@aglyn/plugins-commerce 1.0.0-beta.218 → 1.0.0-beta.220

package/src/lib/model/storefront-tax-summary.d.ts

@@ -0,0 +1,121 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The tax storefront sales collected, by who is liable for it (AGL-1904).
+ *
+ * A storefront sale is a merchant's sale — but on a `mode: 'stripe'` store
+ * the tax charged to the shopper is computed against the PLATFORM's
+ * registrations on a Checkout Session created on the platform's own account
+ * (measured, not inferred: with the platform unregistered and the destination
+ * connected account registered in Texas, Stripe answered `amount_tax: 0` /
+ * `not_collecting`; with the platform registered and nothing else changed,
+ * 8.25% / `standard_rated`; both sessions reported
+ * `automatic_tax.liability: { type: "self" }`). That tax lands in the
+ * platform's balance, and the operator's return reads it through this fold.
+ *
+ * ## THREE BUCKETS, AND THEY MUST NEVER BE SUMMED
+ *
+ * There is deliberately no grand total on this summary, and adding one would
+ * be the bug — the three are answers to three different questions:
+ *
+ *   - **`aglynLiable`** — Stripe Tax computed it against the platform's own
+ *     registrations (`taxMode: 'stripe-automatic'`,
+ *     `taxLiability: 'platform'`). This is money the platform is holding.
+ *   - **`merchantManual`** — the merchant's own configured rate, added as an
+ *     ordinary line item Stripe is never told is tax. The platform's
+ *     registrations played no part; it is not the platform's to remit, and
+ *     counting it would have the operator filing and paying another
+ *     company's tax.
+ *   - **`connectedAccountLiable`** — Stripe Tax that named a CONNECTED
+ *     account as the liable party. None exists today (no storefront path sets
+ *     `on_behalf_of`), and the bucket is here so that if one ever does, the
+ *     money moves out of `aglynLiable` visibly rather than silently.
+ *
+ * `aglynLiable` is a wire name the merchant's own tax report and the staff
+ * return have both read since AGL-1904; it means "the platform operator".
+ *
+ * The classification comes from the stored `taxMode` / `taxLiability`, which
+ * `storefront-tax.ts` derives from `automatic_tax.enabled` and never from the
+ * presence of tax lines — a manual-mode subscription renewal carries genuine
+ * Stripe Tax Rates (AGL-1751) and is otherwise indistinguishable.
+ *
+ * **This says nothing about marketplace-facilitator status.** It reports which
+ * registration computed which tax and where the money is. Which line of a
+ * filed return each bucket belongs on is a question for the preparer and for
+ * counsel, and this module deliberately declines to answer it — which is
+ * exactly why there is no merged total to mistake for one.
+ *
+ * Rows that cannot be classified or read are counted in `attention`, never
+ * dropped and never zeroed.
+ *
+ * Pure and total: no Firestore, no clock. Read by the staff return's source
+ * (`server/tax-return-source.ts`) and by the merchant's own tax report, so
+ * both read the same rows through the same classifier.
+ */
+import { type TaxLineInput, type TaxReturnJurisdiction } from '@aglyn/aglyn/app-utils/tax-jurisdiction-figures';
+/** The subset of a `storefrontTaxCollected/{stripeId}` row this reads. */
+export interface StorefrontTaxReturnRowInput {
+    id: string;
+    hostId?: unknown;
+    orgId?: string | null;
+    taxMode?: unknown;
+    taxLiability?: unknown;
+    grossCents?: unknown;
+    taxCents?: unknown;
+    currency?: unknown;
+    customerAddress?: {
+        country?: unknown;
+        state?: unknown;
+    } | null;
+    taxLines?: TaxLineInput[] | null;
+    paidAt?: unknown;
+}
+export interface StorefrontTaxBucket {
+    transactionCount: number;
+    /** What shoppers paid, tax included. NOT the platform's revenue. */
+    grossCents: number;
+    /** Stripe's `taxable_amount` summed; 0 for buckets that state no base. */
+    taxableSalesCents: number;
+    taxCollectedCents: number;
+    /** Keyed `COUNTRY-STATE`, or `unknown`. */
+    byJurisdiction: Record<string, TaxReturnJurisdiction>;
+}
+export interface StorefrontTaxSummary {
+    periodStart: string;
+    periodEnd: string;
+    transactionCount: number;
+    /** Tax computed against the PLATFORM's registrations. See the module note. */
+    aglynLiable: StorefrontTaxBucket;
+    /** The merchant's own configured tax. Never the platform's to remit. */
+    merchantManual: StorefrontTaxBucket;
+    /** Stripe Tax that named a connected account liable. Empty today. */
+    connectedAccountLiable: StorefrontTaxBucket;
+    attention: {
+        /** Tax collected but no line states its base — see the module note. */
+        rowsMissingTaxableBase: number;
+        rowsMissingAddress: number;
+        nonUsdRows: number;
+        rowsMissingPaidAt: number;
+        /** A `taxMode` this code does not recognize — never silently bucketed. */
+        rowsUnclassified: number;
+    };
+}
+/** The storefront figures from one period's rows. See the module note. */
+export declare function storefrontTaxSummary(rows: readonly StorefrontTaxReturnRowInput[], period: {
+    start: Date;
+    end: Date;
+}): StorefrontTaxSummary;

package/src/lib/model/storefront-tax-summary.js

@@ -0,0 +1,148 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The tax storefront sales collected, by who is liable for it (AGL-1904).
+ *
+ * A storefront sale is a merchant's sale — but on a `mode: 'stripe'` store
+ * the tax charged to the shopper is computed against the PLATFORM's
+ * registrations on a Checkout Session created on the platform's own account
+ * (measured, not inferred: with the platform unregistered and the destination
+ * connected account registered in Texas, Stripe answered `amount_tax: 0` /
+ * `not_collecting`; with the platform registered and nothing else changed,
+ * 8.25% / `standard_rated`; both sessions reported
+ * `automatic_tax.liability: { type: "self" }`). That tax lands in the
+ * platform's balance, and the operator's return reads it through this fold.
+ *
+ * ## THREE BUCKETS, AND THEY MUST NEVER BE SUMMED
+ *
+ * There is deliberately no grand total on this summary, and adding one would
+ * be the bug — the three are answers to three different questions:
+ *
+ *   - **`aglynLiable`** — Stripe Tax computed it against the platform's own
+ *     registrations (`taxMode: 'stripe-automatic'`,
+ *     `taxLiability: 'platform'`). This is money the platform is holding.
+ *   - **`merchantManual`** — the merchant's own configured rate, added as an
+ *     ordinary line item Stripe is never told is tax. The platform's
+ *     registrations played no part; it is not the platform's to remit, and
+ *     counting it would have the operator filing and paying another
+ *     company's tax.
+ *   - **`connectedAccountLiable`** — Stripe Tax that named a CONNECTED
+ *     account as the liable party. None exists today (no storefront path sets
+ *     `on_behalf_of`), and the bucket is here so that if one ever does, the
+ *     money moves out of `aglynLiable` visibly rather than silently.
+ *
+ * `aglynLiable` is a wire name the merchant's own tax report and the staff
+ * return have both read since AGL-1904; it means "the platform operator".
