'+body+'

',script),{status,headers:{'Content-Type':'text/html; charset=utf-8',...headers,'Content-Security-Policy':\"default-src 'none'; script-src 'self'; style-src 'self'; connect-src 'self'; img-src 'self' data:; form-action 'self'; base-uri 'none'; frame-ancestors 'none'\"}});}\nfunction webResponse(html:string){return new Response(html,{headers:{'Content-Type':'text/html; charset=utf-8',...headers,'Content-Security-Policy':\"default-src 'none'; script-src 'self'; style-src 'self'; connect-src 'self'; img-src 'self' data:; form-action 'self'; base-uri 'none'; frame-ancestors 'none'\"}});}\nconst field=(name:string,label:string,value:number,step='any')=>''+label+'';\nfunction economics(){return page('Operating cost model','BUSINESS PLANNING

Know what each plan needs to earn.

Compare revenue with the real cost of serving customers. This is an illustrative scenario calculator, not a report of verified Shopify or hosting expenses. Replace every assumption with your actual invoices and usage.

Estimated monthly results

Revenue—

Operating surplus before unentered costs—

Contribution per paying customer—

Break-even customer count—

Operating margin—

Customer volume scenarios

Paying customers	Revenue	Operating surplus

Costs to verify before launching paid plans

Include hosting and database usage, domain and email, AI provider costs, Shopify app billing and revenue-share terms, payment fees, support, refunds, taxes, and a reserve for unexpected expenses. Development recovery and your own labor should be considered separately. A target margin is not a guarantee.

Return to the free tools

',true);}\nconst privacy='

Privacy policy

Effective September 10, 2026. This policy covers the standalone commerce tools, read-only MCP endpoint, and Shopify-connected application.

Information processed

We process the product names, descriptions, prices and other inputs you submit to return calculations or draft exports. When you install the Shopify app, we also process your myshopify.com store domain and the product catalog fields authorized by the read_products scope, including product titles, handles, status, vendor, product type and variant prices. We do not request customer records or payment-card details.

Shopify authentication

Shopify access and refresh tokens are stored server-side in the application database and encrypted at rest. OAuth state values are short-lived and are deleted after use. Session cookies are signed, secure, HTTP-only and SameSite=Lax. Do not send passwords, API keys, identity numbers or other secrets through calculator fields or support email.

Device-local drafts

Drafts saved through the standalone browser interface are stored in your own browser storage. They are not synchronized with other devices. You can edit or delete them, export a backup, or clear browser data. Clearing browser storage may permanently erase drafts that you have not backed up.

Hosting and retention

Val Town hosts the service and may retain operational logs and service metadata under its own policies. Submitted calculator data is not intentionally sold or used for advertising. Shopify authorization records are retained while the app remains installed or until they are removed as part of service maintenance or an uninstall workflow.

Sharing and security

Information is shared with Val Town as needed to host the service, with Shopify as needed to authenticate the app and retrieve authorized catalog data, and with OpenAI when you invoke the MCP tools through ChatGPT under your applicable settings. The Shopify integration is read-only in this release and does not publish or modify store products.

Contact

For privacy questions or requests concerning submitted information or operational logs, email hardinlourijessie@gmail.com.

';\nconst terms='

Terms of use

Effective September 10, 2026. The tools are provided for commerce planning, pricing calculations, catalog analysis and Shopify-connected product review.

Seller responsibilities

You are responsible for verifying supplier prices, delivery costs, marketplace fees, taxes, inventory, product safety, intellectual-property permissions and local legal requirements. Use only information you are authorized to share or sell. Do not submit unlawful content or unnecessary personal information.

Shopify connection

The Shopify integration requests read-only product access. It can read authorized catalog information for analysis but does not publish, edit, purchase or reserve products. You can remove the app from Shopify to end future store access.

Estimates and limitations

Calculations are estimates and are not financial, tax or legal advice. Actual costs, refunds and market conditions may differ. No sales or profit are guaranteed. CSV imports must be reviewed by the merchant before publication.

Plans and billing

Any paid plans offered through the Shopify App Store will use Shopify App Pricing. Prices, trials and billing terms shown by Shopify control over any planning examples displayed by this service.

Availability and changes

Service availability may be affected by hosting limits, maintenance, Shopify API availability or abuse prevention. Contact hardinlourijessie@gmail.com for support.

';\nconst support='

Support

Need help with a calculation, Shopify connection, catalog draft, backup, privacy request or technical problem? Contact the project by email.

Email support

hardinlourijessie@gmail.com

Include the tool name, a non-sensitive example of your inputs, and the error message. Never send passwords, API keys, payment-card details or identity documents.

Current service status

Version 1.2.0 provides standalone pricing, device-local drafts, safe CSV preparation, read-only MCP tools, Shopify OAuth support and authorized read-only product access. Shopify App Store billing and publication remain controlled by the Shopify Partner review and pricing configuration.

View the service health endpoint or return to the pricing tools.

';\nfunction embeddedShopifyHome(){const key=shopifyClientId().replace(/\"/g,'"');const html='God Matters Commerce Manager

SHOPIFY APP

God Matters Commerce Manager

Signing in securely with Shopify…

Your account

Creating merchant account…

AI workspace

Checking AI service…

Ask Commerce AI

Choose and approve a trial plan to unlock AI.

';return new Response(html,{headers:{'Content-Type':'text/html; charset=utf-8',...headers,'Content-Security-Policy':\"default-src 'self'; script-src 'self' https://cdn.shopify.com; style-src 'self'; connect-src 'self' https://*.myshopify.com https://admin.shopify.com; img-src 'self' data: https:; frame-ancestors https://admin.shopify.com https://*.myshopify.com; base-uri 'self'; form-action 'self'\"}});}\n\nasync function shopifyHome(request:Request){\n const shop=await authenticatedShop(request);\n if(!shop)return page('Shopify connection required','SHOPIFY APP

Connect through Shopify to continue.

This app authenticates merchants through Shopify before showing store-connected features. Open the app from Shopify Admin or the Shopify App Store installation flow.

Use the standalone pricing calculator

',false,401);\n return page('Shopify Commerce Manager','SHOPIFY CONNECTED

God Matters Commerce Manager

Your Shopify store is securely connected. Store access is read-only: this release can read product titles and prices for analysis, but it cannot publish or modify products.

Connected store

'+shop.replace(//g,'>')+'

Requested Shopify scope: '+SHOPIFY_SCOPES+'

Open pricing calculator

View authorized product data · Connection status · Privacy · Support

');\n}\n\nasync function readJson(request:Request){if(!(request.headers.get('content-type')||'').toLowerCase().includes('application/json'))throw Object.assign(new Error('JSON content type required.'),{status:415});if(Number(request.headers.get('content-length')||0)>100000)throw Object.assign(new Error('Request too large.'),{status:413});const text=await request.text();if(text.length>100000)throw Object.assign(new Error('Request too large.'),{status:413});try{return JSON.parse(text);}catch{throw new Error('Invalid JSON request.');}}\nfunction errorResponse(e:unknown){if(e instanceof z.ZodError)return json({error:e.issues[0]?.message||'Invalid input.'},400);if(e instanceof Error)return json({error:e.message},Number((e as Error&{status?:number}).status)||400);return json({error:'Unable to process the request.'},500);}\nexport default async function(request:Request):Promise{const url=new URL(request.url),path=url.pathname,method=request.method;\n if(path==='/mcp'||path==='/mcp/')return handler.fetch(request);\n if(method==='OPTIONS')return new Response(null,{status:204,headers:{Allow:'GET, POST, OPTIONS'}});\n if(path==='/assets/app.css'&&method==='GET')return new Response(appCss,{headers:{'Content-Type':'text/css; charset=utf-8','Cache-Control':'public, max-age=300','X-Content-Type-Options':'nosniff'}});\n if(path==='/assets/app.js'&&method==='GET')return new Response(appJs,{headers:{'Content-Type':'text/javascript; charset=utf-8','Cache-Control':'public, max-age=300','X-Content-Type-Options':'nosniff'}});\n if(path==='/assets/embedded.js'&&method==='GET')return new Response(embeddedJs,{headers:{'Content-Type':'text/javascript; charset=utf-8','Cache-Control':'no-store','X-Content-Type-Options':'nosniff'}});\n if(path==='/shopify'&&method==='GET')return startShopifyInstall(request,base);\n if(path==='/auth/callback'&&method==='GET')return completeShopifyInstall(request,base);\n if(path==='/webhooks/shopify'&&method==='POST')return handleShopifyWebhook(request);\n if(path==='/shopify/app'&&method==='GET')return embeddedShopifyHome();\n if(path==='/shopify/connected'&&method==='GET')return shopifyHome(request);\n if(path==='/api/shopify/exchange'&&method==='POST')return exchangeEmbeddedShopifyToken(request);\n if(path==='/api/merchant/status'&&method==='GET')return embeddedMerchantStatus(request);\n if(path==='/api/billing/status'&&method==='GET')return embeddedBillingStatus(request);\n if(path==='/api/billing/start'&&method==='POST')return startEmbeddedBilling(request,base);\n if(path==='/api/ai'&&method==='POST')return commerceAi(request);\n if(path==='/api/shopify/status'&&method==='GET')return shopifyAppStatus(request);\n if(path==='/api/shopify/products'&&method==='GET')return listShopifyProducts(request);\n if(path==='/api/price'||path==='/api/catalog'){\n if(method!=='POST')return json({error:'Use POST with JSON.'},405);\n try{const input=await readJson(request);if(path==='/api/price')return json(calculatePrice(priceSchema.parse(input)));const parsed=z.object({items:z.array(listingSchema).min(1).max(100),includeShopifyCsv:z.boolean().default(false)}).strict().parse(input);return json(analyze(parsed.items,parsed.includeShopifyCsv));}catch(e){return errorResponse(e);}\n }\n if(method!=='GET')return json({error:'Method not allowed.'},405);\n if(path==='/health')return json({ok:true,name:appName,version,features:['embedded-shopify-app','merchant-accounts','14-day-trial-billing','pricing','catalog','mcp','commerce-ai','shopify-read-products'],billingEnabled:true,billingProvider:'Shopify',trialDays:14,aiConfigured:Boolean(Deno.env.get('OPENAI_API_KEY')),shopifyConfigured:shopifyConfigured(),shopifyMissingConfig:shopifyMissingConfig(),appStorePublished:false});\n if(path==='/api/capabilities')return json(capabilities);\n if(path==='/api/plans')return json({plans,paidBillingEnabled:true,billingProvider:'Shopify',trialDays:14,permanentFreePlan:false});\n if(path==='/')return webResponse(renderHome());\n if(path==='/economics')return economics();\n if(path==='/privacy')return page('Privacy policy',privacy);\n if(path==='/terms')return page('Terms of use',terms);\n if(path==='/support')return page('Support',support);\n return page('Not found','

Page not found

The requested page does not exist.

Return to Commerce Manager

');\n}\n","import {createMcpHandler,McpServer} from 'npm:@modelcontextprotocol/server@2';\nimport * as z from 'npm:zod@4/v4';\nimport {calculatePrice,catalogCsv,draftRow,type PriceInput} from './pricing.ts';\nimport {renderPage,renderHome} from './web.ts';\nimport {appCss} from './web-css.ts';\nimport {appJs} from './web-client.ts';\nimport {embeddedJs} from './embedded-client.ts';\nimport {commerceAi} from './ai.ts';\nimport {authenticatedShop,completeShopifyInstall,embeddedBillingStatus,embeddedMerchantStatus,embeddedShopIdentity,exchangeEmbeddedShopifyToken,handleShopifyWebhook,listShopifyProducts,SHOPIFY_SCOPES,shopifyAppStatus,shopifyClientId,shopifyConfigured,shopifyMissingConfig,startEmbeddedBilling,startShopifyInstall} from './shopify.ts';\nimport {clientChecklist,getProvisioningStatus,isStorePackageKey,publicPackageCatalog,provisioningSummary,selectStorePackage} from './provisioning.ts';\n\nconst appName='God Matters Commerce Manager';\nconst base='https://god-matters-commerce.val.run';\nconst version='1.2.0';\nconst number=z.number().finite().min(0).max(1e9);\nconst percent=number.max(100);\nconst priceFields={productCost:number,supplierShipping:number.default(0),packaging:number.default(0),otherFixedCosts:number.default(0),customerShipping:number.default(0),fixedPaymentFee:number.default(0),feePercent:percent.default(0),taxReservePercent:percent.default(0),returnReservePercent:percent.default(0),targetMarginPercent:percent.default(20),roundingIncrement:z.number().finite().min(0.01).max(100000).refine(v=>Number.isInteger(Math.round(v*100))&&Math.abs(v*100-Math.round(v*100))<1e-7).default(0.01),currency:z.enum(['PHP','USD','EUR','GBP','AUD','CAD','SGD']).default('PHP')};\nconst priceSchema=z.object(priceFields).strict();\nconst listingSchema=z.object({title:z.string().trim().min(1).max(200),description:z.string().max(10000).default(''),vendor:z.string().max(200).default(''),productType:z.string().max(200).default(''),sku:z.string().max(100).default(''),tags:z.array(z.string().max(100)).max(20).default([]),pricing:priceSchema}).strict();\nconst resultSchema=z.object({currency:z.string(),itemPrice:z.number(),totalCustomerPayment:z.number(),customerShipping:z.number(),minimumUnroundedItemPrice:z.number(),fixedCosts:z.number(),estimatedVariableCosts:z.number(),estimatedProfit:z.number(),estimatedMarginPercent:z.number(),targetMarginPercent:z.number(),breakEvenItemPrice:z.number(),assumptions:z.string()});\nconst warnings=['All exports are unpublished drafts with zero inventory. Verify supplier authorization, actual stock, shipping, taxes, image rights and product safety before importing or publishing.'];\nconst plans={starter:{name:'Starter',price:4.99,trialDays:14,draftLimit:250,monthlyDraftWrites:250,batchLimit:25,dailyAiRequests:40},growth:{name:'Growth',price:9.99,trialDays:14,draftLimit:1000,monthlyDraftWrites:1000,batchLimit:100,dailyAiRequests:120},pro:{name:'Pro',price:19.99,trialDays:14,draftLimit:5000,monthlyDraftWrites:5000,batchLimit:100,dailyAiRequests:300}};\nconst capabilities={name:appName,description:'Commerce pricing, catalog analysis and Shopify-connected planning tools for online sellers.',features:['Selling price and estimated margin calculations','Fixed payment fees and shipping-aware pricing','Batch analysis of up to 100 supplied products','Shopify-compatible unpublished CSV drafts','Standalone browser-local draft editing and backup','Shopify OAuth installation and read-only catalog access when app credentials are configured'],limitations:['Shopify access is read-only in this release; the app does not automatically publish products.','Paid Shopify App Pricing plans must be configured and approved in the Shopify Partner Dashboard before charges are active.','No automatic sourcing, AI generation, inventory synchronization or purchases.','Browser-local drafts are not synchronized across devices.','A public MCP endpoint is not an approved ChatGPT directory listing.'],website:base};\nconst outcome=(data:unknown)=>({content:[{type:'text' as const,text:JSON.stringify(data)}],structuredContent:data});\nconst failed=(e:unknown)=>({isError:true,content:[{type:'text' as const,text:e instanceof Error?e.message:'Unable to process the request.'}]});\nfunction analyze(items:Array>,includeCsv=false){const rows=items.map((item,index)=>({title:item.title,pricing:calculatePrice(item.pricing),csv:draftRow(item,index)}));return {items:rows.map((r,index)=>({title:items[index].title,pricing:r.pricing})),shopifyCsv:includeCsv?catalogCsv(rows.map(r=>r.csv)):undefined,warnings:[...warnings,...(new Set(rows.map(r=>r.pricing.currency)).size>1?['Currencies are not converted or added together.']:[])]};}\nfunction makeServer(){\n const server=new McpServer({name:'god-matters-commerce',version});\n const annotations={readOnlyHint:true,destructiveHint:false,openWorldHint:false,idempotentHint:true};\n server.registerTool('calculate_product_price',{title:'Calculate selling price',description:'Calculate a selling price and estimated profit using merchant-supplied costs, shipping, payment fees, reserves and target margin. Do not invent costs or guarantee profit.',inputSchema:priceSchema,outputSchema:resultSchema,annotations},async input=>{try{return outcome(calculatePrice(input));}catch(e){return failed(e);}});\n server.registerTool('analyze_catalog',{title:'Analyze product margins',description:'Analyze up to 100 merchant-supplied products, and optionally prepare an unpublished Shopify CSV. No supplier data is fetched and no store is changed.',inputSchema:z.object({items:z.array(z.object({name:z.string().min(1).max(200),sku:z.string().max(100).optional(),supplier:z.string().max(200).optional(),...priceFields})).min(1).max(100),includeShopifyCsv:z.boolean().default(false)}),outputSchema:z.object({items:z.array(z.object({name:z.string(),sku:z.string(),supplier:z.string(),pricing:resultSchema})),shopifyCsv:z.string().optional(),warnings:z.array(z.string())}),annotations},async({items,includeShopifyCsv})=>{try{const rows=items.map((item,index)=>({name:item.name,sku:item.sku||'',supplier:item.supplier||'',pricing:calculatePrice(item),csv:draftRow({title:item.name,vendor:item.supplier||'',sku:item.sku||'',pricing:item},index)}));return outcome({items:rows.map(({name,sku,supplier,pricing})=>({name,sku,supplier,pricing})),shopifyCsv:includeShopifyCsv?catalogCsv(rows.map(r=>r.csv)):undefined,warnings});}catch(e){return failed(e);}});\n server.registerTool('prepare_product_listing',{title:'Prepare a product listing',description:'Turn verified product information into an unpublished draft and optional Shopify CSV. Never invent specifications, reviews, stock or certifications. Does not create or publish a Shopify product.',inputSchema:z.object({title:z.string().min(1).max(200),description:z.string().max(10000),vendor:z.string().max(200).default(''),productType:z.string().max(200).default(''),sku:z.string().max(100).default(''),tags:z.array(z.string().max(100)).max(20).default([]),quantity:z.number().int().nonnegative().max(1000000).default(0),pricing:priceSchema,includeShopifyCsv:z.boolean().default(true)}),outputSchema:z.object({title:z.string(),description:z.string(),pricing:resultSchema,shopifyCsv:z.string().optional(),status:z.literal('draft'),warnings:z.array(z.string())}),annotations},async input=>{try{const p=calculatePrice(input.pricing);return outcome({title:input.title,description:input.description,pricing:p,shopifyCsv:input.includeShopifyCsv?catalogCsv([draftRow(input)]):undefined,status:'draft',warnings});}catch(e){return failed(e);}});\n server.registerTool('get_commerce_capabilities',{title:'About Commerce Manager',description:'Describe the actual available features, limitations, website and Shopify integration status. Do not claim approval or paid features are active.',inputSchema:z.object({}),outputSchema:z.object({name:z.string(),description:z.string(),features:z.array(z.string()),limitations:z.array(z.string()),website:z.string()}),annotations},async()=>outcome(capabilities));\n return server;\n}\nconst handler=createMcpHandler(makeServer);\nconst headers={'Cache-Control':'no-store','X-Content-Type-Options':'nosniff'};\nconst json=(value:unknown,status=200)=>Response.json(value,{status,headers});\nfunction page(title:string,body:string,script=false,status=200){return new Response(renderPage(title,'

'+body+'

Know what each plan needs to earn.

