@nymbalhq/types 1.0.0 → 1.2.0

package/dist/index.d.ts

@@ -142,6 +142,8 @@ interface Product {
 declare const PRODUCT_SORT_KEYS: readonly ["newest", "price-asc", "price-desc", "name-asc", "name-desc"];
 type ProductSortKey = (typeof PRODUCT_SORT_KEYS)[number];
 declare const DEFAULT_PRODUCT_SORT: ProductSortKey;
+/** What a storefront shows for each sort. */
+declare const PRODUCT_SORT_LABELS: Readonly<Record<ProductSortKey, string>>;
 
 interface Category {
     id: string;
@@ -407,6 +409,7 @@ declare const EVT_ORDER_DELIVERED = "order.delivered.v1";
 declare const EVT_ORDER_CANCELLED = "order.cancelled.v1";
 declare const EVT_ORDER_REFUNDED = "order.refunded.v1";
 declare const EVT_ORDER_PARTIALLY_REFUNDED = "order.partially_refunded.v1";
+declare const EVT_ORDER_STATUS_CHANGED = "order.status_changed.v1";
 declare const EVT_INVENTORY_CHANGED = "inventory.changed.v1";
 declare const EVT_INVENTORY_RESERVED = "inventory.reserved.v1";
 declare const EVT_INVENTORY_RELEASED = "inventory.released.v1";
@@ -422,11 +425,13 @@ declare const EVT_CART_ITEM_REMOVED = "cart.item_removed.v1";
 declare const EVT_CART_UPDATED = "cart.updated.v1";
 declare const EVT_CART_ABANDONED = "cart.abandoned.v1";
 declare const EVT_CART_CONVERTED = "cart.converted.v1";
+declare const EVT_PAYMENT_INTENT_CREATED = "payment.intent_created.v1";
 declare const EVT_PAYMENT_CAPTURED = "payment.captured.v1";
 declare const EVT_PAYMENT_FAILED = "payment.failed.v1";
 declare const EVT_PAYMENT_REFUNDED = "payment.refunded.v1";
 declare const EVT_ADAPTER_ERROR = "adapter.error.v1";
-declare const STANDARD_EVENT_TYPES: readonly ["product.created.v1", "product.updated.v1", "product.deleted.v1", "product.published.v1", "product.unpublished.v1", "category.created.v1", "category.updated.v1", "category.deleted.v1", "order.placed.v1", "order.paid.v1", "order.fulfilled.v1", "order.shipped.v1", "order.delivered.v1", "order.cancelled.v1", "order.refunded.v1", "order.partially_refunded.v1", "inventory.changed.v1", "inventory.reserved.v1", "inventory.released.v1", "inventory.low_stock.v1", "inventory.out_of_stock.v1", "customer.created.v1", "customer.updated.v1", "customer.deleted.v1", "cart.created.v1", "cart.item_added.v1", "cart.item_removed.v1", "cart.updated.v1", "cart.abandoned.v1", "cart.converted.v1", "payment.captured.v1", "payment.failed.v1", "payment.refunded.v1", "adapter.error.v1"];
+declare const EVT_SETTINGS_CHANGED = "settings.changed.v1";
+declare const STANDARD_EVENT_TYPES: readonly ["product.created.v1", "product.updated.v1", "product.deleted.v1", "product.published.v1", "product.unpublished.v1", "category.created.v1", "category.updated.v1", "category.deleted.v1", "order.placed.v1", "order.paid.v1", "order.fulfilled.v1", "order.shipped.v1", "order.delivered.v1", "order.cancelled.v1", "order.refunded.v1", "order.partially_refunded.v1", "order.status_changed.v1", "inventory.changed.v1", "inventory.reserved.v1", "inventory.released.v1", "inventory.low_stock.v1", "inventory.out_of_stock.v1", "customer.created.v1", "customer.updated.v1", "customer.deleted.v1", "cart.created.v1", "cart.item_added.v1", "cart.item_removed.v1", "cart.updated.v1", "cart.abandoned.v1", "cart.converted.v1", "payment.intent_created.v1", "payment.captured.v1", "payment.failed.v1", "payment.refunded.v1", "adapter.error.v1", "settings.changed.v1"];
 
 interface ProductSnapshot extends Product {
     variants: Variant[];
@@ -498,6 +503,12 @@ interface OrderPartiallyRefundedV1Payload {
     currency: string;
     reason: string;
 }
+/** A status change no other order event names (an admin moving an order to confirmed or processing). */
+interface OrderStatusChangedV1Payload {
+    orderId: string;
+    from: OrderStatus;
+    to: OrderStatus;
+}
 interface InventoryChangedV1Payload {
     variantId: string;
     previousQty: number;
@@ -560,6 +571,11 @@ interface CartConvertedV1Payload {
     cartId: string;
     orderId: string;
 }
+/** The provider's intent for an order, stored on the order whatever its outcome. */
+interface PaymentIntentCreatedV1Payload {
+    paymentId: string;
+    orderId: string;
+}
 interface PaymentCapturedV1Payload {
     paymentId: string;
     orderId: string;
@@ -587,6 +603,12 @@ interface AdapterErrorV1Payload {
     };
     context: Record<string, unknown>;
 }
+/** A Settings field was saved or cleared; never the value. `source` is where the field comes from afterwards. */
+interface SettingsChangedV1Payload {
+    slot: string;
+    path: string;
+    source: 'settings' | null;
+}
 
 interface NymbalEventMap {
     [EVT_PRODUCT_CREATED]: ProductCreatedV1Payload;
@@ -605,6 +627,7 @@ interface NymbalEventMap {
     [EVT_ORDER_CANCELLED]: OrderCancelledV1Payload;
     [EVT_ORDER_REFUNDED]: OrderRefundedV1Payload;
     [EVT_ORDER_PARTIALLY_REFUNDED]: OrderPartiallyRefundedV1Payload;
+    [EVT_ORDER_STATUS_CHANGED]: OrderStatusChangedV1Payload;
     [EVT_INVENTORY_CHANGED]: InventoryChangedV1Payload;
     [EVT_INVENTORY_RESERVED]: InventoryReservedV1Payload;
     [EVT_INVENTORY_RELEASED]: InventoryReleasedV1Payload;
@@ -619,10 +642,12 @@ interface NymbalEventMap {
     [EVT_CART_UPDATED]: CartUpdatedV1Payload;
     [EVT_CART_ABANDONED]: CartAbandonedV1Payload;
     [EVT_CART_CONVERTED]: CartConvertedV1Payload;
+    [EVT_PAYMENT_INTENT_CREATED]: PaymentIntentCreatedV1Payload;
     [EVT_PAYMENT_CAPTURED]: PaymentCapturedV1Payload;
     [EVT_PAYMENT_FAILED]: PaymentFailedV1Payload;
     [EVT_PAYMENT_REFUNDED]: PaymentRefundedV1Payload;
     [EVT_ADAPTER_ERROR]: AdapterErrorV1Payload;
+    [EVT_SETTINGS_CHANGED]: SettingsChangedV1Payload;
 }
 type NymbalEventType = keyof NymbalEventMap;
 type PayloadOf<E extends NymbalEventType> = NymbalEventMap[E];
@@ -645,6 +670,13 @@ interface NymbalEvent<T = unknown> {
 type EventHandler<T = unknown> = (event: NymbalEvent<T>) => Promise<void> | void;
 
 type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'HEAD' | 'OPTIONS';
+/** The request header a caller may name its own correlation id in, and the response header that echoes the one used. */
+declare const CORRELATION_ID_HEADER = "x-correlation-id";
+/**
+ * Whether `s` may be used as a correlation id: it reaches logs and the event log, so an inbound value that fails is
+ * replaced, never cleaned. The id is a label only; nothing reads it to decide access.
+ */
+declare function isValidCorrelationId(s: string): boolean;
 interface RequestAuth {
     userId?: string;
     roles?: string[];
@@ -670,6 +702,7 @@ interface RequestContext<TBody = unknown, TQuery = Record<string, string | strin
     cookies: Record<string, string>;
     auth?: RequestAuth;
     requestId: string;
+    /** The inbound `x-correlation-id` when `isValidCorrelationId` accepts it, else the request id. */
     correlationId: string;
     logger: Logger;
     ip: string;
@@ -723,6 +756,39 @@ interface HealthReport {
     status: HealthStatus;
     detail?: string;
 }
+/** How long a health check may run before it reports `down`. */
+declare const HEALTH_CHECK_TIMEOUT_MS = 5000;
+interface BoundedHealthCheckOptions {
+    /** `HEALTH_CHECK_TIMEOUT_MS` when not given. */
+    timeoutMs?: number;
+    /** Values an error's message must never show (a URL's user, password or query values); each becomes `***`. */
+    redact?: readonly string[];
+}
+/** An error's message for a report; an AggregateError (a refused connection to every address of a name) lists its own. */
+declare function errorText(error: unknown): string;
+/**
+ * The shortest value worth removing from text as a secret. A shorter one is too likely to be an ordinary word (a local
+ * password of `nymbal`), whose removal garbles the text; user info and query strings go with the URL rewrite anyway.
+ */
+declare const SECRET_MIN_LENGTH = 8;
+/**
+ * The values in a connection URL that are credentials or may carry one: its password and its query values, and its
+ * user unless `user` is false, each as written and decoded, if at least `SECRET_MIN_LENGTH` long. A user is worth
+ * hiding in a driver's error, not in our own text.
+ */
+declare function connectionSecrets(url: string, options?: {
+    user?: boolean;
+}): string[];
+/**
+ * A connection URL as it may be printed: `scheme://host:port/path`, with no user, password, query or fragment. Text
+ * that is not a URL comes back as `<unparsable url>`, since it may be a URL with a secret the parser could not read.
+ */
+declare function displayUrl(url: string): string;
+/**
+ * Runs `check` within the bound. A check that throws is `down` with the error's message, every `redact` value in it
+ * replaced; one still running when the bound passes is `down` with `timed out after <n> ms`, and its signal aborted.
+ */
+declare function boundedHealthCheck(check: (signal: AbortSignal) => Promise<HealthReport> | HealthReport, options?: BoundedHealthCheckOptions): Promise<HealthReport>;
 interface AdapterBase {
     /** What this adapter offers, for the app's per-slot report; each adapter answers for itself. */
     capabilities(): readonly string[];
@@ -733,16 +799,45 @@ interface AdapterBase {
 }
 /** The commerce slots a store's config names a provider for. */
 type CommerceSlot = 'payments' | 'email' | 'reviews' | 'search' | 'analytics' | 'shipping' | 'tax' | 'ai';
+/**
+ * Every slot an adapter package can fill: the commerce slots, the infrastructure primitives and `security`, whose
+ * choice is `security.adapter`.
+ */
+type Slot = CommerceSlot | 'documentStore' | 'eventBus' | 'media' | 'security';
 /**
  * What the kernel hands an adapter package's `createAdapter`. A package that serves more than one slot switches on
- * `slot`; `config` is the slot's `config` block from nymbal.config.ts.
+ * `slot`; `config` is a commerce slot's `config` block from nymbal.config.ts, a primitive's connection block, or for
+ * `security` the block named after the adapter (`security.cloudflare`).
  */
 interface AdapterContext {
-    slot: CommerceSlot;
+    slot: Slot;
     config: Record<string, unknown>;
     logger: Logger;
     env: NodeJS.ProcessEnv;
 }
+/**
+ * One field of a slot's config block that a store owner may fill from the admin's Settings, as a provider package
+ * declares it in its `settings` export. The config block wins, then `env`, then a saved value.
+ */
+interface AdapterSetting {
+    /** A dot path inside the slot's config block: `secretKey`, `smtp.pass`. */
+    path: string;
+    label: string;
+    /** Stored encrypted and never shown again once saved. */
+    secret: boolean;
+    /** The environment variable that sets the field when the config block does not. */
+    env?: string;
+    /**
+     * The adapter works without it (SMTP without authentication), so a secret left unset does not leave the slot
+     * unconfigured.
+     */
+    optional?: boolean;
+}
+/** What a provider package exports: `createAdapter`, and the fields it lets Settings fill. */
+interface ProviderPackageModule {
+    createAdapter(ctx: AdapterContext): unknown;
+    settings?: readonly AdapterSetting[];
+}
 
 interface PutOptions {
     ttl?: number;
@@ -761,8 +856,9 @@ interface QueryParams {
         value: unknown;
     };
     /**
-     * Orders the results without filtering them; `field` may be a dotted path (`priceRange.minMinor`). Ties break by
-     * document key, ascending, so the order is total. A cursor issued under one `orderBy` is refused under another.
+     * Orders the results without filtering them; `field` may be a dotted path (`priceRange.minMinor`). Values compare
+     * with `compareDocumentValues`; null and missing values come last in either direction, and ties break by document
+     * key, ascending, so the order is total. A cursor issued under one `orderBy` is refused under another.
      */
     orderBy?: {
         field: string;
@@ -785,9 +881,37 @@ interface DocumentStoreAdapter {
     query<T>(collection: string, params: QueryParams): Promise<QueryResult<T>>;
     batchGet<T>(collection: string, keys: string[]): Promise<Map<string, T>>;
     batchPut<T>(collection: string, items: Map<string, T>): Promise<void>;
+    /**
+     * Replaces the whole collection with `entries`: afterwards it holds exactly those documents (none with a TTL), and a
+     * reader at any moment sees either the old contents or the new, never a mix. A source that throws leaves the old
+     * contents in place, and the call rejects with its error.
+     */
+    replaceCollection<T>(collection: string, entries: AsyncIterable<[string, T]>): Promise<void>;
     close(): Promise<void>;
+    /**
+     * Whether the store can serve, within `HEALTH_CHECK_TIMEOUT_MS`. Optional, so a store written before it existed
+     * still type-checks; `nymbal doctor` reports one without it as `no healthCheck`.
+     */
+    healthCheck?(): Promise<HealthReport>;
 }
 
+/**
+ * A total order over document values: numbers numerically, strings by `Intl.Collator` at base sensitivity (case and
+ * accents tie), other types after strings, and null or missing last. Values of different types rank by type first.
+ */
+declare function compareDocumentValues(a: unknown, b: unknown): number;
+type SortKeyCondition = Pick<NonNullable<QueryParams['sortKey']>, 'operator' | 'value'>;
+/** `eq` is `===`; `gt`, `lt` and `between` (inclusive, `[low, high]`) are `compareDocumentValues`. */
+declare function matchesSortKey(value: unknown, condition: SortKeyCondition): boolean;
+/** The value at a dotted path (`priceRange.minMinor`); missing anywhere along it is `undefined`. */
+declare function documentValueAt(doc: unknown, path: string): unknown;
+declare const DEFAULT_QUERY_LIMIT = 50;
+/**
+ * One page of `params` over the documents of a collection: filter by partition (`'*'` for all) and sort key, order,
+ * then seek past the cursor by value, so a document deleted between pages neither restarts nor repeats the walk.
+ */
+declare function queryDocuments<T>(documents: Iterable<readonly [string, unknown]>, params: QueryParams): QueryResult<T>;
+
 interface RetryPolicy {
     maxAttempts: number;
     backoff: 'exponential' | 'linear' | 'fixed';
@@ -797,6 +921,10 @@ interface SubscriptionConfig {
     retryPolicy?: RetryPolicy;
     deadLetterQueue?: string;
     batchSize?: number;
+    /**
+     * A named subscription is handled once per name across every bus instance (one consumer group); an unnamed one is
+     * handled by every subscriber on every instance. On a single-process bus the two are the same.
+     */
     name?: string;
     /** The subscriber only maintains derived state (a projection, a search index): it also receives `replay`. */
     derived?: boolean;
@@ -806,8 +934,16 @@ interface Subscription {
     patterns: string[];
     unsubscribe(): Promise<void>;
 }
+/**
+ * Delivery is at least once: a publish that is retried may reach a handler twice, so every handler is idempotent
+ * (projections overwrite their documents, side effects use `withIdempotency`).
+ */
 interface EventBusAdapter {
     capabilities(): readonly string[];
+    /**
+     * Resolves only after every matching subscription this instance holds has handled the event, so a read straight
+     * after a command sees its projections. A handler that throws is logged, and does not reject the publish.
+     */
     publish<T>(event: NymbalEvent<T>): Promise<void>;
     publishBatch(events: NymbalEvent<unknown>[]): Promise<void>;
     /** Delivers to `derived` subscriptions only, so rebuilding derived state never triggers side effects. */
@@ -815,6 +951,24 @@ interface EventBusAdapter {
     subscribe(eventPattern: string | string[], handler: EventHandler, config?: SubscriptionConfig): Promise<Subscription>;
     unsubscribe(subscription: Subscription): Promise<void>;
     close(): Promise<void>;
+    /**
+     * Whether the bus can deliver, within `HEALTH_CHECK_TIMEOUT_MS`. Optional, so a bus written before it existed still
+     * type-checks; `nymbal doctor` reports one without it as `no healthCheck`.
+     */
+    healthCheck?(): Promise<HealthReport>;
+}
+
+/** Where uploaded and imported media go. `put` returns the URL the stored bytes are served from. */
+interface MediaStorage {
+    capabilities(): readonly string[];
+    put(key: string, body: Uint8Array, contentType: string): Promise<{
+        url: string;
+    }>;
+    /**
+     * Whether `put` can store, checked without storing anything, within `HEALTH_CHECK_TIMEOUT_MS`. Optional, so a
+     * storage written before it existed still type-checks; `nymbal doctor` reports one without it as `no healthCheck`.
+     */
+    healthCheck?(): Promise<HealthReport>;
 }
 
 type RateLimitAction = 'block' | 'challenge' | 'throttle';
@@ -865,6 +1019,8 @@ interface SecurityAdapter extends AdapterBase {
     drift?(config: SecurityConfigLike): Promise<DriftReport>;
     inspect?(): Promise<SecurityState>;
 }
+/** The response headers every security adapter sets in process, from the config's `headers` block. */
+declare function buildSecurityHeaders(security: SecurityConfigLike): Record<string, string>;
 
 interface CommerceAdapter extends AdapterBase {
     readonly providerName: string;
@@ -875,8 +1031,18 @@ interface RefundOptions {
     /** The order's currency: what a provider that no longer holds the payment answers in. */
     currency?: string;
 }
+/**
+ * The storefront half of a payments adapter: which client-side driver collects the payment and the public values it
+ * needs. GET /api/capabilities serves `options` to every shopper, so it holds public values only.
+ */
+interface PaymentClient {
+    driver: string;
+    options: Record<string, string>;
+}
 interface PaymentsAdapter extends CommerceAdapter {
     readonly kind: 'payments';
+    /** How a storefront collects a payment; absent or `null` when there is no client step. */
+    client?(): PaymentClient | null;
     createPaymentIntent(params: PaymentIntentParams): Promise<PaymentIntent>;
     capturePayment(intentId: string, amountMinor?: number): Promise<PaymentCapture>;
     /** Throws `PaymentError('refund_rejected')` when no money moved, `PaymentError('refund_unknown')` when it may have. */
@@ -956,6 +1122,8 @@ interface SearchResult {
     nextCursor: string | null;
 }
 interface FacetParams {
+    /** Count only the documents this query matches. */
+    query?: string;
     limit?: number;
     filters?: Record<string, unknown>;
 }
@@ -972,6 +1140,11 @@ interface SearchAdapter extends CommerceAdapter {
     readonly kind: 'search';
     index(documents: SearchDocument[]): Promise<IndexResult>;
     remove(documentIds: string[]): Promise<void>;
+    /**
+     * Replaces the whole index with `documents`, so nothing outside them survives. Optional: without it a rebuild can
+     * only `index` every document, and cannot remove ids the index holds beyond them (it has no way to list them).
+     */
+    replaceAll?(documents: Iterable<SearchDocument> | AsyncIterable<SearchDocument>): Promise<void>;
     search(query: string, params?: SearchParams): Promise<SearchResult>;
     facet(field: string, params?: FacetParams): Promise<Facet>;
 }
@@ -1041,6 +1214,17 @@ interface AiAdapter extends CommerceAdapter {
         maxTokens?: number;
     }): Promise<string>;
 }
+/** The adapter interface each commerce slot takes: what a project injects for a slot whose provider is `custom`. */
+interface CommerceSlotAdapters {
+    payments: PaymentsAdapter;
+    email: EmailAdapter;
+    reviews: ReviewsAdapter;
+    search: SearchAdapter;
+    analytics: AnalyticsAdapter;
+    shipping: ShippingAdapter;
+    tax: TaxAdapter;
+    ai: AiAdapter;
+}
 
 interface RenderedEmail {
     subject: string;
@@ -1049,4 +1233,127 @@ interface RenderedEmail {
 }
 declare function renderEmailTemplate(template: string, vars: Record<string, unknown>): RenderedEmail;
 
