includio-cms 0.26.0 → 0.28.0

package/dist/paraglide/messages/_index.d.ts

@@ -1,3 +1,36 @@
-export * from "./hello_world.js";
-export * from "./login_hello.js";
-export * from "./login_please_login.js";
+export function hello_world(inputs: {
+    name: NonNullable<unknown>;
+}, options?: {
+    locale?: "en" | "pl";
+}): string;
+/**
+* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
+*
+* - Changing this function will be over-written by the next build.
+*
+* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
+* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
+*
+* @param {{}} inputs
+* @param {{ locale?: "en" | "pl" }} options
+* @returns {string}
+*/
+declare function login_hello(inputs?: {}, options?: {
+    locale?: "en" | "pl";
+}): string;
+/**
+* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
+*
+* - Changing this function will be over-written by the next build.
+*
+* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
+* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
+*
+* @param {{}} inputs
+* @param {{ locale?: "en" | "pl" }} options
+* @returns {string}
+*/
+declare function login_please_login(inputs?: {}, options?: {
+    locale?: "en" | "pl";
+}): string;
+export { login_hello as login.hello, login_please_login as login.please_login };

package/dist/paraglide/messages/_index.js

@@ -1,4 +1,72 @@
 /* eslint-disable */
-export * from './hello_world.js'
-export * from './login_hello.js'
-export * from './login_please_login.js'
+import { getLocale, trackMessageCall, experimentalMiddlewareLocaleSplitting, isServer } from "../runtime.js"
+import * as en from "./en.js"
+import * as pl from "./pl.js"
+/**
+* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
+*
+* - Changing this function will be over-written by the next build.
+*
+* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
+* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
+* 
+* @param {{ name: NonNullable<unknown> }} inputs
+* @param {{ locale?: "en" | "pl" }} options
+* @returns {string}
+*/
+/* @__NO_SIDE_EFFECTS__ */
+export const hello_world = (inputs, options = {}) => {
+	if (experimentalMiddlewareLocaleSplitting && isServer === false) {
+		return /** @type {any} */ (globalThis).__paraglide_ssr.hello_world(inputs) 
+	}
+	const locale = options.locale ?? getLocale()
+	trackMessageCall("hello_world", locale)
+	if (locale === "en") return en.hello_world(inputs)
+	return pl.hello_world(inputs)
+};
+/**
+* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
+*
+* - Changing this function will be over-written by the next build.
+*
+* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
+* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
+* 
+* @param {{}} inputs
+* @param {{ locale?: "en" | "pl" }} options
+* @returns {string}
+*/
+/* @__NO_SIDE_EFFECTS__ */
+const login_hello = (inputs = {}, options = {}) => {
+	if (experimentalMiddlewareLocaleSplitting && isServer === false) {
+		return /** @type {any} */ (globalThis).__paraglide_ssr.login_hello(inputs) 
+	}
+	const locale = options.locale ?? getLocale()
+	trackMessageCall("login_hello", locale)
+	if (locale === "en") return en.login_hello(inputs)
+	return pl.login_hello(inputs)
+};
+export { login_hello as "login.hello" }
+/**
+* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
+*
+* - Changing this function will be over-written by the next build.
+*
+* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
+* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
+* 
+* @param {{}} inputs
+* @param {{ locale?: "en" | "pl" }} options
+* @returns {string}
+*/
+/* @__NO_SIDE_EFFECTS__ */
+const login_please_login = (inputs = {}, options = {}) => {
+	if (experimentalMiddlewareLocaleSplitting && isServer === false) {
+		return /** @type {any} */ (globalThis).__paraglide_ssr.login_please_login(inputs) 
+	}
+	const locale = options.locale ?? getLocale()
+	trackMessageCall("login_please_login", locale)
+	if (locale === "en") return en.login_please_login(inputs)
+	return pl.login_please_login(inputs)
+};
+export { login_please_login as "login.please_login" }

package/dist/paraglide/messages/en.d.ts

@@ -0,0 +1,5 @@
+export const hello_world: (inputs: {
+    name: NonNullable<unknown>;
+}) => string;
+export const login_hello: (inputs: {}) => string;
+export const login_please_login: (inputs: {}) => string;

