@mj-biz-apps/orders-server 5.1.0 → 5.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (42) hide show
  1. package/README.md +7 -0
  2. package/dist/CheckoutServerExtension.d.ts +96 -0
  3. package/dist/CheckoutServerExtension.d.ts.map +1 -0
  4. package/dist/CheckoutServerExtension.js +554 -0
  5. package/dist/CheckoutServerExtension.js.map +1 -0
  6. package/dist/__tests__/CheckoutServerExtension.test.d.ts +2 -0
  7. package/dist/__tests__/CheckoutServerExtension.test.d.ts.map +1 -0
  8. package/dist/__tests__/CheckoutServerExtension.test.js +257 -0
  9. package/dist/__tests__/CheckoutServerExtension.test.js.map +1 -0
  10. package/dist/__tests__/checkout-edge-policy.test.d.ts +2 -0
  11. package/dist/__tests__/checkout-edge-policy.test.d.ts.map +1 -0
  12. package/dist/__tests__/checkout-edge-policy.test.js +70 -0
  13. package/dist/__tests__/checkout-edge-policy.test.js.map +1 -0
  14. package/dist/__tests__/checkout-host-page.test.d.ts +2 -0
  15. package/dist/__tests__/checkout-host-page.test.d.ts.map +1 -0
  16. package/dist/__tests__/checkout-host-page.test.js +86 -0
  17. package/dist/__tests__/checkout-host-page.test.js.map +1 -0
  18. package/dist/__tests__/server-extensions-manifest.test.d.ts +2 -0
  19. package/dist/__tests__/server-extensions-manifest.test.d.ts.map +1 -0
  20. package/dist/__tests__/server-extensions-manifest.test.js +29 -0
  21. package/dist/__tests__/server-extensions-manifest.test.js.map +1 -0
  22. package/dist/checkout-edge-policy.d.ts +44 -0
  23. package/dist/checkout-edge-policy.d.ts.map +1 -0
  24. package/dist/checkout-edge-policy.js +84 -0
  25. package/dist/checkout-edge-policy.js.map +1 -0
  26. package/dist/checkout-host-page.d.ts +43 -0
  27. package/dist/checkout-host-page.d.ts.map +1 -0
  28. package/dist/checkout-host-page.js +445 -0
  29. package/dist/checkout-host-page.js.map +1 -0
  30. package/dist/generated/generated.d.ts +189 -173
  31. package/dist/generated/generated.d.ts.map +1 -1
  32. package/dist/generated/generated.js +1152 -1947
  33. package/dist/generated/generated.js.map +1 -1
  34. package/dist/index.d.ts +2 -0
  35. package/dist/index.d.ts.map +1 -1
  36. package/dist/index.js +13 -1
  37. package/dist/index.js.map +1 -1
  38. package/dist/server-extensions-manifest.d.ts +14 -0
  39. package/dist/server-extensions-manifest.d.ts.map +1 -0
  40. package/dist/server-extensions-manifest.js +15 -0
  41. package/dist/server-extensions-manifest.js.map +1 -0
  42. package/package.json +30 -13
@@ -0,0 +1 @@
1
+ {"version":3,"file":"CheckoutServerExtension.js","sourceRoot":"","sources":["../src/CheckoutServerExtension.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,OAAO,UAAU,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAY,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACH,mBAAmB,GAItB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAA0B,MAAM,0CAA0C,CAAC;AAEtH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,aAAa,IAAI,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACnH,OAAO,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAE3H,iFAAiF;AACjF,MAAM,QAAQ,GAAG,OAAO,CAAC;AAEzB,6EAA6E;AAC7E,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC,kFAAkF;AAClF,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEvD,uFAAuF;AACvF,SAAS,yBAAyB;IAC9B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAChE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACL,4BAA4B;IAChC,CAAC;IACD,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC,CAAC;QAC3E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACL,kBAAkB;IACtB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACxC,OAAO,GAAG,CAAC;QACf,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,uEAAuE;AACvE,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,MAAM,uBAAuB,GAAG,sCAAsC,CAAC;AACvE,MAAM,4BAA4B,GAAG,kDAAkD,CAAC;AACxF,MAAM,sBAAsB,GAAG,qCAAqC,CAAC;AAErE,MAAM,oBAAoB,GAAG,2DAA2D,CAAC;AA8BzF,0FAA0F;AAC1F,MAAM,UAAU,mCAAmC,CAC/C,QAA6D,EAC7D,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,QAAQ,CAAC,qBAAqB,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,QAAQ,CAAC,qBAAqB,KAAK,KAAK,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC;AAClD,CAAC;AAQM,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,mBAAmB;IAAzD;;QACK,aAAQ,GAAyB,EAAE,CAAC;QACpC,gBAAW,GAAG,IAAI,GAAG,EAAkD,CAAC;QACxE,6BAAwB,GAAG,KAAK,CAAC;QACjC,aAAQ,GAAG,WAAW,CAAC;QACvB,eAAU,GAAG,CAAC,CAAC;IAic3B,CAAC;IA/bU,KAAK,CAAC,UAAU,CAAC,GAAgB,EAAE,MAA6B;QACnE,IAAI,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAyB,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC;QAChE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAElD,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAC;QAC/C,IAAI,UAAU,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,kBAAkB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;gBAC7C,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;YAClF,CAAC,CAAC,CAAC;YACH,IAAI,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,sBAAsB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;oBACjD,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;gBAChF,CAAC,CAAC,CAAC;YACP,CAAC;YACD,SAAS,CAAC,iDAAiD,UAAU,WAAW,IAAI,kBAAkB,CAAC,CAAC;QAC5G,CAAC;QAED,MAAM,MAAM,GAAoE;YAC5E,CAAC,GAAG,IAAI,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrE,CAAC,GAAG,IAAI,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC3D,CAAC,GAAG,IAAI,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5E,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;SACpE,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;YACnC,iFAAiF;YACjF,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC3B,KAAK,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,KAAmB,EAAE,EAAE;gBACtE,KAAK,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,IAAI,QAAQ,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAEjF,SAAS,CAAC,4CAA4C,QAAQ,aAAa,IAAI,6CAA6C,CAAC,CAAC;QAC9H,OAAO;YACH,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,iHAAiH;YAC1H,gBAAgB,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,OAAO,QAAQ,EAAE,CAAC;SACnF,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,QAAQ;QACjB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,WAAW;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