-export { type AdapterBase, type AdapterContext, AdapterError, type AdapterErrorV1Payload, type Address, type AggregateRating, type AiAdapter, type AnalyticsAdapter, AuthError, type CaptureMethod, type Cart, type CartAbandonedV1Payload, type CartConvertedV1Payload, type CartCreatedV1Payload, type CartItem, type CartItemAddedV1Payload, type CartItemRemovedV1Payload, type CartUpdatedV1Payload, type Category, type CategoryCreatedV1Payload, type CategoryDeletedV1Payload, type CategoryUpdatedV1Payload, CheckoutError, type CheckoutPayment, type CommerceAdapter, type CommerceSlot, ConfigError, type Customer, type CustomerAddress, type CustomerCreatedV1Payload, type CustomerDeletedV1Payload, type CustomerProfile, type CustomerUpdatedV1Payload, DEFAULT_PRODUCT_SORT, type DocumentStoreAdapter, type DriftReport, EVT_ADAPTER_ERROR, EVT_CART_ABANDONED, EVT_CART_CONVERTED, EVT_CART_CREATED, EVT_CART_ITEM_ADDED, EVT_CART_ITEM_REMOVED, EVT_CART_UPDATED, EVT_CATEGORY_CREATED, EVT_CATEGORY_DELETED, EVT_CATEGORY_UPDATED, EVT_CUSTOMER_CREATED, EVT_CUSTOMER_DELETED, EVT_CUSTOMER_REGISTERED, EVT_CUSTOMER_UPDATED, EVT_INVENTORY_CHANGED, EVT_INVENTORY_LOW_STOCK, EVT_INVENTORY_OUT_OF_STOCK, EVT_INVENTORY_RELEASED, EVT_INVENTORY_RESERVED, EVT_ORDER_CANCELLED, EVT_ORDER_DELIVERED, EVT_ORDER_FULFILLED, EVT_ORDER_PAID, EVT_ORDER_PARTIALLY_REFUNDED, EVT_ORDER_PLACED, EVT_ORDER_REFUNDED, EVT_ORDER_SHIPPED, EVT_PAYMENT_CAPTURED, EVT_PAYMENT_FAILED, EVT_PAYMENT_REFUNDED, EVT_PRODUCT_CREATED, EVT_PRODUCT_DELETED, EVT_PRODUCT_PUBLISHED, EVT_PRODUCT_UNPUBLISHED, EVT_PRODUCT_UPDATED, type EmailAdapter, type EmailSendResult, type ErrorContext, type EventBusAdapter, type EventHandler, type EventMetadata, type Facet, type FacetParams, type HealthReport, type HealthStatus, type HttpAdapter, HttpError, type HttpMethod, type IndexResult, type InventoryChangedV1Payload, type InventoryLowStockV1Payload, type InventoryOutOfStockV1Payload, type InventoryReleasedV1Payload, type InventoryReservation, type InventoryReservedV1Payload, type Logger, type MiddlewareHandler, type Money, NotFoundError, type NymbalEnvironment, NymbalError, type NymbalEvent, type NymbalEventMap, type NymbalEventType, ORDER_STATUS_TRANSITIONS, type Order, type OrderCancelledV1Payload, OrderConflictError, type OrderDeliveredV1Payload, type OrderFulfilledV1Payload, type OrderHistoryEntry, type OrderLineItem, type OrderPaidV1Payload, type OrderPartiallyRefundedV1Payload, type OrderPayment, type OrderPlacedV1Payload, type OrderRefund, type OrderRefundStatus, type OrderRefundedV1Payload, type OrderShippedV1Payload, type OrderStatus, PRODUCT_SORT_KEYS, type PaginationParams, type PayloadOf, type PaymentCapture, type PaymentCapturedV1Payload, PaymentError, type PaymentFailedV1Payload, type PaymentIntent, type PaymentIntentParams, type PaymentRefundedV1Payload, type PaymentState, type PaymentStatus, type PaymentsAdapter, type Product, type ProductCreatedV1Payload, type ProductDeletedV1Payload, type ProductMedia, type ProductPublishedV1Payload, type ProductSnapshot, type ProductSortKey, type ProductStatus, type ProductType, type ProductUnpublishedV1Payload, type ProductUpdatedV1Payload, type PutOptions, type QueryParams, type QueryResult, type RateLimitAction, type RateLimitDecision, type RateLimitRule, type Refund, type RefundOptions, type RenderedEmail, type RequestAuth, type RequestContext, type ResponseCookie, type ResponseEnvelope, type RetryPolicy, type Review, type ReviewModerationStatus, type ReviewResult, type ReviewSubmission, type ReviewsAdapter, type ReviewsResult, type Role, type RouteHandler, type RouteOptions, STANDARD_EVENT_TYPES, type SearchAdapter, type SearchDocument, type SearchParams, type SearchResult, type SecurityAdapter, type SecurityConfigLike, type SecurityState, type ShippingAdapter, type ShippingLabel, type ShippingLabelParams, type ShippingRate, type ShippingRateParams, type ShippingTracking, type SseEvent, StatusTransitionError, type StockAdjustment, type StockAdjustmentReason, type StockStatus, type StreamContext, type StreamHandler, type Subscription, type SubscriptionConfig, type TaxAdapter, type TaxCalculationParams, type TaxCalculationResult, type TaxLine, type TransactionalEmail, ValidationError, type ValidationResult, type Variant, type VariantDimensions, type VariantOption, type VariantStatus, type WebhookResult, add, allocate, assertMinorUnits, assertOrderTransition, canTransitionOrder, money, mulBy, paymentState, refundableMinor, renderEmailTemplate, sub, sumMoney };
+/**
+ * What GET /api/capabilities tells a storefront about the store: what its adapters can do, never which vendor they
+ * are. It names no provider and holds no secret.
+ */
+interface StoreCapabilities {
+    payments: {
+        capabilities: string[];
+        client: PaymentClient | null;
+    };
+    search: {
+        capabilities: string[];
+    };
+    /** The listing orders GET /api/products accepts, in display order, and the one it uses when none is asked. */
+    catalog: {
+        sortKeys: ProductSortKey[];
+        defaultSort: ProductSortKey;
+    };
+}
+
+/**
+ * A value a recipe writes into `nymbal.config.ts`. `{ env }` is written as `env('<name>')`, or
+ * `env('<name>', '<default>')` when a default is given, so no secret ever lands in the file.
+ */
+type RecipeValue = string | boolean | number | {
+    env: string;
+    default?: string;
+} | {
+    [k: string]: RecipeValue;
+};
+/**
+ * What `nymbal add <name>` does to a project: data shipped as `recipes/<name>.json` inside the package it belongs to.
+ */
+interface Recipe {
+    name: string;
+    summary: string;
+    /** npm packages to install, SDKs included; empty when the service is built in. */
+    install: string[];
+    /** Config paths and the values they take, e.g. `infrastructure.documentStore` = `'redis'`. */
+    set: Array<{
+        path: string;
+        value: RecipeValue;
+    }>;
+    /** The variables the service reads, appended to `.env.example`; an optional one is written commented out. */
+    env: Array<{
+        name: string;
+        example: string;
+        required: boolean;
+        comment: string;
+    }>;
+    /** Lines printed after a successful add. */
+    next: string[];
+}
+
+type StockLevel = 'out' | 'low' | 'in';
+/** The one stock rule every storefront renders from. */
+declare function stockLevel(stock: number): StockLevel;
+declare const STOCK_LABELS: Record<StockLevel, string>;
+
+/** Where a Settings field's value comes from: the config block, its declared env, a saved value, or nowhere. */
+type SettingSourceName = 'config' | 'env' | 'settings';
+/** One declared field as `GET /api/admin/settings` lists it; a secret never carries its value. */
+interface SettingFieldView {
+    path: string;
+    label: string;
+    secret: boolean;
+    state: 'unset' | 'set';
+    source: SettingSourceName | null;
+    updatedAt: string | null;
+    /** Non-secret fields only. */
+    value?: unknown;
+}
+/** A slot whose provider declares settings, with its fields. */
+interface SettingsSlotView {
+    slot: string;
+    provider: string;
+    fields: SettingFieldView[];
+}
+interface SettingsListing {
+    slots: SettingsSlotView[];
+}
+/** What a `PUT` or `DELETE` of a field answers: the change applies at the next start. */
+interface SettingWriteResult {
+    slot: string;
+    path: string;
+    state: 'unset' | 'set';
+    source: 'settings' | null;
+    restartRequired: true;
+}
+
+/** Who a command ran for. A guest is `guest:anonymous`: a cart's token is a bearer credential and is never an id. */
+interface AuditActor {
+    kind: 'admin' | 'customer' | 'guest' | 'system' | 'import';
+    id: string;
+}
+/** `applied`: the command ran and committed. `refused`: its service refused it. `replayed`: a keyed retry answered. */
+type AuditOutcome = 'applied' | 'refused' | 'replayed';
+/** A record a command touched, by id only. */
+interface AuditSubject {
+    type: string;
+    id: string;
+}
+/**
+ * One audit entry as `GET /api/admin/activity` lists it and the exports print it. A stored response is shown by its
+ * status only; its body never leaves the store.
+ */
+interface AuditEntry {
+    id: string;
+    at: string;
+    actor: AuditActor;
+    command: string;
+    subjects: AuditSubject[];
+    correlationId: string | null;
+    idempotencyKey: string | null;
+    outcome: AuditOutcome;
+    responseStatus: number | null;
+}
+/** The request header an admin write carries to be applied once, and the response header a replay carries. */
+declare const IDEMPOTENCY_KEY_HEADER = "idempotency-key";
+declare const IDEMPOTENT_REPLAYED_HEADER = "idempotent-replayed";
+/** 1-128 characters of `[A-Za-z0-9._:-]`. */
+declare function isValidIdempotencyKey(value: string): boolean;
+
+export { AdapterError, AuthError, CORRELATION_ID_HEADER, CheckoutError, ConfigError, DEFAULT_PRODUCT_SORT, DEFAULT_QUERY_LIMIT, EVT_ADAPTER_ERROR, EVT_CART_ABANDONED, EVT_CART_CONVERTED, EVT_CART_CREATED, EVT_CART_ITEM_ADDED, EVT_CART_ITEM_REMOVED, EVT_CART_UPDATED, EVT_CATEGORY_CREATED, EVT_CATEGORY_DELETED, EVT_CATEGORY_UPDATED, EVT_CUSTOMER_CREATED, EVT_CUSTOMER_DELETED, EVT_CUSTOMER_REGISTERED, EVT_CUSTOMER_UPDATED, EVT_INVENTORY_CHANGED, EVT_INVENTORY_LOW_STOCK, EVT_INVENTORY_OUT_OF_STOCK, EVT_INVENTORY_RELEASED, EVT_INVENTORY_RESERVED, EVT_ORDER_CANCELLED, EVT_ORDER_DELIVERED, EVT_ORDER_FULFILLED, EVT_ORDER_PAID, EVT_ORDER_PARTIALLY_REFUNDED, EVT_ORDER_PLACED, EVT_ORDER_REFUNDED, EVT_ORDER_SHIPPED, EVT_ORDER_STATUS_CHANGED, EVT_PAYMENT_CAPTURED, EVT_PAYMENT_FAILED, EVT_PAYMENT_INTENT_CREATED, EVT_PAYMENT_REFUNDED, EVT_PRODUCT_CREATED, EVT_PRODUCT_DELETED, EVT_PRODUCT_PUBLISHED, EVT_PRODUCT_UNPUBLISHED, EVT_PRODUCT_UPDATED, EVT_SETTINGS_CHANGED, HEALTH_CHECK_TIMEOUT_MS, HttpError, IDEMPOTENCY_KEY_HEADER, IDEMPOTENT_REPLAYED_HEADER, NotFoundError, NymbalError, ORDER_STATUS_TRANSITIONS, OrderConflictError, PRODUCT_SORT_KEYS, PRODUCT_SORT_LABELS, PaymentError, SECRET_MIN_LENGTH, STANDARD_EVENT_TYPES, STOCK_LABELS, StatusTransitionError, ValidationError, add, allocate, assertMinorUnits, assertOrderTransition, boundedHealthCheck, buildSecurityHeaders, canTransitionOrder, compareDocumentValues, connectionSecrets, displayUrl, documentValueAt, errorText, isValidCorrelationId, isValidIdempotencyKey, matchesSortKey, money, mulBy, paymentState, queryDocuments, refundableMinor, renderEmailTemplate, stockLevel, sub, sumMoney };
+export type { AdapterBase, AdapterContext, AdapterErrorV1Payload, AdapterSetting, Address, AggregateRating, AiAdapter, AnalyticsAdapter, AuditActor, AuditEntry, AuditOutcome, AuditSubject, BoundedHealthCheckOptions, CaptureMethod, Cart, CartAbandonedV1Payload, CartConvertedV1Payload, CartCreatedV1Payload, CartItem, CartItemAddedV1Payload, CartItemRemovedV1Payload, CartUpdatedV1Payload, Category, CategoryCreatedV1Payload, CategoryDeletedV1Payload, CategoryUpdatedV1Payload, CheckoutPayment, CommerceAdapter, CommerceSlot, CommerceSlotAdapters, Customer, CustomerAddress, CustomerCreatedV1Payload, CustomerDeletedV1Payload, CustomerProfile, CustomerUpdatedV1Payload, DocumentStoreAdapter, DriftReport, EmailAdapter, EmailSendResult, ErrorContext, EventBusAdapter, EventHandler, EventMetadata, Facet, FacetParams, HealthReport, HealthStatus, HttpAdapter, HttpMethod, IndexResult, InventoryChangedV1Payload, InventoryLowStockV1Payload, InventoryOutOfStockV1Payload, InventoryReleasedV1Payload, InventoryReservation, InventoryReservedV1Payload, Logger, MediaStorage, MiddlewareHandler, Money, NymbalEnvironment, NymbalEvent, NymbalEventMap, NymbalEventType, Order, OrderCancelledV1Payload, OrderDeliveredV1Payload, OrderFulfilledV1Payload, OrderHistoryEntry, OrderLineItem, OrderPaidV1Payload, OrderPartiallyRefundedV1Payload, OrderPayment, OrderPlacedV1Payload, OrderRefund, OrderRefundStatus, OrderRefundedV1Payload, OrderShippedV1Payload, OrderStatus, OrderStatusChangedV1Payload, PaginationParams, PayloadOf, PaymentCapture, PaymentCapturedV1Payload, PaymentClient, PaymentFailedV1Payload, PaymentIntent, PaymentIntentCreatedV1Payload, PaymentIntentParams, PaymentRefundedV1Payload, PaymentState, PaymentStatus, PaymentsAdapter, Product, ProductCreatedV1Payload, ProductDeletedV1Payload, ProductMedia, ProductPublishedV1Payload, ProductSnapshot, ProductSortKey, ProductStatus, ProductType, ProductUnpublishedV1Payload, ProductUpdatedV1Payload, ProviderPackageModule, PutOptions, QueryParams, QueryResult, RateLimitAction, RateLimitDecision, RateLimitRule, Recipe, RecipeValue, Refund, RefundOptions, RenderedEmail, RequestAuth, RequestContext, ResponseCookie, ResponseEnvelope, RetryPolicy, Review, ReviewModerationStatus, ReviewResult, ReviewSubmission, ReviewsAdapter, ReviewsResult, Role, RouteHandler, RouteOptions, SearchAdapter, SearchDocument, SearchParams, SearchResult, SecurityAdapter, SecurityConfigLike, SecurityState, SettingFieldView, SettingSourceName, SettingWriteResult, SettingsChangedV1Payload, SettingsListing, SettingsSlotView, ShippingAdapter, ShippingLabel, ShippingLabelParams, ShippingRate, ShippingRateParams, ShippingTracking, Slot, SortKeyCondition, SseEvent, StockAdjustment, StockAdjustmentReason, StockLevel, StockStatus, StoreCapabilities, StreamContext, StreamHandler, Subscription, SubscriptionConfig, TaxAdapter, TaxCalculationParams, TaxCalculationResult, TaxLine, TransactionalEmail, ValidationResult, Variant, VariantDimensions, VariantOption, VariantStatus, WebhookResult };

package/dist/index.js

@@ -142,6 +142,13 @@ var PRODUCT_SORT_KEYS = [
   "name-desc"
 ];
 var DEFAULT_PRODUCT_SORT = "newest";
+var PRODUCT_SORT_LABELS = {
+  newest: "Newest",
+  "price-asc": "Price: Low to High",
+  "price-desc": "Price: High to Low",
+  "name-asc": "Name: A to Z",
+  "name-desc": "Name: Z to A"
+};
 
