@umec/core 0.1.0-alpha.0 → 0.1.0-alpha.4

package/dist/checkout.d.ts

@@ -1,11 +1,14 @@
+import Stripe from 'stripe';
 import { UmecProduct, UmecConfig } from './config.js';
 import 'zod';
 
 type CheckoutProductsMap = Record<string, UmecProduct | undefined>;
+type CheckoutCustomField = Stripe.Checkout.SessionCreateParams.CustomField;
 type CheckoutOffer = {
     priceOverrides: Record<string, number>;
     freeShipping: boolean;
-    recipientInfo: boolean;
+    customFields?: CheckoutCustomField[];
+    metadata?: Record<string, string>;
     unitsRemaining?: Map<string, number>;
 };
 type CheckoutOfferUnavailable = {
@@ -17,12 +20,14 @@ type CheckOffer = (offerSlug: string) => Promise<CheckoutOffer | CheckoutOfferUn
 type CheckoutHandlerOptions = {
     products: CheckoutProductsMap;
     shipping?: UmecConfig["shipping"];
+    customFields?: CheckoutCustomField[];
+    metadata?: Record<string, string>;
     checkStock?: CheckStock;
     checkOffer?: CheckOffer;
 };
 type CheckoutHandler = ({ request }: {
     request: Request;
 }) => Promise<Response>;
-declare function createCheckoutHandler({ products, shipping, checkStock, checkOffer, }: CheckoutHandlerOptions): CheckoutHandler;
+declare function createCheckoutHandler({ products, shipping, customFields: staticCustomFields, metadata: staticMetadata, checkStock, checkOffer, }: CheckoutHandlerOptions): CheckoutHandler;
 
-export { type CheckOffer, type CheckStock, type CheckoutHandler, type CheckoutHandlerOptions, type CheckoutOffer, type CheckoutOfferUnavailable, type CheckoutProductsMap, createCheckoutHandler };
+export { type CheckOffer, type CheckStock, type CheckoutCustomField, type CheckoutHandler, type CheckoutHandlerOptions, type CheckoutOffer, type CheckoutOfferUnavailable, type CheckoutProductsMap, createCheckoutHandler };

package/dist/checkout.js

@@ -1,6 +1,6 @@
 import {
   createCheckoutHandler
-} from "./chunk-2NYFCO5V.js";
+} from "./chunk-XSJYDBH7.js";
 import "./chunk-7TJANK6S.js";
 export {
   createCheckoutHandler

package/dist/{chunk-WZFM6R5J.js → chunk-4V4GYE7E.js}

@@ -5,12 +5,6 @@ var SECURITY_HEADERS = {
   "X-Frame-Options": "SAMEORIGIN",
   "Referrer-Policy": "strict-origin-when-cross-origin"
 };
-var LIMITED_DOCS = [
-  {
-    pathPrefix: "/docs/asahiko2026special",
-    expiresAt: Date.parse("2026-08-12T14:59:59.999Z")
-  }
-];
 function withSecurityHeaders(response) {
   const securedResponse = new Response(response.body, response);
   for (const [name, value] of Object.entries(SECURITY_HEADERS)) {
@@ -18,11 +12,11 @@ function withSecurityHeaders(response) {
   }
   return securedResponse;
 }
-function createUmecMiddleware({ maintenanceMode }) {
+function createUmecMiddleware({ maintenanceMode, limitedPages = [] }) {
   return async (context, next) => {
     const path = context.url.pathname;
-    const limitedDoc = LIMITED_DOCS.find(({ pathPrefix }) => path === pathPrefix || path.startsWith(`${pathPrefix}/`));
-    if (limitedDoc && Date.now() > limitedDoc.expiresAt) {
+    const limitedPage = limitedPages.find(({ pathPrefix }) => path === pathPrefix || path.startsWith(`${pathPrefix}/`));
+    if (limitedPage && Date.now() > limitedPage.expiresAt) {
       return withSecurityHeaders(
         new Response("Not found", {
           status: 404,
@@ -44,4 +38,4 @@ function createUmecMiddleware({ maintenanceMode }) {
 export {
   createUmecMiddleware
 };
-//# sourceMappingURL=chunk-WZFM6R5J.js.map
+//# sourceMappingURL=chunk-4V4GYE7E.js.map

package/dist/chunk-4V4GYE7E.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/middleware.ts"],"sourcesContent":["const SECURITY_HEADERS = {\n  \"Strict-Transport-Security\": \"max-age=63072000; includeSubDomains\",\n  \"X-Content-Type-Options\": \"nosniff\",\n  \"X-Frame-Options\": \"SAMEORIGIN\",\n  \"Referrer-Policy\": \"strict-origin-when-cross-origin\",\n};\n\n// Astro の ValidRedirectStatus と同一のユニオンに揃える。\n// number に広げると Astro の APIContext が strict モードで代入不能になる（TS2345）\nexport type UmecRedirectStatus = 300 | 301 | 302 | 303 | 304 | 307 | 308;\n\nexport type UmecMiddlewareContext = {\n  url: URL;\n  redirect: (path: string, status?: UmecRedirectStatus) => Response;\n};\n\nexport type UmecMiddlewareNext = () => Response | Promise<Response>;\n\nexport type UmecMiddleware = (context: UmecMiddlewareContext, next: UmecMiddlewareNext) => Promise<Response>;\n\nexport type UmecLimitedPage = {\n  pathPrefix: string;\n  expiresAt: number;\n};\n\nexport type UmecMiddlewareOptions = {\n  maintenanceMode: boolean;\n  limitedPages?: UmecLimitedPage[];\n};\n\nfunction withSecurityHeaders(response: Response) {\n  const securedResponse = new Response(response.body, response);\n\n  for (const [name, value] of Object.entries(SECURITY_HEADERS)) {\n    securedResponse.headers.set(name, value);\n  }\n\n  return securedResponse;\n}\n\nexport function createUmecMiddleware({ maintenanceMode, limitedPages = [] }: UmecMiddlewareOptions): UmecMiddleware {\n  return async (context, next) => {\n    const path = context.url.pathname;\n\n    const limitedPage = limitedPages.find(({ pathPrefix }) => path === pathPrefix || path.startsWith(`${pathPrefix}/`));\n    if (limitedPage && Date.now() > limitedPage.expiresAt) {\n      return withSecurityHeaders(\n        new Response(\"Not found\", {\n          status: 404,\n          headers: {\n            \"Cache-Control\": \"no-store\",\n          },\n        }),\n      );\n    }\n\n    if (maintenanceMode && path !== \"/maintenance\" && !path.startsWith(\"/api/\")) {\n      const response = context.redirect(\"/maintenance\", 302);\n      response.headers.set(\"Cache-Control\", \"no-store\");\n      return response;\n    }\n\n    return withSecurityHeaders(await next());\n  };\n}\n"],"mappings":";AAAA,IAAM,mBAAmB;AAAA,EACvB,6BAA6B;AAAA,EAC7B,0BAA0B;AAAA,EAC1B,mBAAmB;AAAA,EACnB,mBAAmB;AACrB;AAyBA,SAAS,oBAAoB,UAAoB;AAC/C,QAAM,kBAAkB,IAAI,SAAS,SAAS,MAAM,QAAQ;AAE5D,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,gBAAgB,GAAG;AAC5D,oBAAgB,QAAQ,IAAI,MAAM,KAAK;AAAA,EACzC;AAEA,SAAO;AACT;AAEO,SAAS,qBAAqB,EAAE,iBAAiB,eAAe,CAAC,EAAE,GAA0C;AAClH,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,OAAO,QAAQ,IAAI;AAEzB,UAAM,cAAc,aAAa,KAAK,CAAC,EAAE,WAAW,MAAM,SAAS,cAAc,KAAK,WAAW,GAAG,UAAU,GAAG,CAAC;AAClH,QAAI,eAAe,KAAK,IAAI,IAAI,YAAY,WAAW;AACrD,aAAO;AAAA,QACL,IAAI,SAAS,aAAa;AAAA,UACxB,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,iBAAiB;AAAA,UACnB;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,mBAAmB,SAAS,kBAAkB,CAAC,KAAK,WAAW,OAAO,GAAG;AAC3E,YAAM,WAAW,QAAQ,SAAS,gBAAgB,GAAG;AACrD,eAAS,QAAQ,IAAI,iBAAiB,UAAU;AAChD,aAAO;AAAA,IACT;AAEA,WAAO,oBAAoB,MAAM,KAAK,CAAC;AAAA,EACzC;AACF;","names":[]}

package/dist/{chunk-REUSLO5I.js → chunk-XQ6FQZAZ.js}

@@ -122,6 +122,8 @@ function createWebhookHandler({
       if (typeof v === "string" && v.trim() !== "") cf[f.key] = v.trim();
     }
     const customFields = Object.keys(cf).length > 0 ? cf : null;
+    const { items: _items, offer_slug: _offerSlug, ...externalMetadata } = session.metadata ?? {};
+    const metadata = Object.keys(externalMetadata).length > 0 ? externalMetadata : null;
     const shipping = session.collected_information?.shipping_details ?? session.shipping_details;
     const offerSlugFromMeta = session.metadata?.offer_slug ?? null;
     if (recordOrder) {
@@ -137,6 +139,7 @@ function createWebhookHandler({
         paymentIntent,
         offerSlug: offerSlugFromMeta,
         customFields,
+        metadata,
         createdAt: Date.now()
       });
       if (checkoutItems.length > 0 && decrementStock) await decrementStock(checkoutItems);
@@ -196,4 +199,4 @@ export {
   GET,
   createWebhookHandler
 };
-//# sourceMappingURL=chunk-REUSLO5I.js.map
+//# sourceMappingURL=chunk-XQ6FQZAZ.js.map

