@porulle/core 0.10.5 → 0.10.6

package/dist/interfaces/rest/routes/checkout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/checkout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAoBzD,OAAO,EAAE,KAAK,MAAM,EAAwC,MAAM,aAAa,CAAC;AAKhF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAEpD;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,EAC1C,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmC7B;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,gCAgU5C"}
+{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/checkout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAoBzD,OAAO,EAAE,KAAK,MAAM,EAAwC,MAAM,aAAa,CAAC;AAKhF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAEpD;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,EAC1C,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmC7B;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,gCA2U5C"}

package/dist/interfaces/rest/routes/checkout.js

@@ -162,6 +162,7 @@ export function checkoutRoutes(kernel) {
             origin: "rest",
             database: { db: kernel.database.db },
         });
+        let pipelineStage = "validate-and-calculate";
         try {
             // Phase 1: DB transaction for validation — releases connection immediately after
             const validated = await kernel.database.transaction(async (_tx) => {
@@ -170,11 +171,13 @@ export function checkoutRoutes(kernel) {
             });
             // Phase 2: Payment authorization — NO DB connection held while calling Stripe/etc.
             // If Stripe takes 5s, the DB connection pool is not affected.
+            pipelineStage = "authorize-payment";
             context.tx = null;
             const processed = await runBeforeHooks(paymentHooks, validated, "create", context);
             // SEC-07: resolve the order's customer server-side. A self-service actor
             // can only attribute the order to its own profile; a client-supplied
             // foreign customerId is ignored unless the actor is staff.
+            pipelineStage = "resolve-customer";
             const customerUuid = await resolveCheckoutCustomerUuid(kernel.services.customers, actor, processed.customerId);
             const orderPayload = {
                 ...(body.idempotencyKey !== undefined
@@ -225,6 +228,7 @@ export function checkoutRoutes(kernel) {
             // Checkout is a trusted, already-server-priced pipeline (resolveCurrentPrices
             // + promotions/tax) and reserves stock in its own after-hooks — so it hands
             // the order primitive precomputed totals rather than re-deriving them.
+            pipelineStage = "create-order";
             const order = await kernel.services.orders.create(orderPayload, actor, undefined, {
                 trustedPricing: true,
             });
@@ -232,6 +236,7 @@ export function checkoutRoutes(kernel) {
                 return c.json(mapErrorToResponse(order.error), mapErrorToStatus(order.error));
             }
             if (order.ok && (processed.appliedPromotions?.length ?? 0) > 0) {
+                pipelineStage = "record-promotion-usage";
                 await kernel.services.promotions.recordUsage({
                     promotions: processed.appliedPromotions ?? [],
                     organizationId: order.value.organizationId,
@@ -242,6 +247,7 @@ export function checkoutRoutes(kernel) {
                 });
             }
             if (order.ok) {
+                pipelineStage = "report-tax-transaction";
                 await kernel.services.tax.reportTransaction({
                     transactionId: order.value.id,
                     transactionDate: new Date(),
@@ -271,7 +277,9 @@ export function checkoutRoutes(kernel) {
             }
             // Stash paymentMethodId for completeCheckout compensation chain
             context.context.paymentMethodId = processed.paymentMethodId;
+            pipelineStage = "complete-checkout";
             const afterReport = await runAfterHooks(afterHooks, null, order.value, "create", context);
+            pipelineStage = "mark-cart-checked-out";
             await kernel.services.cart.markAsCheckedOut(body.cartId, actor);
             return c.json({
                 data: {
@@ -297,7 +305,10 @@ export function checkoutRoutes(kernel) {
                 });
             });
             // Always log the real error — hidden errors in checkout are unacceptable
-            const realMessage = error instanceof Error ? error.message : String(error);
+            const rawMessage = error instanceof Error ? error.message : String(error);
+            const realMessage = rawMessage === "[object ErrorEvent]"
+                ? `Checkout stage "${pipelineStage}" failed: ${rawMessage}`
+                : rawMessage;
             const realStack = error instanceof Error ? error.stack : undefined;
             console.error("[checkout] Pipeline failed:", { message: realMessage, stack: realStack, code: error?.code });
             const message = isCommerceError(error)

