@tokenoftrust/storefront-runner 2.4.51 → 2.4.53

package/apps/storefront/src/lib/admin/orderClient.ts

@@ -17,7 +17,12 @@ import type {
   CheckoutOrderDetailResponse,
   CheckoutOrderListFilters,
   CheckoutOrderListResponse,
+  CommerceActor,
+  CommerceRole,
+  CommerceScope,
+  CommerceStage,
 } from "@tot/public-runtime";
+import { readOwnerAddress } from "@tot/public-runtime";
 import type { CustomizationEnv } from "@tot/public-runtime";
 
 /** Fetch shape we depend on — the platform `fetch`, injectable for tests. */
@@ -75,24 +80,53 @@ export function orderApiBaseUrl(env: CustomizationEnv): string {
     : "https://foxycart-test.tokenoftrust.com";
 }
 
-/** Map an HTTP status + endpoint body to a stable OrderApiError code. */
+/**
+ * Map an HTTP status to a stable code. The body is scanned for a known code
+ * only. It is never copied into the error — upstream bodies can carry an
+ * address or a customer identifier.
+ */
 function toError(status: number, body: string): OrderApiError {
-  const detail = body.slice(0, 300);
-  if (status === 400) return new OrderApiError("missing_app_domain", 400, detail);
+  if (status === 400) return new OrderApiError("missing_app_domain", 400);
   if (status === 401) {
-    // The endpoint distinguishes these in the body; pass it through for logging.
-    const code: OrderApiErrorCode = /not_provisioned/.test(body)
+    const code: OrderApiErrorCode = body.includes("not_provisioned")
       ? "not_provisioned"
-      : /unknown_tenant/.test(body)
+      : body.includes("unknown_tenant")
         ? "unknown_tenant"
-        : /missing_bearer/.test(body)
+        : body.includes("missing_bearer")
           ? "missing_bearer"
           : "invalid_partner_key";
-    return new OrderApiError(code, 401, detail);
+    return new OrderApiError(code, 401);
   }
-  if (status === 404) return new OrderApiError("order_not_found", 404, detail);
-  if (status >= 500) return new OrderApiError("bad_gateway", 502, detail);
-  return new OrderApiError("unexpected", status, detail);
+  if (status === 404) return new OrderApiError("order_not_found", 404);
+  if (status >= 500) return new OrderApiError("bad_gateway", 502);
+  return new OrderApiError("unexpected", status);
+}
+
+/** Live customization is publication. Every other env is preview. */
+export function commerceStageForCustomization(env: CustomizationEnv): CommerceStage {
+  return env === "live" ? "publication" : "preview";
+}
+
+/** Owner reads private order fields. An admitted member is a caller. Everyone else is denied. */
+export function commerceActorForAdmin(input: {
+  tenantId: string;
+  stage: CommerceStage;
+  owner: boolean;
+  admitted: boolean;
+}): CommerceActor {
+  const role: CommerceRole = !input.admitted ? "denied" : input.owner ? "owner" : "caller";
+  return { role, tenantId: input.tenantId, stage: input.stage };
+}
+
+/** Drop the address unless this actor may read it for this tenant and stage. */
+export function projectCheckoutOrder<T extends { shippingAddress?: unknown }>(
+  order: T,
+  actor: CommerceActor,
+  resource: CommerceScope,
+): T {
+  const read = readOwnerAddress(actor, resource, () => order.shippingAddress ?? null);
+  if (read.ok) return order;
+  return { ...order, shippingAddress: null };
 }
 
 /** Build the list querystring: appDomain (required) + any provided filters. */

package/apps/storefront/src/lib/admin/services/mock/fulfillment.ts

@@ -1,62 +1,19 @@
 import type { AdminTenantEnvelope } from "../../envelope";
 import { memoizeByEnvelope } from "../../memoizeByEnvelope";
-import { pick, randomBool, randomInt, seededRandom } from "../../seed";
-import type {
-  FulfillmentAssistDraft,
-  FulfillmentQueueKey,
-  FulfillmentQueueSummary,
-  FulfillmentViewModel,
-  ShipmentRow,
+import {
+  defaultWorkspaceQuery,
+  initialWorkspaceState,
+  projectWorkspace,
+  type FulfillmentViewModel,
 } from "../../viewmodels/fulfillment";
 
-const QUEUE_DEFS: { key: FulfillmentQueueKey; label: string }[] = [
-  { key: "ready_to_ship", label: "Ready to Ship" },
-  { key: "holds", label: "Holds" },
-  { key: "picked", label: "Picked" },
-  { key: "packed", label: "Packed" },
-  { key: "label_needed", label: "Label needed" },
-  { key: "shipped", label: "Shipped" },
-  { key: "exceptions", label: "Exceptions" },
-];
-
-const CARRIERS = ["USPS", "UPS", "FedEx"];
-const DESTINATIONS = ["Minneapolis, MN", "Portland, OR", "Austin, TX", "Columbus, OH", "Denver, CO"];
+/** Initial test-adapter snapshot. Not a seeded queue and not a live order feed. */
+export function readTestAdapterSnapshot(targetTenant: string): FulfillmentViewModel {
+  return projectWorkspace(initialWorkspaceState(targetTenant), defaultWorkspaceQuery());
+}
 
 function computeFulfillmentViewModel(envelope: AdminTenantEnvelope): FulfillmentViewModel {
-  const { targetTenant } = envelope;
-  const rng = seededRandom(`fulfillment:${targetTenant}`);
-
-  const shipments: ShipmentRow[] = QUEUE_DEFS.flatMap((def) =>
-    Array.from({ length: randomInt(rng, 1, 3) }, () => {
-      const labelLocked = def.key === "label_needed" || (def.key === "holds" && randomBool(rng, 0.6));
-      return {
-        orderId: `#${2_200_000_000 + Math.floor(rng() * 90_000_000)}`,
-        queue: def.key,
-        carrier: pick(rng, CARRIERS),
-        destination: pick(rng, DESTINATIONS),
-        slaAgeHours: randomInt(rng, 1, 48),
-        labelLocked,
-        labelLockReason: labelLocked ? pick(rng, ["Shipping restriction on destination", "Payment not yet captured", "Age verification pending"]) : null,
-        carrierReady: !labelLocked && randomBool(rng, 0.9),
-        destinationReady: randomBool(rng, 0.85),
-      };
-    }),
-  );
-
-  const queues: FulfillmentQueueSummary[] = QUEUE_DEFS.map((def) => ({
-    key: def.key,
-    label: def.label,
-    count: shipments.filter((s) => s.queue === def.key).length,
-  }));
-
-  const exceptionShipments = shipments.filter((s) => s.queue === "exceptions" || s.labelLocked);
-  const assistDrafts: FulfillmentAssistDraft[] = exceptionShipments.map((s) => ({
-    orderId: s.orderId,
-    kind: "blocker_explanation",
-    summary: s.labelLockReason ? `${s.labelLockReason} — resolve to unlock the label for ${s.orderId}.` : `Exception queue: ${s.orderId} needs manual review.`,
-  }));
-
-  return { targetTenant, queues, shipments, assistDrafts };
+  return readTestAdapterSnapshot(envelope.targetTenant);
 }
 
 export const getFulfillmentViewModel = memoizeByEnvelope(computeFulfillmentViewModel);