Estimated monthly results

Revenue—

Operating surplus before unentered costs—

Contribution per paying customer—

Break-even customer count—

Operating margin—

Customer volume scenarios

Paying customers	Revenue	Operating surplus

Costs to verify before launching paid plans

Return to the free tools

',true);}\nconst privacy='

Privacy policy

Effective September 10, 2026. This policy covers the standalone commerce tools, read-only MCP endpoint, and Shopify-connected application.

Information processed

Shopify authentication

Device-local drafts

Hosting and retention

Sharing and security

Contact

For privacy questions or requests concerning submitted information or operational logs, email hardinlourijessie@gmail.com.

';\nconst terms='

Terms of use

Effective September 10, 2026. The tools are provided for commerce planning, pricing calculations, catalog analysis and Shopify-connected product review.

Seller responsibilities

Shopify connection

Estimates and limitations

Plans and billing

Any paid plans offered through the Shopify App Store will use Shopify App Pricing. Prices, trials and billing terms shown by Shopify control over any planning examples displayed by this service.

Availability and changes

Service availability may be affected by hosting limits, maintenance, Shopify API availability or abuse prevention. Contact hardinlourijessie@gmail.com for support.

';\nconst support='

Support

Need help with a calculation, Shopify connection, catalog draft, backup, privacy request or technical problem? Contact the project by email.

Email support

hardinlourijessie@gmail.com

Include the tool name, a non-sensitive example of your inputs, and the error message. Never send passwords, API keys, payment-card details or identity documents.

Current service status

View the service health endpoint or return to the pricing tools.

';\nfunction embeddedShopifyHome(){const key=shopifyClientId().replace(/\"/g,'"');const html='God Matters Commerce Manager

SHOPIFY APP

God Matters Commerce Manager

Signing in securely with Shopify…

Your account

Creating merchant account…

DONE-FOR-YOU STORE LAUNCH

Choose once. We handle the build.

You only connect Shopify, choose a package, and complete any protected business or supplier approvals. God Matters handles the repeatable store setup around those approvals.

1ConnectAuthorize Shopify once.

2ChooseSelect your package and supplier.

3ApproveFinish only protected Shopify or supplier steps.

Your launch checklist

Loading your setup status…

Your setup progress will appear here.

AI workspace

Checking AI service…

Ask Commerce AI

Choose and approve a trial plan to unlock AI.

Connect through Shopify to continue.

This app authenticates merchants through Shopify before showing store-connected features. Open the app from Shopify Admin or the Shopify App Store installation flow.

Use the standalone pricing calculator

',false,401);\n return page('Shopify Commerce Manager','SHOPIFY CONNECTED

God Matters Commerce Manager

Your Shopify store is securely connected. Store access is read-only: this release can read product titles and prices for analysis, but it cannot publish or modify products.

Connected store

'+shop.replace(//g,'>')+'

Requested Shopify scope: '+SHOPIFY_SCOPES+'

Open pricing calculator

View authorized product data · Connection status · Privacy · Support

');\n}\n\nasync function readJson(request:Request){if(!(request.headers.get('content-type')||'').toLowerCase().includes('application/json'))throw Object.assign(new Error('JSON content type required.'),{status:415});if(Number(request.headers.get('content-length')||0)>100000)throw Object.assign(new Error('Request too large.'),{status:413});const text=await request.text();if(text.length>100000)throw Object.assign(new Error('Request too large.'),{status:413});try{return JSON.parse(text);}catch{throw new Error('Invalid JSON request.');}}\nfunction errorResponse(e:unknown){if(e instanceof z.ZodError)return json({error:e.issues[0]?.message||'Invalid input.'},400);if(e instanceof Error)return json({error:e.message},Number((e as Error&{status?:number}).status)||400);return json({error:'Unable to process the request.'},500);}\nexport default async function(request:Request):Promise{const url=new URL(request.url),path=url.pathname,method=request.method;\n if(path==='/mcp'||path==='/mcp/')return handler.fetch(request);\n if(method==='OPTIONS')return new Response(null,{status:204,headers:{Allow:'GET, POST, OPTIONS'}});\n if(path==='/assets/app.css'&&method==='GET')return new Response(appCss,{headers:{'Content-Type':'text/css; charset=utf-8','Cache-Control':'public, max-age=300','X-Content-Type-Options':'nosniff'}});\n if(path==='/assets/app.js'&&method==='GET')return new Response(appJs,{headers:{'Content-Type':'text/javascript; charset=utf-8','Cache-Control':'public, max-age=300','X-Content-Type-Options':'nosniff'}});\n if(path==='/assets/embedded.js'&&method==='GET')return new Response(embeddedJs,{headers:{'Content-Type':'text/javascript; charset=utf-8','Cache-Control':'no-store','X-Content-Type-Options':'nosniff'}});\n if(path==='/shopify'&&method==='GET')return startShopifyInstall(request,base);\n if(path==='/auth/callback'&&method==='GET')return completeShopifyInstall(request,base);\n if(path==='/webhooks/shopify'&&method==='POST')return handleShopifyWebhook(request);\n if(path==='/shopify/app'&&method==='GET')return embeddedShopifyHome();\n if(path==='/shopify/connected'&&method==='GET')return shopifyHome(request);\n if(path==='/api/shopify/exchange'&&method==='POST')return exchangeEmbeddedShopifyToken(request);\n if(path==='/api/merchant/status'&&method==='GET')return embeddedMerchantStatus(request);\n if(path==='/api/store-packages'&&method==='GET')return json({packages:publicPackageCatalog()});\n if(path==='/api/provisioning/status'&&method==='GET'){\n try{const identity=await embeddedShopIdentity(request);const record=await getProvisioningStatus(identity.shop);return json({authenticated:true,shop:identity.shop,...provisioningSummary(record)});}catch(e){return errorResponse(e);}\n }\n if(path==='/api/provisioning/select'&&method==='POST'){\n try{const identity=await embeddedShopIdentity(request);const input=await readJson(request);const key=String(input?.packageKey||'');if(!isStorePackageKey(key))return json({error:'Choose a valid store package.'},400);const record=await selectStorePackage(identity.shop,key);return json({ok:true,...provisioningSummary(record)});}catch(e){return errorResponse(e);}\n }\n if(path==='/api/billing/status'&&method==='GET')return embeddedBillingStatus(request);\n if(path==='/api/billing/start'&&method==='POST')return startEmbeddedBilling(request,base);\n if(path==='/api/ai'&&method==='POST')return commerceAi(request);\n if(path==='/api/shopify/status'&&method==='GET')return shopifyAppStatus(request);\n if(path==='/api/shopify/products'&&method==='GET')return listShopifyProducts(request);\n if(path==='/api/price'||path==='/api/catalog'){\n if(method!=='POST')return json({error:'Use POST with JSON.'},405);\n try{const input=await readJson(request);if(path==='/api/price')return json(calculatePrice(priceSchema.parse(input)));const parsed=z.object({items:z.array(listingSchema).min(1).max(100),includeShopifyCsv:z.boolean().default(false)}).strict().parse(input);return json(analyze(parsed.items,parsed.includeShopifyCsv));}catch(e){return errorResponse(e);}\n }\n if(method!=='GET')return json({error:'Method not allowed.'},405);\n if(path==='/health')return json({ok:true,name:appName,version,features:['embedded-shopify-app','merchant-accounts','14-day-trial-billing','pricing','catalog','mcp','commerce-ai','shopify-read-products'],billingEnabled:true,billingProvider:'Shopify',trialDays:14,aiConfigured:Boolean(Deno.env.get('OPENAI_API_KEY')),shopifyConfigured:shopifyConfigured(),shopifyMissingConfig:shopifyMissingConfig(),appStorePublished:false});\n if(path==='/api/capabilities')return json(capabilities);\n if(path==='/api/plans')return json({plans,paidBillingEnabled:true,billingProvider:'Shopify',trialDays:14,permanentFreePlan:false});\n if(path==='/')return webResponse(renderHome());\n if(path==='/economics')return economics();\n if(path==='/privacy')return page('Privacy policy',privacy);\n if(path==='/terms')return page('Terms of use',terms);\n if(path==='/support')return page('Support',support);\n return page('Not found','

Page not found

The requested page does not exist.

