@aglyn/plugins-commerce 1.0.0-beta.230 → 1.0.0-beta.231

package/src/lib/server/pos-staff-pin.js

@@ -0,0 +1,339 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import { POS_PIN_LOCKOUT_MS, POS_PIN_MAX_ATTEMPTS, posPinProblem } from "../model/commerce-pos-ops.js";
+import { hashMemberPassword, verifyMemberPassword } from "./membership.js";
+import { authorizePosOps, defaultPosOpsDeps, isPosManager, mayWorkRegister, mintPosAssertion, posOpsBody, posOpsCleanId, readPosAssertion, readPosRegister, resolvePosStaffAssertion } from "./pos-ops-gate.js";
+function pinRef(hostRef, uid) {
+    return hostRef.collection('posStaffPins').doc(uid);
+}
+export async function handlePosStaffPin(deps, req) {
+    var _body_action;
+    if (req.method !== 'POST') return {
+        status: 405,
+        body: {
+            error: 'Method not allowed'
+        }
+    };
+    const body = posOpsBody(req);
+    const gate = await authorizePosOps(deps, req, body['hostId']);
+    if ('error' in gate) return {
+        status: gate.status,
+        body: {
+            error: gate.error
+        }
+    };
+    const staff = gate.staff;
+    const action = String((_body_action = body['action']) != null ? _body_action : '');
+    const firestore = deps.firestore();
+    switch(action){
+        case 'status':
+            {
+                const snapshot = await pinRef(staff.hostRef, staff.uid).get();
+                return {
+                    status: 200,
+                    body: {
+                        hasPin: snapshot.exists && Boolean(snapshot.get('pinScrypt')),
+                        isManager: staff.isManager
+                    }
+                };
+            }
+        case 'set':
+        case 'clear':
+            {
+                var _body_pin;
+                const target = posOpsCleanId(body['memberUid']) || staff.uid;
+                if (target !== staff.uid && !staff.isManager) {
+                    return {
+                        status: 403,
+                        body: {
+                            error: "Only a workspace admin can set another member's PIN."
+                        }
+                    };
+                }
+                if (target !== staff.uid) {
+                    var _host_get;
+                    const host = await staff.hostRef.get();
+                    const role = ((_host_get = host.get('memberRoles')) != null ? _host_get : {})[target];
+                    if (role !== 'admin' && role !== 'editor') {
+                        return {
+                            status: 404,
+                            body: {
+                                error: 'That member does not work on this site.'
+                            }
+                        };
+                    }
+                }
+                if (action === 'clear') {
+                    await pinRef(staff.hostRef, target).delete();
+                    return {
+                        status: 200,
+                        body: {
+                            ok: true,
+                            hasPin: false
+                        }
+                    };
+                }
+                const pin = String((_body_pin = body['pin']) != null ? _body_pin : '');
+                const problem = posPinProblem(pin);
+                if (problem) return {
+                    status: 400,
+                    body: {
+                        error: problem
+                    }
+                };
+                await pinRef(staff.hostRef, target).set({
+                    pinScrypt: hashMemberPassword(pin),
+                    setAtMs: deps.now(),
+                    setBy: staff.uid,
+                    failedAttempts: 0,
+                    lockedUntilMs: null
+                });
+                return {
+                    status: 200,
+                    body: {
+                        ok: true,
+                        hasPin: true
+                    }
+                };
+            }
+        case 'roster':
+            {
+                var _host_get1;
+                const host = await staff.hostRef.get();
+                const roles = (_host_get1 = host.get('memberRoles')) != null ? _host_get1 : {};
+                const pins = await staff.hostRef.collection('posStaffPins').limit(200).get();
+                const staffWithPins = pins.docs.map((doc)=>doc.id).filter((uid)=>roles[uid] === 'admin' || roles[uid] === 'editor');
+                const members = await Promise.all(staffWithPins.map(async (uid)=>({
+                        uid,
+                        name: await deps.memberName(uid)
+                    })));
+                members.sort((a, b)=>a.name.localeCompare(b.name));
+                return {
+                    status: 200,
+                    body: {
+                        members
+                    }
+                };
+            }
+        case 'verify':
+            {
+                var _body_pin1, _host_get2;
+                const register = await readPosRegister(staff, body['registerId']);
+                if ('error' in register) return {
+                    status: register.status,
+                    body: {
+                        error: register.error
+                    }
+                };
+                const purpose = body['purpose'] === 'manager' ? 'manager' : 'cashier';
+                const memberUid = posOpsCleanId(body['memberUid']);
+                const pin = String((_body_pin1 = body['pin']) != null ? _body_pin1 : '');
+                if (!memberUid || !/^\d{4,6}$/.test(pin)) {
+                    return {
+                        status: 400,
+                        body: {
+                            error: 'Choose your name and enter your PIN.'
+                        }
+                    };
+                }
+                const ref = pinRef(staff.hostRef, memberUid);
+                const now = deps.now();
+                // Claim the attempt first; the PIN is checked only inside the budget.
