@fayz-ai/shop 0.9.0 → 0.11.0

package/dist/lib/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/lib/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAMpD,wBAAgB,eAAe,IAAI,YAAY,CAI9C;AAED,wBAAgB,eAAe,CAAC,YAAY,EAAE,YAAY,GAAG,IAAI,CAEhE;AAED,wBAAgB,iBAAiB,IAAI,IAAI,CAGxC"}

package/dist/lib/variant-matrix.d.ts

@@ -0,0 +1,120 @@
+import type { ShopProvider } from '../data/provider';
+import type { ProductOption, ProductVariant } from '../types';
+/** Shopify's ceiling, carried so a future connector never has to reject a product it can't map. */
+export declare const MAX_VARIANT_AXES = 3;
+export declare const MAX_VARIANT_COMBINATIONS = 100;
+/** An axis as the editor holds it: no id yet, values not yet cleaned. */
+export interface VariantAxisInput {
+    name: string;
+    values: string[];
+}
+export type VariantCombination = Record<string, string>;
+/**
+ * The canonical string for a combination. Sorted by key because 0028 stores
+ * `options` as jsonb, which normalises key order on write — so
+ * {"Cor":"Azul","Tamanho":"P"} and {"Tamanho":"P","Cor":"Azul"} are ONE row to
+ * the UNIQUE index, and anything comparing them in TypeScript has to agree.
+ */
+export declare function variantOptionsKey(options: VariantCombination): string;
+/**
+ * Trim, drop the blanks, dedupe the values. An axis with no name or no value is
+ * removed outright: it cannot contribute a combination, and keeping it would
+ * multiply the matrix by zero.
+ */
+export declare function normalizeVariantAxes(axes: readonly VariantAxisInput[]): VariantAxisInput[];
+/**
+ * The cartesian product, LAST axis varying fastest — P/Cru, P/Azul, M/Cru… That
+ * is the order Shopify lists variants in and the order a merchant reads a size
+ * chart in; deriving it any other way makes the grid look shuffled.
+ */
+export declare function variantCombinations(axes: readonly VariantAxisInput[]): VariantCombination[];
+/** Why the axes cannot be saved, or null. Both limits are Shopify's. */
+export declare function validateVariantAxes(axes: readonly VariantAxisInput[]): string | null;
+/** One cell of the matrix: a combination and the row that carries it, if any. */
+export interface VariantMatrixRow {
+    options: VariantCombination;
+    /** Grid order, written back to `position` so the DB reads in the same order. */
+    position: number;
+    variant: ProductVariant | null;
+}
+export interface VariantMatrixPlan {
+    /** The whole matrix, in grid order. */
+    rows: VariantMatrixRow[];
+    /** Combinations with no row at all — INSERT. */
+    create: VariantMatrixRow[];
+    /** Combinations whose row exists but is archived — UPDATE back to active,
+     *  because 0028's UNIQUE (product_id, options) refuses a second row and a
+     *  DELETE would take the archived row's stock balances with it (0034 CASCADEs). */
+    reactivate: VariantMatrixRow[];
+    /** Active rows the axes still describe. Nothing to do but reposition. */
+    keep: VariantMatrixRow[];
+    /** Active rows the axes no longer describe — ARCHIVE, never delete, for the
+     *  same reason 0037 §4 archives the default variant. */
+    archive: ProductVariant[];
+    /**
+     * The default variant (0037), if the product has one. It is NEVER in any of
+     * the lists above: it carries no options, so the matrix can neither describe
+     * it nor orphan it. Its lifecycle is reconciled separately — see
+     * applyVariantMatrix.
+     */
+    defaultVariant: ProductVariant | null;
+}
+/**
+ * What has to happen to make the variant rows match the axes.
+ *
+ * `existing` must include ARCHIVED rows. A merchant who removes "GG" and puts
+ * it back an hour later is not creating a new SKU — and INSERTing one would hit
+ * 0028's UNIQUE (product_id, options) rather than gracefully doing anything.
+ */
+export declare function planVariantMatrix(axes: readonly VariantAxisInput[], existing: readonly ProductVariant[]): VariantMatrixPlan;
+/**
+ * Whether the product is option-less as far as the merchant is concerned: one
+ * variant, and it is 0037's placeholder. The admin shows the empty state for
+ * this, never a one-row grid — 0037 is explicit that the default variant MUST
+ * BE INVISIBLE (no picker, no admin column, no options label).
+ */
+export declare function hasOnlyDefaultVariant(variants: readonly ProductVariant[]): boolean;
+/**
+ * Whether applying the plan would leave the product with NOTHING ACTIVE to
+ * sell, and no default variant to fall back on.
+ *
+ * FOUND BY READING 0039, NOT BY USING THE SCREEN, and the failure is silent:
+ * with every real variant archived and 0037's default archived too (§4 archived
+ * it the moment the first real variant appeared), shop_place_order's resolution
+ * pass finds no default, falls through to the DEPRECATED product-scalar leg,
+ * and 0028's sync trigger then recomputes plg_shop_products.inventory_count as
+ * the sum of ZERO active variants. The merchant deletes an option and the
+ * product goes permanently sold out, with no error anywhere.
+ *
+ * applyVariantMatrix closes the case where the default row EXISTS (it revives
+ * it). This predicate is the residue: a product that predates 0037's backfill
+ * has no such row, and no client can mint one — 0047 is what fixes that.
+ */
+export declare function leavesNothingSellable(plan: VariantMatrixPlan): boolean;
+/**
+ * The axes a variant set implies, position-ordered — what the editor opens
+ * with. Taken from `options` rows rather than derived from the variants: 0028
+ * makes the ORDER of the values meaningful ("P before M before G is not
+ * alphabetical and not arbitrary, so it cannot be derived").
+ */
+export declare function axesFromOptions(options: readonly ProductOption[]): VariantAxisInput[];
+/**
+ * Save the axes and reconcile the variant rows to them, INCLUDING 0037's
+ * default variant. The whole rule lives here rather than in the screen because
+ * every step of it is a database invariant, and a second screen that
+ * re-implemented four of the five steps would be right until the day it wasn't.
+ *
+ * Order is load-bearing:
+ *   1. axes first, so a variant referring to a value the axes no longer declare
+ *      is never visible even for one render;
+ *   2. INSERT the new combinations — which is also what fires 0037 §4 and
+ *      archives the default variant, so we never do that by hand on this path;
+ *   3. revive the archived combinations (an UPDATE, which fires NO trigger —
+ *      hence step 5);
+ *   4. archive what the axes dropped;
+ *   5. reconcile the default variant in whichever direction is now true.
+ */
+export declare function applyVariantMatrix(provider: ShopProvider, productId: string, axes: readonly VariantAxisInput[], existing: readonly ProductVariant[]): Promise<VariantMatrixPlan>;
+/** The merchant-facing label for a combination: "Tamanho: P · Cor: Azul". */
+export declare function formatVariantCombination(options: VariantCombination, axes?: readonly VariantAxisInput[]): string;
+//# sourceMappingURL=variant-matrix.d.ts.map