package/dist/paraglide/messages/en.js

@@ -0,0 +1,14 @@
+/* eslint-disable */
+
+
+export const hello_world = /** @type {(inputs: { name: NonNullable<unknown> }) => string} */ (i) => {
+	return `Hello, ${i.name} from en!`
+};
+
+export const login_hello = /** @type {(inputs: {}) => string} */ () => {
+	return `Welcome back`
+};
+
+export const login_please_login = /** @type {(inputs: {}) => string} */ () => {
+	return `Login to your account`
+};

package/dist/paraglide/messages/pl.d.ts

@@ -0,0 +1,5 @@
+export const hello_world: (inputs: {
+    name: NonNullable<unknown>;
+}) => string;
+export const login_hello: (inputs: {}) => string;
+export const login_please_login: (inputs: {}) => string;

package/dist/paraglide/messages/pl.js

@@ -0,0 +1,14 @@
+/* eslint-disable */
+
+
+export const hello_world = /** @type {(inputs: { name: NonNullable<unknown> }) => string} */ (i) => {
+	return `Hello, ${i.name} from pl!`
+};
+
+export const login_hello = /** @type {(inputs: {}) => string} */ () => {
+	return `Witaj ponownie`
+};
+
+export const login_please_login = /** @type {(inputs: {}) => string} */ () => {
+	return `Zaloguj się na swoje konto`
+};

package/dist/shop/adapters/fakturownia/client.d.ts

@@ -0,0 +1,28 @@
+import type { FakturowniaInvoiceBody } from './payload.js';
+export interface FakturowniaClientOptions {
+    /** Account subdomain (`acme`) or full host/URL (`acme.fakturownia.pl`) — normalised either way. */
+    domain: string;
+    apiToken: string;
+    fetch?: typeof fetch;
+}
+export interface FakturowniaInvoice {
+    id: number | string;
+    number?: string;
+    view_url?: string;
+    [key: string]: unknown;
+}
+export declare class FakturowniaApiError extends Error {
+    readonly status: number;
+    readonly body?: unknown | undefined;
+    constructor(message: string, status: number, body?: unknown | undefined);
+}
+export declare class FakturowniaClient {
+    private readonly base;
+    private readonly apiToken;
+    private readonly fetchFn;
+    constructor(opts: FakturowniaClientOptions);
+    createInvoice(invoice: FakturowniaInvoiceBody): Promise<FakturowniaInvoice>;
+    sendByEmail(id: number | string): Promise<void>;
+    private postRaw;
+    private post;
+}

package/dist/shop/adapters/fakturownia/client.js

@@ -0,0 +1,67 @@
+export class FakturowniaApiError extends Error {
+    status;
+    body;
+    constructor(message, status, body) {
+        super(message);
+        this.status = status;
+        this.body = body;
+        this.name = 'FakturowniaApiError';
+    }
+}
+export class FakturowniaClient {
+    base;
+    apiToken;
+    fetchFn;
+    constructor(opts) {
+        if (!opts.domain)
+            throw new Error('FakturowniaClient: domain required.');
+        if (!opts.apiToken)
+            throw new Error('FakturowniaClient: apiToken required.');
+        // Accept a bare subdomain (`acme`) as well as a full host or URL
+        // (`acme.fakturownia.pl`, `https://acme.fakturownia.pl/`) — strip protocol,
+        // the `.fakturownia.pl` suffix and trailing slashes so we never double it.
+        const subdomain = opts.domain
+            .trim()
+            .replace(/^https?:\/\//i, '')
+            .replace(/\/+$/, '')
+            .replace(/\.fakturownia\.pl$/i, '');
+        this.base = `https://${subdomain}.fakturownia.pl`;
+        this.apiToken = opts.apiToken;
+        this.fetchFn = opts.fetch ?? globalThis.fetch.bind(globalThis);
+    }
+    async createInvoice(invoice) {
+        return this.post('/invoices.json', {
+            api_token: this.apiToken,
+            invoice
+        });
+    }
+    async sendByEmail(id) {
+        await this.postRaw(`/invoices/${encodeURIComponent(String(id))}/send_by_email.json`, {
+            api_token: this.apiToken
+        });
+    }
+    async postRaw(path, payload) {
+        const res = await this.fetchFn(`${this.base}${path}`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+            body: JSON.stringify(payload)
+        });
+        if (!res.ok) {
+            let body;
+            try {
+                body = await res.json();
+            }
+            catch {
+                body = await res.text().catch(() => undefined);
+            }
+            const raw = body == null ? '' : typeof body === 'string' ? body : JSON.stringify(body);
+            const detail = raw ? `: ${raw.slice(0, 400)}` : '';
+            throw new FakturowniaApiError(`Fakturownia ${path} → ${res.status}${detail}`, res.status, body);
+        }
+        return res;
+    }
+    async post(path, payload) {
+        const res = await this.postRaw(path, payload);
+        return (await res.json());
+    }
+}