+ *
+ * The classification comes from the stored `taxMode` / `taxLiability`, which
+ * `storefront-tax.ts` derives from `automatic_tax.enabled` and never from the
+ * presence of tax lines — a manual-mode subscription renewal carries genuine
+ * Stripe Tax Rates (AGL-1751) and is otherwise indistinguishable.
+ *
+ * **This says nothing about marketplace-facilitator status.** It reports which
+ * registration computed which tax and where the money is. Which line of a
+ * filed return each bucket belongs on is a question for the preparer and for
+ * counsel, and this module deliberately declines to answer it — which is
+ * exactly why there is no merged total to mistake for one.
+ *
+ * Rows that cannot be classified or read are counted in `attention`, never
+ * dropped and never zeroed.
+ *
+ * Pure and total: no Firestore, no clock. Read by the staff return's source
+ * (`server/tax-return-source.ts`) and by the merchant's own tax report, so
+ * both read the same rows through the same classifier.
+ */ import { accumulateTaxWorkingPapers, asRowDate, emptyTaxJurisdiction, taxJurisdictionKey } from "@aglyn/aglyn/app-utils/tax-jurisdiction-figures";
+function cents(value) {
+    const parsed = Number(value != null ? value : 0);
+    return Number.isFinite(parsed) ? Math.round(parsed) : 0;
+}
+function emptyBucket() {
+    return {
+        transactionCount: 0,
+        grossCents: 0,
+        taxableSalesCents: 0,
+        taxCollectedCents: 0,
+        byJurisdiction: {}
+    };
+}
+/** The storefront figures from one period's rows. See the module note. */ export function storefrontTaxSummary(rows, period) {
+    const summary = {
+        periodStart: period.start.toISOString(),
+        periodEnd: period.end.toISOString(),
+        transactionCount: 0,
+        aglynLiable: emptyBucket(),
+        merchantManual: emptyBucket(),
+        connectedAccountLiable: emptyBucket(),
+        attention: {
+            rowsMissingTaxableBase: 0,
+            rowsMissingAddress: 0,
+            nonUsdRows: 0,
+            rowsMissingPaidAt: 0,
+            rowsUnclassified: 0
+        }
+    };
+    for (const row of rows != null ? rows : []){
+        var _row_currency, _row_taxMode, _row_taxLiability, _bucket_byJurisdiction, _jurisdiction, _;
+        const gross = cents(row.grossCents);
+        const tax = cents(row.taxCents);
+        const lines = Array.isArray(row.taxLines) ? row.taxLines : [];
+        const statedBases = lines.map((line)=>line == null ? void 0 : line.taxableAmountCents).filter((base)=>base !== null && base !== undefined && Number.isFinite(Number(base)));
+        const taxableBase = statedBases.reduce((sum, base)=>sum + Math.round(Number(base)), 0);
+        const jurisdiction = taxJurisdictionKey(row.customerAddress);
+        if (jurisdiction === 'unknown') summary.attention.rowsMissingAddress += 1;
+        if (String((_row_currency = row.currency) != null ? _row_currency : 'usd').toLowerCase() !== 'usd') {
+            summary.attention.nonUsdRows += 1;
+        }
+        if (!asRowDate(row.paidAt)) summary.attention.rowsMissingPaidAt += 1;
+        // The bucket is chosen from the STORED classification, and an unfamiliar
+        // one falls through to `rowsUnclassified` rather than defaulting into a
+        // bucket — a default here would put a merchant's tax on the platform's
+        // return, or the platform's tax nowhere, and neither is allowed to happen
+        // quietly.
+        const mode = String((_row_taxMode = row.taxMode) != null ? _row_taxMode : '');
+        const liability = String((_row_taxLiability = row.taxLiability) != null ? _row_taxLiability : '');
+        const bucket = mode === 'stripe-automatic' && liability === 'connected-account' ? summary.connectedAccountLiable : mode === 'stripe-automatic' ? summary.aglynLiable : mode === 'manual' ? summary.merchantManual : null;
+        if (!bucket) {
+            summary.attention.rowsUnclassified += 1;
+            continue;
+        }
+        // A taxed row that cannot state the base the rate was applied to —
+        // counted ONLY for Stripe-computed tax. A manual-mode row has no Stripe
+        // base by construction (Stripe was never told the amount was tax), so
+        // flagging it here would raise a permanent alarm about a figure that can
+        // never exist, and an alarm that is always on is an alarm nobody reads.
+        if (mode === 'stripe-automatic' && tax > 0 && statedBases.length === 0) {
+            summary.attention.rowsMissingTaxableBase += 1;
+        }
+        summary.transactionCount += 1;
+        bucket.transactionCount += 1;
+        bucket.grossCents += gross;
+        bucket.taxableSalesCents += taxableBase;
+        bucket.taxCollectedCents += tax;
+        const jurisdictionBucket = (_ = (_bucket_byJurisdiction = bucket.byJurisdiction)[_jurisdiction = jurisdiction]) != null ? _ : _bucket_byJurisdiction[_jurisdiction] = emptyTaxJurisdiction();
+        jurisdictionBucket.transactionCount += 1;
+        jurisdictionBucket.totalSalesCents += gross - tax;
+        jurisdictionBucket.taxableSalesCents += taxableBase;
+        jurisdictionBucket.taxCollectedCents += tax;
+        // The storefront working papers (AGL-2329). Its lines carry the richer
+        // detail — `percentage`, `rateState`, `jurisdiction` — three fields the
+        // writer annotates "for the working papers".
