@voyant-travel/auth 0.138.0 → 0.140.0

package/dist/storefront-routes.js

@@ -0,0 +1,282 @@
+import { createRoute, OpenAPIHono, z } from "@hono/zod-openapi";
+import { openApiValidationHook, parseJsonBody } from "@voyant-travel/hono";
+import { hasApiKeyPermission, permissionStringsToPermissions } from "@voyant-travel/types/api-keys";
+import { createStorefrontInputSchema, issueStorefrontApiKeyInputSchema, putStorefrontProviderCredentialInputSchema, setStorefrontAllowedOriginsInputSchema, updateStorefrontAccountPolicyInputSchema, updateStorefrontInputSchema, updateStorefrontMethodsInputSchema, } from "./storefront-admin-contracts.js";
+import { StorefrontInputError } from "./storefront-origins.js";
+const storefrontAdminApiId = "@voyant-travel/auth#storefront.api.admin";
+const jsonBody = (schema) => ({
+    required: true,
+    content: { "application/json": { schema } },
+});
+const responses = (...statuses) => Object.fromEntries(statuses.map((status) => [status, { description: `HTTP ${status}` }]));
+const storefrontRoute = (config) => createRoute({
+    method: config.method,
+    path: config.path,
+    operationId: config.operationId,
+    "x-voyant-api-id": storefrontAdminApiId,
+    ...(config.request ? { request: config.request } : {}),
+    responses: responses(...config.statuses),
+});
+const storefrontIdParams = z.object({ storefrontId: z.string() });
+const keyIdParams = z.object({ storefrontId: z.string(), keyId: z.string() });
+const providerParams = z.object({
+    storefrontId: z.string(),
+    provider: z.enum(["google", "facebook", "apple"]),
+});
+const capabilitiesRoute = storefrontRoute({
+    method: "get",
+    path: "/capabilities",
+    operationId: "getStorefrontCapabilities",
+    statuses: [200, 401, 403],
+});
+const listStorefrontsRoute = storefrontRoute({
+    method: "get",
+    path: "/storefronts",
+    operationId: "listStorefronts",
+    statuses: [200, 401, 403],
+});
+const createStorefrontRoute = storefrontRoute({
+    method: "post",
+    path: "/storefronts",
+    operationId: "createStorefront",
+    request: { body: jsonBody(createStorefrontInputSchema) },
+    statuses: [201, 400, 401, 403],
+});
+const getStorefrontRoute = storefrontRoute({
+    method: "get",
+    path: "/storefronts/{storefrontId}",
+    operationId: "getStorefront",
+    request: { params: storefrontIdParams },
+    statuses: [200, 401, 403, 404],
+});
+const updateStorefrontRoute = storefrontRoute({
+    method: "patch",
+    path: "/storefronts/{storefrontId}",
+    operationId: "updateStorefront",
+    request: { params: storefrontIdParams, body: jsonBody(updateStorefrontInputSchema) },
+    statuses: [200, 400, 401, 403, 404],
+});
+const deleteStorefrontRoute = storefrontRoute({
+    method: "delete",
+    path: "/storefronts/{storefrontId}",
+    operationId: "deleteStorefront",
+    request: { params: storefrontIdParams },
+    statuses: [204, 401, 403, 404],
+});
+const setAllowedOriginsRoute = storefrontRoute({
+    method: "put",
+    path: "/storefronts/{storefrontId}/allowed-origins",
+    operationId: "setStorefrontAllowedOrigins",
+    request: { params: storefrontIdParams, body: jsonBody(setStorefrontAllowedOriginsInputSchema) },
+    statuses: [200, 400, 401, 403, 404],
+});
+const listApiKeysRoute = storefrontRoute({
+    method: "get",
+    path: "/storefronts/{storefrontId}/keys",
+    operationId: "listStorefrontApiKeys",
+    request: { params: storefrontIdParams },
+    statuses: [200, 401, 403, 404],
+});
+const issueApiKeyRoute = storefrontRoute({
+    method: "post",
+    path: "/storefronts/{storefrontId}/keys",
+    operationId: "issueStorefrontApiKey",
+    request: { params: storefrontIdParams, body: jsonBody(issueStorefrontApiKeyInputSchema) },
+    statuses: [201, 400, 401, 403, 404],
+});
+const rotateApiKeyRoute = storefrontRoute({
+    method: "post",
+    path: "/storefronts/{storefrontId}/keys/{keyId}/rotate",
+    operationId: "rotateStorefrontApiKey",
+    request: { params: keyIdParams },
+    statuses: [201, 400, 401, 403, 404],
+});
+const revokeApiKeyRoute = storefrontRoute({
+    method: "delete",
+    path: "/storefronts/{storefrontId}/keys/{keyId}",
+    operationId: "revokeStorefrontApiKey",
+    request: { params: keyIdParams },
+    statuses: [204, 401, 403, 404],
+});
+const updateAccountPolicyRoute = storefrontRoute({
+    method: "put",
+    path: "/storefronts/{storefrontId}/account-policy",
+    operationId: "updateStorefrontAccountPolicy",
+    request: { params: storefrontIdParams, body: jsonBody(updateStorefrontAccountPolicyInputSchema) },
+    statuses: [200, 400, 401, 403, 404],
+});
+const updateMethodsRoute = storefrontRoute({
+    method: "put",
+    path: "/storefronts/{storefrontId}/methods",
+    operationId: "updateStorefrontMethods",