package/dist/chunk-XQ6FQZAZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/webhook.ts"],"sourcesContent":["import { Resend } from \"resend\";\nimport Stripe from \"stripe\";\nimport { getServerEnv } from \"./env.js\";\n\nconst STRIPE_API_VERSION = \"2026-05-27.dahlia\";\n\ntype ShippingDetails = NonNullable<\n  NonNullable<Stripe.Checkout.Session[\"collected_information\"]>[\"shipping_details\"]\n>;\ntype SessionWithLegacyShipping = Stripe.Checkout.Session & {\n  shipping_details?: ShippingDetails | null;\n};\nexport type WebhookItem = {\n  sku: string;\n  quantity: number;\n};\nexport type SupportedWebhookEvent =\n  | \"checkout.session.completed\"\n  | \"checkout.session.expired\"\n  | \"charge.refunded\";\n\nexport type OrderEmailLineItem = {\n  description: string | null;\n  quantity: number | null;\n  amount: number | null;\n};\n\nexport type OrderEmailData = {\n  name: string;\n  email: string;\n  phone: string | null;\n  items: OrderEmailLineItem[];\n  totalAmount: number;\n  shippingCostAmount: number | null;\n  shipping: ShippingDetails | null | undefined;\n  customFields: Record<string, string>;\n};\n\nexport type RenderOrderEmail = (order: OrderEmailData) => { subject: string; html: string };\n\nexport type WebhookOrder = {\n  id: string;\n  email: string;\n  name: string | null;\n  phone: string | null;\n  items: WebhookItem[];\n  amount: number;\n  shippingCost: number | null;\n  shippingAddress: ShippingDetails | null | undefined;\n  paymentIntent: string | null;\n  offerSlug: string | null;\n  customFields: Record<string, string> | null;\n  metadata: Record<string, string> | null;\n  createdAt: number;\n};\n\nexport type WebhookRecordedOrder = {\n  items: WebhookItem[];\n  offerSlug: string | null;\n};\n\nexport type WebhookHandlerOptions = {\n  claimEvent?: (eventId: string) => Promise<boolean>;\n  recordRefund?: (paymentIntentId: string) => Promise<WebhookRecordedOrder | null>;\n  recordExpiry?: (sessionId: string) => Promise<WebhookRecordedOrder | null>;\n  recordOrder?: (order: WebhookOrder) => Promise<void>;\n  restoreStock?: (items: WebhookItem[]) => Promise<void>;\n  decrementStock?: (items: WebhookItem[]) => Promise<void>;\n  incrementOfferSold?: (offerSlug: string, items: WebhookItem[]) => Promise<void>;\n  decrementOfferSold?: (offerSlug: string, items: WebhookItem[]) => Promise<void>;\n  renderOrderEmail?: RenderOrderEmail;\n  orderEmailFrom?: string;\n  orderEmailBcc?: string | string[];\n};\n\nexport type WebhookHandler = ({ request }: { request: Request }) => Promise<Response>;\n\nfunction parseCheckoutItems(items: string | null | undefined): WebhookItem[] {\n  if (!items) return [];\n\n  try {\n    const parsed: unknown = JSON.parse(items);\n    if (!Array.isArray(parsed)) return [];\n\n    return parsed.filter((item): item is WebhookItem => {\n      if (typeof item !== \"object\" || item === null) return false;\n      const { sku, quantity } = item as { sku?: unknown; quantity?: unknown };\n      return typeof sku === \"string\" && typeof quantity === \"number\" && Number.isSafeInteger(quantity) && quantity > 0;\n    });\n  } catch {\n    return [];\n  }\n}\n\nfunction isSupportedWebhookEvent(type: string): type is SupportedWebhookEvent {\n  return (\n    type === \"checkout.session.completed\" ||\n    type === \"checkout.session.expired\" ||\n    type === \"charge.refunded\"\n  );\n}\n\nfunction getPaymentIntentId(paymentIntent: string | Stripe.PaymentIntent | null) {\n  if (typeof paymentIntent === \"string\") return paymentIntent;\n  return paymentIntent?.id ?? null;\n}\n\nfunction providerErrorDetails(error: unknown) {\n  if (typeof error !== \"object\" || error === null) return { message: String(error) };\n  const value = error as {\n    name?: unknown;\n    type?: unknown;\n    code?: unknown;\n    statusCode?: unknown;\n    requestId?: unknown;\n    message?: unknown;\n  };\n\n  return {\n    name: typeof value.name === \"string\" ? value.name : undefined,\n    type: typeof value.type === \"string\" ? value.type : undefined,\n    code: typeof value.code === \"string\" ? value.code : undefined,\n    statusCode: typeof value.statusCode === \"number\" ? value.statusCode : undefined,\n    requestId: typeof value.requestId === \"string\" ? value.requestId : undefined,\n    message: typeof value.message === \"string\" ? value.message : undefined,\n  };\n}\n\nasync function restoreRecordedOrder(\n  order: WebhookRecordedOrder | null,\n  restoreStock?: (items: WebhookItem[]) => Promise<void>,\n  decrementOfferSold?: (offerSlug: string, items: WebhookItem[]) => Promise<void>,\n) {\n  const items = order?.items ?? [];\n  if (items.length > 0 && restoreStock) await restoreStock(items);\n  if (order?.offerSlug && decrementOfferSold) {\n    await decrementOfferSold(order.offerSlug, items);\n  }\n}\n\nexport const GET: WebhookHandler = async () => new Response(\"OK\", { status: 200 });\n\nexport function createWebhookHandler({\n  claimEvent,\n  recordRefund,\n  recordExpiry,\n  recordOrder,\n  restoreStock,\n  decrementStock,\n  incrementOfferSold,\n  decrementOfferSold,\n  renderOrderEmail,\n  orderEmailFrom,\n  orderEmailBcc,\n}: WebhookHandlerOptions = {}): WebhookHandler {\n  return async ({ request }) => {\n    console.log(\"[webhook] POST received, method:\", request.method);\n\n    const {\n      STRIPE_SECRET_KEY: stripeKey,\n      STRIPE_WEBHOOK_SECRET: webhookSecret,\n      RESEND_API_KEY: resendKey,\n    } = getServerEnv();\n\n    if (!stripeKey || !webhookSecret) {\n      console.error(\"[webhook] Stripe env not configured\");\n      return new Response(\"Server error\", { status: 500 });\n    }\n\n    const sig = request.headers.get(\"stripe-signature\");\n    if (!sig) return new Response(\"Bad request\", { status: 400 });\n\n    const payload = await request.text();\n\n    const stripe = new Stripe(stripeKey, { apiVersion: STRIPE_API_VERSION });\n\n    let event: Stripe.Event;\n    try {\n      event = await stripe.webhooks.constructEventAsync(payload, sig, webhookSecret);\n    } catch {\n      return new Response(\"Invalid signature\", { status: 400 });\n    }\n\n    if (!isSupportedWebhookEvent(event.type)) {\n      return new Response(\"OK\", { status: 200 });\n    }\n\n    if (claimEvent) {\n      const claim = await claimEvent(event.id);\n      if (!claim) {\n        console.log(\"[webhook] duplicate event skipped:\", event.id);\n        return new Response(\"OK\", { status: 200 });\n      }\n    }\n\n    if (event.type === \"charge.refunded\") {\n      const charge = event.data.object as Stripe.Charge;\n      const paymentIntent = getPaymentIntentId(charge.payment_intent);\n\n      if (paymentIntent && recordRefund) {\n        const order = await recordRefund(paymentIntent);\n        await restoreRecordedOrder(order, restoreStock, decrementOfferSold);\n      }\n\n      return new Response(\"OK\", { status: 200 });\n    }\n\n    const session = event.data.object as Stripe.Checkout.Session;\n\n    if (event.type === \"checkout.session.expired\") {\n      if (recordExpiry) {\n        const order = await recordExpiry(session.id);\n        await restoreRecordedOrder(order, restoreStock, decrementOfferSold);\n      }\n\n      return new Response(\"OK\", { status: 200 });\n    }\n\n    const email = session.customer_details?.email;\n    const customerName = session.customer_details?.name ?? null;\n    const name = customerName ?? \"お客様\";\n    const phone = session.customer_details?.phone ?? null;\n    const totalAmount = session.amount_total ?? 0;\n    const shippingCostAmount = session.shipping_cost?.amount_total ?? null;\n    const paymentIntent = getPaymentIntentId(session.payment_intent);\n    const checkoutItems = parseCheckoutItems(session.metadata?.items);\n    const cf: Record<string, string> = {};\n    for (const f of (session.custom_fields ?? []) as Array<{\n      key: string;\n      type: string;\n      text?: { value?: string | null };\n      dropdown?: { value?: string | null };\n    }>) {\n      const v = f.type === \"dropdown\" ? f.dropdown?.value : f.text?.value;\n      if (typeof v === \"string\" && v.trim() !== \"\") cf[f.key] = v.trim();\n    }\n    const customFields = Object.keys(cf).length > 0 ? cf : null;\n    const { items: _items, offer_slug: _offerSlug, ...externalMetadata } = session.metadata ?? {};\n    const metadata = Object.keys(externalMetadata).length > 0 ? externalMetadata : null;\n\n    const shipping =\n      session.collected_information?.shipping_details ??\n      (session as SessionWithLegacyShipping).shipping_details;\n\n    const offerSlugFromMeta = session.metadata?.offer_slug ?? null;\n\n    if (recordOrder) {\n      await recordOrder({\n        id: session.id,\n        email: email ?? \"\",\n        name: customerName,\n        phone,\n        items: checkoutItems,\n        amount: totalAmount,\n        shippingCost: shippingCostAmount,\n        shippingAddress: shipping,\n        paymentIntent,\n        offerSlug: offerSlugFromMeta,\n        customFields,\n        metadata,\n        createdAt: Date.now(),\n      });\n      if (checkoutItems.length > 0 && decrementStock) await decrementStock(checkoutItems);\n      if (offerSlugFromMeta && checkoutItems.length > 0 && incrementOfferSold) {\n        await incrementOfferSold(offerSlugFromMeta, checkoutItems);\n      }\n    }\n\n    let lineItems: Stripe.LineItem[] = [];\n    try {\n      const result = await stripe.checkout.sessions.listLineItems(session.id, { limit: 100 });\n      lineItems = result.data;\n    } catch (e) {\n      console.error(\"[webhook] listLineItems failed:\", providerErrorDetails(e));\n    }\n\n    if (!email) {\n      console.error(\"[webhook] no customer email in session:\", session.id);\n      return new Response(\"OK\", { status: 200 });\n    }\n\n    if (!resendKey || !renderOrderEmail || !orderEmailFrom) {\n      if (!resendKey) console.error(\"[webhook] RESEND_API_KEY not set\");\n      return new Response(\"OK\", { status: 200 });\n    }\n\n    const { subject, html } = renderOrderEmail({\n      name,\n      email,\n      phone,\n      items: lineItems.map((item) => ({\n        description: item.description,\n        quantity: item.quantity,\n        amount: item.amount_total,\n      })),\n      totalAmount,\n      shippingCostAmount,\n      shipping,\n      customFields: cf,\n    });\n\n    try {\n      const resend = new Resend(resendKey);\n      const { error } = await resend.emails.send({\n        from: orderEmailFrom,\n        to: email,\n        ...(orderEmailBcc ? { bcc: orderEmailBcc } : {}),\n        subject,\n        html,\n      });\n      if (error) {\n        console.error(\"[webhook] Resend error:\", providerErrorDetails(error));\n      }\n    } catch (e) {\n      console.error(\"[webhook] Resend exception:\", providerErrorDetails(e));\n    }\n\n    return new Response(\"OK\", { status: 200 });\n  };\n}\n"],"mappings":";;;;;AAAA,SAAS,cAAc;AACvB,OAAO,YAAY;AAGnB,IAAM,qBAAqB;AAyE3B,SAAS,mBAAmB,OAAiD;AAC3E,MAAI,CAAC,MAAO,QAAO,CAAC;AAEpB,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,KAAK;AACxC,QAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AAEpC,WAAO,OAAO,OAAO,CAAC,SAA8B;AAClD,UAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,YAAM,EAAE,KAAK,SAAS,IAAI;AAC1B,aAAO,OAAO,QAAQ,YAAY,OAAO,aAAa,YAAY,OAAO,cAAc,QAAQ,KAAK,WAAW;AAAA,IACjH,CAAC;AAAA,EACH,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,SAAS,wBAAwB,MAA6C;AAC5E,SACE,SAAS,gCACT,SAAS,8BACT,SAAS;AAEb;AAEA,SAAS,mBAAmB,eAAqD;AAC/E,MAAI,OAAO,kBAAkB,SAAU,QAAO;AAC9C,SAAO,eAAe,MAAM;AAC9B;AAEA,SAAS,qBAAqB,OAAgB;AAC5C,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO,EAAE,SAAS,OAAO,KAAK,EAAE;AACjF,QAAM,QAAQ;AASd,SAAO;AAAA,IACL,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,IACpD,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,IACpD,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,IACpD,YAAY,OAAO,MAAM,eAAe,WAAW,MAAM,aAAa;AAAA,IACtE,WAAW,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAAA,IACnE,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU;AAAA,EAC/D;AACF;AAEA,eAAe,qBACb,OACA,cACA,oBACA;AACA,QAAM,QAAQ,OAAO,SAAS,CAAC;AAC/B,MAAI,MAAM,SAAS,KAAK,aAAc,OAAM,aAAa,KAAK;AAC9D,MAAI,OAAO,aAAa,oBAAoB;AAC1C,UAAM,mBAAmB,MAAM,WAAW,KAAK;AAAA,EACjD;AACF;AAEO,IAAM,MAAsB,YAAY,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAE1E,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,IAA2B,CAAC,GAAmB;AAC7C,SAAO,OAAO,EAAE,QAAQ,MAAM;AAC5B,YAAQ,IAAI,oCAAoC,QAAQ,MAAM;AAE9D,UAAM;AAAA,MACJ,mBAAmB;AAAA,MACnB,uBAAuB;AAAA,MACvB,gBAAgB;AAAA,IAClB,IAAI,aAAa;AAEjB,QAAI,CAAC,aAAa,CAAC,eAAe;AAChC,cAAQ,MAAM,qCAAqC;AACnD,aAAO,IAAI,SAAS,gBAAgB,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrD;AAEA,UAAM,MAAM,QAAQ,QAAQ,IAAI,kBAAkB;AAClD,QAAI,CAAC,IAAK,QAAO,IAAI,SAAS,eAAe,EAAE,QAAQ,IAAI,CAAC;AAE5D,UAAM,UAAU,MAAM,QAAQ,KAAK;AAEnC,UAAM,SAAS,IAAI,OAAO,WAAW,EAAE,YAAY,mBAAmB,CAAC;AAEvE,QAAI;AACJ,QAAI;AACF,cAAQ,MAAM,OAAO,SAAS,oBAAoB,SAAS,KAAK,aAAa;AAAA,IAC/E,QAAQ;AACN,aAAO,IAAI,SAAS,qBAAqB,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1D;AAEA,QAAI,CAAC,wBAAwB,MAAM,IAAI,GAAG;AACxC,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AAEA,QAAI,YAAY;AACd,YAAM,QAAQ,MAAM,WAAW,MAAM,EAAE;AACvC,UAAI,CAAC,OAAO;AACV,gBAAQ,IAAI,sCAAsC,MAAM,EAAE;AAC1D,eAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC3C;AAAA,IACF;AAEA,QAAI,MAAM,SAAS,mBAAmB;AACpC,YAAM,SAAS,MAAM,KAAK;AAC1B,YAAMA,iBAAgB,mBAAmB,OAAO,cAAc;AAE9D,UAAIA,kBAAiB,cAAc;AACjC,cAAM,QAAQ,MAAM,aAAaA,cAAa;AAC9C,cAAM,qBAAqB,OAAO,cAAc,kBAAkB;AAAA,MACpE;AAEA,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AAEA,UAAM,UAAU,MAAM,KAAK;AAE3B,QAAI,MAAM,SAAS,4BAA4B;AAC7C,UAAI,cAAc;AAChB,cAAM,QAAQ,MAAM,aAAa,QAAQ,EAAE;AAC3C,cAAM,qBAAqB,OAAO,cAAc,kBAAkB;AAAA,MACpE;AAEA,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AAEA,UAAM,QAAQ,QAAQ,kBAAkB;AACxC,UAAM,eAAe,QAAQ,kBAAkB,QAAQ;AACvD,UAAM,OAAO,gBAAgB;AAC7B,UAAM,QAAQ,QAAQ,kBAAkB,SAAS;AACjD,UAAM,cAAc,QAAQ,gBAAgB;AAC5C,UAAM,qBAAqB,QAAQ,eAAe,gBAAgB;AAClE,UAAM,gBAAgB,mBAAmB,QAAQ,cAAc;AAC/D,UAAM,gBAAgB,mBAAmB,QAAQ,UAAU,KAAK;AAChE,UAAM,KAA6B,CAAC;AACpC,eAAW,KAAM,QAAQ,iBAAiB,CAAC,GAKvC;AACF,YAAM,IAAI,EAAE,SAAS,aAAa,EAAE,UAAU,QAAQ,EAAE,MAAM;AAC9D,UAAI,OAAO,MAAM,YAAY,EAAE,KAAK,MAAM,GAAI,IAAG,EAAE,GAAG,IAAI,EAAE,KAAK;AAAA,IACnE;AACA,UAAM,eAAe,OAAO,KAAK,EAAE,EAAE,SAAS,IAAI,KAAK;AACvD,UAAM,EAAE,OAAO,QAAQ,YAAY,YAAY,GAAG,iBAAiB,IAAI,QAAQ,YAAY,CAAC;AAC5F,UAAM,WAAW,OAAO,KAAK,gBAAgB,EAAE,SAAS,IAAI,mBAAmB;AAE/E,UAAM,WACJ,QAAQ,uBAAuB,oBAC9B,QAAsC;AAEzC,UAAM,oBAAoB,QAAQ,UAAU,cAAc;AAE1D,QAAI,aAAa;AACf,YAAM,YAAY;AAAA,QAChB,IAAI,QAAQ;AAAA,QACZ,OAAO,SAAS;AAAA,QAChB,MAAM;AAAA,QACN;AAAA,QACA,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,iBAAiB;AAAA,QACjB;AAAA,QACA,WAAW;AAAA,QACX;AAAA,QACA;AAAA,QACA,WAAW,KAAK,IAAI;AAAA,MACtB,CAAC;AACD,UAAI,cAAc,SAAS,KAAK,eAAgB,OAAM,eAAe,aAAa;AAClF,UAAI,qBAAqB,cAAc,SAAS,KAAK,oBAAoB;AACvE,cAAM,mBAAmB,mBAAmB,aAAa;AAAA,MAC3D;AAAA,IACF;AAEA,QAAI,YAA+B,CAAC;AACpC,QAAI;AACF,YAAM,SAAS,MAAM,OAAO,SAAS,SAAS,cAAc,QAAQ,IAAI,EAAE,OAAO,IAAI,CAAC;AACtF,kBAAY,OAAO;AAAA,IACrB,SAAS,GAAG;AACV,cAAQ,MAAM,mCAAmC,qBAAqB,CAAC,CAAC;AAAA,IAC1E;AAEA,QAAI,CAAC,OAAO;AACV,cAAQ,MAAM,2CAA2C,QAAQ,EAAE;AACnE,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AAEA,QAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,gBAAgB;AACtD,UAAI,CAAC,UAAW,SAAQ,MAAM,kCAAkC;AAChE,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AAEA,UAAM,EAAE,SAAS,KAAK,IAAI,iBAAiB;AAAA,MACzC;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,UAAU,IAAI,CAAC,UAAU;AAAA,QAC9B,aAAa,KAAK;AAAA,QAClB,UAAU,KAAK;AAAA,QACf,QAAQ,KAAK;AAAA,MACf,EAAE;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAED,QAAI;AACF,YAAM,SAAS,IAAI,OAAO,SAAS;AACnC,YAAM,EAAE,MAAM,IAAI,MAAM,OAAO,OAAO,KAAK;AAAA,QACzC,MAAM;AAAA,QACN,IAAI;AAAA,QACJ,GAAI,gBAAgB,EAAE,KAAK,cAAc,IAAI,CAAC;AAAA,QAC9C;AAAA,QACA;AAAA,MACF,CAAC;AACD,UAAI,OAAO;AACT,gBAAQ,MAAM,2BAA2B,qBAAqB,KAAK,CAAC;AAAA,MACtE;AAAA,IACF,SAAS,GAAG;AACV,cAAQ,MAAM,+BAA+B,qBAAqB,CAAC,CAAC;AAAA,IACtE;AAEA,WAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3C;AACF;","names":["paymentIntent"]}