,OAAO,IAAI;YACP,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE;YAC/C,CAAC,CAAC;gBACI,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,EAAE,MAAM,EAAE,wGAAwG,EAAE;aAChI,CAAC;IACZ,CAAC;IAED,6EAA6E;IAE7E,+FAA+F;IACvF,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAa,EAAE,OAAuD;QAC1G,IAAI,CAAC;YACD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;YAC9E,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC1F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,sDAAsD,EAAE,CAAC,CAAC;gBAC/G,OAAO;YACX,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClB,0EAA0E;gBAC1E,6DAA6D;gBAC7D,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACxB,OAAO;YACX,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC1C,OAAO,CAAC,oCAAoC;YAChD,CAAC;YAED,IAAI,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5D,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;gBACzD,IAAI,gBAAgB,EAAE,CAAC;oBACnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAAC;oBAC3C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;oBACnE,OAAO;gBACX,CAAC;YACL,CAAC;YAED,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,QAAQ,CAAC,2CAA2C,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACnG,CAAC;QACL,CAAC;IACL,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAa;QACrD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,IAAI,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;gBACpD,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC1B,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1B,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,iBAAiB,CAAC,GAAY;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,OAAO,EAAE,CAAC;QAEzB,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAE3F,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAA2C;gBACvE,UAAU,EAAE,4BAA4B;gBACxC,MAAM,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC;gBAClC,WAAW,EAAE,WAAW,UAAU,CAAC,IAAI,CAAC,yBAAyB;gBACjE,UAAU,EAAE,QAAQ;aACvB,EAAE,IAAI,CAAC,CAAC;YACT,QAAQ,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,CAAC;aAAM,IAAI,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAA2C;gBACvE,UAAU,EAAE,uBAAuB;gBACnC,MAAM,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC;gBAClC,WAAW,EAAE,SAAS,UAAU,CAAC,SAAS,CAAC,GAAG;gBAC9C,UAAU,EAAE,QAAQ;aACvB,EAAE,IAAI,CAAC,CAAC;YACT,QAAQ,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAA+C;YAC7E,UAAU,EAAE,sBAAsB;YAClC,MAAM,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC;YAC/B,WAAW,EAAE,SAAS,UAAU,CAAC,QAAQ,CAAC,GAAG;YAC7C,UAAU,EAAE,QAAQ;SACvB,EAAE,IAAI,CAAC,CAAC;QACT,MAAM,SAAS,GAAG,SAAS,EAAE,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9G,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAgC,CAAC;YACpE,OAAO;gBACH,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC1I,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,KAAK,IAAI;aACrD,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAED,gFAAgF;IACxE,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,MAAwB;QACzE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,mFAAmF;YACnF,2CAA2C;YAC3C,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,kDAAkD,EAAE,CAAC,CAAC;YAC3G,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,aAAa,CAAC,MAAc,EAAE,MAAwB,EAAE,GAAY;QACxE,OAAO,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChH,CAAC;IAEO,cAAc,CAAC,GAAa,EAAE,MAAc;QAChD,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;QACrD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChC,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAC9D,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,mFAAmF;IAC3E,oBAAoB,CAAC,GAAY;QACrC,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,eAAe,CAAC,GAAY;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,QAAQ,CAAC,6GAA6G,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,kBAAkB,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;YAC5K,OAAO,CAAC,GAAG,EAAE,sEAAsE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9F,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,oBAAoB,EAAE;gBAChD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC1B,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAA0B,CAAC;YAClE,OAAO,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;QACrG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,QAAQ,CAAC,4DAA4D,GAAG,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,EAAE,mEAAmE,CAAC,CAAC;QACtF,CAAC;IACL,CAAC;IAED,6EAA6E;IAE7E;;;;OAIG;IACK,KAAK,CAAC,aAAa,CAAC,GAAY,EAAE,GAAa;QACnD,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,kCAAkC,CAAC,CAAC;gBACjE,OAAO;YACX,CAAC;YACD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;YAC9E,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC9F,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,sDAAsD,CAAC,CAAC;gBACrF,OAAO;YACX,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,mDAAmD,CAAC,CAAC;gBAClF,OAAO;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,iCAAiC,CAAC,CAAC;gBAChE,OAAO;YACX,CAAC;YACD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACpD,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1C,GAAG;iBACE,MAAM,CAAC,GAAG,CAAC;iBACX,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC;iBACrD,IAAI,CAAC,sBAAsB,CAAC;gBACzB,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,kBAAkB,CAAC,CAAC,CAAC,SAAS;aAC3F,CAAC,CAAC,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,QAAQ,CAAC,qDAAqD,GAAG,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnB,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,sCAAsC,CAAC,CAAC;YACzE,CAAC;QACL,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,GAAa,EAAE,MAAc,EAAE,OAAe;QAChE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1C,GAAG;aACE,MAAM,CAAC,MAAM,CAAC;aACd,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC;aACrD,IAAI,CAAC,2BAA2B,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAEO,wBAAwB,CAAC,GAAa,EAAE,KAAa;QACzD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACL,CAAC;IAEO,wBAAwB,CAAC,IAAc;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAC3C,OAAO;QACX,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QACtB,KAAK,sBAAsB,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC7E,QAAQ,CAAC,6CAA6C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9G,