package/dist/lib/variant-matrix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"variant-matrix.d.ts","sourceRoot":"","sources":["../../src/lib/variant-matrix.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAc7D,mGAAmG;AACnG,eAAO,MAAM,gBAAgB,IAAI,CAAA;AACjC,eAAO,MAAM,wBAAwB,MAAM,CAAA;AAE3C,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAEvD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,CAMrE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,CAmB1F;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,gBAAgB,EAAE,GAAG,kBAAkB,EAAE,CAY3F;AAED,wEAAwE;AACxE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,GAAG,IAAI,CAUpF;AAED,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,kBAAkB,CAAA;IAC3B,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,cAAc,GAAG,IAAI,CAAA;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,uCAAuC;IACvC,IAAI,EAAE,gBAAgB,EAAE,CAAA;IACxB,gDAAgD;IAChD,MAAM,EAAE,gBAAgB,EAAE,CAAA;IAC1B;;uFAEmF;IACnF,UAAU,EAAE,gBAAgB,EAAE,CAAA;IAC9B,yEAAyE;IACzE,IAAI,EAAE,gBAAgB,EAAE,CAAA;IACxB;4DACwD;IACxD,OAAO,EAAE,cAAc,EAAE,CAAA;IACzB;;;;;OAKG;IACH,cAAc,EAAE,cAAc,GAAG,IAAI,CAAA;CACtC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,SAAS,gBAAgB,EAAE,EACjC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAClC,iBAAiB,CAgCnB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAAG,OAAO,CAGlF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAGtE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,GAAG,gBAAgB,EAAE,CAIrF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,SAAS,gBAAgB,EAAE,EACjC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAClC,OAAO,CAAC,iBAAiB,CAAC,CA0C5B;AAED,6EAA6E;AAC7E,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,CAMhH"}

package/dist/mock.d.ts

@@ -1,3 +1,2 @@
-export { MockShopProvider, createMockShopProvider } from './mock-provider';
-export type { MockShopSeed } from './mock-provider';
+export * from './data/mock';
 //# sourceMappingURL=mock.d.ts.map

package/dist/mock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock.d.ts","sourceRoot":"","sources":["../src/mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAA;AAC1E,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"mock.d.ts","sourceRoot":"","sources":["../src/mock.ts"],"names":[],"mappings":"AACA,cAAc,aAAa,CAAA"}

package/dist/mock.js

@@ -1,4 +1,6 @@
-export { MockShopProvider, createMockShopProvider } from './chunk-SVTCJ6HP.js';
-import './chunk-CTKZ6O2J.js';
+export { MockShopProvider, createMockShopProvider } from './chunk-U6HV3LVP.js';
+import './chunk-IKNGCRUM.js';
+import './chunk-NWW3WJ7Y.js';
+import './chunk-3GERSY5F.js';
 //# sourceMappingURL=mock.js.map
 //# sourceMappingURL=mock.js.map