+        accumulateTaxWorkingPapers(jurisdictionBucket, lines);
+    }
+    return summary;
+}
+
+//# sourceMappingURL=storefront-tax-summary.js.map

package/src/lib/model/storefront-tax-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/model/storefront-tax-summary.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The tax storefront sales collected, by who is liable for it (AGL-1904).\n *\n * A storefront sale is a merchant's sale — but on a `mode: 'stripe'` store\n * the tax charged to the shopper is computed against the PLATFORM's\n * registrations on a Checkout Session created on the platform's own account\n * (measured, not inferred: with the platform unregistered and the destination\n * connected account registered in Texas, Stripe answered `amount_tax: 0` /\n * `not_collecting`; with the platform registered and nothing else changed,\n * 8.25% / `standard_rated`; both sessions reported\n * `automatic_tax.liability: { type: \"self\" }`). That tax lands in the\n * platform's balance, and the operator's return reads it through this fold.\n *\n * ## THREE BUCKETS, AND THEY MUST NEVER BE SUMMED\n *\n * There is deliberately no grand total on this summary, and adding one would\n * be the bug — the three are answers to three different questions:\n *\n *   - **`aglynLiable`** — Stripe Tax computed it against the platform's own\n *     registrations (`taxMode: 'stripe-automatic'`,\n *     `taxLiability: 'platform'`). This is money the platform is holding.\n *   - **`merchantManual`** — the merchant's own configured rate, added as an\n *     ordinary line item Stripe is never told is tax. The platform's\n *     registrations played no part; it is not the platform's to remit, and\n *     counting it would have the operator filing and paying another\n *     company's tax.\n *   - **`connectedAccountLiable`** — Stripe Tax that named a CONNECTED\n *     account as the liable party. None exists today (no storefront path sets\n *     `on_behalf_of`), and the bucket is here so that if one ever does, the\n *     money moves out of `aglynLiable` visibly rather than silently.\n *\n * `aglynLiable` is a wire name the merchant's own tax report and the staff\n * return have both read since AGL-1904; it means \"the platform operator\".\n *\n * The classification comes from the stored `taxMode` / `taxLiability`, which\n * `storefront-tax.ts` derives from `automatic_tax.enabled` and never from the\n * presence of tax lines — a manual-mode subscription renewal carries genuine\n * Stripe Tax Rates (AGL-1751) and is otherwise indistinguishable.\n *\n * **This says nothing about marketplace-facilitator status.** It reports which\n * registration computed which tax and where the money is. Which line of a\n * filed return each bucket belongs on is a question for the preparer and for\n * counsel, and this module deliberately declines to answer it — which is\n * exactly why there is no merged total to mistake for one.\n *\n * Rows that cannot be classified or read are counted in `attention`, never\n * dropped and never zeroed.\n *\n * Pure and total: no Firestore, no clock. Read by the staff return's source\n * (`server/tax-return-source.ts`) and by the merchant's own tax report, so\n * both read the same rows through the same classifier.\n */\n\nimport {\n  accumulateTaxWorkingPapers,\n  asRowDate,\n  emptyTaxJurisdiction,\n  taxJurisdictionKey,\n  type TaxLineInput,\n  type TaxReturnJurisdiction,\n} from '@aglyn/aglyn/app-utils/tax-jurisdiction-figures'\n\n/** The subset of a `storefrontTaxCollected/{stripeId}` row this reads. */\nexport interface StorefrontTaxReturnRowInput {\n  id: string\n  hostId?: unknown\n  orgId?: string | null\n  taxMode?: unknown\n  taxLiability?: unknown\n  grossCents?: unknown\n  taxCents?: unknown\n  currency?: unknown\n  customerAddress?: {\n    country?: unknown\n    state?: unknown\n  } | null\n  taxLines?: TaxLineInput[] | null\n  paidAt?: unknown\n}\n\nexport interface StorefrontTaxBucket {\n  transactionCount: number\n  /** What shoppers paid, tax included. NOT the platform's revenue. */\n  grossCents: number\n  /** Stripe's `taxable_amount` summed; 0 for buckets that state no base. */\n  taxableSalesCents: number\n  taxCollectedCents: number\n  /** Keyed `COUNTRY-STATE`, or `unknown`. */\n  byJurisdiction: Record<string, TaxReturnJurisdiction>\n}\n\nexport interface StorefrontTaxSummary {\n  periodStart: string\n  periodEnd: string\n  transactionCount: number\n  /** Tax computed against the PLATFORM's registrations. See the module note. */\n  aglynLiable: StorefrontTaxBucket\n  /** The merchant's own configured tax. Never the platform's to remit. */\n  merchantManual: StorefrontTaxBucket\n  /** Stripe Tax that named a connected account liable. Empty today. */\n  connectedAccountLiable: StorefrontTaxBucket\n  attention: {\n    /** Tax collected but no line states its base — see the module note. */\n    rowsMissingTaxableBase: number\n    rowsMissingAddress: number\n    nonUsdRows: number\n    rowsMissingPaidAt: number\n    /** A `taxMode` this code does not recognize — never silently bucketed. */\n    rowsUnclassified: number\n  }\n}\n\nfunction cents(value: unknown): number {\n  const parsed = Number(value ?? 0)\n  return Number.isFinite(parsed) ? Math.round(parsed) : 0\n}\n\nfunction emptyBucket(): StorefrontTaxBucket {\n  return {\n    transactionCount: 0,\n    grossCents: 0,\n    taxableSalesCents: 0,\n    taxCollectedCents: 0,\n    byJurisdiction: {},\n  }\n}\n\n/** The storefront figures from one period's rows. See the module note. */\nexport function storefrontTaxSummary(\n  rows: readonly StorefrontTaxReturnRowInput[],\n  period: { start: Date; end: Date },\n): StorefrontTaxSummary {\n  const summary: StorefrontTaxSummary = {\n    periodStart: period.start.toISOString(),\n    periodEnd: period.end.toISOString(),\n    transactionCount: 0,\n    aglynLiable: emptyBucket(),\n    merchantManual: emptyBucket(),\n    connectedAccountLiable: emptyBucket(),\n    attention: {\n      rowsMissingTaxableBase: 0,\n      rowsMissingAddress: 0,\n      nonUsdRows: 0,\n      rowsMissingPaidAt: 0,\n      rowsUnclassified: 0,\n    },\n  }\n\n  for (const row of rows ?? []) {\n    const gross = cents(row.grossCents)\n    const tax = cents(row.taxCents)\n    const lines = Array.isArray(row.taxLines) ? row.taxLines : []\n    const statedBases = lines\n      .map((line) => line?.taxableAmountCents)\n      .filter(\n        (base): base is number =>\n          base !