[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_371":372,"_373":374},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_277":-5,"_20":278,"_22":279,"_280":281,"_282":283,"_26":284,"_24":285,"_286":-5,"_287":-5,"_288":55,"_289":290,"_291":46,"_292":-5,"_293":-5,"_294":295},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","tokigo7440","name","multi-tenant-commerce-engine","branchName","main","version","path","termux","project",{"_34":221,"_13":14,"_47":222,"_223":-5,"_224":55,"_225":94,"_226":94,"_227":228,"_229":-5,"_230":231,"_232":69,"_233":46,"_234":-5,"_235":-5,"_236":49,"_237":238,"_239":240,"_241":242,"_243":244,"_245":-5,"_246":247,"_248":247,"_249":250,"_251":250,"_252":250,"_253":247,"_254":247,"_255":256,"_257":258,"_259":260,"_261":55},"tree",[62,63,64,65,66],"file",{"_34":58,"_13":19,"_37":40,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":59,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_18":61},"contents",[33],"upstream","pull","ahead","behind","envVars",{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_18":57},"id","3bb543b6-8a6f-45b8-8077-e542b0178580","server.ts","fileId","eaccc592-8789-11f1-85a0-1607ee4eb77e","parentId","41c11127-1c2d-4270-9c91-880bc26fc3c3","branchId","a336bfb1-1072-4277-b7fc-005e38ac2fe6","branchVersion",17,"latest",true,"createdAt",["D",1784916184433],0,"fileType","script","content","/**\n * Multi-Tenant Commerce Engine — Termux / Local Deno Server\n * ──────────────────────────────────────────────────────────\n * Runs the exact same business logic as the Val Town version,\n * but uses node:sqlite (built into Deno 2.x) for local storage\n * and Deno.serve() for the HTTP server.\n *\n * ── Quick start on Termux ──────────────────────────────────\n * pkg install deno # install Deno\n * deno run --allow-net --allow-read --allow-write \\\n * --unstable-node-apis termux/server.ts\n *\n * ── Quick start on any machine with Deno ──────────────────\n * deno run --allow-net --allow-read --allow-write \\\n * --unstable-node-apis termux/server.ts\n *\n * Then open http://localhost:3000/dashboard\n */\n\nimport { DatabaseSync } from \"node:sqlite\";\n\n// ── Import shared business logic (same modules as Val Town) ────\nimport { setDatabase } from \"../lib/storage.ts\";\nimport type { IDatabase, QueryResult } from \"../lib/types.ts\";\nimport { initDatabase } from \"../lib/db.ts\";\nimport {\n json, errorResponse, corsPreflight, authenticateMerchant,\n} from \"../lib/utils.ts\";\nimport {\n registerMerchant, getMerchantInfo, getPublicStoreInfo, getMerchantStats,\n} from \"../lib/merchants.ts\";\nimport {\n listProducts, addProduct, updateProduct, deleteProduct,\n} from \"../lib/products.ts\";\nimport { listOrders, updateOrderStatus } from \"../lib/orders.ts\";\nimport { processChatMessage } from \"../lib/chatbot.ts\";\n\n// ── Local SQLite adapter (wraps node:sqlite to match IDatabase) ─\nconst DB_PATH = Deno.env.get(\"DB_PATH\") || \"commerce.db\";\nconst sqliteDB = new DatabaseSync(DB_PATH);\nsqliteDB.exec(\"PRAGMA journal_mode = WAL;\");\n\nconst localAdapter: IDatabase = {\n execute(sqlOrObj, args) {\n const sql = typeof sqlOrObj === \"string\" ? sqlOrObj : sqlOrObj.sql;\n const params = typeof sqlOrObj === \"string\" ? (args || []) : (sqlOrObj.args || []);\n\n const stmt = sqliteDB.prepare(sql);\n const trimmed = sql.trim().toUpperCase();\n\n if (trimmed.startsWith(\"SELECT\") || trimmed.startsWith(\"PRAGMA\")) {\n const rows = stmt.all(...params) as Record[];\n return Promise.resolve({\n rows,\n rowsAffected: rows.length,\n lastInsertRowid: null,\n } as QueryResult);\n }\n\n const result = stmt.run(...params) as {\n changes: number;\n lastInsertRowid: number | bigint;\n };\n return Promise.resolve({\n rows: [],\n rowsAffected: result.changes,\n lastInsertRowid: typeof result.lastInsertRowid === \"bigint\"\n ? result.lastInsertRowid\n : BigInt(result.lastInsertRowid ?? 0),\n } as QueryResult);\n },\n\n batch(statements) {\n // Simple batch: execute sequentially (node:sqlite doesn't have\n // explicit transactions yet, but we can wrap in BEGIN/COMMIT).\n sqliteDB.exec(\"BEGIN\");\n try {\n const results: QueryResult[] = [];\n for (const { sql, args } of statements) {\n const stmt = sqliteDB.prepare(sql);\n const trimmed = sql.trim().toUpperCase();\n if (trimmed.startsWith(\"SELECT\")) {\n results.push({\n rows: stmt.all(...(args || [])) as Record[],\n rowsAffected: 0,\n lastInsertRowid: null,\n });\n } else {\n const r = stmt.run(...(args || []));\n results.push({\n rows: [],\n rowsAffected: r.changes,\n lastInsertRowid: BigInt(r.lastInsertRowid ?? 0),\n });\n }\n }\n sqliteDB.exec(\"COMMIT\");\n return Promise.resolve(results);\n } catch (err) {\n sqliteDB.exec(\"ROLLBACK\");\n throw err;\n }\n },\n};\n\nsetDatabase(localAdapter);\n\n// ── Static file reader (local filesystem) ──────────────────────\nasync function readStaticFile(path: string): Promise {\n return await Deno.readTextFile(path);\n}\n\nconst fileCache: Record = {};\n\nasync function serveStatic(path: string, contentType: string): Promise {\n if (!fileCache[path]) {\n try {\n fileCache[path] = await readStaticFile(path);\n } catch {\n return errorResponse(\"File not found: \" + path, 404);\n }\n }\n return new Response(fileCache[path], {\n headers: { \"Content-Type\": contentType, \"Cache-Control\": \"public, max-age=300\" },\n });\n}\n\n// ── Router (identical logic to main.ts) ────────────────────────\nasync function handleRequest(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname.replace(/\\/+$/, \"\");\n const method = req.method.toUpperCase();\n\n if (method === \"OPTIONS\") return corsPreflight();\n\n if (path === \"\" || path === \"/api/health\") {\n return json({\n status: \"operational\",\n service: \"Multi-Tenant Commerce Engine (Local)\",\n version: \"2.0.0\",\n storage: \"SQLite (\" + DB_PATH + \")\",\n docs: \"/dashboard\",\n });\n }\n\n // Static pages\n if (path === \"/dashboard\") {\n return await serveStatic(\"public/dashboard.html\", \"text/html; charset=utf-8\");\n }\n if (path === \"/api/widget.js\" || path === \"/widget.js\") {\n return await serveStatic(\"public/widget.js\", \"application/javascript\");\n }\n if (path.match(/^\\/store\\/.+$/) && method === \"GET\") {\n return await serveStatic(\"public/store.html\", \"text/html; charset=utf-8\");\n }\n\n // Parse body\n let body: Record = {};\n if ([\"POST\", \"PATCH\", \"PUT\"].includes(method)) {\n try {\n const text = await req.text();\n if (text) body = JSON.parse(text);\n } catch {\n return errorResponse(\"Invalid JSON body\", 400);\n }\n }\n\n // Public endpoints\n if (path === \"/api/merchant/register\" && method === \"POST\") {\n return await registerMerchant(body as never);\n }\n\n if (path === \"/api/chat\" && method === \"POST\") {\n if (!body.merchant_id || !body.message) {\n return errorResponse(\"Missing required fields: merchant_id, message\", 422);\n }\n try {\n const result = await processChatMessage(\n body.merchant_id as string,\n body.message as string,\n body.session_id as string | undefined,\n );\n return json(result);\n } catch (err) {\n return errorResponse(`Chat processing error: ${(err as Error).message}`, 500);\n }\n }\n\n const storeApiMatch = path.match(/^\\/api\\/store\\/(.+)$/);\n if (storeApiMatch && method === \"GET\") {\n return await getPublicStoreInfo(storeApiMatch[1]);\n }\n\n // Authenticated endpoints\n const protectedRoutes = [\"/api/merchant\", \"/api/products\", \"/api/orders\", \"/api/stats\"];\n const isProtected = protectedRoutes.some((r) => path === r || path.startsWith(r + \"/\"));\n\n if (isProtected) {\n const apiKey = req.headers.get(\"X-Merchant-Key\");\n const merchant = await authenticateMerchant(apiKey || \"\");\n if (!merchant) {\n return errorResponse(\"Unauthorized: Valid X-Merchant-Key header required\", 401);\n }\n\n if (path === \"/api/merchant\" && method === \"GET\") return await getMerchantInfo(merchant);\n if (path === \"/api/stats\" && method === \"GET\") return await getMerchantStats(merchant);\n if (path === \"/api/products\" && method === \"GET\") return await listProducts(merchant.id);\n if (path === \"/api/products\" && method === \"POST\") return await addProduct(merchant.id, body as never);\n\n const productMatch = path.match(/^\\/api\\/products\\/(\\d+)$/);\n if (productMatch) {\n const pid = parseInt(productMatch[1]);\n if (method === \"PUT\") return await updateProduct(merchant.id, pid, body as never);\n if (method === \"DELETE\") return await deleteProduct(merchant.id, pid);\n }\n\n if (path === \"/api/orders\" && method === \"GET\") return await listOrders(merchant.id);\n const orderMatch = path.match(/^\\/api\\/orders\\/(\\d+)$/);\n if (orderMatch && method === \"PATCH\") {\n if (!body.status) return errorResponse(\"Missing required field: status\", 422);\n return await updateOrderStatus(merchant.id, parseInt(orderMatch[1]), body.status as string);\n }\n }\n\n return errorResponse(`Route not found: ${method} ${path}`, 404);\n}\n\n// ── Initialize DB and start server ─────────────────────────────\nawait initDatabase();\nconsole.log(\"✅ Database initialized:\", DB_PATH);\n\nconst PORT = parseInt(Deno.env.get(\"PORT\") || \"3000\");\n\nDeno.serve({ port: PORT }, async (req: Request): Promise => {\n try {\n return await handleRequest(req);\n } catch (err) {\n const message = err instanceof Error ? err.message : \"Unknown error\";\n console.error(\"[FATAL]\", message, (err as Error)?.stack);\n return errorResponse(`Internal server error: ${message}`, 500);\n }\n});\n\nconsole.log(\"🚀 Commerce Engine running on http://localhost:\" + PORT);\nconsole.log(\" Dashboard: http://localhost:\" + PORT + \"/dashboard\");\nconsole.log(\" Health: http://localhost:\" + PORT + \"/api/health\");\n","deleted",false,"label",[19,36],"4a2d1705-bace-4cb0-93d4-60c36ddb13d3",["D",1784916184433],"directory",[19],{"_34":126,"_13":127,"_37":128,"_39":-5,"_41":42,"_43":129,"_45":46,"_47":130,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":131,"_18":132},{"_34":93,"_13":94,"_37":95,"_39":-5,"_41":42,"_43":96,"_45":46,"_47":97,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":98,"_18":99},{"_34":58,"_13":19,"_37":40,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":86,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":87,"_18":88},{"_34":78,"_13":79,"_37":80,"_39":-5,"_41":42,"_43":81,"_45":46,"_47":82,"_17":49,"_50":24,"_52":83,"_54":55,"_56":-5,"_75":84,"_18":85},{"_34":67,"_13":68,"_37":69,"_39":-5,"_41":42,"_43":70,"_45":46,"_47":71,"_17":72,"_50":73,"_52":74,"_54":55,"_56":-5,"_75":76,"_18":77},"865d51c0-94e5-4516-96b1-063924def70c","main.ts","32bdfec6-85ae-11f1-94b9-1607ee4eb77e",16,["D",1784916152206],3,"http","/**\n * Multi-Tenant Commerce Engine — Val Town HTTP entrypoint\n * ─────────────────────────────────────────────────────────\n * Routes API requests and serves the storefront + dashboard UI.\n * Configures the Val Town SQLite adapter for the shared business logic.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\n\nimport { setDatabase } from \"./lib/storage.ts\";\nimport type { IDatabase } from \"./lib/types.ts\";\nimport { initDatabase } from \"./lib/db.ts\";\nimport {\n json, errorResponse, html, corsPreflight, authenticateMerchant,\n} from \"./lib/utils.ts\";\nimport {\n registerMerchant, getMerchantInfo, getPublicStoreInfo, getMerchantStats,\n} from \"./lib/merchants.ts\";\nimport {\n listProducts, addProduct, updateProduct, deleteProduct,\n} from \"./lib/products.ts\";\nimport { listOrders, updateOrderStatus } from \"./lib/orders.ts\";\nimport { processChatMessage } from \"./lib/chatbot.ts\";\n\n// ── Configure Val Town SQLite as the database adapter ──────────\nconst valTownAdapter: IDatabase = {\n async execute(sqlOrObj, args) {\n if (typeof sqlOrObj === \"string\") {\n if (args) return await sqlite.execute({ sql: sqlOrObj, args } as never);\n return await sqlite.execute(sqlOrObj as never);\n }\n return await sqlite.execute(sqlOrObj as never);\n },\n async batch(statements) {\n return await sqlite.batch(statements as never);\n },\n};\nsetDatabase(valTownAdapter);\n\n// ── Static file cache ──────────────────────────────────────────\nconst fileCache: Record = {};\n\nasync function serveStatic(path: string, contentType: string): Promise {\n if (!fileCache[path]) {\n try {\n fileCache[path] = await readFile(path);\n } catch {\n return errorResponse(\"File not found: \" + path, 404);\n }\n }\n return new Response(fileCache[path], {\n headers: {\n \"Content-Type\": contentType,\n \"Cache-Control\": \"public, max-age=300\",\n },\n });\n}\n\n// ── Router ─────────────────────────────────────────────────────\nasync function handleRequest(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname.replace(/\\/+$/, \"\");\n const method = req.method.toUpperCase();\n\n if (method === \"OPTIONS\") return corsPreflight();\n\n // ── Health check ─────────────────────────────────────────\n if (path === \"\" || path === \"/api/health\") {\n return json({\n status: \"operational\",\n service: \"Multi-Tenant Commerce Engine\",\n version: \"2.0.0\",\n docs: \"/dashboard\",\n endpoints: {\n register: \"POST /api/merchant/register\",\n chat: \"POST /api/chat\",\n store: \"GET /api/store/:merchantId\",\n merchant: \"GET /api/merchant (auth)\",\n products: \"GET/POST /api/products (auth)\",\n orders: \"GET /api/orders (auth)\",\n stats: \"GET /api/stats (auth)\",\n },\n });\n }\n\n // ── Static pages ─────────────────────────────────────────\n if (path === \"/dashboard\") {\n return await serveStatic(\"public/dashboard.html\", \"text/html; charset=utf-8\");\n }\n\n if (path === \"/api/widget.js\" || path === \"/widget.js\") {\n return await serveStatic(\"public/widget.js\", \"application/javascript\");\n }\n\n // Store page: /store/:merchantId — token-free storefront\n if (path.match(/^\\/store\\/.