@umec/admin 0.1.0-alpha.0

package/dist/chunk-STQU4LQU.js

@@ -0,0 +1,402 @@
+import {
+  authenticateAdmin,
+  requireAdminAuth
+} from "./chunk-W2O6EQWT.js";
+import {
+  csvAttachment,
+  jsonError,
+  jsonOk,
+  readJsonObject
+} from "./chunk-E7ATMICY.js";
+import {
+  CARRIER_LABELS,
+  parseOptionalCarrier
+} from "./chunk-4DR4K72B.js";
+import {
+  toCsv
+} from "./chunk-TKJ6KSXM.js";
+import {
+  loadProductNamesFromDb
+} from "./chunk-ZEA6G75Z.js";
+
+// src/orders/export.ts
+import { getServerEnv } from "@umec/core/env";
+var EXPORTABLE_STATUSES = ["pending", "shipped", "refunded", "cancelled"];
+function parseJson(value) {
+  if (!value) return null;
+  try {
+    return JSON.parse(value);
+  } catch {
+    return null;
+  }
+}
+function formatItems(itemsJson, names) {
+  const items = parseJson(itemsJson);
+  if (!Array.isArray(items) || items.length === 0) return { labels: "", quantity: 0 };
+  const labels = items.map((item) => {
+    const sku = typeof item.sku === "string" ? item.sku : "";
+    const quantity2 = typeof item.quantity === "number" ? item.quantity : 0;
+    const name = sku && names[sku] ? names[sku] : sku || "\u5546\u54C1";
+    return `${name} x ${quantity2}`;
+  });
+  const quantity = items.reduce((sum, item) => {
+    return sum + (typeof item.quantity === "number" ? item.quantity : 0);
+  }, 0);
+  return { labels: labels.join("; "), quantity };
+}
+function formatAddress(addressJson) {
+  const shipping = parseJson(addressJson);
+  if (!shipping?.address) return { postal: "", address: "" };
+  const address = shipping.address;
+  const parts = [address.state, address.city, address.line1, address.line2].filter((part) => typeof part === "string" && part.trim() !== "").map((part) => part.trim());
+  return {
+    postal: typeof address.postal_code === "string" ? address.postal_code : "",
+    address: parts.join(" ")
+  };
+}
+function formatNotes(customFieldsJson) {
+  const fields = parseJson(customFieldsJson);
+  if (!fields) return "";
+  return Object.entries(fields).flatMap(([key, value]) => {
+    if (typeof value !== "string" || !value.trim()) return [];
+    return [`${key}: ${value.trim()}`];
+  }).join("; ");
+}
+function createOrdersExportHandler() {
+  return async ({ request }) => {
+    const auth = await authenticateAdmin(request);
+    if (auth instanceof Response) return auth;
+    const url = new URL(request.url);
+    const status = url.searchParams.get("status") ?? "pending";
+    if (!EXPORTABLE_STATUSES.includes(status)) {
+      return jsonError("Invalid status", 400);
+    }
+    const { DB: db } = getServerEnv();
+    if (!db) return jsonError("DB not available", 503);
+    const result = await db.prepare(
+      `SELECT id, email, name, phone, items_json, amount, shipping, address_json,
+              custom_fields_json, status, tracking_number, carrier, created_at
+       FROM orders
+       WHERE status = ?
+       ORDER BY created_at ASC`
+    ).bind(status).all();
+    const names = await loadProductNamesFromDb(db);
+    const csv = toCsv(
+      [
+        "id",
+        "created_at",
+        "name",
+        "email",
+        "phone",
+        "postal_code",
+        "address",
+        "items",
+        "quantity",
+        "amount",
+        "shipping",
+        "notes",
+        "tracking_number",
+        "carrier",
+        "status"
+      ],
+      (result.results ?? []).map((row) => {
+        const items = formatItems(row.items_json, names);
+        const address = formatAddress(row.address_json);
+        return [
+          row.id,
+          row.created_at ?? "",
+          row.name ?? "",
+          row.email,
+          row.phone ?? "",
+          address.postal,
+          address.address,
+          items.labels,
+          items.quantity,
+          row.amount ?? "",
+          row.shipping ?? "",
+          formatNotes(row.custom_fields_json),
+          row.tracking_number ?? "",
+          row.carrier ?? "",
+          row.status
+        ];
+      })
+    );
+    return csvAttachment(`orders-${status}.csv`, csv);
+  };
+}
+
+// src/orders/mark-shipped.ts
+import { markShipped, writeAuditLog } from "@umec/core/db";
+import { getServerEnv as getServerEnv2 } from "@umec/core/env";
+function createMarkShippedHandler() {
+  return async ({ request }) => {
+    const auth = await authenticateAdmin(request);
+    if (auth instanceof Response) return auth;
+    const payload = await readJsonObject(request);
+    if (payload instanceof Response) return payload;
+    const { id } = payload;
+    if (!id || typeof id !== "string") {
+      return jsonError("Invalid id", 400);
+    }
+    const carrier = parseOptionalCarrier(payload.carrier);
+    if (carrier && typeof carrier === "object" && "error" in carrier) {
+      return jsonError(carrier.error, 400);
+    }
+    const trackingNumber = payload.tracking_number === void 0 || payload.tracking_number === null || payload.tracking_number === "" ? null : typeof payload.tracking_number === "string" ? payload.tracking_number.trim() : null;
+    if (payload.tracking_number !== void 0 && payload.tracking_number !== null && payload.tracking_number !== "" && trackingNumber === null) {
+      return jsonError("Invalid tracking_number", 400);
+    }
+    const { DB: db } = getServerEnv2();
+    if (!db) return jsonError("DB not available", 503);
+    const result = await markShipped(db, id, {
+      trackingNumber,
+      carrier
+    });
+    if (result === "not_pending") {
+      return jsonError("Order is not pending", 409);
+    }
+    console.log(
+      JSON.stringify({
+        type: "admin.audit",
+        action: "mark-shipped",
+        actor: auth.email,
+        targetId: id
+      })
+    );
+    await writeAuditLog(db, {
+      entityType: "order",
+      entityId: id,
+      action: "mark-shipped",
