@tokenoftrust/storefront-runner 2.4.53 → 2.4.55

package/apps/storefront/src/pages/api/admin/fulfillment/orders/[id].ts

@@ -0,0 +1,117 @@
+/**
+ * Authenticated owner API for one order's fulfillment commands.
+ * The response is state codes and the fulfillment view. It never returns an address.
+ */
+import type { APIContext } from "astro";
+import { requireAdminApiEntry } from "@/lib/auth/adminApiGuard";
+import {
+  fulfillmentResultResponse,
+  isOpaqueId,
+  openFulfillment,
+  parseFulfillmentBody,
+  readJsonBody,
+  type FulfillmentCommandOptions,
+  type LabelOutcomeInput,
+} from "@/lib/fulfillment/fulfillmentService";
+
+export const prerender = false;
+
+function ownerRefusal(status: number, reason: string): Response {
+  return new Response(JSON.stringify({ error: reason }), {
+    status,
+    headers: {
+      "content-type": "application/json; charset=utf-8",
+      "cache-control": "no-store",
+      "x-robots-tag": "noindex, nofollow",
+    },
+  });
+}
+
+async function requireOwner(context: APIContext): Promise<Response | null> {
+  const access = await requireAdminApiEntry(context, { requireOwner: true });
+  if (access.ok) return null;
+  return ownerRefusal(access.status, access.reason);
+}
+
+const ACTIONS = new Set([
+  "pick",
+  "pack",
+  "release",
+  "hold",
+  "clear-hold",
+  "cancel",
+  "refund",
+  "label-outcome",
+  "hand-off",
+  "return",
+]);
+
+function fail(code: string): Response {
+  return fulfillmentResultResponse({ ok: false, code }, () => ({}));
+}
+
+export async function GET(context: APIContext): Promise<Response> {
+  const refused = await requireOwner(context);
+  if (refused) return refused;
+  const orderId = context.params.id ?? "";
+  if (!isOpaqueId(orderId)) return fail("not-found");
+  const opened = await openFulfillment(context);
+  if (!opened.ok) return opened.response;
+  return fulfillmentResultResponse(await opened.service.get(opened.actor, orderId), (view) => view);
+}
+
+export async function POST(context: APIContext): Promise<Response> {
+  const refused = await requireOwner(context);
+  if (refused) return refused;
+  const orderId = context.params.id ?? "";
+  if (!isOpaqueId(orderId)) return fail("not-found");
+  const raw = await readJsonBody(context.request);
+  if (!raw.ok) return fulfillmentResultResponse(raw, () => ({}));
+  const parsed = parseFulfillmentBody(raw.value);
+  if (!parsed.ok) return fulfillmentResultResponse(parsed, () => ({}));
+  if (!ACTIONS.has(parsed.value.action)) return fail("malformed");
+  const opened = await openFulfillment(context, parsed.value.tenantId ?? null);
+  if (!opened.ok) return opened.response;
+  const { service, actor } = opened;
+  const options: FulfillmentCommandOptions = {
+    ...(parsed.value.expectedVersion !== undefined ? { expectedVersion: parsed.value.expectedVersion } : {}),
+    ...(parsed.value.scope !== undefined ? { scope: parsed.value.scope } : {}),
+    ...(parsed.value.carrier !== undefined ? { carrier: parsed.value.carrier } : {}),
+    ...(parsed.value.lines !== undefined ? { lines: parsed.value.lines } : {}),
+  };
+  switch (parsed.value.action) {
+    case "pick":
+      return fulfillmentResultResponse(await service.pick(actor, orderId, options), (view) => view);
+    case "pack":
+      return fulfillmentResultResponse(await service.pack(actor, orderId, options), (view) => view);
+    case "release":
+      return fulfillmentResultResponse(await service.release(actor, orderId, options), (view) => view);
+    case "hold":
+      return fulfillmentResultResponse(await service.hold(actor, orderId, options), (view) => view);
+    case "clear-hold":
+      return fulfillmentResultResponse(await service.clearOperatorHold(actor, orderId, options), (view) => view);
+    case "cancel":
+      return fulfillmentResultResponse(await service.requestCancel(actor, orderId, options), (view) => view);
+    case "refund":
+      return fulfillmentResultResponse(await service.requestRefund(actor, orderId, options), (view) => view);
+    case "hand-off":
+      return fulfillmentResultResponse(await service.handOff(actor, orderId, options), (view) => view);
+    case "return":
+      return fulfillmentResultResponse(service.createReturn(actor, orderId), () => ({}));
+    case "label-outcome": {
+      const outcome = parsed.value.outcome;
+      const adultSignature = parsed.value.adultSignature;
+      if (outcome !== "purchased" && outcome !== "unknown" && outcome !== "voided") return fail("malformed");
+      if (adultSignature !== "accepted" && adultSignature !== "refused" && adultSignature !== "absent") return fail("malformed");
+      const input: LabelOutcomeInput = {
+        outcome,
+        adultSignature,
+        ...(parsed.value.carrier !== undefined ? { carrier: parsed.value.carrier } : {}),
+        ...(parsed.value.expectedVersion !== undefined ? { expectedVersion: parsed.value.expectedVersion } : {}),
+      };
+      return fulfillmentResultResponse(await service.applyLabelOutcome(actor, orderId, input), (view) => view);
+    }
+    default:
+      return fail("malformed");
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.4.53",
+  "version": "2.4.55",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",