@aglyn/plugins-commerce 1.0.0-beta.230 → 1.0.0-beta.231

package/src/lib/server/pos-readers.js

@@ -0,0 +1,276 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { authorizePosStaff, posRequestBody } from "./pos-auth.js";
+import { revokePosDisplays } from "./pos-display.js";
+import { posStripe, posStripeErrorMessage, posStripeTestMode, posTerminalAvailable } from "./pos-stripe.js";
+import { ensurePosTerminalLocation, ownedTerminalReader, refreshPosReaderStatus } from "./pos-terminal.js";
+/**
+ * `POST /api/commerce/pos-readers` (AGL-3607): the site's Stripe Terminal
+ * card readers, from the "Card readers" settings card, and the server-side
+ * removal of a register.
+ *
+ * Every action names a reader by id, and every one reads that reader under
+ * the CALLER's site first (`ownedTerminalReader`): a reader id copied from
+ * another store is "not on this site", whatever Stripe would say about it.
+ */ export const posReadersHandler = async (req, res)=>{
+    var _body_hostId, _body_action;
+    if (req.method !== 'POST') return res.status(405).json({
+        error: 'Method not allowed'
+    });
+    const body = posRequestBody(req);
+    const hostId = String((_body_hostId = body['hostId']) != null ? _body_hostId : '');
+    const gate = await authorizePosStaff(req, hostId);
+    if ('error' in gate) return res.status(gate.status).json({
+        error: gate.error
+    });
+    const staff = gate.staff;
+    const action = String((_body_action = body['action']) != null ? _body_action : '');
+    try {
+        switch(action){
+            case 'list':
+                return res.status(200).json(await listReaders(staff, body['refresh'] === true));
+            case 'register':
+                return await registerReader(staff, body, res);
+            case 'update':
+                return await updateReader(staff, body, res);
+            case 'remove':
+                return await removeReader(staff, body, res);
+            case 'remove-register':
+                return await removeRegister(staff, body, res);
+            default:
+                return res.status(400).json({
+                    error: 'Unknown action'
+                });
+        }
+    } catch (error) {
+        console.error('[pos-readers]', action, error);
+        return res.status(500).json({
+            error: 'Card readers could not be updated'
+        });
+    }
+};
+function readersRef(hostId) {
+    return firebaseAdmin.app().firestore().collection('hosts').doc(hostId).collection('terminalReaders');
+}
+async function listReaders(staff, refresh) {
+    const available = posTerminalAvailable();
+    const snapshot = await readersRef(staff.hostId).limit(50).get();
+    const readers = snapshot.docs.map((doc)=>_extends({
+            id: doc.id
+        }, doc.data()));
+    if (available && refresh) {
+        await Promise.all(readers.map(async (reader)=>{
+            const fresh = await refreshPosReaderStatus(staff.hostId, reader.id).catch(()=>null);
+            if (fresh) reader.status = fresh.status;
+        }));
+    }
+    const config = await firebaseAdmin.app().firestore().collection('hosts').doc(staff.hostId).collection('terminal').doc('config').get();
+    return {
+        available,
+        testMode: posStripeTestMode(),
+        locationReady: Boolean(config.get('stripeLocationId')),
+        readers: readers.map((reader)=>{
+            var _reader_registerId, _reader_deviceType, _reader_serialNumber, _reader_status;
+            return {
+                id: reader.id,
+                label: reader.label,
+                registerId: (_reader_registerId = reader.registerId) != null ? _reader_registerId : null,
+                deviceType: (_reader_deviceType = reader.deviceType) != null ? _reader_deviceType : null,
+                serialNumber: (_reader_serialNumber = reader.serialNumber) != null ? _reader_serialNumber : null,
+                status: (_reader_status = reader.status) != null ? _reader_status : 'offline',
+                livemode: reader.livemode
+            };
+        })
+    };
+}
+async function registerExists(hostId, registerId) {
+    if (!/^[A-Za-z0-9_-]{1,128}$/.test(registerId)) return false;
+    return (await firebaseAdmin.app().firestore().collection('hosts').doc(hostId).collection('registers').doc(registerId).get()).exists;
+}
+async function registerReader(staff, body, res) {
+    var _body_registrationCode, _body_label, _body_registerId, _ref, _host_get, _address_line1, _address_city, _address_postalCode, _address_country, _created_body_status;
+    var _created_body;
+    if (!posTerminalAvailable()) {
+        return res.status(409).json({
+            error: 'Card readers are not available yet.'
+        });
+    }
+    const registrationCode = String((_body_registrationCode = body['registrationCode']) != null ? _body_registrationCode : '').trim();
+    if (!/^[A-Za-z0-9-]{3,64}$/.test(registrationCode)) {
+        return res.status(400).json({
+            error: 'Enter the code the reader shows on its screen.'
+        });
+    }
+    const label = String((_body_label = body['label']) != null ? _body_label : '').trim().slice(0, 60) || 'Card reader';
+    const registerId = String((_body_registerId = body['registerId']) != null ? _body_registerId : '');
+    if (registerId && !await registerExists(staff.hostId, registerId)) {
+        return res.status(404).json({
+            error: 'Unknown register'
+        });
+    }
+    const host = await firebaseAdmin.app().firestore().collection('hosts').doc(staff.hostId).get();
+    const address = body['address'];
+    const location = await ensurePosTerminalLocation(_extends({
+        hostId: staff.hostId,
+        orgId: staff.orgId,
+        displayName: String((_ref = (_host_get = host.get('name')) != null ? _host_get : host.get('title')) != null ? _ref : 'Store')
+    }, address ? {
+        address: _extends({
+            line1: String((_address_line1 = address.line1) != null ? _address_line1 : '').slice(0, 200)
+        }, address.line2 ? {
+            line2: String(address.line2).slice(0, 200)
+        } : {}, {
+            city: String((_address_city = address.city) != null ? _address_city : '').slice(0, 100)
+        }, address.state ? {
+            state: String(address.state).slice(0, 100)
+        } : {}, {
+            postalCode: String((_address_postalCode = address.postalCode) != null ? _address_postalCode : '').slice(0, 20),
+            country: String((_address_country = address.country) != null ? _address_country : '').toUpperCase().slice(0, 2)
+        })
+    } : {}));
+    if ('error' in location) return res.status(location.status).json({
+        error: location.error
+    });
+    // Not keyed: a registration code is single-use at Stripe, which is the
+    // dedupe — a second press with the same code is refused there, and no
+    // other store can ever register a reader this one already holds.
+    const created = await posStripe('POST', 'terminal/readers', {
+        params: _extends({
+            registration_code: registrationCode,
+            label,
+            location: location.locationId,
+            'metadata[orgId]': staff.orgId,
+            'metadata[hostId]': staff.hostId
+        }, registerId ? {
+            'metadata[registerId]': registerId
+        } : {})
+    });
+    if (!created.ok || !((_created_body = created.body) == null ? void 0 : _created_body.id)) {
+        return res.status(400).json({
+            error: posStripeErrorMessage(created.body, 'That code did not register a reader. Check the code on the reader and try again.')
