@aglyn/plugins-commerce 1.0.0-beta.229 → 1.0.0-beta.231

package/src/lib/server/pos-display.js

@@ -0,0 +1,419 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { createHash, randomBytes, randomInt } from "crypto";
+import { consumeRateLimit, firebaseAdmin, getPluginConfig, getOrgForHost } from "@aglyn/tenant-data-admin";
+import { resolveMediaSrc } from "@aglyn/aglyn/app-utils/media-ref";
+import { pluginSmsAvailable } from "@aglyn/aglyn/plugin-manager/plugin-sms-messaging";
+import * as CommerceModel from "../model/index.js";
+import { posRegisterSettings } from "../plugin-config.js";
+import { authorizePosStaff, posQueryBody, posRequestBody } from "./pos-auth.js";
+import { POS_CURRENCY } from "./pos-stripe.js";
+/*==========================================
+ * THE CUSTOMER DISPLAY (AGL-3608).
+ *
+ * A second screen — a tablet on a stand facing the customer — that shows the
+ * basket, takes the tip and the receipt choice, and hands both back to the
+ * cashier. It must work with NO staff sign-in on the customer's device, so it
+ * holds nothing but a display token.
+ *
+ * ## Pairing
+ *
+ * The register asks for a six-digit code (`pairing-code`), good for ten
+ * minutes and usable once. The display sends it (`pair`) and receives a
+ * random 256-bit token. Only hashes are stored: `posDisplayPairings/{sha256}`
+ * for the code and `posDisplayTokens/{sha256}` for the token, each naming the
+ * one site and register it opens. Revoking a display, or removing its
+ * register, kills the token. A six-digit space is small, so `pair` is rate
+ * limited per address and a code dies at its first use.
+ *
+ * ## Why polling through this route, not a Firestore listener
+ *
+ * A Firestore listener needs a Firebase identity the rules can test, which on
+ * the customer's device means minting a custom auth session — a credential
+ * that would sit on an unattended tablet with the console's own SDK. Polling
+ * this route once a second with the display token is the simplest thing that
+ * is secure: the token opens exactly one register's display state and
+ * nothing else, the state lives in a server-only collection
+ * (`posDisplayStates`, denied to every client by the rules) so not even a
+ * signed-in site member can read a customer's typed address out of it, and a
+ * revoked token stops working on the next poll.
+ *=========================================*/ const PAIRINGS = 'posDisplayPairings';
+const TOKENS = 'posDisplayTokens';
+const STATES = 'posDisplayStates';
+export function sha256(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+/** The one state document a register's display reads. */ export function posDisplayStateId(hostId, registerId) {
+    return `${hostId}__${registerId}`;
+}
+function stateRef(hostId, registerId) {
+    return firebaseAdmin.app().firestore().collection(STATES).doc(posDisplayStateId(hostId, registerId));
+}
+/**
+ * The store's currency (`hosts/{hostId}/settings/store.currency`, lower
+ * case), which every figure on the customer's screen is formatted in. A
+ * store that never chose one is in the currency the register charges.
+ */ export async function posDisplayCurrency(hostId) {
+    var _snapshot_get;
+    const snapshot = await firebaseAdmin.app().firestore().collection('hosts').doc(hostId).collection('settings').doc('store').get().catch(()=>null);
+    const chosen = String((snapshot == null ? void 0 : snapshot.exists) ? (_snapshot_get = snapshot.get('currency')) != null ? _snapshot_get : '' : '').trim().toLowerCase();
+    return /^[a-z]{3}$/.test(chosen) ? chosen : POS_CURRENCY;
+}
+/**
+ * Writes the display state whole, so nothing from the last prompt lingers —
+ * a customer's typed address included. The currency is the store's, stamped
+ * here so the screen never formats a figure in one the register made up.
+ */ export async function writePosDisplayState(hostId, registerId, state) {
+    await stateRef(hostId, registerId).set(_extends({}, state, {
+        currency: await posDisplayCurrency(hostId),
+        hostId,
+        registerId
+    }));
+}
+/** The register's display returns to the thank-you screen with no customer data. */ export async function resetPosDisplay(hostId, registerId) {
+    await writePosDisplayState(hostId, registerId, {
+        mode: 'thanks',
+        updatedAtMs: Date.now()
+    });
+}
+/**
+ * Ends the customer's turn once the register has acted on their receipt
+ * choice (AGL-3608): a display still on the receipt prompt says thank you,
+ * and an answer holding a typed email address or phone number is dropped
+ * from the state either way, so no contact detail outlives the sale on the
+ * server doc a public screen reads.
+ *
+ * Conditional, in a transaction, because the receipt can be sent after the
+ * cashier has started the next sale: a display already showing the next
+ * customer's basket is left alone.
+ */ export async function finishPosDisplayReceipt(hostId, registerId) {
+    const firestore = firebaseAdmin.app().firestore();
+    const ref = stateRef(hostId, registerId);
+    const currency = await posDisplayCurrency(hostId);
+    await firestore.runTransaction(async (transaction)=>{
+        const snapshot = await transaction.get(ref);
+        if (!snapshot.exists) return;
+        const state = snapshot.data();
+        if (state.mode === 'receipt') {
+            transaction.set(ref, {
+                mode: 'thanks',
+                updatedAtMs: Date.now(),
+                currency,
+                hostId,
+                registerId
+            });
+            return;
+        }
+        if (state.response && (state.response.email || state.response.phone)) {
+            const rest = _extends({}, state);
+            delete rest.response;
+            transaction.set(ref, rest);
+        }
+    });
+}
+/** Signs every display of a register out, and forgets its state. */ export async function revokePosDisplays(hostId, registerId) {
+    const firestore = firebaseAdmin.app().firestore();
+    const tokens = await firestore.collection(TOKENS).where('hostId', '==', hostId).where('registerId', '==', registerId).limit(50).get();
+    await Promise.all(tokens.docs.map((doc)=>doc.ref.delete()));
+    await stateRef(hostId, registerId).delete().catch(()=>undefined);
+}
+async function registerExists(hostId, registerId) {
+    if (!/^[A-Za-z0-9_-]{1,128}$/.test(registerId)) return false;
+    return (await firebaseAdmin.app().firestore().collection('hosts').doc(hostId).collection('registers').doc(registerId).get()).exists;
+}
+/** The store's name, logo and welcome line, for the idle and thank-you screens. */ async function displayBranding(hostId) {
+    var _ref, _host_get, _resolveMediaSrc, _resolveMediaSrc1;
+    const firestore = firebaseAdmin.app().firestore();
+    const host = await firestore.collection('hosts').doc(hostId).get();
+    const ownerOrg = await getOrgForHost(hostId).catch(()=>null);
+    const settings = posRegisterSettings(await getPluginConfig(ownerOrg == null ? void 0 : ownerOrg.orgId, 'commerce', {
+        hostId
+    }).catch(()=>({})));
+    return {
+        name: String((_ref = (_host_get = host.get('displayName')) != null ? _host_get : host.get('name')) != null ? _ref : '').slice(0, 80) || 'Welcome',
+        logoUrl: (_resolveMediaSrc = resolveMediaSrc(host.get('logoUrl'), {
+            hostId
+        })) != null ? _resolveMediaSrc : null,
+        logoDarkUrl: (_resolveMediaSrc1 = resolveMediaSrc(host.get('logoDarkUrl'), {
+            hostId
+        })) != null ? _resolveMediaSrc1 : null,
+        message: settings.displayMessage || 'Welcome'
+    };
+}
+/** The display token on a request, or ''. */ function displayToken(req, body) {
+    var _req_headers_xposdisplaytoken, _body_token;
+    const header = String((_req_headers_xposdisplaytoken = req.headers['x-pos-display-token']) != null ? _req_headers_xposdisplaytoken : '');
+    return (header || String((_body_token = body['token']) != null ? _body_token : '')).trim().slice(0, 128);
+}
+/** The register a live display token opens, or null. */ async function resolveDisplayToken(token) {
+    var _snapshot_get, _snapshot_get1, _snapshot_get2;
+    if (!/^[A-Za-z0-9_-]{40,128}$/.test(token)) return null;
+    const ref = firebaseAdmin.app().firestore().collection(TOKENS).doc(sha256(token));
+    const snapshot = await ref.get();
+    if (!snapshot.exists) return null;
+    const hostId = String((_snapshot_get = snapshot.get('hostId')) != null ? _snapshot_get : '');
+    const registerId = String((_snapshot_get1 = snapshot.get('registerId')) != null ? _snapshot_get1 : '');
+    if (!hostId || !registerId) return null;
+    // A display whose register was removed is dead, even if its token row
+    // somehow outlived the removal.