package/dist/{chunk-2NYFCO5V.js → chunk-XSJYDBH7.js}

@@ -22,6 +22,11 @@ function isValidQuantity(value) {
 function isOfferUnavailable(value) {
   return "error" in value && "status" in value;
 }
+function omitReservedMetadata(metadata) {
+  return Object.fromEntries(
+    Object.entries(metadata).filter(([key]) => key !== "items" && key !== "offer_slug")
+  );
+}
 function calcShipping(items, products, shipping) {
   const totalUnits = items.reduce((sum, { sku, quantity }) => {
     return sum + (products[sku]?.shippingUnits ?? 1) * quantity;
@@ -37,6 +42,8 @@ function calcShipping(items, products, shipping) {
 function createCheckoutHandler({
   products,
   shipping,
+  customFields: staticCustomFields = [],
+  metadata: staticMetadata = {},
   checkStock,
   checkOffer
 }) {
@@ -77,13 +84,13 @@ function createCheckoutHandler({
     const { offerSlug } = payload;
     let priceOverrides = {};
     let freeShipping = false;
-    let recipientInfo = false;
+    let offerCustomFields = [];
+    let offerMetadata = {};
     if (typeof offerSlug === "string" && offerSlug.trim() !== "") {
       if (!checkOffer) return jsonError("Offer not available", 503);
       const offer = await checkOffer(offerSlug.trim());
       if (!offer) return jsonError("Offer not found", 404);
       if (isOfferUnavailable(offer)) return jsonError(offer.error, offer.status);
-      recipientInfo = offer.recipientInfo;
       const offerUnits = offer.unitsRemaining;
       if (offerUnits && offerUnits.size > 0) {
         for (const { sku, quantity } of checkoutItems) {
@@ -95,6 +102,8 @@ function createCheckoutHandler({
       }
       priceOverrides = offer.priceOverrides;
       freeShipping = offer.freeShipping;
+      offerCustomFields = offer.customFields ?? [];
+      offerMetadata = offer.metadata ?? {};
     }
     const shippingRate = shipping ? freeShipping ? { amount: 0, label: shipping.freeLabel } : calcShipping(checkoutItems, products, shipping) : void 0;
     const stock = checkStock ? await checkStock(checkoutItems.map((item) => item.sku)) : /* @__PURE__ */ new Map();
@@ -104,32 +113,17 @@ function createCheckoutHandler({
         return jsonError(`Out of stock: ${sku}`, 409);
       }
     }
-    const customFields = [];
-    if (recipientInfo) {
-      customFields.push(
-        {
-          key: "class_name",
-          label: { type: "custom", custom: "\u30AF\u30E9\u30B9\u540D" },
-          type: "text",
-          optional: false,
-          text: { maximum_length: 50 }
-        },
-        {
-          key: "child_name",
-          label: { type: "custom", custom: "\u304A\u5B50\u3055\u3093\u306E\u304A\u540D\u524D" },
-          type: "text",
-          optional: false,
-          text: { maximum_length: 50 }
-        }
-      );
-    }
-    customFields.push({
-      key: "message",
-      label: { type: "custom", custom: "\u30E1\u30C3\u30BB\u30FC\u30B8\u30FB\u3054\u8981\u671B\uFF08\u4EFB\u610F\uFF09" },
-      type: "text",
-      optional: true,
-      text: { maximum_length: 255 }
-    });
+    const checkoutCustomFields = [
+      ...staticCustomFields,
+      ...offerCustomFields,
+      {
+        key: "message",
+        label: { type: "custom", custom: "\u30E1\u30C3\u30BB\u30FC\u30B8\u30FB\u3054\u8981\u671B\uFF08\u4EFB\u610F\uFF09" },
+        type: "text",
+        optional: true,
+        text: { maximum_length: 255 }
+      }
+    ];
     try {
       const sessionParams = {
         ui_mode: "embedded_page",
@@ -143,11 +137,13 @@ function createCheckoutHandler({
           quantity
         })),
         metadata: {
+          ...omitReservedMetadata(staticMetadata),
+          ...omitReservedMetadata(offerMetadata),
           items: JSON.stringify(checkoutItems),
           ...typeof offerSlug === "string" && offerSlug.trim() ? { offer_slug: offerSlug.trim() } : {}
         },
         phone_number_collection: { enabled: true },
-        custom_fields: customFields,
+        custom_fields: checkoutCustomFields,
         shipping_address_collection: { allowed_countries: ["JP"] },
         ...shippingRate ? {
           shipping_options: [
@@ -189,4 +185,4 @@ function createCheckoutHandler({
 export {
   createCheckoutHandler
 };
-//# sourceMappingURL=chunk-2NYFCO5V.js.map
+//# sourceMappingURL=chunk-XSJYDBH7.js.map