== null && base !== undefined && Number.isFinite(Number(base)),\n      )\n    const taxableBase = statedBases.reduce(\n      (sum, base) => sum + Math.round(Number(base)),\n      0,\n    )\n\n    const jurisdiction = taxJurisdictionKey(row.customerAddress)\n    if (jurisdiction === 'unknown') summary.attention.rowsMissingAddress += 1\n    if (String(row.currency ?? 'usd').toLowerCase() !== 'usd') {\n      summary.attention.nonUsdRows += 1\n    }\n    if (!asRowDate(row.paidAt)) summary.attention.rowsMissingPaidAt += 1\n\n    // The bucket is chosen from the STORED classification, and an unfamiliar\n    // one falls through to `rowsUnclassified` rather than defaulting into a\n    // bucket — a default here would put a merchant's tax on the platform's\n    // return, or the platform's tax nowhere, and neither is allowed to happen\n    // quietly.\n    const mode = String(row.taxMode ?? '')\n    const liability = String(row.taxLiability ?? '')\n    const bucket =\n      mode === 'stripe-automatic' && liability === 'connected-account'\n        ? summary.connectedAccountLiable\n        : mode === 'stripe-automatic'\n          ? summary.aglynLiable\n          : mode === 'manual'\n            ? summary.merchantManual\n            : null\n    if (!bucket) {\n      summary.attention.rowsUnclassified += 1\n      continue\n    }\n\n    // A taxed row that cannot state the base the rate was applied to —\n    // counted ONLY for Stripe-computed tax. A manual-mode row has no Stripe\n    // base by construction (Stripe was never told the amount was tax), so\n    // flagging it here would raise a permanent alarm about a figure that can\n    // never exist, and an alarm that is always on is an alarm nobody reads.\n    if (mode === 'stripe-automatic' && tax > 0 && statedBases.length === 0) {\n      summary.attention.rowsMissingTaxableBase += 1\n    }\n\n    summary.transactionCount += 1\n    bucket.transactionCount += 1\n    bucket.grossCents += gross\n    bucket.taxableSalesCents += taxableBase\n    bucket.taxCollectedCents += tax\n    const jurisdictionBucket = (bucket.byJurisdiction[jurisdiction] ??=\n      emptyTaxJurisdiction())\n    jurisdictionBucket.transactionCount += 1\n    jurisdictionBucket.totalSalesCents += gross - tax\n    jurisdictionBucket.taxableSalesCents += taxableBase\n    jurisdictionBucket.taxCollectedCents += tax\n    // The storefront working papers (AGL-2329). Its lines carry the richer\n    // detail — `percentage`, `rateState`, `jurisdiction` — three fields the\n    // writer annotates \"for the working papers\".\n    accumulateTaxWorkingPapers(jurisdictionBucket, lines)\n  }\n\n  return summary\n}\n"],"names":["accumulateTaxWorkingPapers","asRowDate","emptyTaxJurisdiction","taxJurisdictionKey","cents","value","parsed","Number","isFinite","Math","round","emptyBucket","transactionCount","grossCents","taxableSalesCents","taxCollectedCents","byJurisdiction","storefrontTaxSummary","rows","period","summary","periodStart","start","toISOString","periodEnd","end","aglynLiable","merchantManual","connectedAccountLiable","attention","rowsMissingTaxableBase","rowsMissingAddress","nonUsdRows","rowsMissingPaidAt","rowsUnclassified","row","bucket","jurisdiction","gross","tax","taxCents","lines","Array","isArray","taxLines","statedBases","map","line","taxableAmountCents","filter","base","undefined","taxableBase","reduce","sum","customerAddress","String","currency","toLowerCase","paidAt","mode","taxMode","liability","taxLiability","length","jurisdictionBucket","totalSalesCents"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDC,GAED,SACEA,0BAA0B,EAC1BC,SAAS,EACTC,oBAAoB,EACpBC,kBAAkB,QAGb,kDAAiD;AAoDxD,SAASC,MAAMC,KAAc;IAC3B,MAAMC,SAASC,OAAOF,gBAAAA,QAAS;IAC/B,OAAOE,OAAOC,QAAQ,CAACF,UAAUG,KAAKC,KAAK,CAACJ,UAAU;AACxD;AAEA,SAASK;IACP,OAAO;QACLC,kBAAkB;QAClBC,YAAY;QACZC,mBAAmB;QACnBC,mBAAmB;QACnBC,gBAAgB,CAAC;IACnB;AACF;AAEA,wEAAwE,GACxE,OAAO,SAASC,qBACdC,IAA4C,EAC5CC,MAAkC;IAElC,MAAMC,UAAgC;QACpCC,aAAaF,OAAOG,KAAK,CAACC,WAAW;QACrCC,WAAWL,OAAOM,GAAG,CAACF,WAAW;QACjCX,kBAAkB;QAClBc,aAAaf;QACbgB,gBAAgBhB;QAChBiB,wBAAwBjB;QACxBkB,WAAW;YACTC,wBAAwB;YACxBC,oBAAoB;YACpBC,YAAY;YACZC,mBAAmB;YACnBC,kBAAkB;QACpB;IACF;IAEA,KAAK,MAAMC,OAAOjB,eAAAA,OAAQ,EAAE,CAAE;YAiBjBiB,eAUSA,cACKA,mBA4BGC,wBAAsBC,eAAtBD;QAvD5B,MAAME,QAAQlC,MAAM+B,IAAItB,UAAU;QAClC,MAAM0B,MAAMnC,MAAM+B,IAAIK,QAAQ;QAC9B,MAAMC,QAAQC,MAAMC,OAAO,CAACR,IAAIS,QAAQ,IAAIT,IAAIS,QAAQ,GAAG,EAAE;QAC7D,MAAMC,cAAcJ,MACjBK,GAAG,CAAC,CAACC,OAASA,wBAAAA,KAAMC,kBAAkB,EACtCC,MAAM,CACL,CAACC,OACCA,SAAS,QAAQA,SAASC,aAAa5C,OAAOC,QAAQ,CAACD,OAAO2C;QAEpE,MAAME,cAAcP,YAAYQ,MAAM,CACpC,CAACC,KAAKJ,OAASI,MAAM7C,KAAKC,KAAK,CAACH,OAAO2C,QACvC;QAGF,MAAMb,eAAelC,mBAAmBgC,IAAIoB,eAAe;QAC3D,IAAIlB,iBAAiB,WAAWjB,QAAQS,SAAS,CAACE,kBAAkB,IAAI;QACxE,IAAIyB,QAAOrB,gBAAAA,IAAIsB,QAAQ,YAAZtB,gBAAgB,OAAOuB,WAAW,OAAO,OAAO;YACzDtC,QAAQS,SAAS,CAACG,UAAU,IAAI;QAClC;QACA,IAAI,CAAC/B,UAAUkC,IAAIwB,MAAM,GAAGvC,QAAQS,SAAS,CAACI,iBAAiB,IAAI;QAEnE,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,WAAW;QACX,MAAM2B,OAAOJ,QAAOrB,eAAAA,IAAI0B,OAAO,YAAX1B,eAAe;QACnC,MAAM2B,YAAYN,QAAOrB,oBAAAA,IAAI4B,YAAY,YAAhB5B,oBAAoB;QAC7C,MAAMC,SACJwB,SAAS,sBAAsBE,cAAc,sBACzC1C,QAAQQ,sBAAsB,GAC9BgC,SAAS,qBACPxC,QAAQM,WAAW,GACnBkC,SAAS,WACPxC,QAAQO,cAAc,GACtB;QACV,IAAI,CAACS,QAAQ;YACXhB,QAAQS,SAAS,CAACK,gBAAgB,IAAI;YACtC;QACF;QAEA,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI0B,SAAS,sBAAsBrB,MAAM,KAAKM,YAAYmB,MAAM,KAAK,GAAG;YACtE5C,QAAQS,SAAS,CAACC,sBAAsB,IAAI;QAC9C;QAEAV,QAAQR,gBAAgB,IAAI;QAC5BwB,OAAOxB,gBAAgB,IAAI;QAC3BwB,OAAOvB,UAAU,IAAIyB;QACrBF,OAAOtB,iBAAiB,IAAIsC;QAC5BhB,OAAOrB,iBAAiB,IAAIwB;QAC5B,MAAM0B,sBAAsB7B,IAAAA,CAAAA,yBAAAA,OAAOpB,cAAc,CAAA,CAACqB,gBAAAA,aAAa,YAAnCD,IAAAA,sBAAqB,CAACC,cAAa,GAC7DnC;QACF+D,mBAAmBrD,gBAAgB,IAAI;QACvCqD,mBAAmBC,eAAe,IAAI5B,QAAQC;QAC9C0B,mBAAmBnD,iBAAiB,IAAIsC;QACxCa,mBAAmBlD,iBAAiB,IAAIwB;QACxC,uEAAuE;QACvE,wEAAwE;QACxE,6CAA6C;QAC7CvC,2BAA2BiE,oBAAoBxB;IACjD;IAEA,OAAOrB;AACT"}

package/src/lib/plan-entitlements.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginPlanEntitlementsDeclaration } from '@aglyn/aglyn/plugin-manager/plugin-plan-entitlements';
+/**
+ * COMMERCE'S PLAN GATES (AGL-3080): the storefront features that start above
+ * the entry tiers. Compiled into core's `PLAN_ENTITLEMENTS` by the manifest
+ * generator (`register.planEntitlements`), so the plan comparison and every
+ * gate read the answers they always have.
