@mj-biz-apps/orders-core-entities-server 5.20.0 → 5.22.0

package/dist/AccountingBridge.js

@@ -17,7 +17,7 @@
  * resolves by key — but that is a different package (`accounting-server`, wired up by the host app's
  * resolver paths) and is unaffected by how this one is imported.
  */
-import { BaseRemotableOperation, Metadata } from '@memberjunction/core';
+import { BaseRemotableOperation, LogStatus, Metadata } from '@memberjunction/core';
 import { MJGlobal } from '@memberjunction/global';
 import { AccountingEngineBase, pickActiveLinkIndex } from '@mj-biz-apps/accounting-engine-base';
 import { GLAccountResolver } from './GLAccountResolver.js';
@@ -167,4 +167,76 @@ export async function SubmitJournalEntryDrafts(drafts, what, provider, user) {
     }
     return payload;
 }
+/**
+ * `TryCreateInstance`, not `CreateInstance`: for an unregistered key `CreateInstance` hands back a
+ * hollow `BaseRemotableOperation` rather than null, so a null check alone would never fire and the
+ * call would route with no operation key.
+ */
+function resolveAccountingOperation(key, what) {
+    const resolved = MJGlobal.Instance.ClassFactory.TryCreateInstance(BaseRemotableOperation, key);
+    const op = resolved.Resolved ? resolved.Instance : null;
+    if (!op) {
+        throw new Error(`The '${key}' operation is not registered. The BizApps Accounting server package must be loaded before orders can ${what}.`);
+    }
+    return op;
+}
+/**
+ * The ACTIVE configuration of one finance exception type, or null when accounting has no such type
+ * or has switched it off — in which case the caller skips. No defaults are invented here: the
+ * thresholds are finance's to set, and a guessed one would raise a list nobody asked for.
+ *
+ * @throws when the operation is unregistered or the read fails
+ */
+export async function GetActiveFinanceExceptionType(code, provider, user) {
+    const key = 'Accounting.GetFinanceExceptionTypes';
+    const op = resolveAccountingOperation(key, `read the ${code} exception type`);
+    const result = await op.Execute({ Codes: [code] }, { provider, user });
+    if (!result.Success) {
+        throw new Error(`${key} did not execute: ${result.ErrorMessage ?? result.ResultCode ?? 'unknown error'}`);
+    }
+    const payload = result.Output;
+    if (!payload)
+        throw new Error(`${key} returned no payload.`);
+    if (!payload.Success) {
+        throw new Error(`${key} failed. ${(payload.Errors ?? []).map((e) => `${e.Code}: ${e.Message}`).join('; ')}`);
+    }
+    const type = (payload.Types ?? []).find((t) => t.Code === code);
+    if (!type) {
+        LogStatus(`Finance exception type ${code} is not defined in accounting; nothing is raised for it.`);
+        return null;
+    }
+    if (!type.IsActive) {
+        LogStatus(`Finance exception type ${code} is inactive; nothing is raised for it.`);
+        return null;
+    }
+    return { ...type, Configuration: type.Configuration ?? {} };
+}
+/**
+ * Raise finance exceptions into accounting's review list and return its payload.
+ *
+ * SIDE EFFECT, DELIBERATELY NAMED: this writes review rows. It joins the CALLER'S transaction when
+ * there is one, so a raise made at save time commits or rolls back with the save. Idempotent on
+ * (type, dedupe key) on accounting's side: a repeat returns `Created: false`.
+ *
+ * @param what names the act in the error message
+ * @throws when the operation is unregistered, the call fails, or accounting refuses the batch
+ */
+export async function RaiseFinanceExceptions(exceptions, what, provider, user) {
+    const key = 'Accounting.RaiseFinanceExceptions';
+    const op = resolveAccountingOperation(key, `raise ${what}`);
+    const result = await op.Execute({ Exceptions: exceptions }, { provider, user });
+    if (!result.Success) {
+        throw new Error(`${key} did not execute for ${what}: ${result.ErrorMessage ?? result.ResultCode ?? 'unknown error'}`);
+    }
+    const payload = result.Output;
+    if (!payload)
+        throw new Error(`${key} returned no payload for ${what}.`);
+    if (!payload.Success) {
+        const detail = (payload.Errors ?? [])
+            .map((e) => `${e.Index != null ? `#${e.Index} ` : ''}${e.Code}: ${e.Message}`)
+            .join('; ');
+        throw new Error(`Raising ${what} failed. ${detail}`);
+    }
+    return payload;
+}
 //# sourceMappingURL=AccountingBridge.js.map

package/dist/AccountingBridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"AccountingBridge.js","sourceRoot":"","sources":["../src/AccountingBridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,sBAAsB,EAAqB,QAAQ,EAAY,MAAM,sBAAsB,CAAC;AACrG,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAA0B,MAAM,wBAAwB,CAAC;AAInF,MAAM,cAAc,GAAG,6BAA6B,CAAC;AACrD,MAAM,uBAAuB,GAAG,uCAAuC,CAAC;AACxE,MAAM,mBAAmB,GAAG,kCAAkC,CAAC;AAC/D,MAAM,cAAc,GAAG,eAAe,CAAC;AA8DvC,kGAAkG;AAClG,MAAM,UAAU,WAAW,CAAC,IAAY;IACpC,gGAAgG;IAChG,2FAA2F;IAC3F,MAAM,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,2DAA2D,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,gBAAgB;IAC5B,OAAO;QACH,OAAO,EAAE,WAAW,CAAC,cAAc,CAAC;QACpC,eAAe,EAAE,WAAW,CAAC,uBAAuB,CAAC;QACrD,WAAW,EAAE,WAAW,CAAC,mBAAmB,CAAC;QAC7C,OAAO,EAAE,WAAW,CAAC,cAAc,CAAC;KACvC,CAAC;AACN,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,QAA2B,EAC3B,IAAc;IAEd,MAAM,MAAM,GAAI,oBAAyE,CAAC,QAAQ,CAAC;IACnG,wFAAwF;IACxF,0FAA0F;IAC1F,8EAA8E;IAC9E,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,QAA2B,EAC3B,IAAc;IAEd,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE1D,OAAO,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;QAC9G,uFAAuF;QACvF,uFAAuF;QACvF,0FAA0F;QAC1F,6FAA6F;QAC7F,iEAAiE;QACjE,EAAE;QACF,0FAA0F;QAC1F,sEAAsE;QACtE,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,CAAC,CAA4B,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7E,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBAClD,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACpD,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;gBACzF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;oBAAE,OAAO,KAAK,CAAC;gBAChG,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBACjD,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAC9B,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EACzF,IAAI,CACP,CAAC;YACF,IAAI,MAAM,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtD,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QACjF,CAAC;QAED,kFAAkF;QAClF,MAAM,GAAG,GAAG,MAAM,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC;QAC3C,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAE9B,2FAA2F;QAC3F,4FAA4F;QAC5F,4EAA4E;QAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAClD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,QAA2B,EAC3B,IAAc;IAEd,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,CACX,YAA6E,EACrD,EAAE,CAC1B,YAAY;SACP,MAAM,CAAC,CAAC,CAAC,EAA0D,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;SAC3F,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAE5F,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACH,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW;YACvC,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW;YAC3C,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YAC7C,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;SACpD,CAAC;IACN,CAAC,CAAC;AACN,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC1C,MAAiB,EACjB,IAAY,EACZ,QAA2B,EAC3B,IAAc;IAEd,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAEtD,sBAAsB,EAAE,iCAAiC,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE,EAAE,CAAC;QACN,MAAM,IAAI,KAAK,CACX,4FAA4F;YACxF,wDAAwD,IAAI,GAAG,CACtE,CAAC;IACN,CAAC;IAED,gFAAgF;IAChF,wFAAwF;IACxF,kBAAkB;IAClB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACX,uDAAuD,IAAI,IAAI;YAC3D,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,UAAU,IAAI,eAAe,EAAE,CACvE,CAAC;IACN,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,GAAG,CAAC,CAAC;IAClG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxG,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC"}
+{"version":3,"file":"AccountingBridge.js","sourceRoot":"","sources":["../src/AccountingBridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,sBAAsB,EAAqB,SAAS,EAAE,QAAQ,EAAY,MAAM,sBAAsB,CAAC;AAChH,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAA0B,MAAM,wBAAwB,CAAC;AAInF,MAAM,cAAc,GAAG,6BAA6B,CAAC;AACrD,MAAM,uBAAuB,GAAG,uCAAuC,CAAC;AACxE,MAAM,mBAAmB,GAAG,kCAAkC,CAAC;AAC/D,MAAM,cAAc,GAAG,eAAe,CAAC;AA8DvC,kGAAkG;AAClG,MAAM,UAAU,WAAW,CAAC,IAAY;IACpC,gGAAgG;IAChG,2FAA2F;IAC3F,MAAM,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,2DAA2D,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,gBAAgB;IAC5B,OAAO;QACH,OAAO,EAAE,WAAW,CAAC,cAAc,CAAC;QACpC,eAAe,EAAE,WAAW,CAAC,uBAAuB,CAAC;QACrD,WAAW,EAAE,WAAW,CAAC,mBAAmB,CAAC;QAC7C,OAAO,EAAE,WAAW,CAAC,cAAc,CAAC;KACvC,CAAC;AACN,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,QAA2B,EAC3B,IAAc;IAEd,MAAM,MAAM,GAAI,oBAAyE,CAAC,QAAQ,CAAC;IACnG,wFAAwF;IACxF,0FAA0F;IAC1F,8EAA8E;IAC9E,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,QAA2B,EAC3B,IAAc;IAEd,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE1D,OAAO,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;QAC9G,uFAAuF;QACvF,uFAAuF;QACvF,0FAA0F;QAC1F,6FAA6F;QAC7F,iEAAiE;QACjE,EAAE;QACF,0FAA0F;QAC1F,sEAAsE;QACtE,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,CAAC,CAA4B,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7E,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBAClD,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACpD,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;gBACzF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;oBAAE,OAAO,KAAK,CAAC;gBAChG,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBACjD,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAC9B,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EACzF,IAAI,CACP,CAAC;YACF,IAAI,MAAM,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtD,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QACjF,CAAC;QAED,kFAAkF;QAClF,MAAM,GAAG,GAAG,MAAM,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC;QAC3C,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAE9B,2FAA2F;QAC3F,4FAA4F;QAC5F,4EAA4E;QAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAClD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,QAA2B,EAC3B,IAAc;IAEd,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,CACX,YAA6E,EACrD,EAAE,CAC1B,YAAY;SACP,MAAM,CAAC,CAAC,CAAC,EAA0D,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;SAC3F,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAE5F,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACH,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW;YACvC,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW;YAC3C,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YAC7C,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;SACpD,CAAC;IACN,CAAC,CAAC;AACN,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC1C,MAAiB,EACjB,IAAY,EACZ,QAA2B,EAC3B,IAAc;IAEd,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAEtD,sBAAsB,EAAE,iCAAiC,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE,EAAE,CAAC;QACN,MAAM,IAAI,KAAK,CACX,4FAA4F;YACxF,wDAAwD,IAAI,GAAG,CACtE,CAAC;IACN,CAAC;IAED,gFAAgF;IAChF,wFAAwF;IACxF,kBAAkB;IAClB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACX,uDAAuD,IAAI,IAAI;YAC3D,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,UAAU,IAAI,eAAe,EAAE,CACvE,CAAC;IACN,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,GAAG,CAAC,CAAC;IAClG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxG,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AA8CD;;;;GAIG;AACH,SAAS,0BAA0B,CAAO,GAAW,EAAE,IAAY;IAC/D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,CAA+B,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAC7H,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,IAAI,CAAC,EAAE,EAAE,CAAC;QACN,MAAM,IAAI,KAAK,CACX,QAAQ,GAAG,yGAAyG,IAAI,GAAG,CAC9H,CAAC;IACN,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAC/C,IAAY,EACZ,QAA2B,EAC3B,IAAc;IAEd,MAAM,GAAG,GAAG,qCAAqC,CAAC;IAClD,MAAM,EAAE,GAAG,0BAA0B,CAAuD,GAAG,EAAE,YAAY,IAAI,iBAAiB,CAAC,CAAC;IACpI,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,qBAAqB,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,UAAU,IAAI,eAAe,EAAE,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,uBAAuB,CAAC,CAAC;IAC7D,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,SAAS,CAAC,0BAA0B,IAAI,0DAA0D,CAAC,CAAC;QACpG,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjB,SAAS,CAAC,0BAA0B,IAAI,yCAAyC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,UAAqC,EACrC,IAAY,EACZ,QAA2B,EAC3B,IAAc;IAEd,MAAM,GAAG,GAAG,mCAAmC,CAAC;IAChD,MAAM,EAAE,GAAG,0BAA0B,CAA2E,GAAG,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IACtI,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,wBAAwB,IAAI,KAAK,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,UAAU,IAAI,eAAe,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,4BAA4B,IAAI,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;aAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7E,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,YAAY,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/CheckoutAccountStep.d.ts

@@ -0,0 +1,147 @@
+/**
+ * @fileoverview The account step a self-serve checkout can run after payment (#292).
+ *
+ * Some hosts need the buyer to leave checkout with a working login on the host's own identity
+ * provider. Orders does not know that provider, so it offers a seam: a `CheckoutAccountStep`
+ * subclass registered through the ClassFactory. Once `/complete` has confirmed the order, the widget
+ * asks for the account step through `/checkout/account`, and the host is asked to ensure an account
+ * for the buyer. It answers one of:
+ *   - `Created` — a new account; the buyer may set its password in the widget, once. The account
+ *     must not sign in until the host has verified the buyer's e-mail (see the class doc).
+ *   - `Exists`  — an account was already there; it is never touched, and the buyer is told to sign in.
+ *   - `Failed`  — the host could not answer; the buyer is shown the host's message.
+ *   - `NotApplicable` — this checkout is not one the host makes accounts for (another company's
+ *     widget, say); the session has no account step, exactly as if no host were registered.
+ *
+ * With nothing registered the ClassFactory returns this base class itself, which means the step is
+ * off: the checkout behaves exactly as it did before the step existed.
+ *
+ * The outcome is kept in the session's MetadataJSON, so a later call (the buyer reloading the page,
+ * or retrying after `Failed`) gets the same answer, and the password
+ * call is only honoured for a session whose account this checkout created. The password itself is
+ * handed straight to the host and never stored or logged.
+ */
+import { UserInfo } from '@memberjunction/core';
+/** How many times a buyer may try a password the host refuses before the step closes. */
+export declare const MAX_CHECKOUT_PASSWORD_ATTEMPTS = 5;
+/** Longest password passed to the host. The host's own policy decides what is acceptable. */
+export declare const MAX_CHECKOUT_PASSWORD_LENGTH = 256;
+/** Default minutes after the account is created during which the buyer may set its password here. */
+export declare const DEFAULT_CHECKOUT_PASSWORD_WINDOW_MINUTES = 5;
+/** Default seconds Orders waits for the host before treating a call as unanswered. */
+export declare const DEFAULT_CHECKOUT_ACCOUNT_HOST_TIMEOUT_SECONDS = 10;
+/** What the buyer can be shown. */
+export type CheckoutAccountOutcome = 'Created' | 'Exists' | 'Failed';
+/** What a host can answer: a buyer-facing outcome, or that the step does not apply to this checkout. */
+export type CheckoutAccountHostOutcome = CheckoutAccountOutcome | 'NotApplicable';
+/** Everything the host is told about the buyer. */
+export interface CheckoutAccountContext {
+    /** The buyer's e-mail as the checkout captured it. */
+    Email: string;
+    FirstName: string | null;
+    LastName: string | null;
+    /** The payer Person the checkout resolved or created. */
+    PersonID: string | null;
+    /** The confirmed order. */
+    OrderID: string;
+    /** The selling company of the checkout widget. */
+    CompanyID: string | null;
+    SessionID: string;
+    /** When the checkout session began: a host can use it to tell an account made by this checkout from an older one. */
+    SessionCreatedAt: Date | null;
+    ContextUser?: UserInfo;
+}
+/** The host's answer to {@link CheckoutAccountStep.EnsureAccount}. */
+export interface CheckoutAccountResult {
+    Outcome: CheckoutAccountHostOutcome;
+    /** Shown to the buyer. Worded for the buyer, never containing secrets. */
+    Message?: string;
+    /**
+     * With `Created`: the host has sent, or will send, a verification e-mail, and the widget tells
+     * the buyer to use it before signing in.