+        });
+    }
+    const reader = _extends({
+        label
+    }, registerId ? {
+        registerId
+    } : {}, {
+        stripeLocationId: location.locationId
+    }, created.body.device_type ? {
+        deviceType: String(created.body.device_type)
+    } : {}, created.body.serial_number ? {
+        serialNumber: String(created.body.serial_number)
+    } : {}, {
+        status: String((_created_body_status = created.body.status) != null ? _created_body_status : 'offline'),
+        livemode: Boolean(created.body.livemode),
+        createdAtMs: Date.now(),
+        createdBy: staff.uid
+    });
+    await readersRef(staff.hostId).doc(String(created.body.id)).set(reader);
+    return res.status(200).json({
+        reader: _extends({
+            id: String(created.body.id)
+        }, reader)
+    });
+}
+async function updateReader(staff, body, res) {
+    var _body_registerId;
+    const reader = await ownedTerminalReader(staff.hostId, body['readerId']);
+    if (!reader) return res.status(404).json({
+        error: 'That card reader is not on this site.'
+    });
+    const patch = {};
+    if (typeof body['label'] === 'string') {
+        patch['label'] = body['label'].trim().slice(0, 60) || reader.label;
+    }
+    if ('registerId' in body) {
+        var _body_registerId1;
+        const registerId = String((_body_registerId1 = body['registerId']) != null ? _body_registerId1 : '');
+        if (registerId && !await registerExists(staff.hostId, registerId)) {
+            return res.status(404).json({
+                error: 'Unknown register'
+            });
+        }
+        patch['registerId'] = registerId || firebaseAdmin.firestore.FieldValue.delete();
+    }
+    const updated = await posStripe('POST', `terminal/readers/${reader.id}`, {
+        params: _extends({}, patch['label'] ? {
+            label: String(patch['label'])
+        } : {}, 'registerId' in body ? {
+            'metadata[registerId]': String((_body_registerId = body['registerId']) != null ? _body_registerId : '')
+        } : {})
+    });
+    if (!updated.ok) {
+        return res.status(502).json({
+            error: posStripeErrorMessage(updated.body, 'The reader could not be updated.')
+        });
+    }
+    await readersRef(staff.hostId).doc(reader.id).set(patch, {
+        merge: true
+    });
+    return res.status(200).json({
+        ok: true
+    });
+}
+async function removeReader(staff, body, res) {
+    const reader = await ownedTerminalReader(staff.hostId, body['readerId']);
+    if (!reader) return res.status(404).json({
+        error: 'That card reader is not on this site.'
+    });
+    const removed = await posStripe('DELETE', `terminal/readers/${reader.id}`);
+    // Already gone at Stripe is the outcome asked for; anything else is not.
+    if (!removed.ok && removed.status !== 404) {
+        return res.status(502).json({
+            error: posStripeErrorMessage(removed.body, 'The reader could not be removed.')
+        });
+    }
+    await readersRef(staff.hostId).doc(reader.id).delete();
+    return res.status(200).json({
+        ok: true
+    });
+}
+/**
+ * Removes a register on the server (AGL-3617). The settings card deleted it
+ * with a client `deleteDoc`, which the Firestore rules refuse for everyone but
+ * staff (`registers` is server-owned since AGL-1775), so a merchant's Remove
+ * button failed with a permission error. Removing it here also signs out its
+ * customer displays and unbinds its readers.
+ */ async function removeRegister(staff, body, res) {
+    var _body_registerId;
+    const registerId = String((_body_registerId = body['registerId']) != null ? _body_registerId : '');
+    if (!await registerExists(staff.hostId, registerId)) {
+        return res.status(404).json({
+            error: 'Unknown register'
+        });
+    }
+    const firestore = firebaseAdmin.app().firestore();
+    const registerRef = firestore.collection('hosts').doc(staff.hostId).collection('registers').doc(registerId);
+    await revokePosDisplays(staff.hostId, registerId);
+    await registerRef.delete();
+    const bound = await readersRef(staff.hostId).where('registerId', '==', registerId).limit(50).get();
+    await Promise.all(bound.docs.map((doc)=>doc.ref.set({
+            registerId: firebaseAdmin.firestore.FieldValue.delete()
+        }, {
+            merge: true
+        })));
+    return res.status(200).json({
+        ok: true
+    });
+}
+
+//# sourceMappingURL=pos-readers.js.map