package/dist/provider.d.ts

@@ -1,89 +1,2 @@
-import type { Product, ProductImage, Category, Order, ShopCustomer, Discount, ProductEnquiry, CreateProductInput, UpdateProductInput, ListProductsOptions, CreateProductEnquiryInput, ListProductEnquiriesOptions, CreateCategoryInput, UpdateCategoryInput, CreateOrderInput, UpdateOrderInput, ListOrdersOptions, PlaceOrderInput, CreateCustomerInput, UpdateCustomerInput, ListCustomersOptions, ResolveCustomerInput, CustomerAddress, ShippingQuoteOption, ShippingZone, CreateShippingZoneInput, UpdateShippingZoneInput, CreateDiscountInput, UpdateDiscountInput, ListDiscountsOptions, SalesChannel, CreateSalesChannelInput, UpdateSalesChannelInput } from './types';
-export interface ShopProvider {
-    listProducts(options?: ListProductsOptions): Promise<Product[]>;
-    getProduct(id: string): Promise<Product | null>;
-    createProduct(input: CreateProductInput): Promise<Product>;
-    updateProduct(id: string, input: UpdateProductInput): Promise<Product>;
-    deleteProduct(id: string): Promise<void>;
-    uploadProductImage(productId: string, file: File): Promise<ProductImage>;
-    deleteProductImage(imageId: string): Promise<void>;
-    /**
-     * Reorder a gallery or promote a photo to primary. Optional so a provider
-     * that only ever holds one image per product need not implement it.
-     *
-     * Setting `isPrimary` is exclusive: the previous primary is demoted in the
-     * same call, because two primaries make "the product photo" ambiguous
-     * everywhere it is read (card, cart line, order item, admin table).
-     */
-    updateProductImage?(imageId: string, input: {
-        isPrimary?: boolean;
-        sortOrder?: number;
-        altText?: string | null;
-    }): Promise<ProductImage>;
-    createProductEnquiry?(input: CreateProductEnquiryInput): Promise<ProductEnquiry>;
-    listProductEnquiries?(options?: ListProductEnquiriesOptions): Promise<ProductEnquiry[]>;
-    listCategories(): Promise<Category[]>;
-    createCategory(input: CreateCategoryInput): Promise<Category>;
-    updateCategory(id: string, input: UpdateCategoryInput): Promise<Category>;
-    deleteCategory(id: string): Promise<void>;
-    listOrders(options?: ListOrdersOptions): Promise<Order[]>;
-    getOrder(id: string): Promise<Order | null>;
-    createOrder(input: CreateOrderInput): Promise<Order>;
-    updateOrder(id: string, input: UpdateOrderInput): Promise<Order>;
-    /**
-     * Mock/dev payment seam: pending->paid transition via a whitelisted RPC
-     * (anon storefronts have no UPDATE grant on the orders table). Real PSPs
-     * confirm via webhook with service_role instead.
-     */
-    confirmPayment?(id: string, reference?: string): Promise<Order | null>;
-    /**
-     * Trusted order placement: the server re-reads product prices + stock,
-     * validates the discount, computes totals, and decrements inventory
-     * atomically. Storefront checkout MUST use this instead of createOrder so the
-     * browser cannot tamper with prices. createOrder remains for trusted admin entry.
-     */
-    placeOrder(input: PlaceOrderInput): Promise<Order>;
-    listCustomers(options?: ListCustomersOptions): Promise<ShopCustomer[]>;
-    getCustomer(id: string): Promise<ShopCustomer | null>;
-    createCustomer(input: CreateCustomerInput): Promise<ShopCustomer>;
-    updateCustomer(id: string, input: UpdateCustomerInput): Promise<ShopCustomer>;
-    deleteCustomer(id: string): Promise<void>;
-    /**
-     * Find-or-create the customer for a storefront shopper and (on Supabase) link
-     * it to auth.uid server-side, so order reads can be scoped to the owner by RLS.
-     * Optional: providers without it fall back to listCustomers+createCustomer.
-     */
-    resolveCustomer?(input: ResolveCustomerInput): Promise<ShopCustomer>;
-    /**
-     * The signed-in shopper's saved delivery addresses, so checkout can offer
-     * them instead of inventing a placeholder. Optional: a provider without it
-     * (or an anonymous request) yields an empty book and a blank form.
-     */
-    listCustomerAddresses?(customerId: string): Promise<CustomerAddress[]>;
-    /**
-     * Delivery options for a postal code at a given subtotal. An empty array
-     * means the store does not deliver there — shown before the buyer commits to
-     * a cart, which is the whole point of quoting on the product page.
-     *
-     * This is for DISPLAY. shop_place_order recomputes the freight from the same
-     * zones and ignores whatever the client sends, so a tampered quote changes
-     * what the shopper sees and nothing about what they are charged.
-     */
-    quoteShipping?(postalCode: string, subtotal: number): Promise<ShippingQuoteOption[]>;
-    /** Delivery zones the merchant maintains. Admin-only: the storefront reads
-     *  quotes, never the ranges themselves. */
-    listShippingZones?(): Promise<ShippingZone[]>;
-    createShippingZone?(input: CreateShippingZoneInput): Promise<ShippingZone>;
-    updateShippingZone?(id: string, input: UpdateShippingZoneInput): Promise<ShippingZone>;
-    deleteShippingZone?(id: string): Promise<void>;
-    listDiscounts(options?: ListDiscountsOptions): Promise<Discount[]>;
-    getDiscount(id: string): Promise<Discount | null>;
-    createDiscount(input: CreateDiscountInput): Promise<Discount>;
-    updateDiscount(id: string, input: UpdateDiscountInput): Promise<Discount>;
-    deleteDiscount(id: string): Promise<void>;
-    listSalesChannels?(): Promise<SalesChannel[]>;
-    createSalesChannel?(input: CreateSalesChannelInput): Promise<SalesChannel>;
-    updateSalesChannel?(id: string, input: UpdateSalesChannelInput): Promise<SalesChannel>;
-    deleteSalesChannel?(id: string): Promise<void>;
-}
+export * from './data/provider';
 //# sourceMappingURL=provider.d.ts.map

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,OAAO,EAAE,YAAY,EAAE,QAAQ,EAC/B,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAC7C,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAC3D,yBAAyB,EAAE,2BAA2B,EACtD,mBAAmB,EAAE,mBAAmB,EACxC,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,EACtE,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EACpF,eAAe,EAAE,mBAAmB,EACpC,YAAY,EAAE,uBAAuB,EAAE,uBAAuB,EAC9D,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,EAC9D,YAAY,EAAE,uBAAuB,EAAE,uBAAuB,EAC/D,MAAM,SAAS,CAAA;AAEhB,MAAM,WAAW,YAAY;IAE3B,YAAY,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/D,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;IAC/C,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1D,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtE,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACxE,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD;;;;;;;OAOG;IACH,kBAAkB,CAAC,CACjB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAC1E,OAAO,CAAC,YAAY,CAAC,CAAA;IAGxB,oBAAoB,CAAC,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IAChF,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,2BAA2B,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAGvF,cAAc,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IACrC,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC7D,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACzE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAGzC,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;IACzD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAA;IAC3C,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IACpD,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IAChE;;;;OAIG;IACH,cAAc,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAA;IACtE;;;;;OAKG;IACH,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IAGlD,aAAa,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IACtE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IACrD,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACjE,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC7E,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC;;;;OAIG;IACH,eAAe,CAAC,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACpE;;;;OAIG;IACH,qBAAqB,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;IAGtE;;;;;;;;OAQG;IACH,aAAa,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IAEpF;+CAC2C;IAC3C,iBAAiB,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAC7C,kBAAkB,CAAC,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC1E,kBAAkB,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACtF,kBAAkB,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAG9C,aAAa,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IAClE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IACjD,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC7D,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACzE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAIzC,iBAAiB,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAC7C,kBAAkB,CAAC,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC1E,kBAAkB,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACtF,kBAAkB,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/C"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AACA,cAAc,iBAAiB,CAAA"}