+     */
+    VerificationRequired?: boolean;
+}
+/** The host's answer to {@link CheckoutAccountStep.SetPassword}. */
+export interface CheckoutPasswordResult {
+    Success: boolean;
+    /** Shown to the buyer when the password was refused, e.g. the host's password policy. */
+    Message?: string;
+}
+/**
+ * The host seam. Register a subclass with `@RegisterClass(CheckoutAccountStep)` and reference its
+ * class from the server bootstrap so the decorator is not tree-shaken away. The highest-priority
+ * registration wins.
+ *
+ * `SetPassword` is only called for a session whose `EnsureAccount` answered `Created`, within
+ * `PasswordWindowMinutes` of that answer. Orders cannot see the identity provider, and the checkout
+ * never proves the buyer owns the e-mail, so these rules are the host's to hold:
+ *   - Never change an account the checkout did not create for this purchase, in either method.
+ *   - An account answered `Created` must not sign in until the host has verified the buyer's e-mail,
+ *     for example with a link sent to it. Anyone can check out with someone else's e-mail and set
+ *     the password here; verification is what keeps that from becoming a working login.
+ *   - Until the e-mail is verified, do not link the new login to `PersonID`. That Person was
+ *     matched by e-mail alone, and may be an existing member with orders and memberships.
+ *   - When `EnsureAccount` finds an account it created earlier for the same `SessionID`, answer
+ *     `Created`, not `Exists`. A call Orders gave up on (`HostTimeoutSeconds`) is recorded as
+ *     `Failed` and asked again, and the host may have finished creating the account meanwhile.
+ */
+export declare class CheckoutAccountStep {
+    /**
+     * How long after `Created` the buyer may set the password in the widget. After it, the buyer
+     * signs in or resets the password through the host instead.
+     */
+    get PasswordWindowMinutes(): number;
+    /**
+     * How long Orders waits for `EnsureAccount` or `SetPassword`. An `EnsureAccount` that runs over
+     * is recorded as `Failed`; a `SetPassword` that runs over closes the password form, since the
+     * password may have been set.
+     */
+    get HostTimeoutSeconds(): number;
+    EnsureAccount(_context: CheckoutAccountContext): Promise<CheckoutAccountResult>;
+    SetPassword(_context: CheckoutAccountContext & {
+        Password: string;
+    }): Promise<CheckoutPasswordResult>;
+}
+/** The registered host step, or null when none is registered and the step is off. */
+export declare function ResolveCheckoutAccountStep(): CheckoutAccountStep | null;
+/** True when a host registered an account step, so the widget should ask for it after `/complete`. */
+export declare function HasCheckoutAccountStep(): boolean;
+/** The account step as the widget receives it. */
+export interface CheckoutAccountStatus {
+    Outcome: CheckoutAccountOutcome;
+    Message?: string;
+    /** True while the buyer may still set a password: the outcome was `Created` and none is set yet. */
+    CanSetPassword: boolean;
+    /** True when the host will e-mail the buyer a link to verify the account before it signs in. */
+    VerificationRequired: boolean;
+}
+export interface CheckoutAccountResponse {
+    Success: boolean;
+    ErrorMessage?: string;
+    /** Absent when no host step is registered — the checkout has no account step. */
+    Account?: CheckoutAccountStatus;
+}
+/**
+ * Run the account step for a confirmed checkout, or return the outcome it already reached.
+ *
+ * `Created`, `Exists` and `NotApplicable` are final: asking again returns the recorded answer rather
+ * than asking the host, which would now find the account this checkout created and call it
+ * existing. Only `Failed` is asked again. `NotApplicable` is answered as if no step were registered.
+ * A host step that throws, or does not answer within `HostTimeoutSeconds`, is recorded as `Failed`;
+ * it never affects the paid order.
+ */
+export declare function EnsureCheckoutAccount(sessionID: string, clientSessionKey: string, contextUser?: UserInfo): Promise<CheckoutAccountResponse>;
+/**
+ * Set the password of the account this checkout created.
+ *
+ * Refused unless the session's recorded outcome is `Created`, no password has been set or is being
+ * set, the buyer has attempts left, and the step's password window has not closed. A refusal by the
+ * host (its password policy) counts as an attempt.