package/dist/chunk-XSJYDBH7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/checkout.ts"],"sourcesContent":["import Stripe from \"stripe\";\nimport type { UmecConfig, UmecProduct } from \"./config.js\";\nimport { getServerEnv } from \"./env.js\";\n\nconst STRIPE_API_VERSION = \"2026-05-27.dahlia\";\nconst MAX_ITEMS = 10;\nconst MAX_QUANTITY = 20;\n\ntype CheckoutItem = {\n  sku: string;\n  quantity: number;\n};\n\nexport type CheckoutProductsMap = Record<string, UmecProduct | undefined>;\n\nexport type CheckoutCustomField = Stripe.Checkout.SessionCreateParams.CustomField;\n\nexport type CheckoutOffer = {\n  priceOverrides: Record<string, number>;\n  freeShipping: boolean;\n  customFields?: CheckoutCustomField[];\n  metadata?: Record<string, string>;\n  unitsRemaining?: Map<string, number>;\n};\n\nexport type CheckoutOfferUnavailable = {\n  error: \"Offer not found\" | \"Offer expired\";\n  status: 404 | 410;\n};\n\nexport type CheckStock = (skus: string[]) => Promise<Map<string, number>>;\nexport type CheckOffer = (offerSlug: string) => Promise<CheckoutOffer | CheckoutOfferUnavailable | null>;\n\nexport type CheckoutHandlerOptions = {\n  products: CheckoutProductsMap;\n  shipping?: UmecConfig[\"shipping\"];\n  customFields?: CheckoutCustomField[];\n  metadata?: Record<string, string>;\n  checkStock?: CheckStock;\n  checkOffer?: CheckOffer;\n};\n\nexport type CheckoutHandler = ({ request }: { request: Request }) => Promise<Response>;\n\nfunction jsonError(error: string, status: number) {\n  return new Response(JSON.stringify({ error }), {\n    status,\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n\nfunction isCheckoutPayload(value: unknown): value is { items?: unknown; offerSlug?: unknown } {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction isValidQuantity(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 1;\n}\n\nfunction isOfferUnavailable(value: CheckoutOffer | CheckoutOfferUnavailable): value is CheckoutOfferUnavailable {\n  return \"error\" in value && \"status\" in value;\n}\n\nfunction omitReservedMetadata(metadata: Record<string, string>) {\n  return Object.fromEntries(\n    Object.entries(metadata).filter(([key]) => key !== \"items\" && key !== \"offer_slug\"),\n  );\n}\n\nfunction calcShipping(\n  items: CheckoutItem[],\n  products: CheckoutProductsMap,\n  shipping: NonNullable<UmecConfig[\"shipping\"]>,\n) {\n  const totalUnits = items.reduce((sum, { sku, quantity }) => {\n    return sum + (products[sku]?.shippingUnits ?? 1) * quantity;\n  }, 0);\n\n  const tier = shipping.tiers.find((shippingTier) => {\n    return shippingTier.maxUnits === undefined || totalUnits <= shippingTier.maxUnits;\n  }) ?? shipping.tiers[shipping.tiers.length - 1]!;\n\n  return {\n    amount: tier.amount,\n    label: tier.label,\n  };\n}\n\nexport function createCheckoutHandler({\n  products,\n  shipping,\n  customFields: staticCustomFields = [],\n  metadata: staticMetadata = {},\n  checkStock,\n  checkOffer,\n}: CheckoutHandlerOptions): CheckoutHandler {\n  return async ({ request }) => {\n    const { STRIPE_SECRET_KEY: stripeKey } = getServerEnv();\n    if (!stripeKey) return jsonError(\"Stripe not configured\", 503);\n\n    const stripe = new Stripe(stripeKey, {\n      apiVersion: STRIPE_API_VERSION,\n    });\n    let payload: unknown;\n\n    try {\n      payload = await request.json();\n    } catch {\n      return jsonError(\"Invalid request body\", 400);\n    }\n\n    if (!isCheckoutPayload(payload)) return jsonError(\"Invalid request body\", 400);\n\n    const { items } = payload;\n    if (!Array.isArray(items) || items.length === 0) return jsonError(\"Invalid items\", 400);\n    if (items.length > MAX_ITEMS) return jsonError(\"Invalid items\", 400);\n\n    const rawItems: CheckoutItem[] = [];\n    for (const item of items) {\n      if (typeof item !== \"object\" || item === null) return jsonError(\"Invalid SKU\", 400);\n\n      const { sku, quantity } = item as { sku?: unknown; quantity?: unknown };\n      if (typeof sku !== \"string\" || !products[sku]) return jsonError(\"Invalid SKU\", 400);\n      if (!isValidQuantity(quantity)) return jsonError(\"Invalid quantity\", 400);\n\n      rawItems.push({ sku, quantity });\n    }\n\n    const quantityMap = new Map<string, number>();\n    for (const { sku, quantity } of rawItems) {\n      quantityMap.set(sku, (quantityMap.get(sku) ?? 0) + quantity);\n    }\n\n    for (const [, total] of quantityMap) {\n      if (total > MAX_QUANTITY) return jsonError(\"Invalid quantity\", 400);\n    }\n\n    const checkoutItems: CheckoutItem[] = Array.from(quantityMap.entries()).map(\n      ([sku, quantity]) => ({ sku, quantity }),\n    );\n    const { offerSlug } = payload as { items?: unknown; offerSlug?: unknown };\n    let priceOverrides: Record<string, number> = {};\n    let freeShipping = false;\n    let offerCustomFields: CheckoutCustomField[] = [];\n    let offerMetadata: Record<string, string> = {};\n\n    if (typeof offerSlug === \"string\" && offerSlug.trim() !== \"\") {\n      if (!checkOffer) return jsonError(\"Offer not available\", 503);\n      const offer = await checkOffer(offerSlug.trim());\n      if (!offer) return jsonError(\"Offer not found\", 404);\n      if (isOfferUnavailable(offer)) return jsonError(offer.error, offer.status);\n      const offerUnits = offer.unitsRemaining;\n      if (offerUnits && offerUnits.size > 0) {\n        for (const { sku, quantity } of checkoutItems) {\n          const remaining = offerUnits.get(sku);\n          // TOCTOU race is acceptable for low-frequency sales. Move to Durable Objects if needed.\n          if (remaining !== undefined && quantity > remaining) {\n            return jsonError(`Offer unit limit reached: ${sku}`, 409);\n          }\n        }\n      }\n      priceOverrides = offer.priceOverrides;\n      freeShipping = offer.freeShipping;\n      offerCustomFields = offer.customFields ?? [];\n      offerMetadata = offer.metadata ?? {};\n    }\n\n    const shippingRate = shipping\n      ? freeShipping\n        ? { amount: 0, label: shipping.freeLabel }\n        : calcShipping(checkoutItems, products, shipping)\n      : undefined;\n    const stock = checkStock ? await checkStock(checkoutItems.map((item) => item.sku)) : new Map<string, number>();\n    for (const { sku, quantity } of checkoutItems) {\n      const available = stock.get(sku);\n      if (available !== undefined && quantity > available) {\n        return jsonError(`Out of stock: ${sku}`, 409);\n      }\n    }\n\n    const checkoutCustomFields: CheckoutCustomField[] = [\n      ...staticCustomFields,\n      ...offerCustomFields,\n      {\n        key: \"message\",\n        label: { type: \"custom\", custom: \"メッセージ・ご要望（任意）\" },\n        type: \"text\",\n        optional: true,\n        text: { maximum_length: 255 },\n      },\n    ];\n\n    try {\n      const sessionParams: Stripe.Checkout.SessionCreateParams = {\n        ui_mode: \"embedded_page\",\n        mode: \"payment\",\n        line_items: checkoutItems.map(({ sku, quantity }) => ({\n          price_data: {\n            currency: \"jpy\",\n            product_data: { name: products[sku]!.name },\n            unit_amount: priceOverrides[sku] ?? products[sku]!.price,\n          },\n          quantity,\n        })),\n        metadata: {\n          ...omitReservedMetadata(staticMetadata),\n          ...omitReservedMetadata(offerMetadata),\n          items: JSON.stringify(checkoutItems),\n          ...(typeof offerSlug === \"string\" && offerSlug.trim() ? { offer_slug: offerSlug.trim() } : {}),\n        },\n        phone_number_collection: { enabled: true },\n        custom_fields: checkoutCustomFields,\n        shipping_address_collection: { allowed_countries: [\"JP\"] },\n        ...(shippingRate\n          ? {\n              shipping_options: [\n                {\n                  shipping_rate_data: {\n                    type: \"fixed_amount\",\n                    fixed_amount: { amount: shippingRate.amount, currency: \"jpy\" },\n                    display_name: shippingRate.label,\n                    delivery_estimate: {\n                      minimum: { unit: \"business_day\", value: 2 },\n                      maximum: { unit: \"business_day\", value: 5 },\n                    },\n                  },\n                },\n              ],\n            }\n          : {}),\n        redirect_on_completion: \"never\",\n      };\n\n      const session = await stripe.checkout.sessions.create(sessionParams);\n\n      return new Response(JSON.stringify({ clientSecret: session.client_secret }), {\n        headers: { \"Content-Type\": \"application/json\" },\n      });\n    } catch (error) {\n      const stripeError = error as {\n        type?: string;\n        code?: string;\n        statusCode?: number;\n        requestId?: string;\n      };\n      console.error(\"[checkout] stripe session create failed:\", {\n        type: stripeError.type,\n        code: stripeError.code,\n        statusCode: stripeError.statusCode,\n        requestId: stripeError.requestId,\n      });\n\n      if (stripeError.type === \"StripePermissionError\") {\n        return jsonError(\"Stripe key does not have permission to create Checkout Sessions\", 503);\n      }\n\n      return jsonError(\"Checkout session could not be created\", 503);\n    }\n  };\n}\n"],"mappings":";;;;;AAAA,OAAO,YAAY;AAInB,IAAM,qBAAqB;AAC3B,IAAM,YAAY;AAClB,IAAM,eAAe;AAsCrB,SAAS,UAAU,OAAe,QAAgB;AAChD,SAAO,IAAI,SAAS,KAAK,UAAU,EAAE,MAAM,CAAC,GAAG;AAAA,IAC7C;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAEA,SAAS,kBAAkB,OAAmE;AAC5F,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,gBAAgB,OAAiC;AACxD,SAAO,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,KAAK,SAAS;AAC9E;AAEA,SAAS,mBAAmB,OAAoF;AAC9G,SAAO,WAAW,SAAS,YAAY;AACzC;AAEA,SAAS,qBAAqB,UAAkC;AAC9D,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,QAAQ,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,QAAQ,WAAW,QAAQ,YAAY;AAAA,EACpF;AACF;AAEA,SAAS,aACP,OACA,UACA,UACA;AACA,QAAM,aAAa,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,SAAS,MAAM;AAC1D,WAAO,OAAO,SAAS,GAAG,GAAG,iBAAiB,KAAK;AAAA,EACrD,GAAG,CAAC;AAEJ,QAAM,OAAO,SAAS,MAAM,KAAK,CAAC,iBAAiB;AACjD,WAAO,aAAa,aAAa,UAAa,cAAc,aAAa;AAAA,EAC3E,CAAC,KAAK,SAAS,MAAM,SAAS,MAAM,SAAS,CAAC;AAE9C,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,OAAO,KAAK;AAAA,EACd;AACF;AAEO,SAAS,sBAAsB;AAAA,EACpC;AAAA,EACA;AAAA,EACA,cAAc,qBAAqB,CAAC;AAAA,EACpC,UAAU,iBAAiB,CAAC;AAAA,EAC5B;AAAA,EACA;AACF,GAA4C;AAC1C,SAAO,OAAO,EAAE,QAAQ,MAAM;AAC5B,UAAM,EAAE,mBAAmB,UAAU,IAAI,aAAa;AACtD,QAAI,CAAC,UAAW,QAAO,UAAU,yBAAyB,GAAG;AAE7D,UAAM,SAAS,IAAI,OAAO,WAAW;AAAA,MACnC,YAAY;AAAA,IACd,CAAC;AACD,QAAI;AAEJ,QAAI;AACF,gBAAU,MAAM,QAAQ,KAAK;AAAA,IAC/B,QAAQ;AACN,aAAO,UAAU,wBAAwB,GAAG;AAAA,IAC9C;AAEA,QAAI,CAAC,kBAAkB,OAAO,EAAG,QAAO,UAAU,wBAAwB,GAAG;AAE7E,UAAM,EAAE,MAAM,IAAI;AAClB,QAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,EAAG,QAAO,UAAU,iBAAiB,GAAG;AACtF,QAAI,MAAM,SAAS,UAAW,QAAO,UAAU,iBAAiB,GAAG;AAEnE,UAAM,WAA2B,CAAC;AAClC,eAAW,QAAQ,OAAO;AACxB,UAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO,UAAU,eAAe,GAAG;AAElF,YAAM,EAAE,KAAK,SAAS,IAAI;AAC1B,UAAI,OAAO,QAAQ,YAAY,CAAC,SAAS,GAAG,EAAG,QAAO,UAAU,eAAe,GAAG;AAClF,UAAI,CAAC,gBAAgB,QAAQ,EAAG,QAAO,UAAU,oBAAoB,GAAG;AAExE,eAAS,KAAK,EAAE,KAAK,SAAS,CAAC;AAAA,IACjC;AAEA,UAAM,cAAc,oBAAI,IAAoB;AAC5C,eAAW,EAAE,KAAK,SAAS,KAAK,UAAU;AACxC,kBAAY,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,KAAK,QAAQ;AAAA,IAC7D;AAEA,eAAW,CAAC,EAAE,KAAK,KAAK,aAAa;AACnC,UAAI,QAAQ,aAAc,QAAO,UAAU,oBAAoB,GAAG;AAAA,IACpE;AAEA,UAAM,gBAAgC,MAAM,KAAK,YAAY,QAAQ,CAAC,EAAE;AAAA,MACtE,CAAC,CAAC,KAAK,QAAQ,OAAO,EAAE,KAAK,SAAS;AAAA,IACxC;AACA,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,iBAAyC,CAAC;AAC9C,QAAI,eAAe;AACnB,QAAI,oBAA2C,CAAC;AAChD,QAAI,gBAAwC,CAAC;AAE7C,QAAI,OAAO,cAAc,YAAY,UAAU,KAAK,MAAM,IAAI;AAC5D,UAAI,CAAC,WAAY,QAAO,UAAU,uBAAuB,GAAG;AAC5D,YAAM,QAAQ,MAAM,WAAW,UAAU,KAAK,CAAC;AAC/C,UAAI,CAAC,MAAO,QAAO,UAAU,mBAAmB,GAAG;AACnD,UAAI,mBAAmB,KAAK,EAAG,QAAO,UAAU,MAAM,OAAO,MAAM,MAAM;AACzE,YAAM,aAAa,MAAM;AACzB,UAAI,cAAc,WAAW,OAAO,GAAG;AACrC,mBAAW,EAAE,KAAK,SAAS,KAAK,eAAe;AAC7C,gBAAM,YAAY,WAAW,IAAI,GAAG;AAEpC,cAAI,cAAc,UAAa,WAAW,WAAW;AACnD,mBAAO,UAAU,6BAA6B,GAAG,IAAI,GAAG;AAAA,UAC1D;AAAA,QACF;AAAA,MACF;AACA,uBAAiB,MAAM;AACvB,qBAAe,MAAM;AACrB,0BAAoB,MAAM,gBAAgB,CAAC;AAC3C,sBAAgB,MAAM,YAAY,CAAC;AAAA,IACrC;AAEA,UAAM,eAAe,WACjB,eACE,EAAE,QAAQ,GAAG,OAAO,SAAS,UAAU,IACvC,aAAa,eAAe,UAAU,QAAQ,IAChD;AACJ,UAAM,QAAQ,aAAa,MAAM,WAAW,cAAc,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,IAAI,oBAAI,IAAoB;AAC7G,eAAW,EAAE,KAAK,SAAS,KAAK,eAAe;AAC7C,YAAM,YAAY,MAAM,IAAI,GAAG;AAC/B,UAAI,cAAc,UAAa,WAAW,WAAW;AACnD,eAAO,UAAU,iBAAiB,GAAG,IAAI,GAAG;AAAA,MAC9C;AAAA,IACF;AAEA,UAAM,uBAA8C;AAAA,MAClD,GAAG;AAAA,MACH,GAAG;AAAA,MACH;AAAA,QACE,KAAK;AAAA,QACL,OAAO,EAAE,MAAM,UAAU,QAAQ,iFAAgB;AAAA,QACjD,MAAM;AAAA,QACN,UAAU;AAAA,QACV,MAAM,EAAE,gBAAgB,IAAI;AAAA,MAC9B;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAqD;AAAA,QACzD,SAAS;AAAA,QACT,MAAM;AAAA,QACN,YAAY,cAAc,IAAI,CAAC,EAAE,KAAK,SAAS,OAAO;AAAA,UACpD,YAAY;AAAA,YACV,UAAU;AAAA,YACV,cAAc,EAAE,MAAM,SAAS,GAAG,EAAG,KAAK;AAAA,YAC1C,aAAa,eAAe,GAAG,KAAK,SAAS,GAAG,EAAG;AAAA,UACrD;AAAA,UACA;AAAA,QACF,EAAE;AAAA,QACF,UAAU;AAAA,UACR,GAAG,qBAAqB,cAAc;AAAA,UACtC,GAAG,qBAAqB,aAAa;AAAA,UACrC,OAAO,KAAK,UAAU,aAAa;AAAA,UACnC,GAAI,OAAO,cAAc,YAAY,UAAU,KAAK,IAAI,EAAE,YAAY,UAAU,KAAK,EAAE,IAAI,CAAC;AAAA,QAC9F;AAAA,QACA,yBAAyB,EAAE,SAAS,KAAK;AAAA,QACzC,eAAe;AAAA,QACf,6BAA6B,EAAE,mBAAmB,CAAC,IAAI,EAAE;AAAA,QACzD,GAAI,eACA;AAAA,UACE,kBAAkB;AAAA,YAChB;AAAA,cACE,oBAAoB;AAAA,gBAClB,MAAM;AAAA,gBACN,cAAc,EAAE,QAAQ,aAAa,QAAQ,UAAU,MAAM;AAAA,gBAC7D,cAAc,aAAa;AAAA,gBAC3B,mBAAmB;AAAA,kBACjB,SAAS,EAAE,MAAM,gBAAgB,OAAO,EAAE;AAAA,kBAC1C,SAAS,EAAE,MAAM,gBAAgB,OAAO,EAAE;AAAA,gBAC5C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF,IACA,CAAC;AAAA,QACL,wBAAwB;AAAA,MAC1B;AAEA,YAAM,UAAU,MAAM,OAAO,SAAS,SAAS,OAAO,aAAa;AAEnE,aAAO,IAAI,SAAS,KAAK,UAAU,EAAE,cAAc,QAAQ,cAAc,CAAC,GAAG;AAAA,QAC3E,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAChD,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,cAAc;AAMpB,cAAQ,MAAM,4CAA4C;AAAA,QACxD,MAAM,YAAY;AAAA,QAClB,MAAM,YAAY;AAAA,QAClB,YAAY,YAAY;AAAA,QACxB,WAAW,YAAY;AAAA,MACzB,CAAC;AAED,UAAI,YAAY,SAAS,yBAAyB;AAChD,eAAO,UAAU,mEAAmE,GAAG;AAAA,MACzF;AAEA,aAAO,UAAU,yCAAyC,GAAG;AAAA,IAC/D;AAAA,EACF;AACF;","names":[]}