package/dist/providers/checkout.d.ts

@@ -0,0 +1,129 @@
+import type { EffectLedger, EffectOutcome, RequestOutcome } from '@fayz-ai/core';
+import { RequestBlockedError } from '@fayz-ai/core';
+import type { RequestPlaneConnector } from './shipping';
+/** What the buyer picked. Open on purpose — a gateway declares what it can do. */
+export type CheckoutMethod = 'pix' | 'boleto' | 'credit_card' | (string & {});
+/**
+ * The payable artifacts, one shape per method.
+ *
+ * TRANSPARENT VS REDIRECT (commerce-stack.md §8.1, open until now): Pix and
+ * boleto are transparent because nothing sensitive passes through us — a QR
+ * code and a barcode are public strings. CARD IS REDIRECT: taking a card number
+ * on our page moves us into PCI-DSS SAQ A-EP, which is architecture (browser
+ * tokenisation, scope, an audit) rather than a week of work, and this milestone
+ * is the contract, not the compliance programme.
+ *
+ * The decision is reversible for exactly the reason it is expressed here as an
+ * artifact and not as a checkout flow: transparent card becomes
+ * `card.tokenizationKey` alongside `card.redirectUrl`, and the storefront that
+ * renders whatever came back does not change.
+ */
+export interface CheckoutArtifacts {
+    pix?: {
+        qrCode: string;
+        copyPaste: string;
+        expiresAt?: string;
+    };
+    boleto?: {
+        url: string;
+        barcode?: string;
+        dueDate?: string;
+    };
+    card?: {
+        redirectUrl: string;
+        installments?: number;
+    };
+}
+export type CheckoutSessionStatus = 'pending' | 'authorized' | 'paid' | 'failed' | 'expired';
+export interface CheckoutSession {
+    sessionId: string;
+    method: CheckoutMethod;
+    status: CheckoutSessionStatus;
+    /** Minor units. The recomputed one — never a number that arrived from a client. */
+    amountCents: number;
+    currency: string;
+    artifacts: CheckoutArtifacts;
+    /** When the total was recomputed server-side for THIS session. The proof, carried with the value. */
+    amountRecomputedAt: string;
+}
+export interface CheckoutStartRequest {
+    orderId: string;
+    method: CheckoutMethod;
+    installments?: number;
+}
+export interface CheckoutStarterOptions {
+    connector: RequestPlaneConnector;
+    /** Recompute the payable total from the order, server-side. The ONLY source of the amount. */
+    recompute(orderId: string): Promise<{
+        amountCents: number;
+        currency: string;
+    }>;
+    /** The data-plane call that opens the session at the gateway. */
+    open(input: CheckoutStartRequest & {
+        amountCents: number;
+        currency: string;
+    }, signal: AbortSignal): Promise<Omit<CheckoutSession, 'amountRecomputedAt'>>;
+    now?(): Date;
+}
+/**
+ * Open a payment session under the gateway's declared budget.
+ *
+ * Returns the full {@link RequestOutcome} rather than the bare session so the
+ * caller can report `elapsedMs`; `source` is always `'provider'` here, because
+ * a `block` connector never degrades — it throws {@link RequestBlockedError},
+ * which carries the reason the buyer is shown.
+ */
+export declare function createCheckoutStarter(options: CheckoutStarterOptions): (request: CheckoutStartRequest) => Promise<RequestOutcome<CheckoutSession>>;
+export { RequestBlockedError };
+export interface CapturePaymentRequest {
+    /** The plg_connections row acting. The tenant is resolved from it server-side. */
+    connectionId: string;
+    orderId: string;
+    amountCents: number;
+    /** A gateway webhook by default; 'manual' when an operator captures from the panel. */
+    triggerKind?: 'webhook' | 'manual';
+}
+export interface CapturePaymentOptions {
+    ledger: EffectLedger;
+    /** The data-plane call that captures at the gateway. Reached at most once per key. */
+    capture(request: CapturePaymentRequest, runId: string): Promise<{
+        status: CheckoutSessionStatus;
+        providerRef?: string;
+    }>;
+}
+/**
+ * Capture at most once per (order, amount).
+ *
+ * The key is the BUYER's — `capture:<order>:<cents>` — and not the gateway's
+ * transaction id, because that id only exists after the call that must not
+ * happen twice. A re-delivered webhook and a double-clicked button both hash to
+ * the same string and the second one never reaches the gateway.
+ */
+export declare function createPaymentCapturer(options: CapturePaymentOptions): (request: CapturePaymentRequest) => Promise<EffectOutcome<{
+    status: CheckoutSessionStatus;
+    providerRef?: string;
+}>>;
+/**
+ * Buy the shipping label at most once per order.
+ *
+ * The second effect on the plane, and the reason the ledger lives in
+ * `@fayz-ai/core` rather than inside the gateway: a label bought twice is money
+ * spent twice, by the same mechanism.
+ */
+export declare function createLabelBuyer(options: {
+    ledger: EffectLedger;
+    buy(request: {
+        connectionId: string;
+        orderId: string;
+    }, runId: string): Promise<{
+        trackingCode?: string;
+        labelUrl?: string;
+    }>;
+}): (request: {
+    connectionId: string;
+    orderId: string;
+}) => Promise<EffectOutcome<{
+    trackingCode?: string;
+    labelUrl?: string;
+}>>;
+//# sourceMappingURL=checkout.d.ts.map

package/dist/providers/checkout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../src/providers/checkout.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAEvD,kFAAkF;AAClF,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,QAAQ,GAAG,aAAa,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAE7E;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/D,MAAM,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC5D,IAAI,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAA;AAE5F,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,cAAc,CAAA;IACtB,MAAM,EAAE,qBAAqB,CAAA;IAC7B,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,iBAAiB,CAAA;IAC5B,qGAAqG;IACrG,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,cAAc,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;CAEtB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,qBAAqB,CAAA;IAChC,8FAA8F;IAC9F,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9E,iEAAiE;IACjE,IAAI,CACF,KAAK,EAAE,oBAAoB,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EACvE,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC,CAAA;IACvD,GAAG,CAAC,IAAI,IAAI,CAAA;CACb;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,IAG/B,SAAS,oBAAoB,KAAG,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,CAqB7G;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAA;AAM9B,MAAM,WAAW,qBAAqB;IACpC,kFAAkF;IAClF,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,uFAAuF;IACvF,WAAW,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAA;CACnC;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,YAAY,CAAA;IACpB,sFAAsF;IACtF,OAAO,CAAC,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,qBAAqB,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACzH;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,IAEhE,SAAS,qBAAqB,KAC7B,OAAO,CAAC,aAAa,CAAC;IAAE,MAAM,EAAE,qBAAqB,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAiBnF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IACxC,MAAM,EAAE,YAAY,CAAA;IACpB,GAAG,CAAC,OAAO,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC9H,IACgC,SAAS;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;mBAFgB,MAAM;eAAa,MAAM;IAe3H"}