+ *
+ * The attempt is recorded before the password is passed on, and a refusal is returned if that
+ * cannot be saved. So once the host may have set a password, no second one is accepted, even when
+ * its answer is lost or cannot be recorded.
+ */
+export declare function SetCheckoutAccountPassword(sessionID: string, clientSessionKey: string, password: unknown, contextUser?: UserInfo): Promise<CheckoutAccountResponse>;
+//# sourceMappingURL=CheckoutAccountStep.d.ts.map

package/dist/CheckoutAccountStep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CheckoutAccountStep.d.ts","sourceRoot":"","sources":["../src/CheckoutAccountStep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAoC,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AASlF,yFAAyF;AACzF,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAChD,6FAA6F;AAC7F,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,qGAAqG;AACrG,eAAO,MAAM,wCAAwC,IAAI,CAAC;AAC1D,sFAAsF;AACtF,eAAO,MAAM,6CAA6C,KAAK,CAAC;AAEhE,mCAAmC;AACnC,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AACrE,wGAAwG;AACxG,MAAM,MAAM,0BAA0B,GAAG,sBAAsB,GAAG,eAAe,CAAC;AAElF,mDAAmD;AACnD,MAAM,WAAW,sBAAsB;IACnC,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yDAAyD;IACzD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,qHAAqH;IACrH,gBAAgB,EAAE,IAAI,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,QAAQ,CAAC;CAC1B;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IAClC,OAAO,EAAE,0BAA0B,CAAC;IACpC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,oEAAoE;AACpE,MAAM,WAAW,sBAAsB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,yFAAyF;IACzF,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,mBAAmB;IAC5B;;;OAGG;IACH,IAAW,qBAAqB,IAAI,MAAM,CAEzC;IAED;;;;OAIG;IACH,IAAW,kBAAkB,IAAI,MAAM,CAEtC;IAEY,aAAa,CAAC,QAAQ,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI/E,WAAW,CAAC,QAAQ,EAAE,sBAAsB,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAGrH;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,IAAI,mBAAmB,GAAG,IAAI,CAMvE;AAED,sGAAsG;AACtG,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAiBD,kDAAkD;AAClD,MAAM,WAAW,qBAAqB;IAClC,OAAO,EAAE,sBAAsB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oGAAoG;IACpG,cAAc,EAAE,OAAO,CAAC;IACxB,gGAAgG;IAChG,oBAAoB,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,OAAO,CAAC,EAAE,qBAAqB,CAAC;CACnC;AAwJD;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACvC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,WAAW,CAAC,EAAE,QAAQ,GACvB,OAAO,CAAC,uBAAuB,CAAC,CAIlC;AAwDD;;;;;;;;;;GAUG;AACH,wBAAsB,0BAA0B,CAC5C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,OAAO,EACjB,WAAW,CAAC,EAAE,QAAQ,GACvB,OAAO,CAAC,uBAAuB,CAAC,CAIlC"}

package/dist/CheckoutAccountStep.js

@@ -0,0 +1,368 @@
+/**
+ * @fileoverview The account step a self-serve checkout can run after payment (#292).
+ *
+ * Some hosts need the buyer to leave checkout with a working login on the host's own identity
+ * provider. Orders does not know that provider, so it offers a seam: a `CheckoutAccountStep`
+ * subclass registered through the ClassFactory. Once `/complete` has confirmed the order, the widget
+ * asks for the account step through `/checkout/account`, and the host is asked to ensure an account
+ * for the buyer. It answers one of:
+ *   - `Created` — a new account; the buyer may set its password in the widget, once. The account
+ *     must not sign in until the host has verified the buyer's e-mail (see the class doc).
+ *   - `Exists`  — an account was already there; it is never touched, and the buyer is told to sign in.
+ *   - `Failed`  — the host could not answer; the buyer is shown the host's message.
+ *   - `NotApplicable` — this checkout is not one the host makes accounts for (another company's
+ *     widget, say); the session has no account step, exactly as if no host were registered.
+ *
+ * With nothing registered the ClassFactory returns this base class itself, which means the step is
+ * off: the checkout behaves exactly as it did before the step existed.
+ *
+ * The outcome is kept in the session's MetadataJSON, so a later call (the buyer reloading the page,
+ * or retrying after `Failed`) gets the same answer, and the password
+ * call is only honoured for a session whose account this checkout created. The password itself is
+ * handed straight to the host and never stored or logged.
+ */
+import { CompositeKey, LogError, Metadata } from '@memberjunction/core';
+import { MJGlobal } from '@memberjunction/global';
+import { RequireUUID } from './sql-guards.js';
+const CHECKOUT_SESSION_ENTITY = 'MJ_BizApps_Orders: Checkout Sessions';
+const CHECKOUT_WIDGET_ENTITY = 'MJ_BizApps_Orders: Checkout Widgets';
+const PERSON_ENTITY = 'MJ_BizApps_Common: People';
+/** How many times a buyer may try a password the host refuses before the step closes. */
+export const MAX_CHECKOUT_PASSWORD_ATTEMPTS = 5;
+/** Longest password passed to the host. The host's own policy decides what is acceptable. */
+export const MAX_CHECKOUT_PASSWORD_LENGTH = 256;
+/** Default minutes after the account is created during which the buyer may set its password here. */
+export const DEFAULT_CHECKOUT_PASSWORD_WINDOW_MINUTES = 5;
+/** Default seconds Orders waits for the host before treating a call as unanswered. */
+export const DEFAULT_CHECKOUT_ACCOUNT_HOST_TIMEOUT_SECONDS = 10;
+/**
+ * The host seam. Register a subclass with `@RegisterClass(CheckoutAccountStep)` and reference its
+ * class from the server bootstrap so the decorator is not tree-shaken away. The highest-priority
+ * registration wins.