 // src/domain/order.ts
 var ORDER_STATUS_TRANSITIONS = {
@@ -189,6 +196,7 @@ var EVT_ORDER_DELIVERED = "order.delivered.v1";
 var EVT_ORDER_CANCELLED = "order.cancelled.v1";
 var EVT_ORDER_REFUNDED = "order.refunded.v1";
 var EVT_ORDER_PARTIALLY_REFUNDED = "order.partially_refunded.v1";
+var EVT_ORDER_STATUS_CHANGED = "order.status_changed.v1";
 var EVT_INVENTORY_CHANGED = "inventory.changed.v1";
 var EVT_INVENTORY_RESERVED = "inventory.reserved.v1";
 var EVT_INVENTORY_RELEASED = "inventory.released.v1";
@@ -204,10 +212,12 @@ var EVT_CART_ITEM_REMOVED = "cart.item_removed.v1";
 var EVT_CART_UPDATED = "cart.updated.v1";
 var EVT_CART_ABANDONED = "cart.abandoned.v1";
 var EVT_CART_CONVERTED = "cart.converted.v1";
+var EVT_PAYMENT_INTENT_CREATED = "payment.intent_created.v1";
 var EVT_PAYMENT_CAPTURED = "payment.captured.v1";
 var EVT_PAYMENT_FAILED = "payment.failed.v1";
 var EVT_PAYMENT_REFUNDED = "payment.refunded.v1";
 var EVT_ADAPTER_ERROR = "adapter.error.v1";
+var EVT_SETTINGS_CHANGED = "settings.changed.v1";
 var STANDARD_EVENT_TYPES = [
   EVT_PRODUCT_CREATED,
   EVT_PRODUCT_UPDATED,
@@ -225,6 +235,7 @@ var STANDARD_EVENT_TYPES = [
   EVT_ORDER_CANCELLED,
   EVT_ORDER_REFUNDED,
   EVT_ORDER_PARTIALLY_REFUNDED,
+  EVT_ORDER_STATUS_CHANGED,
   EVT_INVENTORY_CHANGED,
   EVT_INVENTORY_RESERVED,
   EVT_INVENTORY_RELEASED,
@@ -239,12 +250,229 @@ var STANDARD_EVENT_TYPES = [
   EVT_CART_UPDATED,
   EVT_CART_ABANDONED,
   EVT_CART_CONVERTED,
+  EVT_PAYMENT_INTENT_CREATED,
   EVT_PAYMENT_CAPTURED,
   EVT_PAYMENT_FAILED,
   EVT_PAYMENT_REFUNDED,
-  EVT_ADAPTER_ERROR
+  EVT_ADAPTER_ERROR,
+  EVT_SETTINGS_CHANGED
 ];
 
