@mj-biz-apps/orders-server 0.0.1 → 5.1.0

package/LICENSE

@@ -0,0 +1,183 @@
+Business Source License 1.1
+
+License text copyright (c) 2024 MariaDB plc, All Rights Reserved.
+"Business Source License" is a trademark of MariaDB plc.
+
+-----------------------------------------------------------------------------
+
+Parameters
+
+Licensor:             Blue Cypress, Inc.
+
+Licensed Work:        MemberJunction.
+                      The Licensed Work is (c) 2023-2026 Blue Cypress, Inc.
+
+Additional Use Grant: Subject to the terms of this License, Licensor grants
+                      you the following additional rights to make Production
+                      Use of the Licensed Work.
+
+                      1. Internal Use
+
+                      You may make production use of the Licensed Work for
+                      your own internal business or organizational operations.
+
+                      2. Nonprofit Use
+
+                      If you are a Nonprofit, you may make production use of
+                      the Licensed Work for the operations and activities of
+                      your Organizational Family.
+
+                      3. MemberJunction Certified Program Use
+
+                      If you are authorized by Licensor under the
+                      MemberJunction Certified Program to provide professional
+                      services using the Licensed Work, you may make
+                      production use of the Licensed Work in providing such
+                      professional services to a client, provided that:
+
+                      (a) the Licensed Work is deployed in, and the applicable
+                      production use occurs within, an environment owned,
+                      leased, licensed, subscribed to, or otherwise controlled
+                      by that client; and
+
+                      (b) the production use is for that client's own internal
+                      business or organizational operations or is otherwise
+                      independently permitted to that client under this
+                      Additional Use Grant.
+
+                      4. Definitions Applicable to the Additional Use Grant
+
+                      "Affiliate" means, with respect to a specified Person,
+                      any other Person that directly or indirectly Controls,
+                      is Controlled by, or is under common Control with such
+                      specified Person.
+
+                      "Control" (including the terms "Controls," "Controlled
+                      by," and "under common Control with") means the direct
+                      or indirect possession of the power to direct or cause
+                      the direction of the management and policies of a
+                      Person, whether through ownership of voting interests,
+                      by contract, or otherwise.
+
+                      "Organizational Family" means, with respect to a Person,
+                      (a) such Person and its Affiliates, and (b) any
+                      nonprofit organization, governmental entity, chapter,
+                      division, local affiliate, regional affiliate, state
+                      affiliate, national affiliate, or other entity that is
+                      formally affiliated with such Person through governing
+                      documents, a charter, bylaws, a membership agreement, or
+                      another written organizational instrument, and is
+                      recognized under such documents as part of the same
+                      organizational structure.
+
+                      "Nonprofit" means a Person recognized by the Internal
+                      Revenue Service as exempt from federal income taxation
+                      under Section 501(c)(3), 501(c)(4), 501(c)(5), or
+                      501(c)(6) of the Internal Revenue Code, or a foreign
+                      organization recognized under substantially equivalent
+                      laws.
+
+                      A Person claiming eligibility as a Nonprofit shall, upon
+                      Licensor's reasonable request, provide documentation
+                      reasonably sufficient to demonstrate that it qualifies
+                      as a Nonprofit. If such Person materially misrepresents,
+                      or is unable to demonstrate, its qualification as a
+                      Nonprofit, the rights granted to such Person under
+                      Section 2 of this Additional Use Grant shall terminate.
+
+                      "MemberJunction Certified Program" means Licensor's
+                      then-current program for certifying and authorizing a
+                      Person to provide professional services using the
+                      Licensed Work.
+
+                      "Person" means any individual, corporation, limited
+                      liability company, partnership, association, nonprofit
+                      organization, governmental entity, or other legal or
+                      organizational entity.
+
+Change Date:          Four (4) years from the date the Licensed Work is first
+                      made available.
+
+Change License:       MIT License.
+
+For information about alternative licensing arrangements for the Licensed
+Work, please contact Blue Cypress, Inc.
+
+-----------------------------------------------------------------------------
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License's text to license
+your works, and to refer to it using the trademark "Business Source License",
+as long as you comply with the Covenants of Licensor below.
+
+-----------------------------------------------------------------------------
+
+Covenants of Licensor
+
+In consideration of the right to use this License's text and the "Business
+Source License" name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where "compatible" means that software provided under the Change License
+   can be included in a program with software provided under GPL Version 2.0
+   or a later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text "None".
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.
+
+-----------------------------------------------------------------------------
+
+Notice
+
+The Business Source License (this document, or the "License") is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.