+$/) && method === \"GET\") {\n return await serveStatic(\"public/store.html\", \"text/html; charset=utf-8\");\n }\n\n // ── Parse body ───────────────────────────────────────────\n let body: Record = {};\n if ([\"POST\", \"PATCH\", \"PUT\"].includes(method)) {\n try {\n const text = await req.text();\n if (text) body = JSON.parse(text);\n } catch {\n return errorResponse(\"Invalid JSON body\", 400);\n }\n }\n\n // ════════════════════════════════════════════════════════════\n // PUBLIC ENDPOINTS — no authentication required\n // ════════════════════════════════════════════════════════════\n\n // Merchant registration\n if (path === \"/api/merchant/register\" && method === \"POST\") {\n return await registerMerchant(body as never);\n }\n\n // AI chatbot — buyers just need merchant_id, no API key\n if (path === \"/api/chat\" && method === \"POST\") {\n if (!body.merchant_id || !body.message) {\n return errorResponse(\"Missing required fields: merchant_id, message\", 422);\n }\n try {\n const result = await processChatMessage(\n body.merchant_id as string,\n body.message as string,\n body.session_id as string | undefined,\n );\n return json(result);\n } catch (err) {\n return errorResponse(`Chat processing error: ${(err as Error).message}`, 500);\n }\n }\n\n // Public store info — powers the token-free storefront\n const storeApiMatch = path.match(/^\\/api\\/store\\/(.+)$/);\n if (storeApiMatch && method === \"GET\") {\n return await getPublicStoreInfo(storeApiMatch[1]);\n }\n\n // ════════════════════════════════════════════════════════════\n // AUTHENTICATED ENDPOINTS — require X-Merchant-Key header\n // ════════════════════════════════════════════════════════════\n\n const protectedRoutes = [\"/api/merchant\", \"/api/products\", \"/api/orders\", \"/api/stats\"];\n const isProtected = protectedRoutes.some((r) => path === r || path.startsWith(r + \"/\"));\n\n if (isProtected) {\n const apiKey = req.headers.get(\"X-Merchant-Key\");\n const merchant = await authenticateMerchant(apiKey || \"\");\n if (!merchant) {\n return errorResponse(\"Unauthorized: Valid X-Merchant-Key header required\", 401);\n }\n\n // Merchant info\n if (path === \"/api/merchant\" && method === \"GET\") {\n return await getMerchantInfo(merchant);\n }\n\n // Dashboard stats\n if (path === \"/api/stats\" && method === \"GET\") {\n return await getMerchantStats(merchant);\n }\n\n // Products\n if (path === \"/api/products\" && method === \"GET\") {\n return await listProducts(merchant.id);\n }\n if (path === \"/api/products\" && method === \"POST\") {\n return await addProduct(merchant.id, body as never);\n }\n\n const productMatch = path.match(/^\\/api\\/products\\/(\\d+)$/);\n if (productMatch) {\n const productId = parseInt(productMatch[1]);\n if (method === \"PUT\") return await updateProduct(merchant.id, productId, body as never);\n if (method === \"DELETE\") return await deleteProduct(merchant.id, productId);\n }\n\n // Orders\n if (path === \"/api/orders\" && method === \"GET\") {\n return await listOrders(merchant.id);\n }\n const orderMatch = path.match(/^\\/api\\/orders\\/(\\d+)$/);\n if (orderMatch && method === \"PATCH\") {\n if (!body.status) return errorResponse(\"Missing required field: status\", 422);\n return await updateOrderStatus(merchant.id, parseInt(orderMatch[1]), body.status as string);\n }\n }\n\n // ── 404 ──────────────────────────────────────────────────\n return errorResponse(`Route not found: ${method} ${path}`, 404);\n}\n\n// ── Main handler ───────────────────────────────────────────────\nlet dbInitialized = false;\n\nexport default async function server(request: Request): Promise {\n try {\n if (!dbInitialized) {\n await initDatabase();\n dbInitialized = true;\n }\n return await handleRequest(request);\n } catch (err) {\n const message = err instanceof Error ? err.message : \"Unknown server error\";\n console.error(\"[FATAL]\", message, (err as Error)?.stack);\n return errorResponse(`Internal server error: ${message}`, 500);\n }\n}\n","children",[],[68],"331c7a73-1be8-4ec6-8a21-c116376497cb","README.md","15621960-878a-11f1-ab28-1607ee4eb77e",18,["D",1784916255525],"# Multi-Tenant Commerce Engine\n\nA production-ready, multi-tenant e-commerce platform with a zero-cost AI chatbot that handles product inquiries and automates order booking. Runs on **Val Town** (cloud) or **Termux** (local) with the same codebase.\n\n## What It Does\n\n- **Multi-tenant isolation** — Each merchant gets their own store, products, and orders. Every SQL query is scoped by `merchant_id`, making cross-tenant reads structurally impossible.\n- **AI Chatbot** — A zero-cost NLP engine (no external API calls) that handles customer conversations: greetings, product inquiries, price/availability checks, and full order booking with automatic extraction of customer name, phone, address, and quantity.\n- **Automatic order booking** — When a customer completes a chat conversation, the system atomically creates an order, decrements stock, and dispatches a webhook notification to the merchant.\n- **Token-free buyer experience** — Buyers just visit a store URL. No login, no API key, no registration. They browse products and chat with the AI assistant.\n- **Embeddable chat widget** — Drop one `\n```\n\nThis creates a floating 💬 button that opens a chat window connected to your AI shopping assistant. Customers can browse products, ask about prices, and place orders — all without leaving your site.\n\n## Chatbot Conversation Flow\n\n```\nBROWSING\n ├── \"hi\" → Greeting + product catalog\n ├── \"what products do you have?\" → Product list\n ├── \"how much is X?\" → Price info\n ├── \"is X available?\" → Stock info\n └── \"I want to buy X\" → ──→ AWAITING_NAME\n │\n AWAITING_PHONE\n │\n AWAITING_ADDRESS\n │\n AWAITING_QUANTITY\n │\n ORDER BOOKED ✅\n + Webhook dispatched\n```\n\nThe chatbot automatically extracts customer information from messages:\n- **Names**: \"My name is John\", \"I'm Sarah\"\n- **Phones**: \"+1234567890\", \"(555) 123-4567\"\n- **Addresses**: \"123 Main St, New York\"\n- **Quantities**: \"2\", \"two\", \"3 units\", \"a dozen\"\n\n## Order Lifecycle\n\n1. **Customer chats** with the AI assistant\n2. **AI extracts** name, phone, address, and quantity\n3. **Order is booked** atomically (insert + stock decrement in one transaction)\n4. **Webhook fires** to the merchant's `webhook_url` with full order details\n5. **Merchant ships** the order manually and updates status via dashboard\n\nOrder statuses: `booked` → `dispatched` → `delivered` (or `cancelled`)\n\n## Security\n\n- Every database query includes `merchant_id` in the WHERE clause — cross-tenant data access is structurally prevented\n- API keys are 48-character hex strings generated with `crypto.getRandomValues`\n- Buyer-facing endpoints (`/api/chat`, `/api/store/:id`) require no authentication — only the merchant management endpoints require `X-Merchant-Key`\n- Webhook notifications include an `X-Merchant-Id` header for verification\n\n## Running on Termux — Detailed Guide\n\n### Prerequisites\n\n1. Install [Termux](https://f-droid.org/en/packages/com.termux/) from F-Droid (not Play Store)\n2. Update packages: `pkg update && pkg upgrade`\n3. Install Deno: `pkg install deno`\n4. Install git (optional): `pkg install git`\n\n### Step-by-Step\n\n```bash\n# Create a working directory\nmkdir ~/commerce && cd ~/commerce\n\n# Download the files (or clone if using git)\n# You need: main.ts, lib/, public/, termux/\n\n# Run the server\ndeno run --allow-net --allow-read --allow-write --unstable-node-apis termux/server.ts\n\n# The server starts on port 3000\n# Open http://localhost:3000/dashboard in your phone browser\n```\n\n### Termux Permissions\n\nThe `--allow-net` flag is needed for the HTTP server, `--allow-read` for serving HTML files, `--allow-write` for the SQLite database file, and `--unstable-node-apis` for `node:sqlite`.\n\n### Keeping the Server Running\n\n```bash\n# Install tmux to keep the server running in the background\npkg install tmux\n\n# Start a new session\ntmux new -s commerce\n\n# Run the server\ndeno run --allow-net --allow-read --allow-write --unstable-node-apis termux/server.ts\n\n# Detach: Ctrl+B then D\n# Reattach: tmux attach -t commerce\n```\n\n## Environment Variables\n\n| Variable | Default | Description |\n|----------|---------|-------------|\n| `PORT` | `3000` | HTTP server port (Termux/local only) |\n| `DB_PATH` | `commerce.db` | SQLite database file path (Termux/local only) |\n\n## Tech Stack\n\n- **Runtime**: Deno (Val Town & Termux)\n- **Database**: libSQL/SQLite (Val Town) or node:sqlite (Termux)\n- **Frontend**: Vanilla HTML/CSS/JS (no build step, no framework dependencies)\n- **AI**: Zero-cost pattern-matching NLP (no external API calls, no tokens needed)\n- **Webhook**: Standard HTTP POST with JSON payload\n\n## License\n\nMIT — free to use, modify, and distribute.\n",[],[79],["D",1784916184433],[89],[19],{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":90,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_75":91,"_18":92},["D",1784916184433],[],[19,36],"49823af4-1145-4c90-8ba3-d774515240e4","public","a0c76703-0abf-4f18-9323-1c64c80692b1",13,["D",1784915982133],[100,101,102],[94],{"_34":118,"_13":119,"_37":120,"_39":95,"_41":42,"_43":121,"_45":46,"_47":122,"_17":49,"_50":24,"_52":123,"_54":55,"_56":-5,"_75":124,"_18":125},{"_34":111,"_13":112,"_37":113,"_39":95,"_41":42,"_43":96,"_45":46,"_47":114,"_17":49,"_50":24,"_52":115,"_54":55,"_56":-5,"_75":116,"_18":117},{"_34":103,"_13":104,"_37":105,"_39":95,"_41":42,"_43":106,"_45":46,"_47":107,"_17":49,"_50":51,"_52":108,"_54":55,"_56":-5,"_75":109,"_18":110},"0564cdd5-83db-4659-bbca-d38f92374233","widget.js","a25a18aa-8789-11f1-b579-1607ee4eb77e",15,["D",1784916062917],"/**\n * Embeddable Chat Widget for Multi-Tenant Commerce Engine\n * ───────────────────────────────────────────────────────\n * Usage: Add this script tag to any HTML page:\n * \n *\n * Creates a floating 💬 button that opens a chat window connected\n * to the merchant's AI shopping assistant. No API key needed —\n * buyers just chat and order.\n */\n(function () {\n var scriptTag = document.currentScript;\n var url = new URL(scriptTag.src);\n var merchantId = url.searchParams.get(\"merchant\") || \"\";\n var baseUrl = url.origin;\n\n if (!merchantId) {\n console.error(\"[CommerceWidget] Missing ?merchant= parameter\");\n return;\n }\n\n var sessionId = null;\n var isOpen = false;\n\n // ── Styles ──────────────────────────────────────────────\n var css = document.createElement(\"style\");\n css.textContent = [\n \".cw-fab{position:fixed;bottom:24px;right:24px;width:60px;height:60px;border-radius:50%\",\n \"background:#6366f1;border:none;cursor:pointer;font-size:1.6rem;color:#fff;z-index:99998;\",\n \"box-shadow:0 4px 20px rgba(99,102,241,.4);transition:transform .15s}\",\n \".cw-fab:hover{transform:scale(1.08)}\",\n \".cw-win{position:fixed;bottom:100px;right:24px;width:380px;max-width:calc(100vw - 48px)\",\n \"height:520px;max-height:calc(100vh - 140px);background:#1a1d27;border:1px solid #2a2d3a\",\n \"border-radius:12px;display:none;flex-direction:column;z-index:99999;font-family:inherit\",\n \"box-shadow:0 8px 40px rgba(0,0,0,.4)}\",\n \".cw-win.open{display:flex}\",\n \".cw-hdr{padding:16px 20px;background:#6366f1;border-radius:12px 12px 0 0;font-weight:600\",\n \"font-size:1rem;color:#fff;display:flex;justify-content:space-between;align-items:center}\",\n \".cw-hdr button{background:none;border:none;color:#fff;cursor:pointer;font-size:1.2rem}\",\n \".cw-msgs{flex:1;overflow-y:auto;padding:16px;display:flex;flex-direction:column;gap:10px}\",\n \".cw-msg{max-width:80%;padding:10px 14px;border-radius:14px;font-size:.88rem;line-height:1.45\",\n \"word-wrap:break-word}\",\n \".cw-bot{background:#0f1117;border:1px solid #2a2d3a;color:#e4e6eb;align-self:flex-start;border-bottom-left-radius:4px;white-space:pre-wrap}\",\n \".cw-user{background:#6366f1;color:#fff;align-self:flex-end;border-bottom-right-radius:4px;white-space:pre-wrap}\",\n \".cw-sys{background:rgba(34,197,94,.12);border:1px solid #22c55e;color:#22c55e;align-self:center;text-align:center;max-width:90%;font-size:.82rem}\",\n \".cw-in{padding:12px;display:flex;gap:8px;border-top:1px solid #2a2d3a}\",\n \".cw-in input{flex:1;padding:10px 14px;background:#0f1117;border:1px solid #2a2d3a\",\n \"border-radius:8px;color:#e4e6eb;font-size:.88rem;outline:none;font-family:inherit}\",\n \".cw-in input:focus{border-color:#6366f1}\",\n \".cw-in button{padding:10px 18px;background:#6366f1;border:none;border-radius:8px\",\n \"color:#fff;cursor:pointer;font-weight:600;font-family:inherit}\",\n \".cw-in button:hover{background:#4f46e5}\",\n \".cw-in button:disabled{opacity:.5}\",\n \".cw-typing{color:#8b8e98;font-size:.8rem;padding:4px 14px}\",\n ].join(\";\");\n document.head.appendChild(css);\n\n // ── DOM ─────────────────────────────────────────────────\n var fab = document.createElement(\"button\");\n fab.className = \"cw-fab\";\n fab.textContent = \"💬\";\n fab.onclick = toggle;\n document.body.appendChild(fab);\n\n var win = document.createElement(\"div\");\n win.className = \"cw-win\";\n win.innerHTML =\n '