+// src/adapters/adapter-base.ts
+var HEALTH_CHECK_TIMEOUT_MS = 5e3;
+function errorText(error) {
+  if (!(error instanceof Error)) return String(error);
+  if (error.message !== "") return error.message;
+  const inner = error.errors;
+  if (Array.isArray(inner) && inner.length > 0) return inner.map(errorText).join("; ");
+  const code = error.code;
+  return typeof code === "string" ? code : error.name;
+}
+var SECRET_MIN_LENGTH = 8;
+function connectionSecrets(url, options = {}) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return [];
+  }
+  const raw = [
+    ...options.user === false ? [] : [parsed.username],
+    parsed.password,
+    ...parsed.searchParams.values()
+  ];
+  const decoded = raw.map((value) => {
+    try {
+      return decodeURIComponent(value);
+    } catch {
+      return value;
+    }
+  });
+  return [.../* @__PURE__ */ new Set([...raw, ...decoded])].filter((value) => value.length >= SECRET_MIN_LENGTH);
+}
+function displayUrl(url) {
+  try {
+    const parsed = new URL(url);
+    return `${parsed.protocol}//${parsed.host}${parsed.pathname === "/" ? "" : parsed.pathname}`;
+  } catch {
+    return "<unparsable url>";
+  }
+}
+async function boundedHealthCheck(check, options = {}) {
+  const timeoutMs = options.timeoutMs ?? HEALTH_CHECK_TIMEOUT_MS;
+  const controller = new AbortController();
+  let timer;
+  const timedOut = new Promise((resolve) => {
+    timer = setTimeout(() => {
+      controller.abort();
+      resolve({ status: "down", detail: `timed out after ${timeoutMs} ms` });
+    }, timeoutMs);
+  });
+  const failed = (error) => {
+    let detail = errorText(error);
+    for (const secret of options.redact ?? []) {
+      if (secret !== "") detail = detail.split(secret).join("***");
+    }
+    return { status: "down", detail };
+  };
+  try {
+    const checked = Promise.resolve().then(() => check(controller.signal)).catch(failed);
+    return await Promise.race([checked, timedOut]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+// src/adapters/document-order.ts
+var collator = new Intl.Collator(void 0, { sensitivity: "base" });
+function rankOf(value) {
+  if (typeof value === "number") return 0;
+  if (typeof value === "string") return 1;
+  if (value === null || value === void 0) return 3;
+  return 2;
+}
+function sign(n) {
+  return n > 0 ? 1 : n < 0 ? -1 : 0;
+}
+function compareOther(a, b) {
+  const ta = typeof a;
+  const tb = typeof b;
+  if (ta !== tb) return ta < tb ? -1 : 1;
+  if (ta === "boolean") return Number(a) - Number(b);
+  const ja = JSON.stringify(a) ?? "";
+  const jb = JSON.stringify(b) ?? "";
+  return ja < jb ? -1 : ja > jb ? 1 : 0;
+}
+function compareDocumentValues(a, b) {
+  const ra = rankOf(a);
+  const rb = rankOf(b);
+  if (ra !== rb) return ra - rb;
+  switch (ra) {
+    case 0:
+      return sign(a - b);
+    case 1:
+      return sign(collator.compare(a, b));
+    case 2:
+      return sign(compareOther(a, b));
+    default:
+      return 0;
+  }
+}
+function matchesSortKey(value, condition) {
+  const target = condition.value;
+  switch (condition.operator) {
+    case "eq":
+      return value === target;
+    case "gt":
+      return compareDocumentValues(value, target) > 0;
+    case "lt":
+      return compareDocumentValues(value, target) < 0;
+    case "between": {
+      if (!Array.isArray(target) || target.length !== 2) return false;
+      const [low, high] = target;
+      return compareDocumentValues(value, low) >= 0 && compareDocumentValues(value, high) <= 0;
+    }
+    default:
+      return false;
+  }
+}
+function documentValueAt(doc, path) {
+  let value = doc;
+  for (const part of path.split(".")) {
+    if (value === null || typeof value !== "object") return void 0;
+    value = value[part];
+  }
+  return value;
+}
+var DEFAULT_QUERY_LIMIT = 50;
+function orderOf(params) {
+  if (params.orderBy !== void 0) {
+    return { field: params.orderBy.field, direction: params.orderBy.direction };
+  }
+  const direction = params.ascending ?? true ? "asc" : "desc";
+  return { field: params.sortKey?.field ?? null, direction };
+}
+var isNullish = (value) => value === null || value === void 0;
+function comparePositions(a, b, order) {
+  if (order.field !== null) {
+    const an = isNullish(a.value);
+    const bn = isNullish(b.value);
+    if (an !== bn) return an ? 1 : -1;
+    let c2 = an ? 0 : compareDocumentValues(a.value, b.value);
+    if (order.direction === "desc") c2 = -c2;
+    if (c2 !== 0) return c2;
+    return a.key < b.key ? -1 : a.key > b.key ? 1 : 0;
+  }
+  const c = a.key < b.key ? -1 : a.key > b.key ? 1 : 0;
+  return order.direction === "desc" ? -c : c;
+}
+function cursorScope(order, params) {
+  return JSON.stringify([order.field, order.direction, params.partitionKey]);
+}
+function decodeCursor(cursor, scope) {
+  let decoded;
+  try {
+    decoded = JSON.parse(Buffer.from(cursor, "base64url").toString("utf8"));
+  } catch {
+    decoded = null;
+  }
+  const c = decoded;
+  if (c === null || typeof c !== "object" || typeof c.o !== "string" || typeof c.k !== "string") {
+    throw new ValidationError("The cursor is not valid", { context: { cursor } });
+  }
+  if (c.o !== scope) {
+    throw new ValidationError("The cursor was issued under another order", { context: { cursor } });
+  }
+  return { key: c.k, value: c.v ?? null };
+}
+function queryDocuments(documents, params) {
+  const limit = params.limit ?? DEFAULT_QUERY_LIMIT;
+  const order = orderOf(params);
+  const scope = cursorScope(order, params);
+  const after = params.cursor ? decodeCursor(params.cursor, scope) : null;
+  const { partitionKey, sortKey } = params;
+  const matches = [];
+  for (const [key, doc] of documents) {
+    const record = doc ?? {};
+    if (partitionKey.value !== "*" && record[partitionKey.field] !== partitionKey.value) continue;
+    if (sortKey !== void 0 && !matchesSortKey(record[sortKey.field], sortKey)) continue;
+    const value = order.field === null ? null : documentValueAt(record, order.field) ?? null;
+    const position = { key, value };
+    if (after !== null && comparePositions(position, after, order) <= 0) continue;
+    matches.push({ position, doc });
+  }
+  matches.sort((a, b) => comparePositions(a.position, b.position, order));
+  const page = matches.slice(0, limit);
+  const last = page[page.length - 1];
+  const nextCursor = matches.length > limit && last !== void 0 ? Buffer.from(
+    JSON.stringify({ o: scope, k: last.position.key, v: last.position.value }),
+    "utf8"
+  ).toString("base64url") : null;
+  return { items: page.map((m) => m.doc), nextCursor };
+}
+
+// src/adapters/http.ts
+var CORRELATION_ID_HEADER = "x-correlation-id";
+var CORRELATION_ID = /^[A-Za-z0-9._:-]{1,128}$/;
+function isValidCorrelationId(s) {
+  return CORRELATION_ID.test(s);
+}
+
+// src/adapters/security.ts
+function buildSecurityHeaders(security) {
+  const headers = {};
+  if (security.headers.hsts) {
+    headers["strict-transport-security"] = "max-age=31536000; includeSubDomains";
+  }
+  const csp = security.headers.contentSecurityPolicy;
+  const cspValue = csp === "strict" ? "default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; script-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'" : csp === "relaxed" ? "default-src 'self' https:; img-src * data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'" : csp === "off" ? null : csp;
+  if (cspValue) headers["content-security-policy"] = cspValue;
+  headers["referrer-policy"] = security.headers.referrerPolicy;
+  headers["x-frame-options"] = security.headers.xFrameOptions === "deny" ? "DENY" : "SAMEORIGIN";
+  headers["x-content-type-options"] = "nosniff";
+  return headers;
+}
+
 // src/adapters/email-templates.ts
 function render(template, vars) {
   return template.replace(/\{\{\s*([\w.]+)\s*\}\}/g, (_, path) => {
@@ -301,12 +529,33 @@ function renderEmailTemplate(template, vars) {
   const html = `<pre>${text.replace(/</g, "&lt;")}</pre>`;
   return { subject, text, html };
 }
+
+// src/stock-level.ts
+var LOW_STOCK_BELOW = 5;
+function stockLevel(stock) {
+  if (stock <= 0) return "out";
+  return stock < LOW_STOCK_BELOW ? "low" : "in";
+}
+var STOCK_LABELS = {
+  out: "Out of Stock",
+  low: "Low Stock",
+  in: "In Stock"
+};
+
+// src/audit.ts
+var IDEMPOTENCY_KEY_HEADER = "idempotency-key";
+var IDEMPOTENT_REPLAYED_HEADER = "idempotent-replayed";
+function isValidIdempotencyKey(value) {
+  return /^[A-Za-z0-9._:-]{1,128}$/.test(value);
+}
 export {
   AdapterError,
   AuthError,
+  CORRELATION_ID_HEADER,
   CheckoutError,
   ConfigError,
   DEFAULT_PRODUCT_SORT,
+  DEFAULT_QUERY_LIMIT,
   EVT_ADAPTER_ERROR,
   EVT_CART_ABANDONED,
   EVT_CART_CONVERTED,
@@ -334,34 +583,55 @@ export {
   EVT_ORDER_PLACED,
   EVT_ORDER_REFUNDED,
   EVT_ORDER_SHIPPED,
+  EVT_ORDER_STATUS_CHANGED,
   EVT_PAYMENT_CAPTURED,
   EVT_PAYMENT_FAILED,
+  EVT_PAYMENT_INTENT_CREATED,
   EVT_PAYMENT_REFUNDED,
   EVT_PRODUCT_CREATED,
   EVT_PRODUCT_DELETED,
   EVT_PRODUCT_PUBLISHED,
   EVT_PRODUCT_UNPUBLISHED,
   EVT_PRODUCT_UPDATED,
+  EVT_SETTINGS_CHANGED,
+  HEALTH_CHECK_TIMEOUT_MS,
   HttpError,
+  IDEMPOTENCY_KEY_HEADER,
+  IDEMPOTENT_REPLAYED_HEADER,
   NotFoundError,
   NymbalError,
   ORDER_STATUS_TRANSITIONS,
   OrderConflictError,
   PRODUCT_SORT_KEYS,
+  PRODUCT_SORT_LABELS,
   PaymentError,
+  SECRET_MIN_LENGTH,
   STANDARD_EVENT_TYPES,
+  STOCK_LABELS,
   StatusTransitionError,
   ValidationError,
   add,
   allocate,
   assertMinorUnits,
   assertOrderTransition,
+  boundedHealthCheck,
+  buildSecurityHeaders,
   canTransitionOrder,
+  compareDocumentValues,
+  connectionSecrets,
+  displayUrl,
+  documentValueAt,
+  errorText,
+  isValidCorrelationId,
+  isValidIdempotencyKey,
+  matchesSortKey,
   money,
   mulBy,
   paymentState,
+  queryDocuments,
   refundableMinor,
   renderEmailTemplate,
+  stockLevel,
   sub,
   sumMoney
 };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/errors.ts","../src/domain/money.ts","../src/domain/product.ts","../src/domain/order.ts","../src/events/constants.ts","../src/adapters/email-templates.ts"],"sourcesContent":["export type ErrorContext = Record<string, unknown>\n\nexport class NymbalError extends Error {\n  readonly code: string\n  readonly context: ErrorContext\n\n  constructor(\n    code: string,\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super(message, options.cause !== undefined ? { cause: options.cause } : undefined)\n    this.name = this.constructor.name\n    this.code = code\n    this.context = options.context ?? {}\n  }\n\n  toJSON(): { name: string; code: string; message: string; context: ErrorContext } {\n    return { name: this.name, code: this.code, message: this.message, context: this.context }\n  }\n}\n\nexport class ConfigError extends NymbalError {\n  constructor(\n    message: string,\n    options: {\n      cause?: unknown\n      context?: ErrorContext\n      code?: `config.${string}` | `adapter.${string}`\n    } = {},\n  ) {\n    super(options.code ?? 'config.invalid', message, options)\n  }\n}\n\nexport class ValidationError extends NymbalError {\n  constructor(message: string, options: { cause?: unknown; context?: ErrorContext } = {}) {\n    super('validation.failed', message, options)\n  }\n}\n\nexport class NotFoundError extends NymbalError {\n  constructor(\n    resource: string,\n    identifier: unknown,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super('not_found', `${resource} not found: ${String(identifier)}`, {\n      ...options,\n      context: { resource, identifier, ...(options.context ?? {}) },\n    })\n  }\n}\n\nexport class AdapterError extends NymbalError {\n  constructor(\n    code: string,\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super(`adapter.${code}`, message, options)\n  }\n}\n\nexport class HttpError extends NymbalError {\n  readonly status: number\n\n  constructor(\n    status: number,\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext; code?: string } = {},\n  ) {\n    super(options.code ?? `http.${status}`, message, options)\n    this.status = status\n  }\n}\n\nexport class AuthError extends HttpError {\n  constructor(\n    code: 'unauthorized' | 'forbidden' | 'invalid_credentials' | 'token_expired' | 'token_invalid',\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    const status = code === 'forbidden' ? 403 : 401\n    super(status, message, { ...options, code: `auth.${code}` })\n  }\n}\n\nexport class PaymentError extends NymbalError {\n  constructor(\n    code:\n      | 'intent_failed'\n      | 'capture_failed'\n      // A definite refusal: no money moved.\n      | 'refund_rejected'\n      // An outcome the shop cannot know (a timeout, a provider fault): money may have moved.\n      | 'refund_unknown'\n      | 'cancel_refused'\n      | 'webhook_invalid'\n      | 'not_configured',\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super(`payment.${code}`, message, options)\n  }\n}\n\n/** A command the order's money does not allow (confirm unpaid, cancel paid, refund beyond the capture). */\nexport class OrderConflictError extends NymbalError {\n  constructor(\n    code:\n      | 'order.unpaid'\n      | 'order.paid'\n      | 'order.stock_unavailable'\n      | 'order.payment_in_progress'\n      | 'refund.not_captured'\n      | 'refund.exceeds_captured'\n      | 'refund.request_reused',\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super(code, message, options)\n  }\n}\n\nexport class CheckoutError extends NymbalError {\n  constructor(\n    code:\n      | 'cart_empty'\n      | 'in_progress'\n      | 'payment_in_progress'\n      | 'variant_missing'\n      | 'out_of_stock'\n      | 'reservation_failed'\n      | 'finalize_failed',\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super(`checkout.${code}`, message, options)\n  }\n}\n\nexport class StatusTransitionError extends NymbalError {\n  constructor(\n    entity: string,\n    fromStatus: string,\n    toStatus: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super(\n      'status.invalid_transition',\n      `Invalid ${entity} status transition: ${fromStatus} → ${toStatus}`,\n      {\n        ...options,\n        context: { entity, fromStatus, toStatus, ...(options.context ?? {}) },\n      },\n    )\n  }\n}\n","import { ValidationError } from '../errors.js'\n\nexport interface Money {\n  amount: number\n  currency: string\n}\n\nexport function money(amount: number, currency: string): Money {\n  assertMinorUnits(amount)\n  return { amount, currency }\n}\n\nexport function assertMinorUnits(amount: number): void {\n  if (!Number.isInteger(amount)) {\n    throw new ValidationError(`Monetary amount must be an integer (minor units), got ${amount}`)\n  }\n}\n\nfunction assertSameCurrency(a: Money, b: Money): void {\n  if (a.currency !== b.currency) {\n    throw new ValidationError(\n      `Currency mismatch: ${a.currency} vs ${b.currency}`,\n    )\n  }\n}\n\nexport function add(a: Money, b: Money): Money {\n  assertSameCurrency(a, b)\n  return { amount: a.amount + b.amount, currency: a.currency }\n}\n\nexport function sub(a: Money, b: Money): Money {\n  assertSameCurrency(a, b)\n  return { amount: a.amount - b.amount, currency: a.currency }\n}\n\nexport function mulBy(m: Money, scalar: number): Money {\n  if (!Number.isFinite(scalar)) {\n    throw new ValidationError(`Scalar must be finite, got ${scalar}`)\n  }\n  return { amount: Math.round(m.amount * scalar), currency: m.currency }\n}\n\nexport function sumMoney(values: Money[], currency: string): Money {\n  const total = values.reduce((acc, m) => {\n    assertSameCurrency(m, { amount: 0, currency })\n    return acc + m.amount\n  }, 0)\n  return { amount: total, currency }\n}\n\nexport function allocate(m: Money, weights: number[]): Money[] {\n  if (weights.length === 0) return []\n  const totalWeight = weights.reduce((s, w) => s + w, 0)\n  if (totalWeight <= 0) {\n    throw new ValidationError('allocate: sum of weights must be > 0')\n  }\n  const portions = weights.map((w) => Math.floor((m.amount * w) / totalWeight))\n  let remainder = m.amount - portions.reduce((s, p) => s + p, 0)\n  const result = portions.slice()\n  let idx = 0\n  while (remainder !== 0 && idx < result.length) {\n    const delta = remainder > 0 ? 1 : -1\n    result[idx] = (result[idx] ?? 0) + delta\n    remainder -= delta\n    idx += 1\n  }\n  return result.map((amount) => ({ amount, currency: m.currency }))\n}\n","export type ProductStatus = 'draft' | 'active' | 'archived'\nexport type ProductType = 'simple' | 'variable'\nexport type VariantStatus = 'active' | 'inactive'\n\nexport interface ProductMedia {\n  url: string\n  altText: string\n  position: number\n}\n\nexport interface VariantOption {\n  name: string\n  value: string\n}\n\nexport interface VariantDimensions {\n  lengthMm?: number\n  widthMm?: number\n  heightMm?: number\n}\n\nexport interface Variant {\n  id: string\n  productId: string\n  sku: string\n  name: string\n  priceMinor: number\n  compareAtPriceMinor: number | null\n  weightGrams: number | null\n  dimensions: VariantDimensions | null\n  stock: number\n  lowStockThreshold: number\n  options: VariantOption[]\n  status: VariantStatus\n  createdAt: string\n  updatedAt: string\n}\n\nexport interface Product {\n  id: string\n  slug: string\n  name: string\n  description: string\n  shortDescription: string\n  status: ProductStatus\n  type: ProductType\n  seoTitle: string\n  seoDescription: string\n  media: ProductMedia[]\n  metadata: Record<string, unknown>\n  createdAt: string\n  updatedAt: string\n}\n\n/** The orders a product listing can be requested in; ties break by slug, ascending. */\nexport const PRODUCT_SORT_KEYS = [\n  'newest',\n  'price-asc',\n  'price-desc',\n  'name-asc',\n  'name-desc',\n] as const\nexport type ProductSortKey = (typeof PRODUCT_SORT_KEYS)[number]\nexport const DEFAULT_PRODUCT_SORT: ProductSortKey = 'newest'\n","import { StatusTransitionError } from '../errors.js'\n\nexport type OrderStatus =\n  | 'pending'\n  | 'confirmed'\n  | 'processing'\n  | 'shipped'\n  | 'delivered'\n  | 'cancelled'\n  | 'refunded'\n  | 'partially_refunded'\n\n// A captured order is refunded from any status between confirmed and delivered; a partial refund leaves room for more.