+    if (!await registerExists(hostId, registerId)) return null;
+    const lastSeen = Number((_snapshot_get2 = snapshot.get('lastSeenAtMs')) != null ? _snapshot_get2 : 0);
+    if (Date.now() - lastSeen > 60000) {
+        await ref.set({
+            lastSeenAtMs: Date.now()
+        }, {
+            merge: true
+        }).catch(()=>undefined);
+    }
+    return {
+        hostId,
+        registerId,
+        ref
+    };
+}
+/**
+ * `POST /api/commerce/pos-display`.
+ *
+ * Staff (Firebase token + the register's gate): `pairing-code`, `push`,
+ * `state`, `displays`, `revoke`.
+ * Display (display token only): `pair`, `poll`, `respond`, `forget`.
+ */ export const posDisplayHandler = async (req, res)=>{
+    var _body_action;
+    // The two polls are GETs: a read is not a console write, so a display and a
+    // register asking once a second do not spend the console's write budget.
+    const body = req.method === 'GET' ? posQueryBody(req) : posRequestBody(req);
+    const action = String((_body_action = body['action']) != null ? _body_action : '');
+    if (!(req.method === 'POST' || req.method === 'GET' && (action === 'poll' || action === 'state'))) {
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    res.setHeader('Cache-Control', 'no-store');
+    try {
+        switch(action){
+            case 'pair':
+                return await pair(req, body, res);
+            case 'poll':
+            case 'respond':
+            case 'forget':
+                {
+                    const display = await resolveDisplayToken(displayToken(req, body));
+                    if (!display) return res.status(401).json({
+                        error: 'This display is not paired.'
+                    });
+                    if (action === 'forget') {
+                        await display.ref.delete();
+                        return res.status(200).json({
+                            ok: true
+                        });
+                    }
+                    const snapshot = await stateRef(display.hostId, display.registerId).get();
+                    const state = snapshot.exists ? snapshot.data() : null;
+                    if (action === 'poll') {
+                        return res.status(200).json({
+                            state: CommerceModel.posDisplayPublicState(state, Date.now()),
+                            branding: body['branding'] === true || body['branding'] === 'true' ? await displayBranding(display.hostId) : undefined
+                        });
+                    }
+                    const response = CommerceModel.sanitizePosDisplayResponse(state, body['response'], Date.now());
+                    if (!response) {
+                        return res.status(409).json({
+                            error: 'That screen has moved on. Check the display.'
+                        });
+                    }
+                    await stateRef(display.hostId, display.registerId).set({
+                        response
+                    }, {
+                        merge: true
+                    });
+                    return res.status(200).json({
+                        ok: true
+                    });
+                }
+            default:
+                return await staffAction(req, body, action, res);
+        }
+    } catch (error) {
+        console.error('[pos-display]', action, error);
+        return res.status(500).json({
+            error: 'The customer display could not be updated'
+        });
+    }
+};
+async function pair(req, body, res) {
+    var _ref, _body_code;
+    var _req_socket;
+    const address = String((_ref = (_req_socket = req.socket) == null ? void 0 : _req_socket.remoteAddress) != null ? _ref : '') || 'no-address';
+    const rate = await consumeRateLimit(`pos-display-pair:${address}`, {
+        limit: 10,
+        windowMs: 10 * 60 * 1000
+    });
+    if (!rate.allowed) {
+        return res.status(429).json({
+            error: 'Too many tries. Wait a few minutes and try again.'
+        });
+    }
+    const code = String((_body_code = body['code']) != null ? _body_code : '').replace(/\D/g, '');
+    if (code.length !== 6) return res.status(400).json({
+        error: 'Enter the 6-digit code from the register.'
+    });
+    const firestore = firebaseAdmin.app().firestore();
+    const pairingRef = firestore.collection(PAIRINGS).doc(sha256(code));
+    const token = randomBytes(32).toString('base64url');
+    // Spent in the same transaction that mints the token: a code opens one
+    // display, once, and a second display racing the first gets nothing.
+    const paired = await firestore.runTransaction(async (transaction)=>{
+        var _snapshot_get, _snapshot_get1, _snapshot_get2, _snapshot_get3, _body_label;
+        const snapshot = await transaction.get(pairingRef);
+        if (!snapshot.exists) return null;
+        const expiresAtMs = Number((_snapshot_get = snapshot.get('expiresAtMs')) != null ? _snapshot_get : 0);
+        transaction.delete(pairingRef);
+        if (!(expiresAtMs > Date.now())) return null;
+        const hostId = String((_snapshot_get1 = snapshot.get('hostId')) != null ? _snapshot_get1 : '');
+        const registerId = String((_snapshot_get2 = snapshot.get('registerId')) != null ? _snapshot_get2 : '');
+        transaction.set(firestore.collection(TOKENS).doc(sha256(token)), {
+            hostId,
+            registerId,
+            createdAtMs: Date.now(),
+            createdBy: String((_snapshot_get3 = snapshot.get('createdBy')) != null ? _snapshot_get3 : ''),
+            lastSeenAtMs: Date.now(),
+            label: String((_body_label = body['label']) != null ? _body_label : '').slice(0, 60) || 'Customer display'
+        });
+        return {
+            hostId,
+            registerId
+        };
+    });
+    if (!paired) {
+        return res.status(404).json({
+            error: 'That code is not valid. Show a new code on the register.'
+        });
+    }
+    return res.status(200).json({
+        token,
+        branding: await displayBranding(paired.hostId)
+    });
+}
+async function staffAction(req, body, action, res) {
+    var _body_hostId, _body_registerId;
+    const hostId = String((_body_hostId = body['hostId']) != null ? _body_hostId : '');
+    const gate = await authorizePosStaff(req, hostId);
+    if ('error' in gate) return res.status(gate.status).json({
+        error: gate.error
+    });
+    const registerId = String((_body_registerId = body['registerId']) != null ? _body_registerId : '');
+    if (!await registerExists(hostId, registerId)) {
+        return res.status(404).json({
+            error: 'Unknown register'
+        });
+    }
+    const firestore = firebaseAdmin.app().firestore();
+    switch(action){
+        case 'pairing-code':
+            {
+                for(let attempt = 0; attempt < 8; attempt++){
+                    const code = String(randomInt(0, 1000000)).padStart(6, '0');
+                    const ref = firestore.collection(PAIRINGS).doc(sha256(code));
+                    const expiresAtMs = Date.now() + CommerceModel.POS_DISPLAY_PAIRING_TTL_MS;
+                    const claimed = await firestore.runTransaction(async (transaction)=>{
+                        var _existing_get;
+                        const existing = await transaction.get(ref);
+                        // A live code another register is showing is never overwritten.
+                        if (existing.exists && Number((_existing_get = existing.get('expiresAtMs')) != null ? _existing_get : 0) > Date.now()) return false;
+                        transaction.set(ref, {
+                            hostId,
+                            registerId,
+                            expiresAtMs,
+                            createdBy: gate.staff.uid
+                        });
+                        return true;
+                    });
+                    if (claimed) return res.status(200).json({
+                        code,
+                        expiresAtMs
+                    });
+                }
+                return res.status(503).json({
+                    error: 'Could not make a code. Try again.'
+                });
+            }
+        case 'push':
+            {
+                var _state_promptId;
+                const state = CommerceModel.sanitizePosDisplayState(body['state'], Date.now());
+                // "Text" is never offered on a screen when the store cannot send one.