+      adminEmail: auth.email,
+      actor: "human",
+      detail: { tracking_number: trackingNumber, carrier }
+    });
+    return jsonOk({ ok: true });
+  };
+}
+
+// src/orders/mark-shipped-bulk.ts
+import { markShipped as markShipped2, writeAuditLog as writeAuditLog2 } from "@umec/core/db";
+import { getServerEnv as getServerEnv3 } from "@umec/core/env";
+var MAX_BULK_SHIP = 100;
+function createMarkShippedBulkHandler() {
+  return async ({ request }) => {
+    const auth = await authenticateAdmin(request);
+    if (auth instanceof Response) return auth;
+    const payload = await readJsonObject(request);
+    if (payload instanceof Response) return payload;
+    const { ids } = payload;
+    if (!Array.isArray(ids) || ids.length === 0 || !ids.every((id) => typeof id === "string" && id)) {
+      return jsonError("Invalid ids", 400);
+    }
+    if (ids.length > MAX_BULK_SHIP) {
+      return jsonError(`ids must contain at most ${MAX_BULK_SHIP} items`, 400);
+    }
+    const carrier = parseOptionalCarrier(payload.carrier);
+    if (carrier && typeof carrier === "object" && "error" in carrier) {
+      return jsonError(carrier.error, 400);
+    }
+    const trackingNumber = typeof payload.tracking_number === "string" && payload.tracking_number.trim() ? payload.tracking_number.trim() : null;
+    const { DB: db } = getServerEnv3();
+    if (!db) return jsonError("DB not available", 503);
+    const uniqueIds = [...new Set(ids)];
+    const shipped = [];
+    const skipped = [];
+    const shippedAt = Date.now();
+    for (const id of uniqueIds) {
+      const result = await markShipped2(db, id, {
+        trackingNumber,
+        carrier,
+        shippedAt
+      });
+      if (result === "not_pending") {
+        skipped.push(id);
+        continue;
+      }
+      shipped.push(id);
+      console.log(
+        JSON.stringify({
+          type: "admin.audit",
+          action: "mark-shipped",
+          actor: auth.email,
+          targetId: id
+        })
+      );
+      await writeAuditLog2(db, {
+        entityType: "order",
+        entityId: id,
+        action: "mark-shipped",
+        adminEmail: auth.email,
+        actor: "human",
+        detail: { tracking_number: trackingNumber, carrier, bulk: true }
+      });
+    }
+    return jsonOk({ shipped, skipped });
+  };
+}
+
+// src/orders/page.ts
+import { getServerEnv as getServerEnv4 } from "@umec/core/env";
+function parseJson2(value) {
+  if (!value) return null;
+  try {
+    return JSON.parse(value);
+  } catch {
+    return null;
+  }
+}
+function formatOrderDate(value) {
+  if (value == null || value === "") return "-";
+  const timestamp = typeof value === "string" ? Number(value) : value;
+  if (!Number.isFinite(timestamp)) return "-";
+  return new Intl.DateTimeFormat("ja-JP", {
+    dateStyle: "medium",
+    timeStyle: "short",
+    timeZone: "Asia/Tokyo"
+  }).format(new Date(timestamp));
+}
+function formatYen(value) {
+  if (value == null) return "-";
+  return new Intl.NumberFormat("ja-JP", {
+    style: "currency",
+    currency: "JPY",
+    maximumFractionDigits: 0
+  }).format(value);
+}
+function formatOrderItems(itemsJson, names) {
+  const items = parseJson2(itemsJson);
+  if (!Array.isArray(items) || items.length === 0) return ["-"];
+  return items.map((item) => {
+    const sku = typeof item.sku === "string" ? item.sku : "";
+    const quantity = typeof item.quantity === "number" ? item.quantity : 0;
+    const productName = sku && names[sku] ? names[sku] : sku || "\u5546\u54C1";
+    return `${productName} x ${quantity}`;
+  });
+}
+function stringPart(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : "";
+}
+function formatOrderAddress(addressJson) {
+  const shipping = parseJson2(addressJson);
+  if (!shipping?.address) return ["-"];
+  const address = shipping.address;
+  const postalCode = stringPart(address.postal_code);
+  const lines = [
+    postalCode ? `\u3012${postalCode}` : "",
+    stringPart(address.state) + stringPart(address.city),
+    stringPart(address.line1),
+    stringPart(address.line2)
+  ].filter(Boolean);
+  return lines.length > 0 ? lines : ["-"];
+}
+function formatCustomFields(customFieldsJson) {
+  const cf = parseJson2(customFieldsJson);
+  if (!cf) return [];
+  return Object.entries(cf).flatMap(([key, value]) => {
+    if (typeof value !== "string" || !value.trim()) return [];
+    return [{ key, value: value.trim() }];
+  });
+}
+function carrierLabel(code) {
+  if (!code) return "";
+  return CARRIER_LABELS[code] ?? code;
+}
+async function loadOrdersAdminPage(request) {
+  const denied = await requireAdminAuth(request);
+  if (denied) return { response: denied };
+  const { DB: db } = getServerEnv4();
+  let orders = [];
+  let names = {};
+  let dbNotice = "";
+  if (db) {
+    try {
+      const result = await db.prepare(
+        `SELECT * FROM orders ORDER BY
+          CASE WHEN status = 'pending' THEN 0 ELSE 1 END,
+          created_at DESC
+        LIMIT 100`
+      ).all();
+      orders = result.results ?? [];
+      names = await loadProductNamesFromDb(db);
+    } catch (error) {
+      console.error("[admin/orders] order query failed:", error);
+      dbNotice = "Orders could not be loaded.";
+    }
+  } else {
+    dbNotice = "DB binding is not available.";
+  }
+  const pendingCount = orders.filter((order) => order.status === "pending").length;
+  return { orders, names, dbNotice, pendingCount };
+}
+
+// src/orders/update-tracking.ts
+import { getOrder, updateTracking, writeAuditLog as writeAuditLog3 } from "@umec/core/db";
+import { getServerEnv as getServerEnv5 } from "@umec/core/env";
+function createUpdateTrackingHandler() {
+  return async ({ request }) => {
+    const auth = await authenticateAdmin(request);
+    if (auth instanceof Response) return auth;