package/README.md

@@ -1,3 +1,41 @@
-# @mj-biz-apps/orders-server
+# `@mj-biz-apps/orders-server`
 
-Placeholder release. See https://github.com/MemberJunction/bizapps-orders
+**The bootstrap.** Its job is to make sure every `@RegisterClass` decorator in this app has actually
+fired before a request is served.
+
+## Why it exists
+
+MJ resolves entity subclasses and remotable operations through `ClassFactory` at runtime. A
+decorator only registers when its module is **loaded**, and a bundler will happily tree-shake a
+module nothing imports by name. The failure mode is quiet and expensive: `Metadata.GetEntityObject`
+returns the *base* entity, `Save()` writes the row without running a single business rule, and the
+order books with no journal entry.
+
+So this package imports the `Load*` anchors explicitly:
+
+```ts
+LoadOrderEntityServer();
+LoadRefundPaymentOperation();      // 'Orders.RefundPayment'          (D17)
+LoadApplyAccountCreditOperation(); // 'Orders.ApplyAccountCredit'     (D68)
+LoadPreviewPriceOperation();       // 'Orders.PreviewPrice'           (D69)
+LoadDefaultPriceResolver();        // the resolver the walk falls back to
+LoadPromotionEngine();             // the promotion qualifier seam    (D70)
+LoadTaxResolver();                 // the address → jurisdiction seam (D73)
+```
+
+Each anchor is an empty exported function. Its only purpose is to be a name a bundler cannot prove
+is unused.
+
+**Adding a registered class? Add its anchor here.** Nothing will fail loudly if you forget — the base
+class will be used instead, and the first symptom is a financial one.
+
+## Also here
+
+- `config.ts` — server configuration
+- `src/generated/` — CodeGen's GraphQL resolvers. Do not edit; see the Entities package README.
+
+## Verifying registration
+
+The integration suite is the real check: it resolves entities through the same `ClassFactory` a
+request does, so a missing anchor shows up as a rule not running. If a check fails in a way that
+looks like "the guard didn't fire", suspect a missing anchor before suspecting the guard.

package/dist/PaymentWebhookExtension.d.ts

@@ -0,0 +1,17 @@
+import type { Application } from 'express';
+import { BaseServerExtension, type ExtensionHealthResult, type ExtensionInitResult, type ServerExtensionConfig } from '@memberjunction/server-extensions-core';
+export declare class PaymentWebhookExtension extends BaseServerExtension {
+    Initialize(app: Application, config: ServerExtensionConfig): Promise<ExtensionInitResult>;
+    Shutdown(): Promise<void>;
+    HealthCheck(): Promise<ExtensionHealthResult>;
+    /**
+     * The user the webhook's writes are attributed to.
+     *
+     * Returns undefined rather than throwing, so the caller decides the status code. Looked up fresh
+     * each time: the metadata provider may not have been ready when this extension initialised.
+     */
+    private resolveSystemUser;
+}
+/** Tree-shaking anchor — call from the server bootstrap so @RegisterClass is retained. */
+export declare function LoadPaymentWebhookExtension(): void;
+//# sourceMappingURL=PaymentWebhookExtension.d.ts.map

package/dist/PaymentWebhookExtension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaymentWebhookExtension.d.ts","sourceRoot":"","sources":["../src/PaymentWebhookExtension.ts"],"names":[],"mappings":"AA4CA,OAAO,KAAK,EAAE,WAAW,EAAqB,MAAM,SAAS,CAAC;AAI9D,OAAO,EACH,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC7B,MAAM,wCAAwC,CAAC;AAMhD,qBACa,uBAAwB,SAAQ,mBAAmB;IAC/C,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA6CzF,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,WAAW,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAgB1D;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;CAS5B;AAmBD,0FAA0F;AAC1F,wBAAgB,2BAA2B,IAAI,IAAI,CAElD"}