💬 AI Shopping Assistant

' +\n '

';\n document.body.appendChild(win);\n\n win.querySelector(\"#cw-close\").onclick = toggle;\n var inputEl = win.querySelector(\"#cw-input\");\n var sendBtn = win.querySelector(\"#cw-send\");\n var msgsEl = win.querySelector(\"#cw-msgs\");\n inputEl.addEventListener(\"keydown\", function (e) { if (e.key === \"Enter\") send(); });\n sendBtn.onclick = send;\n\n // ── Chat logic ──────────────────────────────────────────\n function toggle() {\n isOpen = !isOpen;\n win.classList.toggle(\"open\", isOpen);\n if (isOpen) {\n inputEl.focus();\n if (!msgsEl.children.length) {\n addMsg(\"cw-bot\", \"👋 Hello! Ask me about products, prices, or say \\\"I want to buy [product]\\\" to place an order.\");\n }\n }\n }\n\n function addMsg(cls, text) {\n var d = document.createElement(\"div\");\n d.className = \"cw-msg \" + cls;\n d.textContent = text;\n msgsEl.appendChild(d);\n msgsEl.scrollTop = 999999;\n return d;\n }\n\n async function send() {\n var msg = inputEl.value.trim();\n if (!msg) return;\n inputEl.value = \"\";\n addMsg(\"cw-user\", msg);\n sendBtn.disabled = true;\n var typingEl = addMsg(\"cw-bot\", \"…\");\n typingEl.classList.add(\"cw-typing\");\n try {\n var res = await fetch(baseUrl + \"/api/chat\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ merchant_id: merchantId, message: msg, session_id: sessionId }),\n });\n var data = await res.json();\n typingEl.remove();\n if (data.session_id) sessionId = data.session_id;\n addMsg(\"cw-bot\", data.reply);\n if (data.order_booked) {\n var sys = document.createElement(\"div\");\n sys.className = \"cw-msg cw-sys\";\n sys.textContent = \"✅ Order #\" + data.order_id + \" booked! The merchant has been notified.\";\n msgsEl.appendChild(sys);\n msgsEl.scrollTop = 999999;\n }\n } catch (e) {\n typingEl.remove();\n addMsg(\"cw-bot\", \"⚠️ Connection error. Please try again.\");\n }\n sendBtn.disabled = false;\n inputEl.focus();\n }\n})();\n",[],[94,104],"f1591a7e-cfcc-49e4-98ac-e4f5c5af2844","store.html","72339bce-8789-11f1-ba4d-1607ee4eb77e",["D",1784915982133],"\n\n\n\n\nStore\n\n\n\n