+                const claim = await firestore.runTransaction(async (transaction)=>{
+                    var _snapshot_get, _snapshot_get1;
+                    const snapshot = await transaction.get(ref);
+                    if (!snapshot.exists || !snapshot.get('pinScrypt')) return {
+                        kind: 'none'
+                    };
+                    const lockedUntilMs = Number((_snapshot_get = snapshot.get('lockedUntilMs')) != null ? _snapshot_get : 0);
+                    if (lockedUntilMs > now) return {
+                        kind: 'locked',
+                        lockedUntilMs
+                    };
+                    const failed = lockedUntilMs ? 0 : Number((_snapshot_get1 = snapshot.get('failedAttempts')) != null ? _snapshot_get1 : 0);
+                    if (failed >= POS_PIN_MAX_ATTEMPTS) {
+                        const until = now + POS_PIN_LOCKOUT_MS;
+                        transaction.update(ref, {
+                            lockedUntilMs: until,
+                            failedAttempts: 0
+                        });
+                        return {
+                            kind: 'locked',
+                            lockedUntilMs: until
+                        };
+                    }
+                    transaction.update(ref, {
+                        failedAttempts: failed + 1,
+                        lockedUntilMs: null
+                    });
+                    return {
+                        kind: 'claimed',
+                        hash: String(snapshot.get('pinScrypt')),
+                        attempt: failed + 1
+                    };
+                });
+                if (claim.kind === 'none') {
+                    return {
+                        status: 404,
+                        body: {
+                            error: 'That member has not set a PIN on this site.'
+                        }
+                    };
+                }
+                if (claim.kind === 'locked') {
+                    return {
+                        status: 423,
+                        body: {
+                            error: 'Too many wrong PINs. Try again later, or ask a workspace admin to reset it.',
+                            lockedUntilMs: claim.lockedUntilMs
+                        }
+                    };
+                }
+                if (!verifyMemberPassword(pin, claim.hash)) {
+                    const left = POS_PIN_MAX_ATTEMPTS - claim.attempt;
+                    if (left <= 0) {
+                        await ref.update({
+                            lockedUntilMs: now + POS_PIN_LOCKOUT_MS,
+                            failedAttempts: 0
+                        });
+                        return {
+                            status: 423,
+                            body: {
+                                error: 'Too many wrong PINs. Try again later, or ask a workspace admin to reset it.',
+                                lockedUntilMs: now + POS_PIN_LOCKOUT_MS
+                            }
+                        };
+                    }
+                    return {
+                        status: 401,
+                        body: {
+                            error: `That PIN is not right. ${left} ${left === 1 ? 'try' : 'tries'} left.`,
+                            attemptsLeft: left
+                        }
+                    };
+                }
+                await ref.update({
+                    failedAttempts: 0,
+                    lockedUntilMs: null,
+                    lastUsedAtMs: now
+                });
+                // The PIN is right; whether it still buys anything is today's role.
+                const host = await staff.hostRef.get();
+                const role = ((_host_get2 = host.get('memberRoles')) != null ? _host_get2 : {})[memberUid];
+                const membership = await deps.membership(memberUid, staff.hostId);
+                const allowed = purpose === 'manager' ? isPosManager(role, membership) : mayWorkRegister(role, membership);
+                if (!allowed) {
+                    return {
+                        status: 403,
+                        body: {
+                            error: purpose === 'manager' ? 'Only a workspace admin can approve this.' : 'That member cannot use the register.'
+                        }
+                    };
+                }
+                let minted;
+                try {
+                    minted = mintPosAssertion(deps, {
+                        hostId: staff.hostId,
+                        registerId: register.ref.id,
+                        memberUid,
+                        purpose
+                    });
+                } catch (unused) {
+                    return {
+                        status: 501,
+                        body: {
+                            error: 'Staff PINs are not configured on this server.'
+                        }
+                    };
+                }
+                return {
+                    status: 200,
+                    body: {
+                        assertion: minted.token,
+                        expiresAtMs: minted.expiresAtMs,
+                        memberUid,
+                        name: await deps.memberName(memberUid),
+                        purpose
+                    }
+                };
+            }
+        case 'refresh':
+            {
+                const register = await readPosRegister(staff, body['registerId']);
+                if ('error' in register) return {
+                    status: register.status,
+                    body: {
+                        error: register.error
+                    }
+                };
+                const expected = {
+                    hostId: staff.hostId,
+                    registerId: register.ref.id,
+                    purpose: 'cashier'
+                };
+                if (!readPosAssertion(deps, body['assertion'], expected)) {
+                    return {
+                        status: 401,
+                        body: {
+                            error: 'Enter your PIN again.'
+                        }
+                    };
+                }
+                const memberUid = await resolvePosStaffAssertion(deps, staff.hostRef, body['assertion'], expected);
+                if (!memberUid) return {
+                    status: 403,
+                    body: {
+                        error: 'That member cannot use the register.'