\nexport const ORDER_STATUS_TRANSITIONS: Record<OrderStatus, readonly OrderStatus[]> = {\n  pending: ['confirmed', 'cancelled'],\n  confirmed: ['processing', 'cancelled', 'refunded', 'partially_refunded'],\n  processing: ['shipped', 'cancelled', 'refunded', 'partially_refunded'],\n  shipped: ['delivered', 'refunded', 'partially_refunded'],\n  delivered: ['refunded', 'partially_refunded'],\n  cancelled: [],\n  refunded: [],\n  partially_refunded: ['refunded'],\n}\n\nexport function canTransitionOrder(from: OrderStatus, to: OrderStatus): boolean {\n  return ORDER_STATUS_TRANSITIONS[from].includes(to)\n}\n\nexport function assertOrderTransition(from: OrderStatus, to: OrderStatus): void {\n  if (!canTransitionOrder(from, to)) {\n    throw new StatusTransitionError('order', from, to)\n  }\n}\n\nexport interface Address {\n  firstName: string\n  lastName: string\n  company?: string\n  addressLine1: string\n  addressLine2?: string\n  city: string\n  region: string\n  postalCode: string\n  country: string\n  phone?: string\n}\n\nexport interface OrderLineItem {\n  variantId: string\n  productId: string\n  productName: string\n  variantName: string\n  sku: string\n  qty: number\n  unitPriceMinor: number\n  lineSubtotalMinor: number\n  lineTaxMinor: number\n  lineTotalMinor: number\n  imageUrl: string\n}\n\nexport interface Order {\n  id: string\n  orderNumber: string\n  sequence: number\n  customerId: string | null\n  status: OrderStatus\n  email: string\n  billingAddress: Address\n  shippingAddress: Address\n  lineItems: OrderLineItem[]\n  subtotalMinor: number\n  taxTotalMinor: number\n  shippingTotalMinor: number\n  discountTotalMinor: number\n  totalMinor: number\n  currency: string\n  notes: string\n  metadata: Record<string, unknown>\n  paymentIntentId: string | null\n  /** Money taken for the order, in minor units of its currency; 0 while nothing is captured. */\n  capturedMinor: number\n  capturedAt: string | null\n  /** Σ of the order's succeeded refunds (or, for an import or a pre-refund-table order, what was refunded then). */\n  refundedMinor: number\n  captureMethod: CaptureMethod | null\n  createdAt: string\n  updatedAt: string\n}\n\n/** Who took the money: the payments provider, the merchant recording an offline payment, or an imported history. */\nexport type CaptureMethod = 'provider' | 'manual' | 'import'\n\nexport type OrderRefundStatus = 'pending' | 'succeeded' | 'failed'\n\n/** One refund of an order. `pending` until the provider's answer settles it, and counted against what is refundable. */\nexport interface OrderRefund {\n  id: string\n  orderId: string\n  amountMinor: number\n  currency: string\n  providerRefundId: string | null\n  status: OrderRefundStatus\n  reason: string | null\n  actor: string\n  createdAt: string\n}\n\nexport type PaymentState = 'unpaid' | 'paid' | 'partially_refunded' | 'refunded'\n\n/** What the admin shows about an order's money: derived from the stored amounts and refunds alone. */\nexport interface OrderPayment {\n  state: PaymentState\n  capturedMinor: number\n  refundedMinor: number\n  refundableMinor: number\n  currency: string\n  refunds: OrderRefund[]\n}\n\nexport function paymentState(order: Pick<Order, 'capturedMinor' | 'refundedMinor'>): PaymentState {\n  if (order.capturedMinor <= 0) return 'unpaid'\n  if (order.refundedMinor <= 0) return 'paid'\n  return order.refundedMinor < order.capturedMinor ? 'partially_refunded' : 'refunded'\n}\n\n/** What can still be refunded: the capture less what was refunded and what is still pending with the provider. */\nexport function refundableMinor(\n  order: Pick<Order, 'capturedMinor' | 'refundedMinor'>,\n  refunds: ReadonlyArray<Pick<OrderRefund, 'amountMinor' | 'status'>>,\n): number {\n  const pending = refunds\n    .filter((r) => r.status === 'pending')\n    .reduce((sum, r) => sum + r.amountMinor, 0)\n  return Math.max(0, order.capturedMinor - order.refundedMinor - pending)\n}\n\nexport interface OrderHistoryEntry {\n  id: string\n  orderId: string\n  fromStatus: OrderStatus | null\n  toStatus: OrderStatus\n  actor: string\n  note: string\n  timestamp: string\n}\n","// Product\nexport const EVT_PRODUCT_CREATED = 'product.created.v1'\nexport const EVT_PRODUCT_UPDATED = 'product.updated.v1'\nexport const EVT_PRODUCT_DELETED = 'product.deleted.v1'\nexport const EVT_PRODUCT_PUBLISHED = 'product.published.v1'\nexport const EVT_PRODUCT_UNPUBLISHED = 'product.unpublished.v1'\n\n// Category\nexport const EVT_CATEGORY_CREATED = 'category.created.v1'\nexport const EVT_CATEGORY_UPDATED = 'category.updated.v1'\nexport const EVT_CATEGORY_DELETED = 'category.deleted.v1'\n\n// Order\nexport const EVT_ORDER_PLACED = 'order.placed.v1'\nexport const EVT_ORDER_PAID = 'order.paid.v1'\nexport const EVT_ORDER_FULFILLED = 'order.fulfilled.v1'\nexport const EVT_ORDER_SHIPPED = 'order.shipped.v1'\nexport const EVT_ORDER_DELIVERED = 'order.delivered.v1'\nexport const EVT_ORDER_CANCELLED = 'order.cancelled.v1'\nexport const EVT_ORDER_REFUNDED = 'order.refunded.v1'\nexport const EVT_ORDER_PARTIALLY_REFUNDED = 'order.partially_refunded.v1'\n\n// Inventory\nexport const EVT_INVENTORY_CHANGED = 'inventory.changed.v1'\nexport const EVT_INVENTORY_RESERVED = 'inventory.reserved.v1'\nexport const EVT_INVENTORY_RELEASED = 'inventory.released.v1'\nexport const EVT_INVENTORY_LOW_STOCK = 'inventory.low_stock.v1'\nexport const EVT_INVENTORY_OUT_OF_STOCK = 'inventory.out_of_stock.v1'\n\n// Customer\nexport const EVT_CUSTOMER_CREATED = 'customer.created.v1'\nexport const EVT_CUSTOMER_UPDATED = 'customer.updated.v1'\nexport const EVT_CUSTOMER_DELETED = 'customer.deleted.v1'\n// Legacy alias (kept so Prompt 1 seed code continues to compile).\nexport const EVT_CUSTOMER_REGISTERED = EVT_CUSTOMER_CREATED\n\n// Cart\nexport const EVT_CART_CREATED = 'cart.created.v1'\nexport const EVT_CART_ITEM_ADDED = 'cart.item_added.v1'\nexport const EVT_CART_ITEM_REMOVED = 'cart.item_removed.v1'\nexport const EVT_CART_UPDATED = 'cart.updated.v1'\nexport const EVT_CART_ABANDONED = 'cart.abandoned.v1'\nexport const EVT_CART_CONVERTED = 'cart.converted.v1'\n\n// Payment\nexport const EVT_PAYMENT_CAPTURED = 'payment.captured.v1'\nexport const EVT_PAYMENT_FAILED = 'payment.failed.v1'\nexport const EVT_PAYMENT_REFUNDED = 'payment.refunded.v1'\n\n// System\nexport const EVT_ADAPTER_ERROR = 'adapter.error.v1'\n\nexport const STANDARD_EVENT_TYPES = [\n  EVT_PRODUCT_CREATED,\n  EVT_PRODUCT_UPDATED,\n  EVT_PRODUCT_DELETED,\n  EVT_PRODUCT_PUBLISHED,\n  EVT_PRODUCT_UNPUBLISHED,\n  EVT_CATEGORY_CREATED,\n  EVT_CATEGORY_UPDATED,\n  EVT_CATEGORY_DELETED,\n  EVT_ORDER_PLACED,\n  EVT_ORDER_PAID,\n  EVT_ORDER_FULFILLED,\n  EVT_ORDER_SHIPPED,\n  EVT_ORDER_DELIVERED,\n  EVT_ORDER_CANCELLED,\n  EVT_ORDER_REFUNDED,\n  EVT_ORDER_PARTIALLY_REFUNDED,\n  EVT_INVENTORY_CHANGED,\n  EVT_INVENTORY_RESERVED,\n  EVT_INVENTORY_RELEASED,\n  EVT_INVENTORY_LOW_STOCK,\n  EVT_INVENTORY_OUT_OF_STOCK,\n  EVT_CUSTOMER_CREATED,\n  EVT_CUSTOMER_UPDATED,\n  EVT_CUSTOMER_DELETED,\n  EVT_CART_CREATED,\n  EVT_CART_ITEM_ADDED,\n  EVT_CART_ITEM_REMOVED,\n  EVT_CART_UPDATED,\n  EVT_CART_ABANDONED,\n  EVT_CART_CONVERTED,\n  EVT_PAYMENT_CAPTURED,\n  EVT_PAYMENT_FAILED,\n  EVT_PAYMENT_REFUNDED,\n  EVT_ADAPTER_ERROR,\n] as const\n","// The kernel's transactional email templates, shared by every email adapter (the console one and the SMTP package).\nexport interface RenderedEmail {\n  subject: string\n  text: string\n  html: string\n}\n\nfunction render(template: string, vars: Record<string, unknown>): string {\n  return template.replace(/\\{\\{\\s*([\\w.]+)\\s*\\}\\}/g, (_, path: string) => {\n    const parts = path.split('.')\n    let cur: unknown = vars\n    for (const p of parts) {\n      if (cur && typeof cur === 'object' && p in (cur as Record<string, unknown>)) {\n        cur = (cur as Record<string, unknown>)[p]\n      } else {\n        return ''\n      }\n    }\n    return cur == null ? '' : String(cur)\n  })\n}\n\nconst TEMPLATES: Record<string, { subject: string; body: string }> = {\n  'order-placed': {\n    subject: 'Order {{orderNumber}} confirmed',\n    body: `Hi {{customerName}},\\n\\nThank you for your order {{orderNumber}}. Total: {{totalFormatted}}.\\n\\nWe'll let you know when it ships.`,\n  },\n  'order-shipped': {\n    subject: 'Order {{orderNumber}} is on its way',\n    body: `Hi {{customerName}},\\n\\nYour order {{orderNumber}} has shipped via {{carrier}}.\\nTracking: {{trackingNumber}}`,\n  },\n  welcome: {\n    subject: 'Welcome to {{storeName}}',\n    body: `Welcome {{customerName}}! Your account is ready.`,\n  },\n  'cart-abandoned': {\n    subject: \"Don't forget your cart at {{storeName}}\",\n    body: `Hi,\\n\\nYou left items in your cart. Pick up where you left off: {{resumeUrl}}`,\n  },\n}\n\nexport function renderEmailTemplate(\n  template: string,\n  vars: Record<string, unknown>,\n): RenderedEmail {\n  const t = TEMPLATES[template]\n  if (!t) {\n    return {\n      subject: `[nymbal] ${template}`,\n      text: JSON.stringify(vars),\n      html: `<pre>${JSON.stringify(vars, null, 2)}</pre>`,\n    }\n  }\n  const subject = render(t.subject, vars)\n  const text = render(t.body, vars)\n  const html = `<pre>${text.replace(/</g, '&lt;')}</pre>`\n  return { subject, text, html }\n}\n"],"mappings":";AAEO,IAAM,cAAN,cAA0B,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EAET,YACE,MACA,SACA,UAAuD,CAAC,GACxD;AACA,UAAM,SAAS,QAAQ,UAAU,SAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,MAAS;AACjF,SAAK,OAAO,KAAK,YAAY;AAC7B,SAAK,OAAO;AACZ,SAAK,UAAU,QAAQ,WAAW,CAAC;AAAA,EACrC;AAAA,EAEA,SAAiF;AAC/E,WAAO,EAAE,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,SAAS,KAAK,SAAS,SAAS,KAAK,QAAQ;AAAA,EAC1F;AACF;AAEO,IAAM,cAAN,cAA0B,YAAY;AAAA,EAC3C,YACE,SACA,UAII,CAAC,GACL;AACA,UAAM,QAAQ,QAAQ,kBAAkB,SAAS,OAAO;AAAA,EAC1D;AACF;AAEO,IAAM,kBAAN,cAA8B,YAAY;AAAA,EAC/C,YAAY,SAAiB,UAAuD,CAAC,GAAG;AACtF,UAAM,qBAAqB,SAAS,OAAO;AAAA,EAC7C;AACF;AAEO,IAAM,gBAAN,cAA4B,YAAY;AAAA,EAC7C,YACE,UACA,YACA,UAAuD,CAAC,GACxD;AACA,UAAM,aAAa,GAAG,QAAQ,eAAe,OAAO,UAAU,CAAC,IAAI;AAAA,MACjE,GAAG;AAAA,MACH,SAAS,EAAE,UAAU,YAAY,GAAI,QAAQ,WAAW,CAAC,EAAG;AAAA,IAC9D,CAAC;AAAA,EACH;AACF;AAEO,IAAM,eAAN,cAA2B,YAAY;AAAA,EAC5C,YACE,MACA,SACA,UAAuD,CAAC,GACxD;AACA,UAAM,WAAW,IAAI,IAAI,SAAS,OAAO;AAAA,EAC3C;AACF;AAEO,IAAM,YAAN,cAAwB,YAAY;AAAA,EAChC;AAAA,EAET,YACE,QACA,SACA,UAAsE,CAAC,GACvE;AACA,UAAM,QAAQ,QAAQ,QAAQ,MAAM,IAAI,SAAS,OAAO;AACxD,SAAK,SAAS;AAAA,EAChB;AACF;AAEO,IAAM,YAAN,cAAwB,UAAU;AAAA,EACvC,YACE,MACA,SACA,UAAuD,CAAC,GACxD;AACA,UAAM,SAAS,SAAS,cAAc,MAAM;AAC5C,UAAM,QAAQ,SAAS,EAAE,GAAG,SAAS,MAAM,QAAQ,IAAI,GAAG,CAAC;AAAA,EAC7D;AACF;AAEO,IAAM,eAAN,cAA2B,YAAY;AAAA,EAC5C,YACE,MAUA,SACA,UAAuD,CAAC,GACxD;AACA,UAAM,WAAW,IAAI,IAAI,SAAS,OAAO;AAAA,EAC3C;AACF;AAGO,IAAM,qBAAN,cAAiC,YAAY;AAAA,EAClD,YACE,MAQA,SACA,UAAuD,CAAC,GACxD;AACA,UAAM,MAAM,SAAS,OAAO;AAAA,EAC9B;AACF;AAEO,IAAM,gBAAN,cAA4B,YAAY;AAAA,EAC7C,YACE,MAQA,SACA,UAAuD,CAAC,GACxD;AACA,UAAM,YAAY,IAAI,IAAI,SAAS,OAAO;AAAA,EAC5C;AACF;AAEO,IAAM,wBAAN,cAAoC,YAAY;AAAA,EACrD,YACE,QACA,YACA,UACA,UAAuD,CAAC,GACxD;AACA;AAAA,MACE;AAAA,MACA,WAAW,MAAM,uBAAuB,UAAU,WAAM,QAAQ;AAAA,MAChE;AAAA,QACE,GAAG;AAAA,QACH,SAAS,EAAE,QAAQ,YAAY,UAAU,GAAI,QAAQ,WAAW,CAAC,EAAG;AAAA,MACtE;AAAA,IACF;AAAA,EACF;AACF;;;ACvJO,SAAS,MAAM,QAAgB,UAAyB;AAC7D,mBAAiB,MAAM;AACvB,SAAO,EAAE,QAAQ,SAAS;AAC5B;AAEO,SAAS,iBAAiB,QAAsB;AACrD,MAAI,CAAC,OAAO,UAAU,MAAM,GAAG;AAC7B,UAAM,IAAI,gBAAgB,yDAAyD,MAAM,EAAE;AAAA,EAC7F;AACF;AAEA,SAAS,mBAAmB,GAAU,GAAgB;AACpD,MAAI,EAAE,aAAa,EAAE,UAAU;AAC7B,UAAM,IAAI;AAAA,MACR,sBAAsB,EAAE,QAAQ,OAAO,EAAE,QAAQ;AAAA,IACnD;AAAA,EACF;AACF;AAEO,SAAS,IAAI,GAAU,GAAiB;AAC7C,qBAAmB,GAAG,CAAC;AACvB,SAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,UAAU,EAAE,SAAS;AAC7D;AAEO,SAAS,IAAI,GAAU,GAAiB;AAC7C,qBAAmB,GAAG,CAAC;AACvB,SAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,UAAU,EAAE,SAAS;AAC7D;AAEO,SAAS,MAAM,GAAU,QAAuB;AACrD,MAAI,CAAC,OAAO,SAAS,MAAM,GAAG;AAC5B,UAAM,IAAI,gBAAgB,8BAA8B,MAAM,EAAE;AAAA,EAClE;AACA,SAAO,EAAE,QAAQ,KAAK,MAAM,EAAE,SAAS,MAAM,GAAG,UAAU,EAAE,SAAS;AACvE;AAEO,SAAS,SAAS,QAAiB,UAAyB;AACjE,QAAM,QAAQ,OAAO,OAAO,CAAC,KAAK,MAAM;AACtC,uBAAmB,GAAG,EAAE,QAAQ,GAAG,SAAS,CAAC;AAC7C,WAAO,MAAM,EAAE;AAAA,EACjB,GAAG,CAAC;AACJ,SAAO,EAAE,QAAQ,OAAO,SAAS;AACnC;AAEO,SAAS,SAAS,GAAU,SAA4B;AAC7D,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAClC,QAAM,cAAc,QAAQ,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC;AACrD,MAAI,eAAe,GAAG;AACpB,UAAM,IAAI,gBAAgB,sCAAsC;AAAA,EAClE;AACA,QAAM,WAAW,QAAQ,IAAI,CAAC,MAAM,KAAK,MAAO,EAAE,SAAS,IAAK,WAAW,CAAC;AAC5E,MAAI,YAAY,EAAE,SAAS,SAAS,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC;AAC7D,QAAM,SAAS,SAAS,MAAM;AAC9B,MAAI,MAAM;AACV,SAAO,cAAc,KAAK,MAAM,OAAO,QAAQ;AAC7C,UAAM,QAAQ,YAAY,IAAI,IAAI;AAClC,WAAO,GAAG,KAAK,OAAO,GAAG,KAAK,KAAK;AACnC,iBAAa;AACb,WAAO;AAAA,EACT;AACA,SAAO,OAAO,IAAI,CAAC,YAAY,EAAE,QAAQ,UAAU,EAAE,SAAS,EAAE;AAClE;;;ACbO,IAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,uBAAuC;;;AClD7C,IAAM,2BAAwE;AAAA,EACnF,SAAS,CAAC,aAAa,WAAW;AAAA,EAClC,WAAW,CAAC,cAAc,aAAa,YAAY,oBAAoB;AAAA,EACvE,YAAY,CAAC,WAAW,aAAa,YAAY,oBAAoB;AAAA,EACrE,SAAS,CAAC,aAAa,YAAY,oBAAoB;AAAA,EACvD,WAAW,CAAC,YAAY,oBAAoB;AAAA,EAC5C,WAAW,CAAC;AAAA,EACZ,UAAU,CAAC;AAAA,EACX,oBAAoB,CAAC,UAAU;AACjC;AAEO,SAAS,mBAAmB,MAAmB,IAA0B;AAC9E,SAAO,yBAAyB,IAAI,EAAE,SAAS,EAAE;AACnD;AAEO,SAAS,sBAAsB,MAAmB,IAAuB;AAC9E,MAAI,CAAC,mBAAmB,MAAM,EAAE,GAAG;AACjC,UAAM,IAAI,sBAAsB,SAAS,MAAM,EAAE;AAAA,EACnD;AACF;AAwFO,SAAS,aAAa,OAAqE;AAChG,MAAI,MAAM,iBAAiB,EAAG,QAAO;AACrC,MAAI,MAAM,iBAAiB,EAAG,QAAO;AACrC,SAAO,MAAM,gBAAgB,MAAM,gBAAgB,uBAAuB;AAC5E;AAGO,SAAS,gBACd,OACA,SACQ;AACR,QAAM,UAAU,QACb,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS,EACpC,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,aAAa,CAAC;AAC5C,SAAO,KAAK,IAAI,GAAG,MAAM,gBAAgB,MAAM,gBAAgB,OAAO;AACxE;;;ACtIO,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,wBAAwB;AAC9B,IAAM,0BAA0B;AAGhC,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB;AAG7B,IAAM,mBAAmB;AACzB,IAAM,iBAAiB;AACvB,IAAM,sBAAsB;AAC5B,IAAM,oBAAoB;AAC1B,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,qBAAqB;AAC3B,IAAM,+BAA+B;AAGrC,IAAM,wBAAwB;AAC9B,IAAM,yBAAyB;AAC/B,IAAM,yBAAyB;AAC/B,IAAM,0BAA0B;AAChC,IAAM,6BAA6B;AAGnC,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB;AAE7B,IAAM,0BAA0B;AAGhC,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAC5B,IAAM,wBAAwB;AAC9B,IAAM,mBAAmB;AACzB,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAG3B,IAAM,uBAAuB;AAC7B,IAAM,qBAAqB;AAC3B,IAAM,uBAAuB;AAG7B,IAAM,oBAAoB;AAE1B,IAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;AChFA,SAAS,OAAO,UAAkB,MAAuC;AACvE,SAAO,SAAS,QAAQ,2BAA2B,CAAC,GAAG,SAAiB;AACtE,UAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,QAAI,MAAe;AACnB,eAAW,KAAK,OAAO;AACrB,UAAI,OAAO,OAAO,QAAQ,YAAY,KAAM,KAAiC;AAC3E,cAAO,IAAgC,CAAC;AAAA,MAC1C,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO,OAAO,OAAO,KAAK,OAAO,GAAG;AAAA,EACtC,CAAC;AACH;AAEA,IAAM,YAA+D;AAAA,EACnE,gBAAgB;AAAA,IACd,SAAS;AAAA,IACT,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,EACR;AAAA,EACA,iBAAiB;AAAA,IACf,SAAS;AAAA,IACT,MAAM;AAAA;AAAA;AAAA;AAAA,EACR;AAAA,EACA,SAAS;AAAA,IACP,SAAS;AAAA,IACT,MAAM;AAAA,EACR;AAAA,EACA,kBAAkB;AAAA,IAChB,SAAS;AAAA,IACT,MAAM;AAAA;AAAA;AAAA,EACR;AACF;AAEO,SAAS,oBACd,UACA,MACe;AACf,QAAM,IAAI,UAAU,QAAQ;AAC5B,MAAI,CAAC,GAAG;AACN,WAAO;AAAA,MACL,SAAS,YAAY,QAAQ;AAAA,MAC7B,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB,MAAM,QAAQ,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,IAC7C;AAAA,EACF;AACA,QAAM,UAAU,OAAO,EAAE,SAAS,IAAI;AACtC,QAAM,OAAO,OAAO,EAAE,MAAM,IAAI;AAChC,QAAM,OAAO,QAAQ,KAAK,QAAQ,MAAM,MAAM,CAAC;AAC/C,SAAO,EAAE,SAAS,MAAM,KAAK;AAC/B;","names":[]}