Loading store…

\n\n\n\n

\n 💬 AI Shopping Assistant\n \n

\n \n \n

\n\n\n\n\n",[],[94,112],"fc66cea2-cf2f-44f3-adcd-ce2744116f9b","dashboard.html","94cf6adc-8789-11f1-a92b-1607ee4eb77e",14,["D",1784916039959],"\n\n\n\n\nMerchant Dashboard — Commerce Engine\n\n\n\n

\n\n\n

🏪 Commerce Engine

\n\n \n \n\n \n

Register Your Store

\n Store Name *\n \n

\n Phone *\n \n

\n Country *\n \n

\n Webhook URL * (for order notifications)\n \n

\n \n

\n Already registered? Login here\n

\n\n\n

🏪

\n \n

\n\n

\n \n \n \n \n

\n\n \n

Recent Orders

\n\n \n

Add Product

Name *

Price * ($)

Description

Stock

Your Products

\n\n \n

All Orders

\n\n \n \n

\n\n

\n\n\n\n\n",[],[94,119],"5de464d3-7b28-4672-afcb-ef648aaf1e6d","lib","8391a2ad-4660-4274-aa7d-baf3ec4c023d",4,["D",1784915835212],[133,134,135,136,137,138,139,140,141,142],[127],{"_34":214,"_13":215,"_37":216,"_39":128,"_41":42,"_43":217,"_45":46,"_47":218,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":219,"_18":220},{"_34":206,"_13":207,"_37":208,"_39":128,"_41":42,"_43":209,"_45":46,"_47":210,"_17":49,"_50":51,"_52":211,"_54":55,"_56":-5,"_75":212,"_18":213},{"_34":198,"_13":199,"_37":200,"_39":128,"_41":42,"_43":201,"_45":46,"_47":202,"_17":49,"_50":51,"_52":203,"_54":55,"_56":-5,"_75":204,"_18":205},{"_34":190,"_13":191,"_37":192,"_39":128,"_41":42,"_43":193,"_45":46,"_47":194,"_17":49,"_50":51,"_52":195,"_54":55,"_56":-5,"_75":196,"_18":197},{"_34":182,"_13":183,"_37":184,"_39":128,"_41":42,"_43":185,"_45":46,"_47":186,"_17":49,"_50":51,"_52":187,"_54":55,"_56":-5,"_75":188,"_18":189},{"_34":174,"_13":175,"_37":176,"_39":128,"_41":42,"_43":177,"_45":46,"_47":178,"_17":49,"_50":51,"_52":179,"_54":55,"_56":-5,"_75":180,"_18":181},{"_34":166,"_13":167,"_37":168,"_39":128,"_41":42,"_43":169,"_45":46,"_47":170,"_17":49,"_50":51,"_52":171,"_54":55,"_56":-5,"_75":172,"_18":173},{"_34":158,"_13":159,"_37":160,"_39":128,"_41":42,"_43":161,"_45":46,"_47":162,"_17":49,"_50":51,"_52":163,"_54":55,"_56":-5,"_75":164,"_18":165},{"_34":151,"_13":152,"_37":153,"_39":128,"_41":42,"_43":129,"_45":46,"_47":154,"_17":49,"_50":51,"_52":155,"_54":55,"_56":-5,"_75":156,"_18":157},{"_34":143,"_13":144,"_37":145,"_39":128,"_41":42,"_43":146,"_45":46,"_47":147,"_17":49,"_50":51,"_52":148,"_54":55,"_56":-5,"_75":149,"_18":150},"14ae8848-8e4b-44c2-be86-0bb6c36c8ea1","utils.ts","270f37b6-8789-11f1-b06e-1607ee4eb77e",6,["D",1784915856065],"/**\n * Shared HTTP utilities: JSON responses, CORS, ID generation, auth.\n * Platform-agnostic — no Val Town-specific imports.\n */\n\nimport type { Merchant } from \"./types.ts\";\nimport { db } from \"./storage.ts\";\n\n// ── HTTP helpers ────────────────────────────────────────────────\n\nexport function json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, PUT, PATCH, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Merchant-Key\",\n },\n });\n}\n\nexport function errorResponse(message: string, status = 400): Response {\n return json({ error: message }, status);\n}\n\nexport function html(content: string, status = 200): Response {\n return new Response(content, {\n status,\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n}\n\nexport function corsPreflight(): Response {\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, PUT, PATCH, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Merchant-Key\",\n },\n });\n}\n\n// ── ID generators ───────────────────────────────────────────────\n\nexport function generateId(): string {\n return \"mrc_\" + crypto.randomUUID().replace(/-/g, \"\").slice(0, 16);\n}\n\nexport function generateApiKey(): string {\n const bytes = new Uint8Array(24);\n crypto.getRandomValues(bytes);\n return \"sk_\" +\n Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport function generateSessionId(): string {\n return \"ses_\" + crypto.randomUUID().replace(/-/g, \"\");\n}\n\n// ── Authentication ──────────────────────────────────────────────\n\nexport async function authenticateMerchant(\n apiKey: string,\n): Promise {\n if (!apiKey) return null;\n try {\n const result = await db().execute({\n sql: \"SELECT * FROM merchants WHERE api_key = ?\",\n args: [apiKey],\n });\n if (result.rows.length === 0) return null;\n return result.rows[0] as unknown as Merchant;\n } catch {\n return null;\n }\n}\n\nexport async function getMerchantById(\n merchantId: string,\n): Promise {\n try {\n const result = await db().execute({\n sql: \"SELECT * FROM merchants WHERE id = ?\",\n args: [merchantId],\n });\n if (result.rows.length === 0) return null;\n return result.rows[0] as unknown as Merchant;\n } catch {\n return null;\n }\n}\n",[],[127,144],"8098a05b-4d32-4186-a8c6-17623ed0b8a8","types.ts","1aa28078-8789-11f1-89ae-1607ee4eb77e",["D",1784915835212],"/**\n * Shared type definitions + database abstraction interface.\n * Used by both the Val Town server (main.ts) and the Termux/local\n * server (termux/server.ts) so business logic is platform-agnostic.\n */\n\nexport interface Merchant {\n id: string;\n name: string;\n phone: string;\n country: string;\n webhook_url: string;\n api_key: string;\n created_at: string;\n}\n\nexport interface Product {\n id: number;\n merchant_id: string;\n name: string;\n price: number;\n description: string;\n stock: number;\n category: string;\n image_url: string;\n created_at: string;\n}\n\nexport interface Order {\n id: number;\n merchant_id: string;\n customer_name: string;\n customer_phone: string;\n customer_address: string;\n product_id: number;\n product_name: string;\n quantity: number;\n total_price: number;\n status: string;\n created_at: string;\n}\n\nexport interface ChatSession {\n id: string;\n merchant_id: string;\n customer_name: string | null;\n customer_phone: string | null;\n customer_address: string | null;\n product_id: number | null;\n product_name: string | null;\n quantity: number | null;\n state: string;\n updated_at: string;\n}\n\nexport interface ChatResponse {\n reply: string;\n session_id: string;\n order_booked: boolean;\n order_id?: number;\n dispatch_sent?: boolean;\n dispatch_error?: string;\n}\n\n/** Result shape returned by IDatabase.execute() */\nexport interface QueryResult {\n rows: Record[];\n rowsAffected: number;\n lastInsertRowid: bigint | null;\n}\n\n/**\n * Platform-agnostic database interface.\n * Matches the Val Town sqlite API surface so the same\n * business-logic code works on Val Town (libSQL) and\n * locally on Termux (node:sqlite).\n */\nexport interface IDatabase {\n execute(\n sql: string | { sql: string; args?: unknown[] },\n args?: unknown[],\n ): Promise;\n batch(statements: { sql: string; args?: unknown[] }[]): Promise;\n}\n",[],[127,152],"71bb3b3c-127b-4241-adbc-89022d28f918","storage.ts","21cf6ec4-8789-11f1-8c02-1607ee4eb77e",5,["D",1784915847169],"/**\n * Storage singleton — the single point where database access is resolved.\n *\n * On Val Town: main.ts calls setDatabase() with a thin wrapper around\n * https://esm.town/v/std/sqlite/main.ts\n *\n * On Termux / local Deno: termux/server.ts calls setDatabase() with a\n * wrapper around node:sqlite (DatabaseSync).\n *\n * All other lib modules import { db } from here and never touch a\n * platform-specific import, keeping business logic 100% portable.\n */\n\nimport type { IDatabase } from \"./types.ts\";\n\nlet _db: IDatabase | null = null;\n\n/** Called once during server startup to inject the platform adapter. */\nexport function setDatabase(adapter: IDatabase): void {\n _db = adapter;\n}\n\n/** Returns the configured database. Throws if setDatabase() was never called. */\nexport function db(): IDatabase {\n if (!_db) {\n throw new Error(\n \"Database not configured. Call setDatabase() before using any DB operations.\",\n );\n }\n return _db;\n}\n",[],[127,159],"137a1e20-337a-4c66-8a82-63db965eb034","products.ts","34d90d22-8789-11f1-ab5b-1607ee4eb77e",9,["D",1784915879161],"/**\n * Product management — list, add, update, delete.\n * Every query includes merchant_id WHERE clause for tenant isolation.\n */\n\nimport type { Product } from \"./types.ts\";\nimport { db } from \"./storage.ts\";\nimport { json, errorResponse } from \"./utils.ts\";\n\nexport async function listProducts(merchantId: string): Promise {\n try {\n const result = await db().execute({\n sql: \"SELECT * FROM products WHERE merchant_id = ? ORDER BY created_at DESC\",\n args: [merchantId],\n });\n return json({ products: result.rows, count: result.rows.length });\n } catch (err) {\n return errorResponse(\n `Failed to list products: ${(err as Error).message}`,\n 500,\n );\n }\n}\n\nexport async function addProduct(\n merchantId: string,\n body: {\n name: string;\n price: number;\n description?: string;\n stock?: number;\n category?: string;\n image_url?: string;\n },\n): Promise {\n if (!body.name || body.price === undefined) {\n return errorResponse(\"Missing required fields: name, price\", 422);\n }\n\n if (body.price < 0) {\n return errorResponse(\"Price cannot be negative\", 422);\n }\n\n const createdAt = new Date().toISOString();\n\n try {\n await db().execute({\n sql: `INSERT INTO products (merchant_id, name, price, description, stock, category, image_url, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n merchantId,\n body.name,\n body.price,\n body.description || \"\",\n body.stock ?? 0,\n body.category || \"general\",\n body.image_url || \"\",\n createdAt,\n ],\n });\n\n const result = await db().execute({\n sql: \"SELECT * FROM products WHERE merchant_id = ? AND name = ? ORDER BY id DESC LIMIT 1\",\n args: [merchantId, body.name],\n });\n\n return json(\n { product: result.rows[0], message: \"Product added successfully\" },\n 201,\n );\n } catch (err) {\n return errorResponse(\n `Failed to add product: ${(err as Error).message}`,\n 500,\n );\n }\n}\n\nexport async function updateProduct(\n merchantId: string,\n productId: number,\n body: {\n name?: string;\n price?: number;\n description?: string;\n stock?: number;\n category?: string;\n image_url?: string;\n },\n): Promise {\n const fields: string[] = [];\n const args: unknown[] = [];\n\n if (body.name !