package/src/lib/server/pos-readers.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-readers.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport type { PluginApiHandler } from '@aglyn/aglyn/server'\nimport { authorizePosStaff, posRequestBody, type PosStaff } from './pos-auth'\nimport { revokePosDisplays } from './pos-display'\nimport { posStripe, posStripeErrorMessage, posStripeTestMode, posTerminalAvailable } from './pos-stripe'\nimport {\n  ensurePosTerminalLocation,\n  ownedTerminalReader,\n  refreshPosReaderStatus,\n  type PosTerminalAddress,\n  type PosTerminalReader,\n} from './pos-terminal'\n\n/**\n * `POST /api/commerce/pos-readers` (AGL-3607): the site's Stripe Terminal\n * card readers, from the \"Card readers\" settings card, and the server-side\n * removal of a register.\n *\n * Every action names a reader by id, and every one reads that reader under\n * the CALLER's site first (`ownedTerminalReader`): a reader id copied from\n * another store is \"not on this site\", whatever Stripe would say about it.\n */\nexport const posReadersHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') return res.status(405).json({ error: 'Method not allowed' })\n  const body = posRequestBody(req)\n  const hostId = String(body['hostId'] ?? '')\n  const gate = await authorizePosStaff(req, hostId)\n  if ('error' in gate) return res.status(gate.status).json({ error: gate.error })\n  const staff = gate.staff\n  const action = String(body['action'] ?? '')\n  try {\n    switch (action) {\n      case 'list':\n        return res.status(200).json(await listReaders(staff, body['refresh'] === true))\n      case 'register':\n        return await registerReader(staff, body, res)\n      case 'update':\n        return await updateReader(staff, body, res)\n      case 'remove':\n        return await removeReader(staff, body, res)\n      case 'remove-register':\n        return await removeRegister(staff, body, res)\n      default:\n        return res.status(400).json({ error: 'Unknown action' })\n    }\n  } catch (error) {\n    console.error('[pos-readers]', action, error)\n    return res.status(500).json({ error: 'Card readers could not be updated' })\n  }\n}\n\nfunction readersRef(hostId: string) {\n  return firebaseAdmin.app().firestore().collection('hosts').doc(hostId).collection('terminalReaders')\n}\n\nasync function listReaders(staff: PosStaff, refresh: boolean) {\n  const available = posTerminalAvailable()\n  const snapshot = await readersRef(staff.hostId).limit(50).get()\n  const readers = snapshot.docs.map((doc: any) => ({\n    id: doc.id as string,\n    ...(doc.data() as PosTerminalReader),\n  }))\n  if (available && refresh) {\n    await Promise.all(\n      readers.map(async (reader: PosTerminalReader & { id: string }) => {\n        const fresh = await refreshPosReaderStatus(staff.hostId, reader.id).catch(() => null)\n        if (fresh) reader.status = fresh.status\n      }),\n    )\n  }\n  const config = await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('hosts')\n    .doc(staff.hostId)\n    .collection('terminal')\n    .doc('config')\n    .get()\n  return {\n    available,\n    testMode: posStripeTestMode(),\n    locationReady: Boolean(config.get('stripeLocationId')),\n    readers: readers.map((reader: PosTerminalReader & { id: string }) => ({\n      id: reader.id,\n      label: reader.label,\n      registerId: reader.registerId ?? null,\n      deviceType: reader.deviceType ?? null,\n      serialNumber: reader.serialNumber ?? null,\n      status: reader.status ?? 'offline',\n      livemode: reader.livemode,\n    })),\n  }\n}\n\nasync function registerExists(hostId: string, registerId: string): Promise<boolean> {\n  if (!/^[A-Za-z0-9_-]{1,128}$/.test(registerId)) return false\n  return (\n    await firebaseAdmin\n      .app()\n      .firestore()\n      .collection('hosts')\n      .doc(hostId)\n      .collection('registers')\n      .doc(registerId)\n      .get()\n  ).exists\n}\n\nasync function registerReader(\n  staff: PosStaff,\n  body: Record<string, any>,\n  res: Parameters<PluginApiHandler>[1],\n) {\n  if (!posTerminalAvailable()) {\n    return res.status(409).json({ error: 'Card readers are not available yet.' })\n  }\n  const registrationCode = String(body['registrationCode'] ?? '').trim()\n  if (!/^[A-Za-z0-9-]{3,64}$/.test(registrationCode)) {\n    return res.status(400).json({ error: 'Enter the code the reader shows on its screen.' })\n  }\n  const label = String(body['label'] ?? '').trim().slice(0, 60) || 'Card reader'\n  const registerId = String(body['registerId'] ?? '')\n  if (registerId && !(await registerExists(staff.hostId, registerId))) {\n    return res.status(404).json({ error: 'Unknown register' })\n  }\n  const host = await firebaseAdmin.app().firestore().collection('hosts').doc(staff.hostId).get()\n  const address = body['address'] as PosTerminalAddress | undefined\n  const location = await ensurePosTerminalLocation({\n    hostId: staff.hostId,\n    orgId: staff.orgId,\n    displayName: String(host.get('name') ?? host.get('title') ?? 'Store'),\n    ...(address\n      ? {\n          address: {\n            line1: String(address.line1 ?? '').slice(0, 200),\n            ...(address.line2 ? { line2: String(address.line2).slice(0, 200) } : {}),\n            city: String(address.city ?? '').slice(0, 100),\n            ...(address.state ? { state: String(address.state).slice(0, 100) } : {}),\n            postalCode: String(address.postalCode ?? '').slice(0, 20),\n            country: String(address.country ?? '').toUpperCase().slice(0, 2),\n          },\n        }\n      : {}),\n  })\n  if ('error' in location) return res.status(location.status).json({ error: location.error })\n  // Not keyed: a registration code is single-use at Stripe, which is the\n  // dedupe — a second press with the same code is refused there, and no\n  // other store can ever register a reader this one already holds.