@mj-biz-apps/orders-server 0.0.1 → 5.2.0

package/LICENSE

@@ -0,0 +1,183 @@
+Business Source License 1.1
+
+License text copyright (c) 2024 MariaDB plc, All Rights Reserved.
+"Business Source License" is a trademark of MariaDB plc.
+
+-----------------------------------------------------------------------------
+
+Parameters
+
+Licensor:             Blue Cypress, Inc.
+
+Licensed Work:        MemberJunction.
+                      The Licensed Work is (c) 2023-2026 Blue Cypress, Inc.
+
+Additional Use Grant: Subject to the terms of this License, Licensor grants
+                      you the following additional rights to make Production
+                      Use of the Licensed Work.
+
+                      1. Internal Use
+
+                      You may make production use of the Licensed Work for
+                      your own internal business or organizational operations.
+
+                      2. Nonprofit Use
+
+                      If you are a Nonprofit, you may make production use of
+                      the Licensed Work for the operations and activities of
+                      your Organizational Family.
+
+                      3. MemberJunction Certified Program Use
+
+                      If you are authorized by Licensor under the
+                      MemberJunction Certified Program to provide professional
+                      services using the Licensed Work, you may make
+                      production use of the Licensed Work in providing such
+                      professional services to a client, provided that:
+
+                      (a) the Licensed Work is deployed in, and the applicable
+                      production use occurs within, an environment owned,
+                      leased, licensed, subscribed to, or otherwise controlled
+                      by that client; and
+
+                      (b) the production use is for that client's own internal
+                      business or organizational operations or is otherwise
+                      independently permitted to that client under this
+                      Additional Use Grant.
+
+                      4. Definitions Applicable to the Additional Use Grant
+
+                      "Affiliate" means, with respect to a specified Person,
+                      any other Person that directly or indirectly Controls,
+                      is Controlled by, or is under common Control with such
+                      specified Person.
+
+                      "Control" (including the terms "Controls," "Controlled
+                      by," and "under common Control with") means the direct
+                      or indirect possession of the power to direct or cause
+                      the direction of the management and policies of a
+                      Person, whether through ownership of voting interests,
+                      by contract, or otherwise.
+
+                      "Organizational Family" means, with respect to a Person,
+                      (a) such Person and its Affiliates, and (b) any
+                      nonprofit organization, governmental entity, chapter,
+                      division, local affiliate, regional affiliate, state
+                      affiliate, national affiliate, or other entity that is
+                      formally affiliated with such Person through governing
+                      documents, a charter, bylaws, a membership agreement, or
+                      another written organizational instrument, and is
+                      recognized under such documents as part of the same
+                      organizational structure.
+
+                      "Nonprofit" means a Person recognized by the Internal
+                      Revenue Service as exempt from federal income taxation
+                      under Section 501(c)(3), 501(c)(4), 501(c)(5), or
+                      501(c)(6) of the Internal Revenue Code, or a foreign
+                      organization recognized under substantially equivalent
+                      laws.
+
+                      A Person claiming eligibility as a Nonprofit shall, upon
+                      Licensor's reasonable request, provide documentation
+                      reasonably sufficient to demonstrate that it qualifies
+                      as a Nonprofit. If such Person materially misrepresents,
+                      or is unable to demonstrate, its qualification as a
+                      Nonprofit, the rights granted to such Person under
+                      Section 2 of this Additional Use Grant shall terminate.
+
+                      "MemberJunction Certified Program" means Licensor's
+                      then-current program for certifying and authorizing a
+                      Person to provide professional services using the
+                      Licensed Work.
+
+                      "Person" means any individual, corporation, limited
+                      liability company, partnership, association, nonprofit
+                      organization, governmental entity, or other legal or
+                      organizational entity.
+
+Change Date:          Four (4) years from the date the Licensed Work is first
+                      made available.
+
+Change License:       MIT License.
+
+For information about alternative licensing arrangements for the Licensed
+Work, please contact Blue Cypress, Inc.
+
+-----------------------------------------------------------------------------
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License's text to license
+your works, and to refer to it using the trademark "Business Source License",
+as long as you comply with the Covenants of Licensor below.
+
+-----------------------------------------------------------------------------
+
+Covenants of Licensor
+
+In consideration of the right to use this License's text and the "Business
+Source License" name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where "compatible" means that software provided under the Change License
+   can be included in a program with software provided under GPL Version 2.0
+   or a later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text "None".
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.
+
+-----------------------------------------------------------------------------
+
+Notice
+
+The Business Source License (this document, or the "License") is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.