Return to Commerce Manager

');\n}\n","createdAt",["D",1789043045838],"branchVersion","branchId","693ca9a7-5c6a-4e1f-bd5e-5a169b6e9016",{"_34":50,"_36":49,"_37":51,"_39":53,"_42":54,"_44":14,"_45":46,"_28":29},{"_34":50,"_36":49,"_37":51,"_39":52},"shopify.ts","ab41be4e-acde-11f1-a3f8-1607ee4eb77e","script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst API_VERSION = '2026-07';\nexport const SHOPIFY_SCOPES = 'read_products';\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\n\nfunction env(name:string){return (Deno.env.get(name)||'').trim();}\nexport function shopifyConfigured(){return Boolean(env('SHOPIFY_CLIENT_ID')&&env('SHOPIFY_CLIENT_SECRET')&&env('SHOPIFY_TOKEN_ENCRYPTION_KEY')&&env('SHOPIFY_SESSION_SECRET'));}\nexport function shopifyMissingConfig(){return ['SHOPIFY_CLIENT_ID','SHOPIFY_CLIENT_SECRET','SHOPIFY_TOKEN_ENCRYPTION_KEY','SHOPIFY_SESSION_SECRET'].filter(k=>!env(k));}\nexport function validShop(shop:string){return /^[a-z0-9][a-z0-9-]*\\.myshopify\\.com$/i.test(shop);}\nfunction redirect(url:string,status=302){return new Response(null,{status,headers:{Location:url,'Cache-Control':'no-store'}});}\nfunction json(value:unknown,status=200){return Response.json(value,{status,headers:{'Cache-Control':'no-store','X-Content-Type-Options':'nosniff'}});}\nfunction b64url(bytes:Uint8Array){let s='';for(const b of bytes)s+=String.fromCharCode(b);return btoa(s).replace(/\\+/g,'-').replace(/\\//g,'_').replace(/=+$/,'');}\nfunction fromB64url(s:string){s=s.replace(/-/g,'+').replace(/_/g,'/');while(s.length%4)s+='=';const raw=atob(s);return Uint8Array.from(raw,c=>c.charCodeAt(0));}\nfunction hexBytes(hex:string){if(!/^[a-f0-9]{64}$/i.test(hex))return new Uint8Array();return Uint8Array.from(hex.match(/.{2}/g)!.map(x=>parseInt(x,16)));}\nasync function hmacKey(secret:string){return crypto.subtle.importKey('raw',enc.encode(secret),{name:'HMAC',hash:'SHA-256'},false,['sign','verify']);}\nasync function aesKey(){const raw=fromB64url(env('SHOPIFY_TOKEN_ENCRYPTION_KEY'));if(raw.length!==32)throw new Error('SHOPIFY_TOKEN_ENCRYPTION_KEY must decode to 32 bytes.');return crypto.subtle.importKey('raw',raw,{name:'AES-GCM'},false,['encrypt','decrypt']);}\nasync function encrypt(value:string){const iv=crypto.getRandomValues(new Uint8Array(12)),key=await aesKey();const out=new Uint8Array(await crypto.subtle.encrypt({name:'AES-GCM',iv},key,enc.encode(value)));const joined=new Uint8Array(iv.length+out.length);joined.set(iv);joined.set(out,iv.length);return b64url(joined);}\nasync function decrypt(value:string){const raw=fromB64url(value),iv=raw.slice(0,12),data=raw.slice(12),key=await aesKey();return dec.decode(await crypto.subtle.decrypt({name:'AES-GCM',iv},key,data));}\n\nasync function init(){\n await sqlite.execute(`create table if not exists shopify_oauth_state (state text primary key, shop text not null, expires_at integer not null)`);\n await sqlite.execute(`create table if not exists shopify_sessions (shop text primary key, access_token text not null, refresh_token text, scope text not null, access_expires_at integer, refresh_expires_at integer, updated_at text not null default current_timestamp)`);\n}\n\nasync function createState(shop:string){await init();const state=crypto.randomUUID().replace(/-/g,'');const expiry=Date.now()+10*60*1000;await sqlite.execute({sql:'delete from shopify_oauth_state where expires_at < ?',args:[Date.now()]});await sqlite.execute({sql:'insert into shopify_oauth_state(state,shop,expires_at) values(?,?,?)',args:[state,shop,expiry]});return state;}\nasync function consumeState(state:string){await init();const result=await sqlite.execute({sql:'select shop,expires_at from shopify_oauth_state where state=?',args:[state]});const row=(result.rows as any[])[0];if(!row||Number(row.expires_at)k!=='hmac'&&k!=='signature').sort(([a],[b])=>a.localeCompare(b));const message=pairs.map(([k,v])=>`${k}=${v}`).join('&');const key=await hmacKey(env('SHOPIFY_CLIENT_SECRET'));const bytes=hexBytes(supplied);return bytes.length===32&&crypto.subtle.verify('HMAC',key,bytes,enc.encode(message));}\nasync function signedCookie(shop:string){const payload=b64url(enc.encode(shop));const sig=new Uint8Array(await crypto.subtle.sign('HMAC',await hmacKey(env('SHOPIFY_SESSION_SECRET')),enc.encode(payload)));return `${payload}.${b64url(sig)}`;}\nasync function cookieShop(request:Request){const cookie=request.headers.get('cookie')||'';const pair=cookie.split(';').map(s=>s.trim()).find(s=>s.startsWith('gm_shop='));if(!pair)return null;const value=pair.slice(8),dot=value.lastIndexOf('.');if(dot<1)return null;const payload=value.slice(0,dot),sig=value.slice(dot+1);try{const ok=await crypto.subtle.verify('HMAC',await hmacKey(env('SHOPIFY_SESSION_SECRET')),fromB64url(sig),enc.encode(payload));if(!ok)return null;const shop=dec.decode(fromB64url(payload));return validShop(shop)?shop:null;}catch{return null;}}\n\nexport async function startShopifyInstall(request:Request,base:string){if(!shopifyConfigured())return json({error:'Shopify app credentials are not configured.',missing:shopifyMissingConfig()},503);const url=new URL(request.url),shop=(url.searchParams.get('shop')||'').toLowerCase();if(!validShop(shop))return json({error:'Invalid Shopify store domain.'},400);const state=await createState(shop);const callback=`${base}/auth/callback`;const auth=new URL(`https://${shop}/admin/oauth/authorize`);auth.search=new URLSearchParams({client_id:env('SHOPIFY_CLIENT_ID'),scope:SHOPIFY_SCOPES,redirect_uri:callback,state}).toString();return redirect(auth.toString());}\n\nexport async function completeShopifyInstall(request:Request,base:string){if(!shopifyConfigured())return json({error:'Shopify app credentials are not configured.',missing:shopifyMissingConfig()},503);const url=new URL(request.url),shop=(url.searchParams.get('shop')||'').toLowerCase(),state=url.searchParams.get('state')||'',code=url.searchParams.get('code')||'';if(!validShop(shop)||!state||!code)return json({error:'Incomplete Shopify authorization callback.'},400);if(!(await verifyCallbackHmac(url)))return json({error:'Invalid Shopify callback signature.'},403);const stateRecord=await consumeState(state);if(!stateRecord)return json({error:'Invalid or expired OAuth state.'},403);\n const response=await fetch(`https://${shop}/admin/oauth/access_token`,{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded','Accept':'application/json'},body:new URLSearchParams({client_id:env('SHOPIFY_CLIENT_ID'),client_secret:env('SHOPIFY_CLIENT_SECRET'),code,expiring:'1'})});\n if(!response.ok)return json({error:'Shopify token exchange failed.',status:response.status},502);const data=await response.json() as any;const granted=String(data.scope||'').split(',').filter(Boolean);if(!granted.includes('read_products')&&!granted.includes('write_products'))return json({error:'Required product access was not granted.'},403);const access=await encrypt(String(data.access_token||'')),refresh=data.refresh_token?await encrypt(String(data.refresh_token)):null,accessExpiry=data.expires_in?Date.now()+Number(data.expires_in)*1000:null,refreshExpiry=data.refresh_token_expires_in?Date.now()+Number(data.refresh_token_expires_in)*1000:null;await init();await sqlite.execute({sql:`insert into shopify_sessions(shop,access_token,refresh_token,scope,access_expires_at,refresh_expires_at,updated_at) values(?,?,?,?,?,?,current_timestamp) on conflict(shop) do update set access_token=excluded.access_token,refresh_token=excluded.refresh_token,scope=excluded.scope,access_expires_at=excluded.access_expires_at,refresh_expires_at=excluded.refresh_expires_at,updated_at=current_timestamp`,args:[shop,access,refresh,String(data.scope||''),accessExpiry,refreshExpiry]});const cookie=await signedCookie(shop);return new Response(null,{status:302,headers:{Location:`${base}/shopify/app`,'Set-Cookie':`gm_shop=${cookie}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=2592000`,'Cache-Control':'no-store'}});}\n\nasync function sessionRow(shop:string){await init();const result=await sqlite.execute({sql:'select * from shopify_sessions where shop=?',args:[shop]});return (result.rows as any[])[0]||null;}\nasync function refresh(shop:string,row:any){if(!row.refresh_token)return null;const refreshToken=await decrypt(row.refresh_token);const response=await fetch(`https://${shop}/admin/oauth/access_token`,{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded','Accept':'application/json'},body:new URLSearchParams({client_id:env('SHOPIFY_CLIENT_ID'),client_secret:env('SHOPIFY_CLIENT_SECRET'),grant_type:'refresh_token',refresh_token:refreshToken})});if(response.status===401){await sqlite.execute({sql:'delete from shopify_sessions where shop=?',args:[shop]});return null;}if(!response.ok)throw new Error(`Shopify token refresh failed (${response.status}).`);const data=await response.json() as any;const access=await encrypt(String(data.access_token||'')),newRefresh=data.refresh_token?await encrypt(String(data.refresh_token)):row.refresh_token,accessExpiry=data.expires_in?Date.now()+Number(data.expires_in)*1000:null,refreshExpiry=data.refresh_token_expires_in?Date.now()+Number(data.refresh_token_expires_in)*1000:row.refresh_expires_at;await sqlite.execute({sql:'update shopify_sessions set access_token=?,refresh_token=?,access_expires_at=?,refresh_expires_at=?,updated_at=current_timestamp where shop=?',args:[access,newRefresh,accessExpiry,refreshExpiry,shop]});return {...row,access_token:access,refresh_token:newRefresh,access_expires_at:accessExpiry,refresh_expires_at:refreshExpiry};}\nasync function accessFor(request:Request){const shop=await cookieShop(request);if(!shop)return null;let row=await sessionRow(shop);if(!row)return null;if(row.access_expires_at&&Date.now()>=Number(row.access_expires_at)-60000)row=await refresh(shop,row);if(!row)return null;return {shop,token:await decrypt(row.access_token),scope:String(row.scope||'')};}\n\nexport async function shopifyAppStatus(request:Request){const session=shopifyConfigured()?await accessFor(request):null;return json({configured:shopifyConfigured(),missing:shopifyMissingConfig(),authenticated:Boolean(session),shop:session?.shop||null,scopes:SHOPIFY_SCOPES,apiVersion:API_VERSION});}\n\nexport async function listShopifyProducts(request:Request){if(!shopifyConfigured())return json({error:'Shopify app credentials are not configured.',missing:shopifyMissingConfig()},503);let session;try{session=await accessFor(request);}catch(e){return json({error:e instanceof Error?e.message:'Unable to refresh Shopify session.'},502);}if(!session)return json({error:'Shopify authentication required.'},401);const query=`query CommerceProducts { products(first: 50) { nodes { id title handle status vendor productType variants(first: 10) { nodes { id title price } } } } }`;const response=await fetch(`https://${session.shop}/admin/api/${API_VERSION}/graphql.json`,{method:'POST',headers:{'Content-Type':'application/json','X-Shopify-Access-Token':session.token},body:JSON.stringify({query})});const body=await response.json().catch(()=>({}));if(response.status===401){await sqlite.execute({sql:'delete from shopify_sessions where shop=?',args:[session.shop]});return json({error:'Shopify authorization expired. Reinstall the app.'},401);}return json(body,response.status);\n}\n\nexport async function authenticatedShop(request:Request){return shopifyConfigured()?cookieShop(request):null;}\n\nexport async function handleShopifyWebhook(request:Request){\n if(!shopifyConfigured())return json({error:'Shopify app credentials are not configured.'},503);\n if(!(request.headers.get('content-type')||'').toLowerCase().includes('application/json'))return json({error:'JSON content type required.'},415);\n const raw=await request.text();\n const supplied=request.headers.get('x-shopify-hmac-sha256')||'';\n let valid=false;\n try{const signature=fromB64url(supplied);valid=signature.length>0&&await crypto.subtle.verify('HMAC',await hmacKey(env('SHOPIFY_CLIENT_SECRET')),signature,enc.encode(raw));}catch{valid=false;}\n if(!valid)return json({error:'Invalid Shopify webhook signature.'},401);\n let body:any;try{body=JSON.parse(raw);}catch{return json({error:'Invalid JSON webhook payload.'},400);}\n const topic=(request.headers.get('x-shopify-topic')||'').toLowerCase();\n const shop=String(body.shop_domain||request.headers.get('x-shopify-shop-domain')||'').toLowerCase();\n if((topic==='shop/redact'||topic==='app/uninstalled')&&validShop(shop)){\n await init();\n await sqlite.execute({sql:'delete from shopify_sessions where shop=?',args:[shop]});\n await sqlite.execute({sql:'delete from shopify_oauth_state where shop=?',args:[shop]});\n }\n return json({ok:true});\n}\n\n\nexport function shopifyClientId(){return env('SHOPIFY_CLIENT_ID');}\n\nfunction decodeJwtPart(part:string){return JSON.parse(dec.decode(fromB64url(part)));}\nasync function validateShopifyIdToken(token:string){\n const parts=token.split('.'); if(parts.length!==3)throw new Error('Invalid Shopify ID token.');\n const [headerPart,payloadPart,sigPart]=parts; const header=decodeJwtPart(headerPart),payload=decodeJwtPart(payloadPart);\n if(header.alg!=='HS256')throw new Error('Unsupported Shopify ID token algorithm.');\n const ok=await crypto.subtle.verify('HMAC',await hmacKey(env('SHOPIFY_CLIENT_SECRET')),fromB64url(sigPart),enc.encode(`${headerPart}.${payloadPart}`));\n if(!ok)throw new Error('Invalid Shopify ID token signature.');\n const now=Math.floor(Date.now()/1000); if(Number(payload.exp||0)<=now||Number(payload.nbf||0)>now+5)throw new Error('Expired Shopify ID token.');\n const aud=Array.isArray(payload.aud)?payload.aud:[payload.aud]; if(!aud.includes(env('SHOPIFY_CLIENT_ID')))throw new Error('Shopify ID token audience mismatch.');\n const dest=new URL(String(payload.dest||'')),iss=new URL(String(payload.iss||'')); if(dest.hostname!==iss.hostname||!validShop(dest.hostname))throw new Error('Shopify ID token shop mismatch.');\n return {shop:dest.hostname.toLowerCase(),sub:String(payload.sub||''),payload};\n}\n\nasync function ensureMerchantAccount(shop:string,provider='shopify'){\n await sqlite.execute(`create table if not exists merchant_accounts (shop text primary key, auth_provider text not null, selected_plan text, billing_status text not null default 'pending', created_at text not null default current_timestamp, updated_at text not null default current_timestamp)`);\n await sqlite.execute({sql:`insert into merchant_accounts(shop,auth_provider,billing_status) values(?,?,'pending') on conflict(shop) do update set auth_provider=excluded.auth_provider,updated_at=current_timestamp`,args:[shop,provider]});\n}\n\nexport async function exchangeEmbeddedShopifyToken(request:Request){\n if(!shopifyConfigured())return json({error:'Shopify app credentials are not configured.'},503);\n const auth=request.headers.get('authorization')||''; const idToken=auth.startsWith('Bearer ')?auth.slice(7):'';\n if(!idToken)return json({error:'Shopify ID token required.'},401);\n let identity; try{identity=await validateShopifyIdToken(idToken);}catch(e){return Response.json({error:e instanceof Error?e.message:'Invalid Shopify ID token.'},{status:401,headers:{'Cache-Control':'no-store','X-Shopify-Retry-Invalid-Session-Request':'1'}});}\n const response=await fetch(`https://${identity.shop}/admin/oauth/access_token`,{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded','Accept':'application/json'},body:new URLSearchParams({client_id:env('SHOPIFY_CLIENT_ID'),client_secret:env('SHOPIFY_CLIENT_SECRET'),grant_type:'urn:ietf:params:oauth:grant-type:token-exchange',subject_token:idToken,subject_token_type:'urn:ietf:params:oauth:token-type:id_token',requested_token_type:'urn:shopify:params:oauth:token-type:offline-access-token',expiring:'1'})});\n if(response.status===400)return Response.json({error:'Shopify ID token must be refreshed.'},{status:401,headers:{'Cache-Control':'no-store','X-Shopify-Retry-Invalid-Session-Request':'1'}});\n if(!response.ok)return json({error:'Shopify token exchange failed.',status:response.status},502);\n const data=await response.json() as any; const access=await encrypt(String(data.access_token||'')),refresh=data.refresh_token?await encrypt(String(data.refresh_token)):null,accessExpiry=data.expires_in?Date.now()+Number(data.expires_in)*1000:null,refreshExpiry=data.refresh_token_expires_in?Date.now()+Number(data.refresh_token_expires_in)*1000:null;\n await init(); await sqlite.execute({sql:`insert into shopify_sessions(shop,access_token,refresh_token,scope,access_expires_at,refresh_expires_at,updated_at) values(?,?,?,?,?,?,current_timestamp) on conflict(shop) do update set access_token=excluded.access_token,refresh_token=excluded.refresh_token,scope=excluded.scope,access_expires_at=excluded.access_expires_at,refresh_expires_at=excluded.refresh_expires_at,updated_at=current_timestamp`,args:[identity.shop,access,refresh,String(data.scope||SHOPIFY_SCOPES),accessExpiry,refreshExpiry]});\n await ensureMerchantAccount(identity.shop,'shopify');\n return json({ok:true,shop:identity.shop,accountCreated:true,billingStatus:'pending',scopes:String(data.scope||SHOPIFY_SCOPES)});\n}\n\nexport async function embeddedMerchantStatus(request:Request){\n const auth=request.headers.get('authorization')||''; const idToken=auth.startsWith('Bearer ')?auth.slice(7):''; if(!idToken)return json({authenticated:false},401);\n let identity; try{identity=await validateShopifyIdToken(idToken);}catch{return json({authenticated:false},401);}\n await ensureMerchantAccount(identity.shop,'shopify');\n const r=await sqlite.execute({sql:'select shop,auth_provider,selected_plan,billing_status,created_at,updated_at from merchant_accounts where shop=?',args:[identity.shop]});\n return json({authenticated:true,account:(r.rows as any[])[0]||null,aiConfigured:Boolean(env('OPENAI_API_KEY')||env('AI_API_KEY')),pricingConfigured:false});\n}\n\nconst BILLING_PLANS={starter:{name:'Starter',price:4.99},growth:{name:'Growth',price:9.99},pro:{name:'Pro',price:19.99}} as const;\ntype BillingPlanKey=keyof typeof BILLING_PLANS;\nasync function embeddedIdentityAndToken(request:Request){\n const auth=request.headers.get('authorization')||''; const idToken=auth.startsWith('Bearer ')?auth.slice(7):''; if(!idToken)throw Object.assign(new Error('Shopify ID token required.'),{status:401});\n const identity=await validateShopifyIdToken(idToken); let row=await sessionRow(identity.shop); if(!row)throw Object.assign(new Error('Shopify store session is not ready. Reopen the app from Shopify Admin.'),{status:401});\n if(row.access_expires_at&&Date.now()>=Number(row.access_expires_at)-60000)row=await refresh(identity.shop,row); if(!row)throw Object.assign(new Error('Shopify authorization expired.'),{status:401});\n return {identity,token:await decrypt(row.access_token)};\n}\nasync function shopifyGraphql(shop:string,token:string,query:string,variables:any={}){const r=await fetch(`https://${shop}/admin/api/${API_VERSION}/graphql.json`,{method:'POST',headers:{'Content-Type':'application/json','X-Shopify-Access-Token':token},body:JSON.stringify({query,variables})});const b=await r.json().catch(()=>({}));if(!r.ok)throw Object.assign(new Error(`Shopify API request failed (${r.status}).`),{status:r.status,body:b});return b as any;}\nexport async function embeddedBillingStatus(request:Request){\n try{const {identity,token}=await embeddedIdentityAndToken(request);const body=await shopifyGraphql(identity.shop,token,`query BillingStatus { currentAppInstallation { activeSubscriptions { id name status trialDays currentPeriodEnd test lineItems { plan { pricingDetails { __typename ... on AppRecurringPricing { price { amount currencyCode } interval } } } } } } }`);const subs=body?.data?.currentAppInstallation?.activeSubscriptions||[];const active=subs[0]||null;await ensureMerchantAccount(identity.shop,'shopify');await sqlite.execute({sql:\"update merchant_accounts set billing_status=?, selected_plan=coalesce(?,selected_plan), updated_at=current_timestamp where shop=?\",args:[active?'active':'pending',active?.name||null,identity.shop]});return json({authenticated:true,shop:identity.shop,activeSubscription:active,trialActive:Boolean(active&&Number(active.trialDays||0)>0),requiresPlan:!active});}catch(e){return json({error:e instanceof Error?e.message:'Unable to check billing status.'},Number((e as any)?.status)||400);}\n}\nexport async function startEmbeddedBilling(request:Request,returnBase:string){\n try{const {identity,token}=await embeddedIdentityAndToken(request);const raw=await request.text();let parsed:any={};try{parsed=raw?JSON.parse(raw):{};}catch{throw Object.assign(new Error('Invalid JSON request.'),{status:400});}const key=String(parsed.plan||'').toLowerCase() as BillingPlanKey;const plan=BILLING_PLANS[key];if(!plan)throw Object.assign(new Error('Choose Starter, Growth, or Pro.'),{status:400});\n const current=await shopifyGraphql(identity.shop,token,`query CurrentBilling { currentAppInstallation { activeSubscriptions { id name status } } }`);const existing=current?.data?.currentAppInstallation?.activeSubscriptions||[];if(existing.length)return json({ok:true,alreadyActive:true,subscription:existing[0]});\n const mutation=`mutation StartTrial($name:String!,$returnUrl:URL!,$trialDays:Int,$lineItems:[AppSubscriptionLineItemInput!]