package/dist/providers/index.d.ts

@@ -0,0 +1,5 @@
+export { createShippingQuoter } from './shipping';
+export type { ShippingQuoteRequest, QuotedShipping, ShippingQuoterOptions, RequestPlaneConnector, } from './shipping';
+export { createCheckoutStarter, createPaymentCapturer, createLabelBuyer, RequestBlockedError } from './checkout';
+export type { CheckoutMethod, CheckoutArtifacts, CheckoutSession, CheckoutSessionStatus, CheckoutStartRequest, CheckoutStarterOptions, CapturePaymentRequest, CapturePaymentOptions, } from './checkout';
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACjD,YAAY,EACV,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAChH,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,YAAY,CAAA"}

package/dist/providers/shipping.d.ts

@@ -0,0 +1,43 @@
+import type { ConnectorDefinition, DegradeReason } from '@fayz-ai/core';
+import type { ShippingQuoteOption } from '../types';
+export type RequestPlaneConnector = Pick<ConnectorDefinition, 'id' | 'planes' | 'latencyBudgetMs' | 'onFailure'>;
+export interface ShippingQuoteRequest {
+    /** Eight bare digits. */
+    postalCode: string;
+    /** Decides free-above thresholds; the ORDER is recomputed by shop_place_order regardless. */
+    subtotal: number;
+}
+export interface QuotedShipping {
+    options: ShippingQuoteOption[];
+    /** Where the prices came from. A fallback price shown as a carrier price is how a store quotes one number and charges another. */
+    source: 'provider' | 'fallback';
+    degraded?: {
+        reason: DegradeReason;
+        detail?: string;
+    };
+}
+export interface ShippingQuoterOptions {
+    connector: RequestPlaneConnector;
+    /** The data-plane call. Receives the abort signal the budget fires. */
+    quote(request: ShippingQuoteRequest, signal: AbortSignal): Promise<ShippingQuoteOption[]>;
+    /**
+     * The configured zones. Must be LOCAL — a fallback that itself calls a network
+     * is a second budget nobody declared.
+     */
+    zones(request: ShippingQuoteRequest): Promise<ShippingQuoteOption[]>;
+    /** False when there is no live connection: quote from zones without spending the budget. */
+    connected?(): boolean;
+}
+/**
+ * A quoter that always answers.
+ *
+ * An EMPTY provider answer is a provider answer, not a failure: a carrier that
+ * does not serve a postcode has told us something, and the storefront already
+ * knows what to do with zero options (delivery.store.ts falls back to the
+ * store-wide rate). Inventing a merge here would be policy nobody asked for.
+ *
+ * Writes nothing, on either path. A quote is not a run — see
+ * packages/db/migrations/029_connections.sql.
+ */
+export declare function createShippingQuoter(options: ShippingQuoterOptions): (request: ShippingQuoteRequest) => Promise<QuotedShipping>;
+//# sourceMappingURL=shipping.d.ts.map

package/dist/providers/shipping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shipping.d.ts","sourceRoot":"","sources":["../../src/providers/shipping.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAEnD,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,mBAAmB,EACnB,IAAI,GAAG,QAAQ,GAAG,iBAAiB,GAAG,WAAW,CAClD,CAAA;AAED,MAAM,WAAW,oBAAoB;IACnC,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,6FAA6F;IAC7F,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,mBAAmB,EAAE,CAAA;IAC9B,kIAAkI;IAClI,MAAM,EAAE,UAAU,GAAG,UAAU,CAAA;IAC/B,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,aAAa,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,qBAAqB,CAAA;IAChC,uEAAuE;IACvE,KAAK,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACzF;;;OAGG;IACH,KAAK,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACpE,4FAA4F;IAC5F,SAAS,CAAC,IAAI,OAAO,CAAA;CACtB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,IAC7B,SAAS,oBAAoB,KAAG,OAAO,CAAC,cAAc,CAAC,CAQ5F"}