+    request: { params: storefrontIdParams, body: jsonBody(updateStorefrontMethodsInputSchema) },
+    statuses: [200, 400, 401, 403, 404],
+});
+const listProviderCredentialsRoute = storefrontRoute({
+    method: "get",
+    path: "/storefronts/{storefrontId}/provider-credentials",
+    operationId: "listStorefrontProviderCredentials",
+    request: { params: storefrontIdParams },
+    statuses: [200, 401, 403, 404],
+});
+const putProviderCredentialRoute = storefrontRoute({
+    method: "put",
+    path: "/storefronts/{storefrontId}/provider-credentials/{provider}",
+    operationId: "putStorefrontProviderCredential",
+    request: {
+        params: providerParams,
+        body: jsonBody(putStorefrontProviderCredentialInputSchema),
+    },
+    statuses: [204, 400, 401, 403, 404],
+});
+const deleteProviderCredentialRoute = storefrontRoute({
+    method: "delete",
+    path: "/storefronts/{storefrontId}/provider-credentials/{provider}",
+    operationId: "deleteStorefrontProviderCredential",
+    request: { params: providerParams },
+    statuses: [204, 401, 403, 404],
+});
+/**
+ * Resolve the operator-scoped request context. The organization is derived from
+ * the admin session — never a client parameter — so every write is bounded to
+ * the acting operator's organization.
+ */
+function requestContext(c) {
+    const userId = c.get("userId");
+    if (!userId)
+        return c.json({ error: "Unauthorized" }, 401);
+    const organizationId = c.get("organizationId");
+    if (!organizationId)
+        return c.json({ error: "No active operator organization." }, 403);
+    return { bindings: c.env, db: c.get("db"), organizationId };
+}
+function canManageStorefronts(c) {
+    return hasApiKeyPermission(permissionStringsToPermissions(c.get("scopes") ?? []), "storefronts", "write");
+}
+function requireManage(c) {
+    return canManageStorefronts(c) ? null : c.json({ error: "Forbidden" }, 403);
+}
+function handleError(c, error) {
+    if (error instanceof StorefrontInputError) {
+        return c.json({ error: error.message }, 400);
+    }
+    if (error instanceof Error &&
+        "status" in error &&
+        typeof error.status === "number" &&
+        error.status >= 400 &&
+        error.status <= 599) {
+        return c.json({ error: error.message }, error.status);
+    }
+    throw error;
+}
+export function createStorefrontAdminRoutes(runtime, options) {
+    const routes = new OpenAPIHono({ defaultHook: openApiValidationHook });
+    const run = async (c, operation, guard = "read") => {
+        const context = requestContext(c);
+        if (context instanceof Response)
+            return context;
+        if (guard === "write") {
+            const forbidden = requireManage(c);
+            if (forbidden)
+                return forbidden;
+        }
+        try {
+            return await operation(context);
+        }
+        catch (error) {
+            return handleError(c, error);
+        }
+    };
+    routes.openapi(capabilitiesRoute, (c) => {
+        if (!c.get("userId"))
+            return c.json({ error: "Unauthorized" }, 401);
+        if (!c.get("organizationId"))
+            return c.json({ error: "No active operator organization." }, 403);
+        const manageProviders = canManageStorefronts(c);
+        return c.json({
+            data: { businessAccounts: options.businessAccounts, manageProviders },
+        });
+    });
+    routes.openapi(listStorefrontsRoute, async (c) => {
+        const result = await run(c, (context) => runtime.listStorefronts(context));
+        return result instanceof Response ? result : c.json({ data: result });
+    });
+    routes.openapi(createStorefrontRoute, async (c) => {
+        const input = await parseJsonBody(c, createStorefrontInputSchema);
+        const result = await run(c, (context) => runtime.createStorefront(context, input), "write");
+        return result instanceof Response ? result : c.json({ data: result }, 201);
+    });
+    routes.openapi(getStorefrontRoute, async (c) => {
+        const { storefrontId } = c.req.param();
+        const result = await run(c, (context) => runtime.getStorefront(context, storefrontId));
+        return result instanceof Response ? result : c.json({ data: result });
+    });
+    routes.openapi(updateStorefrontRoute, async (c) => {
+        const { storefrontId } = c.req.param();
+        const input = await parseJsonBody(c, updateStorefrontInputSchema);
+        const result = await run(c, (context) => runtime.updateStorefront(context, storefrontId, input), "write");
+        return result instanceof Response ? result : c.json({ data: result });
+    });
+    routes.openapi(deleteStorefrontRoute, async (c) => {
+        const { storefrontId } = c.req.param();