+{"version":3,"sources":["../src/errors.ts","../src/domain/money.ts","../src/domain/product.ts","../src/domain/order.ts","../src/events/constants.ts","../src/adapters/adapter-base.ts","../src/adapters/document-order.ts","../src/adapters/http.ts","../src/adapters/security.ts","../src/adapters/email-templates.ts","../src/stock-level.ts","../src/audit.ts"],"sourcesContent":["export type ErrorContext = Record<string, unknown>\n\nexport class NymbalError extends Error {\n  readonly code: string\n  readonly context: ErrorContext\n\n  constructor(\n    code: string,\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super(message, options.cause !== undefined ? { cause: options.cause } : undefined)\n    this.name = this.constructor.name\n    this.code = code\n    this.context = options.context ?? {}\n  }\n\n  toJSON(): { name: string; code: string; message: string; context: ErrorContext } {\n    return { name: this.name, code: this.code, message: this.message, context: this.context }\n  }\n}\n\nexport class ConfigError extends NymbalError {\n  constructor(\n    message: string,\n    options: {\n      cause?: unknown\n      context?: ErrorContext\n      code?: `config.${string}` | `adapter.${string}`\n    } = {},\n  ) {\n    super(options.code ?? 'config.invalid', message, options)\n  }\n}\n\nexport class ValidationError extends NymbalError {\n  constructor(message: string, options: { cause?: unknown; context?: ErrorContext } = {}) {\n    super('validation.failed', message, options)\n  }\n}\n\nexport class NotFoundError extends NymbalError {\n  constructor(\n    resource: string,\n    identifier: unknown,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super('not_found', `${resource} not found: ${String(identifier)}`, {\n      ...options,\n      context: { resource, identifier, ...(options.context ?? {}) },\n    })\n  }\n}\n\nexport class AdapterError extends NymbalError {\n  constructor(\n    code: string,\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super(`adapter.${code}`, message, options)\n  }\n}\n\nexport class HttpError extends NymbalError {\n  readonly status: number\n\n  constructor(\n    status: number,\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext; code?: string } = {},\n  ) {\n    super(options.code ?? `http.${status}`, message, options)\n    this.status = status\n  }\n}\n\nexport class AuthError extends HttpError {\n  constructor(\n    code: 'unauthorized' | 'forbidden' | 'invalid_credentials' | 'token_expired' | 'token_invalid',\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    const status = code === 'forbidden' ? 403 : 401\n    super(status, message, { ...options, code: `auth.${code}` })\n  }\n}\n\nexport class PaymentError extends NymbalError {\n  constructor(\n    code:\n      | 'intent_failed'\n      | 'capture_failed'\n      // A definite refusal: no money moved.\n      | 'refund_rejected'\n      // An outcome the shop cannot know (a timeout, a provider fault): money may have moved.\n      | 'refund_unknown'\n      | 'cancel_refused'\n      | 'webhook_invalid'\n      | 'not_configured',\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super(`payment.${code}`, message, options)\n  }\n}\n\n/** A command the order's money does not allow (confirm unpaid, cancel paid, refund beyond the capture). */\nexport class OrderConflictError extends NymbalError {\n  constructor(\n    code:\n      | 'order.unpaid'\n      | 'order.paid'\n      | 'order.stock_unavailable'\n      | 'order.payment_in_progress'\n      | 'refund.not_captured'\n      | 'refund.exceeds_captured'\n      | 'refund.request_reused',\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super(code, message, options)\n  }\n}\n\nexport class CheckoutError extends NymbalError {\n  constructor(\n    code:\n      | 'cart_empty'\n      | 'in_progress'\n      | 'payment_in_progress'\n      | 'variant_missing'\n      | 'out_of_stock'\n      | 'reservation_failed'\n      | 'finalize_failed',\n    message: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super(`checkout.${code}`, message, options)\n  }\n}\n\nexport class StatusTransitionError extends NymbalError {\n  constructor(\n    entity: string,\n    fromStatus: string,\n    toStatus: string,\n    options: { cause?: unknown; context?: ErrorContext } = {},\n  ) {\n    super(\n      'status.invalid_transition',\n      `Invalid ${entity} status transition: ${fromStatus} → ${toStatus}`,\n      {\n        ...options,\n        context: { entity, fromStatus, toStatus, ...(options.context ?? {}) },\n      },\n    )\n  }\n}\n","import { ValidationError } from '../errors.js'\n\nexport interface Money {\n  amount: number\n  currency: string\n}\n\nexport function money(amount: number, currency: string): Money {\n  assertMinorUnits(amount)\n  return { amount, currency }\n}\n\nexport function assertMinorUnits(amount: number): void {\n  if (!Number.isInteger(amount)) {\n    throw new ValidationError(`Monetary amount must be an integer (minor units), got ${amount}`)\n  }\n}\n\nfunction assertSameCurrency(a: Money, b: Money): void {\n  if (a.currency !== b.currency) {\n    throw new ValidationError(\n      `Currency mismatch: ${a.currency} vs ${b.currency}`,\n    )\n  }\n}\n\nexport function add(a: Money, b: Money): Money {\n  assertSameCurrency(a, b)\n  return { amount: a.amount + b.amount, currency: a.currency }\n}\n\nexport function sub(a: Money, b: Money): Money {\n  assertSameCurrency(a, b)\n  return { amount: a.amount - b.amount, currency: a.currency }\n}\n\nexport function mulBy(m: Money, scalar: number): Money {\n  if (!Number.isFinite(scalar)) {\n    throw new ValidationError(`Scalar must be finite, got ${scalar}`)\n  }\n  return { amount: Math.round(m.amount * scalar), currency: m.currency }\n}\n\nexport function sumMoney(values: Money[], currency: string): Money {\n  const total = values.reduce((acc, m) => {\n    assertSameCurrency(m, { amount: 0, currency })\n    return acc + m.amount\n  }, 0)\n  return { amount: total, currency }\n}\n\nexport function allocate(m: Money, weights: number[]): Money[] {\n  if (weights.length === 0) return []\n  const totalWeight = weights.reduce((s, w) => s + w, 0)\n  if (totalWeight <= 0) {\n    throw new ValidationError('allocate: sum of weights must be > 0')\n  }\n  const portions = weights.map((w) => Math.floor((m.amount * w) / totalWeight))\n  let remainder = m.amount - portions.reduce((s, p) => s + p, 0)\n  const result = portions.slice()\n  let idx = 0\n  while (remainder !== 0 && idx < result.length) {\n    const delta = remainder > 0 ? 1 : -1\n    result[idx] = (result[idx] ?? 0) + delta\n    remainder -= delta\n    idx += 1\n  }\n  return result.map((amount) => ({ amount, currency: m.currency }))\n}\n","export type ProductStatus = 'draft' | 'active' | 'archived'\nexport type ProductType = 'simple' | 'variable'\nexport type VariantStatus = 'active' | 'inactive'\n\nexport interface ProductMedia {\n  url: string\n  altText: string\n  position: number\n}\n\nexport interface VariantOption {\n  name: string\n  value: string\n}\n\nexport interface VariantDimensions {\n  lengthMm?: number\n  widthMm?: number\n  heightMm?: number\n}\n\nexport interface Variant {\n  id: string\n  productId: string\n  sku: string\n  name: string\n  priceMinor: number\n  compareAtPriceMinor: number | null\n  weightGrams: number | null\n  dimensions: VariantDimensions | null\n  stock: number\n  lowStockThreshold: number\n  options: VariantOption[]\n  status: VariantStatus\n  createdAt: string\n  updatedAt: string\n}\n\nexport interface Product {\n  id: string\n  slug: string\n  name: string\n  description: string\n  shortDescription: string\n  status: ProductStatus\n  type: ProductType\n  seoTitle: string\n  seoDescription: string\n  media: ProductMedia[]\n  metadata: Record<string, unknown>\n  createdAt: string\n  updatedAt: string\n}\n\n/** The orders a product listing can be requested in; ties break by slug, ascending. */\nexport const PRODUCT_SORT_KEYS = [\n  'newest',\n  'price-asc',\n  'price-desc',\n  'name-asc',\n  'name-desc',\n] as const\nexport type ProductSortKey = (typeof PRODUCT_SORT_KEYS)[number]\nexport const DEFAULT_PRODUCT_SORT: ProductSortKey = 'newest'\n/** What a storefront shows for each sort. */\nexport const PRODUCT_SORT_LABELS: Readonly<Record<ProductSortKey, string>> = {\n  newest: 'Newest',\n  'price-asc': 'Price: Low to High',\n  'price-desc': 'Price: High to Low',\n  'name-asc': 'Name: A to Z',\n  'name-desc': 'Name: Z to A',\n}\n","import { StatusTransitionError } from '../errors.js'\n\nexport type OrderStatus =\n  | 'pending'\n  | 'confirmed'\n  | 'processing'\n  | 'shipped'\n  | 'delivered'\n  | 'cancelled'\n  | 'refunded'\n  | 'partially_refunded'\n\n// A captured order is refunded from any status between confirmed and delivered; a partial refund leaves room for more.\nexport const ORDER_STATUS_TRANSITIONS: Record<OrderStatus, readonly OrderStatus[]> = {\n  pending: ['confirmed', 'cancelled'],\n  confirmed: ['processing', 'cancelled', 'refunded', 'partially_refunded'],\n  processing: ['shipped', 'cancelled', 'refunded', 'partially_refunded'],\n  shipped: ['delivered', 'refunded', 'partially_refunded'],\n  delivered: ['refunded', 'partially_refunded'],\n  cancelled: [],\n  refunded: [],\n  partially_refunded: ['refunded'],\n}\n\nexport function canTransitionOrder(from: OrderStatus, to: OrderStatus): boolean {\n  return ORDER_STATUS_TRANSITIONS[from].includes(to)\n}\n\nexport function assertOrderTransition(from: OrderStatus, to: OrderStatus): void {\n  if (!canTransitionOrder(from, to)) {\n    throw new StatusTransitionError('order', from, to)\n  }\n}\n\nexport interface Address {\n  firstName: string\n  lastName: string\n  company?: string\n  addressLine1: string\n  addressLine2?: string\n  city: string\n  region: string\n  postalCode: string\n  country: string\n  phone?: string\n}\n\nexport interface OrderLineItem {\n  variantId: string\n  productId: string\n  productName: string\n  variantName: string\n  sku: string\n  qty: number\n  unitPriceMinor: number\n  lineSubtotalMinor: number\n  lineTaxMinor: number\n  lineTotalMinor: number\n  imageUrl: string\n}\n\nexport interface Order {\n  id: string\n  orderNumber: string\n  sequence: number\n  customerId: string | null\n  status: OrderStatus\n  email: string\n  billingAddress: Address\n  shippingAddress: Address\n  lineItems: OrderLineItem[]\n  subtotalMinor: number\n  taxTotalMinor: number\n  shippingTotalMinor: number\n  discountTotalMinor: number\n  totalMinor: number\n  currency: string\n  notes: string\n  metadata: Record<string, unknown>\n  paymentIntentId: string | null\n  /** Money taken for the order, in minor units of its currency; 0 while nothing is captured. */\n  capturedMinor: number\n  capturedAt: string | null\n  /** Σ of the order's succeeded refunds (or, for an import or a pre-refund-table order, what was refunded then). */\n  refundedMinor: number\n  captureMethod: CaptureMethod | null\n  createdAt: string\n  updatedAt: string\n}\n\n/** Who took the money: the payments provider, the merchant recording an offline payment, or an imported history. */\nexport type CaptureMethod = 'provider' | 'manual' | 'import'\n\nexport type OrderRefundStatus = 'pending' | 'succeeded' | 'failed'\n\n/** One refund of an order. `pending` until the provider's answer settles it, and counted against what is refundable. */\nexport interface OrderRefund {\n  id: string\n  orderId: string\n  amountMinor: number\n  currency: string\n  providerRefundId: string | null\n  status: OrderRefundStatus\n  reason: string | null\n  actor: string\n  createdAt: string\n}\n\nexport type PaymentState = 'unpaid' | 'paid' | 'partially_refunded' | 'refunded'\n\n/** What the admin shows about an order's money: derived from the stored amounts and refunds alone. */\nexport interface OrderPayment {\n  state: PaymentState\n  capturedMinor: number\n  refundedMinor: number\n  refundableMinor: number\n  currency: string\n  refunds: OrderRefund[]\n}\n\nexport function paymentState(order: Pick<Order, 'capturedMinor' | 'refundedMinor'>): PaymentState {\n  if (order.capturedMinor <= 0) return 'unpaid'\n  if (order.refundedMinor <= 0) return 'paid'\n  return order.refundedMinor < order.capturedMinor ? 'partially_refunded' : 'refunded'\n}\n\n/** What can still be refunded: the capture less what was refunded and what is still pending with the provider. */\nexport function refundableMinor(\n  order: Pick<Order, 'capturedMinor' | 'refundedMinor'>,\n  refunds: ReadonlyArray<Pick<OrderRefund, 'amountMinor' | 'status'>>,\n): number {\n  const pending = refunds\n    .filter((r) => r.status === 'pending')\n    .reduce((sum, r) => sum + r.amountMinor, 0)\n  return Math.max(0, order.capturedMinor - order.refundedMinor - pending)\n}\n\nexport interface OrderHistoryEntry {\n  id: string\n  orderId: string\n  fromStatus: OrderStatus | null\n  toStatus: OrderStatus\n  actor: string\n  note: string\n  timestamp: string\n}\n","// Product\nexport const EVT_PRODUCT_CREATED = 'product.created.v1'\nexport const EVT_PRODUCT_UPDATED = 'product.updated.v1'\nexport const EVT_PRODUCT_DELETED = 'product.deleted.v1'\nexport const EVT_PRODUCT_PUBLISHED = 'product.published.v1'\nexport const EVT_PRODUCT_UNPUBLISHED = 'product.unpublished.v1'\n\n// Category\nexport const EVT_CATEGORY_CREATED = 'category.created.v1'\nexport const EVT_CATEGORY_UPDATED = 'category.updated.v1'\nexport const EVT_CATEGORY_DELETED = 'category.deleted.v1'\n\n// Order\nexport const EVT_ORDER_PLACED = 'order.placed.v1'\nexport const EVT_ORDER_PAID = 'order.paid.v1'\nexport const EVT_ORDER_FULFILLED = 'order.fulfilled.v1'\nexport const EVT_ORDER_SHIPPED = 'order.shipped.v1'\nexport const EVT_ORDER_DELIVERED = 'order.delivered.v1'\nexport const EVT_ORDER_CANCELLED = 'order.cancelled.v1'\nexport const EVT_ORDER_REFUNDED = 'order.refunded.v1'\nexport const EVT_ORDER_PARTIALLY_REFUNDED = 'order.partially_refunded.v1'\nexport const EVT_ORDER_STATUS_CHANGED = 'order.status_changed.v1'\n\n// Inventory\nexport const EVT_INVENTORY_CHANGED = 'inventory.changed.v1'\nexport const EVT_INVENTORY_RESERVED = 'inventory.reserved.v1'\nexport const EVT_INVENTORY_RELEASED = 'inventory.released.v1'\nexport const EVT_INVENTORY_LOW_STOCK = 'inventory.low_stock.v1'\nexport const EVT_INVENTORY_OUT_OF_STOCK = 'inventory.out_of_stock.v1'\n\n// Customer\nexport const EVT_CUSTOMER_CREATED = 'customer.created.v1'\nexport const EVT_CUSTOMER_UPDATED = 'customer.updated.v1'\nexport const EVT_CUSTOMER_DELETED = 'customer.deleted.v1'\n// Legacy alias (kept so Prompt 1 seed code continues to compile).\nexport const EVT_CUSTOMER_REGISTERED = EVT_CUSTOMER_CREATED\n\n// Cart\nexport const EVT_CART_CREATED = 'cart.created.v1'\nexport const EVT_CART_ITEM_ADDED = 'cart.item_added.v1'\nexport const EVT_CART_ITEM_REMOVED = 'cart.item_removed.v1'\nexport const EVT_CART_UPDATED = 'cart.updated.v1'\nexport const EVT_CART_ABANDONED = 'cart.abandoned.v1'\nexport const EVT_CART_CONVERTED = 'cart.converted.v1'\n\n// Payment\nexport const EVT_PAYMENT_INTENT_CREATED = 'payment.intent_created.v1'\nexport const EVT_PAYMENT_CAPTURED = 'payment.captured.v1'\nexport const EVT_PAYMENT_FAILED = 'payment.failed.v1'\nexport const EVT_PAYMENT_REFUNDED = 'payment.refunded.v1'\n\n// System\nexport const EVT_ADAPTER_ERROR = 'adapter.error.v1'\nexport const EVT_SETTINGS_CHANGED = 'settings.changed.v1'\n\nexport const STANDARD_EVENT_TYPES = [\n  EVT_PRODUCT_CREATED,\n  EVT_PRODUCT_UPDATED,\n  EVT_PRODUCT_DELETED,\n  EVT_PRODUCT_PUBLISHED,\n  EVT_PRODUCT_UNPUBLISHED,\n  EVT_CATEGORY_CREATED,\n  EVT_CATEGORY_UPDATED,\n  EVT_CATEGORY_DELETED,\n  EVT_ORDER_PLACED,\n  EVT_ORDER_PAID,\n  EVT_ORDER_FULFILLED,\n  EVT_ORDER_SHIPPED,\n  EVT_ORDER_DELIVERED,\n  EVT_ORDER_CANCELLED,\n  EVT_ORDER_REFUNDED,\n  EVT_ORDER_PARTIALLY_REFUNDED,\n  EVT_ORDER_STATUS_CHANGED,\n  EVT_INVENTORY_CHANGED,\n  EVT_INVENTORY_RESERVED,\n  EVT_INVENTORY_RELEASED,\n  EVT_INVENTORY_LOW_STOCK,\n  EVT_INVENTORY_OUT_OF_STOCK,\n  EVT_CUSTOMER_CREATED,\n  EVT_CUSTOMER_UPDATED,\n  EVT_CUSTOMER_DELETED,\n  EVT_CART_CREATED,\n  EVT_CART_ITEM_ADDED,\n  EVT_CART_ITEM_REMOVED,\n  EVT_CART_UPDATED,\n  EVT_CART_ABANDONED,\n  EVT_CART_CONVERTED,\n  EVT_PAYMENT_INTENT_CREATED,\n  EVT_PAYMENT_CAPTURED,\n  EVT_PAYMENT_FAILED,\n  EVT_PAYMENT_REFUNDED,\n  EVT_ADAPTER_ERROR,\n  EVT_SETTINGS_CHANGED,\n] as const\n","import type { Logger } from './http.js'\n\nexport type HealthStatus = 'healthy' | 'degraded' | 'down'\n\nexport interface HealthReport {\n  status: HealthStatus\n  detail?: string\n}\n\n/** How long a health check may run before it reports `down`. */\nexport const HEALTH_CHECK_TIMEOUT_MS = 5000\n\nexport interface BoundedHealthCheckOptions {\n  /** `HEALTH_CHECK_TIMEOUT_MS` when not given. */\n  timeoutMs?: number\n  /** Values an error's message must never show (a URL's user, password or query values); each becomes `***`. */\n  redact?: readonly string[]\n}\n\n/** An error's message for a report; an AggregateError (a refused connection to every address of a name) lists its own. */\nexport function errorText(error: unknown): string {\n  if (!(error instanceof Error)) return String(error)\n  if (error.message !== '') return error.message\n  const inner = (error as { errors?: unknown }).errors\n  if (Array.isArray(inner) && inner.length > 0) return inner.map(errorText).join('; ')\n  const code = (error as { code?: unknown }).code\n  return typeof code === 'string' ? code : error.name\n}\n\n/**\n * The shortest value worth removing from text as a secret. A shorter one is too likely to be an ordinary word (a local\n * password of `nymbal`), whose removal garbles the text; user info and query strings go with the URL rewrite anyway.\n */\nexport const SECRET_MIN_LENGTH = 8\n\n/**\n * The values in a connection URL that are credentials or may carry one: its password and its query values, and its\n * user unless `user` is false, each as written and decoded, if at least `SECRET_MIN_LENGTH` long. A user is worth\n * hiding in a driver's error, not in our own text.