+ */
+declare module '@aglyn/aglyn/plugin-manager/plugin-entitlement-keys' {
+    interface PluginEntitlementFeatures {
+        /** Recurring storefront subscription products (AGL-303). */
+        storefrontSubscriptions?: boolean;
+        /** Gift cards & store credit (AGL-322). */
+        giftCards?: boolean;
+        /** Commerce analytics dashboard (AGL-327). */
+        commerceAnalytics?: boolean;
+    }
+}
+/** Commerce's plan gates, for the manifest generator. */
+export declare function commercePlanEntitlements(): PluginPlanEntitlementsDeclaration;

package/src/lib/plan-entitlements.js

@@ -0,0 +1,54 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ // Types only: the manifest generator loads this module on its own to compile
+// the plan figures, so nothing here may reach a core module at runtime.
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/** Business and up. */ const FROM_BUSINESS = {
+    free: false,
+    starter: false,
+    pro: false,
+    business: true,
+    scale: true,
+    advanced: true,
+    agency: true,
+    enterprise: true
+};
+/** Pro and up. */ const FROM_PRO = _extends({}, FROM_BUSINESS, {
+    pro: true
+});
+/** Commerce's plan gates, for the manifest generator. */ export function commercePlanEntitlements() {
+    return {
+        features: [
+            {
+                key: 'storefrontSubscriptions',
+                label: 'Storefront subscriptions',
+                byPlan: FROM_BUSINESS
+            },
+            {
+                key: 'giftCards',
+                label: 'Gift cards',
+                byPlan: FROM_BUSINESS
+            },
+            {
+                key: 'commerceAnalytics',
+                label: 'Commerce analytics',
+                byPlan: FROM_PRO
+            }
+        ]
+    };
+}
+
+//# sourceMappingURL=plan-entitlements.js.map

package/src/lib/plan-entitlements.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/plan-entitlements.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// Types only: the manifest generator loads this module on its own to compile\n// the plan figures, so nothing here may reach a core module at runtime.\nimport type { OrgPlan } from '@aglyn/aglyn/foundation/definitions/org-billing.types'\nimport type { PluginPlanEntitlementsDeclaration } from '@aglyn/aglyn/plugin-manager/plugin-plan-entitlements'\n\n/**\n * COMMERCE'S PLAN GATES (AGL-3080): the storefront features that start above\n * the entry tiers. Compiled into core's `PLAN_ENTITLEMENTS` by the manifest\n * generator (`register.planEntitlements`), so the plan comparison and every\n * gate read the answers they always have.\n */\ndeclare module '@aglyn/aglyn/plugin-manager/plugin-entitlement-keys' {\n  interface PluginEntitlementFeatures {\n    /** Recurring storefront subscription products (AGL-303). */\n    storefrontSubscriptions?: boolean\n    /** Gift cards & store credit (AGL-322). */\n    giftCards?: boolean\n    /** Commerce analytics dashboard (AGL-327). */\n    commerceAnalytics?: boolean\n  }\n}\n\n/** Business and up. */\nconst FROM_BUSINESS: Readonly<Record<OrgPlan, boolean>> = {\n  free: false,\n  starter: false,\n  pro: false,\n  business: true,\n  scale: true,\n  advanced: true,\n  agency: true,\n  enterprise: true,\n}\n\n/** Pro and up. */\nconst FROM_PRO: Readonly<Record<OrgPlan, boolean>> = {\n  ...FROM_BUSINESS,\n  pro: true,\n}\n\n/** Commerce's plan gates, for the manifest generator. */\nexport function commercePlanEntitlements(): PluginPlanEntitlementsDeclaration {\n  return {\n    features: [\n      {\n        key: 'storefrontSubscriptions',\n        label: 'Storefront subscriptions',\n        byPlan: FROM_BUSINESS,\n      },\n      { key: 'giftCards', label: 'Gift cards', byPlan: FROM_BUSINESS },\n      {\n        key: 'commerceAnalytics',\n        label: 'Commerce analytics',\n        byPlan: FROM_PRO,\n      },\n    ],\n  }\n}\n"],"names":["FROM_BUSINESS","free","starter","pro","business","scale","advanced","agency","enterprise","FROM_PRO","commercePlanEntitlements","features","key","label","byPlan"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,6EAA6E;AAC7E,wEAAwE;;AAqBxE,qBAAqB,GACrB,MAAMA,gBAAoD;IACxDC,MAAM;IACNC,SAAS;IACTC,KAAK;IACLC,UAAU;IACVC,OAAO;IACPC,UAAU;IACVC,QAAQ;IACRC,YAAY;AACd;AAEA,gBAAgB,GAChB,MAAMC,WAA+C,aAChDT;IACHG,KAAK;;AAGP,uDAAuD,GACvD,OAAO,SAASO;IACd,OAAO;QACLC,UAAU;YACR;gBACEC,KAAK;gBACLC,OAAO;gBACPC,QAAQd;YACV;YACA;gBAAEY,KAAK;gBAAaC,OAAO;gBAAcC,QAAQd;YAAc;YAC/D;gBACEY,KAAK;gBACLC,OAAO;gBACPC,QAAQL;YACV;SACD;IACH;AACF"}

package/src/lib/plugin.js

@@ -19,9 +19,14 @@ import { lazy } from "react";
 const PosConsolePage = lazy(()=>import("./components/console/pos-page.component.js"));
 const CommerceGlanceCard = lazy(()=>import("./components/console/commerce-glance-card.component.js"));
 const NewestSiteUsersCard = lazy(()=>import("./components/console/newest-site-users-card.component.js"));
+const SiteMemberPurchases = lazy(()=>import("./components/console/site-member-purchases.component.js"));
 import { COMMERCE_CONSOLE_SECTIONS } from "./components/commerce-console-sections.js";
 import { BUNDLE_ID } from "./constants/bundle-common.js";
 import { COMMERCE_PERMISSIONS } from "./model/plugin-permissions.js";
+import { registerCommerceRecordLists } from "./model/commerce-record-lists.js";
+import { registerCommerceRecordRoutes } from "./model/commerce-record-routes.js";
+import { registerCommerceZones } from "./components/console/product-zones.js";
+import { COMMERCE_SEARCH_SOURCES } from "./model/commerce-search-sources.js";
 import { COMMERCE_CONFIG_SCHEMA } from "./plugin-config.js";
 /** Code-split: the Products console page only loads when opened. */ const CommerceConsolePage = lazy(()=>import("./components/commerce-console-page.js"));
 /**
@@ -34,6 +39,12 @@ import { COMMERCE_CONFIG_SCHEMA } from "./plugin-config.js";
  * tracked as follow-up. The nav item omits a `Component`, so the shell's
  * nav renders the link and the existing named route serves the page.
  */ export function registerCommerceConsole() {
+    // Where a product is read, for surfaces outside this plugin (AGL-3080).
+    registerCommerceRecordRoutes();
+    registerCommerceRecordLists();
+    // The zones its product editor, products hub and CSV import dialog host,
+    // with the props each hands a widget (AGL-2916, AGL-3080).
+    registerCommerceZones();
     // Plugin-declared permissions (AGL-435): tier defaults ride every
     // resolved role set; custom roles override key-by-key.