\n  const created = await posStripe('POST', 'terminal/readers', {\n    params: {\n      registration_code: registrationCode,\n      label,\n      location: location.locationId,\n      'metadata[orgId]': staff.orgId,\n      'metadata[hostId]': staff.hostId,\n      ...(registerId ? { 'metadata[registerId]': registerId } : {}),\n    },\n  })\n  if (!created.ok || !created.body?.id) {\n    return res.status(400).json({\n      error: posStripeErrorMessage(\n        created.body,\n        'That code did not register a reader. Check the code on the reader and try again.',\n      ),\n    })\n  }\n  const reader: PosTerminalReader = {\n    label,\n    ...(registerId ? { registerId } : {}),\n    stripeLocationId: location.locationId,\n    ...(created.body.device_type ? { deviceType: String(created.body.device_type) } : {}),\n    ...(created.body.serial_number ? { serialNumber: String(created.body.serial_number) } : {}),\n    status: String(created.body.status ?? 'offline'),\n    livemode: Boolean(created.body.livemode),\n    createdAtMs: Date.now(),\n    createdBy: staff.uid,\n  }\n  await readersRef(staff.hostId).doc(String(created.body.id)).set(reader)\n  return res.status(200).json({ reader: { id: String(created.body.id), ...reader } })\n}\n\nasync function updateReader(\n  staff: PosStaff,\n  body: Record<string, any>,\n  res: Parameters<PluginApiHandler>[1],\n) {\n  const reader = await ownedTerminalReader(staff.hostId, body['readerId'])\n  if (!reader) return res.status(404).json({ error: 'That card reader is not on this site.' })\n  const patch: Record<string, unknown> = {}\n  if (typeof body['label'] === 'string') {\n    patch['label'] = body['label'].trim().slice(0, 60) || reader.label\n  }\n  if ('registerId' in body) {\n    const registerId = String(body['registerId'] ?? '')\n    if (registerId && !(await registerExists(staff.hostId, registerId))) {\n      return res.status(404).json({ error: 'Unknown register' })\n    }\n    patch['registerId'] = registerId || firebaseAdmin.firestore.FieldValue.delete()\n  }\n  const updated = await posStripe('POST', `terminal/readers/${reader.id}`, {\n    params: {\n      ...(patch['label'] ? { label: String(patch['label']) } : {}),\n      ...('registerId' in body ? { 'metadata[registerId]': String(body['registerId'] ?? '') } : {}),\n    },\n  })\n  if (!updated.ok) {\n    return res.status(502).json({ error: posStripeErrorMessage(updated.body, 'The reader could not be updated.') })\n  }\n  await readersRef(staff.hostId).doc(reader.id).set(patch, { merge: true })\n  return res.status(200).json({ ok: true })\n}\n\nasync function removeReader(\n  staff: PosStaff,\n  body: Record<string, any>,\n  res: Parameters<PluginApiHandler>[1],\n) {\n  const reader = await ownedTerminalReader(staff.hostId, body['readerId'])\n  if (!reader) return res.status(404).json({ error: 'That card reader is not on this site.' })\n  const removed = await posStripe('DELETE', `terminal/readers/${reader.id}`)\n  // Already gone at Stripe is the outcome asked for; anything else is not.\n  if (!removed.ok && removed.status !== 404) {\n    return res.status(502).json({ error: posStripeErrorMessage(removed.body, 'The reader could not be removed.') })\n  }\n  await readersRef(staff.hostId).doc(reader.id).delete()\n  return res.status(200).json({ ok: true })\n}\n\n/**\n * Removes a register on the server (AGL-3617). The settings card deleted it\n * with a client `deleteDoc`, which the Firestore rules refuse for everyone but\n * staff (`registers` is server-owned since AGL-1775), so a merchant's Remove\n * button failed with a permission error. Removing it here also signs out its\n * customer displays and unbinds its readers.\n */\nasync function removeRegister(\n  staff: PosStaff,\n  body: Record<string, any>,\n  res: Parameters<PluginApiHandler>[1],\n) {\n  const registerId = String(body['registerId'] ?? '')\n  if (!(await registerExists(staff.hostId, registerId))) {\n    return res.status(404).json({ error: 'Unknown register' })\n  }\n  const firestore = firebaseAdmin.app().firestore()\n  const registerRef = firestore\n    .collection('hosts')\n    .doc(staff.hostId)\n    .collection('registers')\n    .doc(registerId)\n  await revokePosDisplays(staff.hostId, registerId)\n  await registerRef.delete()\n  const bound = await readersRef(staff.hostId).where('registerId', '==', registerId).limit(50).get()\n  await Promise.all(\n    bound.docs.map((doc: any) =>\n      doc.ref.set({ registerId: firebaseAdmin.firestore.FieldValue.delete() }, { merge: true }),\n    ),\n  )\n  return res.status(200).json({ ok: true })\n}\n"],"names":["firebaseAdmin","authorizePosStaff","posRequestBody","revokePosDisplays","posStripe","posStripeErrorMessage","posStripeTestMode","posTerminalAvailable","ensurePosTerminalLocation","ownedTerminalReader","refreshPosReaderStatus","posReadersHandler","req","res","body","method","status","json","error","hostId","String","gate","staff","action","listReaders","registerReader","updateReader","removeReader","removeRegister","console","readersRef","app","firestore","collection","doc","refresh","available","snapshot","limit","get","readers","docs","map","id","data","Promise","all","reader","fresh","catch","config","testMode","locationReady","Boolean","label","registerId","deviceType","serialNumber","livemode","registerExists","test","exists","host","address","created","registrationCode","trim","slice","location","orgId","displayName","line1","line2","city","state","postalCode","country","toUpperCase","params","registration_code","locationId","ok","stripeLocationId","device_type","serial_number","createdAtMs","Date","now","createdBy","uid","set","patch","FieldValue","delete","updated","merge","removed","registerRef","bound","where","ref"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,aAAa,QAAQ,2BAA0B;AAExD,SAASC,iBAAiB,EAAEC,cAAc,QAAuB,gBAAY;AAC7E,SAASC,iBAAiB,QAAQ,mBAAe;AACjD,SAASC,SAAS,EAAEC,qBAAqB,EAAEC,iBAAiB,EAAEC,oBAAoB,QAAQ,kBAAc;AACxG,SACEC,yBAAyB,EACzBC,mBAAmB,EACnBC,sBAAsB,QAGjB,oBAAgB;AAEvB;;;;;;;;CAQC,GACD,OAAO,MAAMC,oBAAsC,OAAOC,KAAKC;QAGvCC,cAIAA;IANtB,IAAIF,IAAIG,MAAM,KAAK,QAAQ,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAqB;IACrF,MAAMJ,OAAOZ,eAAeU;IAC5B,MAAMO,SAASC,QAAON,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,MAAMO,OAAO,MAAMpB,kBAAkBW,KAAKO;IAC1C,IAAI,WAAWE,MAAM,OAAOR,IAAIG,MAAM,CAACK,KAAKL,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAOG,KAAKH,KAAK;IAAC;IAC7E,MAAMI,QAAQD,KAAKC,KAAK;IACxB,MAAMC,SAASH,QAAON,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,IAAI;QACF,OAAQS;YACN,KAAK;gBACH,OAAOV,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC,MAAMO,YAAYF,OAAOR,IAAI,CAAC,UAAU,KAAK;YAC3E,KAAK;gBACH,OAAO,MAAMW,eAAeH,OAAOR,MAAMD;YAC3C,KAAK;gBACH,OAAO,MAAMa,aAAaJ,OAAOR,MAAMD;YACzC,KAAK;gBACH,OAAO,MAAMc,aAAaL,OAAOR,MAAMD;YACzC,KAAK;gBACH,OAAO,MAAMe,eAAeN,OAAOR,MAAMD;YAC3C;gBACE,OAAOA,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAAiB;QAC1D;IACF,EAAE,OAAOA,OAAO;QACdW,QAAQX,KAAK,CAAC,iBAAiBK,QAAQL;QACvC,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAoC;IAC3E;AACF,EAAC;AAED,SAASY,WAAWX,MAAc;IAChC,OAAOnB,cAAc+B,GAAG,GAAGC,SAAS,GAAGC,UAAU,CAAC,SAASC,GAAG,CAACf,QAAQc,UAAU,CAAC;AACpF;AAEA,eAAeT,YAAYF,KAAe,EAAEa,OAAgB;IAC1D,MAAMC,YAAY7B;IAClB,MAAM8B,WAAW,MAAMP,WAAWR,MAAMH,MAAM,EAAEmB,KAAK,CAAC,IAAIC,GAAG;IAC7D,MAAMC,UAAUH,SAASI,IAAI,CAACC,GAAG,CAAC,CAACR,MAAc;YAC/CS,IAAIT,IAAIS,EAAE;WACNT,IAAIU,IAAI;IAEd,IAAIR,aAAaD,SAAS;QACxB,MAAMU,QAAQC,GAAG,CACfN,QAAQE,GAAG,CAAC,OAAOK;YACjB,MAAMC,QAAQ,MAAMtC,uBAAuBY,MAAMH,MAAM,EAAE4B,OAAOJ,EAAE,EAAEM,KAAK,CAAC,IAAM;YAChF,IAAID,OAAOD,OAAO/B,MAAM,GAAGgC,MAAMhC,MAAM;QACzC;IAEJ;IACA,MAAMkC,SAAS,MAAMlD,cAClB+B,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACZ,MAAMH,MAAM,EAChBc,UAAU,CAAC,YACXC,GAAG,CAAC,UACJK,GAAG;IACN,OAAO;QACLH;QACAe,UAAU7C;QACV8C,eAAeC,QAAQH,OAAOX,GAAG,CAAC;QAClCC,SAASA,QAAQE,GAAG,CAAC,CAACK;gBAGRA,oBACAA,oBACEA,sBACNA;mBAN4D;gBACpEJ,IAAII,OAAOJ,EAAE;gBACbW,OAAOP,OAAOO,KAAK;gBACnBC,UAAU,GAAER,qBAAAA,OAAOQ,UAAU,YAAjBR,qBAAqB;gBACjCS,UAAU,GAAET,qBAAAA,OAAOS,UAAU,YAAjBT,qBAAqB;gBACjCU,YAAY,GAAEV,uBAAAA,OAAOU,YAAY,YAAnBV,uBAAuB;gBACrC/B,MAAM,GAAE+B,iBAAAA,OAAO/B,MAAM,YAAb+B,iBAAiB;gBACzBW,UAAUX,OAAOW,QAAQ;YAC3B;;IACF;AACF;AAEA,eAAeC,eAAexC,MAAc,EAAEoC,UAAkB;IAC9D,IAAI,CAAC,yBAAyBK,IAAI,CAACL,aAAa,OAAO;IACvD,OAAO,AACL,CAAA,MAAMvD,cACH+B,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACf,QACJc,UAAU,CAAC,aACXC,GAAG,CAACqB,YACJhB,GAAG,EAAC,EACPsB,MAAM;AACV;AAEA,eAAepC,eACbH,KAAe,EACfR,IAAyB,EACzBD,GAAoC;QAKJC,wBAIXA,aACKA,kBASJgD,MAAAA,WAIEC,gBAEDA,eAEMA,qBACHA,kBAiCTC;QAdGA;IA7CpB,IAAI,CAACzD,wBAAwB;QAC3B,OAAOM,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAsC;IAC7E;IACA,MAAM+C,mBAAmB7C,QAAON,yBAAAA,IAAI,CAAC,mBAAmB,YAAxBA,yBAA4B,IAAIoD,IAAI;IACpE,IAAI,CAAC,uBAAuBN,IAAI,CAACK,mBAAmB;QAClD,OAAOpD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiD;IACxF;IACA,MAAMoC,QAAQlC,QAAON,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,IAAIoD,IAAI,GAAGC,KAAK,CAAC,GAAG,OAAO;IACjE,MAAMZ,aAAanC,QAAON,mBAAAA,IAAI,CAAC,aAAa,YAAlBA,mBAAsB;IAChD,IAAIyC,cAAc,CAAE,MAAMI,eAAerC,MAAMH,MAAM,EAAEoC,aAAc;QACnE,OAAO1C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAmB;IAC1D;IACA,MAAM4C,OAAO,MAAM9D,cAAc+B,GAAG,GAAGC,SAAS,GAAGC,UAAU,CAAC,SAASC,GAAG,CAACZ,MAAMH,MAAM,EAAEoB,GAAG;IAC5F,MAAMwB,UAAUjD,IAAI,CAAC,UAAU;IAC/B,MAAMsD,WAAW,MAAM5D,0BAA0B;QAC/CW,QAAQG,MAAMH,MAAM;QACpBkD,OAAO/C,MAAM+C,KAAK;QAClBC,aAAalD,QAAO0C,QAAAA,YAAAA,KAAKvB,GAAG,CAAC,mBAATuB,YAAoBA,KAAKvB,GAAG,CAAC,oBAA7BuB,OAAyC;OACzDC,UACA;QACEA,SAAS;YACPQ,OAAOnD,QAAO2C,iBAAAA,QAAQQ,KAAK,YAAbR,iBAAiB,IAAII,KAAK,CAAC,GAAG;WACxCJ,QAAQS,KAAK,GAAG;YAAEA,OAAOpD,OAAO2C,QAAQS,KAAK,EAAEL,KAAK,CAAC,GAAG;QAAK,IAAI,CAAC;YACtEM,MAAMrD,QAAO2C,gBAAAA,QAAQU,IAAI,YAAZV,gBAAgB,IAAII,KAAK,CAAC,GAAG;WACtCJ,QAAQW,KAAK,GAAG;YAAEA,OAAOtD,OAAO2C,QAAQW,KAAK,EAAEP,KAAK,CAAC,GAAG;QAAK,IAAI,CAAC;YACtEQ,YAAYvD,QAAO2C,sBAAAA,QAAQY,UAAU,YAAlBZ,sBAAsB,IAAII,KAAK,CAAC,GAAG;YACtDS,SAASxD,QAAO2C,mBAAAA,QAAQa,OAAO,YAAfb,mBAAmB,IAAIc,WAAW,GAAGV,KAAK,CAAC,GAAG;;IAElE,IACA,CAAC;IAEP,IAAI,WAAWC,UAAU,OAAOvD,IAAIG,MAAM,CAACoD,SAASpD,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAOkD,SAASlD,KAAK;IAAC;IACzF,uEAAuE;IACvE,sEAAsE;IACtE,iEAAiE;IACjE,MAAM8C,UAAU,MAAM5D,UAAU,QAAQ,oBAAoB;QAC1D0E,QAAQ;YACNC,mBAAmBd;YACnBX;YACAc,UAAUA,SAASY,UAAU;YAC7B,mBAAmB1D,MAAM+C,KAAK;YAC9B,oBAAoB/C,MAAMH,MAAM;WAC5BoC,aAAa;YAAE,wBAAwBA;QAAW,IAAI,CAAC;IAE/D;IACA,IAAI,CAACS,QAAQiB,EAAE,IAAI,GAACjB,gBAAAA,QAAQlD,IAAI,qBAAZkD,cAAcrB,EAAE,GAAE;QACpC,OAAO9B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAC1BC,OAAOb,sBACL2D,QAAQlD,IAAI,EACZ;QAEJ;IACF;IACA,MAAMiC,SAA4B;QAChCO;OACIC,aAAa;QAAEA;IAAW,IAAI,CAAC;QACnC2B,kBAAkBd,SAASY,UAAU;OACjChB,QAAQlD,IAAI,CAACqE,WAAW,GAAG;QAAE3B,YAAYpC,OAAO4C,QAAQlD,IAAI,CAACqE,WAAW;IAAE,IAAI,CAAC,GAC/EnB,QAAQlD,IAAI,CAACsE,aAAa,GAAG;QAAE3B,cAAcrC,OAAO4C,QAAQlD,IAAI,CAACsE,aAAa;IAAE,IAAI,CAAC;QACzFpE,QAAQI,QAAO4C,uBAAAA,QAAQlD,IAAI,CAACE,MAAM,YAAnBgD,uBAAuB;QACtCN,UAAUL,QAAQW,QAAQlD,IAAI,CAAC4C,QAAQ;QACvC2B,aAAaC,KAAKC,GAAG;QACrBC,WAAWlE,MAAMmE,GAAG;;IAEtB,MAAM3D,WAAWR,MAAMH,MAAM,EAAEe,GAAG,CAACd,OAAO4C,QAAQlD,IAAI,CAAC6B,EAAE,GAAG+C,GAAG,CAAC3C;IAChE,OAAOlC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAE8B,QAAQ;YAAEJ,IAAIvB,OAAO4C,QAAQlD,IAAI,CAAC6B,EAAE;WAAMI;IAAS;AACnF;AAEA,eAAerB,aACbJ,KAAe,EACfR,IAAyB,EACzBD,GAAoC;QAkB4BC;IAhBhE,MAAMiC,SAAS,MAAMtC,oBAAoBa,MAAMH,MAAM,EAAEL,IAAI,CAAC,WAAW;IACvE,IAAI,CAACiC,QAAQ,OAAOlC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAwC;IAC1F,MAAMyE,QAAiC,CAAC;IACxC,IAAI,OAAO7E,IAAI,CAAC,QAAQ,KAAK,UAAU;QACrC6E,KAAK,CAAC,QAAQ,GAAG7E,IAAI,CAAC,QAAQ,CAACoD,IAAI,GAAGC,KAAK,CAAC,GAAG,OAAOpB,OAAOO,KAAK;IACpE;IACA,IAAI,gBAAgBxC,MAAM;YACEA;QAA1B,MAAMyC,aAAanC,QAAON,oBAAAA,IAAI,CAAC,aAAa,YAAlBA,oBAAsB;QAChD,IAAIyC,cAAc,CAAE,MAAMI,eAAerC,MAAMH,MAAM,EAAEoC,aAAc;YACnE,OAAO1C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAmB;QAC1D;QACAyE,KAAK,CAAC,aAAa,GAAGpC,cAAcvD,cAAcgC,SAAS,CAAC4D,UAAU,CAACC,MAAM;IAC/E;IACA,MAAMC,UAAU,MAAM1F,UAAU,QAAQ,CAAC,iBAAiB,EAAE2C,OAAOJ,EAAE,EAAE,EAAE;QACvEmC,QAAQ,aACFa,KAAK,CAAC,QAAQ,GAAG;YAAErC,OAAOlC,OAAOuE,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,GACtD,gBAAgB7E,OAAO;YAAE,wBAAwBM,QAAON,mBAAAA,IAAI,CAAC,aAAa,YAAlBA,mBAAsB;QAAI,IAAI,CAAC;IAE/F;IACA,IAAI,CAACgF,QAAQb,EAAE,EAAE;QACf,OAAOpE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAOb,sBAAsByF,QAAQhF,IAAI,EAAE;QAAoC;IAC/G;IACA,MAAMgB,WAAWR,MAAMH,MAAM,EAAEe,GAAG,CAACa,OAAOJ,EAAE,EAAE+C,GAAG,CAACC,OAAO;QAAEI,OAAO;IAAK;IACvE,OAAOlF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEgE,IAAI;IAAK;AACzC;AAEA,eAAetD,aACbL,KAAe,EACfR,IAAyB,EACzBD,GAAoC;IAEpC,MAAMkC,SAAS,MAAMtC,oBAAoBa,MAAMH,MAAM,EAAEL,IAAI,CAAC,WAAW;IACvE,IAAI,CAACiC,QAAQ,OAAOlC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAwC;IAC1F,MAAM8E,UAAU,MAAM5F,UAAU,UAAU,CAAC,iBAAiB,EAAE2C,OAAOJ,EAAE,EAAE;IACzE,yEAAyE;IACzE,IAAI,CAACqD,QAAQf,EAAE,IAAIe,QAAQhF,MAAM,KAAK,KAAK;QACzC,OAAOH,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAOb,sBAAsB2F,QAAQlF,IAAI,EAAE;QAAoC;IAC/G;IACA,MAAMgB,WAAWR,MAAMH,MAAM,EAAEe,GAAG,CAACa,OAAOJ,EAAE,EAAEkD,MAAM;IACpD,OAAOhF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEgE,IAAI;IAAK;AACzC;AAEA;;;;;;CAMC,GACD,eAAerD,eACbN,KAAe,EACfR,IAAyB,EACzBD,GAAoC;QAEVC;IAA1B,MAAMyC,aAAanC,QAAON,mBAAAA,IAAI,CAAC,aAAa,YAAlBA,mBAAsB;IAChD,IAAI,CAAE,MAAM6C,eAAerC,MAAMH,MAAM,EAAEoC,aAAc;QACrD,OAAO1C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAmB;IAC1D;IACA,MAAMc,YAAYhC,cAAc+B,GAAG,GAAGC,SAAS;IAC/C,MAAMiE,cAAcjE,UACjBC,UAAU,CAAC,SACXC,GAAG,CAACZ,MAAMH,MAAM,EAChBc,UAAU,CAAC,aACXC,GAAG,CAACqB;IACP,MAAMpD,kBAAkBmB,MAAMH,MAAM,EAAEoC;IACtC,MAAM0C,YAAYJ,MAAM;IACxB,MAAMK,QAAQ,MAAMpE,WAAWR,MAAMH,MAAM,EAAEgF,KAAK,CAAC,cAAc,MAAM5C,YAAYjB,KAAK,CAAC,IAAIC,GAAG;IAChG,MAAMM,QAAQC,GAAG,CACfoD,MAAMzD,IAAI,CAACC,GAAG,CAAC,CAACR,MACdA,IAAIkE,GAAG,CAACV,GAAG,CAAC;YAAEnC,YAAYvD,cAAcgC,SAAS,CAAC4D,UAAU,CAACC,MAAM;QAAG,GAAG;YAAEE,OAAO;QAAK;IAG3F,OAAOlF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEgE,IAAI;IAAK;AACzC"}

package/src/lib/server/pos-refund-authority.d.ts

@@ -0,0 +1,60 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PosOpsDeps } from './pos-ops-gate';
+export type PosRefundAuthority = {
+    ok: true;
+    approvedBy?: string;
+} | {
+    ok: false;
+    body: {
+        error: string;
+        needsManager?: boolean;
+        limitCents?: number;
+    };
+};
+/** The limit question, with the money already known. */
+export declare function decidePosRefundAuthority(deps: PosOpsDeps, input: {
+    hostId: string;
+    hostRef: FirebaseFirestore.DocumentReference;
+    registerId: string;
+    refundCents: number;
+    limitCents: number;
+    /** The member asking is a workspace admin, or a manager's PIN stands behind them. */
+    isManager: boolean;
+    managerAssertion: unknown;
+}): Promise<PosRefundAuthority>;
+/**
+ * For `refund.ts`: a register member refunding from the order dialog. The
+ * amount is the one the route is about to reserve — the amount asked, else
+ * the named lines, else everything left.