+ *
+ * `SetPassword` is only called for a session whose `EnsureAccount` answered `Created`, within
+ * `PasswordWindowMinutes` of that answer. Orders cannot see the identity provider, and the checkout
+ * never proves the buyer owns the e-mail, so these rules are the host's to hold:
+ *   - Never change an account the checkout did not create for this purchase, in either method.
+ *   - An account answered `Created` must not sign in until the host has verified the buyer's e-mail,
+ *     for example with a link sent to it. Anyone can check out with someone else's e-mail and set
+ *     the password here; verification is what keeps that from becoming a working login.
+ *   - Until the e-mail is verified, do not link the new login to `PersonID`. That Person was
+ *     matched by e-mail alone, and may be an existing member with orders and memberships.
+ *   - When `EnsureAccount` finds an account it created earlier for the same `SessionID`, answer
+ *     `Created`, not `Exists`. A call Orders gave up on (`HostTimeoutSeconds`) is recorded as
+ *     `Failed` and asked again, and the host may have finished creating the account meanwhile.
+ */
+export class CheckoutAccountStep {
+    /**
+     * How long after `Created` the buyer may set the password in the widget. After it, the buyer
+     * signs in or resets the password through the host instead.
+     */
+    get PasswordWindowMinutes() {
+        return DEFAULT_CHECKOUT_PASSWORD_WINDOW_MINUTES;
+    }
+    /**
+     * How long Orders waits for `EnsureAccount` or `SetPassword`. An `EnsureAccount` that runs over
+     * is recorded as `Failed`; a `SetPassword` that runs over closes the password form, since the
+     * password may have been set.
+     */
+    get HostTimeoutSeconds() {
+        return DEFAULT_CHECKOUT_ACCOUNT_HOST_TIMEOUT_SECONDS;
+    }
+    async EnsureAccount(_context) {
+        return { Outcome: 'Failed' };
+    }
+    async SetPassword(_context) {
+        return { Success: false };
+    }
+}
+/** The registered host step, or null when none is registered and the step is off. */
+export function ResolveCheckoutAccountStep() {
+    const step = MJGlobal.Instance.ClassFactory.CreateInstance(CheckoutAccountStep);
+    if (!step || Object.getPrototypeOf(step) === CheckoutAccountStep.prototype) {
+        return null;
+    }
+    return step;
+}
+/** True when a host registered an account step, so the widget should ask for it after `/complete`. */
+export function HasCheckoutAccountStep() {
+    return ResolveCheckoutAccountStep() !== null;
+}
+const GENERIC_FAILURE = 'We could not set up your account just now. Your order is confirmed. Please try again in a moment.';
+/** Calls on the same session run one at a time in this process, so a retry cannot overlap a call still in progress. */
+const sessionQueues = new Map();
+async function oneAtATime(sessionID, work) {
+    const key = sessionID.toLowerCase();
+    const previous = sessionQueues.get(key) ?? Promise.resolve();
+    const current = previous.catch(() => undefined).then(work);
+    sessionQueues.set(key, current);
+    try {
+        return await current;
+    }
+    finally {
+        if (sessionQueues.get(key) === current)
+            sessionQueues.delete(key);
+    }
+}
+const TIMED_OUT = Symbol('timed out');
+/** The host's answer, or {@link TIMED_OUT} when it does not answer within the step's timeout. */
+async function withHostTimeout(step, call) {
+    const seconds = step.HostTimeoutSeconds;
+    const ms = (Number.isFinite(seconds) && seconds > 0 ? seconds : DEFAULT_CHECKOUT_ACCOUNT_HOST_TIMEOUT_SECONDS) * 1000;
+    let timer;
+    try {
+        return await Promise.race([
+            call(),
+            new Promise((resolve) => {
+                timer = setTimeout(() => resolve(TIMED_OUT), ms);
+            }),
+        ]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+function keyMatches(session, presentedKey) {
+    const stored = session.ClientSessionKey ?? '';
+    const presented = (presentedKey ?? '').trim();
+    if (!stored || !presented || stored.length !== presented.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < stored.length; i++)
+        diff |= stored.charCodeAt(i) ^ presented.charCodeAt(i);
+    return diff === 0;
+}
+function readMetadata(session) {
+    if (!session.MetadataJSON)
+        return {};
+    try {
+        const parsed = JSON.parse(session.MetadataJSON);