== undefined) { fields.push(\"name = ?\"); args.push(body.name); }\n if (body.price !== undefined) { fields.push(\"price = ?\"); args.push(body.price); }\n if (body.description !== undefined) { fields.push(\"description = ?\"); args.push(body.description); }\n if (body.stock !== undefined) { fields.push(\"stock = ?\"); args.push(body.stock); }\n if (body.category !== undefined) { fields.push(\"category = ?\"); args.push(body.category); }\n if (body.image_url !== undefined) { fields.push(\"image_url = ?\"); args.push(body.image_url); }\n\n if (fields.length === 0) {\n return errorResponse(\"No fields to update\", 422);\n }\n\n args.push(productId, merchantId);\n\n try {\n const result = await db().execute({\n sql: `UPDATE products SET ${fields.join(\", \")} WHERE id = ? AND merchant_id = ?`,\n args,\n });\n\n if (result.rowsAffected === 0) {\n return errorResponse(\"Product not found or not owned by this merchant\", 404);\n }\n\n const updated = await db().execute({\n sql: \"SELECT * FROM products WHERE id = ? AND merchant_id = ?\",\n args: [productId, merchantId],\n });\n\n return json({ product: updated.rows[0], message: \"Product updated\" });\n } catch (err) {\n return errorResponse(\n `Failed to update product: ${(err as Error).message}`,\n 500,\n );\n }\n}\n\nexport async function deleteProduct(\n merchantId: string,\n productId: number,\n): Promise {\n try {\n const result = await db().execute({\n sql: \"DELETE FROM products WHERE id = ? AND merchant_id = ?\",\n args: [productId, merchantId],\n });\n\n if (result.rowsAffected === 0) {\n return errorResponse(\"Product not found or not owned by this merchant\", 404);\n }\n\n return json({ message: \"Product deleted successfully\" });\n } catch (err) {\n return errorResponse(\n `Failed to delete product: ${(err as Error).message}`,\n 500,\n );\n }\n}\n",[],[127,167],"4e973f43-bf2a-4a4b-9602-944a7db6d9d6","orders.ts","3b59fbca-8789-11f1-ba4d-1607ee4eb77e",10,["D",1784915890110],"/**\n * Order management — list, update status, atomic booking.\n * Every query includes merchant_id WHERE clause for tenant isolation.\n */\n\nimport type { Order, Product } from \"./types.ts\";\nimport { db } from \"./storage.ts\";\nimport { json, errorResponse } from \"./utils.ts\";\n\nexport async function listOrders(merchantId: string): Promise {\n try {\n const result = await db().execute({\n sql: \"SELECT * FROM orders WHERE merchant_id = ? ORDER BY created_at DESC\",\n args: [merchantId],\n });\n return json({ orders: result.rows, count: result.rows.length });\n } catch (err) {\n return errorResponse(\n `Failed to list orders: ${(err as Error).message}`,\n 500,\n );\n }\n}\n\nexport async function updateOrderStatus(\n merchantId: string,\n orderId: number,\n status: string,\n): Promise {\n const validStatuses = [\"booked\", \"dispatched\", \"delivered\", \"cancelled\"];\n if (!validStatuses.includes(status)) {\n return errorResponse(\n `Invalid status. Must be one of: ${validStatuses.join(\", \")}`,\n 422,\n );\n }\n\n try {\n const result = await db().execute({\n sql: \"UPDATE orders SET status = ? WHERE id = ? AND merchant_id = ?\",\n args: [status, orderId, merchantId],\n });\n\n if (result.rowsAffected === 0) {\n return errorResponse(\n \"Order not found or not owned by this merchant\",\n 404,\n );\n }\n\n return json({ message: \"Order status updated\", order_id: orderId, status });\n } catch (err) {\n return errorResponse(\n `Failed to update order: ${(err as Error).message}`,\n 500,\n );\n }\n}\n\n/**\n * Book an order atomically — inserts the order row and decrements\n * product stock in a single transaction.\n */\nexport async function bookOrder(\n merchantId: string,\n product: Product,\n customerName: string,\n customerPhone: string,\n customerAddress: string,\n quantity: number,\n): Promise<{ success: boolean; order?: Order; error?: string }> {\n const totalPrice = product.price * quantity;\n const createdAt = new Date().toISOString();\n\n try {\n await db().batch([\n {\n sql: `INSERT INTO orders (merchant_id, customer_name, customer_phone, customer_address, product_id, product_name, quantity, total_price, status, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'booked', ?)`,\n args: [merchantId, customerName, customerPhone, customerAddress, product.id, product.name, quantity, totalPrice, createdAt],\n },\n {\n sql: \"UPDATE products SET stock = stock - ? WHERE id = ? AND merchant_id = ?\",\n args: [quantity, product.id, merchantId],\n },\n ]);\n\n const result = await db().execute({\n sql: \"SELECT * FROM orders WHERE merchant_id = ? ORDER BY id DESC LIMIT 1\",\n args: [merchantId],\n });\n\n const order = result.rows[0] as unknown as Order;\n return { success: true, order };\n } catch (err) {\n return { success: false, error: (err as Error).message };\n }\n}\n",[],[127,175],"5008cc6c-506a-4362-8a76-466a4203fae1","merchants.ts","34d51bea-8789-11f1-a92b-1607ee4eb77e",8,["D",1784915879160],"/**\n * Merchant management — registration, profile, stats.\n */\n\nimport type { Merchant } from \"./types.ts\";\nimport { db } from \"./storage.ts\";\nimport {\n json,\n errorResponse,\n generateId,\n generateApiKey,\n} from \"./utils.ts\";\n\nexport async function registerMerchant(body: {\n name: string;\n phone: string;\n country: string;\n webhook_url: string;\n}): Promise {\n if (!body.name || !body.phone || !body.country || !body.webhook_url) {\n return errorResponse(\n \"Missing required fields: name, phone, country, webhook_url\",\n 422,\n );\n }\n\n const id = generateId();\n const apiKey = generateApiKey();\n const createdAt = new Date().toISOString();\n\n try {\n await db().execute({\n sql: `INSERT INTO merchants (id, name, phone, country, webhook_url, api_key, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [id, body.name, body.phone, body.country, body.webhook_url, apiKey, createdAt],\n });\n\n return json({\n merchant_id: id,\n api_key: apiKey,\n name: body.name,\n webhook_url: body.webhook_url,\n message: \"Merchant registered successfully. Store your API key securely.\",\n }, 201);\n } catch (err) {\n return errorResponse(\n `Merchant registration failed: ${(err as Error).message}`,\n 500,\n );\n }\n}\n\nexport async function getMerchantInfo(merchant: Merchant): Promise {\n return json({\n id: merchant.id,\n name: merchant.name,\n phone: merchant.phone,\n country: merchant.country,\n webhook_url: merchant.webhook_url,\n created_at: merchant.created_at,\n });\n}\n\n/** Public store info for the token-free storefront — no API key needed. */\nexport async function getPublicStoreInfo(\n merchantId: string,\n): Promise {\n try {\n const merchantResult = await db().execute({\n sql: \"SELECT id, name, country FROM merchants WHERE id = ?\",\n args: [merchantId],\n });\n if (merchantResult.rows.length === 0) {\n return errorResponse(\"Store not found\", 404);\n }\n\n const productResult = await db().execute({\n sql: \"SELECT id, name, price, description, stock, category, image_url FROM products WHERE merchant_id = ? ORDER BY created_at DESC\",\n args: [merchantId],\n });\n\n const orderResult = await db().execute({\n sql: \"SELECT COUNT(*) as count FROM orders WHERE merchant_id = ?\",\n args: [merchantId],\n });\n\n return json({\n merchant: merchantResult.rows[0],\n products: productResult.rows,\n product_count: productResult.rows.length,\n total_orders: (orderResult.rows[0] as Record)?.count ?? 0,\n });\n } catch (err) {\n return errorResponse(\n `Failed to fetch store info: ${(err as Error).message}`,\n 500,\n );\n }\n}\n\n/** Dashboard stats for the authenticated merchant. */\nexport async function getMerchantStats(\n merchant: Merchant,\n): Promise {\n try {\n const [productResult, orderResult, pendingResult, revenueResult] =\n await Promise.all([\n db().execute({\n sql: \"SELECT COUNT(*) as count FROM products WHERE merchant_id = ?\",\n args: [merchant.id],\n }),\n db().execute({\n sql: \"SELECT COUNT(*) as count FROM orders WHERE merchant_id = ?\",\n args: [merchant.id],\n }),\n db().execute({\n sql: \"SELECT COUNT(*) as count FROM orders WHERE merchant_id = ? AND status = 'booked'\",\n args: [merchant.id],\n }),\n db().execute({\n sql: \"SELECT COALESCE(SUM(total_price), 0) as revenue FROM orders WHERE merchant_id = ? AND status != 'cancelled'\",\n args: [merchant.id],\n }),\n ]);\n\n return json({\n product_count: (productResult.rows[0] as Record)?.count ?? 0,\n total_orders: (orderResult.rows[0] as Record)?.count ?? 0,\n pending_orders: (pendingResult.rows[0] as Record)?.count ?? 0,\n revenue: (revenueResult.rows[0] as Record)?.revenue ?? 0,\n });\n } catch (err) {\n return errorResponse(\n `Failed to fetch stats: ${(err as Error).message}`,\n 500,\n );\n }\n}\n",[],[127,183],"89b40d6c-b740-4bca-8a92-76b9b6d906f2","dispatch.ts","3b609d5e-8789-11f1-a92b-1607ee4eb77e",11,["D",1784915890112],"/**\n * Supplier dispatch notifications — sends a webhook to the merchant's\n * configured webhook_url when a new order is booked by the AI chatbot.\n */\n\nimport type { Merchant, Order } from \"./types.ts\";\n\nexport async function dispatchSupplierNotification(\n merchant: Merchant,\n order: Order,\n): Promise<{ success: boolean; error?: string }> {\n const payload = {\n event: \"new_order\",\n merchant_id: merchant.id,\n merchant_name: merchant.name,\n order_id: order.id,\n message: `New Order Booked by AI Agent. Customer Name: ${order.customer_name}, Address: ${order.customer_address}, Item: ${order.product_name} (Qty: ${order.quantity}). ACTION REQUIRED: Please ship this order MANUALLY now.