+                    }
+                };
+                const minted = mintPosAssertion(deps, _extends({}, expected, {
+                    memberUid
+                }));
+                return {
+                    status: 200,
+                    body: {
+                        assertion: minted.token,
+                        expiresAtMs: minted.expiresAtMs,
+                        memberUid
+                    }
+                };
+            }
+        default:
+            return {
+                status: 400,
+                body: {
+                    error: 'Unknown action'
+                }
+            };
+    }
+}
+export function createPosStaffPinHandler(deps = defaultPosOpsDeps) {
+    return async (req, res)=>{
+        try {
+            const outcome = await handlePosStaffPin(deps(), req);
+            return res.status(outcome.status).json(outcome.body);
+        } catch (error) {
+            console.error('[pos-staff-pin] failed', error);
+            return res.status(500).json({
+                error: 'The PIN could not be checked'
+            });
+        }
+    };
+}
+export const posStaffPinHandler = createPosStaffPinHandler();
+
+//# sourceMappingURL=pos-staff-pin.js.map

package/src/lib/server/pos-staff-pin.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-staff-pin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginApiHandler, PluginApiRequest } from '@aglyn/aglyn/server'\nimport {\n  POS_PIN_LOCKOUT_MS,\n  POS_PIN_MAX_ATTEMPTS,\n  posPinProblem,\n} from '../model/commerce-pos-ops'\nimport { hashMemberPassword, verifyMemberPassword } from './membership'\nimport {\n  authorizePosOps,\n  defaultPosOpsDeps,\n  isPosManager,\n  mayWorkRegister,\n  mintPosAssertion,\n  posOpsBody,\n  posOpsCleanId,\n  readPosAssertion,\n  readPosRegister,\n  resolvePosStaffAssertion,\n  type PosAssertionPurpose,\n  type PosOpsDeps,\n} from './pos-ops-gate'\n\n/*==========================================\n * STAFF PINS (AGL-3609): `POST /api/commerce/pos-staff-pin`.\n *\n *   status   whether the signed-in member has a PIN on this site\n *   set      a member sets their own PIN; a workspace admin may set or\n *            reset anyone's, which also lifts a lockout\n *   clear    the same, removing it\n *   roster   who can switch in at this register: members with a PIN\n *   verify   a member's PIN at a register → a signed, short-lived\n *            assertion that they are at it (`cashier`), or that a manager\n *            approved one action (`manager`)\n *   refresh  a still-valid cashier assertion → a fresh one, re-checked\n *\n * The hash is scrypt with a per-PIN salt — the membership password helper —\n * at `hosts/{hostId}/posStaffPins/{uid}`, a collection no client may read or\n * write (the rules deny it outright, staff included).\n *\n * LOCKOUT is counted BEFORE the PIN is checked: each attempt is claimed in a\n * transaction that refuses once {@link POS_PIN_MAX_ATTEMPTS} have failed, so\n * a burst of parallel guesses gets five tries in the lockout window, not five\n * each. A right PIN clears the count.\n *=========================================*/\n\ntype Outcome = { status: number; body: Record<string, unknown> }\n\nfunction pinRef(hostRef: FirebaseFirestore.DocumentReference, uid: string) {\n  return hostRef.collection('posStaffPins').doc(uid)\n}\n\nexport async function handlePosStaffPin(deps: PosOpsDeps, req: PluginApiRequest): Promise<Outcome> {\n  if (req.method !== 'POST') return { status: 405, body: { error: 'Method not allowed' } }\n  const body = posOpsBody(req)\n  const gate = await authorizePosOps(deps, req, body['hostId'])\n  if ('error' in gate) return { status: gate.status, body: { error: gate.error } }\n  const staff = gate.staff\n  const action = String(body['action'] ?? '')\n  const firestore = deps.firestore()\n\n  switch (action) {\n    case 'status': {\n      const snapshot = await pinRef(staff.hostRef, staff.uid).get()\n      return {\n        status: 200,\n        body: {\n          hasPin: snapshot.exists && Boolean(snapshot.get('pinScrypt')),\n          isManager: staff.isManager,\n        },\n      }\n    }\n\n    case 'set':\n    case 'clear': {\n      const target = posOpsCleanId(body['memberUid']) || staff.uid\n      if (target !