@thebes/cadmea-plugin-ecommerce 1.0.0

package/dist/index.js

@@ -0,0 +1,554 @@
+import { checkRateLimit } from "@thebes/cadmus/rate-limit";
+//#region src/errors.ts
+/**
+* Thrown by `createCheckoutHandler` on price-mismatch/inventory rejection,
+* and by `PaymentProvider` implementations on charge failure.
+* `createCheckoutHandler` catches it internally (`instanceof
+* CadmeaPaymentError`) and maps it to HTTP 402 itself — checkout/webhook
+* handlers are plain Hono routes, never mounted through
+* `@thebes/cadmus/hono`'s `mountCmsRoutes`, so there's no shared
+* error-to-status pipeline this needs to participate in.
+*
+* Deliberately a plain `Error` subclass, not a `CadmusCmsError` one — this
+* is a Cadmea-plugin-owned error, not a Cadmus-primitive one (every real
+* `CadmusError` subclass is owned by a `packages/cadmus/src/<primitive>/`
+* folder; a payment error belongs to a plugin, not a primitive), and
+* `CadmusCmsError` is only reachable via the root `@thebes/cadmus` package
+* export (not `@thebes/cadmus/cms`) — importing that root barrel here
+* would pull in every other primitive's runtime code (including
+* Workers-only modules like `cloudflare:email`) just for one base class.
+* Keeping this plugin-local and dependency-free is the honest shape.
+*/
+var CadmeaPaymentError = class extends Error {
+	cause;
+	constructor(message, cause) {
+		super(message);
+		this.cause = cause;
+		this.name = "CadmeaPaymentError";
+	}
+};
+//#endregion
+//#region src/checkout.ts
+function subtotalCents(lineItems) {
+	return lineItems.reduce((sum, item) => sum + item.clientUnitPrice.amount * item.quantity, 0);
+}
+function generateOrderNumber() {
+	return `ORD-${crypto.randomUUID().replace(/-/g, "").slice(0, 12).toUpperCase()}`;
+}
+/**
+* Returns a Hono handler implementing the checkout flow against a
+* `PaymentProvider`: rate limit → re-verify cart prices/availability
+* (never trust client-submitted prices) → idempotent customer find-or-
+* create → charge → persist `orders`/`payments` rows. A DB-write failure
+* *after* a successful charge degrades to a 200-with-warning response,
+* never a false "payment failed" — the customer's card was actually
+* charged, telling them otherwise would be worse than a delayed manual
+* reconciliation.
+*
+* Mount it as a plain Hono route alongside `mountCmsRoutes` — checkout
+* isn't part of the generic CMS REST surface that function mounts.
+*
+* ```ts
+* app.post("/api/checkout", createCheckoutHandler({ provider, orders, payments, resolveContext }));
+* ```
+*/
+function createCheckoutHandler(options) {
+	return async (c) => {
+		if (options.rateLimit) {
+			const ip = c.req.header("CF-Connecting-IP") ?? "unknown";
+			const key = `${options.rateLimit.keyPrefix ?? "checkout"}:${ip}`;
+			if (!(await checkRateLimit(options.rateLimit.kv, key, options.rateLimit.limit, options.rateLimit.windowSeconds)).allowed) return c.json({ error: "Rate limit exceeded" }, 429);
+		}
+		const body = await c.req.json();
+		if (!Array.isArray(body.lineItems) || body.lineItems.length === 0) return c.json({ error: "Checkout request must include at least one line item" }, 400);
+		if (!body.idempotencyKey) return c.json({ error: "Checkout request must include an idempotencyKey" }, 400);
+		try {
+			const refs = body.lineItems.map((item) => item.catalogRef);
+			const priceChecks = await options.provider.checkCatalogPrices(refs);
+			const checkByRef = new Map(priceChecks.map((check) => [check.catalogRef, check]));
+			for (const item of body.lineItems) {
+				const check = checkByRef.get(item.catalogRef);
+				if (!check) throw new CadmeaPaymentError(`Unknown catalog item "${item.catalogRef}"`);
+				if (check.serverUnitPrice.amount !== item.clientUnitPrice.amount) throw new CadmeaPaymentError(`Price mismatch for "${item.catalogRef}" — checkout rejected`);
+				if (check.availableQuantity !== void 0 && check.availableQuantity < item.quantity) throw new CadmeaPaymentError(`Insufficient inventory for "${item.catalogRef}"`);
+			}
+		} catch (error) {
+			if (error instanceof CadmeaPaymentError) return c.json({ error: error.message }, 402);
+			throw error;
+		}
+		if (body.customerEmail) await options.provider.findOrCreateCustomer(body.customerEmail, body.idempotencyKey);
+		const result = await options.provider.checkout({
+			lineItems: body.lineItems,
+			paymentSourceToken: body.paymentSourceToken,
+			customerEmail: body.customerEmail,
+			idempotencyKey: body.idempotencyKey,
+			metadata: body.metadata
+		});
+		const context = await options.resolveContext(c);
+		const orderData = {
+			orderNumber: generateOrderNumber(),
+			status: result.status === "succeeded" ? "paid" : "pending",
+			totalCents: result.amount.amount,
+			subtotalCents: subtotalCents(body.lineItems),
+			currency: result.amount.currency,
+			provider: options.provider.name,
+			providerOrderRef: result.providerOrderRef,
+			providerPaymentRef: result.providerPaymentRef,
+			guestEmail: body.customerEmail,
+			lineItems: body.lineItems.map((item) => ({
+				productName: item.catalogRef,
+				quantity: item.quantity,
+				unitPriceCents: item.clientUnitPrice.amount,
+				totalPriceCents: item.clientUnitPrice.amount * item.quantity,
+				catalogRef: item.catalogRef
+			})),
+			shippingAddress: body.shippingAddress
+		};
+		try {
+			const order = await options.orders.create(context, orderData);
+			await options.payments.create(context, {
+				provider: options.provider.name,
+				providerPaymentRef: result.providerPaymentRef,
+				providerOrderRef: result.providerOrderRef,
+				order: order.id,
+				status: result.status,
+				amountCents: result.amount.amount,
+				currency: result.amount.currency,
+				rawResponse: result.raw
+			});
+			return c.json({ order }, 201);
+		} catch (cause) {
+			return c.json({
+				warning: "Payment succeeded but order record-keeping failed — contact support",
+				providerPaymentRef: result.providerPaymentRef,
+				providerOrderRef: result.providerOrderRef,
+				cause: cause instanceof Error ? cause.message : String(cause)
+			}, 200);
+		}
+	};
+}
+//#endregion
+//#region src/collections.ts
+const DEFAULTS = {
+	products: "products",
+	orders: "orders",
+	customers: "customers",
+	payments: "payments",
+	webhookEvents: "webhook_events",
+	subscriptions: "subscriptions",
+	users: "users"
+};
+function buildProductsCollection(slug) {
+	return {
+		slug,
+		fields: {
+			id: {
+				type: "number",
+				autoIncrement: true
+			},
+			name: {
+				type: "text",
+				required: true
+			},
+			description: { type: "text" },
+			status: {
+				type: "select",
+				options: [
+					"draft",
+					"active",
+					"archived"
+				],
+				required: true,
+				defaultValue: "draft"
+			},
+			variants: {
+				type: "array",
+				required: true,
+				fields: {
+					sku: {
+						type: "text",
+						required: true
+					},
+					catalogRef: {
+						type: "text",
+						required: true
+					},
+					priceCents: {
+						type: "number",
+						required: true
+					},
+					currency: {
+						type: "text",
+						defaultValue: "USD"
+					},
+					inventoryCount: { type: "number" }
+				}
+			},
+			createdAt: {
+				type: "date",
+				mode: "timestamp",
+				defaultValue: "now"
+			}
+		}
+	};
+}
+function buildOrdersCollection(slug, customersSlug) {
+	return {
+		slug,
+		fields: {
+			id: {
+				type: "number",
+				autoIncrement: true
+			},
+			orderNumber: {
+				type: "text",
+				required: true,
+				unique: true
+			},
+			status: {
+				type: "select",
+				options: [
+					"pending",
+					"paid",
+					"failed",
+					"refunded",
+					"partially_refunded"
+				],
+				required: true,
+				defaultValue: "pending"
+			},
+			totalCents: {