package/README.md

@@ -1,3 +1,48 @@
-# @mj-biz-apps/orders-server
+# `@mj-biz-apps/orders-server`
 
-Placeholder release. See https://github.com/MemberJunction/bizapps-orders
+**The bootstrap.** Its job is to make sure every `@RegisterClass` decorator in this app has actually
+fired before a request is served.
+
+## Why it exists
+
+MJ resolves entity subclasses and remotable operations through `ClassFactory` at runtime. A
+decorator only registers when its module is **loaded**, and a bundler will happily tree-shake a
+module nothing imports by name. The failure mode is quiet and expensive: `Metadata.GetEntityObject`
+returns the *base* entity, `Save()` writes the row without running a single business rule, and the
+order books with no journal entry.
+
+So this package imports the `Load*` anchors explicitly:
+
+```ts
+LoadOrderEntityServer();
+LoadRefundPaymentOperation();      // 'Orders.RefundPayment'          (D17)
+LoadApplyAccountCreditOperation(); // 'Orders.ApplyAccountCredit'     (D68)
+LoadPreviewPriceOperation();       // 'Orders.PreviewPrice'           (D69)
+LoadDefaultPriceResolver();        // the resolver the walk falls back to
+LoadPromotionEngine();             // the promotion qualifier seam    (D70)
+LoadTaxResolver();                 // the address → jurisdiction seam (D73)
+```
+
+Each anchor is an empty exported function. Its only purpose is to be a name a bundler cannot prove
+is unused.
+
+**Adding a registered class? Add its anchor here.** Nothing will fail loudly if you forget — the base
+class will be used instead, and the first symptom is a financial one.
+
+## Also here
+
+- `config.ts` — server configuration
+- `src/generated/` — CodeGen's GraphQL resolvers. Do not edit; see the Entities package README.
+- `MJ_SERVER_EXTENSIONS` — webhook + checkout edge declarations. MJ bootstrap collects this
+  (or `package.json` `memberjunction.serverExtensions`) from hosts that list this package in
+  `dynamicPackages.server[]`. Host `mj.config.cjs` `serverExtensions[]` overlays by DriverClass.
+- `GET /checkout/:slug` — public HTML host for a distribution; POSTs stay on the same edge.
+  Pre-auth. Host `serverExtensions[]` can set `Enabled: false` to suppress. Settings:
+  `TrustedProxyHops` (default 0 — ignore `X-Forwarded-For`; set to the number of reverse
+  proxies that append to it), `RateLimitMax` / `RateLimitMaxGlobal`.
+
+## Verifying registration
+
+The integration suite is the real check: it resolves entities through the same `ClassFactory` a
+request does, so a missing anchor shows up as a rule not running. If a check fails in a way that
+looks like "the guard didn't fire", suspect a missing anchor before suspecting the guard.