package/dist/index.d.ts

@@ -1,11 +1,11 @@
 export { AccessGuardOptions, AccessGuardResult, createAccessGuard } from './access.js';
-export { CheckOffer, CheckStock, CheckoutHandler, CheckoutHandlerOptions, CheckoutOffer, CheckoutOfferUnavailable, CheckoutProductsMap, createCheckoutHandler } from './checkout.js';
+export { CheckOffer, CheckStock, CheckoutCustomField, CheckoutHandler, CheckoutHandlerOptions, CheckoutOffer, CheckoutOfferUnavailable, CheckoutProductsMap, createCheckoutHandler } from './checkout.js';
 export { UmecConfig, UmecConfigInput, UmecProduct, UmecShipping, defineUmecConfig, formatEmailFrom, umecConfigSchema } from './config.js';
 export { ServerEnv, getServerEnv } from './env.js';
-export { UmecMiddleware, UmecMiddlewareContext, UmecMiddlewareNext, UmecMiddlewareOptions, createUmecMiddleware } from './middleware.js';
+export { UmecLimitedPage, UmecMiddleware, UmecMiddlewareContext, UmecMiddlewareNext, UmecMiddlewareOptions, createUmecMiddleware } from './middleware.js';
 export { NotifyEnv, NotifyProduct, NotifyProductsMap, NotifyUnshippedOptions, UnshippedOrder, notifyUnshipped } from './notify.js';
 export { SubscribeHandler, SubscribeHandlerOptions, createSubscribeHandler } from './subscribe.js';
 export { OrderEmailData, OrderEmailLineItem, RenderOrderEmail, SupportedWebhookEvent, WebhookHandler, WebhookHandlerOptions, WebhookItem, WebhookOrder, WebhookRecordedOrder, createWebhookHandler, GET as webhookGET } from './webhook.js';
 import 'jose';
-import 'zod';
 import 'stripe';
+import 'zod';

package/dist/index.js

@@ -1,13 +1,13 @@
 import {
   GET,
   createWebhookHandler
-} from "./chunk-REUSLO5I.js";
+} from "./chunk-XQ6FQZAZ.js";
 import {
   createAccessGuard
 } from "./chunk-2SNGXEIL.js";
 import {
   createCheckoutHandler
-} from "./chunk-2NYFCO5V.js";
+} from "./chunk-XSJYDBH7.js";
 import {
   defineUmecConfig,
   formatEmailFrom,
@@ -15,7 +15,7 @@ import {
 } from "./chunk-7ZJOZAEO.js";
 import {
   createUmecMiddleware
-} from "./chunk-WZFM6R5J.js";
+} from "./chunk-4V4GYE7E.js";
 import {
   notifyUnshipped
 } from "./chunk-QRFFBMFN.js";

package/dist/middleware.d.ts

@@ -5,9 +5,14 @@ type UmecMiddlewareContext = {
 };
 type UmecMiddlewareNext = () => Response | Promise<Response>;
 type UmecMiddleware = (context: UmecMiddlewareContext, next: UmecMiddlewareNext) => Promise<Response>;
+type UmecLimitedPage = {
+    pathPrefix: string;
+    expiresAt: number;
+};
 type UmecMiddlewareOptions = {
     maintenanceMode: boolean;
+    limitedPages?: UmecLimitedPage[];
 };
-declare function createUmecMiddleware({ maintenanceMode }: UmecMiddlewareOptions): UmecMiddleware;
+declare function createUmecMiddleware({ maintenanceMode, limitedPages }: UmecMiddlewareOptions): UmecMiddleware;
 
-export { type UmecMiddleware, type UmecMiddlewareContext, type UmecMiddlewareNext, type UmecMiddlewareOptions, type UmecRedirectStatus, createUmecMiddleware };
+export { type UmecLimitedPage, type UmecMiddleware, type UmecMiddlewareContext, type UmecMiddlewareNext, type UmecMiddlewareOptions, type UmecRedirectStatus, createUmecMiddleware };

package/dist/middleware.js

@@ -1,6 +1,6 @@
 import {
   createUmecMiddleware
-} from "./chunk-WZFM6R5J.js";
+} from "./chunk-4V4GYE7E.js";
 export {
   createUmecMiddleware
 };

package/dist/webhook.d.ts

@@ -37,6 +37,7 @@ type WebhookOrder = {
     paymentIntent: string | null;
     offerSlug: string | null;
     customFields: Record<string, string> | null;
+    metadata: Record<string, string> | null;
     createdAt: number;
 };
 type WebhookRecordedOrder = {

package/dist/webhook.js

@@ -1,7 +1,7 @@
 import {
   GET,
   createWebhookHandler
-} from "./chunk-REUSLO5I.js";
+} from "./chunk-XQ6FQZAZ.js";
 import "./chunk-7TJANK6S.js";
 export {
   GET,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@umec/core",
-  "version": "0.1.0-alpha.0",
+  "version": "0.1.0-alpha.4",
   "description": "Headless EC logic for umec — config schema and shared handlers",
   "type": "module",
   "license": "MIT",