package/dist/PaymentWebhookExtension.js

@@ -0,0 +1,151 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+/**
+ * The route that lets a gateway tell us money moved — finally mounted.
+ *
+ * `MountPaymentWebhook` has existed since the payment drivers landed and was called by nobody. That was
+ * survivable while every provider settled synchronously: a card capture books at the moment it is
+ * asked, so the webhook only ever confirmed something already recorded, and its absence cost a little
+ * reconciliation detail. It stops being survivable the instant a bank debit is configured. A debit is
+ * captured BY the webhook — there is no other moment at which the money is known to have arrived — so
+ * without this route every ACH payment sits `Pending` for ever and no cash is ever booked.
+ *
+ * WHY AN EXTENSION AND NOT A CHANGE TO MJ. MJServer loads `serverExtensions[]` from `mj.config.cjs`
+ * BEFORE it installs the auth middleware, which is precisely the window an unauthenticated webhook
+ * needs. So the route can be mounted from this repo, in this app's own config, with no upstream change
+ * — and an operator can turn it off by flipping `Enabled` rather than by redeploying.
+ *
+ * ═══ TWO THINGS THE MOUNT MUST GET RIGHT, both of them silent when wrong ═══
+ *
+ * BEFORE AUTH. Stripe presents no bearer token; the signature IS the credential. Behind the auth
+ * middleware every delivery would be rejected with a 401 that Stripe retries and eventually gives up
+ * on, and the only symptom is payments that never capture.
+ *
+ * RAW BODY, ON THIS PATH ONLY. The signature covers the exact bytes sent. Any JSON round-trip — key
+ * reordering, whitespace, unicode normalisation — changes them, so a `express.json()` upstream turns
+ * every legitimate webhook into a signature failure. `express.raw()` is scoped to this route so it
+ * cannot affect anything else the app serves.
+ *
+ * THE PROVIDER ID IS IN THE PATH, and one endpoint per configured provider is deliberate. It is what
+ * tells the handler WHICH secret to verify against before it has read a byte of the payload — a single
+ * shared endpoint would have to parse untrusted JSON to work out whose signature to check, which is
+ * the one thing `HandlePaymentWebhook` is ordered to avoid.
+ *
+ * THE SYSTEM USER, AND WHY IT IS RESOLVED PER REQUEST. There is no human behind a webhook, so the
+ * writes are attributed to MJ's system user — the same one MJ's own unauthenticated eSignature webhook
+ * uses, via the same `UserCache`, rather than a bespoke email setting this app would then have to keep
+ * correct. It is looked up on each delivery rather than cached at startup because the extension
+ * initialises before the data provider is necessarily ready, and a user captured too early would be
+ * absent for the lifetime of the process.
+ *
+ * CONNECTS TO:
+ *   HANDLER: @mj-biz-apps/orders-core-entities-server → PaymentWebhookHandler
+ *   CONFIG:  mj.config.cjs → serverExtensions[]
+ *   DOC:     plans/archive/bizapps-orders-master.md D19
+ */
+import BodyParser from 'body-parser';
+import { LogError, LogStatus, Metadata } from '@memberjunction/core';
+import { UserCache } from '@memberjunction/generic-database-provider';
+import { RegisterClass } from '@memberjunction/global';
+import { BaseServerExtension, } from '@memberjunction/server-extensions-core';
+import { MountPaymentWebhook } from '@mj-biz-apps/orders-core-entities-server';
+/** Stripe's largest documented event payload is well under this; the cap keeps the door narrow. */
+const MAX_BODY = '1mb';
+let PaymentWebhookExtension = class PaymentWebhookExtension extends BaseServerExtension {
+    async Initialize(app, config) {
+        const route = `${config.RootPath.replace(/\/+$/, '')}/:providerId`;
+        app.post(route, 
+        // RAW, and scoped to this path. See the header — a JSON parser anywhere upstream of this
+        // invalidates every signature.
+        BodyParser.raw({ type: 'application/json', limit: MAX_BODY }), async (req, res) => {
+            const user = this.resolveSystemUser();
+            if (!user) {
+                // 500, NOT 400. The gateway did nothing wrong and the event is real — this is our
+                // configuration being incomplete, and a 4xx would tell Stripe to stop retrying a
+                // notification we very much want back once someone fixes it.
+                LogError('A payment webhook arrived but MJ\'s system user could not be resolved, so it ' +
+                    'cannot be recorded. The user cache is not populated — this is a startup ' +
+                    'problem, not a problem with the delivery.');
+                res.status(500).json({ received: false });
+                return;
+            }
+            const handler = MountPaymentWebhook(() => ({ provider: Metadata.Provider, user }));
+            await handler({
+                body: req.body,
+                headers: flattenHeaders(req.headers),
+                // Only the one parameter the handler reads, narrowed to a string here rather
+                // than passed through as Express's `string | string[]` dictionary.
+                params: { providerId: String(req.params?.providerId ?? '') },
+            }, res);
+        });
+        LogStatus(`[Orders] Payment webhook route registered at POST ${route}`);
+        return {
+            Success: true,
+            Message: 'Orders payment webhook mounted (unauthenticated, raw body, signature-verified).',
+            RegisteredRoutes: [`POST ${route}`],
+        };
+    }
+    async Shutdown() {
+        // Nothing held open — the route owns no connections, timers or sockets.
+    }
+    async HealthCheck() {
+        // Healthy means "this route can do its job", which is exactly "the system user resolves".
+        // Reporting healthy without checking would hide the one misconfiguration that silently drops
+        // real payment notifications.
+        const user = this.resolveSystemUser();
+        return user
+            ? { Healthy: true, Name: 'OrdersPaymentWebhook' }
+            : {
+                Healthy: false,
+                Name: 'OrdersPaymentWebhook',
+                Details: {
+                    Reason: 'MJ\'s system user does not resolve, so every webhook delivery will be refused.',
+                },
+            };
+    }
+    /**
+     * The user the webhook's writes are attributed to.
+     *
+     * Returns undefined rather than throwing, so the caller decides the status code. Looked up fresh
+     * each time: the metadata provider may not have been ready when this extension initialised.
+     */
+    resolveSystemUser() {
+        try {
+            return UserCache.Instance.GetSystemUser() ?? undefined;
+        }
+        catch {
+            // The cache is not populated yet. Undefined rather than a throw, so the caller can answer
+            // 500 and the gateway retries once startup has finished.
+            return undefined;
+        }
+    }
+};
+PaymentWebhookExtension = __decorate([
+    RegisterClass(BaseServerExtension, 'OrdersPaymentWebhook')
+], PaymentWebhookExtension);
+export { PaymentWebhookExtension };
+/**
+ * Express types a header value as `string | string[]` because a header CAN legitimately repeat.
+ *
+ * The handler wants a flat map, and the flattening matters for exactly one header: `stripe-signature`.
+ * Joining a repeated value with a comma would be right by luck — Stripe's own scheme is already
+ * comma-separated (`t=…,v1=…,v1=…`) so a proxy that split it across two headers rejoins correctly —
+ * whereas taking the first would silently drop half a signature during a secret rotation and fail
+ * verification for events that are perfectly valid.
+ */
+function flattenHeaders(headers) {
+    const flat = {};
+    for (const [key, value] of Object.entries(headers)) {
+        flat[key] = Array.isArray(value) ? value.join(',') : value;
+    }
+    return flat;
+}
+/** Tree-shaking anchor — call from the server bootstrap so @RegisterClass is retained. */
+export function LoadPaymentWebhookExtension() {
+    // intentionally empty
+}
+//# sourceMappingURL=PaymentWebhookExtension.js.map