     Aglyn.registerPluginPermissions(COMMERCE_PERMISSIONS);
@@ -43,6 +54,7 @@ import { COMMERCE_CONFIG_SCHEMA } from "./plugin-config.js";
     Aglyn.registerConsoleExtension({
         pluginId: BUNDLE_ID,
         displayName: 'Commerce',
+        searchSources: COMMERCE_SEARCH_SOURCES,
         // Dashboard/analytics glance card (AGL-419): rendered through the
         // shell's 'commerceGlance' widget slot.
         widgets: [
@@ -51,6 +63,15 @@ import { COMMERCE_CONFIG_SCHEMA } from "./plugin-config.js";
                 widgetId: 'commerce-glance',
                 title: 'Commerce',
                 Component: CommerceGlanceCard
+            },
+            // What a site user bought — lifetime total, orders and subscriptions —
+            // in their drawer on the site's Users page: the orders and
+            // subscriptions are this plugin's.
+            {
+                slot: Aglyn.CONSOLE_WIDGET_SLOTS.siteMember,
+                widgetId: 'commerce-site-member-purchases',
+                title: 'Purchases',
+                Component: SiteMemberPurchases
             }
         ],
         navItems: [

package/src/lib/plugin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiStorefrontOutline } from '@aglyn/shared-data-mdi'\nimport { lazy } from 'react'\nconst PosConsolePage = lazy(() => import('./components/console/pos-page.component'))\nconst CommerceGlanceCard = lazy(\n  () => import('./components/console/commerce-glance-card.component'),\n)\nconst NewestSiteUsersCard = lazy(\n  () => import('./components/console/newest-site-users-card.component'),\n)\nimport { COMMERCE_CONSOLE_SECTIONS } from './components/commerce-console-sections'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { COMMERCE_PERMISSIONS } from './model/plugin-permissions'\nimport { COMMERCE_CONFIG_SCHEMA } from './plugin-config'\n\n/** Code-split: the Products console page only loads when opened. */\nconst CommerceConsolePage = lazy(() => import('./components/commerce-console-page'))\n\n/**\n * Console half (AGL-395): registers the Products nav item in the\n * ConsoleExtension registry so the commerce console surface is owned by the\n * plugin, like events and email. The page body still lives in the console\n * app (`/[hostId]/products`): its product editor depends on the app's media\n * browser, which transitively pulls in the org/session context, so a full\n * body relocation needs a plugin-consumable media-picker context first —\n * tracked as follow-up. The nav item omits a `Component`, so the shell's\n * nav renders the link and the existing named route serves the page.\n */\nexport function registerCommerceConsole(): void {\n  // Plugin-declared permissions (AGL-435): tier defaults ride every\n  // resolved role set; custom roles override key-by-key.\n  Aglyn.registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // Register discount ceiling (AGL-2161) — the generic settings card renders\n  // it from this schema, so there is no bespoke UI to keep in sync.\n  Aglyn.registerPluginConfigSchema(COMMERCE_CONFIG_SCHEMA)\n  Aglyn.registerConsoleExtension({\n    pluginId: BUNDLE_ID,\n    displayName: 'Commerce',\n    // Dashboard/analytics glance card (AGL-419): rendered through the\n    // shell's 'commerceGlance' widget slot.\n    widgets: [\n      {\n        slot: 'commerceGlance',\n        widgetId: 'commerce-glance',\n        title: 'Commerce',\n        Component: CommerceGlanceCard,\n      },\n    ],\n    navItems: [\n      {\n        label: 'Products',\n        href: '/products',\n        icon: { path: mdiStorefrontOutline.path },\n        // Sections as ROUTES (AGL-2501): `/products/orders` and friends are\n        // real URLs the shell resolves and gates, so the page mounts the one\n        // being read instead of subscribing all six.\n        sections: COMMERCE_CONSOLE_SECTIONS,\n        header: {\n          title: 'Products',\n          icon: { path: mdiStorefrontOutline.path },\n          // The overview, not `catalog`: this surface is the whole commerce\n          // console — Catalog, Orders, Promotions and Reservations.\n          docsTopic: 'commerce',\n        },\n        Component: CommerceConsolePage,\n      },\n      {\n        // POS register (AGL-312/419): relocated from the app's /pos route —\n        // the generic [pluginSlug] shell now serves it at the same URL.\n        label: 'POS',\n        href: '/pos',\n        /*\n         * WHO may open the register, declared on THIS nav item rather than on\n         * the extension.\n         *\n         * A key here narrows one surface; a key on the extension would gate\n         * every surface it registers, and Products is the sibling — a catalog\n         * anyone who works on the site may open. The register is the one that\n         * takes money and lists checked-in guests by name, so the two\n         * genuinely have different answers and only this one is narrowed.\n         *\n         * `managePos` rather than a dotted catalog key because it is the key\n         * the sale itself is refused by: `server/pos-order.ts` resolves the\n         * member's permission map and returns 403 unless `managePos` holds.\n         * The shell answers this declaration out of that same resolved map, so\n         * the console offers a register exactly to the people the route will\n         * accept a sale from — the gate and its server twin cannot disagree,\n         * because they are reading one value.\n         *\n         * `pos-order.ts` stays the enforcement point regardless. This decides\n         * whether the surface is built at all, which is the part a check\n         * inside the page cannot do: by the time the page can refuse itself it\n         * has mounted and its product, register, location and reservation\n         * listeners are already open.\n         */\n        permission: 'managePos',\n        icon: { path: mdiStorefrontOutline.path },\n        header: { title: 'Point of Sale', docsTopic: 'pos' },\n        Component: PosConsolePage,\n      },\n    ],\n  })\n  /*\n   * The USER ACCOUNTS half, registered under its own id.