+                if (state.receipt && !pluginSmsAvailable()) {
+                    const channels = state.receipt.channels.filter((channel)=>channel !== 'sms');
+                    state.receipt.channels = channels.length ? channels : [
+                        'print',
+                        'none'
+                    ];
+                }
+                await writePosDisplayState(hostId, registerId, state);
+                return res.status(200).json({
+                    ok: true,
+                    promptId: (_state_promptId = state.promptId) != null ? _state_promptId : null
+                });
+            }
+        case 'state':
+            {
+                const snapshot = await stateRef(hostId, registerId).get();
+                const state = snapshot.exists ? snapshot.data() : null;
+                const displays = await firestore.collection(TOKENS).where('hostId', '==', hostId).where('registerId', '==', registerId).limit(10).get();
+                return res.status(200).json({
+                    state,
+                    // A display that polled within the last two minutes is "connected".
+                    connected: displays.docs.some((doc)=>{
+                        var _doc_get;
+                        return Date.now() - Number((_doc_get = doc.get('lastSeenAtMs')) != null ? _doc_get : 0) < 120000;
+                    })
+                });
+            }
+        case 'displays':
+            {
+                const displays = await firestore.collection(TOKENS).where('hostId', '==', hostId).where('registerId', '==', registerId).limit(10).get();
+                return res.status(200).json({
+                    displays: displays.docs.map((doc)=>{
+                        var _doc_get, _doc_get1, _doc_get2;
+                        return {
+                            id: doc.id.slice(0, 16),
+                            label: String((_doc_get = doc.get('label')) != null ? _doc_get : 'Customer display'),
+                            createdAtMs: Number((_doc_get1 = doc.get('createdAtMs')) != null ? _doc_get1 : 0),
+                            lastSeenAtMs: Number((_doc_get2 = doc.get('lastSeenAtMs')) != null ? _doc_get2 : 0)
+                        };
+                    })
+                });
+            }
+        case 'revoke':
+            {
+                var _body_displayId;
+                const prefix = String((_body_displayId = body['displayId']) != null ? _body_displayId : '');
+                const displays = await firestore.collection(TOKENS).where('hostId', '==', hostId).where('registerId', '==', registerId).limit(10).get();
+                const doomed = displays.docs.filter((doc)=>prefix === '*' || prefix.length === 16 && doc.id.startsWith(prefix));
+                await Promise.all(doomed.map((doc)=>doc.ref.delete()));
+                return res.status(200).json({
+                    revoked: doomed.length
+                });
+            }
+        default:
+            return res.status(400).json({
+                error: 'Unknown action'
+            });
+    }
+}
+
+//# sourceMappingURL=pos-display.js.map

package/src/lib/server/pos-display.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-display.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createHash, randomBytes, randomInt } from 'crypto'\nimport { consumeRateLimit, firebaseAdmin, getPluginConfig, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport type { PluginApiHandler, PluginApiRequest } from '@aglyn/aglyn/server'\nimport { resolveMediaSrc } from '@aglyn/aglyn/app-utils/media-ref'\nimport { pluginSmsAvailable } from '@aglyn/aglyn/plugin-manager/plugin-sms-messaging'\nimport * as CommerceModel from '../model'\nimport { posRegisterSettings } from '../plugin-config'\nimport { authorizePosStaff, posQueryBody, posRequestBody } from './pos-auth'\nimport { POS_CURRENCY } from './pos-stripe'\n\n/*==========================================\n * THE CUSTOMER DISPLAY (AGL-3608).\n *\n * A second screen — a tablet on a stand facing the customer — that shows the\n * basket, takes the tip and the receipt choice, and hands both back to the\n * cashier. It must work with NO staff sign-in on the customer's device, so it\n * holds nothing but a display token.\n *\n * ## Pairing\n *\n * The register asks for a six-digit code (`pairing-code`), good for ten\n * minutes and usable once. The display sends it (`pair`) and receives a\n * random 256-bit token. Only hashes are stored: `posDisplayPairings/{sha256}`\n * for the code and `posDisplayTokens/{sha256}` for the token, each naming the\n * one site and register it opens. Revoking a display, or removing its\n * register, kills the token. A six-digit space is small, so `pair` is rate\n * limited per address and a code dies at its first use.\n *\n * ## Why polling through this route, not a Firestore listener\n *\n * A Firestore listener needs a Firebase identity the rules can test, which on\n * the customer's device means minting a custom auth session — a credential\n * that would sit on an unattended tablet with the console's own SDK. Polling\n * this route once a second with the display token is the simplest thing that\n * is secure: the token opens exactly one register's display state and\n * nothing else, the state lives in a server-only collection\n * (`posDisplayStates`, denied to every client by the rules) so not even a\n * signed-in site member can read a customer's typed address out of it, and a\n * revoked token stops working on the next poll.\n *=========================================*/\n\nconst PAIRINGS = 'posDisplayPairings'\nconst TOKENS = 'posDisplayTokens'\nconst STATES = 'posDisplayStates'\n\nexport function sha256(value: string): string {\n  return createHash('sha256').update(value).digest('hex')\n}\n\n/** The one state document a register's display reads. */\nexport function posDisplayStateId(hostId: string, registerId: string): string {\n  return `${hostId}__${registerId}`\n}\n\nfunction stateRef(hostId: string, registerId: string) {\n  return firebaseAdmin\n    .app()\n    .firestore()\n    .collection(STATES)\n    .doc(posDisplayStateId(hostId, registerId))\n}\n\n/**\n * The store's currency (`hosts/{hostId}/settings/store.currency`, lower\n * case), which every figure on the customer's screen is formatted in. A\n * store that never chose one is in the currency the register charges.