+ */
+export declare function posRegisterRefundAuthority(input: {
+    hostId: string;
+    hostRef: FirebaseFirestore.DocumentReference;
+    order: {
+        channel?: string;
+        totals?: {
+            totalCents?: number;
+        } | null;
+        amountCents?: number;
+        refundedCents?: number;
+    };
+    amountCents: number | null;
+    lineCents: number | null;
+    registerId: string;
+    managerAssertion: unknown;
+}, deps?: PosOpsDeps): Promise<PosRefundAuthority>;

package/src/lib/server/pos-refund-authority.js

@@ -0,0 +1,72 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { posMoney } from "../model/commerce-pos-ops.js";
+import { posOpsSettings } from "../pos-ops-config.js";
+import { defaultPosOpsDeps, posOpsCleanId, resolvePosStaffAssertion } from "./pos-ops-gate.js";
+/** The limit question, with the money already known. */ export async function decidePosRefundAuthority(deps, input) {
+    if (input.isManager || input.refundCents <= input.limitCents) return {
+        ok: true
+    };
+    const registerId = posOpsCleanId(input.registerId);
+    const approvedBy = registerId && input.managerAssertion ? await resolvePosStaffAssertion(deps, input.hostRef, input.managerAssertion, {
+        hostId: input.hostId,
+        registerId,
+        purpose: 'manager'
+    }) : null;
+    if (approvedBy) return {
+        ok: true,
+        approvedBy
+    };
+    return {
+        ok: false,
+        body: {
+            error: input.limitCents > 0 ? `Refunds over ${posMoney(input.limitCents)} need a manager's PIN.` : "Register refunds need a manager's PIN.",
+            needsManager: true,
+            limitCents: input.limitCents
+        }
+    };
+}
+/**
+ * For `refund.ts`: a register member refunding from the order dialog. The
+ * amount is the one the route is about to reserve — the amount asked, else
+ * the named lines, else everything left.
+ */ export async function posRegisterRefundAuthority(input, deps = defaultPosOpsDeps()) {
+    var _ref, _ref1, _input_order_refundedCents;
+    var _input_order_totals;
+    if (input.order.channel !== 'pos') {
+        return {
+            ok: false,
+            body: {
+                error: 'Refunds of online orders require an admin of the whole workspace'
+            }
+        };
+    }
+    const remaining = Math.max(0, Math.round(Number((_ref = (_ref1 = (_input_order_totals = input.order.totals) == null ? void 0 : _input_order_totals.totalCents) != null ? _ref1 : input.order.amountCents) != null ? _ref : 0)) - Math.round(Number((_input_order_refundedCents = input.order.refundedCents) != null ? _input_order_refundedCents : 0)));
+    const asked = input.amountCents != null && Number.isFinite(input.amountCents) ? Math.round(input.amountCents) : input.lineCents != null ? input.lineCents : remaining;
+    const owner = await deps.orgForHost(input.hostId);
+    const settings = posOpsSettings((owner == null ? void 0 : owner.orgId) ? await deps.pluginConfig(owner.orgId, input.hostId).catch(()=>({})) : {});
+    return decidePosRefundAuthority(deps, {
+        hostId: input.hostId,
+        hostRef: input.hostRef,
+        registerId: input.registerId,
+        refundCents: Math.min(asked, remaining),
+        limitCents: settings.refundLimitCents,
+        isManager: false,
+        managerAssertion: input.managerAssertion
+    });
+}
+
+//# sourceMappingURL=pos-refund-authority.js.map

package/src/lib/server/pos-refund-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-refund-authority.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { posMoney } from '../model/commerce-pos-ops'\nimport { posOpsSettings } from '../pos-ops-config'\nimport {\n  defaultPosOpsDeps,\n  posOpsCleanId,\n  resolvePosStaffAssertion,\n  type PosOpsDeps,\n} from './pos-ops-gate'\n\n/*==========================================\n * HOW MUCH THE REGISTER MAY REFUND (AGL-3609).\n *\n * A workspace admin refunds anything, as before. A member who works the\n * register refunds a POS sale up to the site's cashier refund limit\n * (`posRefundLimit`, $0 by default, so out of the box every register refund\n * needs a manager), and above it only with a MANAGER ASSERTION: a workspace\n * admin's PIN, entered at that register for that refund, minted for two\n * minutes and re-checked against the manager's role when it is used.\n *\n * Only a POS sale. An online order's refund stays a workspace admin's, so the\n * register's limit is not a way to refund the storefront.\n *=========================================*/\n\nexport type PosRefundAuthority =\n  | { ok: true; approvedBy?: string }\n  | { ok: false; body: { error: string; needsManager?: boolean; limitCents?: number } }\n\n/** The limit question, with the money already known. */\nexport async function decidePosRefundAuthority(\n  deps: PosOpsDeps,\n  input: {\n    hostId: string\n    hostRef: FirebaseFirestore.DocumentReference\n    registerId: string\n    refundCents: number\n    limitCents: number\n    /** The member asking is a workspace admin, or a manager's PIN stands behind them. */\n    isManager: boolean\n    managerAssertion: unknown\n  },\n): Promise<PosRefundAuthority> {\n  if (input.isManager || input.refundCents <= input.limitCents) return { ok: true }\n  const registerId = posOpsCleanId(input.registerId)\n  const approvedBy =\n    registerId && input.managerAssertion\n      ? await resolvePosStaffAssertion(deps, input.hostRef, input.managerAssertion, {\n          hostId: input.hostId,\n          registerId,\n          purpose: 'manager',\n        })\n      : null\n  if (approvedBy) return { ok: true, approvedBy }\n  return {\n    ok: false,\n    body: {\n      error:\n        input.limitCents > 0\n          ? `Refunds over ${posMoney(input.limitCents)} need a manager's PIN.`\n          : \"Register refunds need a manager's PIN.\",\n      needsManager: true,\n      limitCents: input.limitCents,\n    },\n  }\n}\n\n/**\n * For `refund.ts`: a register member refunding from the order dialog. The\n * amount is the one the route is about to reserve — the amount asked, else\n * the named lines, else everything left.