+        const result = await run(c, (context) => runtime.deleteStorefront(context, storefrontId), "write");
+        return result instanceof Response ? result : c.body(null, 204);
+    });
+    routes.openapi(setAllowedOriginsRoute, async (c) => {
+        const { storefrontId } = c.req.param();
+        const input = await parseJsonBody(c, setStorefrontAllowedOriginsInputSchema);
+        const result = await run(c, (context) => runtime.setAllowedOrigins(context, storefrontId, input.origins), "write");
+        return result instanceof Response ? result : c.json({ data: result });
+    });
+    routes.openapi(listApiKeysRoute, async (c) => {
+        const { storefrontId } = c.req.param();
+        const result = await run(c, (context) => runtime.listApiKeys(context, storefrontId));
+        return result instanceof Response ? result : c.json({ data: result });
+    });
+    routes.openapi(issueApiKeyRoute, async (c) => {
+        const { storefrontId } = c.req.param();
+        const input = await parseJsonBody(c, issueStorefrontApiKeyInputSchema);
+        const result = await run(c, (context) => runtime.issueApiKey(context, storefrontId, input.kind, input.name ?? null), "write");
+        return result instanceof Response ? result : c.json({ data: result }, 201);
+    });
+    routes.openapi(rotateApiKeyRoute, async (c) => {
+        const { storefrontId, keyId } = c.req.param();
+        const result = await run(c, (context) => runtime.rotateApiKey(context, storefrontId, keyId), "write");
+        return result instanceof Response ? result : c.json({ data: result }, 201);
+    });
+    routes.openapi(revokeApiKeyRoute, async (c) => {
+        const { storefrontId, keyId } = c.req.param();
+        const result = await run(c, (context) => runtime.revokeApiKey(context, storefrontId, keyId), "write");
+        return result instanceof Response ? result : c.body(null, 204);
+    });
+    routes.openapi(updateAccountPolicyRoute, async (c) => {
+        const { storefrontId } = c.req.param();
+        const input = await parseJsonBody(c, updateStorefrontAccountPolicyInputSchema);
+        const result = await run(c, (context) => runtime.updateAccountPolicy(context, storefrontId, input), "write");
+        return result instanceof Response ? result : c.json({ data: result });
+    });
+    routes.openapi(updateMethodsRoute, async (c) => {
+        const { storefrontId } = c.req.param();
+        const input = await parseJsonBody(c, updateStorefrontMethodsInputSchema);
+        const result = await run(c, (context) => runtime.updateMethods(context, storefrontId, input), "write");
+        return result instanceof Response ? result : c.json({ data: result });
+    });
+    routes.openapi(listProviderCredentialsRoute, async (c) => {
+        const { storefrontId } = c.req.param();
+        const result = await run(c, (context) => runtime.listProviderCredentials(context, storefrontId));
+        return result instanceof Response ? result : c.json({ data: result });
+    });
+    routes.openapi(putProviderCredentialRoute, async (c) => {
+        const { storefrontId, provider } = c.req.param();
+        const input = await parseJsonBody(c, putStorefrontProviderCredentialInputSchema);
+        const result = await run(c, (context) => runtime.putProviderCredential(context, storefrontId, provider, input), "write");
+        return result instanceof Response ? result : c.body(null, 204);
+    });
+    routes.openapi(deleteProviderCredentialRoute, async (c) => {
+        const { storefrontId, provider } = c.req.param();
+        const result = await run(c, (context) => runtime.deleteProviderCredential(context, storefrontId, provider), "write");
+        return result instanceof Response ? result : c.body(null, 204);
+    });
+    return routes;
+}
+//# sourceMappingURL=storefront-routes.js.map

package/dist/storefront-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storefront-routes.js","sourceRoot":"","sources":["../src/storefront-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAA;AAC/D,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAiB,MAAM,qBAAqB,CAAA;AACzF,OAAO,EAAE,mBAAmB,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAA;AAGnG,OAAO,EACL,2BAA2B,EAC3B,gCAAgC,EAChC,0CAA0C,EAC1C,sCAAsC,EACtC,wCAAwC,EACxC,2BAA2B,EAC3B,kCAAkC,GACnC,MAAM,iCAAiC,CAAA;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAiB9D,MAAM,oBAAoB,GAAG,0CAA0C,CAAA;AACvE,MAAM,QAAQ,GAAG,CAAyB,MAAS,EAAE,EAAE,CAAC,CAAC;IACvD,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,EAAE;CAC5C,CAAC,CAAA;AACF,MAAM,SAAS,GAAG,CAAC,GAAG,QAAkB,EAAE,EAAE,CAC1C,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;AAC3F,MAAM,eAAe,GAAG,CAGtB,MAMD,EAAE,EAAE,CACH,WAAW,CAAC;IACV,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,WAAW,EAAE,MAAM,CAAC,WAAW;IAC/B,iBAAiB,EAAE,oBAAoB;IACvC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,SAAS,EAAE,SAAS,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;CACzC,CAAC,CAAA;AAEJ,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AACjE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAC7E,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;CAClD,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAG,eAAe,CAAC;IACxC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,2BAA2B;IACxC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CAC1B,CAAC,CAAA;AACF,MAAM,oBAAoB,GAAG,eAAe,CAAC;IAC3C,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,iBAAiB;IAC9B,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CAC1B,CAAC,CAAA;AACF,MAAM,qBAAqB,GAAG,eAAe,CAAC;IAC5C,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,kBAAkB;IAC/B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,2BAA2B,CAAC,EAAE;IACxD,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CAC/B,CAAC,CAAA;AACF,MAAM,kBAAkB,GAAG,eAAe,CAAC;IACzC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,6BAA6B;IACnC,WAAW,EAAE,eAAe;IAC5B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACvC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CAC/B,CAAC,CAAA;AACF,MAAM,qBAAqB,GAAG,eAAe,CAAC;IAC5C,MAAM,EAAE,OAAO;IACf,IAAI,EAAE,6BAA6B;IACnC,WAAW,EAAE,kBAAkB;IAC/B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,CAAC,2BAA2B,CAAC,EAAE;IACpF,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CACpC,CAAC,CAAA;AACF,MAAM,qBAAqB,GAAG,eAAe,CAAC;IAC5C,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,6BAA6B;IACnC,WAAW,EAAE,kBAAkB;IAC/B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACvC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CAC/B,CAAC,CAAA;AACF,MAAM,sBAAsB,GAAG,eAAe,CAAC;IAC7C,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,6CAA6C;IACnD,WAAW,EAAE,6BAA6B;IAC1C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,CAAC,sCAAsC,CAAC,EAAE;IAC/F,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CACpC,CAAC,CAAA;AACF,MAAM,gBAAgB,GAAG,eAAe,CAAC;IACvC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,kCAAkC;IACxC,WAAW,EAAE,uBAAuB;IACpC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACvC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CAC/B,CAAC,CAAA;AACF,MAAM,gBAAgB,GAAG,eAAe,CAAC;IACvC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,kCAAkC;IACxC,WAAW,EAAE,uBAAuB;IACpC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,CAAC,gCAAgC,CAAC,EAAE;IACzF,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CACpC,CAAC,CAAA;AACF,MAAM,iBAAiB,GAAG,eAAe,CAAC;IACxC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,iDAAiD;IACvD,WAAW,EAAE,wBAAwB;IACrC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;IAChC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CACpC,CAAC,CAAA;AACF,MAAM,iBAAiB,GAAG,eAAe,CAAC;IACxC,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,0CAA0C;IAChD,WAAW,EAAE,wBAAwB;IACrC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;IAChC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CAC/B,CAAC,CAAA;AACF,MAAM,wBAAwB,GAAG,eAAe,CAAC;IAC/C,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,4CAA4C;IAClD,WAAW,EAAE,+BAA+B;IAC5C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,CAAC,wCAAwC,CAAC,EAAE;IACjG,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CACpC,CAAC,CAAA;AACF,MAAM,kBAAkB,GAAG,eAAe,CAAC;IACzC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,qCAAqC;IAC3C,WAAW,EAAE,yBAAyB;IACtC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,CAAC,kCAAkC,CAAC,EAAE;IAC3F,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CACpC,CAAC,CAAA;AACF,MAAM,4BAA4B,GAAG,eAAe,CAAC;IACnD,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,kDAAkD;IACxD,WAAW,EAAE,mCAAmC;IAChD,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACvC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CAC/B,CAAC,CAAA;AACF,MAAM,0BAA0B,GAAG,eAAe,CAAC;IACjD,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,6DAA6D;IACnE,WAAW,EAAE,iCAAiC;IAC9C,OAAO,EAAE;QACP,MAAM,EAAE,cAAc;QACtB,IAAI,EAAE,QAAQ,CAAC,0CAA0C,CAAC;KAC3D;IACD,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CACpC,CAAC,CAAA;AACF,MAAM,6BAA6B,GAAG,eAAe,CAAC;IACpD,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,6DAA6D;IACnE,WAAW,EAAE,oCAAoC;IACjD,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE;IACnC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;CAC/B,CAAC,CAAA;AAEF;;;;GAIG;AACH,SAAS,cAAc,CAAC,CAAyB;IAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC9B,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;IAC1D,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC9C,IAAI,CAAC,cAAc;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,GAAG,CAAC,CAAA;IACtF,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,CAAA;AAC7D,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAyB;IACrD,OAAO,mBAAmB,CACxB,8BAA8B,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EACrD,aAAa,EACb,OAAO,CACR,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,CAAyB;IAC9C,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,CAAyB,EAAE,KAAc;IAC5D,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;QAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;IAC9C,CAAC;IACD,IACE,KAAK,YAAY,KAAK;QACtB,QAAQ,IAAI,KAAK;QACjB,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,KAAK,CAAC,MAAM,IAAI,GAAG;QACnB,KAAK,CAAC,MAAM,IAAI,GAAG,EACnB,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,MAAa,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,KAAK,CAAA;AACb,CAAC;AAOD,MAAM,UAAU,2BAA2B,CACzC,OAAkC,EAClC,OAAoC;IAEpC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAgB,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC,CAAA;IAErF,MAAM,GAAG,GAAG,KAAK,EACf,CAAyB,EACzB,SAA4D,EAC5D,QAA0B,MAAM,EACT,EAAE;QACzB,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,IAAI,OAAO,YAAY,QAAQ;YAAE,OAAO,OAAO,CAAA;QAC/C,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAClC,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAA;QACjC,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC,CAAA;IAED,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE;QACtC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QACnE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC/F,MAAM,eAAe,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QAC/C,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,eAAe,EAAE;SACtE,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;QAC1E,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAA;QACjE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAA;QAC3F,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;QACtC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;QACtF,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChD,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;QACtC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAA;QACjE,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,CAAC,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,EACnE,OAAO,CACR,CAAA;QACD,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChD,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;QACtC,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,CAAC,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,EAC5D,OAAO,CACR,CAAA;QACD,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;QACtC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,sCAAsC,CAAC,CAAA;QAC5E,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,CAAC,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,EAC5E,OAAO,CACR,CAAA;QACD,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;QACtC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;QACpF,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;QACtC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAA;QACtE,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,CAAC,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,EACvF,OAAO,CACR,CAAA;QACD,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;QAC7C,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,CAAC,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,EAC/D,OAAO,CACR,CAAA;QACD,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;QAC7C,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,CAAC,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,EAC/D,OAAO,CACR,CAAA;QACD,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnD,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;QACtC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAA;QAC9E,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,CAAC,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,EACtE,OAAO,CACR,CAAA;QACD,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;QACtC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAA;QACxE,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,CAAC,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,EAChE,OAAO,CACR,CAAA;QACD,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvD,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;QACtC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;QAChG,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAoC,CAAA;QAClF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,0CAA0C,CAAC,CAAA;QAChF,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,CAAC,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,EAClF,OAAO,CACR,CAAA;QACD,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxD,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAoC,CAAA;QAClF,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,CAAC,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,EAC9E,OAAO,CACR,CAAA;QACD,OAAO,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import { createRoute, OpenAPIHono, z } from \"@hono/zod-openapi\"\nimport { openApiValidationHook, parseJsonBody, type VoyantDb } from \"@voyant-travel/hono\"\nimport { hasApiKeyPermission, permissionStringsToPermissions } from \"@voyant-travel/types/api-keys\"\nimport type { Context } from \"hono\"\n\nimport {\n  createStorefrontInputSchema,\n  issueStorefrontApiKeyInputSchema,\n  putStorefrontProviderCredentialInputSchema,\n  setStorefrontAllowedOriginsInputSchema,\n  updateStorefrontAccountPolicyInputSchema,\n  updateStorefrontInputSchema,\n  updateStorefrontMethodsInputSchema,\n} from \"./storefront-admin-contracts.js\"\nimport { StorefrontInputError } from \"./storefront-origins.js\"\nimport type {\n  StorefrontRequestContext,\n  StorefrontRuntimeProvider,\n} from \"./storefront-runtime-port.js\"\n\ntype StorefrontEnv = {\n  Bindings: Record<string, unknown>\n  Variables: {\n    userId?: string\n    organizationId?: string | null\n    scopes?: string[] | null\n    db: VoyantDb\n  }\n}\ntype StorefrontRouteContext = Context<StorefrontEnv>\n\nconst storefrontAdminApiId = \"@voyant-travel/auth#storefront.api.admin\"\nconst jsonBody = <T extends z.ZodTypeAny>(schema: T) => ({\n  required: true,\n  content: { \"application/json\": { schema } },\n})\nconst responses = (...statuses: number[]) =>\n  Object.fromEntries(statuses.map((status) => [status, { description: `HTTP ${status}` }]))\nconst storefrontRoute = <\n  M extends \"get\" | \"post\" | \"put\" | \"patch\" | \"delete\",\n  P extends string,\n>(config: {\n  method: M\n  path: P\n  operationId: string\n  request?: Record<string, unknown>\n  statuses: number[]\n}) =>\n  createRoute({\n    method: config.method,\n    path: config.path,\n    operationId: config.operationId,\n    \"x-voyant-api-id\": storefrontAdminApiId,\n    ...(config.request ? { request: config.request } : {}),\n    responses: responses(...config.statuses),\n  })\n\nconst storefrontIdParams = z.object({ storefrontId: z.string() })\nconst keyIdParams = z.object({ storefrontId: z.string(), keyId: z.string() })\nconst providerParams = z.object({\n  storefrontId: z.string(),\n  provider: z.enum([\"google\", \"facebook\", \"apple\"]),\n})\n\nconst capabilitiesRoute = storefrontRoute({\n  method: \"get\",\n  path: \"/capabilities\",\n  operationId: \"getStorefrontCapabilities\",\n  statuses: [200, 401, 403],\n})\nconst listStorefrontsRoute = storefrontRoute({\n  method: \"get\",\n  path: \"/storefronts\",\n  operationId: \"listStorefronts\",\n  statuses: [200, 401, 403],\n})\nconst createStorefrontRoute = storefrontRoute({\n  method: \"post\",\n  path: \"/storefronts\",\n  operationId: \"createStorefront\",\n  request: { body: jsonBody(createStorefrontInputSchema) },\n  statuses: [201, 400, 401, 403],\n})\nconst getStorefrontRoute = storefrontRoute({\n  method: \"get\",\n  path: \"/storefronts/{storefrontId}\",\n  operationId: \"getStorefront\",\n  request: { params: storefrontIdParams },\n  statuses: [200, 401, 403, 404],\n})\nconst updateStorefrontRoute = storefrontRoute({\n  method: \"patch\",\n  path: \"/storefronts/{storefrontId}\",\n  operationId: \"updateStorefront\",\n  request: { params: storefrontIdParams, body: jsonBody(updateStorefrontInputSchema) },\n  statuses: [200, 400, 401, 403, 404],\n})\nconst deleteStorefrontRoute = storefrontRoute({\n  method: \"delete\",\n  path: \"/storefronts/{storefrontId}\",\n  operationId: \"deleteStorefront\",\n  request: { params: storefrontIdParams },\n  statuses: [204, 401, 403, 404],\n})\nconst setAllowedOriginsRoute = storefrontRoute({\n  method: \"put\",\n  path: \"/storefronts/{storefrontId}/allowed-origins\",\n  operationId: \"setStorefrontAllowedOrigins\",\n  request: { params: storefrontIdParams, body: jsonBody(setStorefrontAllowedOriginsInputSchema) },\n  statuses: [200, 400, 401, 403, 404],\n})\nconst listApiKeysRoute = storefrontRoute({\n  method: \"get\",\n  path: \"/storefronts/{storefrontId}/keys\",\n  operationId: \"listStorefrontApiKeys\",\n  request: { params: storefrontIdParams },\n  statuses: [200, 401, 403, 404],\n})\nconst issueApiKeyRoute = storefrontRoute({\n  method: \"post\",\n  path: \"/storefronts/{storefrontId}/keys\",\n  operationId: \"issueStorefrontApiKey\",\n  request: { params: storefrontIdParams, body: jsonBody(issueStorefrontApiKeyInputSchema) },\n  statuses: [201, 400, 401, 403, 404],\n})\nconst rotateApiKeyRoute = storefrontRoute({\n  method: \"post\",\n  path: \"/storefronts/{storefrontId}/keys/{keyId}/rotate\",\n  operationId: \"rotateStorefrontApiKey\",\n  request: { params: keyIdParams },\n  statuses: [201, 400, 401, 403, 404],\n})\nconst revokeApiKeyRoute = storefrontRoute({\n  method: \"delete\",\n  path: \"/storefronts/{storefrontId}/keys/{keyId}\",\n  operationId: \"revokeStorefrontApiKey\",\n  request: { params: keyIdParams },\n  statuses: [204, 401, 403, 404],\n})\nconst updateAccountPolicyRoute = storefrontRoute({\n  method: \"put\",\n  path: \"/storefronts/{storefrontId}/account-policy\",\n  operationId: \"updateStorefrontAccountPolicy\",\n  request: { params: storefrontIdParams, body: jsonBody(updateStorefrontAccountPolicyInputSchema) },\n  statuses: [200, 400, 401, 403, 404],\n})\nconst updateMethodsRoute = storefrontRoute({\n  method: \"put\",\n  path: \"/storefronts/{storefrontId}/methods\",\n  operationId: \"updateStorefrontMethods\",\n  request: { params: storefrontIdParams, body: jsonBody(updateStorefrontMethodsInputSchema) },\n  statuses: [200, 400, 401, 403, 404],\n})\nconst listProviderCredentialsRoute = storefrontRoute({\n  method: \"get\",\n  path: \"/storefronts/{storefrontId}/provider-credentials\",\n  operationId: \"listStorefrontProviderCredentials\",\n  request: { params: storefrontIdParams },\n  statuses: [200, 401, 403, 404],\n})\nconst putProviderCredentialRoute = storefrontRoute({\n  method: \"put\",\n  path: \"/storefronts/{storefrontId}/provider-credentials/{provider}\",\n  operationId: \"putStorefrontProviderCredential\",\n  request: {\n    params: providerParams,\n    body: jsonBody(putStorefrontProviderCredentialInputSchema),\n  },\n  statuses: [204, 400, 401, 403, 404],\n})\nconst deleteProviderCredentialRoute = storefrontRoute({\n  method: \"delete\",\n  path: \"/storefronts/{storefrontId}/provider-credentials/{provider}\",\n  operationId: \"deleteStorefrontProviderCredential\",\n  request: { params: providerParams },\n  statuses: [204, 401, 403, 404],\n})\n\n/**\n * Resolve the operator-scoped request context. The organization is derived from\n * the admin session — never a client parameter — so every write is bounded to\n * the acting operator's organization.\n */\nfunction requestContext(c: StorefrontRouteContext): StorefrontRequestContext | Response {\n  const userId = c.get(\"userId\")\n  if (!userId) return c.json({ error: \"Unauthorized\" }, 401)\n  const organizationId = c.get(\"organizationId\")\n  if (!organizationId) return c.json({ error: \"No active operator organization.\" }, 403)\n  return { bindings: c.env, db: c.get(\"db\"), organizationId }\n}\n\nfunction canManageStorefronts(c: StorefrontRouteContext): boolean {\n  return hasApiKeyPermission(\n    permissionStringsToPermissions(c.get(\"scopes\") ?? []),\n    \"storefronts\",\n    \"write\",\n  )\n}\n\nfunction requireManage(c: StorefrontRouteContext): Response | null {\n  return canManageStorefronts(c) ? null : c.json({ error: \"Forbidden\" }, 403)\n}\n\nfunction handleError(c: StorefrontRouteContext, error: unknown): Response {\n  if (error instanceof StorefrontInputError) {\n    return c.json({ error: error.message }, 400)\n  }\n  if (\n    error instanceof Error &&\n    \"status\" in error &&\n    typeof error.status === \"number\" &&\n    error.status >= 400 &&\n    error.status <= 599\n  ) {\n    return c.json({ error: error.message }, error.status as 400)\n  }\n  throw error\n}\n\nexport interface StorefrontAdminRouteOptions {\n  /** Whether the deployment supports business (organization) buyer accounts. */\n  businessAccounts: boolean\n}\n\nexport function createStorefrontAdminRoutes(\n  runtime: StorefrontRuntimeProvider,\n  options: StorefrontAdminRouteOptions,\n) {\n  const routes = new OpenAPIHono<StorefrontEnv>({ defaultHook: openApiValidationHook })\n\n  const run = async <T>(\n    c: StorefrontRouteContext,\n    operation: (context: StorefrontRequestContext) => Promise<T>,\n    guard: \"read\" | \"write\" = \"read\",\n  ): Promise<T | Response> => {\n    const context = requestContext(c)\n    if (context instanceof Response) return context\n    if (guard === \"write\") {\n      const forbidden = requireManage(c)\n      if (forbidden) return forbidden\n    }\n    try {\n      return await operation(context)\n    } catch (error) {\n      return handleError(c, error)\n    }\n  }\n\n  routes.openapi(capabilitiesRoute, (c) => {\n    if (!c.get(\"userId\")) return c.json({ error: \"Unauthorized\" }, 401)\n    if (!c.get(\"organizationId\")) return c.json({ error: \"No active operator organization.