+				type: "number",
+				required: true
+			},
+			subtotalCents: {
+				type: "number",
+				required: true
+			},
+			taxCents: { type: "number" },
+			currency: {
+				type: "text",
+				defaultValue: "USD"
+			},
+			provider: {
+				type: "select",
+				options: ["square", "stripe"],
+				required: true
+			},
+			providerOrderRef: { type: "text" },
+			providerPaymentRef: { type: "text" },
+			customer: {
+				type: "relationship",
+				relationTo: customersSlug
+			},
+			guestEmail: { type: "text" },
+			lineItems: {
+				type: "array",
+				required: true,
+				fields: {
+					productName: {
+						type: "text",
+						required: true
+					},
+					quantity: {
+						type: "number",
+						required: true
+					},
+					unitPriceCents: {
+						type: "number",
+						required: true
+					},
+					totalPriceCents: {
+						type: "number",
+						required: true
+					},
+					catalogRef: { type: "text" }
+				}
+			},
+			shippingAddress: {
+				type: "group",
+				fields: {
+					firstName: { type: "text" },
+					lastName: { type: "text" },
+					address1: { type: "text" },
+					address2: { type: "text" },
+					city: { type: "text" },
+					state: { type: "text" },
+					zip: { type: "text" },
+					country: {
+						type: "text",
+						defaultValue: "US"
+					},
+					phone: { type: "text" }
+				}
+			},
+			fulfillmentStatus: {
+				type: "select",
+				options: [
+					"pending",
+					"shipped",
+					"delivered",
+					"failed"
+				]
+			},
+			trackingNumber: { type: "text" },
+			trackingCarrier: { type: "text" },
+			trackingUrl: { type: "text" },
+			createdAt: {
+				type: "date",
+				mode: "timestamp",
+				defaultValue: "now"
+			}
+		}
+	};
+}
+function buildCustomersCollection(slug, usersSlug) {
+	return {
+		slug,
+		fields: {
+			id: {
+				type: "number",
+				autoIncrement: true
+			},
+			email: {
+				type: "text",
+				required: true,
+				unique: true
+			},
+			provider: {
+				type: "select",
+				options: ["square", "stripe"]
+			},
+			providerCustomerRef: { type: "text" },
+			linkedUser: {
+				type: "relationship",
+				relationTo: usersSlug
+			},
+			loyaltyAccountRef: { type: "text" },
+			loyaltyPoints: {
+				type: "number",
+				defaultValue: 0
+			},
+			createdAt: {
+				type: "date",
+				mode: "timestamp",
+				defaultValue: "now"
+			}
+		}
+	};
+}
+function buildPaymentsCollection(slug, ordersSlug) {
+	return {
+		slug,
+		fields: {
+			id: {
+				type: "number",
+				autoIncrement: true
+			},
+			provider: {
+				type: "select",
+				options: ["square", "stripe"],
+				required: true
+			},
+			providerPaymentRef: {
+				type: "text",
+				required: true
+			},
+			providerOrderRef: { type: "text" },
+			order: {
+				type: "relationship",
+				relationTo: ordersSlug
+			},
+			status: { type: "text" },
+			amountCents: {
+				type: "number",
+				required: true
+			},
+			currency: {
+				type: "text",
+				defaultValue: "USD"
+			},
+			rawResponse: { type: "json" },
+			createdAt: {
+				type: "date",
+				mode: "timestamp",
+				defaultValue: "now"
+			}
+		}
+	};
+}
+function buildWebhookEventsCollection(slug) {
+	return {
+		slug,
+		fields: {
+			id: {
+				type: "number",
+				autoIncrement: true
+			},
+			provider: {
+				type: "select",
+				options: ["square", "stripe"],
+				required: true
+			},
+			eventId: {
+				type: "text",
+				required: true,
+				unique: true
+			},
+			eventType: { type: "text" },
+			receivedAt: {
+				type: "date",
+				mode: "timestamp",
+				defaultValue: "now"
+			}
+		}
+	};
+}
+function buildSubscriptionsCollection(slug, customersSlug) {
+	return {
+		slug,
+		fields: {
+			id: {
+				type: "number",
+				autoIncrement: true
+			},
+			provider: {
+				type: "select",
+				options: ["square", "stripe"],
+				required: true
+			},
+			providerSubscriptionRef: {
+				type: "text",
+				required: true
+			},
+			customer: {
+				type: "relationship",
+				relationTo: customersSlug
+			},
+			status: { type: "text" },
+			chargedThroughDate: {
+				type: "date",
+				mode: "timestamp"
+			},
+			createdAt: {
+				type: "date",
+				mode: "timestamp",
+				defaultValue: "now"
+			}
+		}
+	};
+}
+/**
+* Returns a Cadmea plugin that adds the provider-agnostic ecommerce
+* collections — a no-op for any collection slug already present, the same
+* idempotent-add convention `cadmea-plugin-redirects`/`cadmea-plugin-crm`
+* use.
+*/
+function ecommercePlugin(options = {}) {
+	const slugs = {
+		products: options.productsSlug ?? DEFAULTS.products,
+		orders: options.ordersSlug ?? DEFAULTS.orders,
+		customers: options.customersSlug ?? DEFAULTS.customers,
+		payments: options.paymentsSlug ?? DEFAULTS.payments,
+		webhookEvents: options.webhookEventsSlug ?? DEFAULTS.webhookEvents,
+		subscriptions: options.subscriptionsSlug ?? DEFAULTS.subscriptions,
+		users: options.usersSlug ?? DEFAULTS.users
+	};
+	return (config) => {
+		const collections = [...config.collections];
+		const addIfMissing = (collection) => {
+			if (!collections.some((c) => c.slug === collection.slug)) collections.push(collection);
+		};
+		addIfMissing(buildProductsCollection(slugs.products));
+		addIfMissing(buildOrdersCollection(slugs.orders, slugs.customers));
+		addIfMissing(buildCustomersCollection(slugs.customers, slugs.users));
+		addIfMissing(buildPaymentsCollection(slugs.payments, slugs.orders));
+		addIfMissing(buildWebhookEventsCollection(slugs.webhookEvents));
+		if (options.includeSubscriptions) addIfMissing(buildSubscriptionsCollection(slugs.subscriptions, slugs.customers));
+		return {
+			...config,
+			collections
+		};
+	};
+}
+//#endregion
+//#region src/webhook.ts
+function isUniqueConstraintError(error) {
+	return error instanceof Error && error.message.includes("Unique constraint violated");
+}
+async function findOneByField(api, context, field, value) {
+	return (await api.find(context)).find((row) => row[field] === value);
+}
+async function dispatchEvent(event, options) {
+	switch (event.kind) {
+		case "payment.updated": {
+			const payment = await findOneByField(options.payments, options.context, "providerPaymentRef", event.providerPaymentRef);
+			if (payment) await options.payments.update(options.context, payment.id, { status: event.status });
+			const order = await findOneByField(options.orders, options.context, "providerPaymentRef", event.providerPaymentRef);
+			if (order) {
+				const status = event.status === "succeeded" ? "paid" : event.status === "refunded" ? "refunded" : "failed";
+				await options.orders.update(options.context, order.id, { status });
+			}
+			return;
+		}
+		case "order.updated": {
+			const order = await findOneByField(options.orders, options.context, "providerOrderRef", event.providerOrderRef);
+			if (order) await options.orders.update(options.context, order.id, { status: event.status });
+			return;
+		}
+		case "subscription.updated": {
+			if (!options.subscriptions) return;
+			const subscription = await findOneByField(options.subscriptions, options.context, "providerSubscriptionRef", event.providerSubscriptionRef);
+			if (subscription) await options.subscriptions.update(options.context, subscription.id, { status: event.status });
+			return;
+		}
+		case "unhandled": return;
+	}
+}
+/**
+* Returns a Hono handler implementing inbound webhook handling against a
+* `PaymentProvider`: verify signature (raw body, before any parsing) →
+* dedup via the `webhook_events` collection's unique `eventId` constraint
+* → dispatch by normalized event kind. Each step isolated so a handler bug
+* never prevents the 200 response a provider needs to stop retrying — the
+* dedup write IS the source of truth for "already processed," checked
+* before dispatch, not after.