package/dist/shop/adapters/fakturownia/index.d.ts

@@ -0,0 +1,27 @@
+import type { InvoiceIssuePolicy, InvoicingAdapter } from '../../types.js';
+export interface FakturowniaAdapterOptions {
+    /** Account subdomain (`acme`) or full host (`acme.fakturownia.pl`). Required. */
+    domain: string;
+    /** Fakturownia API token. Required. Pass from `$env/dynamic/private`. */
+    apiToken: string;
+    /** Adapter id. Default `fakturownia`. */
+    id?: string;
+    /** Invoice kind sent to Fakturownia. Default `vat`. */
+    kind?: string;
+    /** Unit of measure per line — KSeF list: szt, godz, dni, mc, m2, kg. Default `szt`. */
+    unit?: string;
+    /** When to issue automatically. Default (server-side) `b2bAndOnRequest`. */
+    issueWhen?: InvoiceIssuePolicy;
+    /** E-mail the invoice to the buyer via Fakturownia. Default `true`. */
+    sendEmail?: boolean;
+    /** Override fetch — primarily for testing. */
+    fetch?: typeof fetch;
+}
+/**
+ * Invoicing adapter backed by Fakturownia (fakturownia.pl). Issues a paid VAT
+ * invoice from a fully-paid order and (by default) e-mails the PDF to the buyer
+ * provider-side. Seller data and numbering are managed in the Fakturownia
+ * account; the NIP is validated upstream at checkout.
+ * @public
+ */
+export declare function fakturowniaAdapter(opts: FakturowniaAdapterOptions): InvoicingAdapter;

package/dist/shop/adapters/fakturownia/index.js

@@ -0,0 +1,36 @@
+import { FakturowniaClient } from './client.js';
+import { buildFakturowniaInvoice } from './payload.js';
+/**
+ * Invoicing adapter backed by Fakturownia (fakturownia.pl). Issues a paid VAT
+ * invoice from a fully-paid order and (by default) e-mails the PDF to the buyer
+ * provider-side. Seller data and numbering are managed in the Fakturownia
+ * account; the NIP is validated upstream at checkout.
+ * @public
+ */
+export function fakturowniaAdapter(opts) {
+    const client = new FakturowniaClient({
+        domain: opts.domain,
+        apiToken: opts.apiToken,
+        fetch: opts.fetch
+    });
+    const adapter = {
+        id: opts.id ?? 'fakturownia',
+        issueWhen: opts.issueWhen,
+        async createInvoice(payload) {
+            const body = buildFakturowniaInvoice(payload, { kind: opts.kind, unit: opts.unit });
+            const inv = await client.createInvoice(body);
+            return {
+                externalId: String(inv.id),
+                number: inv.number,
+                pdfUrl: inv.view_url,
+                raw: inv
+            };
+        }
+    };
+    if (opts.sendEmail !== false) {
+        adapter.send = async (externalId, _ctx) => {
+            await client.sendByEmail(externalId);
+        };
+    }
+    return adapter;
+}

package/dist/shop/adapters/fakturownia/payload.d.ts

@@ -0,0 +1,35 @@
+import type { InvoicePayload } from '../../types.js';
+export interface FakturowniaPosition {
+    name: string;
+    quantity: number;
+    /** Total gross price of the line (unit × quantity) in the major unit (PLN). */
+    total_price_gross: number;
+    /** VAT rate as a plain percentage (e.g. 23). */
+    tax: number;
+    /** Unit of measure — KSeF requires one of: szt, godz, dni, mc, m2, kg. */
+    quantity_unit: string;
+}
+export interface FakturowniaInvoiceBody {
+    kind: string;
+    status: 'paid';
+    issue_date: string;
+    sell_date: string;
+    paid_date: string;
+    currency: string;
+    buyer_name: string;
+    buyer_email: string;
+    buyer_tax_no?: string;
+    buyer_street?: string;
+    buyer_city?: string;
+    buyer_post_code?: string;
+    buyer_country?: string;
+    positions: FakturowniaPosition[];
+}
+/**
+ * Map an {@link InvoicePayload} onto the Fakturownia `invoice` object. Pure —
+ * no network. The NIP is assumed already validated upstream (checkout).
+ */
+export declare function buildFakturowniaInvoice(payload: InvoicePayload, opts?: {
+    kind?: string;
+    unit?: string;
+}): FakturowniaInvoiceBody;