package/dist/kernel/hooks/executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/kernel/hooks/executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEpF,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,UAAU,CAKzE;AAmBD,wBAAsB,cAAc,CAAC,CAAC,EACpC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EACtB,IAAI,EAAE,CAAC,EACP,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,CAAC,CAAC,CAmBZ;AAED,wBAAsB,aAAa,CAAC,CAAC,EACnC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EACrB,YAAY,EAAE,CAAC,GAAG,IAAI,EACtB,eAAe,EAAE,CAAC,EAClB,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC,CA0BrB"}
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/kernel/hooks/executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEpF,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,UAAU,CAKzE;AAqCD,wBAAsB,cAAc,CAAC,CAAC,EACpC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EACtB,IAAI,EAAE,CAAC,EACP,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,CAAC,CAAC,CAmBZ;AAED,wBAAsB,aAAa,CAAC,CAAC,EACnC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EACrB,YAAY,EAAE,CAAC,GAAG,IAAI,EACtB,eAAe,EAAE,CAAC,EAClB,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC,CA0BrB"}

package/dist/kernel/hooks/executor.js

@@ -13,6 +13,23 @@ function withTimeout(promiseOrValue, timeoutMs, hookName) {
         promise.then((val) => { clearTimeout(timer); resolve(val); }, (err) => { clearTimeout(timer); reject(err); });
     });
 }
+function actionableHookError(error, hookName) {
+    if (error instanceof Error && error.message && error.message !== "[object ErrorEvent]") {
+        return error;
+    }
+    const candidate = error;
+    const nested = candidate?.error ?? candidate?.cause;
+    const nestedMessage = nested instanceof Error
+        ? nested.message
+        : nested && typeof nested === "object" && typeof nested.message === "string"
+            ? String(nested.message)
+            : undefined;
+    const directMessage = typeof candidate?.message === "string" && candidate.message !== "[object ErrorEvent]"
+        ? candidate.message
+        : undefined;
+    const message = nestedMessage || directMessage || String(error);
+    return new Error(`Before-hook "${hookName}" failed: ${message}`, { cause: error });
+}
 export async function runBeforeHooks(hooks, data, operation, context) {
     let current = data;
     for (const hook of hooks) {
@@ -25,7 +42,7 @@ export async function runBeforeHooks(hooks, data, operation, context) {
                 error: error instanceof Error ? error.message : String(error),
                 requestId: context.requestId,
             });
-            throw error; // Re-throw — beforeHooks MUST succeed
+            throw actionableHookError(error, hookName); // Before hooks MUST succeed with actionable context.
         }
     }
     return current;

package/dist/runtime/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/runtime/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAOzD,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAkB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAItE,KAAK,SAAS,GAAG;IACf,SAAS,EAAE;QACT,IAAI,EAAE,YAAY,CAAC;QACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAMvC;AAeD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,cAAc;;;;;sBAyVxB,MAAM,UAAU,MAAM;GA2FtD"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/runtime/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAOzD,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAkB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAItE,KAAK,SAAS,GAAG;IACf,SAAS,EAAE;QACT,IAAI,EAAE,YAAY,CAAC;QACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAcvC;AAeD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,cAAc;;;;;sBAyVxB,MAAM,UAAU,MAAM;GA2FtD"}

package/dist/runtime/server.js

@@ -22,7 +22,15 @@ import { mapErrorToResponse } from "../kernel/error-mapper.js";
  * Exposed for direct unit testing — see test/server-edge-runtime.test.ts.
  */
 export function isNodeRuntime() {
+    const workerUserAgent = typeof navigator !== "undefined"
+        ? navigator.userAgent
+        : undefined;
+    const hasWorkersSocketPair = "WebSocketPair" in globalThis;
+    if (workerUserAgent === "Cloudflare-Workers" || hasWorkersSocketPair) {
+        return false;
+    }
     return (typeof process !== "undefined" &&
+        typeof process.versions?.node === "string" &&
         typeof process.on === "function" &&
         typeof process.exit === "function");
 }