!){ appSubscriptionCreate(name:$name,returnUrl:$returnUrl,trialDays:$trialDays,lineItems:$lineItems){ appSubscription{id name status trialDays} confirmationUrl userErrors{field message} } }`;\n const variables={name:plan.name,returnUrl:`${returnBase}/shopify/app`,trialDays:14,lineItems:[{plan:{appRecurringPricingDetails:{price:{amount:plan.price,currencyCode:'USD'},interval:'EVERY_30_DAYS'}}}]};const body=await shopifyGraphql(identity.shop,token,mutation,variables);const result=body?.data?.appSubscriptionCreate;if(result?.userErrors?.length)throw Object.assign(new Error(result.userErrors.map((x:any)=>x.message).join('; ')),{status:400});if(!result?.confirmationUrl)throw new Error('Shopify did not return a subscription approval URL.');await ensureMerchantAccount(identity.shop,'shopify');await sqlite.execute({sql:\"update merchant_accounts set selected_plan=?,billing_status='pending_approval',updated_at=current_timestamp where shop=?\",args:[plan.name,identity.shop]});return json({ok:true,plan:plan.name,price:plan.price,trialDays:14,confirmationUrl:result.confirmationUrl});}catch(e){return json({error:e instanceof Error?e.message:'Unable to start subscription.'},Number((e as any)?.status)||400);}\n}\n\nexport async function requireEmbeddedSubscription(request:Request){\n const {identity,token}=await embeddedIdentityAndToken(request);\n const body=await shopifyGraphql(identity.shop,token,`query PaidAccess { currentAppInstallation { activeSubscriptions { id name status trialDays currentPeriodEnd } } }`);\n const active=(body?.data?.currentAppInstallation?.activeSubscriptions||[])[0]||null;\n if(!active)throw Object.assign(new Error('Start and approve a 14-day trial to use AI.'),{status:402});\n await ensureMerchantAccount(identity.shop,'shopify');\n await sqlite.execute({sql:\"update merchant_accounts set billing_status='active',selected_plan=?,updated_at=current_timestamp where shop=?\",args:[active.name||null,identity.shop]});\n return {shop:identity.shop,subscription:active};\n}\n","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst API_VERSION = '2026-07';\nexport const SHOPIFY_SCOPES = 'read_products';\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\n\nfunction env(name:string){return (Deno.env.get(name)||'').trim();}\nexport function shopifyConfigured(){return Boolean(env('SHOPIFY_CLIENT_ID')&&env('SHOPIFY_CLIENT_SECRET')&&env('SHOPIFY_TOKEN_ENCRYPTION_KEY')&&env('SHOPIFY_SESSION_SECRET'));}\nexport function shopifyMissingConfig(){return ['SHOPIFY_CLIENT_ID','SHOPIFY_CLIENT_SECRET','SHOPIFY_TOKEN_ENCRYPTION_KEY','SHOPIFY_SESSION_SECRET'].filter(k=>!env(k));}\nexport function validShop(shop:string){return /^[a-z0-9][a-z0-9-]*\\.myshopify\\.com$/i.test(shop);}\nfunction redirect(url:string,status=302){return new Response(null,{status,headers:{Location:url,'Cache-Control':'no-store'}});}\nfunction json(value:unknown,status=200){return Response.json(value,{status,headers:{'Cache-Control':'no-store','X-Content-Type-Options':'nosniff'}});}\nfunction b64url(bytes:Uint8Array){let s='';for(const b of bytes)s+=String.fromCharCode(b);return btoa(s).replace(/\\+/g,'-').replace(/\\//g,'_').replace(/=+$/,'');}\nfunction fromB64url(s:string){s=s.replace(/-/g,'+').replace(/_/g,'/');while(s.length%4)s+='=';const raw=atob(s);return Uint8Array.from(raw,c=>c.charCodeAt(0));}\nfunction hexBytes(hex:string){if(!/^[a-f0-9]{64}$/i.test(hex))return new Uint8Array();return Uint8Array.from(hex.match(/.{2}/g)!.map(x=>parseInt(x,16)));}\nasync function hmacKey(secret:string){return crypto.subtle.importKey('raw',enc.encode(secret),{name:'HMAC',hash:'SHA-256'},false,['sign','verify']);}\nasync function aesKey(){const raw=fromB64url(env('SHOPIFY_TOKEN_ENCRYPTION_KEY'));if(raw.length!==32)throw new Error('SHOPIFY_TOKEN_ENCRYPTION_KEY must decode to 32 bytes.');return crypto.subtle.importKey('raw',raw,{name:'AES-GCM'},false,['encrypt','decrypt']);}\nasync function encrypt(value:string){const iv=crypto.getRandomValues(new Uint8Array(12)),key=await aesKey();const out=new Uint8Array(await crypto.subtle.encrypt({name:'AES-GCM',iv},key,enc.encode(value)));const joined=new Uint8Array(iv.length+out.length);joined.set(iv);joined.set(out,iv.length);return b64url(joined);}\nasync function decrypt(value:string){const raw=fromB64url(value),iv=raw.slice(0,12),data=raw.slice(12),key=await aesKey();return dec.decode(await crypto.subtle.decrypt({name:'AES-GCM',iv},key,data));}\n\nasync function init(){\n await sqlite.execute(`create table if not exists shopify_oauth_state (state text primary key, shop text not null, expires_at integer not null)`);\n await sqlite.execute(`create table if not exists shopify_sessions (shop text primary key, access_token text not null, refresh_token text, scope text not null, access_expires_at integer, refresh_expires_at integer, updated_at text not null default current_timestamp)`);\n}\n\nasync function createState(shop:string){await init();const state=crypto.randomUUID().replace(/-/g,'');const expiry=Date.now()+10*60*1000;await sqlite.execute({sql:'delete from shopify_oauth_state where expires_at < ?',args:[Date.now()]});await sqlite.execute({sql:'insert into shopify_oauth_state(state,shop,expires_at) values(?,?,?)',args:[state,shop,expiry]});return state;}\nasync function consumeState(state:string){await init();const result=await sqlite.execute({sql:'select shop,expires_at from shopify_oauth_state where state=?',args:[state]});const row=(result.rows as any[])[0];if(!row||Number(row.expires_at)k!=='hmac'&&k!=='signature').sort(([a],[b])=>a.localeCompare(b));const message=pairs.map(([k,v])=>`${k}=${v}`).join('&');const key=await hmacKey(env('SHOPIFY_CLIENT_SECRET'));const bytes=hexBytes(supplied);return bytes.length===32&&crypto.subtle.verify('HMAC',key,bytes,enc.encode(message));}\nasync function signedCookie(shop:string){const payload=b64url(enc.encode(shop));const sig=new Uint8Array(await crypto.subtle.sign('HMAC',await hmacKey(env('SHOPIFY_SESSION_SECRET')),enc.encode(payload)));return `${payload}.${b64url(sig)}`;}\nasync function cookieShop(request:Request){const cookie=request.headers.get('cookie')||'';const pair=cookie.split(';').map(s=>s.trim()).find(s=>s.startsWith('gm_shop='));if(!pair)return null;const value=pair.slice(8),dot=value.lastIndexOf('.');if(dot<1)return null;const payload=value.slice(0,dot),sig=value.slice(dot+1);try{const ok=await crypto.subtle.verify('HMAC',await hmacKey(env('SHOPIFY_SESSION_SECRET')),fromB64url(sig),enc.encode(payload));if(!ok)return null;const shop=dec.decode(fromB64url(payload));return validShop(shop)?shop:null;}catch{return null;}}\n\nexport async function startShopifyInstall(request:Request,base:string){if(!shopifyConfigured())return json({error:'Shopify app credentials are not configured.',missing:shopifyMissingConfig()},503);const url=new URL(request.url),shop=(url.searchParams.get('shop')||'').toLowerCase();if(!validShop(shop))return json({error:'Invalid Shopify store domain.'},400);const state=await createState(shop);const callback=`${base}/auth/callback`;const auth=new URL(`https://${shop}/admin/oauth/authorize`);auth.search=new URLSearchParams({client_id:env('SHOPIFY_CLIENT_ID'),scope:SHOPIFY_SCOPES,redirect_uri:callback,state}).toString();return redirect(auth.toString());}\n\nexport async function completeShopifyInstall(request:Request,base:string){if(!shopifyConfigured())return json({error:'Shopify app credentials are not configured.',missing:shopifyMissingConfig()},503);const url=new URL(request.url),shop=(url.searchParams.get('shop')||'').toLowerCase(),state=url.searchParams.get('state')||'',code=url.searchParams.get('code')||'';if(!validShop(shop)||!state||!code)return json({error:'Incomplete Shopify authorization callback.'},400);if(!(await verifyCallbackHmac(url)))return json({error:'Invalid Shopify callback signature.'},403);const stateRecord=await consumeState(state);if(!stateRecord)return json({error:'Invalid or expired OAuth state.'},403);\n const response=await fetch(`https://${shop}/admin/oauth/access_token`,{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded','Accept':'application/json'},body:new URLSearchParams({client_id:env('SHOPIFY_CLIENT_ID'),client_secret:env('SHOPIFY_CLIENT_SECRET'),code,expiring:'1'})});\n if(!response.ok)return json({error:'Shopify token exchange failed.',status:response.status},502);const data=await response.json() as any;const granted=String(data.scope||'').split(',').filter(Boolean);if(!granted.includes('read_products')&&!granted.includes('write_products'))return json({error:'Required product access was not granted.'},403);const access=await encrypt(String(data.access_token||'')),refresh=data.refresh_token?await encrypt(String(data.refresh_token)):null,accessExpiry=data.expires_in?Date.now()+Number(data.expires_in)*1000:null,refreshExpiry=data.refresh_token_expires_in?Date.now()+Number(data.refresh_token_expires_in)*1000:null;await init();await sqlite.execute({sql:`insert into shopify_sessions(shop,access_token,refresh_token,scope,access_expires_at,refresh_expires_at,updated_at) values(?,?,?,?,?,?,current_timestamp) on conflict(shop) do update set access_token=excluded.access_token,refresh_token=excluded.refresh_token,scope=excluded.scope,access_expires_at=excluded.access_expires_at,refresh_expires_at=excluded.refresh_expires_at,updated_at=current_timestamp`,args:[shop,access,refresh,String(data.scope||''),accessExpiry,refreshExpiry]});const cookie=await signedCookie(shop);return new Response(null,{status:302,headers:{Location:`${base}/shopify/app`,'Set-Cookie':`gm_shop=${cookie}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=2592000`,'Cache-Control':'no-store'}});}\n\nasync function sessionRow(shop:string){await init();const result=await sqlite.execute({sql:'select * from shopify_sessions where shop=?',args:[shop]});return (result.rows as any[])[0]||null;}\nasync function refresh(shop:string,row:any){if(!row.refresh_token)return null;const refreshToken=await decrypt(row.refresh_token);const response=await fetch(`https://${shop}/admin/oauth/access_token`,{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded','Accept':'application/json'},body:new URLSearchParams({client_id:env('SHOPIFY_CLIENT_ID'),client_secret:env('SHOPIFY_CLIENT_SECRET'),grant_type:'refresh_token',refresh_token:refreshToken})});if(response.status===401){await sqlite.execute({sql:'delete from shopify_sessions where shop=?',args:[shop]});return null;}if(!response.ok)throw new Error(`Shopify token refresh failed (${response.status}).`);const data=await response.json() as any;const access=await encrypt(String(data.access_token||'')),newRefresh=data.refresh_token?await encrypt(String(data.refresh_token)):row.refresh_token,accessExpiry=data.expires_in?Date.now()+Number(data.expires_in)*1000:null,refreshExpiry=data.refresh_token_expires_in?Date.now()+Number(data.refresh_token_expires_in)*1000:row.refresh_expires_at;await sqlite.execute({sql:'update shopify_sessions set access_token=?,refresh_token=?,access_expires_at=?,refresh_expires_at=?,updated_at=current_timestamp where shop=?',args:[access,newRefresh,accessExpiry,refreshExpiry,shop]});return {...row,access_token:access,refresh_token:newRefresh,access_expires_at:accessExpiry,refresh_expires_at:refreshExpiry};}\nasync function accessFor(request:Request){const shop=await cookieShop(request);if(!shop)return null;let row=await sessionRow(shop);if(!row)return null;if(row.access_expires_at&&Date.now()>=Number(row.access_expires_at)-60000)row=await refresh(shop,row);if(!row)return null;return {shop,token:await decrypt(row.access_token),scope:String(row.scope||'')};}\n\nexport async function shopifyAppStatus(request:Request){const session=shopifyConfigured()?await accessFor(request):null;return json({configured:shopifyConfigured(),missing:shopifyMissingConfig(),authenticated:Boolean(session),shop:session?.shop||null,scopes:SHOPIFY_SCOPES,apiVersion:API_VERSION});}\n\nexport async function listShopifyProducts(request:Request){if(!shopifyConfigured())return json({error:'Shopify app credentials are not configured.',missing:shopifyMissingConfig()},503);let session;try{session=await accessFor(request);}catch(e){return json({error:e instanceof Error?e.message:'Unable to refresh Shopify session.'},502);}if(!session)return json({error:'Shopify authentication required.'},401);const query=`query CommerceProducts { products(first: 50) { nodes { id title handle status vendor productType variants(first: 10) { nodes { id title price } } } } }`;const response=await fetch(`https://${session.shop}/admin/api/${API_VERSION}/graphql.json`,{method:'POST',headers:{'Content-Type':'application/json','X-Shopify-Access-Token':session.token},body:JSON.stringify({query})});const body=await response.json().catch(()=>({}));if(response.status===401){await sqlite.execute({sql:'delete from shopify_sessions where shop=?',args:[session.shop]});return json({error:'Shopify authorization expired. Reinstall the app.'},401);}return json(body,response.status);\n}\n\nexport async function authenticatedShop(request:Request){return shopifyConfigured()?cookieShop(request):null;}\n\nexport async function handleShopifyWebhook(request:Request){\n if(!shopifyConfigured())return json({error:'Shopify app credentials are not configured.'},503);\n if(!(request.headers.get('content-type')||'').toLowerCase().includes('application/json'))return json({error:'JSON content type required.'},415);\n const raw=await request.text();\n const supplied=request.headers.get('x-shopify-hmac-sha256')||'';\n let valid=false;\n try{const signature=fromB64url(supplied);valid=signature.length>0&&await crypto.subtle.verify('HMAC',await hmacKey(env('SHOPIFY_CLIENT_SECRET')),signature,enc.encode(raw));}catch{valid=false;}\n if(!valid)return json({error:'Invalid Shopify webhook signature.'},401);\n let body:any;try{body=JSON.parse(raw);}catch{return json({error:'Invalid JSON webhook payload.'},400);}\n const topic=(request.headers.get('x-shopify-topic')||'').toLowerCase();\n const shop=String(body.shop_domain||request.headers.get('x-shopify-shop-domain')||'').toLowerCase();\n if((topic==='shop/redact'||topic==='app/uninstalled')&&validShop(shop)){\n await init();\n await sqlite.execute({sql:'delete from shopify_sessions where shop=?',args:[shop]});\n await sqlite.execute({sql:'delete from shopify_oauth_state where shop=?',args:[shop]});\n }\n return json({ok:true});\n}\n\n\nexport function shopifyClientId(){return env('SHOPIFY_CLIENT_ID');}\n\nfunction decodeJwtPart(part:string){return JSON.parse(dec.decode(fromB64url(part)));}\nasync function validateShopifyIdToken(token:string){\n const parts=token.split('.'); if(parts.length!==3)throw new Error('Invalid Shopify ID token.');\n const [headerPart,payloadPart,sigPart]=parts; const header=decodeJwtPart(headerPart),payload=decodeJwtPart(payloadPart);\n if(header.alg!=='HS256')throw new Error('Unsupported Shopify ID token algorithm.');\n const ok=await crypto.subtle.verify('HMAC',await hmacKey(env('SHOPIFY_CLIENT_SECRET')),fromB64url(sigPart),enc.encode(`${headerPart}.${payloadPart}`));\n if(!ok)throw new Error('Invalid Shopify ID token signature.');\n const now=Math.floor(Date.now()/1000); if(Number(payload.exp||0)<=now||Number(payload.nbf||0)>now+5)throw new Error('Expired Shopify ID token.');\n const aud=Array.isArray(payload.aud)?payload.aud:[payload.aud]; if(!aud.includes(env('SHOPIFY_CLIENT_ID')))throw new Error('Shopify ID token audience mismatch.');\n const dest=new URL(String(payload.dest||'')),iss=new URL(String(payload.iss||'')); if(dest.hostname!==iss.hostname||!validShop(dest.hostname))throw new Error('Shopify ID token shop mismatch.');\n return {shop:dest.hostname.toLowerCase(),sub:String(payload.sub||''),payload};\n}\n\nasync function ensureMerchantAccount(shop:string,provider='shopify'){\n await sqlite.execute(`create table if not exists merchant_accounts (shop text primary key, auth_provider text not null, selected_plan text, billing_status text not null default 'pending', created_at text not null default current_timestamp, updated_at text not null default current_timestamp)`);\n await sqlite.execute({sql:`insert into merchant_accounts(shop,auth_provider,billing_status) values(?,?,'pending') on conflict(shop) do update set auth_provider=excluded.auth_provider,updated_at=current_timestamp`,args:[shop,provider]});\n}\n\nexport async function exchangeEmbeddedShopifyToken(request:Request){\n if(!shopifyConfigured())return json({error:'Shopify app credentials are not configured.'},503);\n const auth=request.headers.get('authorization')||''; const idToken=auth.startsWith('Bearer ')?auth.slice(7):'';\n if(!idToken)return json({error:'Shopify ID token required.'},401);\n let identity; try{identity=await validateShopifyIdToken(idToken);}catch(e){return Response.json({error:e instanceof Error?e.message:'Invalid Shopify ID token.'},{status:401,headers:{'Cache-Control':'no-store','X-Shopify-Retry-Invalid-Session-Request':'1'}});}\n const response=await fetch(`https://${identity.shop}/admin/oauth/access_token`,{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded','Accept':'application/json'},body:new URLSearchParams({client_id:env('SHOPIFY_CLIENT_ID'),client_secret:env('SHOPIFY_CLIENT_SECRET'),grant_type:'urn:ietf:params:oauth:grant-type:token-exchange',subject_token:idToken,subject_token_type:'urn:ietf:params:oauth:token-type:id_token',requested_token_type:'urn:shopify:params:oauth:token-type:offline-access-token',expiring:'1'})});\n if(response.status===400)return Response.json({error:'Shopify ID token must be refreshed.'},{status:401,headers:{'Cache-Control':'no-store','X-Shopify-Retry-Invalid-Session-Request':'1'}});\n if(!response.ok)return json({error:'Shopify token exchange failed.',status:response.status},502);\n const data=await response.json() as any; const access=await encrypt(String(data.access_token||'')),refresh=data.refresh_token?await encrypt(String(data.refresh_token)):null,accessExpiry=data.expires_in?Date.now()+Number(data.expires_in)*1000:null,refreshExpiry=data.refresh_token_expires_in?Date.now()+Number(data.refresh_token_expires_in)*1000:null;\n await init(); await sqlite.execute({sql:`insert into shopify_sessions(shop,access_token,refresh_token,scope,access_expires_at,refresh_expires_at,updated_at) values(?,?,?,?,?,?,current_timestamp) on conflict(shop) do update set access_token=excluded.access_token,refresh_token=excluded.refresh_token,scope=excluded.scope,access_expires_at=excluded.access_expires_at,refresh_expires_at=excluded.refresh_expires_at,updated_at=current_timestamp`,args:[identity.shop,access,refresh,String(data.scope||SHOPIFY_SCOPES),accessExpiry,refreshExpiry]});\n await ensureMerchantAccount(identity.shop,'shopify');\n return json({ok:true,shop:identity.shop,accountCreated:true,billingStatus:'pending',scopes:String(data.scope||SHOPIFY_SCOPES)});\n}\n\nexport async function embeddedMerchantStatus(request:Request){\n const auth=request.headers.get('authorization')||''; const idToken=auth.startsWith('Bearer ')?auth.slice(7):''; if(!idToken)return json({authenticated:false},401);\n let identity; try{identity=await validateShopifyIdToken(idToken);}catch{return json({authenticated:false},401);}\n await ensureMerchantAccount(identity.shop,'shopify');\n const r=await sqlite.execute({sql:'select shop,auth_provider,selected_plan,billing_status,created_at,updated_at from merchant_accounts where shop=?',args:[identity.shop]});\n return json({authenticated:true,account:(r.rows as any[])[0]||null,aiConfigured:Boolean(env('OPENAI_API_KEY')||env('AI_API_KEY')),pricingConfigured:false});\n}\n\nconst BILLING_PLANS={starter:{name:'Starter',price:4.99},growth:{name:'Growth',price:9.99},pro:{name:'Pro',price:19.99}} as const;\ntype BillingPlanKey=keyof typeof BILLING_PLANS;\nexport async function embeddedShopIdentity(request:Request){\n const auth=request.headers.get('authorization')||''; const idToken=auth.startsWith('Bearer ')?auth.slice(7):'';\n if(!idToken)throw Object.assign(new Error('Shopify ID token required.'),{status:401});\n const identity=await validateShopifyIdToken(idToken);\n return {shop:identity.shop,sub:identity.sub};\n}\n\n\nasync function embeddedIdentityAndToken(request:Request){\n const auth=request.headers.get('authorization')||''; const idToken=auth.startsWith('Bearer ')?auth.slice(7):''; if(!idToken)throw Object.assign(new Error('Shopify ID token required.'),{status:401});\n const identity=await validateShopifyIdToken(idToken); let row=await sessionRow(identity.shop); if(!row)throw Object.assign(new Error('Shopify store session is not ready. Reopen the app from Shopify Admin.'),{status:401});\n if(row.access_expires_at&&Date.now()>=Number(row.access_expires_at)-60000)row=await refresh(identity.shop,row); if(!row)throw Object.assign(new Error('Shopify authorization expired.'),{status:401});\n return {identity,token:await decrypt(row.access_token)};\n}\nasync function shopifyGraphql(shop:string,token:string,query:string,variables:any={}){const r=await fetch(`https://${shop}/admin/api/${API_VERSION}/graphql.json`,{method:'POST',headers:{'Content-Type':'application/json','X-Shopify-Access-Token':token},body:JSON.stringify({query,variables})});const b=await r.json().catch(()=>({}));if(!r.ok)throw Object.assign(new Error(`Shopify API request failed (${r.status}).