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,WAAW,CAAC,GAAY;QAC5B,IAAI,OAAO,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC;QACD,OAAO,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,IAAY,EAAE,IAAc;QAC/D,MAAM,EAAE,GAAG,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAiB;YAC7C,UAAU,EAAE,4BAA4B;YACxC,MAAM,EAAE,CAAC,IAAI,CAAC;YACd,WAAW,EAAE,WAAW,UAAU,CAAC,IAAI,CAAC,yBAAyB;YACjE,UAAU,EAAE,QAAQ;SACvB,EAAE,IAAI,CAAC,CAAC;QACT,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,4EAA4E;IAEpE,KAAK,CAAC,gBAAgB,CAAC,GAAY,EAAE,GAAa;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,+DAA+D,EAAE,CAAC,CAAC;YACxH,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC5F,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAa;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,+DAA+D,EAAE,CAAC,CAAC;YACxH,OAAO;QACX,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,IAAI,CAAC,KAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACzG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,GAAY,EAAE,GAAa;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,+DAA+D,EAAE,CAAC,CAAC;YACxH,OAAO;QACX,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,2BAA2B,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC3G,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAY,EAAE,GAAa;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,+DAA+D,EAAE,CAAC,CAAC;YACxH,OAAO;QACX,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAChG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,4EAA4E;IAE5E,kEAAkE;IAC1D,iBAAiB,CAAC,SAAiB,EAAE,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,2BAA2B;QACjH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,sBAAsB,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,QAAQ,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACvB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACpC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,KAAK,GAAG,YAAY,CAAC;IACtC,CAAC;IAED;;;OAGG;IACK,QAAQ,CAAC,GAAY;QACzB,OAAO,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;OAIG;IACK,iBAAiB;QACrB,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACnE,IAAI,KAAK,EAAE,CAAC;gBACR,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;gBAC7F,IAAI,KAAK,EAAE,CAAC;oBACR,OAAO,KAAK,CAAC;gBACjB,CAAC;gBACD,QAAQ,CAAC,qDAAqD,KAAK,iEAAiE,CAAC,CAAC;YAC1I,CAAC;iBAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBACxC,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;gBACrC,SAAS,CAAC,sJAAsJ,CAAC,CAAC;YACtK,CAAC;YACD,OAAO,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,SAAS,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;CACJ,CAAA;AAtcY,uBAAuB;IADnC,aAAa,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;GAC5C,uBAAuB,CAscnC;;AAED,0FAA0F;AAC1F,MAAM,UAAU,2BAA2B;IACvC,sBAAsB;AAC1B,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=CheckoutServerExtension.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"CheckoutServerExtension.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/CheckoutServerExtension.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,257 @@
1
+ import { beforeEach, describe, expect, it, vi } from 'vitest';
2
+ const mockRunView = vi.fn();
3
+ const mockGetSystemUser = vi.fn();
4
+ vi.mock('@memberjunction/core', () => ({
5
+ LogError: vi.fn(),
6
+ LogStatus: vi.fn(),
7
+ RunView: class {
8
+ constructor() {
9
+ this.RunView = mockRunView;
10
+ }
11
+ },
12
+ }));
13
+ vi.mock('@memberjunction/generic-database-provider', () => ({
14
+ UserCache: {
15
+ Instance: {
16
+ Users: [],
17
+ GetSystemUser: () => mockGetSystemUser(),
18
+ },
19
+ },
20
+ }));
21
+ vi.mock('@memberjunction/global', () => ({
22
+ RegisterClass: () => (cls) => cls,
23
+ }));
24
+ vi.mock('@mj-biz-apps/orders-core-entities-server', () => ({
25
+ CheckoutSessionService: {
26
+ InitializeSession: vi.fn(),
27
+ UpdateDraft: vi.fn(),
28
+ OpenPaymentIntentForSession: vi.fn(),
29
+ CompleteCheckout: vi.fn(),
30
+ ReapExpiredOpenSessions: vi.fn().mockResolvedValue(0),
31
+ },
32
+ EscapeText: (value) => value.replace(/'/g, "''"),
33
+ }));
34
+ import { CheckoutSessionService } from '@mj-biz-apps/orders-core-entities-server';
35
+ import { CheckoutServerExtension, shouldServeCheckoutElementSourceMap } from '../CheckoutServerExtension.js';
36
+ function mockApp() {
37
+ const routes = { get: {}, post: {}, options: {} };
38
+ const app = {
39
+ get: vi.fn((path, handler) => {
40
+ routes.get[path] = handler;
41
+ }),
42
+ post: vi.fn((path, ...handlers) => {
43
+ routes.post[path] = handlers;
44
+ }),
45
+ options: vi.fn((path, handler) => {
46
+ routes.options[path] = handler;
47
+ }),
48
+ };
49
+ return { app, routes };
50
+ }
51
+ function mockRes() {
52
+ const res = {
53
+ statusCode: 200,
54
+ body: '',
55
+ headers: {},
56
+ headersSent: false,
57
+ status(code) {
58
+ this.statusCode = code;
59
+ return this;
60
+ },
61
+ setHeader(name, value) {
62
+ this.headers[name.toLowerCase()] = value;
63
+ return this;
64
+ },
65
+ send(body) {
66
+ this.body = body;
67
+ this.headersSent = true;
68
+ return this;
69
+ },
70
+ json(body) {
71
+ this.body = JSON.stringify(body);
72
+ this.headersSent = true;
73
+ return this;
74
+ },
75
+ end() {
76
+ this.headersSent = true;
77
+ return this;
78
+ },
79
+ };
80
+ return res;
81
+ }
82
+ describe('shouldServeCheckoutElementSourceMap', () => {
83
+ it('defaults off — the public payment route must not publish TypeScript', () => {
84
+ expect(shouldServeCheckoutElementSourceMap({}, {})).toBe(false);
85
+ expect(shouldServeCheckoutElementSourceMap({}, { NODE_ENV: 'development' })).toBe(false);
86
+ expect(shouldServeCheckoutElementSourceMap({}, { NODE_ENV: 'production' })).toBe(false);
87
+ });
88
+ it('opts in via Settings or CHECKOUT_ELEMENT_SOURCEMAP=1', () => {
89
+ expect(shouldServeCheckoutElementSourceMap({ ServeElementSourceMap: true }, {})).toBe(true);
90
+ expect(shouldServeCheckoutElementSourceMap({}, { CHECKOUT_ELEMENT_SOURCEMAP: '1' })).toBe(true);
91
+ expect(shouldServeCheckoutElementSourceMap({ ServeElementSourceMap: false }, { CHECKOUT_ELEMENT_SOURCEMAP: '1' })).toBe(false);
92
+ });
93
+ });
94
+ describe('CheckoutServerExtension', () => {
95
+ beforeEach(() => {
96
+ vi.clearAllMocks();