package/dist/providers.js

@@ -0,0 +1,70 @@
+import { runRequest, runEffect, buyerIdempotencyKey } from '@fayz-ai/core';
+export { RequestBlockedError } from '@fayz-ai/core';
+
+// src/providers/shipping.ts
+function createShippingQuoter(options) {
+  return async function quoteShipping(request) {
+    const outcome = await runRequest(options.connector, {
+      skip: options.connected ? !options.connected() : false,
+      call: (signal) => options.quote(request, signal),
+      fallback: () => options.zones(request)
+    });
+    return { options: outcome.value, source: outcome.source, degraded: outcome.degraded };
+  };
+}
+function createCheckoutStarter(options) {
+  const now = options.now ?? (() => /* @__PURE__ */ new Date());
+  return async function startCheckout(request) {
+    const { amountCents, currency } = await options.recompute(request.orderId);
+    const recomputedAt = now().toISOString();
+    return runRequest(options.connector, {
+      call: async (signal) => {
+        const session = await options.open({ ...request, amountCents, currency }, signal);
+        if (session.amountCents !== amountCents || session.currency !== currency) {
+          throw new Error(
+            `gateway opened a session for ${session.amountCents} ${session.currency}, order is ${amountCents} ${currency}`
+          );
+        }
+        return { ...session, amountRecomputedAt: recomputedAt };
+      }
+    });
+  };
+}
+function createPaymentCapturer(options) {
+  return async function capturePayment(request) {
+    return runEffect(
+      options.ledger,
+      {
+        connectionId: request.connectionId,
+        idempotencyKey: buyerIdempotencyKey({
+          effect: "capture",
+          subject: request.orderId,
+          amountCents: request.amountCents
+        }),
+        direction: "outbound",
+        triggerKind: request.triggerKind ?? "webhook",
+        stream: "payment"
+      },
+      (runId) => options.capture(request, runId)
+    );
+  };
+}
+function createLabelBuyer(options) {
+  return async function buyLabel(request) {
+    return runEffect(
+      options.ledger,
+      {
+        connectionId: request.connectionId,
+        idempotencyKey: buyerIdempotencyKey({ effect: "label", subject: request.orderId }),
+        direction: "outbound",
+        triggerKind: "manual",
+        stream: "shipment"
+      },
+      (runId) => options.buy(request, runId)
+    );
+  };
+}
+
+export { createCheckoutStarter, createLabelBuyer, createPaymentCapturer, createShippingQuoter };
+//# sourceMappingURL=providers.js.map
+//# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/providers/shipping.ts","../src/providers/checkout.ts"],"names":["runRequest"],"mappings":";;;;AA0DO,SAAS,qBAAqB,OAAA,EAAgC;AACnE,EAAA,OAAO,eAAe,cAAc,OAAA,EAAwD;AAC1F,IAAA,MAAM,OAAA,GAAU,MAAM,UAAA,CAAkC,OAAA,CAAQ,SAAA,EAAW;AAAA,MACzE,MAAM,OAAA,CAAQ,SAAA,GAAY,CAAC,OAAA,CAAQ,WAAU,GAAI,KAAA;AAAA,MACjD,MAAM,CAAC,MAAA,KAAW,OAAA,CAAQ,KAAA,CAAM,SAAS,MAAM,CAAA;AAAA,MAC/C,QAAA,EAAU,MAAM,OAAA,CAAQ,KAAA,CAAM,OAAO;AAAA,KACtC,CAAA;AACD,IAAA,OAAO,EAAE,SAAS,OAAA,CAAQ,KAAA,EAAO,QAAQ,OAAA,CAAQ,MAAA,EAAQ,QAAA,EAAU,OAAA,CAAQ,QAAA,EAAS;AAAA,EACtF,CAAA;AACF;ACuBO,SAAS,sBAAsB,OAAA,EAAiC;AACrE,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,KAAQ,0BAAU,IAAA,EAAK,CAAA;AAE3C,EAAA,OAAO,eAAe,cAAc,OAAA,EAAyE;AAI3G,IAAA,MAAM,EAAE,aAAa,QAAA,EAAS,GAAI,MAAM,OAAA,CAAQ,SAAA,CAAU,QAAQ,OAAO,CAAA;AACzE,IAAA,MAAM,YAAA,GAAe,GAAA,EAAI,CAAE,WAAA,EAAY;AAEvC,IAAA,OAAOA,UAAAA,CAA4B,QAAQ,SAAA,EAAW;AAAA,MACpD,IAAA,EAAM,OAAO,MAAA,KAAW;AACtB,QAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,IAAA,CAAK,EAAE,GAAG,OAAA,EAAS,WAAA,EAAa,QAAA,EAAS,EAAG,MAAM,CAAA;AAChF,QAAA,IAAI,OAAA,CAAQ,WAAA,KAAgB,WAAA,IAAe,OAAA,CAAQ,aAAa,QAAA,EAAU;AAGxE,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,CAAA,6BAAA,EAAgC,QAAQ,WAAW,CAAA,CAAA,EAAI,QAAQ,QAAQ,CAAA,WAAA,EAAc,WAAW,CAAA,CAAA,EAAI,QAAQ,CAAA;AAAA,WAC9G;AAAA,QACF;AACA,QAAA,OAAO,EAAE,GAAG,OAAA,EAAS,kBAAA,EAAoB,YAAA,EAAa;AAAA,MACxD;AAAA,KACD,CAAA;AAAA,EACH,CAAA;AACF;AA+BO,SAAS,sBAAsB,OAAA,EAAgC;AACpE,EAAA,OAAO,eAAe,eACpB,OAAA,EACiF;AACjF,IAAA,OAAO,SAAA;AAAA,MACL,OAAA,CAAQ,MAAA;AAAA,MACR;AAAA,QACE,cAAc,OAAA,CAAQ,YAAA;AAAA,QACtB,gBAAgB,mBAAA,CAAoB;AAAA,UAClC,MAAA,EAAQ,SAAA;AAAA,UACR,SAAS,OAAA,CAAQ,OAAA;AAAA,UACjB,aAAa,OAAA,CAAQ;AAAA,SACtB,CAAA;AAAA,QACD,SAAA,EAAW,UAAA;AAAA,QACX,WAAA,EAAa,QAAQ,WAAA,IAAe,SAAA;AAAA,QACpC,MAAA,EAAQ;AAAA,OACV;AAAA,MACA,CAAC,KAAA,KAAU,OAAA,CAAQ,OAAA,CAAQ,SAAS,KAAK;AAAA,KAC3C;AAAA,EACF,CAAA;AACF;AASO,SAAS,iBAAiB,OAAA,EAG9B;AACD,EAAA,OAAO,eAAe,SAAS,OAAA,EAAoD;AACjF,IAAA,OAAO,SAAA;AAAA,MACL,OAAA,CAAQ,MAAA;AAAA,MACR;AAAA,QACE,cAAc,OAAA,CAAQ,YAAA;AAAA,QACtB,cAAA,EAAgB,oBAAoB,EAAE,MAAA,EAAQ,SAAS,OAAA,EAAS,OAAA,CAAQ,SAAS,CAAA;AAAA,QACjF,SAAA,EAAW,UAAA;AAAA,QACX,WAAA,EAAa,QAAA;AAAA,QACb,MAAA,EAAQ;AAAA,OACV;AAAA,MACA,CAAC,KAAA,KAAU,OAAA,CAAQ,GAAA,CAAI,SAAS,KAAK;AAAA,KACvC;AAAA,EACF,CAAA;AACF","file":"providers.js","sourcesContent":["// ---------------------------------------------------------------------------\n// Freight on the request plane — the quote the buyer is waiting for\n// ---------------------------------------------------------------------------\n// FAY-1301 is explicit: quoting freight NEVER blocks the purchase. So the\n// carrier connector declares `onFailure: 'degrade'`, and this is what it\n// degrades TO — the shipping zones already in our own database, which is the\n// answer the store gave before any carrier was connected.\n//\n// Nothing here talks to a carrier. `quote` is the data-plane call (an edge\n// function holding the credential); the storefront never learns a provider's\n// URL, let alone its key — commerce-stack.md §4.\nimport { runRequest } from '@fayz-ai/core'\nimport type { ConnectorDefinition, DegradeReason } from '@fayz-ai/core'\nimport type { ShippingQuoteOption } from '../types'\n\nexport type RequestPlaneConnector = Pick<\n  ConnectorDefinition,\n  'id' | 'planes' | 'latencyBudgetMs' | 'onFailure'\n>\n\nexport interface ShippingQuoteRequest {\n  /** Eight bare digits. */\n  postalCode: string\n  /** Decides free-above thresholds; the ORDER is recomputed by shop_place_order regardless. */\n  subtotal: number\n}\n\nexport interface QuotedShipping {\n  options: ShippingQuoteOption[]\n  /** Where the prices came from. A fallback price shown as a carrier price is how a store quotes one number and charges another. */\n  source: 'provider' | 'fallback'\n  degraded?: { reason: DegradeReason; detail?: string }\n}\n\nexport interface ShippingQuoterOptions {\n  connector: RequestPlaneConnector\n  /** The data-plane call. Receives the abort signal the budget fires. */\n  quote(request: ShippingQuoteRequest, signal: AbortSignal): Promise<ShippingQuoteOption[]>\n  /**\n   * The configured zones. Must be LOCAL — a fallback that itself calls a network\n   * is a second budget nobody declared.\n   */\n  zones(request: ShippingQuoteRequest): Promise<ShippingQuoteOption[]>\n  /** False when there is no live connection: quote from zones without spending the budget. */\n  connected?(): boolean\n}\n\n/**\n * A quoter that always answers.\n *\n * An EMPTY provider answer is a provider answer, not a failure: a carrier that\n * does not serve a postcode has told us something, and the storefront already\n * knows what to do with zero options (delivery.store.ts falls back to the\n * store-wide rate). Inventing a merge here would be policy nobody asked for.\n *\n * Writes nothing, on either path. A quote is not a run — see\n * packages/db/migrations/029_connections.sql.\n */\nexport function createShippingQuoter(options: ShippingQuoterOptions) {\n  return async function quoteShipping(request: ShippingQuoteRequest): Promise<QuotedShipping> {\n    const outcome = await runRequest<ShippingQuoteOption[]>(options.connector, {\n      skip: options.connected ? !options.connected() : false,\n      call: (signal) => options.quote(request, signal),\n      fallback: () => options.zones(request),\n    })\n    return { options: outcome.value, source: outcome.source, degraded: outcome.degraded }\n  }\n}\n","// ---------------------------------------------------------------------------\n// Checkout on the request plane — the gateway the buyer is waiting for\n// ---------------------------------------------------------------------------\n// The mirror image of shipping: freight degrades so the sale continues, payment\n// BLOCKS so an order that did not pay never reads as confirmed. Both are the\n// connector's `onFailure` field rather than a decision re-taken in each screen.