\n   *\n   * `accounts` is a switch rather than a bundle: the member blocks and every\n   * `membership/*` handler ship inside this package, which is why the id\n   * carries no loader manifest entry of its own. A second extension is how a\n   * card about visitor accounts is gated on the switch that decides whether\n   * the site serves them — `listConsoleWidgets` filters by the workspace's\n   * effective plugin ids, and `accounts` is default-OFF per site.\n   *\n   * A separate call rather than more widgets on the commerce extension: the\n   * registry is keyed by `pluginId` and that key IS the gate, so folding this\n   * card in above would have kept the dashboard defect it fixes — `Newest\n   * site users` on a site whose /signin returns 404.\n   */\n  Aglyn.registerConsoleExtension({\n    pluginId: Aglyn.ACCOUNTS_PLUGIN_ID,\n    displayName: 'User Accounts',\n    widgets: [\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'accounts-newest-site-users',\n        title: 'Newest site users',\n        Component: NewestSiteUsersCard,\n      },\n    ],\n  })\n}\n\nexport * from './site'\n"],"names":["Aglyn","mdiStorefrontOutline","lazy","PosConsolePage","CommerceGlanceCard","NewestSiteUsersCard","COMMERCE_CONSOLE_SECTIONS","BUNDLE_ID","COMMERCE_PERMISSIONS","COMMERCE_CONFIG_SCHEMA","CommerceConsolePage","registerCommerceConsole","registerPluginPermissions","registerPluginConfigSchema","registerConsoleExtension","pluginId","displayName","widgets","slot","widgetId","title","Component","navItems","label","href","icon","path","sections","header","docsTopic","permission","ACCOUNTS_PLUGIN_ID","CONSOLE_WIDGET_SLOTS","hostDashboard"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,IAAI,QAAQ,QAAO;AAC5B,MAAMC,iBAAiBD,KAAK,IAAM,MAAM,CAAC;AACzC,MAAME,qBAAqBF,KACzB,IAAM,MAAM,CAAC;AAEf,MAAMG,sBAAsBH,KAC1B,IAAM,MAAM,CAAC;AAEf,SAASI,yBAAyB,QAAQ,4CAAwC;AAClF,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,sBAAsB,QAAQ,qBAAiB;AAExD,kEAAkE,GAClE,MAAMC,sBAAsBR,KAAK,IAAM,MAAM,CAAC;AAE9C;;;;;;;;;CASC,GACD,OAAO,SAASS;IACd,kEAAkE;IAClE,uDAAuD;IACvDX,MAAMY,yBAAyB,CAACJ;IAChC,2EAA2E;IAC3E,kEAAkE;IAClER,MAAMa,0BAA0B,CAACJ;IACjCT,MAAMc,wBAAwB,CAAC;QAC7BC,UAAUR;QACVS,aAAa;QACb,kEAAkE;QAClE,wCAAwC;QACxCC,SAAS;YACP;gBACEC,MAAM;gBACNC,UAAU;gBACVC,OAAO;gBACPC,WAAWjB;YACb;SACD;QACDkB,UAAU;YACR;gBACEC,OAAO;gBACPC,MAAM;gBACNC,MAAM;oBAAEC,MAAMzB,qBAAqByB,IAAI;gBAAC;gBACxC,oEAAoE;gBACpE,qEAAqE;gBACrE,6CAA6C;gBAC7CC,UAAUrB;gBACVsB,QAAQ;oBACNR,OAAO;oBACPK,MAAM;wBAAEC,MAAMzB,qBAAqByB,IAAI;oBAAC;oBACxC,kEAAkE;oBAClE,0DAA0D;oBAC1DG,WAAW;gBACb;gBACAR,WAAWX;YACb;YACA;gBACE,oEAAoE;gBACpE,gEAAgE;gBAChEa,OAAO;gBACPC,MAAM;gBACN;;;;;;;;;;;;;;;;;;;;;;;SAuBC,GACDM,YAAY;gBACZL,MAAM;oBAAEC,MAAMzB,qBAAqByB,IAAI;gBAAC;gBACxCE,QAAQ;oBAAER,OAAO;oBAAiBS,WAAW;gBAAM;gBACnDR,WAAWlB;YACb;SACD;IACH;IACA;;;;;;;;;;;;;;GAcC,GACDH,MAAMc,wBAAwB,CAAC;QAC7BC,UAAUf,MAAM+B,kBAAkB;QAClCf,aAAa;QACbC,SAAS;YACP;gBACEC,MAAMlB,MAAMgC,oBAAoB,CAACC,aAAa;gBAC9Cd,UAAU;gBACVC,OAAO;gBACPC,WAAWhB;YACb;SACD;IACH;AACF;AAEA,cAAc,YAAQ"}
+{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiStorefrontOutline } from '@aglyn/shared-data-mdi'\nimport { lazy } from 'react'\nconst PosConsolePage = lazy(() => import('./components/console/pos-page.component'))\nconst CommerceGlanceCard = lazy(\n  () => import('./components/console/commerce-glance-card.component'),\n)\nconst NewestSiteUsersCard = lazy(\n  () => import('./components/console/newest-site-users-card.component'),\n)\nconst SiteMemberPurchases = lazy(\n  () => import('./components/console/site-member-purchases.component'),\n)\nimport { COMMERCE_CONSOLE_SECTIONS } from './components/commerce-console-sections'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { COMMERCE_PERMISSIONS } from './model/plugin-permissions'\nimport { registerCommerceRecordLists } from './model/commerce-record-lists'\nimport { registerCommerceRecordRoutes } from './model/commerce-record-routes'\nimport { registerCommerceZones } from './components/console/product-zones'\nimport { COMMERCE_SEARCH_SOURCES } from './model/commerce-search-sources'\nimport { COMMERCE_CONFIG_SCHEMA } from './plugin-config'\n\n/** Code-split: the Products console page only loads when opened. */\nconst CommerceConsolePage = lazy(() => import('./components/commerce-console-page'))\n\n/**\n * Console half (AGL-395): registers the Products nav item in the\n * ConsoleExtension registry so the commerce console surface is owned by the\n * plugin, like events and email. The page body still lives in the console\n * app (`/[hostId]/products`): its product editor depends on the app's media\n * browser, which transitively pulls in the org/session context, so a full\n * body relocation needs a plugin-consumable media-picker context first —\n * tracked as follow-up. The nav item omits a `Component`, so the shell's\n * nav renders the link and the existing named route serves the page.\n */\nexport function registerCommerceConsole(): void {\n  // Where a product is read, for surfaces outside this plugin (AGL-3080).\n  registerCommerceRecordRoutes()\n  registerCommerceRecordLists()\n  // The zones its product editor, products hub and CSV import dialog host,\n  // with the props each hands a widget (AGL-2916, AGL-3080).\n  registerCommerceZones()\n  // Plugin-declared permissions (AGL-435): tier defaults ride every\n  // resolved role set; custom roles override key-by-key.\n  Aglyn.registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // Register discount ceiling (AGL-2161) — the generic settings card renders\n  // it from this schema, so there is no bespoke UI to keep in sync.\n  Aglyn.registerPluginConfigSchema(COMMERCE_CONFIG_SCHEMA)\n  Aglyn.registerConsoleExtension({\n    pluginId: BUNDLE_ID,\n    displayName: 'Commerce',\n    searchSources: COMMERCE_SEARCH_SOURCES,\n    // Dashboard/analytics glance card (AGL-419): rendered through the\n    // shell's 'commerceGlance' widget slot.\n    widgets: [\n      {\n        slot: 'commerceGlance',\n        widgetId: 'commerce-glance',\n        title: 'Commerce',\n        Component: CommerceGlanceCard,\n      },\n      // What a site user bought — lifetime total, orders and subscriptions —\n      // in their drawer on the site's Users page: the orders and\n      // subscriptions are this plugin's.