97
+ mockGetSystemUser.mockReturnValue({ ID: 'sys', Email: 'system@local' });
98
+ mockRunView.mockResolvedValue({ Success: true, Results: [{ ID: 'dist-1', CheckoutWidgetID: 'widget-1' }] });
99
+ });
100
+ it('registers POST verbs plus GET /:slug and reports both in RegisteredRoutes', async () => {
101
+ const { app, routes } = mockApp();
102
+ const ext = new CheckoutServerExtension();
103
+ const result = await ext.Initialize(app, {
104
+ Enabled: true,
105
+ DriverClass: 'OrdersCheckoutEdge',
106
+ RootPath: '/checkout',
107
+ Settings: {},
108
+ });
109
+ expect(result.Success).toBe(true);
110
+ expect(Object.keys(routes.post).sort()).toEqual([
111
+ '/checkout/complete',
112
+ '/checkout/draft',
113
+ '/checkout/initialize',
114
+ '/checkout/payment-intent',
115
+ ]);
116
+ expect(Object.keys(routes.get).sort()).toEqual(['/checkout/:slug', '/checkout/element/main.js'].sort());
117
+ expect(routes.get['/checkout/element/main.js.map']).toBeUndefined();
118
+ expect(result.RegisteredRoutes).toEqual([
119
+ 'POST /checkout/initialize',
120
+ 'POST /checkout/draft',
121
+ 'POST /checkout/payment-intent',
122
+ 'POST /checkout/complete',
123
+ 'GET /checkout/:slug',
124
+ ]);
125
+ });
126
+ it('GET 404s reserved slugs without looking up a distribution', async () => {
127
+ const { app, routes } = mockApp();
128
+ await new CheckoutServerExtension().Initialize(app, {
129
+ Enabled: true,
130
+ DriverClass: 'OrdersCheckoutEdge',
131
+ RootPath: '/checkout',
132
+ Settings: {},
133
+ });
134
+ const res = mockRes();
135
+ await routes.get['/checkout/:slug']({ params: { slug: 'initialize' }, headers: {}, socket: {} }, res);
136
+ expect(res.statusCode).toBe(404);
137
+ expect(res.body).toContain('not valid');
138
+ expect(mockRunView).not.toHaveBeenCalled();
139
+ });
140
+ it('GET 404s an unknown slug', async () => {
141
+ mockRunView.mockResolvedValueOnce({ Success: true, Results: [] });
142
+ const { app, routes } = mockApp();
143
+ await new CheckoutServerExtension().Initialize(app, {
144
+ Enabled: true,
145
+ DriverClass: 'OrdersCheckoutEdge',
146
+ RootPath: '/checkout',
147
+ Settings: {},
148
+ });
149
+ const res = mockRes();
150
+ await routes.get['/checkout/:slug']({ params: { slug: 'missing-event' }, headers: {}, socket: { remoteAddress: '127.0.0.1' } }, res);
151
+ expect(res.statusCode).toBe(404);
152
+ expect(res.body).toContain('not available');
153
+ expect(mockRunView).toHaveBeenCalled();
154
+ });
155
+ it('GET 503s when no acting user resolves', async () => {
156
+ mockGetSystemUser.mockReturnValue(undefined);
157
+ const { app, routes } = mockApp();
158
+ await new CheckoutServerExtension().Initialize(app, {
159
+ Enabled: true,
160
+ DriverClass: 'OrdersCheckoutEdge',
161
+ RootPath: '/checkout',
162
+ Settings: {},
163
+ });
164
+ const res = mockRes();
165
+ await routes.get['/checkout/:slug']({ params: { slug: 'summit-2027' }, headers: {}, socket: { remoteAddress: '127.0.0.1' } }, res);
166
+ expect(res.statusCode).toBe(503);
167
+ expect(mockRunView).not.toHaveBeenCalled();
168
+ });
169
+ it('GET 200s an Active distribution with escaped slug and no-store HTML', async () => {
170
+ const { app, routes } = mockApp();
171
+ await new CheckoutServerExtension().Initialize(app, {
172
+ Enabled: true,
173
+ DriverClass: 'OrdersCheckoutEdge',
174
+ RootPath: '/checkout/',
175
+ Settings: {},
176
+ });
177
+ const res = mockRes();
178
+ await routes.get['/checkout/:slug']({ params: { slug: 'summit-2027' }, headers: {}, socket: { remoteAddress: '127.0.0.1' } }, res);
179
+ expect(res.statusCode).toBe(200);
180
+ expect(res.headers['content-type']).toBe('text/html; charset=utf-8');
181
+ expect(res.headers['cache-control']).toBe('no-store');
182
+ expect(res.headers['x-frame-options']).toBe('DENY');
183
+ expect(res.headers['referrer-policy']).toBe('no-referrer');
184
+ expect(res.headers['content-security-policy']).toContain("frame-ancestors 'none'");
185
+ expect(res.headers['content-security-policy']).toContain("default-src 'none'");
186
+ expect(res.body).toContain('slug="summit-2027"');
187
+ expect(res.body).toContain('api-root="/checkout"');
188
+ expect(res.body).toContain('src="/checkout/element/main.js"');
189
+ const filter = mockRunView.mock.calls[0][0].ExtraFilter;
190
+ expect(filter).toContain("Slug = 'summit-2027'");
191
+ expect(filter).toContain("Status = 'Active'");
192
+ expect(CheckoutSessionService.ReapExpiredOpenSessions).toHaveBeenCalledTimes(1);
193
+ });
194
+ it('does not re-reap within the interval, then reaps again after it elapses', async () => {
195
+ vi.useFakeTimers();
196
+ try {
197
+ vi.setSystemTime(new Date('2026-08-26T12:00:00Z'));
198
+ const { app, routes } = mockApp();
199
+ await new CheckoutServerExtension().Initialize(app, {
200
+ Enabled: true,
201
+ DriverClass: 'OrdersCheckoutEdge',
202
+ RootPath: '/checkout',
203
+ Settings: {},
204
+ });
205
+ const req = { params: { slug: 'summit-2027' }, headers: {}, socket: { remoteAddress: '127.0.0.1' } };
206
+ await routes.get['/checkout/:slug'](req, mockRes());
207
+ await routes.get['/checkout/:slug'](req, mockRes());
208
+ expect(CheckoutSessionService.ReapExpiredOpenSessions).toHaveBeenCalledTimes(1);
209
+ vi.setSystemTime(new Date('2026-08-26T12:01:01Z'));
210
+ await routes.get['/checkout/:slug'](req, mockRes());
211
+ expect(CheckoutSessionService.ReapExpiredOpenSessions).toHaveBeenCalledTimes(2);
212
+ }
213
+ finally {
214
+ vi.useRealTimers();
215
+ }
216
+ });
217
+ it('escapes a hostile slug in the GET ExtraFilter', async () => {
218
+ const { app, routes } = mockApp();
219
+ await new CheckoutServerExtension().Initialize(app, {
220
+ Enabled: true,
221
+ DriverClass: 'OrdersCheckoutEdge',
222
+ RootPath: '/checkout',
223
+ Settings: {},
224
+ });
225
+ const res = mockRes();
226
+ // Passes the URL-safe pattern but still contains a quote if we ever loosen it —
227
+ // use a valid slug here and assert EscapeText is applied via the apostrophe case
228
+ // by calling with a slug that includes underscore/dot only; SQL quoting is
229
+ // covered by EscapeText unit tests. This asserts the filter is parameterized
230
+ // through EscapeText for the accepted slug.