\n */\nexport function connectionSecrets(url: string, options: { user?: boolean } = {}): string[] {\n  let parsed: URL\n  try {\n    parsed = new URL(url)\n  } catch {\n    return []\n  }\n  const raw = [\n    ...(options.user === false ? [] : [parsed.username]),\n    parsed.password,\n    ...parsed.searchParams.values(),\n  ]\n  const decoded = raw.map((value) => {\n    try {\n      return decodeURIComponent(value)\n    } catch {\n      return value\n    }\n  })\n  return [...new Set([...raw, ...decoded])].filter((value) => value.length >= SECRET_MIN_LENGTH)\n}\n\n/**\n * A connection URL as it may be printed: `scheme://host:port/path`, with no user, password, query or fragment. Text\n * that is not a URL comes back as `<unparsable url>`, since it may be a URL with a secret the parser could not read.\n */\nexport function displayUrl(url: string): string {\n  try {\n    const parsed = new URL(url)\n    return `${parsed.protocol}//${parsed.host}${parsed.pathname === '/' ? '' : parsed.pathname}`\n  } catch {\n    return '<unparsable url>'\n  }\n}\n\n/**\n * Runs `check` within the bound. A check that throws is `down` with the error's message, every `redact` value in it\n * replaced; one still running when the bound passes is `down` with `timed out after <n> ms`, and its signal aborted.\n */\nexport async function boundedHealthCheck(\n  check: (signal: AbortSignal) => Promise<HealthReport> | HealthReport,\n  options: BoundedHealthCheckOptions = {},\n): Promise<HealthReport> {\n  const timeoutMs = options.timeoutMs ?? HEALTH_CHECK_TIMEOUT_MS\n  const controller = new AbortController()\n  let timer: ReturnType<typeof setTimeout> | undefined\n  const timedOut = new Promise<HealthReport>((resolve) => {\n    timer = setTimeout(() => {\n      controller.abort()\n      resolve({ status: 'down', detail: `timed out after ${timeoutMs} ms` })\n    }, timeoutMs)\n  })\n  const failed = (error: unknown): HealthReport => {\n    let detail = errorText(error)\n    for (const secret of options.redact ?? []) {\n      if (secret !== '') detail = detail.split(secret).join('***')\n    }\n    return { status: 'down', detail }\n  }\n  try {\n    // Started inside a promise so a check that throws before returning one, or returns a plain report, is still\n    // mapped rather than escaping the caller.\n    const checked = Promise.resolve()\n      .then(() => check(controller.signal))\n      .catch(failed)\n    return await Promise.race([checked, timedOut])\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\nexport interface AdapterBase {\n  /** What this adapter offers, for the app's per-slot report; each adapter answers for itself. */\n  capabilities(): readonly string[]\n  readonly producesEvents: readonly string[]\n  readonly consumesEvents: readonly string[]\n  initialize(config: unknown): Promise<void>\n  healthCheck(): Promise<HealthReport>\n}\n\n/** The commerce slots a store's config names a provider for. */\nexport type CommerceSlot =\n  | 'payments'\n  | 'email'\n  | 'reviews'\n  | 'search'\n  | 'analytics'\n  | 'shipping'\n  | 'tax'\n  | 'ai'\n\n/**\n * Every slot an adapter package can fill: the commerce slots, the infrastructure primitives and `security`, whose\n * choice is `security.adapter`.\n */\nexport type Slot = CommerceSlot | 'documentStore' | 'eventBus' | 'media' | 'security'\n\n/**\n * What the kernel hands an adapter package's `createAdapter`. A package that serves more than one slot switches on\n * `slot`; `config` is a commerce slot's `config` block from nymbal.config.ts, a primitive's connection block, or for\n * `security` the block named after the adapter (`security.cloudflare`).\n */\nexport interface AdapterContext {\n  slot: Slot\n  config: Record<string, unknown>\n  logger: Logger\n  env: NodeJS.ProcessEnv\n}\n\n/**\n * One field of a slot's config block that a store owner may fill from the admin's Settings, as a provider package\n * declares it in its `settings` export. The config block wins, then `env`, then a saved value.\n */\nexport interface AdapterSetting {\n  /** A dot path inside the slot's config block: `secretKey`, `smtp.pass`. */\n  path: string\n  label: string\n  /** Stored encrypted and never shown again once saved. */\n  secret: boolean\n  /** The environment variable that sets the field when the config block does not. */\n  env?: string\n  /**\n   * The adapter works without it (SMTP without authentication), so a secret left unset does not leave the slot\n   * unconfigured.\n   */\n  optional?: boolean\n}\n\n/** What a provider package exports: `createAdapter`, and the fields it lets Settings fill. */\nexport interface ProviderPackageModule {\n  createAdapter(ctx: AdapterContext): unknown\n  settings?: readonly AdapterSetting[]\n}\n","import { ValidationError } from '../errors.js'\nimport type { QueryParams, QueryResult } from './document-store.js'\n\n// The one order and filter every document store is held to: the in-memory store runs it, and stores that cannot\n// order or filter the same way on their server fetch candidates and run it in the process.\n\nconst collator = new Intl.Collator(undefined, { sensitivity: 'base' })\n\n/** Number, then string, then any other type, then null and missing: so values of different types never tie. */\nfunction rankOf(value: unknown): number {\n  if (typeof value === 'number') return 0\n  if (typeof value === 'string') return 1\n  if (value === null || value === undefined) return 3\n  return 2\n}\n\nfunction sign(n: number): number {\n  return n > 0 ? 1 : n < 0 ? -1 : 0\n}\n\nfunction compareOther(a: unknown, b: unknown): number {\n  const ta = typeof a\n  const tb = typeof b\n  if (ta !== tb) return ta < tb ? -1 : 1\n  if (ta === 'boolean') return Number(a) - Number(b)\n  const ja = JSON.stringify(a) ?? ''\n  const jb = JSON.stringify(b) ?? ''\n  return ja < jb ? -1 : ja > jb ? 1 : 0\n}\n\n/**\n * A total order over document values: numbers numerically, strings by `Intl.Collator` at base sensitivity (case and\n * accents tie), other types after strings, and null or missing last. Values of different types rank by type first.\n */\nexport function compareDocumentValues(a: unknown, b: unknown): number {\n  const ra = rankOf(a)\n  const rb = rankOf(b)\n  if (ra !== rb) return ra - rb\n  switch (ra) {\n    case 0:\n      return sign((a as number) - (b as number))\n    case 1:\n      return sign(collator.compare(a as string, b as string))\n    case 2:\n      return sign(compareOther(a, b))\n    default:\n      return 0\n  }\n}\n\nexport type SortKeyCondition = Pick<NonNullable<QueryParams['sortKey']>, 'operator' | 'value'>\n\n/** `eq` is `===`; `gt`, `lt` and `between` (inclusive, `[low, high]`) are `compareDocumentValues`. */\nexport function matchesSortKey(value: unknown, condition: SortKeyCondition): boolean {\n  const target = condition.value\n  switch (condition.operator) {\n    case 'eq':\n      return value === target\n    case 'gt':\n      return compareDocumentValues(value, target) > 0\n    case 'lt':\n      return compareDocumentValues(value, target) < 0\n    case 'between': {\n      if (!Array.isArray(target) || target.length !== 2) return false\n      const [low, high] = target as [unknown, unknown]\n      return compareDocumentValues(value, low) >= 0 && compareDocumentValues(value, high) <= 0\n    }\n    default:\n      return false\n  }\n}\n\n/** The value at a dotted path (`priceRange.minMinor`); missing anywhere along it is `undefined`. */\nexport function documentValueAt(doc: unknown, path: string): unknown {\n  let value: unknown = doc\n  for (const part of path.split('.')) {\n    if (value === null || typeof value !== 'object') return undefined\n    value = (value as Record<string, unknown>)[part]\n  }\n  return value\n}\n\nexport const DEFAULT_QUERY_LIMIT = 50\n\ninterface Order {\n  /** The field ordered by, or null for the document key alone. */\n  field: string | null\n  direction: 'asc' | 'desc'\n}\n\ninterface Position {\n  key: string\n  value: unknown\n}\n\nfunction orderOf(params: QueryParams): Order {\n  if (params.orderBy !== undefined) {\n    return { field: params.orderBy.field, direction: params.orderBy.direction }\n  }\n  const direction = (params.ascending ?? true) ? 'asc' : 'desc'\n  return { field: params.sortKey?.field ?? null, direction }\n}\n\nconst isNullish = (value: unknown): boolean => value === null || value === undefined\n\n/** Nulls and missing values last in either direction; ties by key ascending, so no two documents tie. */\nfunction comparePositions(a: Position, b: Position, order: Order): number {\n  if (order.field !== null) {\n    const an = isNullish(a.value)\n    const bn = isNullish(b.value)\n    if (an !== bn) return an ? 1 : -1\n    let c = an ? 0 : compareDocumentValues(a.value, b.value)\n    if (order.direction === 'desc') c = -c\n    if (c !== 0) return c\n    return a.key < b.key ? -1 : a.key > b.key ? 1 : 0\n  }\n  const c = a.key < b.key ? -1 : a.key > b.key ? 1 : 0\n  return order.direction === 'desc' ? -c : c\n}\n\n/** What a cursor is bound to: the order and the partition, so a cursor reused under another is refused. */\nfunction cursorScope(order: Order, params: QueryParams): string {\n  return JSON.stringify([order.field, order.direction, params.partitionKey])\n}\n\nfunction decodeCursor(cursor: string, scope: string): Position {\n  let decoded: unknown\n  try {\n    decoded = JSON.parse(Buffer.from(cursor, 'base64url').toString('utf8'))\n  } catch {\n    decoded = null\n  }\n  const c = decoded as { o?: unknown; k?: unknown; v?: unknown } | null\n  if (c === null || typeof c !== 'object' || typeof c.o !== 'string' || typeof c.k !== 'string') {\n    throw new ValidationError('The cursor is not valid', { context: { cursor } })\n  }\n  if (c.o !== scope) {\n    throw new ValidationError('The cursor was issued under another order', { context: { cursor } })\n  }\n  return { key: c.k, value: c.v ?? null }\n}\n\n/**\n * One page of `params` over the documents of a collection: filter by partition (`'*'` for all) and sort key, order,\n * then seek past the cursor by value, so a document deleted between pages neither restarts nor repeats the walk.\n */\nexport function queryDocuments<T>(\n  documents: Iterable<readonly [string, unknown]>,\n  params: QueryParams,\n): QueryResult<T> {\n  const limit = params.limit ?? DEFAULT_QUERY_LIMIT\n  const order = orderOf(params)\n  const scope = cursorScope(order, params)\n  const after = params.cursor ? decodeCursor(params.cursor, scope) : null\n  const { partitionKey, sortKey } = params\n\n  const matches: Array<{ position: Position; doc: unknown }> = []\n  for (const [key, doc] of documents) {\n    const record = (doc ?? {}) as Record<string, unknown>\n    if (partitionKey.value !== '*' && record[partitionKey.field] !== partitionKey.value) continue\n    if (sortKey !== undefined && !matchesSortKey(record[sortKey.field], sortKey)) continue\n    const value = order.field === null ? null : (documentValueAt(record, order.field) ?? null)\n    const position = { key, value }\n    if (after !== null && comparePositions(position, after, order) <= 0) continue\n    matches.push({ position, doc })\n  }\n  matches.sort((a, b) => comparePositions(a.position, b.position, order))\n\n  const page = matches.slice(0, limit)\n  const last = page[page.length - 1]\n  const nextCursor =\n    matches.length > limit && last !== undefined\n      ? Buffer.from(\n          JSON.stringify({ o: scope, k: last.position.key, v: last.position.value }),\n          'utf8',\n        ).toString('base64url')\n      : null\n  return { items: page.map((m) => m.doc as T), nextCursor }\n}\n","export type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'HEAD' | 'OPTIONS'\n\n/** The request header a caller may name its own correlation id in, and the response header that echoes the one used. */\nexport const CORRELATION_ID_HEADER = 'x-correlation-id'\n\nconst CORRELATION_ID = /^[A-Za-z0-9._:-]{1,128}$/\n\n/**\n * Whether `s` may be used as a correlation id: it reaches logs and the event log, so an inbound value that fails is\n * replaced, never cleaned. The id is a label only; nothing reads it to decide access.\n */\nexport function isValidCorrelationId(s: string): boolean {\n  return CORRELATION_ID.test(s)\n}\n\nexport interface RequestAuth {\n  userId?: string\n  roles?: string[]\n  token?: string\n}\n\nexport interface Logger {\n  trace(obj: unknown, msg?: string): void\n  debug(obj: unknown, msg?: string): void\n  info(obj: unknown, msg?: string): void\n  warn(obj: unknown, msg?: string): void\n  error(obj: unknown, msg?: string): void\n  child(bindings: Record<string, unknown>): Logger\n}\n\nexport interface RequestContext<TBody = unknown, TQuery = Record<string, string | string[] | undefined>, TParams = Record<string, string>> {\n  method: HttpMethod\n  path: string\n  url: string\n  params: TParams\n  query: TQuery\n  body: TBody\n  rawBody?: Buffer\n  headers: Record<string, string | string[] | undefined>\n  cookies: Record<string, string>\n  auth?: RequestAuth\n  requestId: string\n  /** The inbound `x-correlation-id` when `isValidCorrelationId` accepts it, else the request id. */\n  correlationId: string\n  logger: Logger\n  ip: string\n}\n\nexport interface ResponseCookie {\n  name: string\n  value: string\n  path?: string\n  domain?: string\n  maxAge?: number\n  httpOnly?: boolean\n  secure?: boolean\n  sameSite?: 'strict' | 'lax' | 'none'\n}\n\nexport interface ResponseEnvelope<T = unknown> {\n  status: number\n  headers?: Record<string, string>\n  body?: T\n  cookies?: ResponseCookie[]\n}\n\nexport type RouteHandler<TBody = unknown, TQuery = Record<string, string | string[] | undefined>, TParams = Record<string, string>, TResponse = unknown> = (\n  ctx: RequestContext<TBody, TQuery, TParams>,\n) => Promise<ResponseEnvelope<TResponse>> | ResponseEnvelope<TResponse>\n\nexport interface RouteOptions {\n  name?: string\n  csrf?: boolean\n  rateLimit?: string\n  rawBody?: boolean\n}\n\nexport type MiddlewareHandler = (\n  ctx: RequestContext,\n) => Promise<ResponseEnvelope | void> | ResponseEnvelope | void\n\nexport interface SseEvent {\n  id?: string\n  event?: string\n  data: unknown\n}\n\nexport interface StreamContext {\n  send(event: SseEvent): void\n  close(): void\n  onClose(callback: () => void): void\n}\n\nexport type StreamHandler = (\n  ctx: RequestContext,\n  stream: StreamContext,\n) => Promise<void> | void\n\nexport interface HttpAdapter {\n  registerRoute(\n    method: HttpMethod,\n    path: string,\n    handler: RouteHandler,\n    options?: RouteOptions,\n  ): void\n  registerStreamRoute(\n    method: 'GET',\n    path: string,\n    handler: StreamHandler,\n    options?: RouteOptions,\n  ): void\n  registerMiddleware(middleware: MiddlewareHandler): void\n  setDefaultHeaders(headers: Record<string, string>): void\n  start(port: number, host?: string): Promise<void>\n  stop(): Promise<void>\n}\n","import type { AdapterBase } from './adapter-base.js'\nimport type { HttpAdapter } from './http.js'\n\nexport type RateLimitAction = 'block' | 'challenge' | 'throttle'\n\nexport interface RateLimitRule {\n  requests: number\n  window: string\n  action: RateLimitAction\n}\n\nexport interface RateLimitDecision {\n  allowed: boolean\n  retryAfterSeconds?: number\n  action: RateLimitAction\n}\n\nexport interface SecurityConfigLike {\n  rateLimit: Record<string, RateLimitRule>\n  csrf: boolean\n  headers: {\n    hsts: boolean\n    contentSecurityPolicy: string\n    referrerPolicy: string\n    xFrameOptions: string\n  }\n  [key: string]: unknown\n}\n\nexport interface ValidationResult {\n  valid: boolean\n  errors: Array<{ code: string; message: string; path?: string }>\n}\n\nexport interface DriftReport {\n  drift: boolean\n  differences: Array<{ path: string; configured: unknown; actual: unknown }>\n}\n\nexport interface SecurityState {\n  rulesApplied: string[]\n  lastValidatedAt: string\n}\n\nexport interface SecurityAdapter extends AdapterBase {\n  applyMiddleware(app: HttpAdapter, config: SecurityConfigLike): Promise<void>\n  validate(config: SecurityConfigLike): Promise<ValidationResult>\n  drift?(config: SecurityConfigLike): Promise<DriftReport>\n  inspect?(): Promise<SecurityState>\n}\n\n/** The response headers every security adapter sets in process, from the config's `headers` block. */\nexport function buildSecurityHeaders(security: SecurityConfigLike): Record<string, string> {\n  const headers: Record<string, string> = {}\n  if (security.headers.hsts) {\n    headers['strict-transport-security'] = 'max-age=31536000; includeSubDomains'\n  }\n  const csp = security.headers.contentSecurityPolicy\n  const cspValue =\n    csp === 'strict'\n      ? \"default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; script-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'\"\n      : csp === 'relaxed'\n        ? \"default-src 'self' https:; img-src * data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'\"\n        : csp === 'off'\n          ? null\n          : csp\n  if (cspValue) headers['content-security-policy'] = cspValue\n  headers['referrer-policy'] = security.headers.referrerPolicy\n  headers['x-frame-options'] = security.headers.xFrameOptions === 'deny' ? 