package/dist/PaymentWebhookExtension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaymentWebhookExtension.js","sourceRoot":"","sources":["../src/PaymentWebhookExtension.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,UAAU,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAY,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACH,mBAAmB,GAItB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAE/E,mGAAmG;AACnG,MAAM,QAAQ,GAAG,KAAK,CAAC;AAGhB,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,mBAAmB;IACrD,KAAK,CAAC,UAAU,CAAC,GAAgB,EAAE,MAA6B;QACnE,MAAM,KAAK,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC;QAEnE,GAAG,CAAC,IAAI,CACJ,KAAK;QACL,yFAAyF;QACzF,+BAA+B;QAC/B,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAC7D,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,kFAAkF;gBAClF,iFAAiF;gBACjF,6DAA6D;gBAC7D,QAAQ,CACJ,+EAA+E;oBAC3E,0EAA0E;oBAC1E,2CAA2C,CAClD,CAAC;gBACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1C,OAAO;YACX,CAAC;YAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACnF,MAAM,OAAO,CACT;gBACI,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;gBACpC,6EAA6E;gBAC7E,mEAAmE;gBACnE,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,EAAE,CAAC,EAAE;aAC/D,EACD,GAAG,CACN,CAAC;QACN,CAAC,CACJ,CAAC;QAEF,SAAS,CAAC,qDAAqD,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO;YACH,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,iFAAiF;YAC1F,gBAAgB,EAAE,CAAC,QAAQ,KAAK,EAAE,CAAC;SACtC,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,QAAQ;QACjB,wEAAwE;IAC5E,CAAC;IAEM,KAAK,CAAC,WAAW;QACpB,0FAA0F;QAC1F,6FAA6F;QAC7F,8BAA8B;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,OAAO,IAAI;YACP,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE;YACjD,CAAC,CAAC;gBACI,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE;oBACL,MAAM,EAAE,gFAAgF;iBAC3F;aACJ,CAAC;IACZ,CAAC;IAED;;;;;OAKG;IACK,iBAAiB;QACrB,IAAI,CAAC;YACD,OAAO,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,SAAS,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACL,0FAA0F;YAC1F,yDAAyD;YACzD,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;CACJ,CAAA;AAjFY,uBAAuB;IADnC,aAAa,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;GAC9C,uBAAuB,CAiFnC;;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,OAA2B;IAC/C,MAAM,IAAI,GAAuC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,2BAA2B;IACvC,sBAAsB;AAC1B,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Server configuration constants used by generated resolvers.
+ * CodeGen imports this from generated/generated.ts.
+ */
+export declare const mj_core_schema = "__mj";
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,cAAc,SAAS,CAAC"}