\n */\nexport async function posRegisterRefundAuthority(\n  input: {\n    hostId: string\n    hostRef: FirebaseFirestore.DocumentReference\n    order: {\n      channel?: string\n      totals?: { totalCents?: number } | null\n      amountCents?: number\n      refundedCents?: number\n    }\n    amountCents: number | null\n    lineCents: number | null\n    registerId: string\n    managerAssertion: unknown\n  },\n  deps: PosOpsDeps = defaultPosOpsDeps(),\n): Promise<PosRefundAuthority> {\n  if (input.order.channel !== 'pos') {\n    return {\n      ok: false,\n      body: { error: 'Refunds of online orders require an admin of the whole workspace' },\n    }\n  }\n  const remaining = Math.max(\n    0,\n    Math.round(Number(input.order.totals?.totalCents ?? input.order.amountCents ?? 0)) -\n      Math.round(Number(input.order.refundedCents ?? 0)),\n  )\n  const asked =\n    input.amountCents != null && Number.isFinite(input.amountCents)\n      ? Math.round(input.amountCents)\n      : input.lineCents != null\n        ? input.lineCents\n        : remaining\n  const owner = await deps.orgForHost(input.hostId)\n  const settings = posOpsSettings(\n    owner?.orgId ? await deps.pluginConfig(owner.orgId, input.hostId).catch(() => ({})) : {},\n  )\n  return decidePosRefundAuthority(deps, {\n    hostId: input.hostId,\n    hostRef: input.hostRef,\n    registerId: input.registerId,\n    refundCents: Math.min(asked, remaining),\n    limitCents: settings.refundLimitCents,\n    isManager: false,\n    managerAssertion: input.managerAssertion,\n  })\n}\n"],"names":["posMoney","posOpsSettings","defaultPosOpsDeps","posOpsCleanId","resolvePosStaffAssertion","decidePosRefundAuthority","deps","input","isManager","refundCents","limitCents","ok","registerId","approvedBy","managerAssertion","hostRef","hostId","purpose","body","error","needsManager","posRegisterRefundAuthority","order","channel","remaining","Math","max","round","Number","totals","totalCents","amountCents","refundedCents","asked","isFinite","lineCents","owner","orgForHost","settings","orgId","pluginConfig","catch","min","refundLimitCents"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,QAAQ,QAAQ,+BAA2B;AACpD,SAASC,cAAc,QAAQ,uBAAmB;AAClD,SACEC,iBAAiB,EACjBC,aAAa,EACbC,wBAAwB,QAEnB,oBAAgB;AAoBvB,sDAAsD,GACtD,OAAO,eAAeC,yBACpBC,IAAgB,EAChBC,KASC;IAED,IAAIA,MAAMC,SAAS,IAAID,MAAME,WAAW,IAAIF,MAAMG,UAAU,EAAE,OAAO;QAAEC,IAAI;IAAK;IAChF,MAAMC,aAAaT,cAAcI,MAAMK,UAAU;IACjD,MAAMC,aACJD,cAAcL,MAAMO,gBAAgB,GAChC,MAAMV,yBAAyBE,MAAMC,MAAMQ,OAAO,EAAER,MAAMO,gBAAgB,EAAE;QAC1EE,QAAQT,MAAMS,MAAM;QACpBJ;QACAK,SAAS;IACX,KACA;IACN,IAAIJ,YAAY,OAAO;QAAEF,IAAI;QAAME;IAAW;IAC9C,OAAO;QACLF,IAAI;QACJO,MAAM;YACJC,OACEZ,MAAMG,UAAU,GAAG,IACf,CAAC,aAAa,EAAEV,SAASO,MAAMG,UAAU,EAAE,sBAAsB,CAAC,GAClE;YACNU,cAAc;YACdV,YAAYH,MAAMG,UAAU;QAC9B;IACF;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeW,2BACpBd,KAaC,EACDD,OAAmBJ,mBAAmB;QAUlBK,aACEA;QADFA;IARpB,IAAIA,MAAMe,KAAK,CAACC,OAAO,KAAK,OAAO;QACjC,OAAO;YACLZ,IAAI;YACJO,MAAM;gBAAEC,OAAO;YAAmE;QACpF;IACF;IACA,MAAMK,YAAYC,KAAKC,GAAG,CACxB,GACAD,KAAKE,KAAK,CAACC,QAAOrB,iBAAAA,sBAAAA,MAAMe,KAAK,CAACO,MAAM,qBAAlBtB,oBAAoBuB,UAAU,oBAAIvB,MAAMe,KAAK,CAACS,WAAW,YAAzDxB,OAA6D,MAC7EkB,KAAKE,KAAK,CAACC,QAAOrB,6BAAAA,MAAMe,KAAK,CAACU,aAAa,YAAzBzB,6BAA6B;IAEnD,MAAM0B,QACJ1B,MAAMwB,WAAW,IAAI,QAAQH,OAAOM,QAAQ,CAAC3B,MAAMwB,WAAW,IAC1DN,KAAKE,KAAK,CAACpB,MAAMwB,WAAW,IAC5BxB,MAAM4B,SAAS,IAAI,OACjB5B,MAAM4B,SAAS,GACfX;IACR,MAAMY,QAAQ,MAAM9B,KAAK+B,UAAU,CAAC9B,MAAMS,MAAM;IAChD,MAAMsB,WAAWrC,eACfmC,CAAAA,yBAAAA,MAAOG,KAAK,IAAG,MAAMjC,KAAKkC,YAAY,CAACJ,MAAMG,KAAK,EAAEhC,MAAMS,MAAM,EAAEyB,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA,KAAM,CAAC;IAEzF,OAAOpC,yBAAyBC,MAAM;QACpCU,QAAQT,MAAMS,MAAM;QACpBD,SAASR,MAAMQ,OAAO;QACtBH,YAAYL,MAAMK,UAAU;QAC5BH,aAAagB,KAAKiB,GAAG,CAACT,OAAOT;QAC7Bd,YAAY4B,SAASK,gBAAgB;QACrCnC,WAAW;QACXM,kBAAkBP,MAAMO,gBAAgB;IAC1C;AACF"}

package/src/lib/server/pos-return.d.ts

@@ -0,0 +1,58 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PluginApiHandler, type PluginApiRequest } from '@aglyn/aglyn/server';
+import * as CommerceModel from '../model';
+import { type PosOpsDeps } from './pos-ops-gate';
+export interface PosReturnSideEffects {
+    hostId: string;
+    orderId: string;
+    /** The return's id, the same under the register and in the store's returns. */
+    returnId: string;
+    /** The return as the store's returns list holds it, for the return event. */
+    storeReturn: CommerceModel.HostReturn;
+    /** The Stripe refunds the return made, if any, for the refund event. */
+    refundIds: string[];
+    email: string | null | undefined;
+    refundCents: number;
+    closedTheOrder: boolean;
+    returnedProductIds: string[];
+    fullyRefunded: boolean;
+    lineIndexes: number[];
+    /** The lines this return finished taking back in full. */
+    fullLineIndexes: number[];
+}
+export interface PosReturnDeps extends PosOpsDeps {
+    /** What every refund tells the rest of the workspace, after the money moved. Never throws. */
+    afterRefund(input: PosReturnSideEffects): Promise<void>;
+}
+export declare function defaultPosReturnDeps(): PosReturnDeps;
+type Outcome = {
+    status: number;
+    body: Record<string, unknown>;
+};
+export declare function handlePosReturn(deps: PosReturnDeps, req: PluginApiRequest): Promise<Outcome>;
+/**
+ * Units per order line that the store's OTHER returns — the online returns
+ * flow (AGL-3611) — hold or already took back. The register's own returns are
+ * left out: `returnedQuantities` on the order already counts them.
+ */
+export declare function unitsHeldByOnlineReturns(docs: ReadonlyArray<{
+    data(): FirebaseFirestore.DocumentData | undefined;
+}>): number[];
+export declare function createPosReturnHandler(deps?: () => PosReturnDeps): PluginApiHandler;
+export declare const posReturnHandler: PluginApiHandler;
+export {};