\n//\n// TWO THINGS ARE ENFORCED BY SHAPE HERE, not by discipline:\n//\n//   1. The amount is not an argument. `startCheckout` takes an order id and a\n//      `recompute` function; the payable total is that function's RETURN value,\n//      so a number edited in devtools has nowhere to enter. Both FAY-1300 and\n//      FAY-1301 say \"nothing the browser sends is trusted\" — this is the shape\n//      that makes it true instead of asserted.\n//   2. The gateway's echo is compared to what we recomputed. A session opened\n//      for a different amount than the order is worth is a blocked step, not a\n//      warning in a log.\n//\n// The credential is never here: `open` and `capture` are data-plane calls\n// (an edge function). commerce-stack.md §4, twice.\nimport { runRequest, runEffect, buyerIdempotencyKey } from '@fayz-ai/core'\nimport type { EffectLedger, EffectOutcome, RequestOutcome } from '@fayz-ai/core'\nimport { RequestBlockedError } from '@fayz-ai/core'\nimport type { RequestPlaneConnector } from './shipping'\n\n/** What the buyer picked. Open on purpose — a gateway declares what it can do. */\nexport type CheckoutMethod = 'pix' | 'boleto' | 'credit_card' | (string & {})\n\n/**\n * The payable artifacts, one shape per method.\n *\n * TRANSPARENT VS REDIRECT (commerce-stack.md §8.1, open until now): Pix and\n * boleto are transparent because nothing sensitive passes through us — a QR\n * code and a barcode are public strings. CARD IS REDIRECT: taking a card number\n * on our page moves us into PCI-DSS SAQ A-EP, which is architecture (browser\n * tokenisation, scope, an audit) rather than a week of work, and this milestone\n * is the contract, not the compliance programme.\n *\n * The decision is reversible for exactly the reason it is expressed here as an\n * artifact and not as a checkout flow: transparent card becomes\n * `card.tokenizationKey` alongside `card.redirectUrl`, and the storefront that\n * renders whatever came back does not change.\n */\nexport interface CheckoutArtifacts {\n  pix?: { qrCode: string; copyPaste: string; expiresAt?: string }\n  boleto?: { url: string; barcode?: string; dueDate?: string }\n  card?: { redirectUrl: string; installments?: number }\n}\n\nexport type CheckoutSessionStatus = 'pending' | 'authorized' | 'paid' | 'failed' | 'expired'\n\nexport interface CheckoutSession {\n  sessionId: string\n  method: CheckoutMethod\n  status: CheckoutSessionStatus\n  /** Minor units. The recomputed one — never a number that arrived from a client. */\n  amountCents: number\n  currency: string\n  artifacts: CheckoutArtifacts\n  /** When the total was recomputed server-side for THIS session. The proof, carried with the value. */\n  amountRecomputedAt: string\n}\n\nexport interface CheckoutStartRequest {\n  orderId: string\n  method: CheckoutMethod\n  installments?: number\n  // Deliberately no `amount`. See the header.\n}\n\nexport interface CheckoutStarterOptions {\n  connector: RequestPlaneConnector\n  /** Recompute the payable total from the order, server-side. The ONLY source of the amount. */\n  recompute(orderId: string): Promise<{ amountCents: number; currency: string }>\n  /** The data-plane call that opens the session at the gateway. */\n  open(\n    input: CheckoutStartRequest & { amountCents: number; currency: string },\n    signal: AbortSignal,\n  ): Promise<Omit<CheckoutSession, 'amountRecomputedAt'>>\n  now?(): Date\n}\n\n/**\n * Open a payment session under the gateway's declared budget.\n *\n * Returns the full {@link RequestOutcome} rather than the bare session so the\n * caller can report `elapsedMs`; `source` is always `'provider'` here, because\n * a `block` connector never degrades — it throws {@link RequestBlockedError},\n * which carries the reason the buyer is shown.\n */\nexport function createCheckoutStarter(options: CheckoutStarterOptions) {\n  const now = options.now ?? (() => new Date())\n\n  return async function startCheckout(request: CheckoutStartRequest): Promise<RequestOutcome<CheckoutSession>> {\n    // Outside the budget on purpose: this is our own database, and charging the\n    // gateway's allowance for our own arithmetic would shrink the window the\n    // gateway actually gets.\n    const { amountCents, currency } = await options.recompute(request.orderId)\n    const recomputedAt = now().toISOString()\n\n    return runRequest<CheckoutSession>(options.connector, {\n      call: async (signal) => {\n        const session = await options.open({ ...request, amountCents, currency }, signal)\n        if (session.amountCents !== amountCents || session.currency !== currency) {\n          // Not a warning. The session that would be shown to the buyer is for a\n          // different sum than the order is worth.\n          throw new Error(\n            `gateway opened a session for ${session.amountCents} ${session.currency}, order is ${amountCents} ${currency}`,\n          )\n        }\n        return { ...session, amountRecomputedAt: recomputedAt }\n      },\n    })\n  }\n}\n\nexport { RequestBlockedError }\n\n// ---------------------------------------------------------------------------\n// Capture — the effect, and the only half of checkout that files a run\n// ---------------------------------------------------------------------------\n\nexport interface CapturePaymentRequest {\n  /** The plg_connections row acting. The tenant is resolved from it server-side. */\n  connectionId: string\n  orderId: string\n  amountCents: number\n  /** A gateway webhook by default; 'manual' when an operator captures from the panel. */\n  triggerKind?: 'webhook' | 'manual'\n}\n\nexport interface CapturePaymentOptions {\n  ledger: EffectLedger\n  /** The data-plane call that captures at the gateway. Reached at most once per key. */\n  capture(request: CapturePaymentRequest, runId: string): Promise<{ status: CheckoutSessionStatus; providerRef?: string }>\n}\n\n/**\n * Capture at most once per (order, amount).\n *\n * The key is the BUYER's — `capture:<order>:<cents>` — and not the gateway's\n * transaction id, because that id only exists after the call that must not\n * happen twice. A re-delivered webhook and a double-clicked button both hash to\n * the same string and the second one never reaches the gateway.\n */\nexport function createPaymentCapturer(options: CapturePaymentOptions) {\n  return async function capturePayment(\n    request: CapturePaymentRequest,\n  ): Promise<EffectOutcome<{ status: CheckoutSessionStatus; providerRef?: string }>> {\n    return runEffect(\n      options.ledger,\n      {\n        connectionId: request.connectionId,\n        idempotencyKey: buyerIdempotencyKey({\n          effect: 'capture',\n          subject: request.orderId,\n          amountCents: request.amountCents,\n        }),\n        direction: 'outbound',\n        triggerKind: request.triggerKind ?? 'webhook',\n        stream: 'payment',\n      },\n      (runId) => options.capture(request, runId),\n    )\n  }\n}\n\n/**\n * Buy the shipping label at most once per order.\n *\n * The second effect on the plane, and the reason the ledger lives in\n * `@fayz-ai/core` rather than inside the gateway: a label bought twice is money\n * spent twice, by the same mechanism.\n */\nexport function createLabelBuyer(options: {\n  ledger: EffectLedger\n  buy(request: { connectionId: string; orderId: string }, runId: string): Promise<{ trackingCode?: string; labelUrl?: string }>\n}) {\n  return async function buyLabel(request: { connectionId: string; orderId: string }) {\n    return runEffect(\n      options.ledger,\n      {\n        connectionId: request.connectionId,\n        idempotencyKey: buyerIdempotencyKey({ effect: 'label', subject: request.orderId }),\n        direction: 'outbound',\n        triggerKind: 'manual',\n        stream: 'shipment',\n      },\n      (runId) => options.buy(request, runId),\n    )\n  }\n}\n"]}