'DENY' : 'SAMEORIGIN'\n  headers['x-content-type-options'] = 'nosniff'\n  return headers\n}\n","// The kernel's transactional email templates, shared by every email adapter (the console one and the SMTP package).\nexport interface RenderedEmail {\n  subject: string\n  text: string\n  html: string\n}\n\nfunction render(template: string, vars: Record<string, unknown>): string {\n  return template.replace(/\\{\\{\\s*([\\w.]+)\\s*\\}\\}/g, (_, path: string) => {\n    const parts = path.split('.')\n    let cur: unknown = vars\n    for (const p of parts) {\n      if (cur && typeof cur === 'object' && p in (cur as Record<string, unknown>)) {\n        cur = (cur as Record<string, unknown>)[p]\n      } else {\n        return ''\n      }\n    }\n    return cur == null ? '' : String(cur)\n  })\n}\n\nconst TEMPLATES: Record<string, { subject: string; body: string }> = {\n  'order-placed': {\n    subject: 'Order {{orderNumber}} confirmed',\n    body: `Hi {{customerName}},\\n\\nThank you for your order {{orderNumber}}. Total: {{totalFormatted}}.\\n\\nWe'll let you know when it ships.`,\n  },\n  'order-shipped': {\n    subject: 'Order {{orderNumber}} is on its way',\n    body: `Hi {{customerName}},\\n\\nYour order {{orderNumber}} has shipped via {{carrier}}.\\nTracking: {{trackingNumber}}`,\n  },\n  welcome: {\n    subject: 'Welcome to {{storeName}}',\n    body: `Welcome {{customerName}}! Your account is ready.`,\n  },\n  'cart-abandoned': {\n    subject: \"Don't forget your cart at {{storeName}}\",\n    body: `Hi,\\n\\nYou left items in your cart. Pick up where you left off: {{resumeUrl}}`,\n  },\n}\n\nexport function renderEmailTemplate(\n  template: string,\n  vars: Record<string, unknown>,\n): RenderedEmail {\n  const t = TEMPLATES[template]\n  if (!t) {\n    return {\n      subject: `[nymbal] ${template}`,\n      text: JSON.stringify(vars),\n      html: `<pre>${JSON.stringify(vars, null, 2)}</pre>`,\n    }\n  }\n  const subject = render(t.subject, vars)\n  const text = render(t.body, vars)\n  const html = `<pre>${text.replace(/</g, '&lt;')}</pre>`\n  return { subject, text, html }\n}\n","export type StockLevel = 'out' | 'low' | 'in'\n\n/** Below this many units a variant is low on stock. */\nconst LOW_STOCK_BELOW = 5\n\n/** The one stock rule every storefront renders from. */\nexport function stockLevel(stock: number): StockLevel {\n  if (stock <= 0) return 'out'\n  return stock < LOW_STOCK_BELOW ? 'low' : 'in'\n}\n\nexport const STOCK_LABELS: Record<StockLevel, string> = {\n  out: 'Out of Stock',\n  low: 'Low Stock',\n  in: 'In Stock',\n}\n","/** Who a command ran for. A guest is `guest:anonymous`: a cart's token is a bearer credential and is never an id. */\nexport interface AuditActor {\n  kind: 'admin' | 'customer' | 'guest' | 'system' | 'import'\n  id: string\n}\n\n/** `applied`: the command ran and committed. `refused`: its service refused it. `replayed`: a keyed retry answered. */\nexport type AuditOutcome = 'applied' | 'refused' | 'replayed'\n\n/** A record a command touched, by id only. */\nexport interface AuditSubject {\n  type: string\n  id: string\n}\n\n/**\n * One audit entry as `GET /api/admin/activity` lists it and the exports print it. A stored response is shown by its\n * status only; its body never leaves the store.\n */\nexport interface AuditEntry {\n  id: string\n  at: string\n  actor: AuditActor\n  command: string\n  subjects: AuditSubject[]\n  correlationId: string | null\n  idempotencyKey: string | null\n  outcome: AuditOutcome\n  responseStatus: number | null\n}\n\n/** The request header an admin write carries to be applied once, and the response header a replay carries. */\nexport const IDEMPOTENCY_KEY_HEADER = 'idempotency-key'\nexport const IDEMPOTENT_REPLAYED_HEADER = 'idempotent-replayed'\n\n/** 1-128 characters of `[A-Za-z0-9._:-]`. */\nexport function isValidIdempotencyKey(value: string): boolean {\n  return /^[A-Za-z0-9._:-]{1,128}$/.test(value)\n}\n"],"mappings":";AAEO,IAAM,cAAN,cAA0B,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EAET,YACE,MACA,SACA,UAAuD,CAAC,GACxD;AACA,UAAM,SAAS,QAAQ,UAAU,SAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,MAAS;AACjF,SAAK,OAAO,KAAK,YAAY;AAC7B,SAAK,OAAO;AACZ,SAAK,UAAU,QAAQ,WAAW,CAAC;AAAA,EACrC;AAAA,EAEA,SAAiF;AAC/E,WAAO,EAAE,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,SAAS,KAAK,SAAS,SAAS,KAAK,QAAQ;AAAA,EAC1F;AACF;AAEO,IAAM,cAAN,cAA0B,YAAY;AAAA,EAC3C,YACE,SACA,UAII,CAAC,GACL;AACA,UAAM,QAAQ,QAAQ,kBAAkB,SAAS,OAAO;AAAA,EAC1D;AACF;AAEO,IAAM,kBAAN,cAA8B,YAAY;AAAA,EAC/C,YAAY,SAAiB,UAAuD,CAAC,GAAG;AACtF,UAAM,qBAAqB,SAAS,OAAO;AAAA,EAC7C;AACF;AAEO,IAAM,gBAAN,cAA4B,YAAY;AAAA,EAC7C,YACE,UACA,YACA,UAAuD,CAAC,GACxD;AACA,UAAM,aAAa,GAAG,QAAQ,eAAe,OAAO,UAAU,CAAC,IAAI;AAAA,MACjE,GAAG;AAAA,MACH,SAAS,EAAE,UAAU,YAAY,GAAI,QAAQ,WAAW,CAAC,EAAG;AAAA,IAC9D,CAAC;AAAA,EACH;AACF;AAEO,IAAM,eAAN,cAA2B,YAAY;AAAA,EAC5C,YACE,MACA,SACA,UAAuD,CAAC,GACxD;AACA,UAAM,WAAW,IAAI,IAAI,SAAS,OAAO;AAAA,EAC3C;AACF;AAEO,IAAM,YAAN,cAAwB,YAAY;AAAA,EAChC;AAAA,EAET,YACE,QACA,SACA,UAAsE,CAAC,GACvE;AACA,UAAM,QAAQ,QAAQ,QAAQ,MAAM,IAAI,SAAS,OAAO;AACxD,SAAK,SAAS;AAAA,EAChB;AACF;AAEO,IAAM,YAAN,cAAwB,UAAU;AAAA,EACvC,YACE,MACA,SACA,UAAuD,CAAC,GACxD;AACA,UAAM,SAAS,SAAS,cAAc,MAAM;AAC5C,UAAM,QAAQ,SAAS,EAAE,GAAG,SAAS,MAAM,QAAQ,IAAI,GAAG,CAAC;AAAA,EAC7D;AACF;AAEO,IAAM,eAAN,cAA2B,YAAY;AAAA,EAC5C,YACE,MAUA,SACA,UAAuD,CAAC,GACxD;AACA,UAAM,WAAW,IAAI,IAAI,SAAS,OAAO;AAAA,EAC3C;AACF;AAGO,IAAM,qBAAN,cAAiC,YAAY;AAAA,EAClD,YACE,MAQA,SACA,UAAuD,CAAC,GACxD;AACA,UAAM,MAAM,SAAS,OAAO;AAAA,EAC9B;AACF;AAEO,IAAM,gBAAN,cAA4B,YAAY;AAAA,EAC7C,YACE,MAQA,SACA,UAAuD,CAAC,GACxD;AACA,UAAM,YAAY,IAAI,IAAI,SAAS,OAAO;AAAA,EAC5C;AACF;AAEO,IAAM,wBAAN,cAAoC,YAAY;AAAA,EACrD,YACE,QACA,YACA,UACA,UAAuD,CAAC,GACxD;AACA;AAAA,MACE;AAAA,MACA,WAAW,MAAM,uBAAuB,UAAU,WAAM,QAAQ;AAAA,MAChE;AAAA,QACE,GAAG;AAAA,QACH,SAAS,EAAE,QAAQ,YAAY,UAAU,GAAI,QAAQ,WAAW,CAAC,EAAG;AAAA,MACtE;AAAA,IACF;AAAA,EACF;AACF;;;ACvJO,SAAS,MAAM,QAAgB,UAAyB;AAC7D,mBAAiB,MAAM;AACvB,SAAO,EAAE,QAAQ,SAAS;AAC5B;AAEO,SAAS,iBAAiB,QAAsB;AACrD,MAAI,CAAC,OAAO,UAAU,MAAM,GAAG;AAC7B,UAAM,IAAI,gBAAgB,yDAAyD,MAAM,EAAE;AAAA,EAC7F;AACF;AAEA,SAAS,mBAAmB,GAAU,GAAgB;AACpD,MAAI,EAAE,aAAa,EAAE,UAAU;AAC7B,UAAM,IAAI;AAAA,MACR,sBAAsB,EAAE,QAAQ,OAAO,EAAE,QAAQ;AAAA,IACnD;AAAA,EACF;AACF;AAEO,SAAS,IAAI,GAAU,GAAiB;AAC7C,qBAAmB,GAAG,CAAC;AACvB,SAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,UAAU,EAAE,SAAS;AAC7D;AAEO,SAAS,IAAI,GAAU,GAAiB;AAC7C,qBAAmB,GAAG,CAAC;AACvB,SAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,UAAU,EAAE,SAAS;AAC7D;AAEO,SAAS,MAAM,GAAU,QAAuB;AACrD,MAAI,CAAC,OAAO,SAAS,MAAM,GAAG;AAC5B,UAAM,IAAI,gBAAgB,8BAA8B,MAAM,EAAE;AAAA,EAClE;AACA,SAAO,EAAE,QAAQ,KAAK,MAAM,EAAE,SAAS,MAAM,GAAG,UAAU,EAAE,SAAS;AACvE;AAEO,SAAS,SAAS,QAAiB,UAAyB;AACjE,QAAM,QAAQ,OAAO,OAAO,CAAC,KAAK,MAAM;AACtC,uBAAmB,GAAG,EAAE,QAAQ,GAAG,SAAS,CAAC;AAC7C,WAAO,MAAM,EAAE;AAAA,EACjB,GAAG,CAAC;AACJ,SAAO,EAAE,QAAQ,OAAO,SAAS;AACnC;AAEO,SAAS,SAAS,GAAU,SAA4B;AAC7D,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAClC,QAAM,cAAc,QAAQ,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC;AACrD,MAAI,eAAe,GAAG;AACpB,UAAM,IAAI,gBAAgB,sCAAsC;AAAA,EAClE;AACA,QAAM,WAAW,QAAQ,IAAI,CAAC,MAAM,KAAK,MAAO,EAAE,SAAS,IAAK,WAAW,CAAC;AAC5E,MAAI,YAAY,EAAE,SAAS,SAAS,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC;AAC7D,QAAM,SAAS,SAAS,MAAM;AAC9B,MAAI,MAAM;AACV,SAAO,cAAc,KAAK,MAAM,OAAO,QAAQ;AAC7C,UAAM,QAAQ,YAAY,IAAI,IAAI;AAClC,WAAO,GAAG,KAAK,OAAO,GAAG,KAAK,KAAK;AACnC,iBAAa;AACb,WAAO;AAAA,EACT;AACA,SAAO,OAAO,IAAI,CAAC,YAAY,EAAE,QAAQ,UAAU,EAAE,SAAS,EAAE;AAClE;;;ACbO,IAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,uBAAuC;AAE7C,IAAM,sBAAgE;AAAA,EAC3E,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AACf;;;AC1DO,IAAM,2BAAwE;AAAA,EACnF,SAAS,CAAC,aAAa,WAAW;AAAA,EAClC,WAAW,CAAC,cAAc,aAAa,YAAY,oBAAoB;AAAA,EACvE,YAAY,CAAC,WAAW,aAAa,YAAY,oBAAoB;AAAA,EACrE,SAAS,CAAC,aAAa,YAAY,oBAAoB;AAAA,EACvD,WAAW,CAAC,YAAY,oBAAoB;AAAA,EAC5C,WAAW,CAAC;AAAA,EACZ,UAAU,CAAC;AAAA,EACX,oBAAoB,CAAC,UAAU;AACjC;AAEO,SAAS,mBAAmB,MAAmB,IAA0B;AAC9E,SAAO,yBAAyB,IAAI,EAAE,SAAS,EAAE;AACnD;AAEO,SAAS,sBAAsB,MAAmB,IAAuB;AAC9E,MAAI,CAAC,mBAAmB,MAAM,EAAE,GAAG;AACjC,UAAM,IAAI,sBAAsB,SAAS,MAAM,EAAE;AAAA,EACnD;AACF;AAwFO,SAAS,aAAa,OAAqE;AAChG,MAAI,MAAM,iBAAiB,EAAG,QAAO;AACrC,MAAI,MAAM,iBAAiB,EAAG,QAAO;AACrC,SAAO,MAAM,gBAAgB,MAAM,gBAAgB,uBAAuB;AAC5E;AAGO,SAAS,gBACd,OACA,SACQ;AACR,QAAM,UAAU,QACb,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS,EACpC,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,aAAa,CAAC;AAC5C,SAAO,KAAK,IAAI,GAAG,MAAM,gBAAgB,MAAM,gBAAgB,OAAO;AACxE;;;ACtIO,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,wBAAwB;AAC9B,IAAM,0BAA0B;AAGhC,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB;AAG7B,IAAM,mBAAmB;AACzB,IAAM,iBAAiB;AACvB,IAAM,sBAAsB;AAC5B,IAAM,oBAAoB;AAC1B,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,qBAAqB;AAC3B,IAAM,+BAA+B;AACrC,IAAM,2BAA2B;AAGjC,IAAM,wBAAwB;AAC9B,IAAM,yBAAyB;AAC/B,IAAM,yBAAyB;AAC/B,IAAM,0BAA0B;AAChC,IAAM,6BAA6B;AAGnC,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB;AAE7B,IAAM,0BAA0B;AAGhC,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAC5B,IAAM,wBAAwB;AAC9B,IAAM,mBAAmB;AACzB,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAG3B,IAAM,6BAA6B;AACnC,IAAM,uBAAuB;AAC7B,IAAM,qBAAqB;AAC3B,IAAM,uBAAuB;AAG7B,IAAM,oBAAoB;AAC1B,IAAM,uBAAuB;AAE7B,IAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;ACnFO,IAAM,0BAA0B;AAUhC,SAAS,UAAU,OAAwB;AAChD,MAAI,EAAE,iBAAiB,OAAQ,QAAO,OAAO,KAAK;AAClD,MAAI,MAAM,YAAY,GAAI,QAAO,MAAM;AACvC,QAAM,QAAS,MAA+B;AAC9C,MAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,EAAG,QAAO,MAAM,IAAI,SAAS,EAAE,KAAK,IAAI;AACnF,QAAM,OAAQ,MAA6B;AAC3C,SAAO,OAAO,SAAS,WAAW,OAAO,MAAM;AACjD;AAMO,IAAM,oBAAoB;AAO1B,SAAS,kBAAkB,KAAa,UAA8B,CAAC,GAAa;AACzF,MAAI;AACJ,MAAI;AACF,aAAS,IAAI,IAAI,GAAG;AAAA,EACtB,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAAM;AAAA,IACV,GAAI,QAAQ,SAAS,QAAQ,CAAC,IAAI,CAAC,OAAO,QAAQ;AAAA,IAClD,OAAO;AAAA,IACP,GAAG,OAAO,aAAa,OAAO;AAAA,EAChC;AACA,QAAM,UAAU,IAAI,IAAI,CAAC,UAAU;AACjC,QAAI;AACF,aAAO,mBAAmB,KAAK;AAAA,IACjC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AACD,SAAO,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,MAAM,UAAU,iBAAiB;AAC/F;AAMO,SAAS,WAAW,KAAqB;AAC9C,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,WAAO,GAAG,OAAO,QAAQ,KAAK,OAAO,IAAI,GAAG,OAAO,aAAa,MAAM,KAAK,OAAO,QAAQ;AAAA,EAC5F,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,eAAsB,mBACpB,OACA,UAAqC,CAAC,GACf;AACvB,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,aAAa,IAAI,gBAAgB;AACvC,MAAI;AACJ,QAAM,WAAW,IAAI,QAAsB,CAAC,YAAY;AACtD,YAAQ,WAAW,MAAM;AACvB,iBAAW,MAAM;AACjB,cAAQ,EAAE,QAAQ,QAAQ,QAAQ,mBAAmB,SAAS,MAAM,CAAC;AAAA,IACvE,GAAG,SAAS;AAAA,EACd,CAAC;AACD,QAAM,SAAS,CAAC,UAAiC;AAC/C,QAAI,SAAS,UAAU,KAAK;AAC5B,eAAW,UAAU,QAAQ,UAAU,CAAC,GAAG;AACzC,UAAI,WAAW,GAAI,UAAS,OAAO,MAAM,MAAM,EAAE,KAAK,KAAK;AAAA,IAC7D;AACA,WAAO,EAAE,QAAQ,QAAQ,OAAO;AAAA,EAClC;AACA,MAAI;AAGF,UAAM,UAAU,QAAQ,QAAQ,EAC7B,KAAK,MAAM,MAAM,WAAW,MAAM,CAAC,EACnC,MAAM,MAAM;AACf,WAAO,MAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;AAAA,EAC/C,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;;;ACvGA,IAAM,WAAW,IAAI,KAAK,SAAS,QAAW,EAAE,aAAa,OAAO,CAAC;AAGrE,SAAS,OAAO,OAAwB;AACtC,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,SAAO;AACT;AAEA,SAAS,KAAK,GAAmB;AAC/B,SAAO,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK;AAClC;AAEA,SAAS,aAAa,GAAY,GAAoB;AACpD,QAAM,KAAK,OAAO;AAClB,QAAM,KAAK,OAAO;AAClB,MAAI,OAAO,GAAI,QAAO,KAAK,KAAK,KAAK;AACrC,MAAI,OAAO,UAAW,QAAO,OAAO,CAAC,IAAI,OAAO,CAAC;AACjD,QAAM,KAAK,KAAK,UAAU,CAAC,KAAK;AAChC,QAAM,KAAK,KAAK,UAAU,CAAC,KAAK;AAChC,SAAO,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI;AACtC;AAMO,SAAS,sBAAsB,GAAY,GAAoB;AACpE,QAAM,KAAK,OAAO,CAAC;AACnB,QAAM,KAAK,OAAO,CAAC;AACnB,MAAI,OAAO,GAAI,QAAO,KAAK;AAC3B,UAAQ,IAAI;AAAA,IACV,KAAK;AACH,aAAO,KAAM,IAAgB,CAAY;AAAA,IAC3C,KAAK;AACH,aAAO,KAAK,SAAS,QAAQ,GAAa,CAAW,CAAC;AAAA,IACxD,KAAK;AACH,aAAO,KAAK,aAAa,GAAG,CAAC,CAAC;AAAA,IAChC;AACE,aAAO;AAAA,EACX;AACF;AAKO,SAAS,eAAe,OAAgB,WAAsC;AACnF,QAAM,SAAS,UAAU;AACzB,UAAQ,UAAU,UAAU;AAAA,IAC1B,KAAK;AACH,aAAO,UAAU;AAAA,IACnB,KAAK;AACH,aAAO,sBAAsB,OAAO,MAAM,IAAI;AAAA,IAChD,KAAK;AACH,aAAO,sBAAsB,OAAO,MAAM,IAAI;AAAA,IAChD,KAAK,WAAW;AACd,UAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,EAAG,QAAO;AAC1D,YAAM,CAAC,KAAK,IAAI,IAAI;AACpB,aAAO,sBAAsB,OAAO,GAAG,KAAK,KAAK,sBAAsB,OAAO,IAAI,KAAK;AAAA,IACzF;AAAA,IACA;AACE,aAAO;AAAA,EACX;AACF;AAGO,SAAS,gBAAgB,KAAc,MAAuB;AACnE,MAAI,QAAiB;AACrB,aAAW,QAAQ,KAAK,MAAM,GAAG,GAAG;AAClC,QAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO;AACxD,YAAS,MAAkC,IAAI;AAAA,EACjD;AACA,SAAO;AACT;AAEO,IAAM,sBAAsB;AAanC,SAAS,QAAQ,QAA4B;AAC3C,MAAI,OAAO,YAAY,QAAW;AAChC,WAAO,EAAE,OAAO,OAAO,QAAQ,OAAO,WAAW,OAAO,QAAQ,UAAU;AAAA,EAC5E;AACA,QAAM,YAAa,OAAO,aAAa,OAAQ,QAAQ;AACvD,SAAO,EAAE,OAAO,OAAO,SAAS,SAAS,MAAM,UAAU;AAC3D;AAEA,IAAM,YAAY,CAAC,UAA4B,UAAU,QAAQ,UAAU;AAG3E,SAAS,iBAAiB,GAAa,GAAa,OAAsB;AACxE,MAAI,MAAM,UAAU,MAAM;AACxB,UAAM,KAAK,UAAU,EAAE,KAAK;AAC5B,UAAM,KAAK,UAAU,EAAE,KAAK;AAC5B,QAAI,OAAO,GAAI,QAAO,KAAK,IAAI;AAC/B,QAAIA,KAAI,KAAK,IAAI,sBAAsB,EAAE,OAAO,EAAE,KAAK;AACvD,QAAI,MAAM,cAAc,OAAQ,CAAAA,KAAI,CAACA;AACrC,QAAIA,OAAM,EAAG,QAAOA;AACpB,WAAO,EAAE,MAAM,EAAE,MAAM,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI;AAAA,EAClD;AACA,QAAM,IAAI,EAAE,MAAM,EAAE,MAAM,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI;AACnD,SAAO,MAAM,cAAc,SAAS,CAAC,IAAI;AAC3C;AAGA,SAAS,YAAY,OAAc,QAA6B;AAC9D,SAAO,KAAK,UAAU,CAAC,MAAM,OAAO,MAAM,WAAW,OAAO,YAAY,CAAC;AAC3E;AAEA,SAAS,aAAa,QAAgB,OAAyB;AAC7D,MAAI;AACJ,MAAI;AACF,cAAU,KAAK,MAAM,OAAO,KAAK,QAAQ,WAAW,EAAE,SAAS,MAAM,CAAC;AAAA,EACxE,QAAQ;AACN,cAAU;AAAA,EACZ;AACA,QAAM,IAAI;AACV,MAAI,MAAM,QAAQ,OAAO,MAAM,YAAY,OAAO,EAAE,MAAM,YAAY,OAAO,EAAE,MAAM,UAAU;AAC7F,UAAM,IAAI,gBAAgB,2BAA2B,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAAA,EAC9E;AACA,MAAI,EAAE,MAAM,OAAO;AACjB,UAAM,IAAI,gBAAgB,6CAA6C,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAAA,EAChG;AACA,SAAO,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,KAAK,KAAK;AACxC;AAMO,SAAS,eACd,WACA,QACgB;AAChB,QAAM,QAAQ,OAAO,SAAS;AAC9B,QAAM,QAAQ,QAAQ,MAAM;AAC5B,QAAM,QAAQ,YAAY,OAAO,MAAM;AACvC,QAAM,QAAQ,OAAO,SAAS,aAAa,OAAO,QAAQ,KAAK,IAAI;AACnE,QAAM,EAAE,cAAc,QAAQ,IAAI;AAElC,QAAM,UAAuD,CAAC;AAC9D,aAAW,CAAC,KAAK,GAAG,KAAK,WAAW;AAClC,UAAM,SAAU,OAAO,CAAC;AACxB,QAAI,aAAa,UAAU,OAAO,OAAO,aAAa,KAAK,MAAM,aAAa,MAAO;AACrF,QAAI,YAAY,UAAa,CAAC,eAAe,OAAO,QAAQ,KAAK,GAAG,OAAO,EAAG;AAC9E,UAAM,QAAQ,MAAM,UAAU,OAAO,OAAQ,gBAAgB,QAAQ,MAAM,KAAK,KAAK;AACrF,UAAM,WAAW,EAAE,KAAK,MAAM;AAC9B,QAAI,UAAU,QAAQ,iBAAiB,UAAU,OAAO,KAAK,KAAK,EAAG;AACrE,YAAQ,KAAK,EAAE,UAAU,IAAI,CAAC;AAAA,EAChC;AACA,UAAQ,KAAK,CAAC,GAAG,MAAM,iBAAiB,EAAE,UAAU,EAAE,UAAU,KAAK,CAAC;AAEtE,QAAM,OAAO,QAAQ,MAAM,GAAG,KAAK;AACnC,QAAM,OAAO,KAAK,KAAK,SAAS,CAAC;AACjC,QAAM,aACJ,QAAQ,SAAS,SAAS,SAAS,SAC/B,OAAO;AAAA,IACL,KAAK,UAAU,EAAE,GAAG,OAAO,GAAG,KAAK,SAAS,KAAK,GAAG,KAAK,SAAS,MAAM,CAAC;AAAA,IACzE;AAAA,EACF,EAAE,SAAS,WAAW,IACtB;AACN,SAAO,EAAE,OAAO,KAAK,IAAI,CAAC,MAAM,EAAE,GAAQ,GAAG,WAAW;AAC1D;;;AC/KO,IAAM,wBAAwB;AAErC,IAAM,iBAAiB;AAMhB,SAAS,qBAAqB,GAAoB;AACvD,SAAO,eAAe,KAAK,CAAC;AAC9B;;;ACuCO,SAAS,qBAAqB,UAAsD;AACzF,QAAM,UAAkC,CAAC;AACzC,MAAI,SAAS,QAAQ,MAAM;AACzB,YAAQ,2BAA2B,IAAI;AAAA,EACzC;AACA,QAAM,MAAM,SAAS,QAAQ;AAC7B,QAAM,WACJ,QAAQ,WACJ,qKACA,QAAQ,YACN,oHACA,QAAQ,QACN,OACA;AACV,MAAI,SAAU,SAAQ,yBAAyB,IAAI;AACnD,UAAQ,iBAAiB,IAAI,SAAS,QAAQ;AAC9C,UAAQ,iBAAiB,IAAI,SAAS,QAAQ,kBAAkB,SAAS,SAAS;AAClF,UAAQ,wBAAwB,IAAI;AACpC,SAAO;AACT;;;AChEA,SAAS,OAAO,UAAkB,MAAuC;AACvE,SAAO,SAAS,QAAQ,2BAA2B,CAAC,GAAG,SAAiB;AACtE,UAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,QAAI,MAAe;AACnB,eAAW,KAAK,OAAO;AACrB,UAAI,OAAO,OAAO,QAAQ,YAAY,KAAM,KAAiC;AAC3E,cAAO,IAAgC,CAAC;AAAA,MAC1C,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO,OAAO,OAAO,KAAK,OAAO,GAAG;AAAA,EACtC,CAAC;AACH;AAEA,IAAM,YAA+D;AAAA,EACnE,gBAAgB;AAAA,IACd,SAAS;AAAA,IACT,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,EACR;AAAA,EACA,iBAAiB;AAAA,IACf,SAAS;AAAA,IACT,MAAM;AAAA;AAAA;AAAA;AAAA,EACR;AAAA,EACA,SAAS;AAAA,IACP,SAAS;AAAA,IACT,MAAM;AAAA,EACR;AAAA,EACA,kBAAkB;AAAA,IAChB,SAAS;AAAA,IACT,MAAM;AAAA;AAAA;AAAA,EACR;AACF;AAEO,SAAS,oBACd,UACA,MACe;AACf,QAAM,IAAI,UAAU,QAAQ;AAC5B,MAAI,CAAC,GAAG;AACN,WAAO;AAAA,MACL,SAAS,YAAY,QAAQ;AAAA,MAC7B,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB,MAAM,QAAQ,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,IAC7C;AAAA,EACF;AACA,QAAM,UAAU,OAAO,EAAE,SAAS,IAAI;AACtC,QAAM,OAAO,OAAO,EAAE,MAAM,IAAI;AAChC,QAAM,OAAO,QAAQ,KAAK,QAAQ,MAAM,MAAM,CAAC;AAC/C,SAAO,EAAE,SAAS,MAAM,KAAK;AAC/B;;;ACtDA,IAAM,kBAAkB;AAGjB,SAAS,WAAW,OAA2B;AACpD,MAAI,SAAS,EAAG,QAAO;AACvB,SAAO,QAAQ,kBAAkB,QAAQ;AAC3C;AAEO,IAAM,eAA2C;AAAA,EACtD,KAAK;AAAA,EACL,KAAK;AAAA,EACL,IAAI;AACN;;;ACiBO,IAAM,yBAAyB;AAC/B,IAAM,6BAA6B;AAGnC,SAAS,sBAAsB,OAAwB;AAC5D,SAAO,2BAA2B,KAAK,KAAK;AAC9C;","names":["c"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nymbalhq/types",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "description": "Shared TypeScript types and adapter contracts for Nymbal",
   "license": "MIT",
   "repository": {
@@ -27,12 +27,13 @@
     "dist"
   ],
   "devDependencies": {
-    "tsup": "^8.3.5",
-    "typescript": "^5.6.3"
+    "@typescript/native": "npm:typescript@^7.0.2",
+    "tsup": "^9.0.0",
+    "typescript": "npm:@typescript/typescript6@^6.0.2"
   },
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
-    "typecheck": "tsc -p tsconfig.json --noEmit"
+    "typecheck": "tsc -p tsconfig.json --noEmit --rootDir ../.."
   }
 }