\n */\nexport async function posDisplayCurrency(hostId: string): Promise<string> {\n  const snapshot = await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('hosts')\n    .doc(hostId)\n    .collection('settings')\n    .doc('store')\n    .get()\n    .catch(() => null)\n  const chosen = String(snapshot?.exists ? (snapshot.get('currency') ?? '') : '')\n    .trim()\n    .toLowerCase()\n  return /^[a-z]{3}$/.test(chosen) ? chosen : POS_CURRENCY\n}\n\n/**\n * Writes the display state whole, so nothing from the last prompt lingers —\n * a customer's typed address included. The currency is the store's, stamped\n * here so the screen never formats a figure in one the register made up.\n */\nexport async function writePosDisplayState(\n  hostId: string,\n  registerId: string,\n  state: CommerceModel.PosDisplayState,\n): Promise<void> {\n  await stateRef(hostId, registerId).set({\n    ...state,\n    currency: await posDisplayCurrency(hostId),\n    hostId,\n    registerId,\n  })\n}\n\n/** The register's display returns to the thank-you screen with no customer data. */\nexport async function resetPosDisplay(hostId: string, registerId: string): Promise<void> {\n  await writePosDisplayState(hostId, registerId, { mode: 'thanks', updatedAtMs: Date.now() })\n}\n\n/**\n * Ends the customer's turn once the register has acted on their receipt\n * choice (AGL-3608): a display still on the receipt prompt says thank you,\n * and an answer holding a typed email address or phone number is dropped\n * from the state either way, so no contact detail outlives the sale on the\n * server doc a public screen reads.\n *\n * Conditional, in a transaction, because the receipt can be sent after the\n * cashier has started the next sale: a display already showing the next\n * customer's basket is left alone.\n */\nexport async function finishPosDisplayReceipt(hostId: string, registerId: string): Promise<void> {\n  const firestore = firebaseAdmin.app().firestore()\n  const ref = stateRef(hostId, registerId)\n  const currency = await posDisplayCurrency(hostId)\n  await firestore.runTransaction(async (transaction: any) => {\n    const snapshot = await transaction.get(ref)\n    if (!snapshot.exists) return\n    const state = snapshot.data() as CommerceModel.PosDisplayState\n    if (state.mode === 'receipt') {\n      transaction.set(ref, {\n        mode: 'thanks',\n        updatedAtMs: Date.now(),\n        currency,\n        hostId,\n        registerId,\n      })\n      return\n    }\n    if (state.response && (state.response.email || state.response.phone)) {\n      const rest = { ...state }\n      delete rest.response\n      transaction.set(ref, rest)\n    }\n  })\n}\n\n/** Signs every display of a register out, and forgets its state. */\nexport async function revokePosDisplays(hostId: string, registerId: string): Promise<void> {\n  const firestore = firebaseAdmin.app().firestore()\n  const tokens = await firestore\n    .collection(TOKENS)\n    .where('hostId', '==', hostId)\n    .where('registerId', '==', registerId)\n    .limit(50)\n    .get()\n  await Promise.all(tokens.docs.map((doc: any) => doc.ref.delete()))\n  await stateRef(hostId, registerId).delete().catch(() => undefined)\n}\n\nasync function registerExists(hostId: string, registerId: string): Promise<boolean> {\n  if (!/^[A-Za-z0-9_-]{1,128}$/.test(registerId)) return false\n  return (\n    await firebaseAdmin\n      .app()\n      .firestore()\n      .collection('hosts')\n      .doc(hostId)\n      .collection('registers')\n      .doc(registerId)\n      .get()\n  ).exists\n}\n\n/** The store's name, logo and welcome line, for the idle and thank-you screens. */\nasync function displayBranding(hostId: string) {\n  const firestore = firebaseAdmin.app().firestore()\n  const host = await firestore.collection('hosts').doc(hostId).get()\n  const ownerOrg = await getOrgForHost(hostId).catch(() => null)\n  const settings = posRegisterSettings(\n    await getPluginConfig(ownerOrg?.orgId, 'commerce', { hostId }).catch(() => ({})),\n  )\n  return {\n    name: String(host.get('displayName') ?? host.get('name') ?? '').slice(0, 80) || 'Welcome',\n    logoUrl: resolveMediaSrc(host.get('logoUrl'), { hostId }) ?? null,\n    logoDarkUrl: resolveMediaSrc(host.get('logoDarkUrl'), { hostId }) ?? null,\n    message: settings.displayMessage || 'Welcome',\n  }\n}\n\n/** The display token on a request, or ''. */\nfunction displayToken(req: PluginApiRequest, body: Record<string, any>): string {\n  const header = String(req.headers['x-pos-display-token'] ?? '')\n  return (header || String(body['token'] ?? '')).trim().slice(0, 128)\n}\n\n/** The register a live display token opens, or null. */\nasync function resolveDisplayToken(\n  token: string,\n): Promise<{ hostId: string; registerId: string; ref: any } | null> {\n  if (!/^[A-Za-z0-9_-]{40,128}$/.test(token)) return null\n  const ref = firebaseAdmin.app().firestore().collection(TOKENS).doc(sha256(token))\n  const snapshot = await ref.get()\n  if (!snapshot.exists) return null\n  const hostId = String(snapshot.get('hostId') ?? '')\n  const registerId = String(snapshot.get('registerId') ?? '')\n  if (!hostId || !registerId) return null\n  // A display whose register was removed is dead, even if its token row\n  // somehow outlived the removal.\n  if (!(await registerExists(hostId, registerId))) return null\n  const lastSeen = Number(snapshot.get('lastSeenAtMs') ?? 0)\n  if (Date.now() - lastSeen > 60_000) {\n    await ref.set({ lastSeenAtMs: Date.now() }, { merge: true }).catch(() => undefined)\n  }\n  return { hostId, registerId, ref }\n}\n\n/**\n * `POST /api/commerce/pos-display`.\n *\n * Staff (Firebase token + the register's gate): `pairing-code`, `push`,\n * `state`, `displays`, `revoke`.\n * Display (display token only): `pair`, `poll`, `respond`, `forget`.\n */\nexport const posDisplayHandler: PluginApiHandler = async (req, res) => {\n  // The two polls are GETs: a read is not a console write, so a display and a\n  // register asking once a second do not spend the console's write budget.