+    const payload = await readJsonObject(request);
+    if (payload instanceof Response) return payload;
+    const { id, tracking_number: trackingNumber } = payload;
+    if (!id || typeof id !== "string") return jsonError("Invalid id", 400);
+    if (typeof trackingNumber !== "string" || trackingNumber.trim() === "") {
+      return jsonError("Invalid tracking_number", 400);
+    }
+    const carrier = parseOptionalCarrier(payload.carrier);
+    if (carrier && typeof carrier === "object" && "error" in carrier) {
+      return jsonError(carrier.error, 400);
+    }
+    const { DB: db } = getServerEnv5();
+    if (!db) return jsonError("DB not available", 503);
+    const existing = await getOrder(db, id);
+    if (!existing) return jsonError("Order not found", 404);
+    const nextTracking = trackingNumber.trim();
+    const nextCarrier = carrier === null ? existing.carrier : carrier;
+    const result = await updateTracking(db, id, nextTracking, nextCarrier);
+    if (result === "not_found") return jsonError("Order not found", 404);
+    console.log(
+      JSON.stringify({
+        type: "admin.audit",
+        action: "update-tracking",
+        actor: auth.email,
+        targetId: id,
+        tracking_number: nextTracking,
+        carrier: nextCarrier
+      })
+    );
+    await writeAuditLog3(db, {
+      entityType: "order",
+      entityId: id,
+      action: "update-tracking",
+      adminEmail: auth.email,
+      actor: "human",
+      detail: {
+        before: { tracking_number: existing.tracking_number, carrier: existing.carrier },
+        after: { tracking_number: nextTracking, carrier: nextCarrier }
+      }
+    });
+    return jsonOk({
+      ok: true,
+      id,
+      tracking_number: nextTracking,
+      carrier: nextCarrier
+    });
+  };
+}
+
+export {
+  createOrdersExportHandler,
+  createMarkShippedHandler,
+  MAX_BULK_SHIP,
+  createMarkShippedBulkHandler,
+  formatOrderDate,
+  formatYen,
+  formatOrderItems,
+  formatOrderAddress,
+  formatCustomFields,
+  carrierLabel,
+  loadOrdersAdminPage,
+  createUpdateTrackingHandler
+};
+//# sourceMappingURL=chunk-STQU4LQU.js.map

package/dist/chunk-STQU4LQU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/orders/export.ts","../src/orders/mark-shipped.ts","../src/orders/mark-shipped-bulk.ts","../src/orders/page.ts","../src/orders/update-tracking.ts"],"sourcesContent":["import type { OrdersRow } from \"@umec/core/db\";\nimport { getServerEnv } from \"@umec/core/env\";\nimport { authenticateAdmin } from \"../access.js\";\nimport { toCsv } from \"../csv.js\";\nimport { csvAttachment, jsonError, type AdminApiHandler } from \"../http.js\";\nimport { loadProductNamesFromDb } from \"../products.js\";\n\nconst EXPORTABLE_STATUSES = [\"pending\", \"shipped\", \"refunded\", \"cancelled\"] as const;\n\ntype OrderExportRow = Pick<\n  OrdersRow,\n  | \"id\"\n  | \"email\"\n  | \"name\"\n  | \"phone\"\n  | \"items_json\"\n  | \"amount\"\n  | \"shipping\"\n  | \"address_json\"\n  | \"custom_fields_json\"\n  | \"status\"\n  | \"tracking_number\"\n  | \"carrier\"\n  | \"created_at\"\n>;\n\ntype CheckoutItem = {\n  sku?: unknown;\n  quantity?: unknown;\n};\n\ntype ShippingAddress = {\n  name?: unknown;\n  phone?: unknown;\n  address?: {\n    postal_code?: unknown;\n    state?: unknown;\n    city?: unknown;\n    line1?: unknown;\n    line2?: unknown;\n  };\n};\n\nfunction parseJson<T>(value: string | null): T | null {\n  if (!value) return null;\n  try {\n    return JSON.parse(value) as T;\n  } catch {\n    return null;\n  }\n}\n\nfunction formatItems(itemsJson: string | null, names: Record<string, string>) {\n  const items = parseJson<CheckoutItem[]>(itemsJson);\n  if (!Array.isArray(items) || items.length === 0) return { labels: \"\", quantity: 0 };\n\n  const labels = items.map((item) => {\n    const sku = typeof item.sku === \"string\" ? item.sku : \"\";\n    const quantity = typeof item.quantity === \"number\" ? item.quantity : 0;\n    const name = sku && names[sku] ? names[sku] : sku || \"商品\";\n    return `${name} x ${quantity}`;\n  });\n  const quantity = items.reduce((sum, item) => {\n    return sum + (typeof item.quantity === \"number\" ? item.quantity : 0);\n  }, 0);\n  return { labels: labels.join(\"; \"), quantity };\n}\n\nfunction formatAddress(addressJson: string | null) {\n  const shipping = parseJson<ShippingAddress>(addressJson);\n  if (!shipping?.address) return { postal: \"\", address: \"\" };\n\n  const address = shipping.address;\n  const parts = [address.state, address.city, address.line1, address.line2]\n    .filter((part): part is string => typeof part === \"string\" && part.trim() !== \"\")\n    .map((part) => part.trim());\n  return {\n    postal: typeof address.postal_code === \"string\" ? address.postal_code : \"\",\n    address: parts.join(\" \"),\n  };\n}\n\nfunction formatNotes(customFieldsJson: string | null) {\n  const fields = parseJson<Record<string, unknown>>(customFieldsJson);\n  if (!fields) return \"\";\n  return Object.entries(fields)\n    .flatMap(([key, value]) => {\n      if (typeof value !== \"string\" || !value.trim()) return [];\n      return [`${key}: ${value.trim()}`];\n    })\n    .join(\"; \");\n}\n\nexport function createOrdersExportHandler(): AdminApiHandler {\n  return async ({ request }) => {\n    const auth = await authenticateAdmin(request);\n    if (auth instanceof Response) return auth;\n\n    const url = new URL(request.url);\n    const status = url.searchParams.get(\"status\") ?? \"pending\";\n    if (!(EXPORTABLE_STATUSES as readonly string[]).includes(status)) {\n      return jsonError(\"Invalid status\", 400);\n    }\n\n    const { DB: db } = getServerEnv();\n    if (!db) return jsonError(\"DB not available\", 503);\n\n    const result = await db\n      .prepare(\n        `SELECT id, email, name, phone, items_json, amount, shipping, address_json,\n              custom_fields_json, status, tracking_number, carrier, created_at\n       FROM orders\n       WHERE status = ?