`),{status:r.status,body:b});return b as any;}\nexport async function embeddedBillingStatus(request:Request){\n try{const {identity,token}=await embeddedIdentityAndToken(request);const body=await shopifyGraphql(identity.shop,token,`query BillingStatus { currentAppInstallation { activeSubscriptions { id name status trialDays currentPeriodEnd test lineItems { plan { pricingDetails { __typename ... on AppRecurringPricing { price { amount currencyCode } interval } } } } } } }`);const subs=body?.data?.currentAppInstallation?.activeSubscriptions||[];const active=subs[0]||null;await ensureMerchantAccount(identity.shop,'shopify');await sqlite.execute({sql:\"update merchant_accounts set billing_status=?, selected_plan=coalesce(?,selected_plan), updated_at=current_timestamp where shop=?\",args:[active?'active':'pending',active?.name||null,identity.shop]});return json({authenticated:true,shop:identity.shop,activeSubscription:active,trialActive:Boolean(active&&Number(active.trialDays||0)>0),requiresPlan:!active});}catch(e){return json({error:e instanceof Error?e.message:'Unable to check billing status.'},Number((e as any)?.status)||400);}\n}\nexport async function startEmbeddedBilling(request:Request,returnBase:string){\n try{const {identity,token}=await embeddedIdentityAndToken(request);const raw=await request.text();let parsed:any={};try{parsed=raw?JSON.parse(raw):{};}catch{throw Object.assign(new Error('Invalid JSON request.'),{status:400});}const key=String(parsed.plan||'').toLowerCase() as BillingPlanKey;const plan=BILLING_PLANS[key];if(!plan)throw Object.assign(new Error('Choose Starter, Growth, or Pro.'),{status:400});\n const current=await shopifyGraphql(identity.shop,token,`query CurrentBilling { currentAppInstallation { activeSubscriptions { id name status } } }`);const existing=current?.data?.currentAppInstallation?.activeSubscriptions||[];if(existing.length)return json({ok:true,alreadyActive:true,subscription:existing[0]});\n const mutation=`mutation StartTrial($name:String!,$returnUrl:URL!,$trialDays:Int,$lineItems:[AppSubscriptionLineItemInput!]!){ appSubscriptionCreate(name:$name,returnUrl:$returnUrl,trialDays:$trialDays,lineItems:$lineItems){ appSubscription{id name status trialDays} confirmationUrl userErrors{field message} } }`;\n const variables={name:plan.name,returnUrl:`${returnBase}/shopify/app`,trialDays:14,lineItems:[{plan:{appRecurringPricingDetails:{price:{amount:plan.price,currencyCode:'USD'},interval:'EVERY_30_DAYS'}}}]};const body=await shopifyGraphql(identity.shop,token,mutation,variables);const result=body?.data?.appSubscriptionCreate;if(result?.userErrors?.length)throw Object.assign(new Error(result.userErrors.map((x:any)=>x.message).join('; ')),{status:400});if(!result?.confirmationUrl)throw new Error('Shopify did not return a subscription approval URL.');await ensureMerchantAccount(identity.shop,'shopify');await sqlite.execute({sql:\"update merchant_accounts set selected_plan=?,billing_status='pending_approval',updated_at=current_timestamp where shop=?\",args:[plan.name,identity.shop]});return json({ok:true,plan:plan.name,price:plan.price,trialDays:14,confirmationUrl:result.confirmationUrl});}catch(e){return json({error:e instanceof Error?e.message:'Unable to start subscription.'},Number((e as any)?.status)||400);}\n}\n\nexport async function requireEmbeddedSubscription(request:Request){\n const {identity,token}=await embeddedIdentityAndToken(request);\n const body=await shopifyGraphql(identity.shop,token,`query PaidAccess { currentAppInstallation { activeSubscriptions { id name status trialDays currentPeriodEnd } } }`);\n const active=(body?.data?.currentAppInstallation?.activeSubscriptions||[])[0]||null;\n if(!active)throw Object.assign(new Error('Start and approve a 14-day trial to use AI.'),{status:402});\n await ensureMerchantAccount(identity.shop,'shopify');\n await sqlite.execute({sql:\"update merchant_accounts set billing_status='active',selected_plan=?,updated_at=current_timestamp where shop=?\",args:[active.name||null,identity.shop]});\n return {shop:identity.shop,subscription:active};\n}\n",["D",1789043045838],{"_34":58,"_36":57,"_37":51,"_39":60,"_42":61,"_44":14,"_45":46,"_28":29},{"_34":58,"_36":57,"_37":51,"_39":59},"web-css.ts","99c15df6-ac24-11f1-b933-1607ee4eb77e","export const appCss = String.raw`\n:root{--ink:#172c30;--muted:#607377;--line:#dce5e2;--soft:#f4f7f5;--green:#176b56;--green2:#0c4f42;--white:#fff;--error:#a52727;--radius:16px}*{box-sizing:border-box}html{scroll-behavior:smooth}body{margin:0;background:var(--white);color:var(--ink);font:16px/1.55 system-ui,-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif}a{color:var(--green);text-underline-offset:3px}button,input,select,textarea{font:inherit}button{cursor:pointer}a:focus-visible,button:focus-visible,input:focus-visible,select:focus-visible,textarea:focus-visible{outline:3px solid #56a98d;outline-offset:3px}.skip{position:absolute;left:-10000px;top:8px;background:white;padding:8px;z-index:10}.skip:focus{left:8px}.wrap{width:min(1120px,calc(100% - 40px));margin-inline:auto}.site-header{border-bottom:1px solid var(--line);background:white}.header-inner{display:flex;align-items:center;justify-content:space-between;gap:20px;padding-block:17px}.brand{display:flex;align-items:center;gap:10px;color:var(--ink);text-decoration:none;font-size:17px;font-weight:750;line-height:1.15}.brand small{display:block;font-size:11px;color:var(--muted);font-weight:550;letter-spacing:.04em;text-transform:uppercase;margin-top:4px}.brand-mark{display:grid;place-items:center;width:43px;height:43px;border-radius:12px;background:var(--green2);color:white;font-size:14px;letter-spacing:-.04em}.site-header nav{display:flex;flex-wrap:wrap;gap:8px 22px}.site-header nav a{font-size:13px;font-weight:650;text-decoration:none;color:var(--ink)}.site-header nav a:hover{text-decoration:underline}.hero{display:grid;grid-template-columns:minmax(0,1.55fr) minmax(250px,1fr);gap:56px;align-items:center;padding-block:70px 62px}.eyebrow{display:block;font-size:11px;font-weight:800;letter-spacing:.14em;text-transform:uppercase;color:var(--green);margin-bottom:14px}h1,h2,h3,p{margin-top:0}h1{font-size:clamp(37px,5vw,62px);line-height:1.08;letter-spacing:-.045em;margin-bottom:23px}h1 span{color:var(--green)}h2{font-size:clamp(26px,3vw,36px);line-height:1.18;letter-spacing:-.03em;margin-bottom:14px}h3{font-size:19px;line-height:1.3;letter-spacing:-.015em;margin-bottom:12px}p{margin-bottom:17px}.hero>div>p:first-of-type{font-size:18px;color:#455c60;max-width:580px;line-height:1.7}.muted{color:var(--muted)}.hero-note{background:var(--soft);border:1px solid var(--line);border-radius:22px;padding:28px}.hero-note h2{font-size:25px}.hero-note p:last-child{margin-bottom:0}.actions{display:flex;flex-wrap:wrap;gap:10px;align-items:center;margin:22px 0}.button{display:inline-flex;align-items:center;justify-content:center;gap:6px;border:1px solid var(--green);border-radius:9px;background:var(--green);color:white;text-decoration:none;font-weight:700;font-size:13px;padding:11px 17px;min-height:43px;line-height:1.3}.button:hover{background:var(--green2);border-color:var(--green2)}.button.secondary{background:white;color:var(--green);border-color:#b4cec5}.button.secondary:hover{background:#eaf4f0}.button.small{font-size:12px;padding:9px 12px;min-height:39px}.button.quiet{border-color:transparent;background:transparent;color:var(--muted);padding-inline:8px}.button.quiet:hover{background:var(--soft)}.button:disabled{opacity:.45;cursor:not-allowed}.section{padding-block:56px;scroll-margin-top:20px}.section-heading{margin-bottom:28px;max-width:760px}.section-heading p{color:var(--muted);max-width:670px}.workspace{display:grid;grid-template-columns:minmax(0,1.15fr) minmax(0,1fr);gap:24px;align-items:start}.panel{background:white;border:1px solid var(--line);border-radius:var(--radius);padding:26px;min-width:0}.panel-heading{display:flex;justify-content:space-between;align-items:center;gap:12px;flex-wrap:wrap;margin-bottom:20px}.panel-heading h3{margin:0}.pill{display:inline-flex;align-items:center;border-radius:100px;background:#e7f2ed;color:var(--green2);font-size:11px;font-weight:750;padding:5px 10px;line-height:1.5}.field-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:16px}label{display:flex;flex-direction:column;gap:7px;font-size:12px;font-weight:700;color:#344b4f;min-width:0}input,select,textarea{display:block;width:100%;max-width:100%;border:1px solid #cbd9d4;border-radius:8px;padding:10px 12px;background:white;color:var(--ink);font-size:14px;font-weight:450;min-height:42px}textarea{resize:vertical;min-height:100px}input:focus,select:focus,textarea:focus{border-color:var(--green)}form>label{margin-top:16px}.result-panel{background:var(--soft)}.result-panel h3{font-size:16px;color:var(--muted);font-weight:600}.big-number{font-size:clamp(32px,4vw,48px);font-weight:800;letter-spacing:-.04em;color:var(--green2);overflow-wrap:anywhere;line-height:1.15;margin:15px 0 20px}.metrics{display:grid;gap:0;border-top:1px solid var(--line);margin:25px 0}.metrics>div{display:flex;justify-content:space-between;align-items:baseline;gap:15px;padding:15px 0;border-bottom:1px solid var(--line)}.metrics span{font-size:13px;color:var(--muted)}.metrics strong{text-align:right;font-variant-numeric:tabular-nums;font-size:16px;overflow-wrap:anywhere}.notice{background:#e7f2ed;color:var(--green2);border-radius:8px;padding:11px 13px;font-size:13px}.notice.error{background:#fce9e8;color:var(--error)}.fineprint{font-size:12px;color:var(--muted);line-height:1.65}.fineprint:last-child{margin-bottom:0}.draft-list{display:grid;gap:12px;margin-top:24px}.draft-item{padding:15px;border:1px solid var(--line);border-radius:10px;background:#fbfcfb;min-width:0}.draft-item strong{display:block;overflow-wrap:anywhere;font-size:14px}.draft-item p{font-size:12px;color:var(--muted);margin:5px 0}.draft-item .actions{margin:10px 0 0}.file-button{position:relative;cursor:pointer}.file-button input{position:absolute;inset:0;opacity:0;cursor:pointer;width:100%;height:100%}.muted-section{background:var(--soft);border-top:1px solid var(--line);border-bottom:1px solid var(--line)}.plan-grid{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:14px}.plan{padding:22px 18px;background:white;border:1px solid var(--line);border-radius:var(--radius);display:flex;flex-direction:column;min-width:0}.plan h3{margin-bottom:14px}.plan-price{font-size:31px;font-weight:800;letter-spacing:-.04em;line-height:1.2}.plan-price span{font-size:12px;color:var(--muted);font-weight:500;letter-spacing:0}.plan>p{font-size:13px;color:var(--muted);margin-top:13px}.plan ul{padding-left:18px;font-size:12px;line-height:1.8;margin:0 0 20px;flex:1}.plan li{margin-bottom:6px}.plan>.pill{align-self:flex-start}.centered{text-align:center;margin-top:24px}.feature-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:28px}.feature-grid article{border-top:2px solid var(--line);padding-top:19px}.feature-grid h3{font-size:17px}.feature-grid p{font-size:13px;color:var(--muted)}.site-footer{border-top:1px solid var(--line);padding:34px 0;background:#fbfcfb}.footer-inner{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:flex-start;gap:24px}.footer-inner strong{font-size:14px}.footer-inner p{font-size:12px;color:var(--muted);margin:5px 0}.footer-inner nav{display:flex;gap:12px 18px;flex-wrap:wrap;max-width:340px}.footer-inner nav a{font-size:12px;color:var(--muted)}.trademark{width:100%;padding-top:20px;border-top:1px solid var(--line);font-size:11px;font-weight:700;letter-spacing:.06em;color:var(--muted)}.article{max-width:800px;padding-block:55px 70px}.article h1{font-size:38px}.article h2{font-size:23px;margin-top:32px}.article p,.article li{line-height:1.8;color:#43595d}.article .panel{margin-top:25px}.article .field-grid{margin-top:18px}.cost-results{margin-top:22px}.table-wrap{overflow-x:auto;border:1px solid var(--line);border-radius:10px}table{width:100%;border-collapse:collapse;font-size:13px}th,td{text-align:left;padding:11px 12px;border-bottom:1px solid var(--line)}th{background:var(--soft);font-size:11px;color:var(--muted)}td.num{text-align:right;font-variant-numeric:tabular-nums}tr:last-child td{border-bottom:0}@media(max-width:850px){.hero{gap:28px;grid-template-columns:1fr}.workspace{grid-template-columns:1fr}.plan-grid{grid-template-columns:repeat(2,minmax(0,1fr))}.feature-grid{grid-template-columns:1fr 1fr}.header-inner{align-items:flex-start;flex-direction:column}.site-header nav{gap:10px 18px}}@media(max-width:530px){.wrap{width:calc(100% - 28px)}.site-header nav{gap:10px 14px}.site-header nav a{font-size:12px}.hero{padding-block:42px}.hero-note{padding:22px}.section{padding-block:38px}.panel{padding:18px}.field-grid{grid-template-columns:1fr;gap:12px}.plan-grid,.feature-grid{grid-template-columns:1fr}.plan{padding:20px}.big-number{font-size:35px}.metrics>div{align-items:start;flex-direction:column;gap:3px}.metrics strong{text-align:left}.article{padding-block:35px}.article h1{font-size:32px}.actions .button{flex-grow:1}.file-button{flex-grow:1}}@media(prefers-reduced-motion:reduce){html{scroll-behavior:auto}}\n`;\n","export const appCss = String.raw`\n:root{--ink:#172c30;--muted:#607377;--line:#dce5e2;--soft:#f4f7f5;--green:#176b56;--green2:#0c4f42;--white:#fff;--error:#a52727;--radius:16px}*{box-sizing:border-box}html{scroll-behavior:smooth}body{margin:0;background:var(--white);color:var(--ink);font:16px/1.55 system-ui,-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif}a{color:var(--green);text-underline-offset:3px}button,input,select,textarea{font:inherit}button{cursor:pointer}a:focus-visible,button:focus-visible,input:focus-visible,select:focus-visible,textarea:focus-visible{outline:3px solid #56a98d;outline-offset:3px}.skip{position:absolute;left:-10000px;top:8px;background:white;padding:8px;z-index:10}.skip:focus{left:8px}.wrap{width:min(1120px,calc(100% - 40px));margin-inline:auto}.site-header{border-bottom:1px solid var(--line);background:white}.header-inner{display:flex;align-items:center;justify-content:space-between;gap:20px;padding-block:17px}.brand{display:flex;align-items:center;gap:10px;color:var(--ink);text-decoration:none;font-size:17px;font-weight:750;line-height:1.15}.brand small{display:block;font-size:11px;color:var(--muted);font-weight:550;letter-spacing:.04em;text-transform:uppercase;margin-top:4px}.brand-mark{display:grid;place-items:center;width:43px;height:43px;border-radius:12px;background:var(--green2);color:white;font-size:14px;letter-spacing:-.04em}.site-header nav{display:flex;flex-wrap:wrap;gap:8px 22px}.site-header nav a{font-size:13px;font-weight:650;text-decoration:none;color:var(--ink)}.site-header nav a:hover{text-decoration:underline}.hero{display:grid;grid-template-columns:minmax(0,1.55fr) minmax(250px,1fr);gap:56px;align-items:center;padding-block:70px 62px}.eyebrow{display:block;font-size:11px;font-weight:800;letter-spacing:.14em;text-transform:uppercase;color:var(--green);margin-bottom:14px}h1,h2,h3,p{margin-top:0}h1{font-size:clamp(37px,5vw,62px);line-height:1.08;letter-spacing:-.045em;margin-bottom:23px}h1 span{color:var(--green)}h2{font-size:clamp(26px,3vw,36px);line-height:1.18;letter-spacing:-.03em;margin-bottom:14px}h3{font-size:19px;line-height:1.3;letter-spacing:-.015em;margin-bottom:12px}p{margin-bottom:17px}.hero>div>p:first-of-type{font-size:18px;color:#455c60;max-width:580px;line-height:1.7}.muted{color:var(--muted)}.hero-note{background:var(--soft);border:1px solid var(--line);border-radius:22px;padding:28px}.hero-note h2{font-size:25px}.hero-note p:last-child{margin-bottom:0}.actions{display:flex;flex-wrap:wrap;gap:10px;align-items:center;margin:22px 0}.button{display:inline-flex;align-items:center;justify-content:center;gap:6px;border:1px solid var(--green);border-radius:9px;background:var(--green);color:white;text-decoration:none;font-weight:700;font-size:13px;padding:11px 17px;min-height:43px;line-height:1.3}.button:hover{background:var(--green2);border-color:var(--green2)}.button.secondary{background:white;color:var(--green);border-color:#b4cec5}.button.secondary:hover{background:#eaf4f0}.button.small{font-size:12px;padding:9px 12px;min-height:39px}.button.quiet{border-color:transparent;background:transparent;color:var(--muted);padding-inline:8px}.button.quiet:hover{background:var(--soft)}.button:disabled{opacity:.45;cursor:not-allowed}.section{padding-block:56px;scroll-margin-top:20px}.section-heading{margin-bottom:28px;max-width:760px}.section-heading p{color:var(--muted);max-width:670px}.workspace{display:grid;grid-template-columns:minmax(0,1.15fr) minmax(0,1fr);gap:24px;align-items:start}.panel{background:white;border:1px solid var(--line);border-radius:var(--radius);padding:26px;min-width:0}.panel-heading{display:flex;justify-content:space-between;align-items:center;gap:12px;flex-wrap:wrap;margin-bottom:20px}.panel-heading h3{margin:0}.pill{display:inline-flex;align-items:center;border-radius:100px;background:#e7f2ed;color:var(--green2);font-size:11px;font-weight:750;padding:5px 10px;line-height:1.5}.field-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:16px}label{display:flex;flex-direction:column;gap:7px;font-size:12px;font-weight:700;color:#344b4f;min-width:0}input,select,textarea{display:block;width:100%;max-width:100%;border:1px solid #cbd9d4;border-radius:8px;padding:10px 12px;background:white;color:var(--ink);font-size:14px;font-weight:450;min-height:42px}textarea{resize:vertical;min-height:100px}input:focus,select:focus,textarea:focus{border-color:var(--green)}form>label{margin-top:16px}.result-panel{background:var(--soft)}.result-panel h3{font-size:16px;color:var(--muted);font-weight:600}.big-number{font-size:clamp(32px,4vw,48px);font-weight:800;letter-spacing:-.04em;color:var(--green2);overflow-wrap:anywhere;line-height:1.15;margin:15px 0 20px}.metrics{display:grid;gap:0;border-top:1px solid var(--line);margin:25px 0}.metrics>div{display:flex;justify-content:space-between;align-items:baseline;gap:15px;padding:15px 0;border-bottom:1px solid var(--line)}.metrics span{font-size:13px;color:var(--muted)}.metrics strong{text-align:right;font-variant-numeric:tabular-nums;font-size:16px;overflow-wrap:anywhere}.notice{background:#e7f2ed;color:var(--green2);border-radius:8px;padding:11px 13px;font-size:13px}.notice.error{background:#fce9e8;color:var(--error)}.fineprint{font-size:12px;color:var(--muted);line-height:1.65}.fineprint:last-child{margin-bottom:0}.draft-list{display:grid;gap:12px;margin-top:24px}.draft-item{padding:15px;border:1px solid var(--line);border-radius:10px;background:#fbfcfb;min-width:0}.draft-item strong{display:block;overflow-wrap:anywhere;font-size:14px}.draft-item p{font-size:12px;color:var(--muted);margin:5px 0}.draft-item .actions{margin:10px 0 0}.file-button{position:relative;cursor:pointer}.file-button input{position:absolute;inset:0;opacity:0;cursor:pointer;width:100%;height:100%}.muted-section{background:var(--soft);border-top:1px solid var(--line);border-bottom:1px solid var(--line)}.plan-grid{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:14px}.plan{padding:22px 18px;background:white;border:1px solid var(--line);border-radius:var(--radius);display:flex;flex-direction:column;min-width:0}.plan h3{margin-bottom:14px}.plan-price{font-size:31px;font-weight:800;letter-spacing:-.04em;line-height:1.2}.plan-price span{font-size:12px;color:var(--muted);font-weight:500;letter-spacing:0}.plan>p{font-size:13px;color:var(--muted);margin-top:13px}.plan ul{padding-left:18px;font-size:12px;line-height:1.8;margin:0 0 20px;flex:1}.plan li{margin-bottom:6px}.plan>.pill{align-self:flex-start}.centered{text-align:center;margin-top:24px}.feature-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:28px}.feature-grid article{border-top:2px solid var(--line);padding-top:19px}.feature-grid h3{font-size:17px}.feature-grid p{font-size:13px;color:var(--muted)}.site-footer{border-top:1px solid var(--line);padding:34px 0;background:#fbfcfb}.footer-inner{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:flex-start;gap:24px}.footer-inner strong{font-size:14px}.footer-inner p{font-size:12px;color:var(--muted);margin:5px 0}.footer-inner nav{display:flex;gap:12px 18px;flex-wrap:wrap;max-width:340px}.footer-inner nav a{font-size:12px;color:var(--muted)}.trademark{width:100%;padding-top:20px;border-top:1px solid