\n  const body = req.method === 'GET' ? posQueryBody(req) : posRequestBody(req)\n  const action = String(body['action'] ?? '')\n  if (\n    !(req.method === 'POST' || (req.method === 'GET' && (action === 'poll' || action === 'state')))\n  ) {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  res.setHeader('Cache-Control', 'no-store')\n  try {\n    switch (action) {\n      case 'pair':\n        return await pair(req, body, res)\n      case 'poll':\n      case 'respond':\n      case 'forget': {\n        const display = await resolveDisplayToken(displayToken(req, body))\n        if (!display) return res.status(401).json({ error: 'This display is not paired.' })\n        if (action === 'forget') {\n          await display.ref.delete()\n          return res.status(200).json({ ok: true })\n        }\n        const snapshot = await stateRef(display.hostId, display.registerId).get()\n        const state = snapshot.exists ? (snapshot.data() as CommerceModel.PosDisplayState) : null\n        if (action === 'poll') {\n          return res.status(200).json({\n            state: CommerceModel.posDisplayPublicState(state, Date.now()),\n            branding:\n              body['branding'] === true || body['branding'] === 'true'\n                ? await displayBranding(display.hostId)\n                : undefined,\n          })\n        }\n        const response = CommerceModel.sanitizePosDisplayResponse(state, body['response'], Date.now())\n        if (!response) {\n          return res.status(409).json({ error: 'That screen has moved on. Check the display.' })\n        }\n        await stateRef(display.hostId, display.registerId).set({ response }, { merge: true })\n        return res.status(200).json({ ok: true })\n      }\n      default:\n        return await staffAction(req, body, action, res)\n    }\n  } catch (error) {\n    console.error('[pos-display]', action, error)\n    return res.status(500).json({ error: 'The customer display could not be updated' })\n  }\n}\n\nasync function pair(\n  req: PluginApiRequest,\n  body: Record<string, any>,\n  res: Parameters<PluginApiHandler>[1],\n) {\n  const address = String(req.socket?.remoteAddress ?? '') || 'no-address'\n  const rate = await consumeRateLimit(`pos-display-pair:${address}`, {\n    limit: 10,\n    windowMs: 10 * 60 * 1000,\n  })\n  if (!rate.allowed) {\n    return res.status(429).json({ error: 'Too many tries. Wait a few minutes and try again.' })\n  }\n  const code = String(body['code'] ?? '').replace(/\\D/g, '')\n  if (code.length !== 6) return res.status(400).json({ error: 'Enter the 6-digit code from the register.' })\n  const firestore = firebaseAdmin.app().firestore()\n  const pairingRef = firestore.collection(PAIRINGS).doc(sha256(code))\n  const token = randomBytes(32).toString('base64url')\n  // Spent in the same transaction that mints the token: a code opens one\n  // display, once, and a second display racing the first gets nothing.\n  const paired = await firestore.runTransaction(async (transaction: any) => {\n    const snapshot = await transaction.get(pairingRef)\n    if (!snapshot.exists) return null\n    const expiresAtMs = Number(snapshot.get('expiresAtMs') ?? 0)\n    transaction.delete(pairingRef)\n    if (!(expiresAtMs > Date.now())) return null\n    const hostId = String(snapshot.get('hostId') ?? '')\n    const registerId = String(snapshot.get('registerId') ?? '')\n    transaction.set(firestore.collection(TOKENS).doc(sha256(token)), {\n      hostId,\n      registerId,\n      createdAtMs: Date.now(),\n      createdBy: String(snapshot.get('createdBy') ?? ''),\n      lastSeenAtMs: Date.now(),\n      label: String(body['label'] ?? '').slice(0, 60) || 'Customer display',\n    })\n    return { hostId, registerId }\n  })\n  if (!paired) {\n    return res.status(404).json({ error: 'That code is not valid. Show a new code on the register.' })\n  }\n  return res.status(200).json({ token, branding: await displayBranding(paired.hostId) })\n}\n\nasync function staffAction(\n  req: PluginApiRequest,\n  body: Record<string, any>,\n  action: string,\n  res: Parameters<PluginApiHandler>[1],\n) {\n  const hostId = String(body['hostId'] ?? '')\n  const gate = await authorizePosStaff(req, hostId)\n  if ('error' in gate) return res.status(gate.status).json({ error: gate.error })\n  const registerId = String(body['registerId'] ?? '')\n  if (!(await registerExists(hostId, registerId))) {\n    return res.status(404).json({ error: 'Unknown register' })\n  }\n  const firestore = firebaseAdmin.app().firestore()\n  switch (action) {\n    case 'pairing-code': {\n      for (let attempt = 0; attempt < 8; attempt++) {\n        const code = String(randomInt(0, 1_000_000)).padStart(6, '0')\n        const ref = firestore.collection(PAIRINGS).doc(sha256(code))\n        const expiresAtMs = Date.now() + CommerceModel.POS_DISPLAY_PAIRING_TTL_MS\n        const claimed = await firestore.runTransaction(async (transaction: any) => {\n          const existing = await transaction.get(ref)\n          // A live code another register is showing is never overwritten.\n          if (existing.exists && Number(existing.get('expiresAtMs') ?? 0) > Date.now()) return false\n          transaction.set(ref, {\n            hostId,\n            registerId,\n            expiresAtMs,\n            createdBy: gate.staff.uid,\n          })\n          return true\n        })\n        if (claimed) return res.status(200).json({ code, expiresAtMs })\n      }\n      return res.status(503).json({ error: 'Could not make a code. Try again.' })\n    }\n    case 'push': {\n      const state = CommerceModel.sanitizePosDisplayState(body['state'], Date.now())\n      // \"Text\" is never offered on a screen when the store cannot send one.\n      if (state.receipt && !pluginSmsAvailable()) {\n        const channels = state.receipt.channels.filter((channel) => channel !