231
+ await routes.get['/checkout/:slug']({ params: { slug: 'summit_2027' }, headers: {}, socket: { remoteAddress: '127.0.0.1' } }, res);
232
+ expect(mockRunView.mock.calls[0][0].ExtraFilter).toContain("Slug = 'summit_2027'");
233
+ });
234
+ it('does not key rate limits on a spoofed leftmost X-Forwarded-For (default TrustedProxyHops=0)', async () => {
235
+ const { app, routes } = mockApp();
236
+ const ext = new CheckoutServerExtension();
237
+ await ext.Initialize(app, {
238
+ Enabled: true,
239
+ DriverClass: 'OrdersCheckoutEdge',
240
+ RootPath: '/checkout',
241
+ Settings: { RateLimitMax: 2, RateLimitMaxGlobal: 2, RateLimitWindowMs: 60_000 },
242
+ });
243
+ const hit = async (xff) => {
244
+ const res = mockRes();
245
+ await routes.get['/checkout/:slug']({
246
+ params: { slug: 'summit-2027' },
247
+ headers: { 'x-forwarded-for': xff },
248
+ socket: { remoteAddress: '10.0.0.9' },
249
+ }, res);
250
+ return res.statusCode;
251
+ };
252
+ expect(await hit('1.1.1.1')).toBe(200);
253
+ expect(await hit('2.2.2.2')).toBe(200);
254
+ expect(await hit('3.3.3.3')).toBe(429);
255
+ });
256
+ });
257
+ //# sourceMappingURL=CheckoutServerExtension.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"CheckoutServerExtension.test.js","sourceRoot":"","sources":["../../src/__tests__/CheckoutServerExtension.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9D,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC5B,MAAM,iBAAiB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAElC,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;IACjB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,OAAO,EAAE;QAAA;YACL,YAAO,GAAG,WAAW,CAAC;QAC1B,CAAC;KAAA;CACJ,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE,CAAC,CAAC;IACxD,SAAS,EAAE;QACP,QAAQ,EAAE;YACN,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE;SAC3C;KACJ;CACJ,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG;CAC7C,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,0CAA0C,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,sBAAsB,EAAE;QACpB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;QACpB,2BAA2B,EAAE,EAAE,CAAC,EAAE,EAAE;QACpC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;QACzB,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;KACxD;IACD,UAAU,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;CAC3D,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAQ7G,SAAS,OAAO;IACZ,MAAM,MAAM,GAAa,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG;QACR,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,OAA8C,EAAE,EAAE;YACxE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QAC/B,CAAC,CAAC;QACF,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,GAAG,QAAmB,EAAE,EAAE;YACjD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QACjC,CAAC,CAAC;QACF,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,OAAgB,EAAE,EAAE;YAC9C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QACnC,CAAC,CAAC;KACqB,CAAC;IAC5B,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO;IACZ,MAAM,GAAG,GAAG;QACR,UAAU,EAAE,GAAG;QACf,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,EAA4B;QACrC,WAAW,EAAE,KAAK;QAClB,MAAM,CAAC,IAAY;YACf,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,SAAS,CAAC,IAAY,EAAE,KAAa;YACjC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;YACzC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAY;YACb,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAa;YACd,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,GAAG;YACC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC;IACF,OAAO,GAAG,CAAC;AACf,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,mCAAmC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,CAAC,mCAAmC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,MAAM,CAAC,mCAAmC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,mCAAmC,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5F,MAAM,CAAC,mCAAmC,CAAC,EAAE,EAAE,EAAE,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChG,MAAM,CAAC,mCAAmC,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE,EAAE,EAAE,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnI,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,UAAU,CAAC,GAAG,EAAE;QACZ,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,iBAAiB,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACxE,WAAW,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE;YACrC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YAC5C,oBAAoB;YACpB,iBAAiB;YACjB,sBAAsB;YACtB,0BAA0B;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC;YACpC,2BAA2B;YAC3B,sBAAsB;YACtB,+BAA+B;YAC/B,yBAAyB;YACzB,qBAAqB;SACxB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC/B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAwB,EACjF,GAA0B,CAC7B,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACtC,WAAW,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC/B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAwB,EAChH,GAA0B,CAC7B,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACnD,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC/B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAwB,EAC9G,GAA0B,CAC7B,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC/B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAwB,EAC9G,GAA0B,CAC7B,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACnF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC/E,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAqB,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC9C,MAAM,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACrF,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,IAAI,CAAC;YACD,EAAE,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACnD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,uBAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;gBAChD,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,oBAAoB;gBACjC,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,EAAE;aACf,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAwB,CAAC;YAC3H,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE,OAAO,EAAyB,CAAC,CAAC;YAC3E,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE,OAAO,EAAyB,CAAC