+*
+* Mount alongside `mountCmsRoutes`, same as `createCheckoutHandler` — not
+* part of the generic CMS REST surface.
+*/
+function createWebhookHandler(options) {
+	return async (c) => {
+		const rawBody = await c.req.text();
+		if (!await options.provider.verifyWebhookSignature({
+			rawBody,
+			headers: c.req.raw.headers,
+			secret: options.secret,
+			notificationUrl: options.notificationUrl
+		})) return c.json({ error: "Invalid signature" }, 401);
+		const { eventId, event } = options.provider.parseWebhookEvent(rawBody);
+		try {
+			await options.webhookEvents.create(options.context, {
+				provider: options.provider.name,
+				eventId,
+				eventType: event.kind
+			});
+		} catch (error) {
+			if (isUniqueConstraintError(error)) return c.json({
+				ok: true,
+				duplicate: true
+			}, 200);
+			throw error;
+		}
+		try {
+			await dispatchEvent(event, options);
+		} catch (error) {
+			console.error("[cadmea-plugin-ecommerce] webhook dispatch failed", error);
+		}
+		return c.json({ ok: true }, 200);
+	};
+}
+//#endregion
+export { CadmeaPaymentError, createCheckoutHandler, createWebhookHandler, ecommercePlugin };
+
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../src/errors.ts","../src/checkout.ts","../src/collections.ts","../src/webhook.ts"],"sourcesContent":["// Copyright (c) 2026 BowenLabs. All rights reserved.\n// MIT licensed. See LICENSE in the repo root.\n\n/**\n * Thrown by `createCheckoutHandler` on price-mismatch/inventory rejection,\n * and by `PaymentProvider` implementations on charge failure.\n * `createCheckoutHandler` catches it internally (`instanceof\n * CadmeaPaymentError`) and maps it to HTTP 402 itself — checkout/webhook\n * handlers are plain Hono routes, never mounted through\n * `@thebes/cadmus/hono`'s `mountCmsRoutes`, so there's no shared\n * error-to-status pipeline this needs to participate in.\n *\n * Deliberately a plain `Error` subclass, not a `CadmusCmsError` one — this\n * is a Cadmea-plugin-owned error, not a Cadmus-primitive one (every real\n * `CadmusError` subclass is owned by a `packages/cadmus/src/<primitive>/`\n * folder; a payment error belongs to a plugin, not a primitive), and\n * `CadmusCmsError` is only reachable via the root `@thebes/cadmus` package\n * export (not `@thebes/cadmus/cms`) — importing that root barrel here\n * would pull in every other primitive's runtime code (including\n * Workers-only modules like `cloudflare:email`) just for one base class.\n * Keeping this plugin-local and dependency-free is the honest shape.\n */\nexport class CadmeaPaymentError extends Error {\n  constructor(\n    message: string,\n    public readonly cause?: unknown,\n  ) {\n    super(message);\n    this.name = \"CadmeaPaymentError\";\n  }\n}\n","// Copyright (c) 2026 BowenLabs. All rights reserved.\n// MIT licensed. See LICENSE in the repo root.\n\nimport type { LocalApi } from \"@thebes/cadmus/cms\";\nimport { checkRateLimit } from \"@thebes/cadmus/rate-limit\";\nimport type { Context } from \"hono\";\nimport { CadmeaPaymentError } from \"./errors.js\";\nimport type { CartLineItem, PaymentProvider } from \"./types.js\";\n\n// biome-ignore lint/suspicious/noExplicitAny: LocalApi's table generic is erased at this call boundary — same pattern as @thebes/cadmus/hono's CmsRoutesOptions\ntype AnyLocalApi<TContext> = LocalApi<any, TContext>;\n\nexport interface CheckoutRequestBody {\n  lineItems: CartLineItem[];\n  paymentSourceToken: string;\n  customerEmail?: string;\n  idempotencyKey: string;\n  shippingAddress?: Record<string, string | undefined>;\n  metadata?: Record<string, string>;\n}\n\nexport interface CheckoutHandlerOptions<TContext> {\n  provider: PaymentProvider;\n  orders: AnyLocalApi<TContext>;\n  payments: AnyLocalApi<TContext>;\n  /**\n   * Resolves the per-request access context passed to `orders`/`payments`\n   * — called once per request, the same shape and timing as\n   * `@thebes/cadmus/hono`'s `mountCmsRoutes`'s own `resolveContext`. This\n   * is a real customer-initiated HTTP request (unlike a `CollectionHooks`\n   * hook), so a real per-request context is available here, not a fixed\n   * trusted value.\n   */\n  resolveContext: (c: Context) => Promise<TContext> | TContext;\n  rateLimit?: {\n    kv: KVNamespace;\n    limit: number;\n    windowSeconds: number;\n    /** Default: \"checkout\". */\n    keyPrefix?: string;\n  };\n}\n\nfunction subtotalCents(lineItems: CartLineItem[]): number {\n  return lineItems.reduce(\n    (sum, item) => sum + item.clientUnitPrice.amount * item.quantity,\n    0,\n  );\n}\n\nfunction generateOrderNumber(): string {\n  return `ORD-${crypto.randomUUID().replace(/-/g, \"\").slice(0, 12).toUpperCase()}`;\n}\n\n/**\n * Returns a Hono handler implementing the checkout flow against a\n * `PaymentProvider`: rate limit → re-verify cart prices/availability\n * (never trust client-submitted prices) → idempotent customer find-or-\n * create → charge → persist `orders`/`payments` rows. A DB-write failure\n * *after* a successful charge degrades to a 200-with-warning response,\n * never a false \"payment failed\" — the customer's card was actually\n * charged, telling them otherwise would be worse than a delayed manual\n * reconciliation.\n *\n * Mount it as a plain Hono route alongside `mountCmsRoutes` — checkout\n * isn't part of the generic CMS REST surface that function mounts.\n *\n * ```ts\n * app.post(\"/api/checkout\", createCheckoutHandler({ provider, orders, payments, resolveContext }));\n * ```\n */\nexport function createCheckoutHandler<TContext>(\n  options: CheckoutHandlerOptions<TContext>,\n) {\n  return async (c: Context): Promise<Response> => {\n    if (options.rateLimit) {\n      const ip = c.req.header(\"CF-Connecting-IP\") ?? \"unknown\";\n      const key = `${options.rateLimit.keyPrefix ?? \"checkout\"}:${ip}`;\n      const result = await checkRateLimit(\n        options.rateLimit.kv,\n        key,\n        options.rateLimit.limit,\n        options.rateLimit.windowSeconds,\n      );\n      if (!result.allowed) {\n        return c.json({ error: \"Rate limit exceeded\" }, 429);\n      }\n    }\n\n    const body = await c.req.json<CheckoutRequestBody>();\n    // Malformed-request checks return 400 directly, not via\n    // CadmeaPaymentError — that class is reserved for \"the request was\n    // well-formed but the checkout itself can't proceed\" (price/inventory\n    // rejections, charge failure below), which this function maps to 402.