== 'sms')\n        state.receipt.channels = channels.length ? channels : ['print', 'none']\n      }\n      await writePosDisplayState(hostId, registerId, state)\n      return res.status(200).json({ ok: true, promptId: state.promptId ?? null })\n    }\n    case 'state': {\n      const snapshot = await stateRef(hostId, registerId).get()\n      const state = snapshot.exists ? (snapshot.data() as CommerceModel.PosDisplayState) : null\n      const displays = await firestore\n        .collection(TOKENS)\n        .where('hostId', '==', hostId)\n        .where('registerId', '==', registerId)\n        .limit(10)\n        .get()\n      return res.status(200).json({\n        state,\n        // A display that polled within the last two minutes is \"connected\".\n        connected: displays.docs.some(\n          (doc: any) => Date.now() - Number(doc.get('lastSeenAtMs') ?? 0) < 120_000,\n        ),\n      })\n    }\n    case 'displays': {\n      const displays = await firestore\n        .collection(TOKENS)\n        .where('hostId', '==', hostId)\n        .where('registerId', '==', registerId)\n        .limit(10)\n        .get()\n      return res.status(200).json({\n        displays: displays.docs.map((doc: any) => ({\n          id: doc.id.slice(0, 16),\n          label: String(doc.get('label') ?? 'Customer display'),\n          createdAtMs: Number(doc.get('createdAtMs') ?? 0),\n          lastSeenAtMs: Number(doc.get('lastSeenAtMs') ?? 0),\n        })),\n      })\n    }\n    case 'revoke': {\n      const prefix = String(body['displayId'] ?? '')\n      const displays = await firestore\n        .collection(TOKENS)\n        .where('hostId', '==', hostId)\n        .where('registerId', '==', registerId)\n        .limit(10)\n        .get()\n      const doomed = displays.docs.filter(\n        (doc: any) => prefix === '*' || (prefix.length === 16 && doc.id.startsWith(prefix)),\n      )\n      await Promise.all(doomed.map((doc: any) => doc.ref.delete()))\n      return res.status(200).json({ revoked: doomed.length })\n    }\n    default:\n      return res.status(400).json({ error: 'Unknown action' })\n  }\n}\n"],"names":["createHash","randomBytes","randomInt","consumeRateLimit","firebaseAdmin","getPluginConfig","getOrgForHost","resolveMediaSrc","pluginSmsAvailable","CommerceModel","posRegisterSettings","authorizePosStaff","posQueryBody","posRequestBody","POS_CURRENCY","PAIRINGS","TOKENS","STATES","sha256","value","update","digest","posDisplayStateId","hostId","registerId","stateRef","app","firestore","collection","doc","posDisplayCurrency","snapshot","get","catch","chosen","String","exists","trim","toLowerCase","test","writePosDisplayState","state","set","currency","resetPosDisplay","mode","updatedAtMs","Date","now","finishPosDisplayReceipt","ref","runTransaction","transaction","data","response","email","phone","rest","revokePosDisplays","tokens","where","limit","Promise","all","docs","map","delete","undefined","registerExists","displayBranding","host","ownerOrg","settings","orgId","name","slice","logoUrl","logoDarkUrl","message","displayMessage","displayToken","req","body","header","headers","resolveDisplayToken","token","lastSeen","Number","lastSeenAtMs","merge","posDisplayHandler","res","method","action","status","json","error","setHeader","pair","display","ok","posDisplayPublicState","branding","sanitizePosDisplayResponse","staffAction","console","address","socket","remoteAddress","rate","windowMs","allowed","code","replace","length","pairingRef","toString","paired","expiresAtMs","createdAtMs","createdBy","label","gate","attempt","padStart","POS_DISPLAY_PAIRING_TTL_MS","claimed","existing","staff","uid","sanitizePosDisplayState","receipt","channels","filter","channel","promptId","displays","connected","some","id","prefix","doomed","startsWith","revoked"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,EAAEC,WAAW,EAAEC,SAAS,QAAQ,SAAQ;AAC3D,SAASC,gBAAgB,EAAEC,aAAa,EAAEC,eAAe,EAAEC,aAAa,QAAQ,2BAA0B;AAE1G,SAASC,eAAe,QAAQ,mCAAkC;AAClE,SAASC,kBAAkB,QAAQ,mDAAkD;AACrF,YAAYC,mBAAmB,oBAAU;AACzC,SAASC,mBAAmB,QAAQ,sBAAkB;AACtD,SAASC,iBAAiB,EAAEC,YAAY,EAAEC,cAAc,QAAQ,gBAAY;AAC5E,SAASC,YAAY,QAAQ,kBAAc;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CA6B2C,GAE3C,MAAMC,WAAW;AACjB,MAAMC,SAAS;AACf,MAAMC,SAAS;AAEf,OAAO,SAASC,OAAOC,KAAa;IAClC,OAAOnB,WAAW,UAAUoB,MAAM,CAACD,OAAOE,MAAM,CAAC;AACnD;AAEA,uDAAuD,GACvD,OAAO,SAASC,kBAAkBC,MAAc,EAAEC,UAAkB;IAClE,OAAO,GAAGD,OAAO,EAAE,EAAEC,YAAY;AACnC;AAEA,SAASC,SAASF,MAAc,EAAEC,UAAkB;IAClD,OAAOpB,cACJsB,GAAG,GACHC,SAAS,GACTC,UAAU,CAACX,QACXY,GAAG,CAACP,kBAAkBC,QAAQC;AACnC;AAEA;;;;CAIC,GACD,OAAO,eAAeM,mBAAmBP,MAAc;QAUXQ;IAT1C,MAAMA,WAAW,MAAM3B,cACpBsB,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACN,QACJK,UAAU,CAAC,YACXC,GAAG,CAAC,SACJG,GAAG,GACHC,KAAK,CAAC,IAAM;IACf,MAAMC,SAASC,OAAOJ,CAAAA,4BAAAA,SAAUK,MAAM,KAAIL,gBAAAA,SAASC,GAAG,CAAC,uBAAbD,gBAA4B,KAAM,IACzEM,IAAI,GACJC,WAAW;IACd,OAAO,aAAaC,IAAI,CAACL,UAAUA,SAASpB;AAC9C;AAEA;;;;CAIC,GACD,OAAO,eAAe0B,qBACpBjB,MAAc,EACdC,UAAkB,EAClBiB,KAAoC;IAEpC,MAAMhB,SAASF,QAAQC,YAAYkB,GAAG,CAAC,aAClCD;QACHE,UAAU,MAAMb,mBAAmBP;QACnCA;QACAC;;AAEJ;AAEA,kFAAkF,GAClF,OAAO,eAAeoB,gBAAgBrB,MAAc,EAAEC,UAAkB;IACtE,MAAMgB,qBAAqBjB,QAAQC,YAAY;QAAEqB,MAAM;QAAUC,aAAaC,KAAKC,GAAG;IAAG;AAC3F;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAeC,wBAAwB1B,MAAc,EAAEC,UAAkB;IAC9E,MAAMG,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,MAAMuB,MAAMzB,SAASF,QAAQC;IAC7B,MAAMmB,WAAW,MAAMb,mBAAmBP;IAC1C,MAAMI,UAAUwB,cAAc,CAAC,OAAOC;QACpC,MAAMrB,WAAW,MAAMqB,YAAYpB,GAAG,CAACkB;QACvC,IAAI,CAACnB,SAASK,MAAM,EAAE;QACtB,MAAMK,QAAQV,SAASsB,IAAI;QAC3B,IAAIZ,MAAMI,IAAI,KAAK,WAAW;YAC5BO,YAAYV,GAAG,CAACQ,KAAK;gBACnBL,MAAM;gBACNC,aAAaC,KAAKC,GAAG;gBACrBL;gBACApB;gBACAC;YACF;YACA;QACF;QACA,IAAIiB,MAAMa,QAAQ,IAAKb,CAAAA,MAAMa,QAAQ,CAACC,KAAK,IAAId,MAAMa,QAAQ,CAACE,KAAK,AAAD,GAAI;YACpE,MAAMC,OAAO,aAAKhB;YAClB,OAAOgB,KAAKH,QAAQ;YACpBF,YAAYV,GAAG,CAACQ,KAAKO;QACvB;IACF;AACF;AAEA,kEAAkE,GAClE,OAAO,eAAeC,kBAAkBnC,MAAc,EAAEC,UAAkB;IACxE,MAAMG,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,MAAMgC,SAAS,MAAMhC,UAClBC,UAAU,CAACZ,QACX4C,KAAK,CAAC,UAAU,MAAMrC,QACtBqC,KAAK,CAAC,cAAc,MAAMpC,YAC1BqC,KAAK,CAAC,IACN7B,GAAG;IACN,MAAM8B,QAAQC,GAAG,CAACJ,OAAOK,IAAI,CAACC,GAAG,CAAC,CAACpC,MAAaA,IAAIqB,GAAG,CAACgB,MAAM;IAC9D,MAAMzC,SAASF,QAAQC,YAAY0C,MAAM,GAAGjC,KAAK,CAAC,IAAMkC;AAC1D;AAEA,eAAeC,eAAe7C,MAAc,EAAEC,UAAkB;IAC9D,IAAI,CAAC,yBAAyBe,IAAI,CAACf,aAAa,OAAO;IACvD,OAAO,AACL,CAAA,MAAMpB,cACHsB,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACN,QACJK,UAAU,CAAC,aACXC,GAAG,CAACL,YACJQ,GAAG,EAAC,EACPI,MAAM;AACV;AAEA,iFAAiF,GACjF,eAAeiC