\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.siteMember,\n        widgetId: 'commerce-site-member-purchases',\n        title: 'Purchases',\n        Component: SiteMemberPurchases,\n      },\n    ],\n    navItems: [\n      {\n        label: 'Products',\n        href: '/products',\n        icon: { path: mdiStorefrontOutline.path },\n        // Sections as ROUTES (AGL-2501): `/products/orders` and friends are\n        // real URLs the shell resolves and gates, so the page mounts the one\n        // being read instead of subscribing all six.\n        sections: COMMERCE_CONSOLE_SECTIONS,\n        header: {\n          title: 'Products',\n          icon: { path: mdiStorefrontOutline.path },\n          // The overview, not `catalog`: this surface is the whole commerce\n          // console — Catalog, Orders, Promotions and Reservations.\n          docsTopic: 'commerce',\n        },\n        Component: CommerceConsolePage,\n      },\n      {\n        // POS register (AGL-312/419): relocated from the app's /pos route —\n        // the generic [pluginSlug] shell now serves it at the same URL.\n        label: 'POS',\n        href: '/pos',\n        /*\n         * WHO may open the register, declared on THIS nav item rather than on\n         * the extension.\n         *\n         * A key here narrows one surface; a key on the extension would gate\n         * every surface it registers, and Products is the sibling — a catalog\n         * anyone who works on the site may open. The register is the one that\n         * takes money and lists checked-in guests by name, so the two\n         * genuinely have different answers and only this one is narrowed.\n         *\n         * `managePos` rather than a dotted catalog key because it is the key\n         * the sale itself is refused by: `server/pos-order.ts` resolves the\n         * member's permission map and returns 403 unless `managePos` holds.\n         * The shell answers this declaration out of that same resolved map, so\n         * the console offers a register exactly to the people the route will\n         * accept a sale from — the gate and its server twin cannot disagree,\n         * because they are reading one value.\n         *\n         * `pos-order.ts` stays the enforcement point regardless. This decides\n         * whether the surface is built at all, which is the part a check\n         * inside the page cannot do: by the time the page can refuse itself it\n         * has mounted and its product, register, location and reservation\n         * listeners are already open.\n         */\n        permission: 'managePos',\n        icon: { path: mdiStorefrontOutline.path },\n        header: { title: 'Point of Sale', docsTopic: 'pos' },\n        Component: PosConsolePage,\n      },\n    ],\n  })\n  /*\n   * The USER ACCOUNTS half, registered under its own id.\n   *\n   * `accounts` is a switch rather than a bundle: the member blocks and every\n   * `membership/*` handler ship inside this package, which is why the id\n   * carries no loader manifest entry of its own. A second extension is how a\n   * card about visitor accounts is gated on the switch that decides whether\n   * the site serves them — `listConsoleWidgets` filters by the workspace's\n   * effective plugin ids, and `accounts` is default-OFF per site.\n   *\n   * A separate call rather than more widgets on the commerce extension: the\n   * registry is keyed by `pluginId` and that key IS the gate, so folding this\n   * card in above would have kept the dashboard defect it fixes — `Newest\n   * site users` on a site whose /signin returns 404.\n   */\n  Aglyn.registerConsoleExtension({\n    pluginId: Aglyn.ACCOUNTS_PLUGIN_ID,\n    displayName: 'User Accounts',\n    widgets: [\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'accounts-newest-site-users',\n        title: 'Newest site users',\n        Component: NewestSiteUsersCard,\n      },\n    ],\n  })\n}\n\nexport * from './site'\n"],"names":["Aglyn","mdiStorefrontOutline","lazy","PosConsolePage","CommerceGlanceCard","NewestSiteUsersCard","SiteMemberPurchases","COMMERCE_CONSOLE_SECTIONS","BUNDLE_ID","COMMERCE_PERMISSIONS","registerCommerceRecordLists","registerCommerceRecordRoutes","registerCommerceZones","COMMERCE_SEARCH_SOURCES","COMMERCE_CONFIG_SCHEMA","CommerceConsolePage","registerCommerceConsole","registerPluginPermissions","registerPluginConfigSchema","registerConsoleExtension","pluginId","displayName","searchSources","widgets","slot","widgetId","title","Component","CONSOLE_WIDGET_SLOTS","siteMember","navItems","label","href","icon","path","sections","header","docsTopic","permission","ACCOUNTS_PLUGIN_ID","hostDashboard"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,IAAI,QAAQ,QAAO;AAC5B,MAAMC,iBAAiBD,KAAK,IAAM,MAAM,CAAC;AACzC,MAAME,qBAAqBF,KACzB,IAAM,MAAM,CAAC;AAEf,MAAMG,sBAAsBH,KAC1B,IAAM,MAAM,CAAC;AAEf,MAAMI,sBAAsBJ,KAC1B,IAAM,MAAM,CAAC;AAEf,SAASK,yBAAyB,QAAQ,4CAAwC;AAClF,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,2BAA2B,QAAQ,mCAA+B;AAC3E,SAASC,4BAA4B,QAAQ,oCAAgC;AAC7E,SAASC,qBAAqB,QAAQ,wCAAoC;AAC1E,SAASC,uBAAuB,QAAQ,qCAAiC;AACzE,SAASC,sBAAsB,QAAQ,qBAAiB;AAExD,kEAAkE,GAClE,MAAMC,sBAAsBb,KAAK,IAAM,MAAM,CAAC;AAE9C;;;;;;;;;CASC,GACD,OAAO,SAASc;IACd,wEAAwE;IACxEL;IACAD;IACA,yEAAyE;IACzE,2DAA2D;IAC3DE;IACA,kEAAkE;IAClE,uDAAuD;IACvDZ,MAAMiB,yBAAyB,CAACR;IAChC,2EAA2E;IAC3E,kEAAkE;IAClET,MAAMkB,0BAA0B,CAACJ;IACjCd,MAAMmB,wBAAwB,CAAC;QAC7BC,UAAUZ;QACVa,aAAa;QACbC,eAAeT;QACf,kEAAkE;QAClE,wCAAwC;QACxCU,SAAS;YACP;gBACEC,MAAM;gBACNC,UAAU;gBACVC,OAAO;gBACPC,WAAWvB;YACb;YACA,uEAAuE;YACvE,2DAA2D;YAC3D,mCAAmC;YACnC;gBACEoB,MAAMxB,MAAM4B,oBAAoB,CAACC,UAAU;gBAC3CJ,UAAU;gBACVC,OAAO;gBACPC,WAAWrB;YACb;SACD;QACDwB,UAAU;YACR;gBACEC,OAAO;gBACPC,MAAM;gBACNC,MAAM;oBAAEC,MAAMjC,qBAAqBiC,IAAI;gBAAC;gBACxC,oEAAoE;gBACpE,qEAAqE;gBACrE,6CAA6C;gBAC7CC,UAAU5B;gBACV6B,QAAQ;oBACNV,OAAO;oBACPO,MAAM;wBAAEC,MAAMjC,qBAAqBiC,IAAI;oBAAC;oBACxC,kEAAkE;oBAClE,0DAA0D;oBAC1DG,WAAW;gBACb;gBACAV,WAAWZ;YACb;YACA;gBACE,oEAAoE;gBACpE,gEAAgE;gBAChEgB,OAAO;gBACPC,MAAM;gBACN;;;;;;;;;;;;;;;;;;;;;;;SAuBC,GACDM,YAAY;gBACZL,MAAM;oBAAEC,MAAMjC,qBAAqBiC,IAAI;gBAAC;gBACxCE,QAAQ;oBAAEV,OAAO;oBAAiBW,WAAW;gBAAM;gBACnDV,WAAWxB;YACb;SACD;IACH;IACA;;;;;;;;;;;;;;GAcC,GACDH,MAAMmB,wBAAwB,CAAC;QAC7BC,UAAUpB,MAAMuC,kBAAkB;QAClClB,aAAa;QACbE,SAAS;YACP;gBACEC,MAAMxB,MAAM4B,oBAAoB,CAACY,aAAa;gBAC9Cf,UAAU;gBACVC,OAAO;gBACPC,WAAWtB;YACb;SACD;IACH;AACF;AAEA,cAAc,YAAQ"}