`,\n order_details: {\n customer_name: order.customer_name,\n customer_phone: order.customer_phone,\n customer_address: order.customer_address,\n product_name: order.product_name,\n quantity: order.quantity,\n total_price: order.total_price,\n order_id: order.id,\n created_at: order.created_at,\n },\n timestamp: new Date().toISOString(),\n };\n\n try {\n const response = await fetch(merchant.webhook_url, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Order-Source\": \"AI-Agent\",\n \"X-Merchant-Id\": merchant.id,\n },\n body: JSON.stringify(payload),\n signal: AbortSignal.timeout(10000),\n });\n\n if (!response.ok) {\n return { success: false, error: `Webhook returned ${response.status}` };\n }\n\n return { success: true };\n } catch (err) {\n return { success: false, error: (err as Error).message };\n }\n}\n",[],[127,191],"4f23ea0c-4b95-4a42-b355-256e3bb3b3e0","db.ts","2aac0fb6-8789-11f1-a92b-1607ee4eb77e",7,["D",1784915862125],"/**\n * Database schema initialization.\n * Creates all tables and indexes if they don't exist.\n * Called once on server startup (idempotent).\n */\n\nimport { db } from \"./storage.ts\";\n\nexport async function initDatabase(): Promise {\n const database = db();\n\n await database.execute(`\n CREATE TABLE IF NOT EXISTS merchants (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n phone TEXT NOT NULL,\n country TEXT NOT NULL,\n webhook_url TEXT NOT NULL,\n api_key TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL\n )\n `);\n\n await database.execute(`\n CREATE TABLE IF NOT EXISTS products (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n merchant_id TEXT NOT NULL,\n name TEXT NOT NULL,\n price REAL NOT NULL,\n description TEXT DEFAULT '',\n stock INTEGER DEFAULT 0,\n category TEXT DEFAULT 'general',\n image_url TEXT DEFAULT '',\n created_at TEXT NOT NULL,\n FOREIGN KEY (merchant_id) REFERENCES merchants(id)\n )\n `);\n\n await database.execute(`\n CREATE TABLE IF NOT EXISTS orders (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n merchant_id TEXT NOT NULL,\n customer_name TEXT NOT NULL,\n customer_phone TEXT NOT NULL,\n customer_address TEXT NOT NULL,\n product_id INTEGER NOT NULL,\n product_name TEXT NOT NULL,\n quantity INTEGER NOT NULL,\n total_price REAL NOT NULL,\n status TEXT DEFAULT 'booked',\n created_at TEXT NOT NULL,\n FOREIGN KEY (merchant_id) REFERENCES merchants(id),\n FOREIGN KEY (product_id) REFERENCES products(id)\n )\n `);\n\n await database.execute(`\n CREATE TABLE IF NOT EXISTS chat_sessions (\n id TEXT PRIMARY KEY,\n merchant_id TEXT NOT NULL,\n customer_name TEXT,\n customer_phone TEXT,\n customer_address TEXT,\n product_id INTEGER,\n product_name TEXT,\n quantity INTEGER,\n state TEXT DEFAULT 'browsing',\n updated_at TEXT NOT NULL,\n FOREIGN KEY (merchant_id) REFERENCES merchants(id)\n )\n `);\n\n await database.execute(\n \"CREATE INDEX IF NOT EXISTS idx_products_merchant ON products(merchant_id)\",\n );\n await database.execute(\n \"CREATE INDEX IF NOT EXISTS idx_orders_merchant ON orders(merchant_id)\",\n );\n await database.execute(\n \"CREATE INDEX IF NOT EXISTS idx_chat_sessions_merchant ON chat_sessions(merchant_id)\",\n );\n}\n",[],[127,199],"20fa906a-ff34-4b8a-9b1b-bce2d1417bd6","chatbot.ts","59da5a9a-8789-11f1-b06e-1607ee4eb77e",12,["D",1784915941286],"/**\n * AI Chatbot Engine — zero-cost contextual NLP with conversation state machine.\n *\n * States: browsing → awaiting_name → awaiting_phone → awaiting_address →\n * awaiting_quantity → order finalized\n *\n * No external API calls. Intent detection, product matching, and info\n * extraction are all done with pattern matching heuristics.\n */\n\nimport type {\n Merchant,\n Product,\n ChatSession,\n ChatResponse,\n} from \"./types.ts\";\nimport { db } from \"./storage.ts\";\nimport {\n generateSessionId,\n getMerchantById,\n} from \"./utils.ts\";\nimport { bookOrder } from \"./orders.ts\";\nimport { dispatchSupplierNotification } from \"./dispatch.ts\";\n\n// ── Intent keywords ─────────────────────────────────────────────\n\nconst GREETING_WORDS = [\"hi\", \"hello\", \"hey\", \"greetings\", \"good morning\", \"good afternoon\", \"good evening\", \"salam\", \"hola\", \"namaste\"];\nconst PRODUCT_INQUIRY_WORDS = [\"what do you have\", \"show products\", \"catalog\", \"catalogue\", \"list products\", \"what can i buy\", \"what do you sell\", \"show me\", \"browse\", \"items\", \"what items\"];\nconst PRICE_WORDS = [\"price\", \"cost\", \"how much\", \"how many dollars\", \"rate\", \"pricing\"];\nconst AVAILABILITY_WORDS = [\"available\", \"in stock\", \"do you have\", \"got any\", \"is there\", \"still have\"];\nconst PURCHASE_WORDS = [\"buy\", \"order\", \"purchase\", \"want\", \"need\", \"get this\", \"ship to me\", \"deliver\", \"i'd like\", \"i would like\", \"take\", \"grab\", \"book\"];\nconst CONFIRM_WORDS = [\"yes\", \"confirm\", \"correct\", \"that's right\", \"thats right\", \"yeah\", \"yep\", \"sure\", \"ok\", \"okay\"];\nconst CANCEL_WORDS = [\"no\", \"cancel\", \"never mind\", \"nevermind\", \"stop\", \"abort\", \"exit\", \"quit\"];\n\nconst PHONE_REGEX = /(\\+?\\d{1,3}[-.\\s]?)?\$?\\d{2,4}\$?[-.\\s]?\\d{3,5}[-.\\s]?\\d{3,5}/g;\n\n// ── Extraction helpers ──────────────────────────────────────────\n\nfunction extractQuantity(text: string): number | null {\n const lower = text.toLowerCase();\n const numberWords: Record = {\n \"one\": 1, \"two\": 2, \"three\": 3, \"four\": 4, \"five\": 5,\n \"six\": 6, \"seven\": 7, \"eight\": 8, \"nine\": 9, \"ten\": 10,\n \"a dozen\": 12, \"dozen\": 12,\n };\n\n const qtyPattern = /(?:quantity|qty)[:\\s]+(\\d+)/i;\n const qtyMatch = lower.match(qtyPattern);\n if (qtyMatch) return parseInt(qtyMatch[1]);\n\n const unitPattern = /(\\d+)\\s*(?:units?|pieces?|items?|pcs)/i;\n const unitMatch = lower.match(unitPattern);\n if (unitMatch) return parseInt(unitMatch[1]);\n\n for (const [word, num] of Object.entries(numberWords)) {\n if (lower.includes(word)) return num;\n }\n\n const numMatch = text.match(/\\b(\\d+)\\b/);\n if (numMatch) return parseInt(numMatch[1]);\n\n return null;\n}\n\nfunction extractPhone(text: string): string | null {\n const matches = text.match(PHONE_REGEX);\n if (matches && matches.length > 0) {\n const phone = matches[0].trim();\n const digits = phone.replace(/\\D/g, \"\");\n if (digits.length >= 7) return phone;\n }\n return null;\n}\n\nfunction looksLikeAddress(text: string): boolean {\n const lower = text.toLowerCase();\n const addressIndicators = [\n \"street\", \"st\", \"avenue\", \"ave\", \"road\", \"rd\", \"lane\", \"ln\",\n \"block\", \"sector\", \"house\", \"apartment\", \"apt\", \"floor\", \"flat\",\n \"building\", \"city\", \"town\", \"district\", \"zone\", \"phase\",\n \"near\", \"opposite\", \"beside\", \"behind\", \"plot\", \"no.\", \"number\",\n ];\n const hasNumber = /\\d/.test(text);\n const hasIndicator = addressIndicators.some((ind) => lower.includes(ind));\n return (hasNumber && hasIndicator) || (hasNumber && text.split(/\\s+/).length >= 3) || (hasIndicator && text.split(/\\s+/).length >= 2);\n}\n\n// ── Product matching ────────────────────────────────────────────\n\nfunction matchProducts(message: string, products: Product[]): Product[] {\n const lower = message.toLowerCase();\n const matches: Product[] = [];\n\n for (const product of products) {\n const productName = product.name.toLowerCase();\n const productDesc = product.description.toLowerCase();\n const productCategory = product.category.toLowerCase();\n\n if (lower.includes(productName)) { matches.push(product); continue; }\n\n const nameWords = productName.split(/\\s+/).filter((w) => w.length > 3);\n const matchedWords = nameWords.filter((w) => lower.includes(w));\n if (matchedWords.length >= 1 && nameWords.length > 0) { matches.push(product); continue; }\n\n if (productCategory !== \"general\" && lower.includes(productCategory)) { matches.push(product); continue; }\n\n if (productDesc && productDesc.length > 0) {\n const descWords = productDesc.split(/\\s+/).filter((w) => w.length > 4);\n const matchedDescWords = descWords.filter((w) => lower.includes(w));\n if (matchedDescWords.length >= 2) { matches.push(product); continue; }\n }\n }\n return matches;\n}\n\n// ── Intent detection ────────────────────────────────────────────\n\nfunction hasPurchaseIntent(message: string): boolean {\n return PURCHASE_WORDS.some((w) => message.toLowerCase().includes(w));\n}\nfunction isGreeting(message: string): boolean {\n const lower = message.toLowerCase().trim();\n return GREETING_WORDS.some((w) => lower === w || lower.startsWith(w + \" \") || lower.startsWith(w + \"!\"));\n}\nfunction isProductInquiry(message: string): boolean {\n return PRODUCT_INQUIRY_WORDS.some((w) => message.toLowerCase().includes(w));\n}\nfunction isPriceInquiry(message: string): boolean {\n return PRICE_WORDS.some((w) => message.toLowerCase().includes(w));\n}\nfunction isAvailabilityInquiry(message: string): boolean {\n return AVAILABILITY_WORDS.some((w) => message.toLowerCase().includes(w));\n}\nfunction isCancellation(message: string): boolean {\n const lower = message.toLowerCase().trim();\n return CANCEL_WORDS.some((w) => lower === w || lower.startsWith(w));\n}\n\n// ── Formatting ──────────────────────────────────────────────────\n\nfunction formatProductList(products: Product[]): string {\n if (products.length === 0) return \"I'm sorry, but this store currently has no products in the catalog. Please check back soon!\";\n let text = \"Here are the available products:\\n\\n\";\n for (const p of products) {\n const stockInfo = p.stock > 0 ? `✅ In stock (${p.stock} available)` : \"❌ Out of stock\";\n text += `📦 **${p.name}**\\n Price: $${p.price.toFixed(2)}\\n`;\n if (p.description) text += ` ${p.description}\\n`;\n text += ` ${stockInfo}\\n\\n`;\n }\n text += \"To place an order, just say 'I want to buy [product name]' and I'll help you check out!