,gBAAgB9C,MAAc;QAQ5B+C,MAAAA,WACJ/D,kBACIA;IATf,MAAMoB,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,MAAM2C,OAAO,MAAM3C,UAAUC,UAAU,CAAC,SAASC,GAAG,CAACN,QAAQS,GAAG;IAChE,MAAMuC,WAAW,MAAMjE,cAAciB,QAAQU,KAAK,CAAC,IAAM;IACzD,MAAMuC,WAAW9D,oBACf,MAAML,gBAAgBkE,4BAAAA,SAAUE,KAAK,EAAE,YAAY;QAAElD;IAAO,GAAGU,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;IAE/E,OAAO;QACLyC,MAAMvC,QAAOmC,QAAAA,YAAAA,KAAKtC,GAAG,CAAC,0BAATsC,YAA2BA,KAAKtC,GAAG,CAAC,mBAApCsC,OAA+C,IAAIK,KAAK,CAAC,GAAG,OAAO;QAChFC,OAAO,GAAErE,mBAAAA,gBAAgB+D,KAAKtC,GAAG,CAAC,YAAY;YAAET;QAAO,cAA9ChB,mBAAoD;QAC7DsE,WAAW,GAAEtE,oBAAAA,gBAAgB+D,KAAKtC,GAAG,CAAC,gBAAgB;YAAET;QAAO,cAAlDhB,oBAAwD;QACrEuE,SAASN,SAASO,cAAc,IAAI;IACtC;AACF;AAEA,2CAA2C,GAC3C,SAASC,aAAaC,GAAqB,EAAEC,IAAyB;QAC9CD,+BACGC;IADzB,MAAMC,SAAShD,QAAO8C,gCAAAA,IAAIG,OAAO,CAAC,sBAAsB,YAAlCH,gCAAsC;IAC5D,OAAO,AAACE,CAAAA,UAAUhD,QAAO+C,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,GAAE,EAAG7C,IAAI,GAAGsC,KAAK,CAAC,GAAG;AACjE;AAEA,sDAAsD,GACtD,eAAeU,oBACbC,KAAa;QAMSvD,eACIA,gBAKFA;IAVxB,IAAI,CAAC,0BAA0BQ,IAAI,CAAC+C,QAAQ,OAAO;IACnD,MAAMpC,MAAM9C,cAAcsB,GAAG,GAAGC,SAAS,GAAGC,UAAU,CAACZ,QAAQa,GAAG,CAACX,OAAOoE;IAC1E,MAAMvD,WAAW,MAAMmB,IAAIlB,GAAG;IAC9B,IAAI,CAACD,SAASK,MAAM,EAAE,OAAO;IAC7B,MAAMb,SAASY,QAAOJ,gBAAAA,SAASC,GAAG,CAAC,qBAAbD,gBAA0B;IAChD,MAAMP,aAAaW,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,yBAAbD,iBAA8B;IACxD,IAAI,CAACR,UAAU,CAACC,YAAY,OAAO;IACnC,sEAAsE;IACtE,gCAAgC;IAChC,IAAI,CAAE,MAAM4C,eAAe7C,QAAQC,aAAc,OAAO;IACxD,MAAM+D,WAAWC,QAAOzD,iBAAAA,SAASC,GAAG,CAAC,2BAAbD,iBAAgC;IACxD,IAAIgB,KAAKC,GAAG,KAAKuC,WAAW,OAAQ;QAClC,MAAMrC,IAAIR,GAAG,CAAC;YAAE+C,cAAc1C,KAAKC,GAAG;QAAG,GAAG;YAAE0C,OAAO;QAAK,GAAGzD,KAAK,CAAC,IAAMkC;IAC3E;IACA,OAAO;QAAE5C;QAAQC;QAAY0B;IAAI;AACnC;AAEA;;;;;;CAMC,GACD,OAAO,MAAMyC,oBAAsC,OAAOV,KAAKW;QAIvCV;IAHtB,4EAA4E;IAC5E,yEAAyE;IACzE,MAAMA,OAAOD,IAAIY,MAAM,KAAK,QAAQjF,aAAaqE,OAAOpE,eAAeoE;IACvE,MAAMa,SAAS3D,QAAO+C,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,IACE,CAAED,CAAAA,IAAIY,MAAM,KAAK,UAAWZ,IAAIY,MAAM,KAAK,SAAUC,CAAAA,WAAW,UAAUA,WAAW,OAAM,CAAE,GAC7F;QACA,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACAL,IAAIM,SAAS,CAAC,iBAAiB;IAC/B,IAAI;QACF,OAAQJ;YACN,KAAK;gBACH,OAAO,MAAMK,KAAKlB,KAAKC,MAAMU;YAC/B,KAAK;YACL,KAAK;YACL,KAAK;gBAAU;oBACb,MAAMQ,UAAU,MAAMf,oBAAoBL,aAAaC,KAAKC;oBAC5D,IAAI,CAACkB,SAAS,OAAOR,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;wBAAEC,OAAO;oBAA8B;oBACjF,IAAIH,WAAW,UAAU;wBACvB,MAAMM,QAAQlD,GAAG,CAACgB,MAAM;wBACxB,OAAO0B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;4BAAEK,IAAI;wBAAK;oBACzC;oBACA,MAAMtE,WAAW,MAAMN,SAAS2E,QAAQ7E,MAAM,EAAE6E,QAAQ5E,UAAU,EAAEQ,GAAG;oBACvE,MAAMS,QAAQV,SAASK,MAAM,GAAIL,SAASsB,IAAI,KAAuC;oBACrF,IAAIyC,WAAW,QAAQ;wBACrB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;4BAC1BvD,OAAOhC,cAAc6F,qBAAqB,CAAC7D,OAAOM,KAAKC,GAAG;4BAC1DuD,UACErB,IAAI,CAAC,WAAW,KAAK,QAAQA,IAAI,CAAC,WAAW,KAAK,SAC9C,MAAMb,gBAAgB+B,QAAQ7E,MAAM,IACpC4C;wBACR;oBACF;oBACA,MAAMb,WAAW7C,cAAc+F,0BAA0B,CAAC/D,OAAOyC,IAAI,CAAC,WAAW,EAAEnC,KAAKC,GAAG;oBAC3F,IAAI,CAACM,UAAU;wBACb,OAAOsC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;4BAAEC,OAAO;wBAA+C;oBACtF;oBACA,MAAMxE,SAAS2E,QAAQ7E,MAAM,EAAE6E,QAAQ5E,UAAU,EAAEkB,GAAG,CAAC;wBAAEY;oBAAS,GAAG;wBAAEoC,OAAO;oBAAK;oBACnF,OAAOE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;wBAAEK,IAAI;oBAAK;gBACzC;YACA;gBACE,OAAO,MAAMI,YAAYxB,KAAKC,MAAMY,QAAQF;QAChD;IACF,EAAE,OAAOK,OAAO;QACdS,QAAQT,KAAK,CAAC,iBAAiBH,QAAQG;QACvC,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA4C;IACnF;AACF,EAAC;AAED,eAAeE,KACblB,GAAqB,EACrBC,IAAyB,EACzBU,GAAoC;cAUhBV;QARGD;IAAvB,MAAM0B,UAAUxE,gBAAO8C,cAAAA,IAAI2B,MAAM,qBAAV3B,YAAY4B,aAAa,mBAAI,OAAO;IAC3D,MAAMC,OAAO,MAAM3G,iBAAiB,CAAC,iBAAiB,EAAEwG,SAAS,EAAE;QACjE9C,OAAO;QACPkD,UAAU,KAAK,KAAK;IACtB;IACA,IAAI,CAACD,KAAKE,OAAO,EAAE;QACjB,OAAOpB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAoD;IAC3F;IACA,MAAMgB,OAAO9E,QAAO+C,aAAAA,IAAI,CAAC,OAAO,YAAZA,aAAgB,IAAIgC,OAAO,CAAC,OAAO;IACvD,IAAID,KAAKE,MAAM,KAAK,GAAG,OAAOvB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAA4C;IACxG,MAAMtE,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,MAAMyF,aAAazF,UAAUC,UAAU,CAACb,UAAUc,GAAG,CAACX,OAAO+F;IAC7D,MAAM3B,QAAQrF,YAAY,IAAIoH,QAAQ,CAAC;IACvC,uEAAuE;IACvE,qEAAqE;IACrE,MAAMC,SAAS,MAAM3F,UAAUwB,cAAc,CAAC,OAAOC;YAGxBrB,eAGLA,gBACIA,gBAKNA,gBAEJmD;QAbhB,MAAMnD,WAAW,MAAMqB,YAAYpB,GAAG,CAACoF;QACvC,IAAI,CAACrF,SAASK,MAAM,EAAE,OAAO;QAC7B,MAAMmF,cAAc/B,QAAOzD,gBAAAA,SAASC,GAAG,CAAC,0BAAbD,gBAA+B;QAC1DqB,YAAYc,MAAM,CAACkD;QACnB,IAAI,CAAEG,CAAAA,cAAcxE,KAAKC,GAAG,EAAC,GAAI,OAAO;QACxC,MAAMzB,SAASY,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,qBAAbD,iBAA0B;QAChD,MAAMP,aAAaW,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,yBAAbD,iBAA8B;QACxDqB,YAAYV,GAAG,CAACf,UAAUC,UAAU,CAACZ,QAAQa,GAAG,CAACX,OAAOoE,SAAS;YAC/D/D;YACAC;YACAgG,aAAazE,KAAKC,GAAG;YACrByE,WAAWtF,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,wBAAbD,iBAA6B;YAC/C0D,cAAc1C,KAAKC,GAAG;YACtB0E,OAAOvF,QAAO+C,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,IAAIP,KAAK,CAAC,GAAG,OAAO;QACrD;QACA,OAAO;YAAEpD;YAAQC;QAAW;IAC9B;IACA,IAAI,CAAC8F,QAAQ;QACX,OAAO1B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA2D;IAClG;IACA,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEV;QAAOiB,UAAU,MAAMlC,gBAAgBiD,OAAO/F,MAAM;IAAE;AACtF;AAEA,eAAekF,YACbxB,GAAqB,EACrBC,IAAyB,EACzBY,MAAc,EACdF,GAAoC;QAEdV,cAGIA;IAH1B,MAAM3D,SAASY,QAAO+C,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,MAAMyC,OAAO,MAAMhH,kBAAkBsE,KAAK1D;IAC1C,IAAI,WAAWoG,MAAM,OAAO/B,IAAIG,MAAM,CAAC4B,KAAK5B,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAO0B,KAAK1B,KAAK;IAAC;IAC7E,MAAMzE,aAAaW,QAAO+C,mBAAAA,IAAI,CAAC,aAAa,YAAlBA,mBAAsB;IAChD,IAAI,CAAE,MAAMd,eAAe7C,QAAQC,aAAc;QAC/C,OAAOoE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAmB;IAC1D;IACA,MAAMtE,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,OAAQmE;QACN,KAAK;YAAgB;gBACnB,IAAK,IAAI8B,UAAU,GAAGA,UAAU,GAAGA,UAAW;oBAC5C,MAAMX,OAAO9E,OAAOjC,UAAU,GAAG,UAAY2H,QAAQ,CAAC,GAAG;oBACzD,MAAM3E,MAAMvB,UAAUC,UAAU,CAACb,UAAUc,GAAG,CAACX,OAAO+F;oBACtD,MAAMM,cAAcxE,KAAKC,GAAG,KAAKvC,cAAcqH,0BAA0B;oBACzE,MAAMC,UAAU,MAAMpG,UAAUwB,cAAc,CAAC,OAAOC;4BAGtB4E;wBAF9B,MAAMA,WAAW,MAAM5E,YAAYpB,GAAG,CAACkB;wBACvC,gEAAgE;wBAChE,IAAI