== staff.uid && !staff.isManager) {\n        return {\n          status: 403,\n          body: { error: \"Only a workspace admin can set another member's PIN.\" },\n        }\n      }\n      if (target !== staff.uid) {\n        const host = await staff.hostRef.get()\n        const role = (host.get('memberRoles') ?? {})[target]\n        if (role !== 'admin' && role !== 'editor') {\n          return { status: 404, body: { error: 'That member does not work on this site.' } }\n        }\n      }\n      if (action === 'clear') {\n        await pinRef(staff.hostRef, target).delete()\n        return { status: 200, body: { ok: true, hasPin: false } }\n      }\n      const pin = String(body['pin'] ?? '')\n      const problem = posPinProblem(pin)\n      if (problem) return { status: 400, body: { error: problem } }\n      await pinRef(staff.hostRef, target).set({\n        pinScrypt: hashMemberPassword(pin),\n        setAtMs: deps.now(),\n        setBy: staff.uid,\n        failedAttempts: 0,\n        lockedUntilMs: null,\n      })\n      return { status: 200, body: { ok: true, hasPin: true } }\n    }\n\n    case 'roster': {\n      const host = await staff.hostRef.get()\n      const roles = (host.get('memberRoles') ?? {}) as Record<string, string>\n      const pins = await staff.hostRef.collection('posStaffPins').limit(200).get()\n      const staffWithPins = pins.docs\n        .map((doc) => doc.id)\n        .filter((uid) => roles[uid] === 'admin' || roles[uid] === 'editor')\n      const members = await Promise.all(\n        staffWithPins.map(async (uid) => ({ uid, name: await deps.memberName(uid) })),\n      )\n      members.sort((a, b) => a.name.localeCompare(b.name))\n      return { status: 200, body: { members } }\n    }\n\n    case 'verify': {\n      const register = await readPosRegister(staff, body['registerId'])\n      if ('error' in register) return { status: register.status, body: { error: register.error } }\n      const purpose: PosAssertionPurpose = body['purpose'] === 'manager' ? 'manager' : 'cashier'\n      const memberUid = posOpsCleanId(body['memberUid'])\n      const pin = String(body['pin'] ?? '')\n      if (!memberUid || !/^\\d{4,6}$/.test(pin)) {\n        return { status: 400, body: { error: 'Choose your name and enter your PIN.' } }\n      }\n      const ref = pinRef(staff.hostRef, memberUid)\n      const now = deps.now()\n      // Claim the attempt first; the PIN is checked only inside the budget.\n      const claim = await firestore.runTransaction(async (transaction) => {\n        const snapshot = await transaction.get(ref)\n        if (!snapshot.exists || !snapshot.get('pinScrypt')) return { kind: 'none' as const }\n        const lockedUntilMs = Number(snapshot.get('lockedUntilMs') ?? 0)\n        if (lockedUntilMs > now) return { kind: 'locked' as const, lockedUntilMs }\n        const failed = lockedUntilMs ? 0 : Number(snapshot.get('failedAttempts') ?? 0)\n        if (failed >= POS_PIN_MAX_ATTEMPTS) {\n          const until = now + POS_PIN_LOCKOUT_MS\n          transaction.update(ref, { lockedUntilMs: until, failedAttempts: 0 })\n          return { kind: 'locked' as const, lockedUntilMs: until }\n        }\n        transaction.update(ref, { failedAttempts: failed + 1, lockedUntilMs: null })\n        return { kind: 'claimed' as const, hash: String(snapshot.get('pinScrypt')), attempt: failed + 1 }\n      })\n      if (claim.kind === 'none') {\n        return { status: 404, body: { error: 'That member has not set a PIN on this site.' } }\n      }\n      if (claim.kind === 'locked') {\n        return {\n          status: 423,\n          body: {\n            error: 'Too many wrong PINs. Try again later, or ask a workspace admin to reset it.',\n            lockedUntilMs: claim.lockedUntilMs,\n          },\n        }\n      }\n      if (!verifyMemberPassword(pin, claim.hash)) {\n        const left = POS_PIN_MAX_ATTEMPTS - claim.attempt\n        if (left <= 0) {\n          await ref.update({ lockedUntilMs: now + POS_PIN_LOCKOUT_MS, failedAttempts: 0 })\n          return {\n            status: 423,\n            body: {\n              error: 'Too many wrong PINs. Try again later, or ask a workspace admin to reset it.',\n              lockedUntilMs: now + POS_PIN_LOCKOUT_MS,\n            },\n          }\n        }\n        return {\n          status: 401,\n          body: { error: `That PIN is not right. ${left} ${left === 1 ? 'try' : 'tries'} left.`, attemptsLeft: left },\n        }\n      }\n      await ref.update({ failedAttempts: 0, lockedUntilMs: null, lastUsedAtMs: now })\n      // The PIN is right; whether it still buys anything is today's role.\n      const host = await staff.hostRef.get()\n      const role = (host.get('memberRoles') ?? {})[memberUid]\n      const membership = await deps.membership(memberUid, staff.hostId)\n      const allowed =\n        purpose === 'manager' ? isPosManager(role, membership) : mayWorkRegister(role, membership)\n      if (!allowed) {\n        return {\n          status: 403,\n          body: {\n            error:\n              purpose === 'manager'\n                ? 'Only a workspace admin can approve this.'\n                : 'That member cannot use the register.',\n          },\n        }\n      }\n      let minted: { token: string; expiresAtMs: number }\n      try {\n        minted = mintPosAssertion(deps, {\n          hostId: staff.hostId,\n          registerId: register.ref.id,\n          memberUid,\n          purpose,\n        })\n      } catch {\n        return { status: 501, body: { error: 'Staff PINs are not configured on this server.' } }\n      }\n      return {\n        status: 200,\n        body: {\n          assertion: minted.token,\n          expiresAtMs: minted.expiresAtMs,\n          memberUid,\n          name: await deps.memberName(memberUid),\n          purpose,\n        },\n      }\n    }\n\n    case 'refresh': {\n      const register = await readPosRegister(staff, body['registerId'])\n      if ('error' in register) return { status: register.status, body: { error: register.error } }\n      const expected = { hostId: staff.hostId, registerId: register.ref.id, purpose: 'cashier' as const }\n      if (!readPosAssertion(deps, body['assertion'], expected)) {\n        return { status: 401, body: { error: 'Enter your PIN again.' } }\n      }\n      const memberUid = await resolvePosStaffAssertion(deps, staff.hostRef, body['assertion'], expected)\n      if (!memberUid) return { status: 403, body: { error: 'That member cannot use the register.' } }\n      const minted = mintPosAssertion(deps, { ...expected, memberUid })\n      return { status: 200, body: { assertion: minted.token, expiresAtMs: minted.expiresAtMs, memberUid } }\n    }\n\n    default:\n      return { status: 400, body: { error: 'Unknown action' } }\n  }\n}\n\nexport function createPosStaffPinHandler(deps: () => PosOpsDeps = defaultPosOpsDeps): PluginApiHandler {\n  return async (req, res) => {\n    try {\n      const outcome = await handlePosStaffPin(deps(), req)\n      return res.status(outcome.status).json(outcome.body)\n    } catch (error) {\n      console.error('[pos-staff-pin] failed', error)\n      return res.status(500).json({ error: 'The PIN could not be checked' })\n    }\n  }\n}\n\nexport const posStaffPinHandler = createPosStaffPinHandler()\n"],"names":["POS_PIN_LOCKOUT_MS","POS_PIN_MAX_ATTEMPTS","posPinProblem","hashMemberPassword","verifyMemberPassword","authorizePosOps","defaultPosOpsDeps","isPosManager","mayWorkRegister","mintPosAssertion","posOpsBody","posOpsCleanId","readPosAssertion","readPosRegister","resolvePosStaffAssertion","pinRef","hostRef","uid","collection","doc","handlePosStaffPin","deps","req","body","method","status","error","gate","staff","action","String","firestore","snapshot","get","hasPin","exists","Boolean","isManager","target","host","role","delete","ok","pin","problem","set","pinScrypt","setAtMs","now","setBy","failedAttempts","lockedUntilMs","roles","pins","limit","staffWithPins","docs","map","id","filter","members","Promise","all","name","memberName","sort","a","b","localeCompare","register","purpose","memberUid","test","ref","claim","runTransaction","transaction","kind","Number","failed","until","update","hash","attempt","left","attemptsLeft","lastUsedAtMs","membership","hostId","allowed","minted","registerId","assertion","token","expiresAtMs","expected","createPosStaffPinHandler","res","outcome","json","console","posStaffPinHandler"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SACEA,kBAAkB,EAClBC,oBAAoB,EACpBC,aAAa,QACR,+BAA2B;AAClC,SAASC,kBAAkB,EAAEC,oBAAoB,QAAQ,kBAAc;AACvE,SACEC,eAAe,EACfC,iBAAiB,EACjBC,YAAY,EACZC,eAAe,EACfC,gBAAgB,EAChBC,UAAU,EACVC,aAAa,EACbC,gBAAgB,EAChBC,eAAe,EACfC,wBAAwB,QAGnB,oBAAgB;AA2BvB,SAASC,OAAOC,OAA4C,EAAEC,GAAW;IACvE,OAAOD,QAAQE,UAAU,CAAC,gBAAgBC,GAAG,CAACF;AAChD;AAEA,OAAO,eAAeG,kBAAkBC,IAAgB,EAAEC,GAAqB;QAMvDC;IALtB,IAAID,IAAIE,MAAM,KAAK,QAAQ,OAAO;QAAEC,QAAQ;QAAKF,MAAM;YAAEG,OAAO;QAAqB;IAAE;IACvF,MAAMH,OAAOb,WAAWY;IACxB,MAAMK,OAAO,MAAMtB,gBAAgBgB,MAAMC,KAAKC,IAAI,CAAC,SAAS;IAC5D,IAAI,WAAWI,MAAM,OAAO;QAAEF,QAAQE,KAAKF,MAAM;QAAEF,MAAM;YAAEG,OAAOC,KAAKD,KAAK;QAAC;IAAE;IAC/E,MAAME,QAAQD,KAAKC,KAAK;IACxB,MAAMC,SAASC,QAAOP,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,MAAMQ,YAAYV,KAAKU,SAAS;IAEhC,OAAQF;QACN,KAAK;YAAU;gBACb,MAAMG,WAAW,MAAMjB,OAAOa,MAAMZ,OAAO,EAAEY,MAAMX,GAAG,EAAEgB,GAAG;gBAC3D,OAAO;oBACLR,QAAQ;oBACRF,MAAM;wBACJW,QAAQF,SAASG,MAAM,IAAIC,QAAQJ,SAASC,GAAG,CAAC;wBAChDI,WAAWT,MAAMS,SAAS;oBAC5B;gBACF;YACF;QAEA,KAAK;QACL,KAAK;YAAS;oBAmBOd;gBAlBnB,MAAMe,SAAS3B,cAAcY,IAAI,CAAC,YAAY,KAAKK,MAAMX,GAAG;gBAC5D,IAAIqB,WAAWV,MAAMX,GAAG,IAAI,CAACW,MAAMS,SAAS,EAAE;oBAC5C,OAAO;wBACLZ,QAAQ;wBACRF,MAAM;4BAAEG,OAAO;wBAAuD;oBACxE;gBACF;gBACA,IAAIY,WAAWV,MAAMX,GAAG,EAAE;wBAEVsB;oBADd,MAAMA,OAAO,MAAMX,MAAMZ,OAAO,CAACiB,GAAG;oBACpC,MAAMO,OAAO,EAACD,YAAAA,KAAKN,GAAG,CAAC,0BAATM,YAA2B,CAAC,EAAE,CAACD,OAAO;oBACpD,IAAIE,SAAS,WAAWA,SAAS,UAAU;wBACzC,OAAO;4BAAEf,QAAQ;4BAAKF,MAAM;gCAAEG,OAAO;4BAA0C;wBAAE;oBACnF;gBACF;gBACA,IAAIG,WAAW,SAAS;oBACtB,MAAMd,OAAOa,MAAMZ,OAAO,EAAEsB,QAAQG,MAAM;oBAC1C,OAAO;wBAAEhB,QAAQ;wBAAKF,MAAM;4BAAEmB,IAAI;4BAAMR,QAAQ;wBAAM;oBAAE;gBAC1D;gBACA,MAAMS,MAAMb,QAAOP,YAAAA,IAAI,CAAC,MAAM,YAAXA,YAAe;gBAClC,MAAMqB,UAAU1C,cAAcyC;gBAC9B,IAAIC,SAAS,OAAO;oBAAEnB,QAAQ;oBAAKF,MAAM;wBAAEG,OAAOkB;oBAAQ;gBAAE;gBAC5D,MAAM7B,OAAOa,MAAMZ,OAAO,EAAEsB,QAAQO,GAAG,CAAC;oBACtCC,WAAW3C,mBAAmBwC;oBAC9BI,SAAS1B,KAAK2B,GAAG;oBACjBC,OAAOrB,MAAMX,GAAG;oBAChBiC,gBAAgB;oBAChBC,eAAe;gBACjB;gBACA,OAAO;oBAAE1B,QAAQ;oBAAKF,MAAM;wBAAEmB,IAAI;wBAAMR,QAAQ;oBAAK;gBAAE;YACzD;QAEA,KAAK;YAAU;oBAEEK;gBADf,MAAMA,OAAO,MAAMX,MAAMZ,OAAO,CAACiB,GAAG;gBACpC,MAAMmB,SAASb,aAAAA,KAAKN,GAAG,CAAC,0BAATM,aAA2B,CAAC;gBAC3C,MAAMc,OAAO,MAAMzB,MAAMZ,OAAO,CAACE,UAAU,CAAC,gBAAgBoC,KAAK,CAAC,KAAKrB,GAAG;gBAC1E,MAAMsB,gBAAgBF,KAAKG,IAAI,CAC5BC,GAAG,CAAC,CAACtC,MAAQA,IAAIuC,EAAE,EACnBC,MAAM,CAAC,CAAC1C,MAAQmC,KAAK,CAACnC,IAAI,KAAK,WAAWmC,KAAK,CAACnC,IAAI,KAAK;gBAC5D,MAAM2C,UAAU,MAAMC,QAAQC,GAAG,CAC/BP,cAAcE,GAAG,CAAC,OAAOxC,MAAS,CAAA;wBAAEA;wBAAK8C,MAAM,MAAM1C,KAAK2C,UAAU,CAAC/C;oBAAK,CAAA;gBAE5E2C,QAAQK,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEH,IAAI,CAACK,aAAa,CAACD,EAAEJ,IAAI;gBAClD,OAAO;oBAAEtC,QAAQ;oBAAKF,MAAM;wBAAEqC;oBAAQ;gBAAE;YAC1C;QAEA,KAAK;YAAU;oBAKMrC,YAqDLgB;gBAzDd,MAAM8B,WAAW,MAAMxD,gBAAgBe,OAAOL,IAAI,CAAC,aAAa;gBAChE,IAAI,WAAW8C,UAAU,OAAO;oBAAE5C,QAAQ4C,SAAS5C,MAAM;oBAAEF,MAAM;wBAAEG,OAAO2C,SAAS3C,KAAK;oBAAC;gBAAE;gBAC3F,MAAM4C,UAA+B/C,IAAI,CAAC,UAAU,KAAK,YAAY,YAAY;gBACjF,MAAMgD,YAAY5D,cAAcY,IAAI,CAAC,YAAY;gBACjD,MAAMoB,MAAMb,QAAOP,aAAAA,IAAI,CAAC,MAAM,YAAXA,aAAe;gBAClC,IAAI,CAACgD,aAAa,CAAC,YAAYC,IAAI,CAAC7B,MAAM;oBACxC,OAAO;wBAAElB,QAAQ;wBAAKF,MAAM;4BAAEG,OAAO;wBAAuC;oBAAE;gBAChF;gBACA,MAAM+C,MAAM1D,OAAOa,MAAMZ,OAAO,EAAEuD;gBAClC,MAAMvB,MAAM3B,KAAK2B,GAAG;gBACpB,sEAAsE;gBACtE,MAAM0B,QAAQ,MAAM3C,UAAU4C,cAAc,CAAC,OAAOC;wBAGrB5C,eAEaA;oBAJ1C,MAAMA,WAAW,MAAM4C,YAAY3C,GAAG,CAACwC;oBACvC,IAAI,CAACzC,SAASG,MAAM,IAAI,CAACH,SAASC,GAAG,CAAC,cAAc,OAAO;wBAAE4C,MAAM;oBAAgB;oBACnF,MAAM1B,gBAAgB2B,QAAO9C,gBAAAA,SAASC,GAAG,CAAC,4BAAbD,gBAAiC;oBAC9D,IAAImB,gBAAgBH,KAAK,OAAO;wBAAE6B,MAAM;wBAAmB1B;oBAAc;oBACzE,MAAM4B,SAAS5B,gBAAgB,IAAI2B,QAAO9C,iBAAAA,SAASC,GAAG,CAAC,6BAAbD,iBAAkC;oBAC5E,IAAI+C,UAAU9E,sBAAsB;wBAClC,MAAM+E,QAAQhC,MAAMhD;wBACpB4E,YAAYK,MAAM,CAACR,KAAK;4BAAEtB,eAAe6B;4BAAO9B,gBAAgB;wBAAE;wBAClE,OAAO;4BAAE2B,MAAM;4BAAmB1B,eAAe6B;wBAAM;oBACzD;oBACAJ,YAAYK,MAAM,CAACR,KAAK;wBAAEvB,gBAAgB6B,SAAS;wBAAG5B,eAAe;oBAAK;oBAC1E,OAAO;wBAAE0B,MAAM;wBAAoBK,MAAMpD,OAAOE,SAASC,GAAG,CAAC;wBAAekD,SAASJ,SAAS;oBAAE;gBAClG;gBACA,IAAIL,MAAMG,IAAI,KAAK,QAAQ;oBACzB,OAAO;wBAAEpD,QAAQ;wBAAKF,MAAM;4BAAEG,OAAO;wBAA8C;oBAAE;gBACvF;gBACA,IAAIgD,MAAMG,IAAI,KAAK,UAAU;oBAC3B,OAAO;wBACLpD,QAAQ;wBACRF,MAAM;4BACJG,OAAO;4BACPyB,eAAeuB,MAAMvB,aAAa;wBACpC;oBACF;gBACF;gBACA,IAAI,CAAC/C,qBAAqBuC,KAAK+B,MAAMQ,IAAI,GAAG;oBAC1C,MAAME,OAAOnF,uBAAuByE,MAAMS,OAAO;oBACjD,IAAIC,QAAQ,GAAG;wBACb,MAAMX,IAAIQ,MAAM,CAAC;4BAAE9B,eAAeH,MAAMhD;4BAAoBkD,gBAAgB;wBAAE;wBAC9E,OAAO;4BACLzB,QAAQ;4BACRF,MAAM;gCACJG,OAAO;gCACPyB,eAAeH,MAAMhD;4BACvB;wBACF;oBACF;oBACA,OAAO;wBACLyB,QAAQ;wBACRF,MAAM;4BAAEG,OAAO,CAAC,uBAAuB,EAAE0D,KAAK,CAAC,EAAEA,SAAS,IAAI,QAAQ,QAAQ,MAAM,CAAC;4BAAEC,cAAcD;wBAAK;oBAC5G;gBACF;gBACA,MAAMX,IAAIQ,MAAM,CAAC;oBAAE/B,gBAAgB;oBAAGC,eAAe;oBAAMmC,cAActC;gBAAI;gBAC7E,oEAAoE;gBACpE,MAAMT,OAAO,MAAMX,MAAMZ,OAAO,CAACiB,GAAG;gBACpC,MAAMO,OAAO,EAACD,aAAAA,KAAKN,GAAG,CAAC,0BAATM,aAA2B,CAAC,EAAE,CAACgC,UAAU;gBACvD,MAAMgB,aAAa,MAAMlE,KAAKkE,UAAU,CAAChB,WAAW3C,MAAM4D,MAAM;gBAChE,MAAMC,UACJnB,YAAY,YAAY/D,aAAaiC,MAAM+C,cAAc/E,gBAAgBgC,MAAM+C;gBACjF,IAAI,CAACE,SAAS;oBACZ,OAAO;wBACLhE,QAAQ;wBACRF,MAAM;4BACJG,OACE4C,YAAY,YACR,6CACA;wBACR;oBACF;gBACF;gBACA,IAAIoB;gBACJ,IAAI;oBACFA,SAASjF,iBAAiBY,MAAM;wBAC9BmE,QAAQ5D,MAAM4D,MAAM;wBACpBG,YAAYtB,SAASI,GAAG,CAACf,EAAE;wBAC3Ba;wBACAD;oBACF;gBACF,EAAE,eAAM;oBACN,OAAO;wBAAE7C,QAAQ;wBAAKF,MAAM;4BAAEG,OAAO;wBAAgD;oBAAE;gBACzF;gBACA,OAAO;oBACLD,QAAQ;oBACRF,MAAM;wBACJqE,WAAWF,OAAOG,KAAK;wBACvBC,aAAaJ,OAAOI,WAAW;wBAC/BvB;wBACAR,MAAM,MAAM1C,KAAK2C,UAAU,CAACO;wBAC5BD;oBACF;gBACF;YACF;QAEA,KAAK;YAAW;gBACd,MAAMD,WAAW,MAAMxD,gBAAgBe,OAAOL,IAAI,CAAC,aAAa;gBAChE,IAAI,WAAW8C,UAAU,OAAO;oBAAE5C,QAAQ4C,SAAS5C,MAAM;oBAAEF,MAAM;wBAAEG,OAAO2C,SAAS3C,KAAK;oBAAC;gBAAE;gBAC3F,MAAMqE,WAAW;oBAAEP,QAAQ5D,MAAM4D,MAAM;oBAAEG,YAAYtB,SAASI,GAAG,CAACf,EAAE;oBAAEY,SAAS;gBAAmB;gBAClG,IAAI,CAAC1D,iBAAiBS,MAAME,IAAI,CAAC,YAAY,EAAEwE,WAAW;oBACxD,OAAO;wBAAEtE,QAAQ;wBAAKF,MAAM;4BAAEG,OAAO;wBAAwB;oBAAE;gBACjE;gBACA,MAAM6C,YAAY,MAAMzD,yBAAyBO,MAAMO,MAAMZ,OAAO,EAAEO,IAAI,CAAC,YAAY,EAAEwE;gBACzF,IAAI,CAACxB,WAAW,OAAO;oBAAE9C,QAAQ;oBAAKF,MAAM;wBAAEG,OAAO;oBAAuC;gBAAE;gBAC9F,MAAMgE,SAASjF,iBAAiBY,MAAM,aAAK0E;oBAAUxB;;gBACrD,OAAO;oBAAE9C,QAAQ;oBAAKF,MAAM;wBAAEqE,WAAWF,OAAOG,KAAK;wBAAEC,aAAaJ,OAAOI,WAAW;wBAAEvB;oBAAU;gBAAE;YACtG;QAEA;YACE,OAAO;gBAAE9C,QAAQ;gBAAKF,MAAM;oBAAEG,OAAO;gBAAiB;YAAE;IAC5D;AACF;AAEA,OAAO,SAASsE,yBAAyB3E,OAAyBf,iBAAiB;IACjF,OAAO,OAAOgB,KAAK2E;QACjB,IAAI;YACF,MAAMC,UAAU,MAAM9E,kBAAkBC,QAAQC;YAChD,OAAO2E,IAAIxE,MAAM,CAACyE,QAAQzE,MAAM,EAAE0E,IAAI,CAACD,QAAQ3E,IAAI;QACrD,EAAE,OAAOG,OAAO;YACd0E,QAAQ1E,KAAK,CAAC,0BAA0BA;YACxC,OAAOuE,IAAIxE,MAAM,CAAC,KAAK0E,IAAI,CAAC;gBAAEzE,OAAO;YAA+B;QACtE;IACF;AACF;AAEA,OAAO,MAAM2E,qBAAqBL,2BAA0B"}

package/src/lib/server/pos-stripe.d.ts

@@ -0,0 +1,91 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The register's Stripe calls (AGL-3607), over raw `fetch` like every other
+ * money route in this plugin.
+ *
+ * ## Pinned to one API version
+ *
+ * The platform account's default version predates the fields this flow reads
+ * — `amount_details.tip` on a PaymentIntent, a reader's `action` — so every
+ * request here carries the same `Stripe-Version` the storefront Payment
+ * Element pins. Webhook deliveries keep the endpoint's version, which is why
+ * the webhook branch never trusts the event's object and re-reads the
+ * PaymentIntent through {@link posStripe} instead.