+        return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+function readAccountState(session) {
+    const account = readMetadata(session)['Account'];
+    return account && typeof account === 'object' && typeof account.Outcome === 'string' ? account : null;
+}
+async function saveAccountState(session, state) {
+    session.MetadataJSON = JSON.stringify({ ...readMetadata(session), Account: state });
+    if (!(await session.Save())) {
+        LogError(`[CheckoutAccountStep] could not record the account step on session ${session.ID}: ${session.LatestResult?.CompleteMessage ?? 'unknown error'}`);
+        return false;
+    }
+    return true;
+}
+/** True while `now` is inside the step's password window, counted from when the outcome was decided. */
+function withinPasswordWindow(state, step, now = new Date()) {
+    const decided = Date.parse(state.DecidedAt);
+    const minutes = step.PasswordWindowMinutes;
+    if (!Number.isFinite(decided) || !Number.isFinite(minutes) || minutes <= 0)
+        return false;
+    return now.getTime() <= decided + minutes * 60 * 1000;
+}
+function toStatus(state, step) {
+    return {
+        Outcome: state.Outcome,
+        Message: state.Message,
+        CanSetPassword: state.Outcome === 'Created' &&
+            !state.PasswordSet &&
+            !state.PasswordPendingSince &&
+            (state.PasswordAttempts ?? 0) < MAX_CHECKOUT_PASSWORD_ATTEMPTS &&
+            withinPasswordWindow(state, step),
+        VerificationRequired: state.Outcome === 'Created' && state.VerificationRequired === true,
+    };
+}
+/** The recorded state, unless the step does not apply to this session. */
+function buyerFacing(state) {
+    return state && state.Outcome !== 'NotApplicable' ? state : null;
+}
+/** The session, when the key matches and the checkout has confirmed its order; otherwise the refusal. */
+async function loadConfirmedSession(sessionID, clientSessionKey, contextUser) {
+    try {
+        RequireUUID(sessionID, 'sessionId');
+    }
+    catch {
+        return { Refusal: { Success: false, ErrorMessage: 'Checkout session not found' } };
+    }
+    const md = new Metadata();
+    const session = await md.GetEntityObject(CHECKOUT_SESSION_ENTITY, contextUser);
+    if (!(await session.Load(sessionID))) {
+        return { Refusal: { Success: false, ErrorMessage: 'Checkout session not found' } };
+    }
+    if (!keyMatches(session, clientSessionKey)) {
+        return { Refusal: { Success: false, ErrorMessage: 'Checkout session key does not match' } };
+    }
+    if (session.Status !== 'Confirmed' || !session.DraftOrderID) {
+        return { Refusal: { Success: false, ErrorMessage: 'This checkout has not completed yet.' } };
+    }
+    return { Session: session };
+}
+async function buildContext(session, contextUser) {
+    const md = new Metadata();
+    let firstName = null;
+    let lastName = null;
+    if (session.PersonID) {
+        const person = await md.GetEntityObject(PERSON_ENTITY, contextUser);
+        if (await person.InnerLoad(CompositeKey.FromID(session.PersonID))) {
+            firstName = person.Get('FirstName') ?? null;
+            lastName = person.Get('LastName') ?? null;
+        }
+    }
+    let companyID = null;
+    const widget = await md.GetEntityObject(CHECKOUT_WIDGET_ENTITY, contextUser);
+    if (session.CheckoutWidgetID && (await widget.InnerLoad(CompositeKey.FromID(session.CheckoutWidgetID)))) {
+        companyID = widget.Get('CompanyID') ?? null;
+    }
+    return {
+        Email: session.Email ?? '',
+        FirstName: firstName,
+        LastName: lastName,
+        PersonID: session.PersonID ?? null,
+        OrderID: session.DraftOrderID,
+        CompanyID: companyID,
+        SessionID: session.ID,
+        SessionCreatedAt: session.__mj_CreatedAt ? new Date(session.__mj_CreatedAt) : null,
+        ContextUser: contextUser,
+    };
+}
+/**
+ * Run the account step for a confirmed checkout, or return the outcome it already reached.
+ *
+ * `Created`, `Exists` and `NotApplicable` are final: asking again returns the recorded answer rather
+ * than asking the host, which would now find the account this checkout created and call it
+ * existing. Only `Failed` is asked again. `NotApplicable` is answered as if no step were registered.
+ * A host step that throws, or does not answer within `HostTimeoutSeconds`, is recorded as `Failed`;
+ * it never affects the paid order.