\";\n return text;\n}\n\n// ── Session management ──────────────────────────────────────────\n\nasync function getOrCreateSession(\n sessionId: string | undefined,\n merchantId: string,\n): Promise {\n if (sessionId) {\n try {\n const result = await db().execute({\n sql: \"SELECT * FROM chat_sessions WHERE id = ? AND merchant_id = ?\",\n args: [sessionId, merchantId],\n });\n if (result.rows.length > 0) {\n return result.rows[0] as unknown as ChatSession;\n }\n } catch { /* fall through */ }\n }\n\n const newId = sessionId || generateSessionId();\n const now = new Date().toISOString();\n\n await db().execute({\n sql: `INSERT OR IGNORE INTO chat_sessions (id, merchant_id, state, updated_at) VALUES (?, ?, 'browsing', ?)`,\n args: [newId, merchantId, now],\n });\n\n return {\n id: newId, merchant_id: merchantId, customer_name: null,\n customer_phone: null, customer_address: null, product_id: null,\n product_name: null, quantity: null, state: \"browsing\", updated_at: now,\n };\n}\n\nasync function updateSession(\n session: ChatSession,\n updates: Partial,\n): Promise {\n const now = new Date().toISOString();\n Object.assign(session, updates, { updated_at: now });\n\n await db().execute({\n sql: `UPDATE chat_sessions SET customer_name = ?, customer_phone = ?, customer_address = ?, product_id = ?, product_name = ?, quantity = ?, state = ?, updated_at = ? WHERE id = ? AND merchant_id = ?`,\n args: [\n session.customer_name, session.customer_phone, session.customer_address,\n session.product_id, session.product_name, session.quantity,\n session.state, now, session.id, session.merchant_id,\n ],\n });\n}\n\nasync function deleteSession(sessionId: string, merchantId: string): Promise {\n try {\n await db().execute({\n sql: \"DELETE FROM chat_sessions WHERE id = ? AND merchant_id = ?\",\n args: [sessionId, merchantId],\n });\n } catch { /* non-fatal */ }\n}\n\n// ── Order finalization ──────────────────────────────────────────\n\nasync function finalizeOrder(\n session: ChatSession,\n product: Product,\n merchant: Merchant,\n): Promise {\n const name = session.customer_name!;\n const phone = session.customer_phone!;\n const address = session.customer_address!;\n const qty = session.quantity || 1;\n\n const bookingResult = await bookOrder(merchant.id, product, name, phone, address, qty);\n\n if (!bookingResult.success || !bookingResult.order) {\n return {\n reply: `I'm sorry, there was an issue booking your order: ${bookingResult.error}. Please try again or contact ${merchant.name} directly at ${merchant.phone}.`,\n session_id: session.id, order_booked: false,\n };\n }\n\n const dispatchResult = await dispatchSupplierNotification(merchant, bookingResult.order);\n await deleteSession(session.id, merchant.id);\n\n const orderConfirmation = `✅ **Order Booked Successfully!**\\n\\n` +\n `Order ID: #${bookingResult.order.id}\\n` +\n `Product: ${product.name}\\nQuantity: ${qty}\\n` +\n `Total: $${(product.price * qty).toFixed(2)}\\n\\n` +\n `Delivery Details:\\nName: ${name}\\nPhone: ${phone}\\nAddress: ${address}\\n\\n` +\n `${dispatchResult.success ? \"📦 Your order has been forwarded to the supplier for manual shipping. You'll be contacted soon!\" : \"⚠️ Your order is confirmed, but there was a delay notifying the supplier. The merchant has your order on record.\"}\\n\\n` +\n `Thank you for shopping with ${merchant.name}! 🛍️`;\n\n return {\n reply: orderConfirmation, session_id: generateSessionId(),\n order_booked: true, order_id: bookingResult.order.id,\n dispatch_sent: dispatchResult.success,\n dispatch_error: dispatchResult.success ? undefined : dispatchResult.error,\n };\n}\n\n// ── Main conversation processor ─────────────────────────────────\n\nexport async function processChatMessage(\n merchantId: string,\n message: string,\n sessionId?: string,\n): Promise {\n const merchant = await getMerchantById(merchantId);\n if (!merchant) {\n return { reply: \"Error: This store is not available. Please contact support.\", session_id: sessionId || \"\", order_booked: false };\n }\n\n let products: Product[] = [];\n try {\n const productResult = await db().execute({\n sql: \"SELECT * FROM products WHERE merchant_id = ? ORDER BY name\",\n args: [merchantId],\n });\n products = productResult.rows as unknown as Product[];\n } catch {\n return { reply: \"I'm having trouble accessing the product catalog right now. Please try again in a moment.\", session_id: sessionId || \"\", order_booked: false };\n }\n\n const session = await getOrCreateSession(sessionId, merchantId);\n\n // ── Cancellation ──────────────────────────────────────────────\n if (isCancellation(message) && session.state !== \"browsing\") {\n await deleteSession(session.id, merchantId);\n return { reply: \"Your order has been cancelled. Let me know if you'd like to browse or buy something else!\", session_id: generateSessionId(), order_booked: false };\n }\n\n // ── BROWSING state ────────────────────────────────────────────\n if (session.state === \"browsing\") {\n if (isGreeting(message)) {\n const welcomeMsg = products.length > 0\n ? `Hello! Welcome to ${merchant.name}! 🛍️\\n\\n${formatProductList(products)}`\n : `Hello! Welcome to ${merchant.name}! 🛍️\\n\\nOur catalog is currently being updated. Please check back soon!`;\n return { reply: welcomeMsg, session_id: session.id, order_booked: false };\n }\n\n if (isProductInquiry(message)) {\n return { reply: formatProductList(products), session_id: session.id, order_booked: false };\n }\n\n if (isPriceInquiry(message)) {\n const matched = matchProducts(message, products);\n if (matched.length > 0) {\n let reply = \"Here are the prices:\\n\\n\";\n for (const p of matched) {\n reply += `📦 ${p.name}: $${p.price.toFixed(2)}\\n`;\n reply += p.stock > 0 ? ` ✅ In stock (${p.stock} available)\\n` : ` ❌ Out of stock\\n`;\n }\n reply += \"\\nTo order, say 'I want to buy [product name]'.\";\n return { reply, session_id: session.id, order_booked: false };\n }\n return { reply: \"Which product are you asking about? Here's what we have:\\n\\n\" + formatProductList(products), session_id: session.id, order_booked: false };\n }\n\n if (isAvailabilityInquiry(message)) {\n const matched = matchProducts(message, products);\n if (matched.length > 0) {\n let reply = \"Availability:\\n\\n\";\n for (const p of matched) {\n reply += p.stock > 0 ? `✅ ${p.name} — ${p.stock} in stock\\n` : `❌ ${p.name} — Out of stock\\n`;\n }\n return { reply, session_id: session.id, order_booked: false };\n }\n return { reply: \"Which product are you checking? Here's our catalog:\\n\\n\" + formatProductList(products), session_id: session.id, order_booked: false };\n }\n\n if (hasPurchaseIntent(message)) {\n const matched = matchProducts(message, products);\n if (matched.length === 0) {\n return { reply: `I'd love to help you place an order! Which product would you like to buy? Here's what we have:\\n\\n${formatProductList(products)}`, session_id: session.id, order_booked: false };\n }\n\n const product = matched[0];\n if (product.stock <= 0) {\n return { reply: `I'm sorry, ${product.name} is currently out of stock. Would you like to see other available products?`, session_id: session.id, order_booked: false };\n }\n\n const phone = extractPhone(message);\n const qty = extractQuantity(message) || 1;\n const lowerMsg = message.toLowerCase().trim();\n\n let extractedName: string | null = null;\n const nameMatch = message.match(/(?:name is|i am|i'm|my name is)\\s+([A-Za-z\\s]{2,40})/i);\n if (nameMatch) extractedName = nameMatch[1].trim();\n\n let extractedAddress: string | null = null;\n const addrMatch = message.match(/(?:address is|live at|deliver to|ship to|at)\\s+(.{5,120})/i);\n if (addrMatch) extractedAddress = addrMatch[1].trim();\n\n await updateSession(session, {\n product_id: product.id, product_name: product.name, quantity: qty,\n customer_name: extractedName, customer_phone: phone,\n customer_address: extractedAddress, state: \"ordering\",\n });\n\n if (!extractedName) {\n await updateSession(session, { state: \"awaiting_name\" });\n return { reply: `Great choice! You want to order ${product.name} (${qty} × $${product.price.toFixed(2)} = $${(product.price * qty).toFixed(2)}).\\n\\nTo complete your order, I'll need a few details.\\n\\nWhat is your full name?`, session_id: session.id, order_booked: false };\n }\n if (!phone) {\n await updateSession(session, { state: \"awaiting_phone\" });\n return { reply: `Thank you, ${extractedName}! What is your phone number?`, session_id: session.id, order_booked: false };\n }\n if (!extractedAddress) {\n await updateSession(session, { state: \"awaiting_address\" });\n return { reply: `Got it! What is your delivery address?`, session_id: session.id, order_booked: false };\n }\n\n const updatedSession = { ...session, customer_name: extractedName, customer_phone: phone, customer_address: extractedAddress, product_id: product.id, product_name: product.name, quantity: qty };\n return await finalizeOrder(updatedSession as ChatSession, product, merchant);\n }\n\n const matched = matchProducts(message, products);\n if (matched.length > 0) {\n let reply = \"I found these products that match:\\n\\n\";\n for (const p of matched) {\n reply += `📦 ${p.name} — $${p.price.toFixed(2)}`;\n if (p.description) reply += ` (${p.description})`;\n reply += p.stock > 0 ? ` ✅\\n` : ` ❌ Out of stock\\n`;\n }\n reply += \"\\nWould you like to buy any of these? Just say 'I want to buy [product name]'.\";\n return { reply, session_id: session.id, order_booked: false };\n }\n\n return { reply: `I'm here to help you with your shopping at ${merchant.name}! You can:\\n• Ask \"what products do you have?