\" }, 403)\n    const manageProviders = canManageStorefronts(c)\n    return c.json({\n      data: { businessAccounts: options.businessAccounts, manageProviders },\n    })\n  })\n\n  routes.openapi(listStorefrontsRoute, async (c) => {\n    const result = await run(c, (context) => runtime.listStorefronts(context))\n    return result instanceof Response ? result : c.json({ data: result })\n  })\n\n  routes.openapi(createStorefrontRoute, async (c) => {\n    const input = await parseJsonBody(c, createStorefrontInputSchema)\n    const result = await run(c, (context) => runtime.createStorefront(context, input), \"write\")\n    return result instanceof Response ? result : c.json({ data: result }, 201)\n  })\n\n  routes.openapi(getStorefrontRoute, async (c) => {\n    const { storefrontId } = c.req.param()\n    const result = await run(c, (context) => runtime.getStorefront(context, storefrontId))\n    return result instanceof Response ? result : c.json({ data: result })\n  })\n\n  routes.openapi(updateStorefrontRoute, async (c) => {\n    const { storefrontId } = c.req.param()\n    const input = await parseJsonBody(c, updateStorefrontInputSchema)\n    const result = await run(\n      c,\n      (context) => runtime.updateStorefront(context, storefrontId, input),\n      \"write\",\n    )\n    return result instanceof Response ? result : c.json({ data: result })\n  })\n\n  routes.openapi(deleteStorefrontRoute, async (c) => {\n    const { storefrontId } = c.req.param()\n    const result = await run(\n      c,\n      (context) => runtime.deleteStorefront(context, storefrontId),\n      \"write\",\n    )\n    return result instanceof Response ? result : c.body(null, 204)\n  })\n\n  routes.openapi(setAllowedOriginsRoute, async (c) => {\n    const { storefrontId } = c.req.param()\n    const input = await parseJsonBody(c, setStorefrontAllowedOriginsInputSchema)\n    const result = await run(\n      c,\n      (context) => runtime.setAllowedOrigins(context, storefrontId, input.origins),\n      \"write\",\n    )\n    return result instanceof Response ? result : c.json({ data: result })\n  })\n\n  routes.openapi(listApiKeysRoute, async (c) => {\n    const { storefrontId } = c.req.param()\n    const result = await run(c, (context) => runtime.listApiKeys(context, storefrontId))\n    return result instanceof Response ? result : c.json({ data: result })\n  })\n\n  routes.openapi(issueApiKeyRoute, async (c) => {\n    const { storefrontId } = c.req.param()\n    const input = await parseJsonBody(c, issueStorefrontApiKeyInputSchema)\n    const result = await run(\n      c,\n      (context) => runtime.issueApiKey(context, storefrontId, input.kind, input.name ?? null),\n      \"write\",\n    )\n    return result instanceof Response ? result : c.json({ data: result }, 201)\n  })\n\n  routes.openapi(rotateApiKeyRoute, async (c) => {\n    const { storefrontId, keyId } = c.req.param()\n    const result = await run(\n      c,\n      (context) => runtime.rotateApiKey(context, storefrontId, keyId),\n      \"write\",\n    )\n    return result instanceof Response ? result : c.json({ data: result }, 201)\n  })\n\n  routes.openapi(revokeApiKeyRoute, async (c) => {\n    const { storefrontId, keyId } = c.req.param()\n    const result = await run(\n      c,\n      (context) => runtime.revokeApiKey(context, storefrontId, keyId),\n      \"write\",\n    )\n    return result instanceof Response ? result : c.body(null, 204)\n  })\n\n  routes.openapi(updateAccountPolicyRoute, async (c) => {\n    const { storefrontId } = c.req.param()\n    const input = await parseJsonBody(c, updateStorefrontAccountPolicyInputSchema)\n    const result = await run(\n      c,\n      (context) => runtime.updateAccountPolicy(context, storefrontId, input),\n      \"write\",\n    )\n    return result instanceof Response ? result : c.json({ data: result })\n  })\n\n  routes.openapi(updateMethodsRoute, async (c) => {\n    const { storefrontId } = c.req.param()\n    const input = await parseJsonBody(c, updateStorefrontMethodsInputSchema)\n    const result = await run(\n      c,\n      (context) => runtime.updateMethods(context, storefrontId, input),\n      \"write\",\n    )\n    return result instanceof Response ? result : c.json({ data: result })\n  })\n\n  routes.openapi(listProviderCredentialsRoute, async (c) => {\n    const { storefrontId } = c.req.param()\n    const result = await run(c, (context) => runtime.listProviderCredentials(context, storefrontId))\n    return result instanceof Response ? result : c.json({ data: result })\n  })\n\n  routes.openapi(putProviderCredentialRoute, async (c) => {\n    const { storefrontId, provider } = c.req.param() as z.infer<typeof providerParams>\n    const input = await parseJsonBody(c, putStorefrontProviderCredentialInputSchema)\n    const result = await run(\n      c,\n      (context) => runtime.putProviderCredential(context, storefrontId, provider, input),\n      \"write\",\n    )\n    return result instanceof Response ? result : c.body(null, 204)\n  })\n\n  routes.openapi(deleteProviderCredentialRoute, async (c) => {\n    const { storefrontId, provider } = c.req.param() as z.infer<typeof providerParams>\n    const result = await run(\n      c,\n      (context) => runtime.deleteProviderCredential(context, storefrontId, provider),\n      \"write\",\n    )\n    return result instanceof Response ? result : c.body(null, 204)\n  })\n\n  return routes\n}\n"]}