\n    if (!Array.isArray(body.lineItems) || body.lineItems.length === 0) {\n      return c.json(\n        { error: \"Checkout request must include at least one line item\" },\n        400,\n      );\n    }\n    if (!body.idempotencyKey) {\n      return c.json(\n        { error: \"Checkout request must include an idempotencyKey\" },\n        400,\n      );\n    }\n\n    try {\n      // Re-verify every line item's price/availability against the live\n      // catalog — the client-submitted price is never trusted as-is.\n      const refs = body.lineItems.map((item) => item.catalogRef);\n      const priceChecks = await options.provider.checkCatalogPrices(refs);\n      const checkByRef = new Map(\n        priceChecks.map((check) => [check.catalogRef, check]),\n      );\n      for (const item of body.lineItems) {\n        const check = checkByRef.get(item.catalogRef);\n        if (!check) {\n          throw new CadmeaPaymentError(\n            `Unknown catalog item \"${item.catalogRef}\"`,\n          );\n        }\n        if (check.serverUnitPrice.amount !== item.clientUnitPrice.amount) {\n          throw new CadmeaPaymentError(\n            `Price mismatch for \"${item.catalogRef}\" — checkout rejected`,\n          );\n        }\n        if (\n          check.availableQuantity !== undefined &&\n          check.availableQuantity < item.quantity\n        ) {\n          throw new CadmeaPaymentError(\n            `Insufficient inventory for \"${item.catalogRef}\"`,\n          );\n        }\n      }\n    } catch (error) {\n      if (error instanceof CadmeaPaymentError) {\n        return c.json({ error: error.message }, 402);\n      }\n      throw error;\n    }\n\n    if (body.customerEmail) {\n      // Idempotent find-or-create — result isn't used directly below\n      // (the provider's own checkout() call resolves the customer again\n      // internally via paymentSourceToken/customerEmail), but calling it\n      // here ensures a customer record exists in the provider before the\n      // charge, matching the reference Square plugin's own step ordering.\n      await options.provider.findOrCreateCustomer(\n        body.customerEmail,\n        body.idempotencyKey,\n      );\n    }\n\n    const result = await options.provider.checkout({\n      lineItems: body.lineItems,\n      paymentSourceToken: body.paymentSourceToken,\n      customerEmail: body.customerEmail,\n      idempotencyKey: body.idempotencyKey,\n      metadata: body.metadata,\n    });\n\n    const context = await options.resolveContext(c);\n    const orderData = {\n      orderNumber: generateOrderNumber(),\n      status: result.status === \"succeeded\" ? \"paid\" : \"pending\",\n      totalCents: result.amount.amount,\n      subtotalCents: subtotalCents(body.lineItems),\n      currency: result.amount.currency,\n      provider: options.provider.name,\n      providerOrderRef: result.providerOrderRef,\n      providerPaymentRef: result.providerPaymentRef,\n      guestEmail: body.customerEmail,\n      lineItems: body.lineItems.map((item) => ({\n        productName: item.catalogRef,\n        quantity: item.quantity,\n        unitPriceCents: item.clientUnitPrice.amount,\n        totalPriceCents: item.clientUnitPrice.amount * item.quantity,\n        catalogRef: item.catalogRef,\n      })),\n      shippingAddress: body.shippingAddress,\n    };\n\n    try {\n      const order = await options.orders.create(context, orderData);\n      await options.payments.create(context, {\n        provider: options.provider.name,\n        providerPaymentRef: result.providerPaymentRef,\n        providerOrderRef: result.providerOrderRef,\n        order: order.id,\n        status: result.status,\n        amountCents: result.amount.amount,\n        currency: result.amount.currency,\n        rawResponse: result.raw,\n      });\n      return c.json({ order }, 201);\n    } catch (cause) {\n      // The charge already succeeded — never report it as failed because\n      // our own record-keeping write failed afterwards.\n      return c.json(\n        {\n          warning:\n            \"Payment succeeded but order record-keeping failed — contact support\",\n          providerPaymentRef: result.providerPaymentRef,\n          providerOrderRef: result.providerOrderRef,\n          cause: cause instanceof Error ? cause.message : String(cause),\n        },\n        200,\n      );\n    }\n  };\n}\n","// Copyright (c) 2026 BowenLabs. All rights reserved.\n// MIT licensed. See LICENSE in the repo root.\n//\n// Provider-agnostic ecommerce collections — Products/Variants, Orders,\n// Customers, Payments (audit log), WebhookEvents (dedup), and an optional\n// Subscriptions collection. Field types are restricted to what\n// @thebes/cadmus/cms actually supports, including the Section 3 `group`\n// (shippingAddress, flattened to real columns) and `json` (rawResponse)\n// additions.\n\nimport type { CadmeaPlugin, CollectionConfig } from \"@thebes/cadmus/cms\";\n\nexport interface EcommercePluginOptions {\n  productsSlug?: string;\n  ordersSlug?: string;\n  customersSlug?: string;\n  paymentsSlug?: string;\n  webhookEventsSlug?: string;\n  subscriptionsSlug?: string;\n  /** What `customers.linkedUser` relates to. Default: \"users\". */\n  usersSlug?: string;\n  /**\n   * Adds the `subscriptions` collection. Default: false — Square and\n   * Stripe model recurring billing differently enough\n   * (`PaymentProvider.subscriptions` is itself optional) that this\n   * collection is opt-in, not assumed needed by every store.