,CAAC;YAC3E,MAAM,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAChF,EAAE,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACnD,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE,OAAO,EAAyB,CAAC,CAAC;YAC3E,MAAM,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACpF,CAAC;gBAAS,CAAC;YACP,EAAE,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,gFAAgF;QAChF,iFAAiF;QACjF,2EAA2E;QAC3E,6EAA6E;QAC7E,4CAA4C;QAC5C,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC/B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAwB,EAC9G,GAA0B,CAC7B,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC1C,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE;YACtB,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE;SAClF,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;YAC9B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC/B;gBACI,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;gBAC/B,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE;gBACnC,MAAM,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;aAClB,EACvB,GAA0B,CAC7B,CAAC;YACF,OAAO,GAAG,CAAC,UAAU,CAAC;QAC1B,CAAC,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=checkout-edge-policy.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"checkout-edge-policy.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/checkout-edge-policy.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,70 @@
1
+ import { describe, expect, it } from 'vitest';
2
+ import { CHECKOUT_RESERVED_SLUGS, isSameOrigin, isValidCheckoutSlug, originAllowed, resolveClientIp, } from '../checkout-edge-policy.js';
3
+ describe('isValidCheckoutSlug', () => {
4
+ it('accepts typical vanity slugs', () => {
5
+ expect(isValidCheckoutSlug('summit-2027')).toBe(true);
6
+ expect(isValidCheckoutSlug('A')).toBe(true);
7
+ expect(isValidCheckoutSlug('event_1.2')).toBe(true);
8
+ });
9
+ it('rejects empty, too long, unsafe, and reserved POST verbs', () => {
10
+ expect(isValidCheckoutSlug('')).toBe(false);
11
+ expect(isValidCheckoutSlug('initialize')).toBe(false);
12
+ expect(isValidCheckoutSlug('Draft')).toBe(false);
13
+ expect(isValidCheckoutSlug('payment-intent')).toBe(false);
14
+ expect(isValidCheckoutSlug('complete')).toBe(false);
15
+ expect(isValidCheckoutSlug('../etc')).toBe(false);
16
+ expect(isValidCheckoutSlug('has space')).toBe(false);
17
+ expect(isValidCheckoutSlug('<script>')).toBe(false);
18
+ expect(isValidCheckoutSlug('a'.repeat(129))).toBe(false);
19
+ });
20
+ it('reserved set covers every POST suffix on the edge', () => {
21
+ expect([...CHECKOUT_RESERVED_SLUGS].sort()).toEqual(['complete', 'draft', 'initialize', 'payment-intent'].sort());
22
+ });
23
+ });
24
+ describe('isSameOrigin', () => {
25
+ it('matches scheme-less Host against Origin host:port', () => {
26
+ expect(isSameOrigin('http://localhost:4103', 'localhost:4103')).toBe(true);
27
+ expect(isSameOrigin('https://api.example.com', 'api.example.com')).toBe(true);
28
+ });
29
+ it('rejects missing values, bad URLs, and different hosts', () => {
30
+ expect(isSameOrigin('', 'localhost:4103')).toBe(false);
31
+ expect(isSameOrigin('http://localhost:4103', undefined)).toBe(false);
32
+ expect(isSameOrigin('not-a-url', 'localhost:4103')).toBe(false);
33
+ expect(isSameOrigin('http://localhost:4103', 'localhost:4303')).toBe(false);
34
+ expect(isSameOrigin('https://evil.example', 'api.example.com')).toBe(false);
35
+ });
36
+ });
37
+ describe('originAllowed', () => {
38
+ it('allows same-origin even when the widget allowlist names another site', () => {
39
+ expect(originAllowed('http://localhost:4103', { allowedOrigins: ['https://events.example.com'] }, 'localhost:4103')).toBe(true);
40
+ });
41
+ it('allows any origin when the allowlist is absent or empty', () => {
42
+ expect(originAllowed('https://anywhere.example', {}, 'api.example.com')).toBe(true);
43
+ expect(originAllowed('https://anywhere.example', { allowedOrigins: [] }, 'api.example.com')).toBe(true);
44
+ });
45
+ it('enforces the allowlist for cross-origin embeds (trailing slash insensitive)', () => {
46
+ const policy = { allowedOrigins: ['https://events.example.com/'] };
47
+ expect(originAllowed('https://events.example.com', policy, 'api.example.com')).toBe(true);
48
+ expect(originAllowed('https://other.example.com', policy, 'api.example.com')).toBe(false);
49
+ });
50
+ });
51
+ describe('resolveClientIp', () => {
52
+ const req = (xff, socket = '10.0.0.9') => ({
53
+ headers: { 'x-forwarded-for': xff },
54
+ socket: { remoteAddress: socket },
55
+ });
56
+ it('ignores X-Forwarded-For when no proxy hops are declared (default)', () => {
57
+ expect(resolveClientIp(req('1.2.3.4, 10.0.0.1'))).toBe('10.0.0.9');
58
+ expect(resolveClientIp(req('1.2.3.4'))).toBe('10.0.0.9');
59
+ });
60
+ it('takes the Nth-from-right hop when TrustedProxyHops is set', () => {
61
+ // client, proxy1, proxy2 — with 1 trusted proxy the last hop is what that proxy saw
62
+ expect(resolveClientIp(req('9.9.9.9, 203.0.113.10'), 1)).toBe('203.0.113.10');
63
+ expect(resolveClientIp(req('9.9.9.9, 198.51.100.2, 203.0.113.10'), 2)).toBe('198.51.100.2');
64
+ });
65
+ it('falls back to the socket when XFF is missing or too short for the declared hop count', () => {
66
+ expect(resolveClientIp(req(undefined), 1)).toBe('10.0.0.9');
67
+ expect(resolveClientIp(req('only-one'), 2)).toBe('10.0.0.9');
68
+ });
69
+ });
70