package/dist/rules/adapter.d.ts

@@ -0,0 +1,36 @@
+import type { EvaluateOptions } from './evaluator';
+import type { Discount } from '../types';
+import type { Promotion, RuleCartSnapshot } from './rule-types';
+/** The storefront config shape (`config.discounts` entries). */
+export interface StorefrontPercentCode {
+    code: string;
+    percent: number;
+    title?: string;
+}
+/** `{code, percent}` — the simplest promotion there is. */
+export declare function storefrontDiscountToPromotion(discount: StorefrontPercentCode): Promotion;
+/**
+ * A provider Discount row as a Promotion, or null for the untranslatable
+ * legacy `buy_x_get_y` (see header). Pure; tested against the existing
+ * coupon fixtures in adapter.test.ts.
+ */
+export declare function discountToPromotion(discount: Discount): Promotion | null;
+export interface CouponPreview {
+    valid: boolean;
+    /** Percentage points, when the promotion is an order-wide percentage — the
+     *  only shape the client-side percent cart model can preview. */
+    percent: number;
+    /** Machine-readable reason when invalid — the useDiscountValidator message
+     *  vocabulary: not_found | not_started | expired | usage_limit | inactive |
+     *  rules_not_matched | unsupported. */
+    reason?: string;
+}
+/**
+ * The client-side coupon preview, engine-backed: find the promotion carrying
+ * the code, gate it through the SAME eligibility path the evaluator runs, and
+ * report the percent when (and only when) it is an order-wide percentage —
+ * anything richer is previewed as compute-actions and always revalidated
+ * server-side at place_order.
+ */
+export declare function previewCouponPercent(promotions: Promotion[], code: string, cart?: RuleCartSnapshot, options?: EvaluateOptions): CouponPreview;
+//# sourceMappingURL=adapter.d.ts.map

package/dist/rules/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/rules/adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,KAAK,EAAqB,SAAS,EAAiB,gBAAgB,EAAE,MAAM,cAAc,CAAA;AA6BjG,gEAAgE;AAChE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,2DAA2D;AAC3D,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,qBAAqB,GAAG,SAAS,CAUxF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CA8CxE;AAID,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,OAAO,CAAA;IACd;qEACiE;IACjE,OAAO,EAAE,MAAM,CAAA;IACf;;2CAEuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,SAAS,EAAE,EACvB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,gBAAgC,EACtC,OAAO,GAAE,eAAoB,GAC5B,aAAa,CAef"}