package/dist/chunk-2NYFCO5V.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/checkout.ts"],"sourcesContent":["import Stripe from \"stripe\";\nimport type { UmecConfig, UmecProduct } from \"./config.js\";\nimport { getServerEnv } from \"./env.js\";\n\nconst STRIPE_API_VERSION = \"2026-05-27.dahlia\";\nconst MAX_ITEMS = 10;\nconst MAX_QUANTITY = 20;\n\ntype CheckoutItem = {\n  sku: string;\n  quantity: number;\n};\n\nexport type CheckoutProductsMap = Record<string, UmecProduct | undefined>;\n\nexport type CheckoutOffer = {\n  priceOverrides: Record<string, number>;\n  freeShipping: boolean;\n  recipientInfo: boolean;\n  unitsRemaining?: Map<string, number>;\n};\n\nexport type CheckoutOfferUnavailable = {\n  error: \"Offer not found\" | \"Offer expired\";\n  status: 404 | 410;\n};\n\nexport type CheckStock = (skus: string[]) => Promise<Map<string, number>>;\nexport type CheckOffer = (offerSlug: string) => Promise<CheckoutOffer | CheckoutOfferUnavailable | null>;\n\nexport type CheckoutHandlerOptions = {\n  products: CheckoutProductsMap;\n  shipping?: UmecConfig[\"shipping\"];\n  checkStock?: CheckStock;\n  checkOffer?: CheckOffer;\n};\n\nexport type CheckoutHandler = ({ request }: { request: Request }) => Promise<Response>;\n\nfunction jsonError(error: string, status: number) {\n  return new Response(JSON.stringify({ error }), {\n    status,\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n\nfunction isCheckoutPayload(value: unknown): value is { items?: unknown; offerSlug?: unknown } {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction isValidQuantity(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 1;\n}\n\nfunction isOfferUnavailable(value: CheckoutOffer | CheckoutOfferUnavailable): value is CheckoutOfferUnavailable {\n  return \"error\" in value && \"status\" in value;\n}\n\nfunction calcShipping(\n  items: CheckoutItem[],\n  products: CheckoutProductsMap,\n  shipping: NonNullable<UmecConfig[\"shipping\"]>,\n) {\n  const totalUnits = items.reduce((sum, { sku, quantity }) => {\n    return sum + (products[sku]?.shippingUnits ?? 1) * quantity;\n  }, 0);\n\n  const tier = shipping.tiers.find((shippingTier) => {\n    return shippingTier.maxUnits === undefined || totalUnits <= shippingTier.maxUnits;\n  }) ?? shipping.tiers[shipping.tiers.length - 1]!;\n\n  return {\n    amount: tier.amount,\n    label: tier.label,\n  };\n}\n\nexport function createCheckoutHandler({\n  products,\n  shipping,\n  checkStock,\n  checkOffer,\n}: CheckoutHandlerOptions): CheckoutHandler {\n  return async ({ request }) => {\n    const { STRIPE_SECRET_KEY: stripeKey } = getServerEnv();\n    if (!stripeKey) return jsonError(\"Stripe not configured\", 503);\n\n    const stripe = new Stripe(stripeKey, {\n      apiVersion: STRIPE_API_VERSION,\n    });\n    let payload: unknown;\n\n    try {\n      payload = await request.json();\n    } catch {\n      return jsonError(\"Invalid request body\", 400);\n    }\n\n    if (!isCheckoutPayload(payload)) return jsonError(\"Invalid request body\", 400);\n\n    const { items } = payload;\n    if (!Array.isArray(items) || items.length === 0) return jsonError(\"Invalid items\", 400);\n    if (items.length > MAX_ITEMS) return jsonError(\"Invalid items\", 400);\n\n    const rawItems: CheckoutItem[] = [];\n    for (const item of items) {\n      if (typeof item !== \"object\" || item === null) return jsonError(\"Invalid SKU\", 400);\n\n      const { sku, quantity } = item as { sku?: unknown; quantity?: unknown };\n      if (typeof sku !== \"string\" || !products[sku]) return jsonError(\"Invalid SKU\", 400);\n      if (!isValidQuantity(quantity)) return jsonError(\"Invalid quantity\", 400);\n\n      rawItems.push({ sku, quantity });\n    }\n\n    const quantityMap = new Map<string, number>();\n    for (const { sku, quantity } of rawItems) {\n      quantityMap.set(sku, (quantityMap.get(sku) ?? 0) + quantity);\n    }\n\n    for (const [, total] of quantityMap) {\n      if (total > MAX_QUANTITY) return jsonError(\"Invalid quantity\", 400);\n    }\n\n    const checkoutItems: CheckoutItem[] = Array.from(quantityMap.entries()).map(\n      ([sku, quantity]) => ({ sku, quantity }),\n    );\n    const { offerSlug } = payload as { items?: unknown; offerSlug?: unknown };\n    let priceOverrides: Record<string, number> = {};\n    let freeShipping = false;\n    let recipientInfo = false;\n\n    if (typeof offerSlug === \"string\" && offerSlug.trim() !== \"\") {\n      if (!checkOffer) return jsonError(\"Offer not available\", 503);\n      const offer = await checkOffer(offerSlug.trim());\n      if (!offer) return jsonError(\"Offer not found\", 404);\n      if (isOfferUnavailable(offer)) return jsonError(offer.error, offer.status);\n      recipientInfo = offer.recipientInfo;\n      const offerUnits = offer.unitsRemaining;\n      if (offerUnits && offerUnits.size > 0) {\n        for (const { sku, quantity } of checkoutItems) {\n          const remaining = offerUnits.get(sku);\n          // TOCTOU あり — 低頻度の emu では許容\n          if (remaining !== undefined && quantity > remaining) {\n            return jsonError(`Offer unit limit reached: ${sku}`, 409);\n          }\n        }\n      }\n      priceOverrides = offer.priceOverrides;\n      freeShipping = offer.freeShipping;\n    }\n\n    const shippingRate = shipping\n      ? freeShipping\n        ? { amount: 0, label: shipping.freeLabel }\n        : calcShipping(checkoutItems, products, shipping)\n      : undefined;\n    const stock = checkStock ? await checkStock(checkoutItems.map((item) => item.sku)) : new Map<string, number>();\n    // TOCTOU race is acceptable for low-frequency emu sales. Move to Durable Objects if needed.\n    for (const { sku, quantity } of checkoutItems) {\n      const available = stock.get(sku);\n      if (available !== undefined && quantity > available) {\n        return jsonError(`Out of stock: ${sku}`, 409);\n      }\n    }\n\n    const customFields: Stripe.Checkout.SessionCreateParams.CustomField[] = [];\n    if (recipientInfo) {\n      customFields.push(\n        {\n          key: \"class_name\",\n          label: { type: \"custom\", custom: \"クラス名\" },\n          type: \"text\",\n          optional: false,\n          text: { maximum_length: 50 },\n        },\n        {\n          key: \"child_name\",\n          label: { type: \"custom\", custom: \"お子さんのお名前\" },\n          type: \"text\",\n          optional: false,\n          text: { maximum_length: 50 },\n        },\n      );\n    }\n    customFields.push({\n      key: \"message\",\n      label: { type: \"custom\", custom: \"メッセージ・ご要望（任意）\" },\n      type: \"text\",\n      optional: true,\n      text: { maximum_length: 255 },\n    });\n\n    try {\n      const sessionParams: Stripe.Checkout.SessionCreateParams = {\n        ui_mode: \"embedded_page\",\n        mode: \"payment\",\n        line_items: checkoutItems.map(({ sku, quantity }) => ({\n          price_data: {\n            currency: \"jpy\",\n            product_data: { name: products[sku]!.name },\n            unit_amount: priceOverrides[sku] ?? products[sku]!.price,\n          },\n          quantity,\n        })),\n        metadata: {\n          items: JSON.stringify(checkoutItems),\n          ...(typeof offerSlug === \"string\" && offerSlug.trim() ? { offer_slug: offerSlug.trim() } : {}),\n        },\n        phone_number_collection: { enabled: true },\n        custom_fields: customFields,\n        shipping_address_collection: { allowed_countries: [\"JP\"] },\n        ...(shippingRate\n          ? {\n              shipping_options: [\n                {\n                  shipping_rate_data: {\n                    type: \"fixed_amount\",\n                    fixed_amount: { amount: shippingRate.amount, currency: \"jpy\" },\n                    display_name: shippingRate.label,\n                    delivery_estimate: {\n                      minimum: { unit: \"business_day\", value: 2 },\n                      maximum: { unit: \"business_day\", value: 5 },\n                    },\n                  },\n                },\n              ],\n            }\n          : {}),\n        redirect_on_completion: \"never\",\n      };\n\n      const session = await stripe.checkout.sessions.create(sessionParams);\n\n      return new Response(JSON.stringify({ clientSecret: session.client_secret }), {\n        headers: { \"Content-Type\": \"application/json\" },\n      });\n    } catch (error) {\n      const stripeError = error as {\n        type?: string;\n        code?: string;\n        statusCode?: number;\n        requestId?: string;\n      };\n      console.error(\"[checkout] stripe session create failed:\", {\n        type: stripeError.type,\n        code: stripeError.code,\n        statusCode: stripeError.statusCode,\n        requestId: stripeError.requestId,\n      });\n\n      if (stripeError.type === \"StripePermissionError\") {\n        return jsonError(\"Stripe key does not have permission to create Checkout Sessions\", 503);\n      }\n\n      return jsonError(\"Checkout session could not be created\", 503);\n    }\n  };\n}\n"],"mappings":";;;;;AAAA,OAAO,YAAY;AAInB,IAAM,qBAAqB;AAC3B,IAAM,YAAY;AAClB,IAAM,eAAe;AAiCrB,SAAS,UAAU,OAAe,QAAgB;AAChD,SAAO,IAAI,SAAS,KAAK,UAAU,EAAE,MAAM,CAAC,GAAG;AAAA,IAC7C;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAEA,SAAS,kBAAkB,OAAmE;AAC5F,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,gBAAgB,OAAiC;AACxD,SAAO,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,KAAK,SAAS;AAC9E;AAEA,SAAS,mBAAmB,OAAoF;AAC9G,SAAO,WAAW,SAAS,YAAY;AACzC;AAEA,SAAS,aACP,OACA,UACA,UACA;AACA,QAAM,aAAa,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,SAAS,MAAM;AAC1D,WAAO,OAAO,SAAS,GAAG,GAAG,iBAAiB,KAAK;AAAA,EACrD,GAAG,CAAC;AAEJ,QAAM,OAAO,SAAS,MAAM,KAAK,CAAC,iBAAiB;AACjD,WAAO,aAAa,aAAa,UAAa,cAAc,aAAa;AAAA,EAC3E,CAAC,KAAK,SAAS,MAAM,SAAS,MAAM,SAAS,CAAC;AAE9C,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,OAAO,KAAK;AAAA,EACd;AACF;AAEO,SAAS,sBAAsB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA4C;AAC1C,SAAO,OAAO,EAAE,QAAQ,MAAM;AAC5B,UAAM,EAAE,mBAAmB,UAAU,IAAI,aAAa;AACtD,QAAI,CAAC,UAAW,QAAO,UAAU,yBAAyB,GAAG;AAE7D,UAAM,SAAS,IAAI,OAAO,WAAW;AAAA,MACnC,YAAY;AAAA,IACd,CAAC;AACD,QAAI;AAEJ,QAAI;AACF,gBAAU,MAAM,QAAQ,KAAK;AAAA,IAC/B,QAAQ;AACN,aAAO,UAAU,wBAAwB,GAAG;AAAA,IAC9C;AAEA,QAAI,CAAC,kBAAkB,OAAO,EAAG,QAAO,UAAU,wBAAwB,GAAG;AAE7E,UAAM,EAAE,MAAM,IAAI;AAClB,QAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,EAAG,QAAO,UAAU,iBAAiB,GAAG;AACtF,QAAI,MAAM,SAAS,UAAW,QAAO,UAAU,iBAAiB,GAAG;AAEnE,UAAM,WAA2B,CAAC;AAClC,eAAW,QAAQ,OAAO;AACxB,UAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO,UAAU,eAAe,GAAG;AAElF,YAAM,EAAE,KAAK,SAAS,IAAI;AAC1B,UAAI,OAAO,QAAQ,YAAY,CAAC,SAAS,GAAG,EAAG,QAAO,UAAU,eAAe,GAAG;AAClF,UAAI,CAAC,gBAAgB,QAAQ,EAAG,QAAO,UAAU,oBAAoB,GAAG;AAExE,eAAS,KAAK,EAAE,KAAK,SAAS,CAAC;AAAA,IACjC;AAEA,UAAM,cAAc,oBAAI,IAAoB;AAC5C,eAAW,EAAE,KAAK,SAAS,KAAK,UAAU;AACxC,kBAAY,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,KAAK,QAAQ;AAAA,IAC7D;AAEA,eAAW,CAAC,EAAE,KAAK,KAAK,aAAa;AACnC,UAAI,QAAQ,aAAc,QAAO,UAAU,oBAAoB,GAAG;AAAA,IACpE;AAEA,UAAM,gBAAgC,MAAM,KAAK,YAAY,QAAQ,CAAC,EAAE;AAAA,MACtE,CAAC,CAAC,KAAK,QAAQ,OAAO,EAAE,KAAK,SAAS;AAAA,IACxC;AACA,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,iBAAyC,CAAC;AAC9C,QAAI,eAAe;AACnB,QAAI,gBAAgB;AAEpB,QAAI,OAAO,cAAc,YAAY,UAAU,KAAK,MAAM,IAAI;AAC5D,UAAI,CAAC,WAAY,QAAO,UAAU,uBAAuB,GAAG;AAC5D,YAAM,QAAQ,MAAM,WAAW,UAAU,KAAK,CAAC;AAC/C,UAAI,CAAC,MAAO,QAAO,UAAU,mBAAmB,GAAG;AACnD,UAAI,mBAAmB,KAAK,EAAG,QAAO,UAAU,MAAM,OAAO,MAAM,MAAM;AACzE,sBAAgB,MAAM;AACtB,YAAM,aAAa,MAAM;AACzB,UAAI,cAAc,WAAW,OAAO,GAAG;AACrC,mBAAW,EAAE,KAAK,SAAS,KAAK,eAAe;AAC7C,gBAAM,YAAY,WAAW,IAAI,GAAG;AAEpC,cAAI,cAAc,UAAa,WAAW,WAAW;AACnD,mBAAO,UAAU,6BAA6B,GAAG,IAAI,GAAG;AAAA,UAC1D;AAAA,QACF;AAAA,MACF;AACA,uBAAiB,MAAM;AACvB,qBAAe,MAAM;AAAA,IACvB;AAEA,UAAM,eAAe,WACjB,eACE,EAAE,QAAQ,GAAG,OAAO,SAAS,UAAU,IACvC,aAAa,eAAe,UAAU,QAAQ,IAChD;AACJ,UAAM,QAAQ,aAAa,MAAM,WAAW,cAAc,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,IAAI,oBAAI,IAAoB;AAE7G,eAAW,EAAE,KAAK,SAAS,KAAK,eAAe;AAC7C,YAAM,YAAY,MAAM,IAAI,GAAG;AAC/B,UAAI,cAAc,UAAa,WAAW,WAAW;AACnD,eAAO,UAAU,iBAAiB,GAAG,IAAI,GAAG;AAAA,MAC9C;AAAA,IACF;AAEA,UAAM,eAAkE,CAAC;AACzE,QAAI,eAAe;AACjB,mBAAa;AAAA,QACX;AAAA,UACE,KAAK;AAAA,UACL,OAAO,EAAE,MAAM,UAAU,QAAQ,2BAAO;AAAA,UACxC,MAAM;AAAA,UACN,UAAU;AAAA,UACV,MAAM,EAAE,gBAAgB,GAAG;AAAA,QAC7B;AAAA,QACA;AAAA,UACE,KAAK;AAAA,UACL,OAAO,EAAE,MAAM,UAAU,QAAQ,mDAAW;AAAA,UAC5C,MAAM;AAAA,UACN,UAAU;AAAA,UACV,MAAM,EAAE,gBAAgB,GAAG;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AACA,iBAAa,KAAK;AAAA,MAChB,KAAK;AAAA,MACL,OAAO,EAAE,MAAM,UAAU,QAAQ,iFAAgB;AAAA,MACjD,MAAM;AAAA,MACN,UAAU;AAAA,MACV,MAAM,EAAE,gBAAgB,IAAI;AAAA,IAC9B,CAAC;AAED,QAAI;AACF,YAAM,gBAAqD;AAAA,QACzD,SAAS;AAAA,QACT,MAAM;AAAA,QACN,YAAY,cAAc,IAAI,CAAC,EAAE,KAAK,SAAS,OAAO;AAAA,UACpD,YAAY;AAAA,YACV,UAAU;AAAA,YACV,cAAc,EAAE,MAAM,SAAS,GAAG,EAAG,KAAK;AAAA,YAC1C,aAAa,eAAe,GAAG,KAAK,SAAS,GAAG,EAAG;AAAA,UACrD;AAAA,UACA;AAAA,QACF,EAAE;AAAA,QACF,UAAU;AAAA,UACR,OAAO,KAAK,UAAU,aAAa;AAAA,UACnC,GAAI,OAAO,cAAc,YAAY,UAAU,KAAK,IAAI,EAAE,YAAY,UAAU,KAAK,EAAE,IAAI,CAAC;AAAA,QAC9F;AAAA,QACA,yBAAyB,EAAE,SAAS,KAAK;AAAA,QACzC,eAAe;AAAA,QACf,6BAA6B,EAAE,mBAAmB,CAAC,IAAI,EAAE;AAAA,QACzD,GAAI,eACA;AAAA,UACE,kBAAkB;AAAA,YAChB;AAAA,cACE,oBAAoB;AAAA,gBAClB,MAAM;AAAA,gBACN,cAAc,EAAE,QAAQ,aAAa,QAAQ,UAAU,MAAM;AAAA,gBAC7D,cAAc,aAAa;AAAA,gBAC3B,mBAAmB;AAAA,kBACjB,SAAS,EAAE,MAAM,gBAAgB,OAAO,EAAE;AAAA,kBAC1C,SAAS,EAAE,MAAM,gBAAgB,OAAO,EAAE;AAAA,gBAC5C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF,IACA,CAAC;AAAA,QACL,wBAAwB;AAAA,MAC1B;AAEA,YAAM,UAAU,MAAM,OAAO,SAAS,SAAS,OAAO,aAAa;AAEnE,aAAO,IAAI,SAAS,KAAK,UAAU,EAAE,cAAc,QAAQ,cAAc,CAAC,GAAG;AAAA,QAC3E,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAChD,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,cAAc;AAMpB,cAAQ,MAAM,4CAA4C;AAAA,QACxD,MAAM,YAAY;AAAA,QAClB,MAAM,YAAY;AAAA,QAClB,YAAY,YAAY;AAAA,QACxB,WAAW,YAAY;AAAA,MACzB,CAAC;AAED,UAAI,YAAY,SAAS,yBAAyB;AAChD,eAAO,UAAU,mEAAmE,GAAG;AAAA,MACzF;AAEA,aAAO,UAAU,yCAAyC,GAAG;AAAA,IAC/D;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-REUSLO5I.