package/dist/shop/adapters/fakturownia/payload.js

@@ -0,0 +1,45 @@
+/** Minor units (grosze) → major units (PLN) with 2-decimal precision. */
+function toMajor(minor) {
+    return Math.round(minor) / 100;
+}
+function pick(addr, ...keys) {
+    if (!addr)
+        return undefined;
+    for (const k of keys) {
+        if (addr[k])
+            return addr[k];
+    }
+    return undefined;
+}
+/**
+ * Map an {@link InvoicePayload} onto the Fakturownia `invoice` object. Pure —
+ * no network. The NIP is assumed already validated upstream (checkout).
+ */
+export function buildFakturowniaInvoice(payload, opts = {}) {
+    const date = payload.paidAt.slice(0, 10);
+    const { buyer } = payload;
+    return {
+        kind: opts.kind ?? 'vat',
+        status: 'paid',
+        issue_date: date,
+        sell_date: date,
+        paid_date: date,
+        currency: payload.currency,
+        buyer_name: buyer.companyName || buyer.name,
+        buyer_email: buyer.email,
+        ...(buyer.nip ? { buyer_tax_no: buyer.nip } : {}),
+        ...(pick(buyer.address, 'street') ? { buyer_street: pick(buyer.address, 'street') } : {}),
+        ...(pick(buyer.address, 'city') ? { buyer_city: pick(buyer.address, 'city') } : {}),
+        ...(pick(buyer.address, 'postCode', 'zip', 'postalCode')
+            ? { buyer_post_code: pick(buyer.address, 'postCode', 'zip', 'postalCode') }
+            : {}),
+        ...(pick(buyer.address, 'country') ? { buyer_country: pick(buyer.address, 'country') } : {}),
+        positions: payload.items.map((item) => ({
+            name: item.name,
+            quantity: item.quantity,
+            total_price_gross: toMajor(item.unitPriceGross * item.quantity),
+            tax: item.vatRate,
+            quantity_unit: opts.unit ?? 'szt'
+        }))
+    };
+}

package/dist/shop/cart/types.d.ts

@@ -5,6 +5,7 @@ export interface CartItemRef {
 }
 export interface CartLine extends CartItemRef {
     entryId: string;
+    productId: string;
     variantName: Record<string, string> | null;
     variantSku: string | null;
     productTitle: string | null;