package/dist/CheckoutServerExtension.d.ts

@@ -0,0 +1,96 @@
+import type { Application } from 'express';
+import { BaseServerExtension, type ExtensionHealthResult, type ExtensionInitResult, type ServerExtensionConfig } from '@memberjunction/server-extensions-core';
+interface CheckoutEdgeSettings {
+    /** Email of the named checkout service principal; falls back to the system user. */
+    ServiceUserEmail?: string;
+    /** Name of the env var holding the Cloudflare Turnstile secret. */
+    TurnstileSecretEnvVar?: string;
+    /** Rate-limit window in ms (default 60000). */
+    RateLimitWindowMs?: number;
+    /** Max requests per window per client key (default 30). */
+    RateLimitMax?: number;
+    /**
+     * Aggregate max per IP per window across all slugs (default 90).
+     * Independent of the per-slug cap.
+     */
+    RateLimitMaxGlobal?: number;
+    /**
+     * Number of reverse proxies that append to X-Forwarded-For. 0 (default)
+     * ignores XFF and uses the socket address — the leftmost XFF hop is
+     * client-supplied and must not key rate limits or Turnstile.
+     */
+    TrustedProxyHops?: number;
+    /**
+     * When true, GET `{root}/element/main.js.map` is registered. Default off —
+     * the map is original TypeScript on an unauthenticated payment route.
+     * Also honoured via env `CHECKOUT_ELEMENT_SOURCEMAP=1` when the setting is unset.
+     */
+    ServeElementSourceMap?: boolean;
+}
+/** Source maps on the public checkout element are opt-in (dev). Default: do not serve. */
+export declare function shouldServeCheckoutElementSourceMap(settings: Pick<CheckoutEdgeSettings, 'ServeElementSourceMap'>, env?: NodeJS.ProcessEnv): boolean;
+export declare class CheckoutServerExtension extends BaseServerExtension {
+    private settings;
+    private rateWindows;
+    private warnedSystemUserFallback;
+    private rootPath;
+    private lastReapAt;
+    Initialize(app: Application, config: ServerExtensionConfig): Promise<ExtensionInitResult>;
+    Shutdown(): Promise<void>;
+    HealthCheck(): Promise<ExtensionHealthResult>;
+    /** Runs the shared gates (rate limit → origin → turnstile where required) then the handler. */
+    private guardAndRun;
+    /** OPTIONS preflight: grant CORS only to origins the widget policy allows. */
+    private handlePreflight;
+    /**
+     * Resolves the widget edge policy (allowed origins + turnstile requirement) for this
+     * request — by slug on initialize, by session id on the other routes. Returns null when
+     * nothing resolves (unknown slug/session): the underlying service will answer with its
+     * own refusal.
+     */
+    private resolveEdgePolicy;
+    /** Enforces the per-widget origin allowlist; grants CORS to allowed origins. */
+    private applyOriginGate;
+    private originAllowed;
+    private setCorsHeaders;
+    /** Turnstile applies to the abuse-sensitive endpoints: initialize and complete. */
+    private isTurnstileGatedPath;
+    /**
+     * Verifies the Cloudflare Turnstile token. Returns null on success, or [status, message]
+     * on refusal. A widget that REQUIRES Turnstile with no secret configured fails closed
+     * with a 503 — a silent pass would advertise protection that is not running.
+     */
+    private verifyTurnstile;
+    /**
+     * `GET /checkout/:slug` — first-party HTML that talks to the POST edge.
+     * Unknown/reserved slugs 404; missing service principal is a 503. The page
+     * itself is cache-free; initialize still enforces Active widget + distribution.
+     */
+    private handleGetHost;
+    private sendHostError;
+    private applyHostSecurityHeaders;
+    private maybeReapExpiredSessions;
+    private requestSlug;
+    private activeDistributionExists;
+    private handleInitialize;
+    private handleDraft;
+    private handlePaymentIntent;
+    private handleComplete;
+    /** Fixed-window limiter over a bounded, insertion-ordered map. */
+    private rateLimitExceeded;
+    /**
+     * The client IP for rate limiting and Turnstile. Ignores X-Forwarded-For unless
+     * `Settings.TrustedProxyHops` is a positive integer (Nth-from-right hop).
+     */
+    private clientIp;
+    /**
+     * The acting principal for checkout writes: the configured service user when present,
+     * else MJ's system user (warned once). Resolved per request — the user cache may not be
+     * populated when the extension initializes.
+     */
+    private resolveActingUser;
+}
+/** Tree-shaking anchor — call from the server bootstrap so @RegisterClass is retained. */
+export declare function LoadCheckoutServerExtension(): void;
+export {};
+//# sourceMappingURL=CheckoutServerExtension.d.ts.map

package/dist/CheckoutServerExtension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CheckoutServerExtension.d.ts","sourceRoot":"","sources":["../src/CheckoutServerExtension.ts"],"names":[],"mappings":"AAmDA,OAAO,KAAK,EAAE,WAAW,EAAmC,MAAM,SAAS,CAAC;AAI5E,OAAO,EACH,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC7B,MAAM,wCAAwC,CAAC;AAuDhD,UAAU,oBAAoB;IAC1B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,+CAA+C;IAC/C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,0FAA0F;AAC1F,wBAAgB,mCAAmC,CAC/C,QAAQ,EAAE,IAAI,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,EAC7D,GAAG,GAAE,MAAM,CAAC,UAAwB,GACrC,OAAO,CAQT;AAOD,qBACa,uBAAwB,SAAQ,mBAAmB;IAC5D,OAAO,CAAC,QAAQ,CAA4B;IAC5C,OAAO,CAAC,WAAW,CAA6D;IAChF,OAAO,CAAC,wBAAwB,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,UAAU,CAAK;IAEV,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA+CzF,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,WAAW,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAa1D,+FAA+F;YACjF,WAAW;IAyCzB,8EAA8E;YAChE,eAAe;IAe7B;;;;;OAKG;YACW,iBAAiB;IAsD/B,gFAAgF;IAChF,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,cAAc;IAQtB,mFAAmF;IACnF,OAAO,CAAC,oBAAoB;IAI5B;;;;OAIG;YACW,eAAe;IA6B7B;;;;OAIG;YACW,aAAa;IA4C3B,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,wBAAwB;IAMhC,OAAO,CAAC,wBAAwB;IAWhC,OAAO,CAAC,WAAW;YAOL,wBAAwB;YAaxB,gBAAgB;YAahB,WAAW;YAcX,mBAAmB;YAYnB,cAAc;IAc5B,kEAAkE;IAClE,OAAO,CAAC,iBAAiB;IAkBzB;;;OAGG;IACH,OAAO,CAAC,QAAQ;IAIhB;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;CAkB5B;AAED,0FAA0F;AAC1F,wBAAgB,2BAA2B,IAAI,IAAI,CAElD"}