\n   */\n  includeSubscriptions?: boolean;\n}\n\nconst DEFAULTS = {\n  products: \"products\",\n  orders: \"orders\",\n  customers: \"customers\",\n  payments: \"payments\",\n  webhookEvents: \"webhook_events\",\n  subscriptions: \"subscriptions\",\n  users: \"users\",\n};\n\nfunction buildProductsCollection(slug: string): CollectionConfig {\n  return {\n    slug,\n    fields: {\n      id: { type: \"number\", autoIncrement: true },\n      name: { type: \"text\", required: true },\n      description: { type: \"text\" },\n      status: {\n        type: \"select\",\n        options: [\"draft\", \"active\", \"archived\"],\n        required: true,\n        defaultValue: \"draft\",\n      },\n      // No discriminator needed — every variant has the same shape.\n      variants: {\n        type: \"array\",\n        required: true,\n        fields: {\n          sku: { type: \"text\", required: true },\n          catalogRef: { type: \"text\", required: true },\n          priceCents: { type: \"number\", required: true },\n          currency: { type: \"text\", defaultValue: \"USD\" },\n          inventoryCount: { type: \"number\" },\n        },\n      },\n      createdAt: { type: \"date\", mode: \"timestamp\", defaultValue: \"now\" },\n    },\n  };\n}\n\nfunction buildOrdersCollection(\n  slug: string,\n  customersSlug: string,\n): CollectionConfig {\n  return {\n    slug,\n    fields: {\n      id: { type: \"number\", autoIncrement: true },\n      orderNumber: { type: \"text\", required: true, unique: true },\n      status: {\n        type: \"select\",\n        options: [\n          \"pending\",\n          \"paid\",\n          \"failed\",\n          \"refunded\",\n          \"partially_refunded\",\n        ],\n        required: true,\n        defaultValue: \"pending\",\n      },\n      totalCents: { type: \"number\", required: true },\n      subtotalCents: { type: \"number\", required: true },\n      taxCents: { type: \"number\" },\n      currency: { type: \"text\", defaultValue: \"USD\" },\n      // Which PaymentProvider created this order — needed so webhook\n      // dispatch and any provider-specific lookups (tracking, refunds)\n      // know which provider's REST API to call back into.\n      provider: {\n        type: \"select\",\n        options: [\"square\", \"stripe\"],\n        required: true,\n      },\n      providerOrderRef: { type: \"text\" },\n      providerPaymentRef: { type: \"text\" },\n      customer: { type: \"relationship\", relationTo: customersSlug },\n      // No native `email` field type — same as the SMB form-builder's own\n      // email-field handling, this is a plain `text` column; validate\n      // shape in a beforeChange hook if the operator wants that.\n      guestEmail: { type: \"text\" },\n      lineItems: {\n        type: \"array\",\n        required: true,\n        fields: {\n          productName: { type: \"text\", required: true },\n          quantity: { type: \"number\", required: true },\n          unitPriceCents: { type: \"number\", required: true },\n          totalPriceCents: { type: \"number\", required: true },\n          catalogRef: { type: \"text\" },\n        },\n      },\n      // The `group` field type (Section 3) — flattens to real prefixed\n      // columns (shipping_address_first_name, etc), not a JSON blob, so\n      // SQL-level querying on a subfield still works.\n      shippingAddress: {\n        type: \"group\",\n        fields: {\n          firstName: { type: \"text\" },\n          lastName: { type: \"text\" },\n          address1: { type: \"text\" },\n          address2: { type: \"text\" },\n          city: { type: \"text\" },\n          state: { type: \"text\" },\n          zip: { type: \"text\" },\n          country: { type: \"text\", defaultValue: \"US\" },\n          phone: { type: \"text\" },\n        },\n      },\n      fulfillmentStatus: {\n        type: \"select\",\n        options: [\"pending\", \"shipped\", \"delivered\", \"failed\"],\n      },\n      trackingNumber: { type: \"text\" },\n      trackingCarrier: { type: \"text\" },\n      trackingUrl: { type: \"text\" },\n      createdAt: { type: \"date\", mode: \"timestamp\", defaultValue: \"now\" },\n    },\n  };\n}\n\nfunction buildCustomersCollection(\n  slug: string,\n  usersSlug: string,\n): CollectionConfig {\n  return {\n    slug,\n    fields: {\n      id: { type: \"number\", autoIncrement: true },\n      email: { type: \"text\", required: true, unique: true },\n      provider: { type: \"select\", options: [\"square\", \"stripe\"] },\n      providerCustomerRef: { type: \"text\" },\n      linkedUser: { type: \"relationship\", relationTo: usersSlug },\n      // Square-specific; null for Stripe customers — fine to keep on the\n      // shared collection since unused fields are simply null.\n      loyaltyAccountRef: { type: \"text\" },\n      loyaltyPoints: { type: \"number\", defaultValue: 0 },\n      createdAt: { type: \"date\", mode: \"timestamp\", defaultValue: \"now\" },\n    },\n  };\n}\n\nfunction buildPaymentsCollection(\n  slug: string,\n  ordersSlug: string,\n): CollectionConfig {\n  return {\n    slug,\n    fields: {\n      id: { type: \"number\", autoIncrement: true },\n      provider: {\n        type: \"select\",\n        options: [\"square\", \"stripe\"],\n        required: true,\n      },\n      providerPaymentRef: { type: \"text\", required: true },\n      providerOrderRef: { type: \"text\" },\n      order: { type: \"relationship\", relationTo: ordersSlug },\n      // The provider's own status string, stored as-is for audit fidelity\n      // (not normalized) — a `select` would force enumerating every\n      // provider's status vocabulary here, exactly the provider-coupling\n      // the core/provider split exists to avoid.\n      status: { type: \"text\" },\n      amountCents: { type: \"number\", required: true },\n      currency: { type: \"text\", defaultValue: \"USD\" },\n      // The `json` field type (Section 3) — the full raw provider payload,\n      // for audit/debugging. The one place a freeform-blob column is\n      // genuinely the right shape, not a workaround.