package/dist/config.js

@@ -0,0 +1,6 @@
+/**
+ * Server configuration constants used by generated resolvers.
+ * CodeGen imports this from generated/generated.ts.
+ */
+export const mj_core_schema = '__mj';
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC"}

package/dist/custom/generate-invoice.action.d.ts

@@ -0,0 +1,59 @@
+/**
+ * @fileoverview `Orders: Generate Invoice` — hand it any order, get back the document you send the
+ * customer.
+ *
+ * WHY AN ACTION AND NOT A REMOTE OPERATION. The other order verbs — confirm, capture, fulfil — are
+ * operations because they are the API a browser calls to change something. This one changes
+ * nothing, and its callers are different in kind: a workflow that emails a bill on confirmation, an
+ * agent asked to "send Contoso their invoice", a scheduled job producing a month's PDFs, a person
+ * clicking Print. Actions are the surface all four already speak, and they are discoverable in
+ * metadata rather than only from code.
+ *
+ * WHAT IT COMPOSES. This class does no arithmetic, no formatting and no markup. It resolves inputs,
+ * calls the reader, the display layer and the template engine in that order, and hands back what
+ * they produced:
+ *
+ *   `InvoiceBuilder`  → the document, per selling company, derived from the order
+ *   `InvoiceDisplay`  → the strings, so the template can print without computing
+ *   MJ Templates      → the HTML, editable in the database with no deploy
+ *
+ * IT RETURNS THE DATA ALONGSIDE THE HTML. A caller that wants a PDF renders the HTML; a caller
+ * doing a reconciliation check wants the numbers, and making it scrape them back out of markup
+ * would be a guarantee that the check and the document eventually disagree.
+ *
+ * IT NEVER WRITES. There is no invoice record — the confirmed order IS the receivable — so
+ * rendering the same order twice produces two identical documents. See the header of
+ * `InvoiceBehavior` for why storing one would be a mistake, and why statements are the opposite
+ * case.
+ *
+ * @module @mj-biz-apps/orders-actions
+ */
+import { BaseAction } from '@memberjunction/actions';
+import type { ActionResultSimple, RunActionParams } from '@memberjunction/actions-base';
+export { DEFAULT_INVOICE_TEMPLATE } from '../services/invoice-renderer.js';
+export type { RenderedInvoice } from '../services/invoice-renderer.js';
+/**
+ * Render an order as an invoice, quote or credit memo.
+ *
+ * Inputs: `OrderID` (required), `CompanyID`, `AsOfDate`, `TemplateName`, `Locale`, `CurrencyCode`,
+ * `Format`, `ShowDiagnostics`. Outputs: `Invoices`, `HTML`, `DocumentCount`, `Notes`.
+ */
+export declare class GenerateInvoiceAction extends BaseAction {
+    /**
+     * AN ACTION MUST NOT THROW AT ITS CALLER. The layers below guard their inputs by throwing —
+     * `RequireUUID` is what keeps an id out of a SQL string — and a workflow, an agent or a print
+     * button calling this gets an exception rather than a result it can branch on. So the whole body
+     * runs behind this, and every failure comes back as a Success=false with a code.
+     */
+    protected InternalRunAction(params: RunActionParams): Promise<ActionResultSimple>;
+    private render;
+}
+/**
+ * Registers {@link GenerateInvoiceAction}.
+ *
+ * WITHOUT THIS ANCHOR the class is tree-shaken out of the bundle, the `@RegisterClass` decorator
+ * never runs, and `ActionEngine` falls back to no implementation — which surfaces as an action that
+ * exists in metadata and does nothing.
+ */
+export declare function LoadGenerateInvoiceAction(): void;
+//# sourceMappingURL=generate-invoice.action.d.ts.map

package/dist/custom/generate-invoice.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-invoice.action.d.ts","sourceRoot":"","sources":["../../src/custom/generate-invoice.action.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,KAAK,EAAe,kBAAkB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAWrG,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,YAAY,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAmCvE;;;;;GAKG;AACH,qBACa,qBAAsB,SAAQ,UAAU;IACjD;;;;;OAKG;cACa,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAYzE,MAAM;CAwGvB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD"}