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/webhook.ts"],"sourcesContent":["import { Resend } from \"resend\";\nimport Stripe from \"stripe\";\nimport { getServerEnv } from \"./env.js\";\n\nconst STRIPE_API_VERSION = \"2026-05-27.dahlia\";\n\ntype ShippingDetails = NonNullable<\n  NonNullable<Stripe.Checkout.Session[\"collected_information\"]>[\"shipping_details\"]\n>;\ntype SessionWithLegacyShipping = Stripe.Checkout.Session & {\n  shipping_details?: ShippingDetails | null;\n};\nexport type WebhookItem = {\n  sku: string;\n  quantity: number;\n};\nexport type SupportedWebhookEvent =\n  | \"checkout.session.completed\"\n  | \"checkout.session.expired\"\n  | \"charge.refunded\";\n\nexport type OrderEmailLineItem = {\n  description: string | null;\n  quantity: number | null;\n  amount: number | null;\n};\n\nexport type OrderEmailData = {\n  name: string;\n  email: string;\n  phone: string | null;\n  items: OrderEmailLineItem[];\n  totalAmount: number;\n  shippingCostAmount: number | null;\n  shipping: ShippingDetails | null | undefined;\n  customFields: Record<string, string>;\n};\n\nexport type RenderOrderEmail = (order: OrderEmailData) => { subject: string; html: string };\n\nexport type WebhookOrder = {\n  id: string;\n  email: string;\n  name: string | null;\n  phone: string | null;\n  items: WebhookItem[];\n  amount: number;\n  shippingCost: number | null;\n  shippingAddress: ShippingDetails | null | undefined;\n  paymentIntent: string | null;\n  offerSlug: string | null;\n  customFields: Record<string, string> | null;\n  createdAt: number;\n};\n\nexport type WebhookRecordedOrder = {\n  items: WebhookItem[];\n  offerSlug: string | null;\n};\n\nexport type WebhookHandlerOptions = {\n  claimEvent?: (eventId: string) => Promise<boolean>;\n  recordRefund?: (paymentIntentId: string) => Promise<WebhookRecordedOrder | null>;\n  recordExpiry?: (sessionId: string) => Promise<WebhookRecordedOrder | null>;\n  recordOrder?: (order: WebhookOrder) => Promise<void>;\n  restoreStock?: (items: WebhookItem[]) => Promise<void>;\n  decrementStock?: (items: WebhookItem[]) => Promise<void>;\n  incrementOfferSold?: (offerSlug: string, items: WebhookItem[]) => Promise<void>;\n  decrementOfferSold?: (offerSlug: string, items: WebhookItem[]) => Promise<void>;\n  renderOrderEmail?: RenderOrderEmail;\n  orderEmailFrom?: string;\n  orderEmailBcc?: string | string[];\n};\n\nexport type WebhookHandler = ({ request }: { request: Request }) => Promise<Response>;\n\nfunction parseCheckoutItems(items: string | null | undefined): WebhookItem[] {\n  if (!items) return [];\n\n  try {\n    const parsed: unknown = JSON.parse(items);\n    if (!Array.isArray(parsed)) return [];\n\n    return parsed.filter((item): item is WebhookItem => {\n      if (typeof item !== \"object\" || item === null) return false;\n      const { sku, quantity } = item as { sku?: unknown; quantity?: unknown };\n      return typeof sku === \"string\" && typeof quantity === \"number\" && Number.isSafeInteger(quantity) && quantity > 0;\n    });\n  } catch {\n    return [];\n  }\n}\n\nfunction isSupportedWebhookEvent(type: string): type is SupportedWebhookEvent {\n  return (\n    type === \"checkout.session.completed\" ||\n    type === \"checkout.session.expired\" ||\n    type === \"charge.refunded\"\n  );\n}\n\nfunction getPaymentIntentId(paymentIntent: string | Stripe.PaymentIntent | null) {\n  if (typeof paymentIntent === \"string\") return paymentIntent;\n  return paymentIntent?.id ?? null;\n}\n\nfunction providerErrorDetails(error: unknown) {\n  if (typeof error !== \"object\" || error === null) return { message: String(error) };\n  const value = error as {\n    name?: unknown;\n    type?: unknown;\n    code?: unknown;\n    statusCode?: unknown;\n    requestId?: unknown;\n    message?: unknown;\n  };\n\n  return {\n    name: typeof value.name === \"string\" ? value.name : undefined,\n    type: typeof value.type === \"string\" ? value.type : undefined,\n    code: typeof value.code === \"string\" ? value.code : undefined,\n    statusCode: typeof value.statusCode === \"number\" ? value.statusCode : undefined,\n    requestId: typeof value.requestId === \"string\" ? value.requestId : undefined,\n    message: typeof value.message === \"string\" ? value.message : undefined,\n  };\n}\n\nasync function restoreRecordedOrder(\n  order: WebhookRecordedOrder | null,\n  restoreStock?: (items: WebhookItem[]) => Promise<void>,\n  decrementOfferSold?: (offerSlug: string, items: WebhookItem[]) => Promise<void>,\n) {\n  const items = order?.items ?? [];\n  if (items.length > 0 && restoreStock) await restoreStock(items);\n  if (order?.offerSlug && decrementOfferSold) {\n    await decrementOfferSold(order.offerSlug, items);\n  }\n}\n\nexport const GET: WebhookHandler = async () => new Response(\"OK\", { status: 200 });\n\nexport function createWebhookHandler({\n  claimEvent,\n  recordRefund,\n  recordExpiry,\n  recordOrder,\n  restoreStock,\n  decrementStock,\n  incrementOfferSold,\n  decrementOfferSold,\n  renderOrderEmail,\n  orderEmailFrom,\n  orderEmailBcc,\n}: WebhookHandlerOptions = {}): WebhookHandler {\n  return async ({ request }) => {\n    console.log(\"[webhook] POST received, method:\", request.method);\n\n    const {\n      STRIPE_SECRET_KEY: stripeKey,\n      STRIPE_WEBHOOK_SECRET: webhookSecret,\n      RESEND_API_KEY: resendKey,\n    } = getServerEnv();\n\n    if (!stripeKey || !webhookSecret) {\n      console.error(\"[webhook] Stripe env not configured\");\n      return new Response(\"Server error\", { status: 500 });\n    }\n\n    const sig = request.headers.get(\"stripe-signature\");\n    if (!sig) return new Response(\"Bad request\", { status: 400 });\n\n    const payload = await request.text();\n\n    const stripe = new Stripe(stripeKey, { apiVersion: STRIPE_API_VERSION });\n\n    let event: Stripe.Event;\n    try {\n      event = await stripe.webhooks.constructEventAsync(payload, sig, webhookSecret);\n    } catch {\n      return new Response(\"Invalid signature\", { status: 400 });\n    }\n\n    if (!isSupportedWebhookEvent(event.type)) {\n      return new Response(\"OK\", { status: 200 });\n    }\n\n    if (claimEvent) {\n      const claim = await claimEvent(event.id);\n      if (!claim) {\n        console.log(\"[webhook] duplicate event skipped:\", event.id);\n        return new Response(\"OK\", { status: 200 });\n      }\n    }\n\n    if (event.type === \"charge.refunded\") {\n      const charge = event.data.object as Stripe.Charge;\n      const paymentIntent = getPaymentIntentId(charge.payment_intent);\n\n      if (paymentIntent && recordRefund) {\n        const order = await recordRefund(paymentIntent);\n        await restoreRecordedOrder(order, restoreStock, decrementOfferSold);\n      }\n\n      return new Response(\"OK\", { status: 200 });\n    }\n\n    const session = event.data.object as Stripe.Checkout.Session;\n\n    if (event.type === \"checkout.session.expired\") {\n      if (recordExpiry) {\n        const order = await recordExpiry(session.id);\n        await restoreRecordedOrder(order, restoreStock, decrementOfferSold);\n      }\n\n      return new Response(\"OK\", { status: 200 });\n    }\n\n    const email = session.customer_details?.email;\n    const customerName = session.customer_details?.name ?? null;\n    const name = customerName ?? \"お客様\";\n    const phone = session.customer_details?.phone ?? null;\n    const totalAmount = session.amount_total ?? 0;\n    const shippingCostAmount = session.shipping_cost?.amount_total ?? null;\n    const paymentIntent = getPaymentIntentId(session.payment_intent);\n    const checkoutItems = parseCheckoutItems(session.metadata?.items);\n    const cf: Record<string, string> = {};\n    for (const f of (session.custom_fields ?? []) as Array<{\n      key: string;\n      type: string;\n      text?: { value?: string | null };\n      dropdown?: { value?: string | null };\n    }>) {\n      const v = f.type === \"dropdown\" ? f.dropdown?.value : f.text?.value;\n      if (typeof v === \"string\" && v.trim() !== \"\") cf[f.key] = v.trim();\n    }\n    const customFields = Object.keys(cf).length > 0 ? cf : null;\n\n    const shipping =\n      session.collected_information?.shipping_details ??\n      (session as SessionWithLegacyShipping).shipping_details;\n\n    const offerSlugFromMeta = session.metadata?.offer_slug ?? null;\n\n    if (recordOrder) {\n      await recordOrder({\n        id: session.id,\n        email: email ?? \"\",\n        name: customerName,\n        phone,\n        items: checkoutItems,\n        amount: totalAmount,\n        shippingCost: shippingCostAmount,\n        shippingAddress: shipping,\n        paymentIntent,\n        offerSlug: offerSlugFromMeta,\n        customFields,\n        createdAt: Date.now(),\n      });\n      if (checkoutItems.length > 0 && decrementStock) await decrementStock(checkoutItems);\n      if (offerSlugFromMeta && checkoutItems.length > 0 && incrementOfferSold) {\n        await incrementOfferSold(offerSlugFromMeta, checkoutItems);\n      }\n    }\n\n    let lineItems: Stripe.LineItem[] = [];\n    try {\n      const result = await stripe.checkout.sessions.listLineItems(session.id, { limit: 100 });\n      lineItems = result.data;\n    } catch (e) {\n      console.error(\"[webhook] listLineItems failed:\", providerErrorDetails(e));\n    }\n\n    if (!email) {\n      console.error(\"[webhook] no customer email in session:\", session.id);\n      return new Response(\"OK\", { status: 200 });\n    }\n\n    if (!resendKey || !renderOrderEmail || !orderEmailFrom) {\n      if (!resendKey) console.error(\"[webhook] RESEND_API_KEY not set\");\n      return new Response(\"OK\", { status: 200 });\n    }\n\n    const { subject, html } = renderOrderEmail({\n      name,\n      email,\n      phone,\n      items: lineItems.map((item) => ({\n        description: item.description,\n        quantity: item.quantity,\n        amount: item.amount_total,\n      })),\n      totalAmount,\n      shippingCostAmount,\n      shipping,\n      customFields: cf,\n    });\n\n    try {\n      const resend = new Resend(resendKey);\n      const { error } = await resend.emails.send({\n        from: orderEmailFrom,\n        to: email,\n        ...(orderEmailBcc ? { bcc: orderEmailBcc } : {}),\n        subject,\n        html,\n      });\n      if (error) {\n        console.error(\"[webhook] Resend error:\", providerErrorDetails(error));\n      }\n    } catch (e) {\n      console.error(\"[webhook] Resend exception:\", providerErrorDetails(e));\n    }\n\n    return new Response(\"OK\", { status: 200 });\n  };\n}\n"],"mappings":";;;;;AAAA,SAAS,cAAc;AACvB,OAAO,YAAY;AAGnB,IAAM,qBAAqB;AAwE3B,SAAS,mBAAmB,OAAiD;AAC3E,MAAI,CAAC,MAAO,QAAO,CAAC;AAEpB,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,KAAK;AACxC,QAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AAEpC,WAAO,OAAO,OAAO,CAAC,SAA8B;AAClD,UAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,YAAM,EAAE,KAAK,SAAS,IAAI;AAC1B,aAAO,OAAO,QAAQ,YAAY,OAAO,aAAa,YAAY,OAAO,cAAc,QAAQ,KAAK,WAAW;AAAA,IACjH,CAAC;AAAA,EACH,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,SAAS,wBAAwB,MAA6C;AAC5E,SACE,SAAS,gCACT,SAAS,8BACT,SAAS;AAEb;AAEA,SAAS,mBAAmB,eAAqD;AAC/E,MAAI,OAAO,kBAAkB,SAAU,QAAO;AAC9C,SAAO,eAAe,MAAM;AAC9B;AAEA,SAAS,qBAAqB,OAAgB;AAC5C,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO,EAAE,SAAS,OAAO,KAAK,EAAE;AACjF,QAAM,QAAQ;AASd,SAAO;AAAA,IACL,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,IACpD,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,IACpD,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,IACpD,YAAY,OAAO,MAAM,eAAe,WAAW,MAAM,aAAa;AAAA,IACtE,WAAW,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAAA,IACnE,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU;AAAA,EAC/D;AACF;AAEA,eAAe,qBACb,OACA,cACA,oBACA;AACA,QAAM,QAAQ,OAAO,SAAS,CAAC;AAC/B,MAAI,MAAM,SAAS,KAAK,aAAc,OAAM,aAAa,KAAK;AAC9D,MAAI,OAAO,aAAa,oBAAoB;AAC1C,UAAM,mBAAmB,MAAM,WAAW,KAAK;AAAA,EACjD;AACF;AAEO,IAAM,MAAsB,YAAY,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAE1E,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,IAA2B,CAAC,GAAmB;AAC7C,SAAO,OAAO,EAAE,QAAQ,MAAM;AAC5B,YAAQ,IAAI,oCAAoC,QAAQ,MAAM;AAE9D,UAAM;AAAA,MACJ,mBAAmB;AAAA,MACnB,uBAAuB;AAAA,MACvB,gBAAgB;AAAA,IAClB,IAAI,aAAa;AAEjB,QAAI,CAAC,aAAa,CAAC,eAAe;AAChC,cAAQ,MAAM,qCAAqC;AACnD,aAAO,IAAI,SAAS,gBAAgB,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrD;AAEA,UAAM,MAAM,QAAQ,QAAQ,IAAI,kBAAkB;AAClD,QAAI,CAAC,IAAK,QAAO,IAAI,SAAS,eAAe,EAAE,QAAQ,IAAI,CAAC;AAE5D,UAAM,UAAU,MAAM,QAAQ,KAAK;AAEnC,UAAM,SAAS,IAAI,OAAO,WAAW,EAAE,YAAY,mBAAmB,CAAC;AAEvE,QAAI;AACJ,QAAI;AACF,cAAQ,MAAM,OAAO,SAAS,oBAAoB,SAAS,KAAK,aAAa;AAAA,IAC/E,QAAQ;AACN,aAAO,IAAI,SAAS,qBAAqB,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1D;AAEA,QAAI,CAAC,wBAAwB,MAAM,IAAI,GAAG;AACxC,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AAEA,QAAI,YAAY;AACd,YAAM,QAAQ,MAAM,WAAW,MAAM,EAAE;AACvC,UAAI,CAAC,OAAO;AACV,gBAAQ,IAAI,sCAAsC,MAAM,EAAE;AAC1D,eAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC3C;AAAA,IACF;AAEA,QAAI,MAAM,SAAS,mBAAmB;AACpC,YAAM,SAAS,MAAM,KAAK;AAC1B,YAAMA,iBAAgB,mBAAmB,OAAO,cAAc;AAE9D,UAAIA,kBAAiB,cAAc;AACjC,cAAM,QAAQ,MAAM,aAAaA,cAAa;AAC9C,cAAM,qBAAqB,OAAO,cAAc,kBAAkB;AAAA,MACpE;AAEA,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AAEA,UAAM,UAAU,MAAM,KAAK;AAE3B,QAAI,MAAM,SAAS,4BAA4B;AAC7C,UAAI,cAAc;AAChB,cAAM,QAAQ,MAAM,aAAa,QAAQ,EAAE;AAC3C,cAAM,qBAAqB,OAAO,cAAc,kBAAkB;AAAA,MACpE;AAEA,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AAEA,UAAM,QAAQ,QAAQ,kBAAkB;AACxC,UAAM,eAAe,QAAQ,kBAAkB,QAAQ;AACvD,UAAM,OAAO,gBAAgB;AAC7B,UAAM,QAAQ,QAAQ,kBAAkB,SAAS;AACjD,UAAM,cAAc,QAAQ,gBAAgB;AAC5C,UAAM,qBAAqB,QAAQ,eAAe,gBAAgB;AAClE,UAAM,gBAAgB,mBAAmB,QAAQ,cAAc;AAC/D,UAAM,gBAAgB,mBAAmB,QAAQ,UAAU,KAAK;AAChE,UAAM,KAA6B,CAAC;AACpC,eAAW,KAAM,QAAQ,iBAAiB,CAAC,GAKvC;AACF,YAAM,IAAI,EAAE,SAAS,aAAa,EAAE,UAAU,QAAQ,EAAE,MAAM;AAC9D,UAAI,OAAO,MAAM,YAAY,EAAE,KAAK,MAAM,GAAI,IAAG,EAAE,GAAG,IAAI,EAAE,KAAK;AAAA,IACnE;AACA,UAAM,eAAe,OAAO,KAAK,EAAE,EAAE,SAAS,IAAI,KAAK;AAEvD,UAAM,WACJ,QAAQ,uBAAuB,oBAC9B,QAAsC;AAEzC,UAAM,oBAAoB,QAAQ,UAAU,cAAc;AAE1D,QAAI,aAAa;AACf,YAAM,YAAY;AAAA,QAChB,IAAI,QAAQ;AAAA,QACZ,OAAO,SAAS;AAAA,QAChB,MAAM;AAAA,QACN;AAAA,QACA,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,iBAAiB;AAAA,QACjB;AAAA,QACA,WAAW;AAAA,QACX;AAAA,QACA,WAAW,KAAK,IAAI;AAAA,MACtB,CAAC;AACD,UAAI,cAAc,SAAS,KAAK,eAAgB,OAAM,eAAe,aAAa;AAClF,UAAI,qBAAqB,cAAc,SAAS,KAAK,oBAAoB;AACvE,cAAM,mBAAmB,mBAAmB,aAAa;AAAA,MAC3D;AAAA,IACF;AAEA,QAAI,YAA+B,CAAC;AACpC,QAAI;AACF,YAAM,SAAS,MAAM,OAAO,SAAS,SAAS,cAAc,QAAQ,IAAI,EAAE,OAAO,IAAI,CAAC;AACtF,kBAAY,OAAO;AAAA,IACrB,SAAS,GAAG;AACV,cAAQ,MAAM,mCAAmC,qBAAqB,CAAC,CAAC;AAAA,IAC1E;AAEA,QAAI,CAAC,OAAO;AACV,cAAQ,MAAM,2CAA2C,QAAQ,EAAE;AACnE,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AAEA,QAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,gBAAgB;AACtD,UAAI,CAAC,UAAW,SAAQ,MAAM,kCAAkC;AAChE,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AAEA,UAAM,EAAE,SAAS,KAAK,IAAI,iBAAiB;AAAA,MACzC;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,UAAU,IAAI,CAAC,UAAU;AAAA,QAC9B,aAAa,KAAK;AAAA,QAClB,UAAU,KAAK;AAAA,QACf,QAAQ,KAAK;AAAA,MACf,EAAE;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAED,QAAI;AACF,YAAM,SAAS,IAAI,OAAO,SAAS;AACnC,YAAM,EAAE,MAAM,IAAI,MAAM,OAAO,OAAO,KAAK;AAAA,QACzC,MAAM;AAAA,QACN,IAAI;AAAA,QACJ,GAAI,gBAAgB,EAAE,KAAK,cAAc,IAAI,CAAC;AAAA,QAC9C;AAAA,QACA;AAAA,MACF,CAAC;AACD,UAAI,OAAO;AACT,gBAAQ,MAAM,2BAA2B,qBAAqB,KAAK,CAAC;AAAA,MACtE;AAAA,IACF,SAAS,GAAG;AACV,cAAQ,MAAM,+BAA+B,qBAAqB,CAAC,CAAC;AAAA,IACtE;AAEA,WAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3C;AACF;","names":["paymentIntent"]}