+ //# sourceMappingURL=checkout-edge-policy.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"checkout-edge-policy.test.js","sourceRoot":"","sources":["../../src/__tests__/checkout-edge-policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACH,uBAAuB,EACvB,YAAY,EACZ,mBAAmB,EACnB,aAAa,EACb,eAAe,GAClB,MAAM,4BAA4B,CAAC;AAEpC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,CAAC,GAAG,uBAAuB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAC/C,CAAC,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAC/D,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,YAAY,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,YAAY,CAAC,yBAAyB,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,YAAY,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,CAAC,YAAY,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,YAAY,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC5E,MAAM,CACF,aAAa,CAAC,uBAAuB,EAAE,EAAE,cAAc,EAAE,CAAC,4BAA4B,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAC/G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,aAAa,CAAC,0BAA0B,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,CAAC,aAAa,CAAC,0BAA0B,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACnF,MAAM,MAAM,GAAG,EAAE,cAAc,EAAE,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACnE,MAAM,CAAC,aAAa,CAAC,4BAA4B,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,MAAM,CAAC,aAAa,CAAC,2BAA2B,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC7B,MAAM,GAAG,GAAG,CAAC,GAAuB,EAAE,MAAM,GAAG,UAAU,EAAE,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE;QACnC,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE;KACpC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACjE,oFAAoF;QACpF,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9E,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC5F,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=checkout-host-page.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"checkout-host-page.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/checkout-host-page.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,86 @@
1
+ import { describe, expect, it } from 'vitest';
2
+ import { checkoutHostSecurityHeaders, escapeAttr, escapeHtml, renderCheckoutHostErrorPage, renderCheckoutHostPage, } from '../checkout-host-page.js';
3
+ describe('escapeHtml / escapeAttr', () => {
4
+ it('escapes markup and quotes', () => {
5
+ expect(escapeHtml('<script>alert(1)</script>')).toBe('&lt;script&gt;alert(1)&lt;/script&gt;');
6
+ expect(escapeAttr('x" onclick="alert(1)')).toBe('x&quot; onclick=&quot;alert(1)');
7
+ expect(escapeAttr('a&b<c>')).toBe('a&amp;b&lt;c&gt;');
8
+ });
9
+ });
10
+ describe('renderCheckoutHostPage', () => {
11
+ it('hosts the Angular Element when elementSrc is provided', () => {
12
+ const html = renderCheckoutHostPage({
13
+ slug: 'summit-2027',
14
+ apiRoot: '/checkout',
15
+ elementSrc: '/checkout/element/main.js',
16
+ cspNonce: 'nOnce+/1',
17
+ });
18
+ expect(html).toContain('slug="summit-2027"');
19
+ expect(html).toContain('api-root="/checkout"');
20
+ expect(html).toContain('csp-nonce="nOnce+/1"');
21
+ expect(html).toContain('src="/checkout/element/main.js"');
22
+ expect(html).toContain('type="module"');
23
+ expect(html).toContain('nonce="nOnce+/1"');
24
+ expect(html).not.toContain("post('/initialize'");
25
+ });
26
+ it('bakes slug and api root into data-* attributes, never into the script block', () => {
27
+ const evil = 'summit"</script><script>alert(1)</script>';
28
+ const html = renderCheckoutHostPage({ slug: evil, apiRoot: '/checkout', cspNonce: 'nOnce+/1' });
29
+ expect(html).toContain('data-slug="summit&quot;&lt;/script&gt;&lt;script&gt;alert(1)&lt;/script&gt;"');
30
+ expect(html).toContain('data-api-root="/checkout"');
31
+ const scriptOpen = html.indexOf('<script');
32
+ const scriptTagEnd = html.indexOf('>', scriptOpen);
33
+ const script = html.slice(scriptTagEnd + 1, html.indexOf('</script>'));
34
+ expect(script).not.toContain(evil);
35
+ expect(script).not.toContain('summit"');
36
+ expect(script).toContain("host.getAttribute('data-slug')");
37
+ expect(script).toContain("host.getAttribute('data-api-root')");
38
+ });
39
+ it('drives only the existing POST verbs (no amount/price/provider in the request shape)', () => {
40
+ const html = renderCheckoutHostPage({ slug: 'summit-2027', apiRoot: '/checkout', cspNonce: 'nOnce+/1' });
41
+ expect(html).toContain("post('/initialize'");
42
+ expect(html).toContain("post('/draft'");
43
+ expect(html).toContain("post('/payment-intent'");
44
+ expect(html).toContain("post('/complete'");
45
+ expect(html).toContain('if (stripe) { resolve(stripe); return; }');
46
+ expect(html).toContain('crypto.getRandomValues');
47
+ expect(html).not.toContain('Math.random');
48
+ expect(html).not.toContain('amount:');
49
+ expect(html).not.toContain('UnitPrice');
50
+ expect(html).not.toContain('paymentProviderId');
51
+ });
52
+ it('is a complete HTML document with noindex and utf-8', () => {
53
+ const html = renderCheckoutHostPage({ slug: 'summit-2027', apiRoot: '/checkout', pageTitle: 'Buy <tickets>', cspNonce: 'nOnce+/1' });
54
+ expect(html.startsWith('<!doctype html>')).toBe(true);
55
+ expect(html).toContain('<title>Buy &lt;tickets&gt;</title>');
56
+ expect(html).toContain('name="robots" content="noindex"');
57
+ expect(html).toContain('charset="utf-8"');
58
+ });
59
+ });
60
+ describe('renderCheckoutHostErrorPage', () => {
61
+ it('escapes the operator-facing message and has no boot script', () => {
62
+ const html = renderCheckoutHostErrorPage({ message: 'Not <found> & gone', cspNonce: 'nOnce+/1' });
63
+ expect(html).toContain('Not &lt;found&gt; &amp; gone');
64
+ expect(html).not.toContain('<script>');
65
+ expect(html).toContain('role="alert"');
66
+ });
67
+ it('stamps a CSP nonce onto style and script when provided', () => {
68
+ const html = renderCheckoutHostPage({ slug: 's', apiRoot: '/checkout', cspNonce: 'nOnce+/1' });
69
+ expect(html).toContain('nonce="nOnce+/1"');
70
+ expect(html).toMatch(/<style nonce="nOnce\+\/1">/);
71
+ expect(html).toMatch(/<script nonce="nOnce\+\/1">/);
72
+ });
73
+ });
74
+ describe('checkoutHostSecurityHeaders', () => {
75
+ it('denies framing and scopes scripts to the nonce plus Stripe', () => {
76
+ const h = checkoutHostSecurityHeaders('abc123');
77
+ expect(h['X-Frame-Options']).toBe('DENY');
78
+ expect(h['Referrer-Policy']).toBe('no-referrer');
79
+ expect(h['Content-Security-Policy']).toContain("frame-ancestors 'none'");
80
+ expect(h['Content-Security-Policy']).toContain("'nonce-abc123'");
81
+ expect(h['Content-Security-Policy']).toContain("'self'");
82
+ expect(h['Content-Security-Policy']).toContain('https://js.stripe.com');
83
+ expect(h['Content-Security-Policy']).toContain("default-src 'none'");
84
+ });
85
+ });
86