package/dist/shop/client/index.d.ts

@@ -39,7 +39,14 @@ export interface CheckoutInput {
     customerEmail: string;
     customerName?: string;
     customerPhone?: string;
+    /** Optional tax id (NIP). Validated server-side; invalid → checkout 400. */
+    customerNip?: string;
+    customerCompanyName?: string;
     shippingAddress?: Record<string, string>;
+    /** Separate billing address for the invoice; falls back to shipping. */
+    billingAddress?: Record<string, string>;
+    /** B2C opt-in: request an invoice even without a NIP. */
+    invoiceRequested?: boolean;
     shippingMethodId: string;
     carrierRef?: string;
     paymentMethod: string;
@@ -114,6 +121,34 @@ export interface RetryPaymentResult {
     requiresPaymentRedirect: boolean;
     redirectUrl: string | null;
 }
+/**
+ * Result of `orders.payBalance` — initiates a payment session for the
+ * outstanding balance on a deposit order.
+ * @public
+ */
+export interface PayBalanceResult {
+    status: 'redirect' | 'manual' | 'error';
+    requiresPaymentRedirect: boolean;
+    redirectUrl: string | null;
+}
+/**
+ * Public-facing variant row returned by `client.products.listUpcoming`.
+ * Mirrors the `shop_product_variants` schema with `priceDelta` decoded as
+ * the raw numeric(20,6) string and `attributes` as the typed map declared
+ * in `defineShop({ variantAttributes })`.
+ * @public
+ */
+export interface VariantPublic {
+    id: string;
+    productId: string;
+    sku: string | null;
+    name: Record<string, string> | null;
+    priceDelta: string;
+    stock: number | null;
+    attributes: Record<string, unknown> | null;
+    sortOrder: number | null;
+    createdAt: string;
+}
 /**
  * Headless shop SDK surface returned by `createShopClient()`.
  *
@@ -124,6 +159,21 @@ export interface RetryPaymentResult {
  * @public
  */
 export interface ShopClient {
+    /** Product / variant discovery. */
+    products: {
+        /**
+         * List upcoming (non-expired) variants for a product. When
+         * `defineShop({ variantExpiry })` is not configured this returns
+         * every variant; otherwise variants whose datetime attribute has
+         * already passed (per `offsetDays`) are filtered out and the
+         * remainder are sorted ascending by that attribute.
+         *
+         * @param productId - The shop product id (UUID).
+         */
+        listUpcoming(productId: string): Promise<{
+            items: VariantPublic[];
+        }>;
+    };
     /** Cart operations — read state and mutate items / coupon. */
     cart: {
         /**
@@ -201,6 +251,17 @@ export interface ShopClient {
          * re-fill the checkout form.
          */
         retryPayment(orderNumber: string, token?: string): Promise<RetryPaymentResult>;
+        /**
+         * Pay the outstanding balance on a deposit-policy order. `token` is
+         * the signed balance token from the admin-generated balance link;
+         * the server returns a redirect URL when the payment provider needs
+         * to take over, or `paymentStatus: 'manual'` for manual methods.
+         *
+         * @param orderNumber - The order number from the balance link.
+         * @param token - Signed balance token (query parameter on the link).
+         * @experimental
+         */
+        payBalance(orderNumber: string, token: string): Promise<PayBalanceResult>;
     };
 }
 /**

package/dist/shop/client/index.js

@@ -59,6 +59,9 @@ export function createShopClient(options = {}) {
         return (await res.json());
     }
     return {
+        products: {
+            listUpcoming: (productId) => call('GET', `/api/shop/products/${encodeURIComponent(productId)}/variants/upcoming`)
+        },
         cart: {
             get: () => call('GET', '/api/shop/cart'),
             add: (variantId, qty = 1) => call('POST', '/api/shop/cart', { variantId, qty }),
@@ -77,7 +80,8 @@ export function createShopClient(options = {}) {
         orders: {
             get: (orderNumber, token) => call('GET', `/api/shop/orders/${encodeURIComponent(orderNumber)}${tokenQuery(token)}`),
             refreshPayment: (orderNumber, token) => call('POST', `/api/shop/orders/${encodeURIComponent(orderNumber)}/refresh-payment${tokenQuery(token)}`),
-            retryPayment: (orderNumber, token) => call('POST', `/api/shop/orders/${encodeURIComponent(orderNumber)}/retry-payment${tokenQuery(token)}`)
+            retryPayment: (orderNumber, token) => call('POST', `/api/shop/orders/${encodeURIComponent(orderNumber)}/retry-payment${tokenQuery(token)}`),
+            payBalance: (orderNumber, token) => call('POST', `/api/shop/orders/${encodeURIComponent(orderNumber)}/balance?token=${encodeURIComponent(token)}`, {})
         }
     };
 }

package/dist/shop/expiry.d.ts

@@ -0,0 +1,35 @@
+import type { VariantExpiryConfig } from './types.js';
+/**
+ * Thrown by `createOrderFromCart` / cart-add HTTP guard when a referenced
+ * variant has already expired under the configured `variantExpiry`. The
+ * `code` is `VARIANT_EXPIRED` and `variantId` identifies the offending row.
+ * @public
+ */
+export declare class VariantExpiredError extends Error {
+    readonly code = "VARIANT_EXPIRED";
+    readonly variantId: string;
+    constructor(variantId: string);
+}
+interface VariantLike {
+    attributes: Record<string, unknown> | null;
+}
+/**
+ * Check whether a variant has expired under the given config. Fail-open by
+ * design: `null` config, missing source attribute, non-string value, or
+ * malformed datetime all return `false` — only a parseable past datetime
+ * counts as expired. Malformed datetimes emit `console.warn` so authoring
+ * issues surface in dev without blocking checkout.
+ *
+ * @param variant - Object with an `attributes` map (e.g. `shop_product_variants.attributes`).
+ * @param config - Result of `defineShop({ variantExpiry })`, or `null` when not configured.
+ * @param now - Override the current time (test seam). Defaults to `Date.now()`.
+ * @public
+ */
+export declare function isVariantExpired(variant: VariantLike, config: VariantExpiryConfig | null, now?: Date): boolean;
+/**
+ * Return the subset of `variants` that have not yet expired. Order is
+ * preserved. `null` config = passthrough.
+ * @public
+ */
+export declare function filterUpcoming<T extends VariantLike>(variants: T[], config: VariantExpiryConfig | null, now?: Date): T[];
+export {};