8E,SAAS5F,MAAM,IAAIoD,QAAOwC,gBAAAA,SAAShG,GAAG,CAAC,0BAAbgG,gBAA+B,KAAKjF,KAAKC,GAAG,IAAI,OAAO;wBACrFI,YAAYV,GAAG,CAACQ,KAAK;4BACnB3B;4BACAC;4BACA+F;4BACAE,WAAWE,KAAKM,KAAK,CAACC,GAAG;wBAC3B;wBACA,OAAO;oBACT;oBACA,IAAIH,SAAS,OAAOnC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;wBAAEiB;wBAAMM;oBAAY;gBAC/D;gBACA,OAAO3B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAAoC;YAC3E;QACA,KAAK;YAAQ;oBAQuCxD;gBAPlD,MAAMA,QAAQhC,cAAc0H,uBAAuB,CAACjD,IAAI,CAAC,QAAQ,EAAEnC,KAAKC,GAAG;gBAC3E,sEAAsE;gBACtE,IAAIP,MAAM2F,OAAO,IAAI,CAAC5H,sBAAsB;oBAC1C,MAAM6H,WAAW5F,MAAM2F,OAAO,CAACC,QAAQ,CAACC,MAAM,CAAC,CAACC,UAAYA,YAAY;oBACxE9F,MAAM2F,OAAO,CAACC,QAAQ,GAAGA,SAASlB,MAAM,GAAGkB,WAAW;wBAAC;wBAAS;qBAAO;gBACzE;gBACA,MAAM7F,qBAAqBjB,QAAQC,YAAYiB;gBAC/C,OAAOmD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEK,IAAI;oBAAMmC,QAAQ,GAAE/F,kBAAAA,MAAM+F,QAAQ,YAAd/F,kBAAkB;gBAAK;YAC3E;QACA,KAAK;YAAS;gBACZ,MAAMV,WAAW,MAAMN,SAASF,QAAQC,YAAYQ,GAAG;gBACvD,MAAMS,QAAQV,SAASK,MAAM,GAAIL,SAASsB,IAAI,KAAuC;gBACrF,MAAMoF,WAAW,MAAM9G,UACpBC,UAAU,CAACZ,QACX4C,KAAK,CAAC,UAAU,MAAMrC,QACtBqC,KAAK,CAAC,cAAc,MAAMpC,YAC1BqC,KAAK,CAAC,IACN7B,GAAG;gBACN,OAAO4D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAC1BvD;oBACA,oEAAoE;oBACpEiG,WAAWD,SAASzE,IAAI,CAAC2E,IAAI,CAC3B,CAAC9G;4BAAiCA;+BAApBkB,KAAKC,GAAG,KAAKwC,QAAO3D,WAAAA,IAAIG,GAAG,CAAC,2BAARH,WAA2B,KAAK;;gBAEtE;YACF;QACA,KAAK;YAAY;gBACf,MAAM4G,WAAW,MAAM9G,UACpBC,UAAU,CAACZ,QACX4C,KAAK,CAAC,UAAU,MAAMrC,QACtBqC,KAAK,CAAC,cAAc,MAAMpC,YAC1BqC,KAAK,CAAC,IACN7B,GAAG;gBACN,OAAO4D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAC1ByC,UAAUA,SAASzE,IAAI,CAACC,GAAG,CAAC,CAACpC;4BAEbA,UACMA,WACCA;+BAJoB;4BACzC+G,IAAI/G,IAAI+G,EAAE,CAACjE,KAAK,CAAC,GAAG;4BACpB+C,OAAOvF,QAAON,WAAAA,IAAIG,GAAG,CAAC,oBAARH,WAAoB;4BAClC2F,aAAahC,QAAO3D,YAAAA,IAAIG,GAAG,CAAC,0BAARH,YAA0B;4BAC9C4D,cAAcD,QAAO3D,YAAAA,IAAIG,GAAG,CAAC,2BAARH,YAA2B;wBAClD;;gBACF;YACF;QACA,KAAK;YAAU;oBACSqD;gBAAtB,MAAM2D,SAAS1G,QAAO+C,kBAAAA,IAAI,CAAC,YAAY,YAAjBA,kBAAqB;gBAC3C,MAAMuD,WAAW,MAAM9G,UACpBC,UAAU,CAACZ,QACX4C,KAAK,CAAC,UAAU,MAAMrC,QACtBqC,KAAK,CAAC,cAAc,MAAMpC,YAC1BqC,KAAK,CAAC,IACN7B,GAAG;gBACN,MAAM8G,SAASL,SAASzE,IAAI,CAACsE,MAAM,CACjC,CAACzG,MAAagH,WAAW,OAAQA,OAAO1B,MAAM,KAAK,MAAMtF,IAAI+G,EAAE,CAACG,UAAU,CAACF;gBAE7E,MAAM/E,QAAQC,GAAG,CAAC+E,OAAO7E,GAAG,CAAC,CAACpC,MAAaA,IAAIqB,GAAG,CAACgB,MAAM;gBACzD,OAAO0B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEgD,SAASF,OAAO3B,MAAM;gBAAC;YACvD;QACA;YACE,OAAOvB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAiB;IAC1D;AACF"}

package/src/lib/server/pos-fee-month.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The billing month a non-card POS fee accrues into (AGL-2111): `YYYY-MM` in
+ * **UTC**, byte-identical to the key `apps/console/utils/billing-month.ts`
+ * mints and to the twelve other month counters on the platform
+ * (`orgs/{id}/apiUsage/*`, `orgs/{id}/assistUsage/*`, the per-host counters).
+ *
+ * It has to be UTC and it has to be this exact expression: `report-usage`
+ * sweeps `previousMonth()` in UTC and reads the accrual document by that key,
+ * so a local-time month would strand every sale rung in the offset window on a
+ * document no sweep ever looks at — which is uncollected revenue that leaves
+ * no trace. `offline-pos-fee-month-key.spec.ts` pins the two against each
+ * other rather than trusting the comment.
+ *
+ * Local rather than imported because `apps/console` is an app: a plugin
+ * library cannot import from it, and the repo's other eleven copies of this
+ * one-liner are the established shape.
+ */
+export declare function offlineFeeMonthKey(now?: Date): string;

package/src/lib/server/pos-fee-month.js

@@ -0,0 +1,36 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The billing month a non-card POS fee accrues into (AGL-2111): `YYYY-MM` in
+ * **UTC**, byte-identical to the key `apps/console/utils/billing-month.ts`
+ * mints and to the twelve other month counters on the platform
+ * (`orgs/{id}/apiUsage/*`, `orgs/{id}/assistUsage/*`, the per-host counters).
+ *
+ * It has to be UTC and it has to be this exact expression: `report-usage`
+ * sweeps `previousMonth()` in UTC and reads the accrual document by that key,
+ * so a local-time month would strand every sale rung in the offset window on a
+ * document no sweep ever looks at — which is uncollected revenue that leaves
+ * no trace. `offline-pos-fee-month-key.spec.ts` pins the two against each
+ * other rather than trusting the comment.
+ *
+ * Local rather than imported because `apps/console` is an app: a plugin
+ * library cannot import from it, and the repo's other eleven copies of this
+ * one-liner are the established shape.
+ */ export function offlineFeeMonthKey(now = new Date()) {
+    return now.toISOString().slice(0, 7);
+}
+
+//# sourceMappingURL=pos-fee-month.js.map

package/src/lib/server/pos-fee-month.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-fee-month.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The billing month a non-card POS fee accrues into (AGL-2111): `YYYY-MM` in\n * **UTC**, byte-identical to the key `apps/console/utils/billing-month.ts`\n * mints and to the twelve other month counters on the platform\n * (`orgs/{id}/apiUsage/*`, `orgs/{id}/assistUsage/*`, the per-host counters).\n *\n * It has to be UTC and it has to be this exact expression: `report-usage`\n * sweeps `previousMonth()` in UTC and reads the accrual document by that key,\n * so a local-time month would strand every sale rung in the offset window on a\n * document no sweep ever looks at — which is uncollected revenue that leaves\n * no trace. `offline-pos-fee-month-key.spec.ts` pins the two against each\n * other rather than trusting the comment.\n *\n * Local rather than imported because `apps/console` is an app: a plugin\n * library cannot import from it, and the repo's other eleven copies of this\n * one-liner are the established shape.\n */\nexport function offlineFeeMonthKey(now: Date = new Date()): string {\n  return now.toISOString().slice(0, 7)\n}\n"],"names":["offlineFeeMonthKey","now","Date","toISOString","slice"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;CAgBC,GACD,OAAO,SAASA,mBAAmBC,MAAY,IAAIC,MAAM;IACvD,OAAOD,IAAIE,WAAW,GAAGC,KAAK,CAAC,GAAG;AACpC"}