var(--line);font-size:11px;font-weight:700;letter-spacing:.06em;color:var(--muted)}.article{max-width:800px;padding-block:55px 70px}.article h1{font-size:38px}.article h2{font-size:23px;margin-top:32px}.article p,.article li{line-height:1.8;color:#43595d}.article .panel{margin-top:25px}.article .field-grid{margin-top:18px}.cost-results{margin-top:22px}.table-wrap{overflow-x:auto;border:1px solid var(--line);border-radius:10px}table{width:100%;border-collapse:collapse;font-size:13px}th,td{text-align:left;padding:11px 12px;border-bottom:1px solid var(--line)}th{background:var(--soft);font-size:11px;color:var(--muted)}td.num{text-align:right;font-variant-numeric:tabular-nums}tr:last-child td{border-bottom:0}@media(max-width:850px){.hero{gap:28px;grid-template-columns:1fr}.workspace{grid-template-columns:1fr}.plan-grid{grid-template-columns:repeat(2,minmax(0,1fr))}.feature-grid{grid-template-columns:1fr 1fr}.header-inner{align-items:flex-start;flex-direction:column}.site-header nav{gap:10px 18px}}@media(max-width:530px){.wrap{width:calc(100% - 28px)}.site-header nav{gap:10px 14px}.site-header nav a{font-size:12px}.hero{padding-block:42px}.hero-note{padding:22px}.section{padding-block:38px}.panel{padding:18px}.field-grid{grid-template-columns:1fr;gap:12px}.plan-grid,.feature-grid{grid-template-columns:1fr}.plan{padding:20px}.big-number{font-size:35px}.metrics>div{align-items:start;flex-direction:column;gap:3px}.metrics strong{text-align:left}.article{padding-block:35px}.article h1{font-size:32px}.actions .button{flex-grow:1}.file-button{flex-grow:1}}.launch-grid{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:10px;margin:22px 0}.launch-choice{display:flex;flex-direction:column;gap:4px;align-items:flex-start;text-align:left;border:1px solid var(--line);background:#fff;border-radius:12px;padding:16px;color:var(--ink);min-height:82px}.launch-choice strong{font-size:15px}.launch-choice span{font-size:12px;color:var(--muted)}.launch-choice:hover,.launch-choice.selected{border-color:var(--green);background:#eef7f3}.launch-choice.featured-choice{grid-column:span 4;border-color:#b4cec5}.easy-steps{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:12px;margin:24px 0}.easy-steps>div{display:grid;grid-template-columns:34px 1fr;column-gap:9px;align-items:center;border:1px solid var(--line);border-radius:12px;padding:14px;background:var(--soft)}.easy-steps b{grid-row:span 2;display:grid;place-items:center;width:32px;height:32px;border-radius:50%;background:var(--green2);color:white}.easy-steps strong{font-size:13px}.easy-steps span{font-size:11px;color:var(--muted)}.checklist{display:grid;gap:9px;margin:14px 0 18px}.check-row{display:grid;grid-template-columns:28px 1fr;gap:10px;padding:12px;border:1px solid var(--line);border-radius:10px}.check-row.done{background:#eef7f3}.check-mark{display:grid;place-items:center;width:25px;height:25px;border-radius:50%;background:var(--soft);font-weight:800}.check-row.done .check-mark{background:var(--green);color:white}.check-row strong,.check-row span{display:block}.check-row strong{font-size:13px}.check-row span{font-size:11px;color:var(--muted);margin-top:2px}@media(max-width:850px){.launch-grid{grid-template-columns:repeat(2,minmax(0,1fr))}.launch-choice.featured-choice{grid-column:span 2}}@media(max-width:530px){.launch-grid,.easy-steps{grid-template-columns:1fr}.launch-choice.featured-choice{grid-column:span 1}}@media(prefers-reduced-motion:reduce){html{scroll-behavior:auto}}\n`;\n",["D",1789043045838],{"_34":65,"_36":64,"_37":51,"_39":67,"_42":68,"_44":14,"_45":46,"_28":29},{"_34":65,"_36":64,"_37":51,"_39":66},"embedded-client.ts","92df8ee6-aceb-11f1-8655-1607ee4eb77e","export const embeddedJs = String.raw`\n(async()=>{\n const $=(id)=>document.getElementById(id);\n const status=$('embedded-status'), account=$('account-status'), ai=$('ai-status'), plans=$('trial-plans');\n try{\n if(!window.shopify||!shopify.idToken) throw new Error('Open this app from Shopify Admin to sign in.');\n status.textContent='Signing in securely with Shopify…';\n const idToken=await shopify.idToken();\n const auth={Authorization:'Bearer '+idToken};\n let r=await fetch('/api/shopify/exchange',{method:'POST',headers:auth});\n if(r.status===401){const fresh=await shopify.idToken();auth.Authorization='Bearer '+fresh;r=await fetch('/api/shopify/exchange',{method:'POST',headers:auth});}\n const ex=await r.json(); if(!r.ok)throw new Error(ex.error||'Shopify sign-in failed.');\n const fresh=await shopify.idToken();\n const sr=await fetch('/api/merchant/status',{headers:{Authorization:'Bearer '+fresh}}); const s=await sr.json();\n status.textContent='Signed in through Shopify';\n account.textContent=s.account?('Account active for '+s.account.shop):'Merchant account ready';\n ai.textContent=s.aiConfigured?'AI service connected. Start or approve a trial plan to use it.':'AI provider is not configured.';\n const bt=await shopify.idToken();const br=await fetch('/api/billing/status',{headers:{Authorization:'Bearer '+bt}});const bs=await br.json();\n if(br.ok&&bs.activeSubscription){plans.hidden=true;status.textContent='Signed in — '+bs.activeSubscription.name+' access is active';$('ai-answer').textContent='AI is ready. Ask a commerce question below.';}else{plans.hidden=false;}\n }catch(e){status.textContent=e&&e.message?e.message:'Unable to sign in.'; account.textContent='Authentication required';}\n const ask=$('ask-ai');if(ask)ask.addEventListener('click',async()=>{\n const message=String($('ai-message').value||'').trim();if(!message){$('ai-answer').textContent='Enter a question first.';return;}\n try{ask.disabled=true;$('ai-answer').textContent='Thinking…';const token=await shopify.idToken();const r=await fetch('/api/ai',{method:'POST',headers:{Authorization:'Bearer '+token,'Content-Type':'application/json'},body:JSON.stringify({message})});const data=await r.json();if(!r.ok)throw new Error(data.error||'AI request failed.');$('ai-answer').textContent=data.answer;ai.textContent=data.plan+' AI access · '+data.requestsUsed+'/'+data.dailyLimit+' requests used today';}catch(e){$('ai-answer').textContent=e&&e.message?e.message:'AI request failed.';}finally{ask.disabled=false;}\n });\n document.querySelectorAll('[data-plan]').forEach(btn=>btn.addEventListener('click',async()=>{\n const plan=String(btn.getAttribute('data-plan')||'').toLowerCase();\n try{\n btn.disabled=true; status.textContent='Opening Shopify subscription approval…';\n const token=await shopify.idToken();\n const r=await fetch('/api/billing/start',{method:'POST',headers:{Authorization:'Bearer '+token,'Content-Type':'application/json'},body:JSON.stringify({plan})});\n const data=await r.json(); if(!r.ok)throw new Error(data.error||'Unable to start trial.');\n if(data.alreadyActive){status.textContent='Your Shopify subscription is already active.';plans.hidden=true;return;}\n if(!data.confirmationUrl)throw new Error('Shopify did not return an approval link.');\n open(data.confirmationUrl,'_top');\n }catch(e){status.textContent=e&&e.message?e.message:'Unable to start trial.';btn.disabled=false;}\n }));\n})();\n`;","export const embeddedJs = String.raw`\n(async()=>{\n const $=(id)=>document.getElementById(id);\n const status=$('embedded-status'), account=$('account-status'), ai=$('ai-status'), plans=$('trial-plans'), launchStatus=$('launch-status');\n const packageButtons=[...document.querySelectorAll('[data-store-package]')];\n const token=async()=>{if(!window.shopify||!shopify.idToken)throw new Error('Open this app from Shopify Admin to sign in.');return await shopify.idToken();};\n const renderChecklist=(data)=>{\n const root=$('launch-checklist'); if(!root)return;\n root.innerHTML='';\n const items=Array.isArray(data&&data.checklist)?data.checklist:[];\n if(!items.length){const p=document.createElement('p');p.className='muted';p.textContent='Choose a package to begin.';root.appendChild(p);return;}\n for(const item of items){\n const row=document.createElement('div');row.className='check-row'+(item.done?' done':'');\n const mark=document.createElement('span');mark.className='check-mark';mark.textContent=item.done?'✓':'•';\n const copy=document.createElement('div');const strong=document.createElement('strong');strong.textContent=item.label||'Setup step';\n const small=document.createElement('span');small.textContent=item.action||'';copy.append(strong,small);row.append(mark,copy);root.appendChild(row);\n }\n const selected=data&&data.record&&data.record.package_key;\n packageButtons.forEach(btn=>btn.classList.toggle('selected',btn.getAttribute('data-store-package')===selected));\n };\n const loadProvisioning=async()=>{\n const t=await token();const r=await fetch('/api/provisioning/status',{headers:{Authorization:'Bearer '+t}});const data=await r.json();\n if(!r.ok)throw new Error(data.error||'Unable to load launch status.');renderChecklist(data);\n if(launchStatus)launchStatus.textContent=data.message||'Choose your package to begin.';\n };\n try{\n status.textContent='Signing in securely with Shopify…';\n const auth={Authorization:'Bearer '+await token()};\n let r=await fetch('/api/shopify/exchange',{method:'POST',headers:auth});\n if(r.status===401){auth.Authorization='Bearer '+await token();r=await fetch('/api/shopify/exchange',{method:'POST',headers:auth});}\n const ex=await r.json(); if(!r.ok)throw new Error(ex.error||'Shopify sign-in failed.');\n const fresh=await token();\n const sr=await fetch('/api/merchant/status',{headers:{Authorization:'Bearer '+fresh}}); const s=await sr.json();\n status.textContent='Signed in through Shopify';\n account.textContent=s.account?('Account active for '+s.account.shop):'Merchant account ready';\n ai.textContent=s.aiConfigured?'AI service connected. Start or approve a trial plan to use it.':'AI provider is not configured.';\n await loadProvisioning();\n const br=await fetch('/api/billing/status',{headers:{Authorization:'Bearer '+await token()}});const bs=await br.json();\n if(br.ok&&bs.activeSubscription){plans.hidden=true;status.textContent='Signed in — '+bs.activeSubscription.name+' access is active';$('ai-answer').textContent='AI is ready. Ask a commerce question below.';}else{plans.hidden=false;}\n }catch(e){status.textContent=e&&e.message?e.message:'Unable to sign in.'; account.textContent='Authentication required';if(launchStatus)launchStatus.textContent='Open the app from Shopify Admin to begin.';}\n packageButtons.forEach(btn=>btn.addEventListener('click',async()=>{\n const packageKey=String(btn.getAttribute('data-store-package')||'');\n try{\n packageButtons.forEach(b=>b.disabled=true);if(launchStatus)launchStatus.textContent='Saving your store package…';\n const r=await fetch('/api/provisioning/select',{method:'POST',headers:{Authorization:'Bearer '+await token(),'Content-Type':'application/json'},body:JSON.stringify({packageKey})});\n const data=await r.json();if(!r.ok)throw new Error(data.error||'Unable to save package.');renderChecklist(data);\n if(launchStatus)launchStatus.textContent='Package saved. Complete only the unfinished approval steps shown above; God Matters handles the repeatable build steps.';\n }catch(e){if(launchStatus)launchStatus.textContent=e&&e.message?e.message:'Unable to save package.';}finally{packageButtons.forEach(b=>b.disabled=false);}\n }));\n const ask=$('ask-ai');if(ask)ask.addEventListener('click',async()=>{\n const message=String($('ai-message').value||'').trim();if(!message){$('ai-answer').textContent='Enter a question first.';return;}\n try{ask.disabled=true;$('ai-answer').textContent='Thinking…';const r=await fetch('/api/ai',{method:'POST',headers:{Authorization:'Bearer '+await token(),'Content-Type':'application/json'},body:JSON.stringify({message})});const data=await r.json();if(!r.ok)throw new Error(data.error||'AI request failed.');$('ai-answer').textContent=data.answer;ai.textContent=data.plan+' AI access · '+data.requestsUsed+'/'+data.dailyLimit+' requests used today';}catch(e){$('ai-answer').textContent=e&&e.message?e.message:'AI request failed.';}finally{ask.disabled=false;}\n });\n document.querySelectorAll('[data-plan]').forEach(btn=>btn.addEventListener('click',async()=>{\n const plan=String(btn.getAttribute('data-plan')||'').toLowerCase();\n try{\n btn.disabled=true; status.textContent='Opening Shopify subscription approval…';\n const r=await fetch('/api/billing/start',{method:'POST',headers:{Authorization:'Bearer '+await token(),'Content-Type':'application/json'},body:JSON.stringify({plan})});\n const data=await r.json(); if(!r.ok)throw new Error(data.error||'Unable to start trial.');\n if(data.alreadyActive){status.textContent='Your Shopify subscription is already active.';plans.hidden=true;return;}\n if(!data.confirmationUrl)throw new Error('Shopify did not return an approval link.');\n open(data.confirmationUrl,'_top');\n }catch(e){status.textContent=e&&e.message?e.message:'Unable to start trial.';btn.disabled=false;}\n }));\n})();\n`;",["D",1789043045838],{"_34":71,"_36":70,"_37":51,"_39":72,"_42":73,"_44":14,"_45":46,"_28":29},"provisioning.ts","83ddbba8-ad12-11f1-b5e8-1607ee4eb77e","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport const STORE_PACKAGES = {\n launch20: { name: 'Launch', productTarget: 20, setupPrice: 79, plusLead: false },\n grow50: { name: 'Grow', productTarget: 50, setupPrice: 149, plusLead: false },\n business100: { name: 'Business', productTarget: 100, setupPrice: 249, plusLead: false },\n scale200: { name: 'Scale', productTarget: 200, setupPrice: 399, plusLead: false },\n plusGrowth: { name: 'Shopify Plus Growth Launch', productTarget: 200, setupPrice: 999, plusLead: true },\n} as const;\n\nexport type StorePackageKey = keyof typeof STORE_PACKAGES;\n\nasync function initProvisioning(){\n await sqlite.execute(`create table if not exists merchant_provisioning (\n shop text primary key,\n package_key text not null,\n product_target integer not null,\n setup_price real not null,\n status text not null default 'selected',\n supplier_provider text,\n supplier_connected integer not null default 0,\n products_prepared integer not null default 0,\n products_published integer not null default 0,\n collections_ready integer not null default 0,\n pages_ready integer not null default 0,\n navigation_ready integer not null default 0,\n theme_ready integer not null default 0,\n plus_lead integer not null default 0,\n last_error text,\n created_at text not null default current_timestamp,\n updated_at text not null default current_timestamp\n )`);\n}\n\nexport function isStorePackageKey(value:string): value is StorePackageKey {\n return Object.prototype.hasOwnProperty.call(STORE_PACKAGES,value);\n}\n\nexport async function selectStorePackage(shop:string,key:StorePackageKey){\n await initProvisioning();\n const plan=STORE_PACKAGES[key];\n await sqlite.execute({\n sql:`insert into merchant_provisioning(shop,package_key,product_target,setup_price,status,plus_lead)\n values(?,?,?,?, 'selected', ?)\n on conflict(shop) do update set package_key=excluded.package_key,product_target=excluded.product_target,\n setup_price=excluded.setup_price,status='selected',plus_lead=excluded.plus_lead,last_error=null,updated_at=current_timestamp`,\n args:[shop,key,plan.productTarget,plan.setupPrice,plan.plusLead?1:0]\n });\n return {shop,packageKey:key,...plan,status:'selected'};\n}\n\nexport async function getProvisioningStatus(shop:string){\n await initProvisioning();\n const r=await sqlite.execute({sql:'select * from merchant_provisioning where shop=?',args:[shop]});\n return (r.rows as any[])[0]||null;\n}\n\nexport function publicPackageCatalog(){\n return Object.entries(STORE_PACKAGES).map(([key,value])=>({key,...value}));\n}\n\n\nexport async function updateProvisioningPreferences(shop:string,input:{supplierProvider?:string;categories?:string[];market?:string}){\n await initProvisioning();\n const supplier=(input.supplierProvider||'').trim().slice(0,80)||null;\n await sqlite.execute({sql:`update merchant_provisioning set supplier_provider=?,updated_at=current_timestamp where shop=?`,args:[supplier,shop]});\n return getProvisioningStatus(shop);\n}\n\nexport function clientChecklist(record:any){\n if(!record)return [\n {key:'package',label:'Choose your store package',done:false,action:'Choose 20, 50, 100, 200, or Plus Growth below.'}\n ];\n return [\n {key:'shopify',label:'Connect Shopify',done:true,action:'Already completed when you installed the app.'},\n {key:'package',label:'Choose your package',done:Boolean(record.package_key),action:'Choose the product package that fits your launch.'},\n {key:'supplier',label:'Connect a supplier',done:Boolean(record.supplier_connected),action:record.supplier_connected?'Supplier connected.':'Use the supplier connection button when available; your supplier account stays in your name.'},\n {key:'business',label:'Finish protected business details',done:false,action:'Shopify may require your legal business, payout, payment, tax, or identity information. Only you can approve these protected account steps.'},\n {key:'build',label:'Automatic store build',done:String(record.status)==='ready'||String(record.status)==='complete',action:'God Matters prepares the catalog, collections, pages, navigation and launch checks after required connections are approved.'},\n {key:'ownership',label:'Accept ownership if this is a new transfer store',done:false,action:'Skip this for an existing Shopify store. New transfer-store clients accept ownership and select their Shopify plan when Shopify prompts them.'}\n ];\n}\n\nexport function provisioningSummary(record:any){\n return {record,checklist:clientChecklist(record),message:record?'Your setup is saved. Complete only the unfinished approval steps; God Matters handles the rest.':'Choose a package to begin.'};\n}\n",["D",1789043045838],"id","7510d73b-7b53-449f-b7bd-7932b03bc738","god-matters-commerce-mcp",["D",1788925475329],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Free commerce pricing and catalog tools for ChatGPT","imageUrl","1db7f6b1-502a-4018-8620-3f051aa5a3ba","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a06cfb-4bd3-744f-bb74-43b388ce2944","tursoName","7510d73b7b53449fb7bd7932b03bc738","tursoHostname","7510d73b7b53449fb7bd7932b03bc738-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789545036283],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_130":129,"_138":134},"org",{"_130":129,"_131":132,"_133":134,"_18":86,"_135":136,"_137":29},"branch",{"_13":119,"_36":120,"_74":46,"_121":75,"_122":-5,"_123":-5,"_124":-5,"_125":-5,"_126":-5,"_127":76,"_128":129},"isOwned",41,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","iamgodmatters","handle","displayName","IAMGodmatters","avatar","https://avatars.githubusercontent.com/u/169981264?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_74":75,"_36":76,"_42":279,"_78":-5,"_79":29,"_80":81,"_82":81,"_83":84,"_85":-5,"_18":86,"_87":35,"_88":89,"_90":-5,"_91":-5,"_92":93,"_94":95,"_96":97,"_98":99,"_100":280,"_102":-5,"_103":104,"_105":104,"_106":107,"_108":107,"_109":107,"_110":104,"_111":104,"_112":281,"_114":282,"_116":283,"_118":29},"tree",[238,239,240,241,242,243,244,245,246,247],"files",[238,239,240,241,242,243,244,245,246,247],"counts",{"_227":93,"_228":229,"_230":93,"_231":232,"_233":234},"contents",[161,162,163,164,165,166,167,168,169,170],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_74":220,"_36":221,"_34":222,"_174":-5,"_45":46,"_44":223,"_176":89,"_42":224,"_13":93,"_37":51,"_39":225,"_28":29,"_180":-5,"_31":226},{"_74":217,"_36":64,"_34":65,"_174":-5,"_45":46,"_44":14,"_176":29,"_42":218,"_13":189,"_37":51,"_39":67,"_28":29,"_180":-5,"_31":219},{"_74":212,"_36":32,"_34":35,"_174":-5,"_45":46,"_44":14,"_176":29,"_42":213,"_13":214,"_37":38,"_39":41,"_28":29,"_180":215,"_31":216},{"_74":206,"_36":207,"_34":208,"_174":-5,"_45":46,"_44":189,"_176":89,"_42":209,"_13":184,"_37":51,"_39":210,"_28":29,"_180":-5,"_31":211},{"_74":203,"_36":70,"_34":71,"_174":-5,"_45":46,"_44":14,"_176":29,"_42":204,"_13":93,"_37":51,"_39":72,"_28":29,"_180":-5,"_31":205},{"_74":199,"_36":49,"_34":50,"_174":-5,"_45":46,"_44":14,"_176":29,"_42":200,"_13":201,"_37":51,"_39":53,"_28":29,"_180":-5,"_31":202},{"_74":193,"_36":194,"_34":195,"_174":-5,"_45":46,"_44":189,"_176":89,"_42":196,"_13":93,"_37":51,"_39":197,"_28":29,"_180":-5,"_31":198},{"_74":186,"_36":187,"_34":188,"_174":-5,"_45":46,"_44":189,"_176":89,"_42":190,"_13":93,"_37":51,"_39":191,"_28":29,"_180":-5,"_31":192},{"_74":182,"_36":57,"_34":58,"_174":-5,"_45":46,"_44":14,"_176":29,"_42":183,"_13":184,"_37":51,"_39":60,"_28":29,"_180":-5,"_31":185},{"_74":171,"_36":172,"_34":173,"_174":-5,"_45":46,"_44":175,"_176":29,"_42":177,"_13":178,"_37":51,"_39":179,"_28":29,"_180":-5,"_31":181},"e30884ad-deb4-4eda-a88d-73c725e907b2","web.ts","99c191a4-ac24-11f1-b933-1607ee4eb77e","parentId",29,"latest",["D",1789027630831],3,"import {escapeHtml} from './pricing.ts';\nexport function renderPage(title:string,body:string,script=false){return ''+escapeHtml(title)+' · God Matters Commerce ManagerSkip to content