package/dist/shop/expiry.js

@@ -0,0 +1,68 @@
+/**
+ * Thrown by `createOrderFromCart` / cart-add HTTP guard when a referenced
+ * variant has already expired under the configured `variantExpiry`. The
+ * `code` is `VARIANT_EXPIRED` and `variantId` identifies the offending row.
+ * @public
+ */
+export class VariantExpiredError extends Error {
+    code = 'VARIANT_EXPIRED';
+    variantId;
+    constructor(variantId) {
+        super(`Variant ${variantId} has expired`);
+        this.name = 'VariantExpiredError';
+        this.variantId = variantId;
+    }
+}
+/**
+ * Add `offsetDays` to an ISO-8601 datetime and return the resulting `Date`.
+ * Returns `null` on malformed input (caller decides fail-open vs throw).
+ * @internal
+ */
+function addDaysIso(iso, offsetDays) {
+    const ts = Date.parse(iso);
+    if (Number.isNaN(ts))
+        return null;
+    return new Date(ts + offsetDays * 86_400_000);
+}
+/**
+ * Check whether a variant has expired under the given config. Fail-open by
+ * design: `null` config, missing source attribute, non-string value, or
+ * malformed datetime all return `false` — only a parseable past datetime
+ * counts as expired. Malformed datetimes emit `console.warn` so authoring
+ * issues surface in dev without blocking checkout.
+ *
+ * @param variant - Object with an `attributes` map (e.g. `shop_product_variants.attributes`).
+ * @param config - Result of `defineShop({ variantExpiry })`, or `null` when not configured.
+ * @param now - Override the current time (test seam). Defaults to `Date.now()`.
+ * @public
+ */
+export function isVariantExpired(variant, config, now = new Date(Date.now())) {
+    if (!config)
+        return false;
+    const attrs = variant.attributes;
+    if (!attrs)
+        return false;
+    const raw = attrs[config.source];
+    if (raw === undefined || raw === null)
+        return false;
+    if (typeof raw !== 'string') {
+        console.warn(`[variantExpiry] attribute "${config.source}" is not a string (got ${typeof raw}); treating variant as upcoming`);
+        return false;
+    }
+    const cutoff = addDaysIso(raw, config.offsetDays);
+    if (!cutoff) {
+        console.warn(`[variantExpiry] attribute "${config.source}" is not a parseable datetime ("${raw}"); treating variant as upcoming`);
+        return false;
+    }
+    return cutoff.getTime() < now.getTime();
+}
+/**
+ * Return the subset of `variants` that have not yet expired. Order is
+ * preserved. `null` config = passthrough.
+ * @public
+ */
+export function filterUpcoming(variants, config, now) {
+    if (!config)
+        return variants;
+    return variants.filter((v) => !isVariantExpired(v, config, now));
+}

package/dist/shop/http/balance-handler.d.ts

@@ -0,0 +1,20 @@
+import { type RequestHandler } from '@sveltejs/kit';
+/**
+ * @experimental
+ * HTTP handlers for the balance-payment flow. Mount at
+ * `/api/shop/orders/[number]/balance` (or any URL containing `number` +
+ * `?token=...`).
+ *
+ * - `GET` returns the minimal public order view (amount due, currency)
+ *   when the token + balanceOwed check passes.
+ * - `POST` initiates a payment session for the outstanding balance using
+ *   the order's original payment adapter and returns `{ redirectUrl,
+ *   status }`.
+ *
+ * Both verbs return 403 when the token is invalid OR `balanceOwed` is
+ * false (no oracle distinction — we don't tell the caller which gate failed).
+ */
+export declare function createBalanceHandler(): {
+    GET: RequestHandler;
+    POST: RequestHandler;
+};