\n       ORDER BY created_at ASC`,\n      )\n      .bind(status)\n      .all<OrderExportRow>();\n\n    const names = await loadProductNamesFromDb(db);\n    const csv = toCsv(\n      [\n        \"id\",\n        \"created_at\",\n        \"name\",\n        \"email\",\n        \"phone\",\n        \"postal_code\",\n        \"address\",\n        \"items\",\n        \"quantity\",\n        \"amount\",\n        \"shipping\",\n        \"notes\",\n        \"tracking_number\",\n        \"carrier\",\n        \"status\",\n      ],\n      (result.results ?? []).map((row: OrderExportRow) => {\n        const items = formatItems(row.items_json, names);\n        const address = formatAddress(row.address_json);\n        return [\n          row.id,\n          row.created_at ?? \"\",\n          row.name ?? \"\",\n          row.email,\n          row.phone ?? \"\",\n          address.postal,\n          address.address,\n          items.labels,\n          items.quantity,\n          row.amount ?? \"\",\n          row.shipping ?? \"\",\n          formatNotes(row.custom_fields_json),\n          row.tracking_number ?? \"\",\n          row.carrier ?? \"\",\n          row.status,\n        ];\n      }),\n    );\n\n    return csvAttachment(`orders-${status}.csv`, csv);\n  };\n}\n","import { markShipped, writeAuditLog } from \"@umec/core/db\";\nimport { getServerEnv } from \"@umec/core/env\";\nimport { authenticateAdmin } from \"../access.js\";\nimport { parseOptionalCarrier } from \"../carriers.js\";\nimport { jsonError, jsonOk, readJsonObject, type AdminApiHandler } from \"../http.js\";\n\nexport function createMarkShippedHandler(): AdminApiHandler {\n  return async ({ request }) => {\n    const auth = await authenticateAdmin(request);\n    if (auth instanceof Response) return auth;\n\n    const payload = await readJsonObject(request);\n    if (payload instanceof Response) return payload;\n\n    const { id } = payload;\n    if (!id || typeof id !== \"string\") {\n      return jsonError(\"Invalid id\", 400);\n    }\n\n    const carrier = parseOptionalCarrier(payload.carrier);\n    if (carrier && typeof carrier === \"object\" && \"error\" in carrier) {\n      return jsonError(carrier.error, 400);\n    }\n\n    const trackingNumber =\n      payload.tracking_number === undefined ||\n      payload.tracking_number === null ||\n      payload.tracking_number === \"\"\n        ? null\n        : typeof payload.tracking_number === \"string\"\n          ? payload.tracking_number.trim()\n          : null;\n    if (\n      payload.tracking_number !== undefined &&\n      payload.tracking_number !== null &&\n      payload.tracking_number !== \"\" &&\n      trackingNumber === null\n    ) {\n      return jsonError(\"Invalid tracking_number\", 400);\n    }\n\n    const { DB: db } = getServerEnv();\n    if (!db) return jsonError(\"DB not available\", 503);\n\n    const result = await markShipped(db, id, {\n      trackingNumber,\n      carrier,\n    });\n\n    if (result === \"not_pending\") {\n      return jsonError(\"Order is not pending\", 409);\n    }\n\n    console.log(\n      JSON.stringify({\n        type: \"admin.audit\",\n        action: \"mark-shipped\",\n        actor: auth.email,\n        targetId: id,\n      }),\n    );\n\n    await writeAuditLog(db, {\n      entityType: \"order\",\n      entityId: id,\n      action: \"mark-shipped\",\n      adminEmail: auth.email,\n      actor: \"human\",\n      detail: { tracking_number: trackingNumber, carrier },\n    });\n\n    return jsonOk({ ok: true });\n  };\n}\n","import { markShipped, writeAuditLog } from \"@umec/core/db\";\nimport { getServerEnv } from \"@umec/core/env\";\nimport { authenticateAdmin } from \"../access.js\";\nimport { parseOptionalCarrier } from \"../carriers.js\";\nimport { jsonError, jsonOk, readJsonObject, type AdminApiHandler } from \"../http.js\";\n\nexport const MAX_BULK_SHIP = 100;\n\nexport function createMarkShippedBulkHandler(): AdminApiHandler {\n  return async ({ request }) => {\n    const auth = await authenticateAdmin(request);\n    if (auth instanceof Response) return auth;\n\n    const payload = await readJsonObject(request);\n    if (payload instanceof Response) return payload;\n\n    const { ids } = payload;\n    if (!Array.isArray(ids) || ids.length === 0 || !ids.every((id) => typeof id === \"string\" && id)) {\n      return jsonError(\"Invalid ids\", 400);\n    }\n    if (ids.length > MAX_BULK_SHIP) {\n      return jsonError(`ids must contain at most ${MAX_BULK_SHIP} items`, 400);\n    }\n\n    const carrier = parseOptionalCarrier(payload.carrier);\n    if (carrier && typeof carrier === \"object\" && \"error\" in carrier) {\n      return jsonError(carrier.error, 400);\n    }\n\n    const trackingNumber =\n      typeof payload.tracking_number === \"string\" && payload.tracking_number.trim()\n        ? payload.tracking_number.trim()\n        : null;\n\n    const { DB: db } = getServerEnv();\n    if (!db) return jsonError(\"DB not available\", 503);\n\n    const uniqueIds = [...new Set(ids)];\n    const shipped: string[] = [];\n    const skipped: string[] = [];\n    const shippedAt = Date.now();\n\n    for (const id of uniqueIds) {\n      const result = await markShipped(db, id, {\n        trackingNumber,\n        carrier,\n        shippedAt,\n      });\n\n      if (result === \"not_pending\") {\n        skipped.push(id);\n        continue;\n      }\n\n      shipped.push(id);\n      console.log(\n        JSON.stringify({\n          type: \"admin.audit\",\n          action: \"mark-shipped\",\n          actor: auth.email,\n          targetId: id,\n        }),\n      );\n      await writeAuditLog(db, {\n        entityType: \"order\",\n        entityId: id,\n        action: \"mark-shipped\",\n        adminEmail: auth.email,\n        actor: \"human\",\n        detail: { tracking_number: trackingNumber, carrier, bulk: true },\n      });\n    }\n\n    return jsonOk({ shipped, skipped });\n  };\n}\n","import type { OrdersRow } from \"@umec/core/db\";\nimport { getServerEnv } from \"@umec/core/env\";\nimport { requireAdminAuth } from \"../access.js\";\nimport { CARRIER_LABELS } from \"../carriers.js\";\nimport { loadProductNamesFromDb } from \"../products.js\";\n\nexport type CheckoutItem = {\n  sku?: unknown;\n  quantity?: unknown;\n};\n\nexport type ShippingAddress = {\n  name?: unknown;\n  phone?: unknown;\n  address?: {\n    postal_code?: unknown;\n    state?: unknown;\n    city?: unknown;\n    line1?: unknown;\n    line2?: unknown;\n    country?: unknown;\n  };\n};\n\nexport type OrdersAdminPageData = {\n  orders: OrdersRow[];\n  names: Record<string, string>;\n  dbNotice: string;\n  pendingCount: number;\n};\n\nexport type OrdersAdminPageLoad = { response: Response } | OrdersAdminPageData;\n\nfunction parseJson<T>(value: string | null): T | null {\n  if (!value) return null;\n  try {\n    return JSON.parse(value) as T;\n  } catch {\n    return null;\n  }\n}\n\nexport function formatOrderDate(value: number | string | null) {\n  if (value == null || value === \"\") return \"-\";\n  const timestamp = typeof value === \"string\" ? Number(value) : value;\n  if (!Number.isFinite(timestamp)) return \"-\";\n\n  return new Intl.DateTimeFormat(\"ja-JP\", {\n    dateStyle: \"medium\",\n    timeStyle: \"short\",\n    timeZone: \"Asia/Tokyo\",\n  }).format(new Date(timestamp));\n}\n\nexport function formatYen(value: number | null) {\n  if (value == null) return \"-\";\n  return new Intl.NumberFormat(\"ja-JP\", {\n    style: \"currency\",\n    currency: \"JPY\",\n    maximumFractionDigits: 0,\n  }).format(value);\n}\n\nexport function formatOrderItems(itemsJson: string | null, names: Record<string, string>) {\n  const items = parseJson<CheckoutItem[]>(itemsJson);\n  if (!Array.isArray(items) || items.length === 0) return [\"-\"];\n\n  return items.map((item) => {\n    const sku = typeof item.sku === \"string\" ? item.sku : \"\";\n    const quantity = typeof item.quantity === \"number\" ? item.quantity : 0;\n    const productName = sku && names[sku] ? names[sku] : sku || \"商品\";\n    return `${productName} x ${quantity}`;\n  });\n}\n\nfunction stringPart(value: unknown) {\n  return typeof value === \"string\" && value.trim() ? value.trim() : \"\";\n}\n\nexport function formatOrderAddress(addressJson: string | null) {\n  const shipping = parseJson<ShippingAddress>(addressJson);\n  if (!shipping?.address) return [\"-\"];\n\n  const address = shipping.address;\n  const postalCode = stringPart(address.postal_code);\n  const lines = [\n    postalCode ? `〒${postalCode}` : \"\",\n    stringPart(address.state) + stringPart(address.city),\n    stringPart(address.line1),\n    stringPart(address.line2),\n  ].filter(Boolean);\n\n  return lines.length > 0 ? lines : [\"-\"];\n}\n\nexport function formatCustomFields(customFieldsJson: string | null): { key: string; value: string }[] {\n  const cf = parseJson<Record<string, unknown>>(customFieldsJson);\n  if (!cf) return [];\n\n  return Object.entries(cf).flatMap(([key, value]) => {\n    if (typeof value !== \"string\" || !value.trim()) return [];\n    return [{ key, value: value.trim() }];\n  });\n}\n\nexport function carrierLabel(code: string | null) {\n  if (!code) return \"\";\n  return (CARRIER_LABELS as Record<string, string>)[code] ?? code;\n}\n\nexport async function loadOrdersAdminPage(request: Request): Promise<OrdersAdminPageLoad> {\n  const denied = await requireAdminAuth(request);\n  if (denied) return { response: denied };\n\n  const { DB: db } = getServerEnv();\n  let orders: OrdersRow[] = [];\n  let names: Record<string, string> = {};\n  let dbNotice = \"\";\n\n  if (db) {\n    try {\n      const result = await db\n        .prepare(\n          `SELECT * FROM orders ORDER BY\n          CASE WHEN status = 'pending' THEN 0 ELSE 1 END,\n          created_at DESC\n        LIMIT 100`,\n        )\n        .all<OrdersRow>();\n      orders = result.results ?? [];\n      names = await loadProductNamesFromDb(db);\n    } catch (error) {\n      console.error(\"[admin/orders] order query failed:\", error);\n      dbNotice = \"Orders could not be loaded.\";\n    }\n  } else {\n    dbNotice = \"DB binding is not available.\";\n  }\n\n  const pendingCount = orders.filter((order) => order.status === \"pending\").length;\n  return { orders, names, dbNotice, pendingCount };\n}\n","import { getOrder, updateTracking, writeAuditLog } from \"@umec/core/db\";\nimport { getServerEnv } from \"@umec/core/env\";\nimport { authenticateAdmin } from \"../access.js\";\nimport { parseOptionalCarrier } from \"../carriers.js\";\nimport { jsonError, jsonOk, readJsonObject, type AdminApiHandler } from \"../http.js\";\n\nexport function createUpdateTrackingHandler(): AdminApiHandler {\n  return async ({ request }) => {\n    const auth = await authenticateAdmin(request);\n    if (auth instanceof Response) return auth;\n\n    const payload = await readJsonObject(request);\n    if (payload instanceof Response) return payload;\n\n    const { id, tracking_number: trackingNumber } = payload;\n    if (!id || typeof id !== \"string\") return jsonError(\"Invalid id\", 400);\n    if (typeof trackingNumber !