+ */
+export async function EnsureCheckoutAccount(sessionID, clientSessionKey, contextUser) {
+    const step = ResolveCheckoutAccountStep();
+    if (!step)
+        return { Success: true };
+    return oneAtATime(sessionID, () => ensureAccount(step, sessionID, clientSessionKey, contextUser));
+}
+async function ensureAccount(step, sessionID, clientSessionKey, contextUser) {
+    const loaded = await loadConfirmedSession(sessionID, clientSessionKey, contextUser);
+    if ('Refusal' in loaded)
+        return loaded.Refusal;
+    const session = loaded.Session;
+    const existing = readAccountState(session);
+    if (existing?.Outcome === 'NotApplicable')
+        return { Success: true };
+    const shown = buyerFacing(existing);
+    if (shown && shown.Outcome !== 'Failed') {
+        return { Success: true, Account: toStatus(shown, step) };
+    }
+    const context = await buildContext(session, contextUser);
+    let result;
+    if (!context.Email) {
+        result = { Outcome: 'Failed', Message: GENERIC_FAILURE };
+    }
+    else {
+        try {
+            const answer = await withHostTimeout(step, () => step.EnsureAccount(context));
+            if (answer === TIMED_OUT) {
+                LogError(`[CheckoutAccountStep] ${step.constructor.name}.EnsureAccount did not answer within ${step.HostTimeoutSeconds}s for session ${session.ID}`);
+                result = { Outcome: 'Failed' };
+            }
+            else {
+                result = answer;
+            }
+        }
+        catch (err) {
+            LogError(`[CheckoutAccountStep] ${step.constructor.name}.EnsureAccount threw for session ${session.ID}: ${err instanceof Error ? err.message : String(err)}`);
+            result = { Outcome: 'Failed' };
+        }
+    }
+    const outcome = ['Created', 'Exists', 'Failed', 'NotApplicable'].includes(result?.Outcome)
+        ? result.Outcome
+        : 'Failed';
+    if (outcome === 'NotApplicable') {
+        await saveAccountState(session, { Outcome: outcome, DecidedAt: new Date().toISOString() });
+        return { Success: true };
+    }
+    const state = {
+        Outcome: outcome,
+        Message: result?.Message ?? (outcome === 'Failed' ? GENERIC_FAILURE : undefined),
+        DecidedAt: new Date().toISOString(),
+        VerificationRequired: outcome === 'Created' && result?.VerificationRequired === true,
+        PasswordSet: false,
+        PasswordAttempts: 0,
+    };
+    await saveAccountState(session, state);
+    return { Success: true, Account: toStatus(state, step) };
+}
+/**
+ * Set the password of the account this checkout created.
+ *
+ * Refused unless the session's recorded outcome is `Created`, no password has been set or is being
+ * set, the buyer has attempts left, and the step's password window has not closed. A refusal by the
+ * host (its password policy) counts as an attempt.
+ *
+ * The attempt is recorded before the password is passed on, and a refusal is returned if that
+ * cannot be saved. So once the host may have set a password, no second one is accepted, even when
+ * its answer is lost or cannot be recorded.
+ */
+export async function SetCheckoutAccountPassword(sessionID, clientSessionKey, password, contextUser) {
+    const step = ResolveCheckoutAccountStep();
+    if (!step)
+        return { Success: false, ErrorMessage: 'This checkout does not create accounts.' };
+    return oneAtATime(sessionID, () => setPassword(step, sessionID, clientSessionKey, password, contextUser));
+}
+const PASSWORD_MAY_BE_SET = 'We could not confirm your password was set. Sign in with the e-mail you used, or reset your password if that does not work.';
+async function setPassword(step, sessionID, clientSessionKey, password, contextUser) {
+    const loaded = await loadConfirmedSession(sessionID, clientSessionKey, contextUser);
+    if ('Refusal' in loaded)
+        return loaded.Refusal;
+    const session = loaded.Session;
+    const state = buyerFacing(readAccountState(session));
+    if (!state || !toStatus(state, step).CanSetPassword) {
+        const open = state?.Outcome === 'Created' && !state.PasswordSet;
+        const errorMessage = open && state.PasswordPendingSince
+            ? PASSWORD_MAY_BE_SET
+            : open && !withinPasswordWindow(state, step)
+                ? 'The time to set a password here has passed. Reset your password with the e-mail you used to sign in.'
+                : 'A password cannot be set here. Sign in, or reset your password, with the e-mail you used.';
+        return { Success: false, ErrorMessage: errorMessage, Account: state ? toStatus(state, step) : undefined };
+    }
+    if (typeof password !== 'string' || password.length === 0 || password.length > MAX_CHECKOUT_PASSWORD_LENGTH) {
+        return { Success: false, ErrorMessage: 'Please enter a password.', Account: toStatus(state, step) };
+    }
+    const pending = {
+        ...state,
+        PasswordAttempts: (state.PasswordAttempts ?? 0) + 1,
+        PasswordPendingSince: new Date().toISOString(),
+    };
+    if (!(await saveAccountState(session, pending))) {
+        return { Success: false, ErrorMessage: 'That password could not be set right now. Please try again.', Account: toStatus(state, step) };
+    }
+    let result;
+    try {
+        const context = await buildContext(session, contextUser);
+        const answer = await withHostTimeout(step, () => step.SetPassword({ ...context, Password: password }));
+        if (answer === TIMED_OUT) {
+            // The host may still set it, so the attempt stays pending and the form closes.
+            LogError(`[CheckoutAccountStep] ${step.constructor.name}.SetPassword did not answer within ${step.HostTimeoutSeconds}s for session ${session.ID}`);
+            return { Success: false, ErrorMessage: PASSWORD_MAY_BE_SET, Account: toStatus(pending, step) };
+        }
+        result = answer;
+    }
+    catch (err) {
+        LogError(`[CheckoutAccountStep] ${step.constructor.name}.SetPassword threw for session ${session.ID}: ${err instanceof Error ? err.message : String(err)}`);
+        result = { Success: false };
+    }
+    const { PasswordPendingSince: _answered, ...rest } = pending;
+    const next = { ...rest, PasswordSet: result?.Success === true };
+    // A save that fails here leaves the attempt pending, which keeps the form closed.
+    await saveAccountState(session, next);
+    return result?.Success === true
+        ? { Success: true, Account: toStatus(next, step) }
+        : {
+            Success: false,
+            ErrorMessage: result?.Message ?? 'That password could not be set. Please try another.',
+            Account: toStatus(next, step),
+        };
+}
+//# sourceMappingURL=CheckoutAccountStep.js.map