+ //# sourceMappingURL=checkout-host-page.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"checkout-host-page.test.js","sourceRoot":"","sources":["../../src/__tests__/checkout-host-page.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACH,2BAA2B,EAC3B,UAAU,EACV,UAAU,EACV,2BAA2B,EAC3B,sBAAsB,GACzB,MAAM,0BAA0B,CAAC;AAElC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC9F,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClF,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC7D,MAAM,IAAI,GAAG,sBAAsB,CAAC;YAChC,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,2BAA2B;YACvC,QAAQ,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACnF,MAAM,IAAI,GAAG,2CAA2C,CAAC;QACzD,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8EAA8E,CAAC,CAAC;QACvG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC3F,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACzG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACrI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAClE,MAAM,IAAI,GAAG,2BAA2B,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAClG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACzE,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACxE,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=server-extensions-manifest.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"server-extensions-manifest.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/server-extensions-manifest.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,29 @@
1
+ import { readFileSync } from 'node:fs';
2
+ import { dirname, join } from 'node:path';
3
+ import { fileURLToPath } from 'node:url';
4
+ import { describe, expect, it } from 'vitest';
5
+ import { MJ_SERVER_EXTENSIONS } from '../server-extensions-manifest.js';
6
+ const pkgJsonPath = join(dirname(fileURLToPath(import.meta.url)), '../../package.json');
7
+ describe('MJ_SERVER_EXTENSIONS', () => {
8
+ it('declares the webhook and checkout edge with the same DriverClass/RootPath as mj.config.cjs', () => {
9
+ expect(MJ_SERVER_EXTENSIONS).toEqual([
10
+ {
11
+ Enabled: true,
12
+ DriverClass: 'OrdersPaymentWebhook',
13
+ RootPath: '/webhooks/payments',
14
+ Settings: {},
15
+ },
16
+ {
17
+ Enabled: true,
18
+ DriverClass: 'OrdersCheckoutEdge',
19
+ RootPath: '/checkout',
20
+ Settings: {},
21
+ },
22
+ ]);
23
+ });
24
+ it('mirrors package.json memberjunction.serverExtensions so static introspection matches the export', () => {
25
+ const pkg = JSON.parse(readFileSync(pkgJsonPath, 'utf8'));
26
+ expect(pkg.memberjunction?.serverExtensions).toEqual(MJ_SERVER_EXTENSIONS);
27
+ });
28
+ });
29
+ //# sourceMappingURL=server-extensions-manifest.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"server-extensions-manifest.test.js","sourceRoot":"","sources":["../../src/__tests__/server-extensions-manifest.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;AAExF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QAClG,MAAM,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;YACjC;gBACI,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,sBAAsB;gBACnC,QAAQ,EAAE,oBAAoB;gBAC9B,QAAQ,EAAE,EAAE;aACf;YACD;gBACI,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,oBAAoB;gBACjC,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,EAAE;aACf;SACJ,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QACvG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAEvD,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
@@ -0,0 +1,44 @@
1
+ /**
2
+ * Pure helpers for the anonymous checkout edge: slug validation and origin allowlist.
3
+ * Extracted so unit tests do not have to boot Express or the ClassFactory.
4
+ */
5
+ /** POST route suffixes that must never be treated as a distribution slug. */
6
+ export declare const CHECKOUT_RESERVED_SLUGS: ReadonlySet<string>;
7
+ /**
8
+ * Public distribution slugs: short, URL-safe, not colliding with the POST verbs
9
+ * mounted on the same root.
10
+ */
11
+ export declare function isValidCheckoutSlug(slug: string): boolean;
12
+ /**
13
+ * True when the browser Origin is the same host:port as this request (the
14
+ * first-party `GET /checkout/:slug` page posting back to MJAPI).
15
+ */
16
+ export declare function isSameOrigin(origin: string, hostHeader: string | undefined): boolean;
17
+ export interface CheckoutOriginPolicy {
18
+ allowedOrigins?: string[];
19
+ }
20
+ /**
21
+ * Widget `allowedOrigins` is a **cross-origin embed** allowlist. Same-origin
22
+ * posts from the MJAPI-hosted public page always pass. When the allowlist is
23
+ * absent or empty, any origin is allowed (the distribution slug remains the
24
+ * access control).
25
+ */
26
+ /**
27
+ * Client IP for rate limiting and Turnstile.
28
+ *
29
+ * `TrustedProxyHops` is the number of reverse proxies that append to
30
+ * `X-Forwarded-For`. 0 (the default) ignores XFF entirely and uses the socket
31
+ * address — the leftmost XFF hop is client-supplied and must never key a
32
+ * security decision. When hops is N, the Nth-from-the-right entry is used
33
+ * (the address the outermost trusted proxy observed).
34
+ */
35
+ export declare function resolveClientIp(req: {
36
+ headers: {
37
+ [key: string]: unknown;
38
+ };
39
+ socket?: {
40
+ remoteAddress?: string;
41
+ };
42
+ }, trustedProxyHops?: number): string;
43
+ export declare function originAllowed(origin: string, policy: CheckoutOriginPolicy, hostHeader?: string): boolean;
44
+ //# sourceMappingURL=checkout-edge-policy.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"checkout-edge-policy.d.ts","sourceRoot":"","sources":["../src/checkout-edge-policy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAKtD,CAAC;AAIH;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQzD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAUpF;AAED,MAAM,WAAW,oBAAoB;IACjC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;;;GAKG;AACH;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC3B,GAAG,EAAE;IAAE,OAAO,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAAC,MAAM,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EACjF,gBAAgB,SAAI,GACrB,MAAM,CAgBR;AAED,wBAAgB,aAAa,CACzB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,oBAAoB,EAC5B,UAAU,CAAC,EAAE,MAAM,GACpB,OAAO,CAWT"}