@porulle/adapter-woocommerce 0.74.0 → 0.74.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@porulle/adapter-woocommerce",
-  "version": "0.74.0",
+  "version": "0.74.2",
   "license": "MIT",
   "type": "module",
   "exports": {
@@ -16,7 +16,7 @@
   },
   "dependencies": {
     "zod": "^4.1.11",
-    "@porulle/core": "0.74.0"
+    "@porulle/core": "0.74.2"
   },
   "devDependencies": {
     "@types/node": "^24.5.2",

package/src/index.ts

@@ -3,7 +3,7 @@ import type { ChannelConnector, ChannelConnectorError, ChannelStore, Result } fr
 import { z } from "zod";
 import { catalogItems, importPage, storeProfile } from "./catalog.js";
 import { pushCatalog, pushCaches } from "./catalog-push.js";
-import { discoverStore, normalizeStoreDomain, wooClient, wooCredentialsSchema } from "./client.js";
+import { discoverStore, normalizeStoreDomain, probeStore, refusedStoreUrl, wooClient, wooCredentialsSchema } from "./client.js";
 import type { WooClient, WooTransportOptions } from "./client.js";
 import { inventoryFor, inventoryPage } from "./inventory.js";
 import { cancelOrder, orderStatus, pushOrder } from "./orders.js";
@@ -57,6 +57,18 @@ export function wooConnector(options: WooConnectorOptions = {}): ChannelConnecto
     capabilities: { importCatalog: true, importInventory: true, pushOrder: true, pushCatalog: true, receiveWebhooks: true },
     webhookTopics: WOO_WEBHOOK_TOPICS,
     normalizeStoreDomain: (input) => normalizeStoreDomain(input, { allowPrivateHosts: transport.allowPrivateHosts }),
+    async probeStore(input) {
+      const storeDomain = normalizeStoreDomain(input, { allowPrivateHosts: transport.allowPrivateHosts });
+      if (!storeDomain) {
+        const why = refusedStoreUrl(input);
+        return refused(why === "http" ? "WOO_STORE_NOT_HTTPS" : "WOO_INVALID_STORE_DOMAIN", why === "http"
+          ? "Your store must be served over https (with a valid certificate) to connect."
+          : why === "private_host" ? "That address is not a public website." : `"${input}" is not a store address. Enter it like https://shop.example.com.`);
+      }
+      const probe = await probeStore(transport, storeDomain);
+      if (!probe.ok) return refused(`WOO_${probe.error.code.toUpperCase()}`, probe.error.message);
+      return Ok({ storeDomain, name: probe.value.name });
+    },
     buildAuthUrl(params) {
       const store = normalizeStoreDomain(params.storeDomain, { allowPrivateHosts: transport.allowPrivateHosts });
       if (!store) return refused("WOO_INVALID_STORE_DOMAIN", "A WooCommerce store is named by its https address.");
@@ -66,7 +78,9 @@ export function wooConnector(options: WooConnectorOptions = {}): ChannelConnecto
       } catch {
         return refused("WOO_INVALID_CALLBACK_URL", "WooCommerce needs an https callback address.");
       }
-      if (callback.protocol !== "https:") return refused("WOO_INVALID_CALLBACK_URL", "WooCommerce needs an https callback address.");
+      // WooCommerce itself refuses an http callback ("needs to be over SSL"); only a stand-in on this machine takes one.
+      const localCallback = transport.allowPrivateHosts && ["127.0.0.1", "localhost"].includes(callback.hostname);
+      if (callback.protocol !== "https:" && !localCallback) return refused("WOO_INVALID_CALLBACK_URL", "WooCommerce needs an https callback address.");
       callback.searchParams.set("state", params.state);
       const returnUrl = new URL(params.callbackUri);
       returnUrl.searchParams.set("state", params.state);

package/src/orders.ts

@@ -156,9 +156,10 @@ export async function pushOrder(client: WooClient, slice: ChannelOrderSlice, opt
     const draftId = draft && typeof draft === "object" && "new_draft_order_id" in draft ? z.coerce.number().int().positive().safeParse(draft.new_draft_order_id) : undefined;
     // A refusal can leave a checkout-draft behind; it is ours, so it goes.
     if (draftId?.success) await client.send("DELETE", `/wc/v3/orders/${draftId.data}`, undefined, z.unknown(), { force: "true" });
-    // A 4xx is the store's answer. Anything else (timeout, 5xx, unreadable) may have created the
-    // order: retriable, and the next attempt looks for it before creating.
-    const answered = error.status !== undefined && error.status >= 400 && error.status < 500;
+    // A 4xx WooCommerce explained (its JSON error) is the store's answer. Anything else — a timeout,
+    // a 5xx, a firewall's page — may or may not have created the order: retriable, and the next
+    // attempt looks for it before creating anything.
+    const answered = error.status !== undefined && error.status >= 400 && error.status < 500 && error.body !== undefined;
     return Err({ code: answered ? "WOO_ORDER_REJECTED" : error.code, message: answered ? `WooCommerce refused the order: ${error.message}` : `The store's answer to the order was lost (${error.message}); it is looked for before trying again.`, retriable: !answered });
   }
   const order = created.value;