === wanted || o.label === wanted || o.label === `#${wanted}`);
-        if (!found)
-            return error(404, 'not_found', `There is no order ${wanted}.`, 'Run `c11r orders list` to see the orders.');
-        return json(200, found);
-    }
-    if (req.method === 'POST' && rest === '/claim') {
-        return json(200, { verification_url: 'https://commercelayer.ai/device', user_code: 'BXQT-4KMF' });
-    }
-    return error(404, 'not_found', `No route ${req.method} ${path}.`, 'Check the command; run `c11r help`.');
-}

package/dist/api/stub/messages.js

@@ -1,126 +0,0 @@
-// POST /stores/:org/orders, as the API does it (its messages.ts): an order from an email or a
-// message, made pending (or placed with place: true) from a checked request. Lines by sku are
-// looked up; lines by words go through the store's search (stub/search.ts rank), with the API's
-// confidence rule: every word 0.9, else 0.6 × the share of words (the stub has no embeddings for
-// the 0.4 × cosine part), 0.2 less when the second candidate scores within 10%; 0.75 to match.
-// A line under the bar and no force: needs_review, nothing created. Catalog prices only.
-import { checkOrderRequest } from '../../orderRequest.js';
-import { CliError } from '../../output.js';
-import { money } from '../../ucp/shop.js';
-import { toMinor } from '../../ucp/platform.js';
-import { OrderError, showOrder } from './orders.js';
-import { queryWords, rank } from './search.js';
-const BAR = 0.75;
-const round = (n) => Math.round(n * 100) / 100;
-function resolveLine(products, market, line) {
-    const priced = (p) => typeof p.prices?.[market.currency] === 'number';
-    const card = (p) => ({ sku: p.sku, name: p.name, price: priced(p) ? money(toMinor(p.prices[market.currency], market.currency), market.currency) : null });
-    const requested = line.sku ?? line.query;
-    if (line.sku) {
-        const p = products.find((x) => x.sku === line.sku);
-        if (p)
-            return priced(p) ? { requested, quantity: line.quantity, sku: p.sku, name: p.name, confidence: 1, candidates: [card(p)], status: 'matched', product: p } : { requested, quantity: line.quantity, sku: p.sku, name: p.name, confidence: 1, candidates: [], status: 'unavailable' };
-        // An unknown sku is searched like words: "ETH-250" may still name a product.
-    }
-    const ranked = rank(products, requested);
-    const sellable = ranked.filter((x) => priced(x.product));
-    if (!ranked.length)
-        return { requested, quantity: line.quantity, sku: null, name: null, confidence: 0, candidates: [], status: 'not_found' };
-    if (!sellable.length)
-        return { requested, quantity: line.quantity, sku: ranked[0].product.sku, name: ranked[0].product.name, confidence: 0, candidates: [], status: 'unavailable' };
-    const [top, second] = sellable;
-    const asked = Math.max(1, queryWords(requested).length);
-    let confidence = top.match.all ? 0.9 : 0.6 * (top.match.words.length / asked);
-    if (second && second.match.score >= top.match.score * 0.9)
-        confidence -= 0.2;
-    confidence = round(Math.max(0, confidence));
-    const candidates = sellable.slice(0, 3).map((x) => card(x.product));
-    if (confidence >= BAR)
-        return { requested, quantity: line.quantity, sku: top.product.sku, name: top.product.name, confidence, candidates, status: 'matched', product: top.product };
-    return { requested, quantity: line.quantity, sku: null, name: null, confidence, candidates, status: 'ambiguous' };
-}
-export function createOrder(r, body) {
-    let req;
-    try {
-        req = checkOrderRequest(body);
-    }
-    catch (e) {
-        if (e instanceof CliError)
-            throw new OrderError(422, e.code, e.message, e.hint, e.path);
-        throw e;
-    }
-    const markets = Object.values(r.applied?.markets ?? {});
-    const market = markets.find((m) => m.countries.includes(req.ship_to.country));
-    if (!market) {
-        const served = [...new Set(markets.flatMap((m) => m.countries))].sort();
-        throw new OrderError(422, 'country_not_served', `The store does not ship to ${req.ship_to.country}.`, served.length ? `It ships to ${served.join(', ')}: ask the human what to do with this order.` : 'The store has no markets yet: run c11r apply.', 'ship_to.country');
-    }
-    // The same source again: the order it made, unless that one was cancelled.