'+body+'

'+(script?'':'')+'';}\nexport function renderHome(){return renderPage('Shopify commerce app',`

14-DAY TRIAL

Know your costs.
Grow with AI.

God Matters Commerce Manager is an embedded Shopify app for commerce planning, pricing, catalog work, and AI-assisted merchant workflows.

Choose a plan

Shopify sign-in and an approved 14-day trial are required for app access. Recurring billing begins after the trial unless canceled.

COMMERCE WORKSPACE

One account for your merchant tools.

Use pricing calculations, catalog planning, draft preparation, and Commerce AI from the embedded Shopify app during an active trial or subscription.

Commerce AI

Ask for pricing help, listing improvements, catalog planning, and practical Shopify guidance.

Cost-aware pricing

Model supplier cost, shipping, fees, reserves, and target margin without treating estimates as guaranteed profit.

Catalog planning

Prepare and review product information before publishing it to your store.

14-DAY FREE TRIAL

Choose the plan that fits your store.

Each plan begins with a 14-day trial after approval in Shopify. Shopify starts recurring billing after the trial unless the subscription is canceled.

Starter

$4.99 / month

For sellers beginning their catalog workflow.

14-day trial
Pricing and catalog tools
Commerce AI
40 AI requests per day

Trial → paid

Growth

$9.99 / month

For growing merchant workflows.

14-day trial
Pricing and catalog tools
Commerce AI
120 AI requests per day

Trial → paid

Pro

$19.99 / month

For larger catalog operations.

14-day trial
Pricing and catalog tools
Commerce AI
300 AI requests per day

Trial → paid

A merchant must approve the subscription in Shopify before the trial begins. No sales or profit are guaranteed.