== \"string\" || trackingNumber.trim() === \"\") {\n      return jsonError(\"Invalid tracking_number\", 400);\n    }\n\n    const carrier = parseOptionalCarrier(payload.carrier);\n    if (carrier && typeof carrier === \"object\" && \"error\" in carrier) {\n      return jsonError(carrier.error, 400);\n    }\n\n    const { DB: db } = getServerEnv();\n    if (!db) return jsonError(\"DB not available\", 503);\n\n    const existing = await getOrder(db, id);\n    if (!existing) return jsonError(\"Order not found\", 404);\n\n    const nextTracking = trackingNumber.trim();\n    const nextCarrier = carrier === null ? existing.carrier : carrier;\n\n    const result = await updateTracking(db, id, nextTracking, nextCarrier);\n    if (result === \"not_found\") return jsonError(\"Order not found\", 404);\n\n    console.log(\n      JSON.stringify({\n        type: \"admin.audit\",\n        action: \"update-tracking\",\n        actor: auth.email,\n        targetId: id,\n        tracking_number: nextTracking,\n        carrier: nextCarrier,\n      }),\n    );\n\n    await writeAuditLog(db, {\n      entityType: \"order\",\n      entityId: id,\n      action: \"update-tracking\",\n      adminEmail: auth.email,\n      actor: \"human\",\n      detail: {\n        before: { tracking_number: existing.tracking_number, carrier: existing.carrier },\n        after: { tracking_number: nextTracking, carrier: nextCarrier },\n      },\n    });\n\n    return jsonOk({\n      ok: true,\n      id,\n      tracking_number: nextTracking,\n      carrier: nextCarrier,\n    });\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AACA,SAAS,oBAAoB;AAM7B,IAAM,sBAAsB,CAAC,WAAW,WAAW,YAAY,WAAW;AAoC1E,SAAS,UAAa,OAAgC;AACpD,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,WAAO,KAAK,MAAM,KAAK;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAY,WAA0B,OAA+B;AAC5E,QAAM,QAAQ,UAA0B,SAAS;AACjD,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,EAAG,QAAO,EAAE,QAAQ,IAAI,UAAU,EAAE;AAElF,QAAM,SAAS,MAAM,IAAI,CAAC,SAAS;AACjC,UAAM,MAAM,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AACtD,UAAMA,YAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,UAAM,OAAO,OAAO,MAAM,GAAG,IAAI,MAAM,GAAG,IAAI,OAAO;AACrD,WAAO,GAAG,IAAI,MAAMA,SAAQ;AAAA,EAC9B,CAAC;AACD,QAAM,WAAW,MAAM,OAAO,CAAC,KAAK,SAAS;AAC3C,WAAO,OAAO,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AAAA,EACpE,GAAG,CAAC;AACJ,SAAO,EAAE,QAAQ,OAAO,KAAK,IAAI,GAAG,SAAS;AAC/C;AAEA,SAAS,cAAc,aAA4B;AACjD,QAAM,WAAW,UAA2B,WAAW;AACvD,MAAI,CAAC,UAAU,QAAS,QAAO,EAAE,QAAQ,IAAI,SAAS,GAAG;AAEzD,QAAM,UAAU,SAAS;AACzB,QAAM,QAAQ,CAAC,QAAQ,OAAO,QAAQ,MAAM,QAAQ,OAAO,QAAQ,KAAK,EACrE,OAAO,CAAC,SAAyB,OAAO,SAAS,YAAY,KAAK,KAAK,MAAM,EAAE,EAC/E,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;AAC5B,SAAO;AAAA,IACL,QAAQ,OAAO,QAAQ,gBAAgB,WAAW,QAAQ,cAAc;AAAA,IACxE,SAAS,MAAM,KAAK,GAAG;AAAA,EACzB;AACF;AAEA,SAAS,YAAY,kBAAiC;AACpD,QAAM,SAAS,UAAmC,gBAAgB;AAClE,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,OAAO,QAAQ,MAAM,EACzB,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AACzB,QAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,EAAG,QAAO,CAAC;AACxD,WAAO,CAAC,GAAG,GAAG,KAAK,MAAM,KAAK,CAAC,EAAE;AAAA,EACnC,CAAC,EACA,KAAK,IAAI;AACd;AAEO,SAAS,4BAA6C;AAC3D,SAAO,OAAO,EAAE,QAAQ,MAAM;AAC5B,UAAM,OAAO,MAAM,kBAAkB,OAAO;AAC5C,QAAI,gBAAgB,SAAU,QAAO;AAErC,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,SAAS,IAAI,aAAa,IAAI,QAAQ,KAAK;AACjD,QAAI,CAAE,oBAA0C,SAAS,MAAM,GAAG;AAChE,aAAO,UAAU,kBAAkB,GAAG;AAAA,IACxC;AAEA,UAAM,EAAE,IAAI,GAAG,IAAI,aAAa;AAChC,QAAI,CAAC,GAAI,QAAO,UAAU,oBAAoB,GAAG;AAEjD,UAAM,SAAS,MAAM,GAClB;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKF,EACC,KAAK,MAAM,EACX,IAAoB;AAEvB,UAAM,QAAQ,MAAM,uBAAuB,EAAE;AAC7C,UAAM,MAAM;AAAA,MACV;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,OACC,OAAO,WAAW,CAAC,GAAG,IAAI,CAAC,QAAwB;AAClD,cAAM,QAAQ,YAAY,IAAI,YAAY,KAAK;AAC/C,cAAM,UAAU,cAAc,IAAI,YAAY;AAC9C,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,IAAI,cAAc;AAAA,UAClB,IAAI,QAAQ;AAAA,UACZ,IAAI;AAAA,UACJ,IAAI,SAAS;AAAA,UACb,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,MAAM;AAAA,UACN,IAAI,UAAU;AAAA,UACd,IAAI,YAAY;AAAA,UAChB,YAAY,IAAI,kBAAkB;AAAA,UAClC,IAAI,mBAAmB;AAAA,UACvB,IAAI,WAAW;AAAA,UACf,IAAI;AAAA,QACN;AAAA,MACF,CAAC;AAAA,IACH;AAEA,WAAO,cAAc,UAAU,MAAM,QAAQ,GAAG;AAAA,EAClD;AACF;;;AClKA,SAAS,aAAa,qBAAqB;AAC3C,SAAS,gBAAAC,qBAAoB;AAKtB,SAAS,2BAA4C;AAC1D,SAAO,OAAO,EAAE,QAAQ,MAAM;AAC5B,UAAM,OAAO,MAAM,kBAAkB,OAAO;AAC5C,QAAI,gBAAgB,SAAU,QAAO;AAErC,UAAM,UAAU,MAAM,eAAe,OAAO;AAC5C,QAAI,mBAAmB,SAAU,QAAO;AAExC,UAAM,EAAE,GAAG,IAAI;AACf,QAAI,CAAC,MAAM,OAAO,OAAO,UAAU;AACjC,aAAO,UAAU,cAAc,GAAG;AAAA,IACpC;AAEA,UAAM,UAAU,qBAAqB,QAAQ,OAAO;AACpD,QAAI,WAAW,OAAO,YAAY,YAAY,WAAW,SAAS;AAChE,aAAO,UAAU,QAAQ,OAAO,GAAG;AAAA,IACrC;AAEA,UAAM,iBACJ,QAAQ,oBAAoB,UAC5B,QAAQ,oBAAoB,QAC5B,QAAQ,oBAAoB,KACxB,OACA,OAAO,QAAQ,oBAAoB,WACjC,QAAQ,gBAAgB,KAAK,IAC7B;AACR,QACE,QAAQ,oBAAoB,UAC5B,QAAQ,oBAAoB,QAC5B,QAAQ,oBAAoB,MAC5B,mBAAmB,MACnB;AACA,aAAO,UAAU,2BAA2B,GAAG;AAAA,IACjD;AAEA,UAAM,EAAE,IAAI,GAAG,IAAIC,cAAa;AAChC,QAAI,CAAC,GAAI,QAAO,UAAU,oBAAoB,GAAG;AAEjD,UAAM,SAAS,MAAM,YAAY,IAAI,IAAI;AAAA,MACvC;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,WAAW,eAAe;AAC5B,aAAO,UAAU,wBAAwB,GAAG;AAAA,IAC9C;AAEA,YAAQ;AAAA,MACN,KAAK,UAAU;AAAA,QACb,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,OAAO,KAAK;AAAA,QACZ,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,UAAM,cAAc,IAAI;AAAA,MACtB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,YAAY,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,QAAQ,EAAE,iBAAiB,gBAAgB,QAAQ;AAAA,IACrD,CAAC;AAED,WAAO,OAAO,EAAE,IAAI,KAAK,CAAC;AAAA,EAC5B;AACF;;;ACzEA,SAAS,eAAAC,cAAa,iBAAAC,sBAAqB;AAC3C,SAAS,gBAAAC,qBAAoB;AAKtB,IAAM,gBAAgB;AAEtB,SAAS,+BAAgD;AAC9D,SAAO,OAAO,EAAE,QAAQ,MAAM;AAC5B,UAAM,OAAO,MAAM,kBAAkB,OAAO;AAC5C,QAAI,gBAAgB,SAAU,QAAO;AAErC,UAAM,UAAU,MAAM,eAAe,OAAO;AAC5C,QAAI,mBAAmB,SAAU,QAAO;AAExC,UAAM,EAAE,IAAI,IAAI;AAChB,QAAI,CAAC,MAAM,QAAQ,GAAG,KAAK,IAAI,WAAW,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,OAAO,OAAO,YAAY,EAAE,GAAG;AAC/F,aAAO,UAAU,eAAe,GAAG;AAAA,IACrC;AACA,QAAI,IAAI,SAAS,eAAe;AAC9B,aAAO,UAAU,4BAA4B,aAAa,UAAU,GAAG;AAAA,IACzE;AAEA,UAAM,UAAU,qBAAqB,QAAQ,OAAO;AACpD,QAAI,WAAW,OAAO,YAAY,YAAY,WAAW,SAAS;AAChE,aAAO,UAAU,QAAQ,OAAO,GAAG;AAAA,IACrC;AAEA,UAAM,iBACJ,OAAO,QAAQ,oBAAoB,YAAY,QAAQ,gBAAgB,KAAK,IACxE,QAAQ,gBAAgB,KAAK,IAC7B;AAEN,UAAM,EAAE,IAAI,GAAG,IAAIC,cAAa;AAChC,QAAI,CAAC,GAAI,QAAO,UAAU,oBAAoB,GAAG;AAEjD,UAAM,YAAY,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC;AAClC,UAAM,UAAoB,CAAC;AAC3B,UAAM,UAAoB,CAAC;AAC3B,UAAM,YAAY,KAAK,IAAI;AAE3B,eAAW,MAAM,WAAW;AAC1B,YAAM,SAAS,MAAMC,aAAY,IAAI,IAAI;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,UAAI,WAAW,eAAe;AAC5B,gBAAQ,KAAK,EAAE;AACf;AAAA,MACF;AAEA,cAAQ,KAAK,EAAE;AACf,cAAQ;AAAA,QACN,KAAK,UAAU;AAAA,UACb,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO,KAAK;AAAA,UACZ,UAAU;AAAA,QACZ,CAAC;AAAA,MACH;AACA,YAAMC,eAAc,IAAI;AAAA,QACtB,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,YAAY,KAAK;AAAA,QACjB,OAAO;AAAA,QACP,QAAQ,EAAE,iBAAiB,gBAAgB,SAAS,MAAM,KAAK;AAAA,MACjE,CAAC;AAAA,IACH;AAEA,WAAO,OAAO,EAAE,SAAS,QAAQ,CAAC;AAAA,EACpC;AACF;;;AC1EA,SAAS,gBAAAC,qBAAoB;AAgC7B,SAASC,WAAa,OAAgC;AACpD,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,WAAO,KAAK,MAAM,KAAK;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,gBAAgB,OAA+B;AAC7D,MAAI,SAAS,QAAQ,UAAU,GAAI,QAAO;AAC1C,QAAM,YAAY,OAAO,UAAU,WAAW,OAAO,KAAK,IAAI;AAC9D,MAAI,CAAC,OAAO,SAAS,SAAS,EAAG,QAAO;AAExC,SAAO,IAAI,KAAK,eAAe,SAAS;AAAA,IACtC,WAAW;AAAA,IACX,WAAW;AAAA,IACX,UAAU;AAAA,EACZ,CAAC,EAAE,OAAO,IAAI,KAAK,SAAS,CAAC;AAC/B;AAEO,SAAS,UAAU,OAAsB;AAC9C,MAAI,SAAS,KAAM,QAAO;AAC1B,SAAO,IAAI,KAAK,aAAa,SAAS;AAAA,IACpC,OAAO;AAAA,IACP,UAAU;AAAA,IACV,uBAAuB;AAAA,EACzB,CAAC,EAAE,OAAO,KAAK;AACjB;AAEO,SAAS,iBAAiB,WAA0B,OAA+B;AACxF,QAAM,QAAQA,WAA0B,SAAS;AACjD,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,EAAG,QAAO,CAAC,GAAG;AAE5D,SAAO,MAAM,IAAI,CAAC,SAAS;AACzB,UAAM,MAAM,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AACtD,UAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,UAAM,cAAc,OAAO,MAAM,GAAG,IAAI,MAAM,GAAG,IAAI,OAAO;AAC5D,WAAO,GAAG,WAAW,MAAM,QAAQ;AAAA,EACrC,CAAC;AACH;AAEA,SAAS,WAAW,OAAgB;AAClC,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,MAAM,KAAK,IAAI;AACpE;AAEO,SAAS,mBAAmB,aAA4B;AAC7D,QAAM,WAAWA,WAA2B,WAAW;AACvD,MAAI,CAAC,UAAU,QAAS,QAAO,CAAC,GAAG;AAEnC,QAAM,UAAU,SAAS;AACzB,QAAM,aAAa,WAAW,QAAQ,WAAW;AACjD,QAAM,QAAQ;AAAA,IACZ,aAAa,SAAI,UAAU,KAAK;AAAA,IAChC,WAAW,QAAQ,KAAK,IAAI,WAAW,QAAQ,IAAI;AAAA,IACnD,WAAW,QAAQ,KAAK;AAAA,IACxB,WAAW,QAAQ,KAAK;AAAA,EAC1B,EAAE,OAAO,OAAO;AAEhB,SAAO,MAAM,SAAS,IAAI,QAAQ,CAAC,GAAG;AACxC;AAEO,SAAS,mBAAmB,kBAAmE;AACpG,QAAM,KAAKA,WAAmC,gBAAgB;AAC9D,MAAI,CAAC,GAAI,QAAO,CAAC;AAEjB,SAAO,OAAO,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAClD,QAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,EAAG,QAAO,CAAC;AACxD,WAAO,CAAC,EAAE,KAAK,OAAO,MAAM,KAAK,EAAE,CAAC;AAAA,EACtC,CAAC;AACH;AAEO,SAAS,aAAa,MAAqB;AAChD,MAAI,CAAC,KAAM,QAAO;AAClB,SAAQ,eAA0C,IAAI,KAAK;AAC7D;AAEA,eAAsB,oBAAoB,SAAgD;AACxF,QAAM,SAAS,MAAM,iBAAiB,OAAO;AAC7C,MAAI,OAAQ,QAAO,EAAE,UAAU,OAAO;AAEtC,QAAM,EAAE,IAAI,GAAG,IAAIC,cAAa;AAChC,MAAI,SAAsB,CAAC;AAC3B,MAAI,QAAgC,CAAC;AACrC,MAAI,WAAW;AAEf,MAAI,IAAI;AACN,QAAI;AACF,YAAM,SAAS,MAAM,GAClB;AAAA,QACC;AAAA;AAAA;AAAA;AAAA,MAIF,EACC,IAAe;AAClB,eAAS,OAAO,WAAW,CAAC;AAC5B,cAAQ,MAAM,uBAAuB,EAAE;AAAA,IACzC,SAAS,OAAO;AACd,cAAQ,MAAM,sCAAsC,KAAK;AACzD,iBAAW;AAAA,IACb;AAAA,EACF,OAAO;AACL,eAAW;AAAA,EACb;AAEA,QAAM,eAAe,OAAO,OAAO,CAAC,UAAU,MAAM,WAAW,SAAS,EAAE;AAC1E,SAAO,EAAE,QAAQ,OAAO,UAAU,aAAa;AACjD;;;AC7IA,SAAS,UAAU,gBAAgB,iBAAAC,sBAAqB;AACxD,SAAS,gBAAAC,qBAAoB;AAKtB,SAAS,8BAA+C;AAC7D,SAAO,OAAO,EAAE,QAAQ,MAAM;AAC5B,UAAM,OAAO,MAAM,kBAAkB,OAAO;AAC5C,QAAI,gBAAgB,SAAU,QAAO;AAErC,UAAM,UAAU,MAAM,eAAe,OAAO;AAC5C,QAAI,mBAAmB,SAAU,QAAO;AAExC,UAAM,EAAE,IAAI,iBAAiB,eAAe,IAAI;AAChD,QAAI,CAAC,MAAM,OAAO,OAAO,SAAU,QAAO,UAAU,cAAc,GAAG;AACrE,QAAI,OAAO,mBAAmB,YAAY,eAAe,KAAK,MAAM,IAAI;AACtE,aAAO,UAAU,2BAA2B,GAAG;AAAA,IACjD;AAEA,UAAM,UAAU,qBAAqB,QAAQ,OAAO;AACpD,QAAI,WAAW,OAAO,YAAY,YAAY,WAAW,SAAS;AAChE,aAAO,UAAU,QAAQ,OAAO,GAAG;AAAA,IACrC;AAEA,UAAM,EAAE,IAAI,GAAG,IAAIC,cAAa;AAChC,QAAI,CAAC,GAAI,QAAO,UAAU,oBAAoB,GAAG;AAEjD,UAAM,WAAW,MAAM,SAAS,IAAI,EAAE;AACtC,QAAI,CAAC,SAAU,QAAO,UAAU,mBAAmB,GAAG;AAEtD,UAAM,eAAe,eAAe,KAAK;AACzC,UAAM,cAAc,YAAY,OAAO,SAAS,UAAU;AAE1D,UAAM,SAAS,MAAM,eAAe,IAAI,IAAI,cAAc,WAAW;AACrE,QAAI,WAAW,YAAa,QAAO,UAAU,mBAAmB,GAAG;AAEnE,YAAQ;AAAA,MACN,KAAK,UAAU;AAAA,QACb,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,OAAO,KAAK;AAAA,QACZ,UAAU;AAAA,QACV,iBAAiB;AAAA,QACjB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAEA,UAAMC,eAAc,IAAI;AAAA,MACtB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,YAAY,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,QAAQ;AAAA,QACN,QAAQ,EAAE,iBAAiB,SAAS,iBAAiB,SAAS,SAAS,QAAQ;AAAA,QAC/E,OAAO,EAAE,iBAAiB,cAAc,SAAS,YAAY;AAAA,MAC/D;AAAA,IACF,CAAC;AAED,WAAO,OAAO;AAAA,MACZ,IAAI;AAAA,MACJ;AAAA,MACA,iBAAiB;AAAA,MACjB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;","names":["quantity","getServerEnv","getServerEnv","markShipped","writeAuditLog","getServerEnv","getServerEnv","markShipped","writeAuditLog","getServerEnv","parseJson","getServerEnv","writeAuditLog","getServerEnv","getServerEnv","writeAuditLog"]}

package/dist/chunk-TIK7KC4O.js

@@ -0,0 +1,210 @@
+import {
+  authenticateAdmin,
+  requireAdminAuth
+} from "./chunk-W2O6EQWT.js";
+import {
+  jsonError,
+  jsonOk,
+  readJsonObject
+} from "./chunk-E7ATMICY.js";
+import {
+  isFieldError,
+  parseCreateProductFields,
+  parseSku,
+  parseUpdateProductFields
+} from "./chunk-ODK4R57S.js";
+import {
+  listProductRows,
+  parseImagesJson
+} from "./chunk-ZEA6G75Z.js";
+
+// src/catalog/create-product.ts
+import { createProduct, writeAuditLog } from "@umec/core/db";
+import { getServerEnv } from "@umec/core/env";
+function createCreateProductHandler() {
+  return async ({ request }) => {
+    const auth = await authenticateAdmin(request);
+    if (auth instanceof Response) return auth;
+    const payload = await readJsonObject(request);
+    if (payload instanceof Response) return payload;
+    const sku = parseSku(payload.sku);