\n      rawResponse: { type: \"json\" },\n      createdAt: { type: \"date\", mode: \"timestamp\", defaultValue: \"now\" },\n    },\n  };\n}\n\nfunction buildWebhookEventsCollection(slug: string): CollectionConfig {\n  return {\n    slug,\n    fields: {\n      id: { type: \"number\", autoIncrement: true },\n      provider: {\n        type: \"select\",\n        options: [\"square\", \"stripe\"],\n        required: true,\n      },\n      // The unique constraint *is* the concurrency-safe dedup guard — a\n      // concurrent duplicate naturally throws a unique-constraint\n      // CadmusCmsError from create(), which createWebhookHandler treats as\n      // \"already processed,\" not a real error.\n      eventId: { type: \"text\", required: true, unique: true },\n      eventType: { type: \"text\" },\n      receivedAt: { type: \"date\", mode: \"timestamp\", defaultValue: \"now\" },\n    },\n  };\n}\n\nfunction buildSubscriptionsCollection(\n  slug: string,\n  customersSlug: string,\n): CollectionConfig {\n  return {\n    slug,\n    fields: {\n      id: { type: \"number\", autoIncrement: true },\n      provider: {\n        type: \"select\",\n        options: [\"square\", \"stripe\"],\n        required: true,\n      },\n      providerSubscriptionRef: { type: \"text\", required: true },\n      customer: { type: \"relationship\", relationTo: customersSlug },\n      status: { type: \"text\" },\n      chargedThroughDate: { type: \"date\", mode: \"timestamp\" },\n      createdAt: { type: \"date\", mode: \"timestamp\", defaultValue: \"now\" },\n    },\n  };\n}\n\n/**\n * Returns a Cadmea plugin that adds the provider-agnostic ecommerce\n * collections — a no-op for any collection slug already present, the same\n * idempotent-add convention `cadmea-plugin-redirects`/`cadmea-plugin-crm`\n * use.\n */\nexport function ecommercePlugin(\n  options: EcommercePluginOptions = {},\n): CadmeaPlugin {\n  const slugs = {\n    products: options.productsSlug ?? DEFAULTS.products,\n    orders: options.ordersSlug ?? DEFAULTS.orders,\n    customers: options.customersSlug ?? DEFAULTS.customers,\n    payments: options.paymentsSlug ?? DEFAULTS.payments,\n    webhookEvents: options.webhookEventsSlug ?? DEFAULTS.webhookEvents,\n    subscriptions: options.subscriptionsSlug ?? DEFAULTS.subscriptions,\n    users: options.usersSlug ?? DEFAULTS.users,\n  };\n\n  return (config) => {\n    const collections = [...config.collections];\n    const addIfMissing = (collection: CollectionConfig) => {\n      if (!collections.some((c) => c.slug === collection.slug)) {\n        collections.push(collection);\n      }\n    };\n\n    addIfMissing(buildProductsCollection(slugs.products));\n    addIfMissing(buildOrdersCollection(slugs.orders, slugs.customers));\n    addIfMissing(buildCustomersCollection(slugs.customers, slugs.users));\n    addIfMissing(buildPaymentsCollection(slugs.payments, slugs.orders));\n    addIfMissing(buildWebhookEventsCollection(slugs.webhookEvents));\n    if (options.includeSubscriptions) {\n      addIfMissing(\n        buildSubscriptionsCollection(slugs.subscriptions, slugs.customers),\n      );\n    }\n\n    return { ...config, collections };\n  };\n}\n","// Copyright (c) 2026 BowenLabs. All rights reserved.\n// MIT licensed. See LICENSE in the repo root.\n\nimport type { LocalApi } from \"@thebes/cadmus/cms\";\nimport type { Context } from \"hono\";\nimport type { NormalizedWebhookEvent, PaymentProvider } from \"./types.js\";\n\n// biome-ignore lint/suspicious/noExplicitAny: see checkout.ts's identical note\ntype AnyLocalApi<TContext> = LocalApi<any, TContext>;\n\nexport interface WebhookHandlerOptions<TContext> {\n  provider: PaymentProvider;\n  webhookEvents: AnyLocalApi<TContext>;\n  orders: AnyLocalApi<TContext>;\n  payments: AnyLocalApi<TContext>;\n  /** Only needed if `provider.subscriptions` is wired and the consumer included the optional `subscriptions` collection. */\n  subscriptions?: AnyLocalApi<TContext>;\n  secret: string;\n  /** Some providers (Square) sign over the full notification URL. */\n  notificationUrl?: string;\n  /**\n   * Webhooks are server-to-server calls with no real user session behind\n   * them — same reasoning as `@thebes/cadmea-plugin-crm`'s\n   * `createContactUpsertHook`'s `context` option. Pass whatever trusted\n   * context value the `orders`/`payments`/`webhookEvents` collections'\n   * own `access` config accepts for system-level writes.\n   */\n  context: TContext;\n}\n\n// Matches the exact message text `localApi.ts`'s `wrapWriteError` authors\n// for a unique-constraint failure — Cadmus-internal, a contract this\n// plugin controls indirectly (same precedent as `@thebes/cadmus/hono`'s\n// `mountCmsRoutes`'s own `statusForError`, which matches the same way\n// rather than importing `CadmusCmsError` from the root `@thebes/cadmus`\n// package — see errors.ts's doc comment for why that root import is\n// avoided here).\nfunction isUniqueConstraintError(error: unknown): boolean {\n  return (\n    error instanceof Error &&\n    error.message.includes(\"Unique constraint violated\")\n  );\n}\n\nasync function findOneByField<TContext>(\n  api: AnyLocalApi<TContext>,\n  context: TContext,\n  field: string,\n  value: string,\n): Promise<Record<string, unknown> | undefined> {\n  // In-memory filter after a plain find() rather than a `where`-filtered\n  // query — the same \"don't build for scale you don't have\" tradeoff\n  // `cadmea-plugin-redirects`/`cadmea-plugin-crm` make elsewhere. Revisit\n  // with an indexed lookup if a high-volume store's orders/payments\n  // tables make this a measured problem, not a theoretical one.