\" to browse\\n• Ask about prices or availability\\n• Say \"I want to buy [product name]\" to place an order\\n\\nHow can I assist you today?`, session_id: session.id, order_booked: false };\n }\n\n // ── AWAITING_NAME state ───────────────────────────────────────\n if (session.state === \"awaiting_name\") {\n const name = message.trim().replace(/^(my name is|name is|i am|i'm)\\s+/i, \"\").trim();\n if (name.length < 2) {\n return { reply: \"Please provide a valid name (at least 2 characters). What is your full name?\", session_id: session.id, order_booked: false };\n }\n await updateSession(session, { customer_name: name, state: \"awaiting_phone\" });\n const phone = extractPhone(message);\n if (phone && phone !== name) {\n await updateSession(session, { customer_phone: phone, state: \"awaiting_address\" });\n return { reply: `Thank you, ${name}! I got your phone number: ${phone}. What is your delivery address?`, session_id: session.id, order_booked: false };\n }\n return { reply: `Thank you, ${name}! What is your phone number?`, session_id: session.id, order_booked: false };\n }\n\n // ── AWAITING_PHONE state ──────────────────────────────────────\n if (session.state === \"awaiting_phone\") {\n const phone = extractPhone(message);\n if (!phone) {\n return { reply: \"I couldn't detect a valid phone number. Please enter your phone number (e.g., +1234567890).\", session_id: session.id, order_booked: false };\n }\n await updateSession(session, { customer_phone: phone, state: \"awaiting_address\" });\n return { reply: `Got it! Your phone number is ${phone}. What is your delivery address?`, session_id: session.id, order_booked: false };\n }\n\n // ── AWAITING_ADDRESS state ────────────────────────────────────\n if (session.state === \"awaiting_address\") {\n const address = message.trim().replace(/^(my address is|address is|deliver to|ship to|at)\\s+/i, \"\").trim();\n if (address.length < 5) {\n return { reply: \"Please provide a complete delivery address (street, city, etc.). What is your address?\", session_id: session.id, order_booked: false };\n }\n await updateSession(session, { customer_address: address, state: \"awaiting_quantity\" });\n return { reply: `Perfect! How many units of ${session.product_name} would you like to order? (Just type a number, or say '1' for one unit)`, session_id: session.id, order_booked: false };\n }\n\n // ── AWAITING_QUANTITY state ───────────────────────────────────\n if (session.state === \"awaiting_quantity\") {\n const qty = extractQuantity(message);\n const finalQty = qty || 1;\n if (qty && qty < 1) {\n return { reply: \"Please enter a valid quantity (1 or more). How many would you like?\", session_id: session.id, order_booked: false };\n }\n\n let product: Product | null = null;\n if (session.product_id) {\n try {\n const result = await db().execute({\n sql: \"SELECT * FROM products WHERE id = ? AND merchant_id = ?\",\n args: [session.product_id, merchantId],\n });\n if (result.rows.length > 0) product = result.rows[0] as unknown as Product;\n } catch { /* fall through */ }\n }\n\n if (!product) {\n await updateSession(session, { state: \"browsing\" });\n return { reply: \"Sorry, the product you selected is no longer available. Would you like to browse our catalog again?\", session_id: session.id, order_booked: false };\n }\n\n if (finalQty > product.stock) {\n return { reply: `I'm sorry, we only have ${product.stock} units of ${product.name} in stock. Would you like to order ${product.stock} instead? (Type the quantity or say 'cancel')`, session_id: session.id, order_booked: false };\n }\n\n await updateSession(session, { quantity: finalQty });\n const updatedSession = { ...session, quantity: finalQty };\n return await finalizeOrder(updatedSession as ChatSession, product, merchant);\n }\n\n // ── ORDERING / unknown state — reset ──────────────────────────\n await updateSession(session, { state: \"browsing\" });\n return { reply: \"How can I help you? You can browse products or place an order.\", session_id: session.id, order_booked: false };\n}\n",[],[127,207],"a56e75cf-cf7b-44b1-9434-07bd10e8d3c9","untitled-folder-6564","a1571672-878b-11f1-bb15-1607ee4eb77e",19,["D",1784916920212],[],[127,215],"9de191f9-48f6-48da-aac9-14e998a3990a",["D",1784711864701],"deletedAt","legacyEnvVars","privacy","httpPrivacy","description","Multi-tenant e-commerce with AI chatbot, storefront & dashboard","imageUrl","userId","e6b73de9-15b6-4de0-855b-91420681c7c7","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019f8918-ca48-713a-b13d-08dd6e21c61e","tursoName","9de191f948f648daaac914e998a3990a","tursoHostname","9de191f948f648daaac914e998a3990a-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789485645684],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_276":271},"org",{"_11":12,"_270":271,"_272":271,"_230":231,"_273":274,"_275":55},"branch",{"_17":217,"_13":16,"_34":42,"_262":221,"_263":-5,"_264":-5,"_265":-5,"_266":-5,"_267":-5,"_268":14,"_269":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":221,"_13":14,"_47":366,"_223":-5,"_224":55,"_225":94,"_226":94,"_227":228,"_229":-5,"_230":231,"_232":69,"_233":46,"_234":-5,"_235":-5,"_236":49,"_237":238,"_239":240,"_241":242,"_243":367,"_245":-5,"_246":247,"_248":247,"_249":250,"_251":250,"_252":250,"_253":247,"_254":247,"_255":368,"_257":369,"_259":370,"_261":55},[309,320,324,326,327],"files",[309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327],"counts",{"_299":49,"_300":301,"_302":49,"_32":303,"_304":305},[297],{"_34":58,"_13":19,"_37":40,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":59,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_18":296},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_18":298},[19,36],"pulls","branches",1,"forks",{"_306":49,"_308":49},"connections",{"_306":49,"_307":49},"count","unfilledCount","emptyCount",{"_34":126,"_13":127,"_37":128,"_39":-5,"_41":42,"_43":129,"_45":46,"_47":130,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":364,"_18":365},{"_34":214,"_13":215,"_37":216,"_39":128,"_41":42,"_43":217,"_45":46,"_47":218,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":362,"_18":363},{"_34":206,"_13":207,"_37":208,"_39":128,"_41":42,"_43":209,"_45":46,"_47":210,"_17":49,"_50":51,"_52":211,"_54":55,"_56":-5,"_75":360,"_18":361},{"_34":198,"_13":199,"_37":200,"_39":128,"_41":42,"_43":201,"_45":46,"_47":202,"_17":49,"_50":51,"_52":203,"_54":55,"_56":-5,"_75":358,"_18":359},{"_34":190,"_13":191,"_37":192,"_39":128,"_41":42,"_43":193,"_45":46,"_47":194,"_17":49,"_50":51,"_52":195,"_54":55,"_56":-5,"_75":356,"_18":357},{"_34":182,"_13":183,"_37":184,"_39":128,"_41":42,"_43":185,"_45":46,"_47":186,"_17":49,"_50":51,"_52":187,"_54":55,"_56":-5,"_75":354,"_18":355},{"_34":174,"_13":175,"_37":176,"_39":128,"_41":42,"_43":177,"_45":46,"_47":178,"_17":49,"_50":51,"_52":179,"_54":55,"_56":-5,"_75":352,"_18":353},{"_34":166,"_13":167,"_37":168,"_39":128,"_41":42,"_43":169,"_45":46,"_47":170,"_17":49,"_50":51,"_52":171,"_54":55,"_56":-5,"_75":350,"_18":351},{"_34":158,"_13":159,"_37":160,"_39":128,"_41":42,"_43":161,"_45":46,"_47":162,"_17":49,"_50":51,"_52":163,"_54":55,"_56":-5,"_75":348,"_18":349},{"_34":151,"_13":152,"_37":153,"_39":128,"_41":42,"_43":129,"_45":46,"_47":154,"_17":49,"_50":51,"_52":155,"_54":55,"_56":-5,"_75":346,"_18":347},{"_34":143,"_13":144,"_37":145,"_39":128,"_41":42,"_43":146,"_45":46,"_47":147,"_17":49,"_50":51,"_52":148,"_54":55,"_56":-5,"_75":344,"_18":345},{"_34":93,"_13":94,"_37":95,"_39":-5,"_41":42,"_43":96,"_45":46,"_47":97,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":342,"_18":343},{"_34":118,"_13":119,"_37":120,"_39":95,"_41":42,"_43":121,"_45":46,"_47":122,"_17":49,"_50":24,"_52":123,"_54":55,"_56":-5,"_75":340,"_18":341},{"_34":111,"_13":112,"_37":113,"_39":95,"_41":42,"_43":96,"_45":46,"_47":114,"_17":49,"_50":24,"_52":115,"_54":55,"_56":-5,"_75":338,"_18":339},{"_34":103,"_13":104,"_37":105,"_39":95,"_41":42,"_43":106,"_45":46,"_47":107,"_17":49,"_50":51,"_52":108,"_54":55,"_56":-5,"_75":336,"_18":337},{"_34":58,"_13":19,"_37":40,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":86,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":334,"_18":335},{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":90,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_75":332,"_18":333},{"_34":78,"_13":79,"_37":80,"_39":-5,"_41":42,"_43":81,"_45":46,"_47":82,"_17":49,"_50":24,"_52":83,"_54":55,"_56":-5,"_75":330,"_18":331},{"_34":67,"_13":68,"_37":69,"_39":-5,"_41":42,"_43":70,"_45":46,"_47":71,"_17":72,"_50":73,"_52":74,"_54":55,"_56":-5,"_75":328,"_18":329},[],[68],[],[79],[],[19,36],[325],[19],[],[94,104],[],[94,112],[],[94,119],[321,322,323],[94],[],[127,144],[],[127,152],[],[127,159],[],[127,167],[],[127,175],[],[127,183],[],[127,191],[],[127,199],[],[127,207],[],[127,215],[310,311,312,313,314,315,316,317,318,319],[127],["D",1784711864701],["D",1789485645684],{"_11":12,"_276":271},{"_11":12,"_270":271,"_272":271,"_230":231,"_273":274,"_275":55},{"_17":217,"_13":16,"_34":42,"_262":221,"_263":-5,"_264":-5,"_265":-5,"_266":-5,"_267":-5,"_268":14,"_269":12},"ctx",{"_255":-5,"_293":404,"_405":406,"_407":408,"_409":55,"_410":55,"_411":55,"_412":46,"_413":-5,"_414":-7,"_415":-7,"_416":49,"_417":55,"_418":55,"_419":-5,"_420":55,"_421":55,"_422":55,"_423":-5},"ENV",{"_375":376,"_377":378,"_379":16,"_380":381,"_382":383,"_384":385,"_386":387,"_388":389,"_390":391,"_392":393,"_394":395,"_396":397,"_398":399,"_400":401,"_402":403},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Loading store…

🏪 Commerce Engine

Login to Dashboard

Register Your Store

🏪

Recent Orders

Add Product

Your Products

All Orders

🔗 Your Store URL

📋 Embed Code

🔌 API Key