package/dist/chunk-WZFM6R5J.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/middleware.ts"],"sourcesContent":["const SECURITY_HEADERS = {\n  \"Strict-Transport-Security\": \"max-age=63072000; includeSubDomains\",\n  \"X-Content-Type-Options\": \"nosniff\",\n  \"X-Frame-Options\": \"SAMEORIGIN\",\n  \"Referrer-Policy\": \"strict-origin-when-cross-origin\",\n};\n\nconst LIMITED_DOCS = [\n  {\n    pathPrefix: \"/docs/asahiko2026special\",\n    expiresAt: Date.parse(\"2026-08-12T14:59:59.999Z\"),\n  },\n] as const;\n\n// Astro の ValidRedirectStatus と同一のユニオンに揃える。\n// number に広げると Astro の APIContext が strict モードで代入不能になる（TS2345）\nexport type UmecRedirectStatus = 300 | 301 | 302 | 303 | 304 | 307 | 308;\n\nexport type UmecMiddlewareContext = {\n  url: URL;\n  redirect: (path: string, status?: UmecRedirectStatus) => Response;\n};\n\nexport type UmecMiddlewareNext = () => Response | Promise<Response>;\n\nexport type UmecMiddleware = (context: UmecMiddlewareContext, next: UmecMiddlewareNext) => Promise<Response>;\n\nexport type UmecMiddlewareOptions = {\n  maintenanceMode: boolean;\n};\n\nfunction withSecurityHeaders(response: Response) {\n  const securedResponse = new Response(response.body, response);\n\n  for (const [name, value] of Object.entries(SECURITY_HEADERS)) {\n    securedResponse.headers.set(name, value);\n  }\n\n  return securedResponse;\n}\n\nexport function createUmecMiddleware({ maintenanceMode }: UmecMiddlewareOptions): UmecMiddleware {\n  return async (context, next) => {\n    const path = context.url.pathname;\n\n    const limitedDoc = LIMITED_DOCS.find(({ pathPrefix }) => path === pathPrefix || path.startsWith(`${pathPrefix}/`));\n    if (limitedDoc && Date.now() > limitedDoc.expiresAt) {\n      return withSecurityHeaders(\n        new Response(\"Not found\", {\n          status: 404,\n          headers: {\n            \"Cache-Control\": \"no-store\",\n          },\n        }),\n      );\n    }\n\n    if (maintenanceMode && path !== \"/maintenance\" && !path.startsWith(\"/api/\")) {\n      const response = context.redirect(\"/maintenance\", 302);\n      response.headers.set(\"Cache-Control\", \"no-store\");\n      return response;\n    }\n\n    return withSecurityHeaders(await next());\n  };\n}\n"],"mappings":";AAAA,IAAM,mBAAmB;AAAA,EACvB,6BAA6B;AAAA,EAC7B,0BAA0B;AAAA,EAC1B,mBAAmB;AAAA,EACnB,mBAAmB;AACrB;AAEA,IAAM,eAAe;AAAA,EACnB;AAAA,IACE,YAAY;AAAA,IACZ,WAAW,KAAK,MAAM,0BAA0B;AAAA,EAClD;AACF;AAmBA,SAAS,oBAAoB,UAAoB;AAC/C,QAAM,kBAAkB,IAAI,SAAS,SAAS,MAAM,QAAQ;AAE5D,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,gBAAgB,GAAG;AAC5D,oBAAgB,QAAQ,IAAI,MAAM,KAAK;AAAA,EACzC;AAEA,SAAO;AACT;AAEO,SAAS,qBAAqB,EAAE,gBAAgB,GAA0C;AAC/F,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,OAAO,QAAQ,IAAI;AAEzB,UAAM,aAAa,aAAa,KAAK,CAAC,EAAE,WAAW,MAAM,SAAS,cAAc,KAAK,WAAW,GAAG,UAAU,GAAG,CAAC;AACjH,QAAI,cAAc,KAAK,IAAI,IAAI,WAAW,WAAW;AACnD,aAAO;AAAA,QACL,IAAI,SAAS,aAAa;AAAA,UACxB,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,iBAAiB;AAAA,UACnB;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,mBAAmB,SAAS,kBAAkB,CAAC,KAAK,WAAW,OAAO,GAAG;AAC3E,YAAM,WAAW,QAAQ,SAAS,gBAAgB,GAAG;AACrD,eAAS,QAAQ,IAAI,iBAAiB,UAAU;AAChD,aAAO;AAAA,IACT;AAEA,WAAO,oBAAoB,MAAM,KAAK,CAAC;AAAA,EACzC;AACF;","names":[]}