`,false);}\n","label",[172],"009890f3-43dd-42dc-9047-40f2cca6c3e0",["D",1789043045838],1,[57],"555c4c8b-2e75-4310-b9de-8ac87f02bbd2","web-client.ts","99c10fae-ac24-11f1-b933-1607ee4eb77e",4,["D",1788940862265],"export const appJs = String.raw`\n(function(){\n'use strict';\nconst $=id=>document.getElementById(id);\nconst priceForm=$('price-form'),draftForm=$('draft-form'),costForm=$('cost-form');\nconst keys=['productCost','supplierShipping','packaging','otherFixedCosts','customerShipping','fixedPaymentFee','feePercent','taxReservePercent','returnReservePercent','targetMarginPercent','roundingIncrement'];\nconst currencies=['PHP','USD','EUR','GBP','AUD','CAD','SGD'];\nconst storeKey='god-matters-commerce-drafts-v1';\nlet drafts=[],editingId=null,lastResult=null,requestNumber=0,controller=null,timer=null;\nconst money=(n,c)=>new Intl.NumberFormat('en-US',{minimumFractionDigits:2,maximumFractionDigits:2}).format(n);\nfunction setStatus(id,message,error){const el=$(id);if(!el)return;el.textContent=message;el.classList.toggle('error',!!error);}\nasync function requestJson(path,data,signal){const response=await fetch(path,{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(data),signal});let result;try{result=await response.json();}catch{throw new Error('The server returned an invalid response.');}if(!response.ok)throw new Error(result.error||'The request failed.');return result;}\nfunction readPricing(){const result={};for(const key of keys){const el=priceForm.elements.namedItem(key);const raw=el.value.trim();const n=raw===''?0:Number(raw);if(!Number.isFinite(n)||n<0)throw new Error('Enter a valid nonnegative number for '+key+'.');result[key]=n;}result.currency=priceForm.elements.namedItem('currency').value;return result;}\nfunction showResult(r){const c=r.currency;const values={'result-price':c+' '+money(r.itemPrice,c),'result-revenue':c+' '+money(r.totalCustomerPayment,c),'result-profit':c+' '+money(r.estimatedProfit,c),'result-margin':r.estimatedMarginPercent.toFixed(2)+'%','result-breakeven':c+' '+money(r.breakEvenItemPrice,c)};for(const id in values)$(id).textContent=values[id];}\nasync function calculate(){if(!priceForm)return null;const seq=++requestNumber;if(controller)controller.abort();controller=new AbortController();let values;try{values=readPricing();}catch(e){lastResult=null;setStatus('price-status',e.message,true);return null;}setStatus('price-status','Calculating…',false);try{const r=await requestJson('/api/price',values,controller.signal);if(seq!==requestNumber)return null;lastResult=r;showResult(r);setStatus('price-status','Estimate calculated. Review all costs before selling.',false);return r;}catch(e){if(seq!==requestNumber||e.name==='AbortError')return null;lastResult=null;setStatus('price-status',e.message,true);return null;}}\nfunction scheduleCalculation(){lastResult=null;clearTimeout(timer);timer=setTimeout(calculate,400);}\nfunction makeId(){return typeof crypto!=='undefined'&&crypto.randomUUID?crypto.randomUUID():Date.now().toString(36)+'-'+Math.random().toString(36).slice(2);}\nfunction loadDrafts(){try{const saved=JSON.parse(localStorage.getItem(storeKey)||'[]');if(Array.isArray(saved))drafts=saved.slice(0,100).filter(x=>x&&typeof x.id==='string'&&typeof x.title==='string'&&x.pricing);}catch{setStatus('draft-status','Browser storage could not be read. Existing saved data has not been changed.',true);}}\nfunction persist(next){try{localStorage.setItem(storeKey,JSON.stringify(next));drafts=next;return true;}catch{setStatus('draft-status','Storage is unavailable or full. Export a backup and free storage before saving.',true);return false;}}\nfunction field(form,name){return form.elements.namedItem(name);}\nfunction text(form,name){return String(field(form,name).value||'').trim();}\nfunction readDraft(r){const title=text(draftForm,'title');if(!title||title.length>200)throw new Error('Enter a product title of 200 characters or fewer.');return {id:editingId||makeId(),title,description:text(draftForm,'description'),vendor:text(draftForm,'vendor'),productType:text(draftForm,'productType'),sku:text(draftForm,'sku'),tags:text(draftForm,'tags').split(',').map(s=>s.trim()).filter(Boolean).slice(0,20),pricing:readPricing(),result:r,updatedAt:new Date().toISOString()};}\nfunction validateDraft(x){if(!x||typeof x!=='object'||typeof x.title!=='string'||!x.title.trim()||x.title.length>200||!x.pricing||typeof x.pricing!=='object')throw new Error('The backup contains an invalid listing.');const out={id:typeof x.id==='string'&&x.id.length<100?x.id:makeId(),title:x.title.trim(),description:String(x.description||'').slice(0,10000),vendor:String(x.vendor||'').slice(0,200),productType:String(x.productType||'').slice(0,200),sku:String(x.sku||'').slice(0,100),tags:Array.isArray(x.tags)?x.tags.filter(v=>typeof v==='string').slice(0,20).map(v=>v.slice(0,100)):[],pricing:{},updatedAt:new Date().toISOString()};for(const key of keys){const n=x.pricing[key]===undefined?(key==='targetMarginPercent'?20:key==='roundingIncrement'?0.01:0):x.pricing[key];if(typeof n!=='number'||!Number.isFinite(n)||n<0)throw new Error('Invalid pricing value in the backup.');out.pricing[key]=n;}out.pricing.currency=currencies.includes(x.pricing.currency)?x.pricing.currency:'PHP';return out;}\nfunction clearEditor(){editingId=null;draftForm.reset();$('save-draft').textContent='Save local draft';setStatus('draft-status','Editor cleared. Your saved drafts are unchanged.',false);}\nfunction button(label,style,action){const b=document.createElement('button');b.type='button';b.className='button '+style+' small';b.textContent=label;b.addEventListener('click',action);return b;}\nfunction renderDrafts(){if(!draftForm)return;const list=$('draft-list');list.replaceChildren();$('draft-count').textContent=drafts.length+' draft'+(drafts.length===1?'':'s');$('export-csv').disabled=!drafts.length;$('export-json').disabled=!drafts.length;if(!drafts.length){const p=document.createElement('p');p.className='muted';p.textContent='No drafts saved yet.';list.append(p);return;}for(const d of drafts){const item=document.createElement('article');item.className='draft-item';const title=document.createElement('strong');title.textContent=d.title;const detail=document.createElement('p');const r=d.result;detail.textContent=(d.sku?'SKU: '+d.sku+' · ':'')+(r?r.currency+' '+money(r.itemPrice,r.currency)+' · Est. margin '+r.estimatedMarginPercent.toFixed(2)+'%':'Price will be recalculated on export');const actions=document.createElement('div');actions.className='actions';actions.append(button('Edit','secondary',()=>editDraft(d.id)),button('Delete','quiet',()=>deleteDraft(d.id)));item.append(title,detail,actions);list.append(item);}}\nfunction editDraft(id){const d=drafts.find(x=>x.id===id);if(!d)return;editingId=id;for(const name of ['title','description','vendor','productType','sku'])field(draftForm,name).value=d[name]||'';field(draftForm,'tags').value=(d.tags||[]).join(', ');for(const key of keys)field(priceForm,key).value=d.pricing[key]===undefined?'0':String(d.pricing[key]);field(priceForm,'currency').value=d.pricing.currency||'PHP';$('save-draft').textContent='Update local draft';calculate();$('drafts').scrollIntoView({behavior:'smooth'});field(draftForm,'title').focus();setStatus('draft-status','Editing '+d.title+'. Update the costs above before saving.',false);}\nfunction deleteDraft(id){const d=drafts.find(x=>x.id===id);if(!d||!confirm('Delete the local copy of '+d.title+'? This cannot be undone unless you have a backup.'))return;if(persist(drafts.filter(x=>x.id!==id))){if(editingId===id)clearEditor();renderDrafts();setStatus('draft-status','Local draft deleted. Shopify products were not changed.',false);}}\nfunction download(text,filename,type){const blob=new Blob([text],{type});const url=URL.createObjectURL(blob);const a=document.createElement('a');a.href=url;a.download=filename;document.body.append(a);a.click();a.remove();setTimeout(()=>URL.revokeObjectURL(url),1000);}\nfunction dateTag(){return new Date().toISOString().slice(0,10);}\nasync function exportCsv(){if(!drafts.length)return;setStatus('draft-status','Preparing safe draft CSV…',false);try{const data=await requestJson('/api/catalog',{items:drafts.map(d=>({title:d.title,description:d.description,vendor:d.vendor,productType:d.productType,sku:d.sku,tags:d.tags,pricing:d.pricing})),includeShopifyCsv:true});download(data.shopifyCsv,'god-matters-drafts-'+dateTag()+'.csv','text/csv;charset=utf-8');setStatus('draft-status','Draft CSV prepared. Review it before importing into Shopify.',false);}catch(e){setStatus('draft-status',e.message,true);}}\nfunction exportJson(){download(JSON.stringify({format:'god-matters-commerce-drafts',version:1,exportedAt:new Date().toISOString(),drafts},null,2),'god-matters-backup-'+dateTag()+'.json','application/json');setStatus('draft-status','Backup download prepared. Store it somewhere safe.',false);}\nasync function importJson(file){if(!file)return;if(file.size>1000000){setStatus('draft-status','The backup is too large (maximum 1 MB).',true);return;}try{const raw=JSON.parse(await file.text());const rows=Array.isArray(raw)?raw:raw.format==='god-matters-commerce-drafts'&&raw.version===1?raw.drafts:null;if(!Array.isArray(rows)||rows.length>100)throw new Error('Choose a valid backup containing at most 100 drafts.');const incoming=rows.map(validateDraft);const existing=new Set(drafts.map(d=>d.id));const unique=incoming.filter(d=>!existing.has(d.id));if(drafts.length+unique.length>100)throw new Error('The local 100-draft limit would be exceeded.');if(unique.length){const result=await requestJson('/api/catalog',{items:unique,includeShopifyCsv:false});result.items.forEach((row,i)=>{unique[i].result=row.pricing;});}if(persist(drafts.concat(unique))){renderDrafts();setStatus('draft-status',unique.length+' draft(s) imported. Existing drafts were preserved; matching IDs were skipped.',false);}}catch(e){setStatus('draft-status',e.message,true);}finally{$('import-json').value='';}}\nif(priceForm){priceForm.addEventListener('submit',e=>{e.preventDefault();clearTimeout(timer);calculate();});priceForm.addEventListener('input',scheduleCalculation);priceForm.addEventListener('change',scheduleCalculation);priceForm.addEventListener('reset',()=>{lastResult=null;clearTimeout(timer);setTimeout(calculate,0);});calculate();}\nif(draftForm){loadDrafts();renderDrafts();draftForm.addEventListener('submit',async e=>{e.preventDefault();if(drafts.length>=100&&!editingId){setStatus('draft-status','The local 100-draft limit has been reached. Export or remove a draft first.',true);return;}clearTimeout(timer);const r=await calculate();if(!r)return;try{const d=readDraft(r);const next=editingId?drafts.map(x=>x.id===editingId?d:x):[d,...drafts];if(persist(next)){renderDrafts();clearEditor();setStatus('draft-status','Draft saved on this device. No Shopify product was created.',false);}}catch(err){setStatus('draft-status',err.message,true);}});$('clear-draft').addEventListener('click',clearEditor);$('export-csv').addEventListener('click',exportCsv);$('export-json').addEventListener('click',exportJson);$('import-json').addEventListener('change',e=>importJson(e.target.files[0]));}\nfunction costRead(){const v={};for(const element of costForm.elements){if(!element.name)continue;const n=Number(element.value);if(!Number.isFinite(n)||n<0)throw new Error('Enter nonnegative finite values.');v[element.name]=n;}if(v.feePercent+v.reservePercent>=100)throw new Error('Fees and reserves must total less than 100%.');return v;}\nfunction costCalculate(){try{const v=costRead(),rate=(v.feePercent+v.reservePercent)/100,contribution=v.price*(1-rate)-v.feeFixed-v.variableCost;const revenue=v.price*v.customers,fees=v.customers*(v.price*v.feePercent/100+v.feeFixed),variable=v.customers*v.variableCost,reserve=revenue*v.reservePercent/100,surplus=revenue-fees-variable-reserve-v.fixedCost;const fmt=n=>'$'+money(n,'USD');$('model-revenue').textContent=fmt(revenue);$('model-surplus').textContent=fmt(surplus);$('model-contribution').textContent=fmt(contribution);$('model-break-even').textContent=contribution>0?Math.ceil(v.fixedCost/contribution)+' paid customers':'Not achievable';$('model-margin').textContent=revenue>0?(surplus/revenue*100).toFixed(2)+'%':'—';const body=$('scenario-body');body.replaceChildren();for(const count of [10,25,50,100]){const tr=document.createElement('tr');const value=count*contribution-v.fixedCost;for(const text of [String(count),fmt(count*v.price),fmt(value)]){const td=document.createElement('td');td.textContent=text;tr.append(td);}body.append(tr);}setStatus('cost-status','Illustrative model calculated. Replace every assumption with actual costs.',false);}catch(e){setStatus('cost-status',e.message,true);}}\nif(costForm){costForm.addEventListener('submit',e=>{e.preventDefault();costCalculate();});costForm.addEventListener('input',costCalculate);costCalculate();}\n})();\n`;\n",[187],"315aaa47-ec0f-4633-ad39-9b226c83c454","tests.ts","99c0e254-ac24-11f1-b933-1607ee4eb77e",["D",1788940862265],"import assert from 'node:assert/strict';\nimport {calculatePrice,catalogCsv,draftRow,descriptionHtml} from './pricing.ts';\nfunction runChecks(){\n const checks:[string,()=>void][]=[\n ['Default target margin',()=>{const p=calculatePrice({productCost:300,supplierShipping:50,otherFixedCosts:20,feePercent:5});assert.equal(p.itemPrice,493.34);assert.ok(p.estimatedMarginPercent>=20);}],\n ['Customer shipping is included in revenue',()=>{const p=calculatePrice({productCost:100,supplierShipping:20,customerShipping:10,feePercent:5,targetMarginPercent:20});assert.equal(p.itemPrice,150);assert.equal(p.totalCustomerPayment,160);}],\n ['Fixed fees and reserves',()=>{const p=calculatePrice({productCost:100,fixedPaymentFee:2,feePercent:5,returnReservePercent:5,targetMarginPercent:20});assert.equal(p.itemPrice,145.72);}],\n ['Rounding upward',()=>{const p=calculatePrice({productCost:100,targetMarginPercent:20,roundingIncrement:5});assert.equal(p.itemPrice,125);}],\n ['Invalid percentages',()=>assert.throws(()=>calculatePrice({productCost:100,feePercent:80,targetMarginPercent:20}))],\n ['Invalid inputs',()=>{assert.throws(()=>calculatePrice({productCost:-1}));assert.throws(()=>calculatePrice({productCost:NaN}));assert.throws(()=>calculatePrice({productCost:100,roundingIncrement:0.001}));}],\n ['Safe draft CSV',()=>{const csv=catalogCsv([draftRow({title:'=SUM(1,1)',description:'',pricing:{productCost:100}},0)]);assert.ok(csv.includes(\"'=SUM(1,1)\"));assert.ok(csv.includes('Status'));assert.ok(csv.includes('draft'));assert.ok(csv.includes('\"0\"'));assert.ok(!csv.includes('

Know what each plan needs to earn.

Monthly assumptions (USD)

Estimated monthly results

Customer volume scenarios

Costs to verify before launching paid plans

Privacy policy

Information processed

Shopify authentication

Device-local drafts

Hosting and retention

Sharing and security

Contact

Terms of use

Seller responsibilities

Shopify connection

Estimates and limitations

Plans and billing

Availability and changes

Support

Email support

Current service status

God Matters Commerce Manager

Your account

AI workspace

Choose your 14-day trial

Starter

Growth

Pro

Connect through Shopify to continue.

God Matters Commerce Manager

Connected store

Page not found

Know what each plan needs to earn.

Monthly assumptions (USD)

Estimated monthly results

Customer volume scenarios

Costs to verify before launching paid plans

Privacy policy

Information processed

Shopify authentication

Device-local drafts

Hosting and retention

Sharing and security

Contact

Terms of use

Seller responsibilities

Shopify connection

Estimates and limitations

Plans and billing

Availability and changes

Support

Email support

Current service status

God Matters Commerce Manager

Your account

Choose once. We handle the build.

Your launch checklist

AI workspace

Choose your 14-day trial

Starter

Growth

Pro

Connect through Shopify to continue.

God Matters Commerce Manager

Connected store

Page not found

Know your costs.Grow with AI.

One account for your merchant tools.

Commerce AI

Cost-aware pricing

Catalog planning

Choose the plan that fits your store.

Starter

Growth

Pro

Know your costs.
Grow with AI.

Diff · v33