-    if (req.source) {
-        const existing = Object.values(r.ucp.orders).reverse().find((o) => o._source?.kind === req.source.kind && o._source?.id === req.source.id && o._merchant?.status !== 'cancelled');
-        if (existing) {
-            const order = showOrder(r, existing.id);
-            return { status: 200, body: { status: order.status, order, resolution: [], warnings: [{ code: 'duplicate_source', message: `${req.source.kind} ${req.source.id} already made order ${order.number}.` }] } };
-        }
-    }
-    const products = Object.values(r.applied?.products ?? {});
-    const resolved = req.items.map((it) => resolveLine(products, market, it));
-    const resolution = resolved.map(({ product: _p, ...x }) => x);
-    const open = resolved.filter((x) => x.status !== 'matched');
-    // Two lines of the same sku become one.
-    const kept = [];
-    for (const x of resolved.filter((y) => y.status === 'matched')) {
-        const same = kept.find((k) => k.sku === x.sku);
-        if (same)
-            same.quantity = same.quantity + x.quantity;
-        else
-            kept.push({ ...x });
-    }
-    if ((open.length && !req.force) || !kept.length)
-        return { status: 200, body: { status: 'needs_review', order: null, resolution, warnings: [] } };
-    const warnings = open.map((x) => ({ code: 'line_dropped', message: `"${x.requested}" (${x.quantity}) was left out: ${x.status.replace('_', ' ')}.` }));
-    const orders = r.ucp.orders;
-    const id = `ord_${Math.random().toString(16).slice(2, 14)}`;
-    const at = new Date().toISOString();
-    const cur = market.currency;
-    const lines = kept.map((x, i) => {
-        const price = toMinor(x.product.prices[cur], cur);
-        return { id: `li_${i + 1}`, item: { id: x.product.sku, title: x.product.name, price, ...(x.product.image_url ? { image_url: x.product.image_url } : {}) }, quantity: { original: x.quantity, total: x.quantity, fulfilled: 0 }, totals: [{ type: 'total', amount: price * x.quantity }], status: 'processing' };
-    });
-    const subtotal = lines.reduce((s, l) => s + l.totals[0].amount, 0);
-    const ship = toMinor(market.shipping?.price ?? 0, cur);
-    const c = req.customer;
-    const to = req.ship_to;
-    const destination = { first_name: c.first_name, last_name: c.last_name, company: c.company, street_address: to.line_1, extended_address: to.line_2, address_locality: to.city, postal_code: to.postal_code, address_region: to.region, address_country: to.country, phone: to.phone ?? c.phone };
-    const number = `${1001 + Object.keys(orders).length}`;
-    const order = {
-        id,
-        label: `#${number}`,
-        permalink_url: `${r.preview_url}/orders/${id}`,
-        currency: cur,
-        line_items: lines,
-        fulfillment: { expectations: [{ id: 'exp_1', line_items: lines.map((l) => ({ id: l.id, quantity: l.quantity.total })), method_type: 'shipping', destination, description: market.shipping?.method ?? 'Standard', fulfillable_on: 'now' }], events: [] },
-        adjustments: [],
-        totals: [{ type: 'subtotal', display_text: 'Subtotal', amount: subtotal }, { type: 'fulfillment', display_text: 'Shipping', amount: ship }, { type: 'total', display_text: 'Total', amount: subtotal + ship }],
-        _platform: 'message',
-        _buyer: { email: c.email, first_name: c.first_name, last_name: c.last_name, company: c.company, phone_number: c.phone ?? to.phone },
-        _market: market.code,
-        _language: req.language,
-        _codes: [],
-        _source: req.source ?? null,
-        _notes: req.notes,
-        _reference: req.reference,
-        ...(req.bill_to ? { _bill_to: { first_name: req.bill_to.first_name, last_name: req.bill_to.last_name, company: req.bill_to.company, street_address: req.bill_to.line_1, extended_address: req.bill_to.line_2, address_locality: req.bill_to.city, postal_code: req.bill_to.postal_code, address_region: req.bill_to.region, address_country: req.bill_to.country, phone: req.bill_to.phone } } : {}),
-        _merchant: {
-            status: req.place ? 'placed' : 'pending',
-            created_at: at,
-            placed_at: req.place ? at : null,
-            archived_at: null,
-            transactions: req.place ? [{ type: 'authorization', amount: subtotal + ship, succeeded: true, at }] : [],
-            shipment: { id: `shp_${id.slice(4)}`, number: `${number}/S/001`, status: 'upcoming', tracking: null, dates: { created_at: at, on_hold_at: null, picking_at: null, packing_at: null, ready_to_ship_at: null, shipped_at: null, delivered_at: null } },
-        },
-    };
-    orders[id] = order;
-    const shown = showOrder(r, id);
-    return { status: 201, body: { status: shown.status, order: shown, resolution, warnings } };
-}