+    if (isFieldError(sku)) return jsonError(sku.error, 400);
+    const fields = parseCreateProductFields(payload);
+    if (isFieldError(fields)) return jsonError(fields.error, 400);
+    const { DB: db } = getServerEnv();
+    if (!db) return jsonError("DB not available", 503);
+    try {
+      const result = await createProduct(db, sku, fields, auth.email);
+      if (result === "conflict") return jsonError("SKU already exists", 409);
+    } catch (error) {
+      console.error("[create-product] insert failed:", error);
+      return jsonError("Failed to create product", 500);
+    }
+    console.log(
+      JSON.stringify({
+        type: "admin.audit",
+        action: "create-product",
+        actor: auth.email,
+        targetId: sku
+      })
+    );
+    await writeAuditLog(db, {
+      entityType: "product",
+      entityId: sku,
+      action: "create-product",
+      adminEmail: auth.email,
+      actor: "human",
+      detail: {
+        name: fields.name,
+        price: fields.price,
+        shipping_units: fields.shippingUnits,
+        active: fields.active
+      }
+    });
+    return jsonOk({
+      ok: true,
+      sku,
+      name: fields.name,
+      price: fields.price,
+      active: fields.active
+    });
+  };
+}
+
+// src/catalog/discontinue-product.ts
+import { discontinueProduct, writeAuditLog as writeAuditLog2 } from "@umec/core/db";
+import { getServerEnv as getServerEnv2 } from "@umec/core/env";
+function createDiscontinueProductHandler() {
+  return async ({ request }) => {
+    const auth = await authenticateAdmin(request);
+    if (auth instanceof Response) return auth;
+    const payload = await readJsonObject(request);
+    if (payload instanceof Response) return payload;
+    const sku = parseSku(payload.sku);
+    if (isFieldError(sku)) return jsonError(sku.error, 400);
+    const { DB: db } = getServerEnv2();
+    if (!db) return jsonError("DB not available", 503);
+    const result = await discontinueProduct(db, sku, auth.email);
+    if (result === "not_found") return jsonError("SKU not found", 404);
+    if (result === "already_inactive") {
+      return jsonOk({ ok: true, sku, active: 0 });
+    }
+    console.log(
+      JSON.stringify({
+        type: "admin.audit",
+        action: "discontinue-product",
+        actor: auth.email,
+        targetId: sku
+      })
+    );
+    await writeAuditLog2(db, {
+      entityType: "product",
+      entityId: sku,
+      action: "discontinue-product",
+      adminEmail: auth.email,
+      actor: "human",
+      detail: { before: { active: 1 }, after: { active: 0 } }
+    });
+    return jsonOk({ ok: true, sku, active: 0 });
+  };
+}
+
+// src/catalog/page.ts
+import { getServerEnv as getServerEnv3 } from "@umec/core/env";
+function formatYen(value) {
+  return new Intl.NumberFormat("ja-JP", {
+    style: "currency",
+    currency: "JPY",
+    maximumFractionDigits: 0
+  }).format(value);
+}
+function imagesText(row) {
+  return parseImagesJson(row.images_json).join("\n");
+}
+async function loadCatalogAdminPage(request) {
+  const denied = await requireAdminAuth(request);
+  if (denied) return { response: denied };
+  const { DB: db } = getServerEnv3();
+  let products = [];
+  let dbNotice = "";
+  if (db) {
+    try {
+      const rows = await listProductRows(db, { includeInactive: true });
+      const stockResult = await db.prepare("SELECT sku, stock FROM inventory").all();
+      const stockMap = new Map(
+        (stockResult.results ?? []).map((row) => [row.sku, row.stock])
+      );
+      products = rows.map((row) => ({ ...row, stock: stockMap.get(row.sku) ?? null }));
+    } catch (error) {
+      console.error("[admin/products] query failed:", error);
+      dbNotice = "Products could not be loaded.";
+    }
+  } else {
+    dbNotice = "DB binding is not available.";
+  }
+  return { products, dbNotice };
+}
+
+// src/catalog/update-product.ts
+import { updateProduct, writeAuditLog as writeAuditLog3 } from "@umec/core/db";
+import { getServerEnv as getServerEnv4 } from "@umec/core/env";
+function createUpdateProductHandler() {
+  return async ({ request }) => {
+    const auth = await authenticateAdmin(request);
+    if (auth instanceof Response) return auth;
+    const payload = await readJsonObject(request);
+    if (payload instanceof Response) return payload;
+    const sku = parseSku(payload.sku);
+    if (isFieldError(sku)) return jsonError(sku.error, 400);
+    const fields = parseUpdateProductFields(payload);
+    if (isFieldError(fields)) return jsonError(fields.error, 400);
+    const { DB: db } = getServerEnv4();
+    if (!db) return jsonError("DB not available", 503);
+    const { result, before, after } = await updateProduct(db, sku, fields, auth.email);
+    if (result === "not_found" || !before || !after) return jsonError("SKU not found", 404);
+    console.log(
+      JSON.stringify({
+        type: "admin.audit",
+        action: "update-product",
+        actor: auth.email,
+        targetId: sku
+      })
+    );
+    await writeAuditLog3(db, {
+      entityType: "product",
+      entityId: sku,
+      action: "update-product",
+      adminEmail: auth.email,
+      actor: "human",
+      detail: {
+        before: {
+          name: before.name,
+          price: before.price,
+          active: before.active
+        },
+        after: {
+          name: after.name,
+          price: after.price,
+          active: after.active
+        }
+      }
+    });
+    return jsonOk({
+      ok: true,
+      sku,
+      name: after.name,
+      price: after.price,
+      active: after.active
+    });
+  };
+}
+
+export {
+  createCreateProductHandler,
+  createDiscontinueProductHandler,
+  formatYen,
+  imagesText,
+  loadCatalogAdminPage,
+  createUpdateProductHandler
+};
+//# sourceMappingURL=chunk-TIK7KC4O.js.map