\n  const rows = (await api.find(context)) as Array<Record<string, unknown>>;\n  return rows.find((row) => row[field] === value);\n}\n\nasync function dispatchEvent<TContext>(\n  event: NormalizedWebhookEvent,\n  options: WebhookHandlerOptions<TContext>,\n): Promise<void> {\n  switch (event.kind) {\n    case \"payment.updated\": {\n      const payment = await findOneByField(\n        options.payments,\n        options.context,\n        \"providerPaymentRef\",\n        event.providerPaymentRef,\n      );\n      if (payment) {\n        await options.payments.update(options.context, payment.id as number, {\n          status: event.status,\n        });\n      }\n      const order = await findOneByField(\n        options.orders,\n        options.context,\n        \"providerPaymentRef\",\n        event.providerPaymentRef,\n      );\n      if (order) {\n        const status =\n          event.status === \"succeeded\"\n            ? \"paid\"\n            : event.status === \"refunded\"\n              ? \"refunded\"\n              : \"failed\";\n        await options.orders.update(options.context, order.id as number, {\n          status,\n        });\n      }\n      return;\n    }\n    case \"order.updated\": {\n      const order = await findOneByField(\n        options.orders,\n        options.context,\n        \"providerOrderRef\",\n        event.providerOrderRef,\n      );\n      if (order) {\n        await options.orders.update(options.context, order.id as number, {\n          status: event.status,\n        });\n      }\n      return;\n    }\n    case \"subscription.updated\": {\n      if (!options.subscriptions) return;\n      const subscription = await findOneByField(\n        options.subscriptions,\n        options.context,\n        \"providerSubscriptionRef\",\n        event.providerSubscriptionRef,\n      );\n      if (subscription) {\n        await options.subscriptions.update(\n          options.context,\n          subscription.id as number,\n          { status: event.status },\n        );\n      }\n      return;\n    }\n    case \"unhandled\":\n      return;\n  }\n}\n\n/**\n * Returns a Hono handler implementing inbound webhook handling against a\n * `PaymentProvider`: verify signature (raw body, before any parsing) →\n * dedup via the `webhook_events` collection's unique `eventId` constraint\n * → dispatch by normalized event kind. Each step isolated so a handler bug\n * never prevents the 200 response a provider needs to stop retrying — the\n * dedup write IS the source of truth for \"already processed,\" checked\n * before dispatch, not after.\n *\n * Mount alongside `mountCmsRoutes`, same as `createCheckoutHandler` — not\n * part of the generic CMS REST surface.\n */\nexport function createWebhookHandler<TContext>(\n  options: WebhookHandlerOptions<TContext>,\n) {\n  return async (c: Context): Promise<Response> => {\n    // Read raw body as text *before* any JSON parsing — signature is\n    // computed over raw bytes, matching @thebes/cadmus/cms's own\n    // outbound webhooks.ts HMAC idiom.\n    const rawBody = await c.req.text();\n\n    const verified = await options.provider.verifyWebhookSignature({\n      rawBody,\n      headers: c.req.raw.headers,\n      secret: options.secret,\n      notificationUrl: options.notificationUrl,\n    });\n    if (!verified) {\n      return c.json({ error: \"Invalid signature\" }, 401);\n    }\n\n    const { eventId, event } = options.provider.parseWebhookEvent(rawBody);\n\n    try {\n      await options.webhookEvents.create(options.context, {\n        provider: options.provider.name,\n        eventId,\n        eventType: event.kind,\n      });\n    } catch (error) {\n      if (isUniqueConstraintError(error)) {\n        // Already processed — the unique constraint is the actual guard,\n        // not a preceding find() (avoids a TOCTOU window on concurrent\n        // delivery of the same event).\n        return c.json({ ok: true, duplicate: true }, 200);\n      }\n      throw error;\n    }\n\n    try {\n      await dispatchEvent(event, options);\n    } catch (error) {\n      // A dispatch-handler bug must not cause the provider to retry the\n      // whole event (it's already recorded as processed above) — log and\n      // move on, same \"each handler isolated\" precedent the reference\n      // Square plugin's own webhook.ts follows.\n      console.error(\"[cadmea-plugin-ecommerce] webhook dispatch failed\", error);\n    }\n\n    return c.json({ ok: true }, 200);\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAsBA,IAAa,qBAAb,cAAwC,MAAM;CAG1B;CAFlB,YACE,SACA,OACA;EACA,MAAM,OAAO;EAFG,KAAA,QAAA;EAGhB,KAAK,OAAO;CACd;AACF;;;ACaA,SAAS,cAAc,WAAmC;CACxD,OAAO,UAAU,QACd,KAAK,SAAS,MAAM,KAAK,gBAAgB,SAAS,KAAK,UACxD,CACF;AACF;AAEA,SAAS,sBAA8B;CACrC,OAAO,OAAO,OAAO,WAAW,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,YAAY;AAC/E;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,sBACd,SACA;CACA,OAAO,OAAO,MAAkC;EAC9C,IAAI,QAAQ,WAAW;GACrB,MAAM,KAAK,EAAE,IAAI,OAAO,kBAAkB,KAAK;GAC/C,MAAM,MAAM,GAAG,QAAQ,UAAU,aAAa,WAAW,GAAG;GAO5D,IAAI,EAAC,MANgB,eACnB,QAAQ,UAAU,IAClB,KACA,QAAQ,UAAU,OAClB,QAAQ,UAAU,aACpB,EAAA,CACY,SACV,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;EAEvD;EAEA,MAAM,OAAO,MAAM,EAAE,IAAI,KAA0B;EAKnD,IAAI,CAAC,MAAM,QAAQ,KAAK,SAAS,KAAK,KAAK,UAAU,WAAW,GAC9D,OAAO,EAAE,KACP,EAAE,OAAO,uDAAuD,GAChE,GACF;EAEF,IAAI,CAAC,KAAK,gBACR,OAAO,EAAE,KACP,EAAE,OAAO,kDAAkD,GAC3D,GACF;EAGF,IAAI;GAGF,MAAM,OAAO,KAAK,UAAU,KAAK,SAAS,KAAK,UAAU;GACzD,MAAM,cAAc,MAAM,QAAQ,SAAS,mBAAmB,IAAI;GAClE,MAAM,aAAa,IAAI,IACrB,YAAY,KAAK,UAAU,CAAC,MAAM,YAAY,KAAK,CAAC,CACtD;GACA,KAAK,MAAM,QAAQ,KAAK,WAAW;IACjC,MAAM,QAAQ,WAAW,IAAI,KAAK,UAAU;IAC5C,IAAI,CAAC,OACH,MAAM,IAAI,mBACR,yBAAyB,KAAK,WAAW,EAC3C;IAEF,IAAI,MAAM,gBAAgB,WAAW,KAAK,gBAAgB,QACxD,MAAM,IAAI,mBACR,uBAAuB,KAAK,WAAW,sBACzC;IAEF,IACE,MAAM,sBAAsB,KAAA,KAC5B,MAAM,oBAAoB,KAAK,UAE/B,MAAM,IAAI,mBACR,+BAA+B,KAAK,WAAW,EACjD;GAEJ;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,oBACnB,OAAO,EAAE,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,GAAG;GAE7C,MAAM;EACR;EAEA,IAAI,KAAK,eAMP,MAAM,QAAQ,SAAS,qBACrB,KAAK,eACL,KAAK,cACP;EAGF,MAAM,SAAS,MAAM,QAAQ,SAAS,SAAS;GAC7C,WAAW,KAAK;GAChB,oBAAoB,KAAK;GACzB,eAAe,KAAK;GACpB,gBAAgB,KAAK;GACrB,UAAU,KAAK;EACjB,CAAC;EAED,MAAM,UAAU,MAAM,QAAQ,eAAe,CAAC;EAC9C,MAAM,YAAY;GAChB,aAAa,oBAAoB;GACjC,QAAQ,OAAO,WAAW,cAAc,SAAS;GACjD,YAAY,OAAO,OAAO;GAC1B,eAAe,cAAc,KAAK,SAAS;GAC3C,UAAU,OAAO,OAAO;GACxB,UAAU,QAAQ,SAAS;GAC3B,kBAAkB,OAAO;GACzB,oBAAoB,OAAO;GAC3B,YAAY,KAAK;GACjB,WAAW,KAAK,UAAU,KAAK,UAAU;IACvC,aAAa,KAAK;IAClB,UAAU,KAAK;IACf,gBAAgB,KAAK,gBAAgB;IACrC,iBAAiB,KAAK,gBAAgB,SAAS,KAAK;IACpD,YAAY,KAAK;GACnB,EAAE;GACF,iBAAiB,KAAK;EACxB;EAEA,IAAI;GACF,MAAM,QAAQ,MAAM,QAAQ,OAAO,OAAO,SAAS,SAAS;GAC5D,MAAM,QAAQ,SAAS,OAAO,SAAS;IACrC,UAAU,QAAQ,SAAS;IAC3B,oBAAoB,OAAO;IAC3B,kBAAkB,OAAO;IACzB,OAAO,MAAM;IACb,QAAQ,OAAO;IACf,aAAa,OAAO,OAAO;IAC3B,UAAU,OAAO,OAAO;IACxB,aAAa,OAAO;GACtB,CAAC;GACD,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG;EAC9B,SAAS,OAAO;GAGd,OAAO,EAAE,KACP;IACE,SACE;IACF,oBAAoB,OAAO;IAC3B,kBAAkB,OAAO;IACzB,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GAC9D,GACA,GACF;EACF;CACF;AACF;;;ACtLA,MAAM,WAAW;CACf,UAAU;CACV,QAAQ;CACR,WAAW;CACX,UAAU;CACV,eAAe;CACf,eAAe;CACf,OAAO;AACT;AAEA,SAAS,wBAAwB,MAAgC;CAC/D,OAAO;EACL;EACA,QAAQ;GACN,IAAI;IAAE,MAAM;IAAU,eAAe;GAAK;GAC1C,MAAM;IAAE,MAAM;IAAQ,UAAU;GAAK;GACrC,aAAa,EAAE,MAAM,OAAO;GAC5B,QAAQ;IACN,MAAM;IACN,SAAS;KAAC;KAAS;KAAU;IAAU;IACvC,UAAU;IACV,cAAc;GAChB;GAEA,UAAU;IACR,MAAM;IACN,UAAU;IACV,QAAQ;KACN,KAAK;MAAE,MAAM;MAAQ,UAAU;KAAK;KACpC,YAAY;MAAE,MAAM;MAAQ,UAAU;KAAK;KAC3C,YAAY;MAAE,MAAM;MAAU,UAAU;KAAK;KAC7C,UAAU;MAAE,MAAM;MAAQ,cAAc;KAAM;KAC9C,gBAAgB,EAAE,MAAM,SAAS;IACnC;GACF;GACA,WAAW;IAAE,MAAM;IAAQ,MAAM;IAAa,cAAc;GAAM;EACpE;CACF;AACF;AAEA,SAAS,sBACP,MACA,eACkB;CAClB,OAAO;EACL;EACA,QAAQ;GACN,IAAI;IAAE,MAAM;IAAU,eAAe;GAAK;GAC1C,aAAa;IAAE,MAAM;IAAQ,UAAU;IAAM,QAAQ;GAAK;GAC1D,QAAQ;IACN,MAAM;IACN,SAAS;KACP;KACA;KACA;KACA;KACA;IACF;IACA,UAAU;IACV,cAAc;GAChB;GACA,YAAY;IAAE,MAAM;IAAU,UAAU;GAAK;GAC7C,eAAe;IAAE,MAAM;IAAU,UAAU;GAAK;GAChD,UAAU,EAAE,MAAM,SAAS;GAC3B,UAAU;IAAE,MAAM;IAAQ,cAAc;GAAM;GAI9C,UAAU;IACR,MAAM;IACN,SAAS,CAAC,UAAU,QAAQ;IAC5B,UAAU;GACZ;GACA,kBAAkB,EAAE,MAAM,OAAO;GACjC,oBAAoB,EAAE,MAAM,OAAO;GACnC,UAAU;IAAE,MAAM;IAAgB,YAAY;GAAc;GAI5D,YAAY,EAAE,MAAM,OAAO;GAC3B,WAAW;IACT,MAAM;IACN,UAAU;IACV,QAAQ;KACN,aAAa;MAAE,MAAM;MAAQ,UAAU;KAAK;KAC5C,UAAU;MAAE,MAAM;MAAU,UAAU;KAAK;KAC3C,gBAAgB;MAAE,MAAM;MAAU,UAAU;KAAK;KACjD,iBAAiB;MAAE,MAAM;MAAU,UAAU;KAAK;KAClD,YAAY,EAAE,MAAM,OAAO;IAC7B;GACF;GAIA,iBAAiB;IACf,MAAM;IACN,QAAQ;KACN,WAAW,EAAE,MAAM,OAAO;KAC1B,UAAU,EAAE,MAAM,OAAO;KACzB,UAAU,EAAE,MAAM,OAAO;KACzB,UAAU,EAAE,MAAM,OAAO;KACzB,MAAM,EAAE,MAAM,OAAO;KACrB,OAAO,EAAE,MAAM,OAAO;KACtB,KAAK,EAAE,MAAM,OAAO;KACpB,SAAS;MAAE,MAAM;MAAQ,cAAc;KAAK;KAC5C,OAAO,EAAE,MAAM,OAAO;IACxB;GACF;GACA,mBAAmB;IACjB,MAAM;IACN,SAAS;KAAC;KAAW;KAAW;KAAa;IAAQ;GACvD;GACA,gBAAgB,EAAE,MAAM,OAAO;GAC/B,iBAAiB,EAAE,MAAM,OAAO;GAChC,aAAa,EAAE,MAAM,OAAO;GAC5B,WAAW;IAAE,MAAM;IAAQ,MAAM;IAAa,cAAc;GAAM;EACpE;CACF;AACF;AAEA,SAAS,yBACP,MACA,WACkB;CAClB,OAAO;EACL;EACA,QAAQ;GACN,IAAI;IAAE,MAAM;IAAU,eAAe;GAAK;GAC1C,OAAO;IAAE,MAAM;IAAQ,UAAU;IAAM,QAAQ;GAAK;GACpD,UAAU;IAAE,MAAM;IAAU,SAAS,CAAC,UAAU,QAAQ;GAAE;GAC1D,qBAAqB,EAAE,MAAM,OAAO;GACpC,YAAY;IAAE,MAAM;IAAgB,YAAY;GAAU;GAG1D,mBAAmB,EAAE,MAAM,OAAO;GAClC,eAAe;IAAE,MAAM;IAAU,cAAc;GAAE;GACjD,WAAW;IAAE,MAAM;IAAQ,MAAM;IAAa,cAAc;GAAM;EACpE;CACF;AACF;AAEA,SAAS,wBACP,MACA,YACkB;CAClB,OAAO;EACL;EACA,QAAQ;GACN,IAAI;IAAE,MAAM;IAAU,eAAe;GAAK;GAC1C,UAAU;IACR,MAAM;IACN,SAAS,CAAC,UAAU,QAAQ;IAC5B,UAAU;GACZ;GACA,oBAAoB;IAAE,MAAM;IAAQ,UAAU;GAAK;GACnD,kBAAkB,EAAE,MAAM,OAAO;GACjC,OAAO;IAAE,MAAM;IAAgB,YAAY;GAAW;GAKtD,QAAQ,EAAE,MAAM,OAAO;GACvB,aAAa;IAAE,MAAM;IAAU,UAAU;GAAK;GAC9C,UAAU;IAAE,MAAM;IAAQ,cAAc;GAAM;GAI9C,aAAa,EAAE,MAAM,OAAO;GAC5B,WAAW;IAAE,MAAM;IAAQ,MAAM;IAAa,cAAc;GAAM;EACpE;CACF;AACF;AAEA,SAAS,6BAA6B,MAAgC;CACpE,OAAO;EACL;EACA,QAAQ;GACN,IAAI;IAAE,MAAM;IAAU,eAAe;GAAK;GAC1C,UAAU;IACR,MAAM;IACN,SAAS,CAAC,UAAU,QAAQ;IAC5B,UAAU;GACZ;GAKA,SAAS;IAAE,MAAM;IAAQ,UAAU;IAAM,QAAQ;GAAK;GACtD,WAAW,EAAE,MAAM,OAAO;GAC1B,YAAY;IAAE,MAAM;IAAQ,MAAM;IAAa,cAAc;GAAM;EACrE;CACF;AACF;AAEA,SAAS,6BACP,MACA,eACkB;CAClB,OAAO;EACL;EACA,QAAQ;GACN,IAAI;IAAE,MAAM;IAAU,eAAe;GAAK;GAC1C,UAAU;IACR,MAAM;IACN,SAAS,CAAC,UAAU,QAAQ;IAC5B,UAAU;GACZ;GACA,yBAAyB;IAAE,MAAM;IAAQ,UAAU;GAAK;GACxD,UAAU;IAAE,MAAM;IAAgB,YAAY;GAAc;GAC5D,QAAQ,EAAE,MAAM,OAAO;GACvB,oBAAoB;IAAE,MAAM;IAAQ,MAAM;GAAY;GACtD,WAAW;IAAE,MAAM;IAAQ,MAAM;IAAa,cAAc;GAAM;EACpE;CACF;AACF;;;;;;;AAQA,SAAgB,gBACd,UAAkC,CAAC,GACrB;CACd,MAAM,QAAQ;EACZ,UAAU,QAAQ,gBAAgB,SAAS;EAC3C,QAAQ,QAAQ,cAAc,SAAS;EACvC,WAAW,QAAQ,iBAAiB,SAAS;EAC7C,UAAU,QAAQ,gBAAgB,SAAS;EAC3C,eAAe,QAAQ,qBAAqB,SAAS;EACrD,eAAe,QAAQ,qBAAqB,SAAS;EACrD,OAAO,QAAQ,aAAa,SAAS;CACvC;CAEA,QAAQ,WAAW;EACjB,MAAM,cAAc,CAAC,GAAG,OAAO,WAAW;EAC1C,MAAM,gBAAgB,eAAiC;GACrD,IAAI,CAAC,YAAY,MAAM,MAAM,EAAE,SAAS,WAAW,IAAI,GACrD,YAAY,KAAK,UAAU;EAE/B;EAEA,aAAa,wBAAwB,MAAM,QAAQ,CAAC;EACpD,aAAa,sBAAsB,MAAM,QAAQ,MAAM,SAAS,CAAC;EACjE,aAAa,yBAAyB,MAAM,WAAW,MAAM,KAAK,CAAC;EACnE,aAAa,wBAAwB,MAAM,UAAU,MAAM,MAAM,CAAC;EAClE,aAAa,6BAA6B,MAAM,aAAa,CAAC;EAC9D,IAAI,QAAQ,sBACV,aACE,6BAA6B,MAAM,eAAe,MAAM,SAAS,CACnE;EAGF,OAAO;GAAE,GAAG;GAAQ;EAAY;CAClC;AACF;;;ACzPA,SAAS,wBAAwB,OAAyB;CACxD,OACE,iBAAiB,SACjB,MAAM,QAAQ,SAAS,4BAA4B;AAEvD;AAEA,eAAe,eACb,KACA,SACA,OACA,OAC8C;CAO9C,QAAO,MADa,IAAI,KAAK,OAAO,EAAA,CACxB,MAAM,QAAQ,IAAI,WAAW,KAAK;AAChD;AAEA,eAAe,cACb,OACA,SACe;CACf,QAAQ,MAAM,MAAd;EACE,KAAK,mBAAmB;GACtB,MAAM,UAAU,MAAM,eACpB,QAAQ,UACR,QAAQ,SACR,sBACA,MAAM,kBACR;GACA,IAAI,SACF,MAAM,QAAQ,SAAS,OAAO,QAAQ,SAAS,QAAQ,IAAc,EACnE,QAAQ,MAAM,OAChB,CAAC;GAEH,MAAM,QAAQ,MAAM,eAClB,QAAQ,QACR,QAAQ,SACR,sBACA,MAAM,kBACR;GACA,IAAI,OAAO;IACT,MAAM,SACJ,MAAM,WAAW,cACb,SACA,MAAM,WAAW,aACf,aACA;IACR,MAAM,QAAQ,OAAO,OAAO,QAAQ,SAAS,MAAM,IAAc,EAC/D,OACF,CAAC;GACH;GACA;EACF;EACA,KAAK,iBAAiB;GACpB,MAAM,QAAQ,MAAM,eAClB,QAAQ,QACR,QAAQ,SACR,oBACA,MAAM,gBACR;GACA,IAAI,OACF,MAAM,QAAQ,OAAO,OAAO,QAAQ,SAAS,MAAM,IAAc,EAC/D,QAAQ,MAAM,OAChB,CAAC;GAEH;EACF;EACA,KAAK,wBAAwB;GAC3B,IAAI,CAAC,QAAQ,eAAe;GAC5B,MAAM,eAAe,MAAM,eACzB,QAAQ,eACR,QAAQ,SACR,2BACA,MAAM,uBACR;GACA,IAAI,cACF,MAAM,QAAQ,cAAc,OAC1B,QAAQ,SACR,aAAa,IACb,EAAE,QAAQ,MAAM,OAAO,CACzB;GAEF;EACF;EACA,KAAK,aACH;CACJ;AACF;;;;;;;;;;;;;AAcA,SAAgB,qBACd,SACA;CACA,OAAO,OAAO,MAAkC;EAI9C,MAAM,UAAU,MAAM,EAAE,IAAI,KAAK;EAQjC,IAAI,CAAC,MANkB,QAAQ,SAAS,uBAAuB;GAC7D;GACA,SAAS,EAAE,IAAI,IAAI;GACnB,QAAQ,QAAQ;GAChB,iBAAiB,QAAQ;EAC3B,CAAC,GAEC,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAGnD,MAAM,EAAE,SAAS,UAAU,QAAQ,SAAS,kBAAkB,OAAO;EAErE,IAAI;GACF,MAAM,QAAQ,cAAc,OAAO,QAAQ,SAAS;IAClD,UAAU,QAAQ,SAAS;IAC3B;IACA,WAAW,MAAM;GACnB,CAAC;EACH,SAAS,OAAO;GACd,IAAI,wBAAwB,KAAK,GAI/B,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,WAAW;GAAK,GAAG,GAAG;GAElD,MAAM;EACR;EAEA,IAAI;GACF,MAAM,cAAc,OAAO,OAAO;EACpC,SAAS,OAAO;GAKd,QAAQ,MAAM,qDAAqD,KAAK;EAC1E;EAEA,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,GAAG;CACjC;AACF"}