+ *
+ * ## Every create is keyed
+ *
+ * A caller passes the idempotency key; Stripe replays the first answer for a
+ * repeated key, so a lost response cannot become a second charge.
+ */
+export declare const POS_STRIPE_VERSION = "2026-03-25.dahlia";
+/** The currency every register sale is in: the store charges in US dollars. */
+export declare const POS_CURRENCY = "usd";
+export interface PosStripeResult<T = any> {
+    ok: boolean;
+    status: number;
+    body: T & {
+        error?: {
+            message?: string;
+            code?: string;
+            type?: string;
+        };
+    };
+}
+/** Form-encodes nested params the way Stripe reads them. */
+export declare function posStripeForm(params: Record<string, string | number | boolean | undefined | null | readonly string[]>): URLSearchParams;
+/** One Stripe API request from the register's server routes. */
+export declare function posStripe<T = any>(method: 'GET' | 'POST' | 'DELETE', path: string, options?: {
+    params?: Record<string, string | number | boolean | undefined | null | readonly string[]>;
+    idempotencyKey?: string;
+}): Promise<PosStripeResult<T>>;
+/** Whether the platform key is a test key: simulated readers only work there. */
+export declare function posStripeTestMode(): boolean;
+/**
+ * Whether Stripe Terminal card readers are offered at all.
+ *
+ * Always in test mode, where Stripe's simulated reader needs nothing turned
+ * on. In live mode only once `STRIPE_TERMINAL_LIVE_ENABLED` is `true`, which
+ * is set after Terminal is activated for live payments on the platform's
+ * Stripe account. Until then the register and the settings hide every reader
+ * control rather than offering hardware that would be refused.
+ */
+export declare function posTerminalAvailable(): boolean;
+/**
+ * Stripe's processing cost on a register CARD payment, passed through at cost
+ * beside the platform's take (the AGL-2152 rule, on the register's tenders).
+ *
+ * At the CARD rate, not `saleProcessingCostCents`'s dearest-method rate: every
+ * register card payment pins its payment method types to `card` or
+ * `card_present`, so no buy-now-pay-later method can be chosen and 2.9% + 30¢
+ * is at least what Stripe debits (an in-person tap costs less). The base is
+ * the whole CHARGE, tip included, because Stripe's own fee is on the whole
+ * charge; the platform's take is not.
+ */
+export declare function posCardProcessingCostCents(chargeCents: number): number;
+/** The `application_fee_amount` for a register card payment. */
+export declare function posCardApplicationFeeCents(input: {
+    takeShareCents: number;
+    chargeCents: number;
+}): number;
+/** A refusal Stripe sent, in words a cashier can read out. */
+export declare function posStripeErrorMessage(body: {
+    error?: {
+        message?: string;
+        code?: string;
+    };
+} | undefined, fallback: string): string;

package/src/lib/server/pos-stripe.js

@@ -0,0 +1,129 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { CARD_PROCESSING_PERCENT, PROCESSING_FIXED_CENTS } from "@aglyn/aglyn/app-utils/plan-entitlements";
+import { NATIVE_CHECKOUT_STRIPE_VERSION } from "./native-checkout.js";
+/**
+ * The register's Stripe calls (AGL-3607), over raw `fetch` like every other
+ * money route in this plugin.
+ *
+ * ## Pinned to one API version
+ *
+ * The platform account's default version predates the fields this flow reads
+ * — `amount_details.tip` on a PaymentIntent, a reader's `action` — so every
+ * request here carries the same `Stripe-Version` the storefront Payment
+ * Element pins. Webhook deliveries keep the endpoint's version, which is why
+ * the webhook branch never trusts the event's object and re-reads the
+ * PaymentIntent through {@link posStripe} instead.
+ *
+ * ## Every create is keyed
+ *
+ * A caller passes the idempotency key; Stripe replays the first answer for a
+ * repeated key, so a lost response cannot become a second charge.
+ */ export const POS_STRIPE_VERSION = NATIVE_CHECKOUT_STRIPE_VERSION;
+/** The currency every register sale is in: the store charges in US dollars. */ export const POS_CURRENCY = 'usd';
+/** Form-encodes nested params the way Stripe reads them. */ export function posStripeForm(params) {
+    const form = new URLSearchParams();
+    for (const [key, value] of Object.entries(params)){
+        if (value === undefined || value === null) continue;
+        if (Array.isArray(value)) {
+            for (const item of value)form.append(`${key}[]`, String(item));
+        } else {
+            form.set(key, String(value));
+        }
+    }
+    return form;
+}
+/** One Stripe API request from the register's server routes. */ export async function posStripe(method, path, options = {}) {
+    var _options_params;
+    const form = posStripeForm((_options_params = options.params) != null ? _options_params : {});
+    const query = method === 'GET' && [
+        ...form.keys()
+    ].length ? `?${form.toString()}` : '';
+    const response = await fetch(`https://api.stripe.com/v1/${path}${query}`, _extends({
+        method,
+        headers: _extends({
+            Authorization: `Bearer ${process.env.STRIPE_SECRET_KEY}`,
+            'Stripe-Version': POS_STRIPE_VERSION
+        }, method === 'POST' ? {
+            'Content-Type': 'application/x-www-form-urlencoded'
+        } : {}, options.idempotencyKey && method === 'POST' ? {
+            'Idempotency-Key': options.idempotencyKey.slice(0, 255)
+        } : {})
+    }, method === 'POST' ? {
+        body: form.toString()
+    } : {}));
+    const body = await response.json().catch(()=>({}));
+    return {
+        ok: response.ok,
+        status: response.status,
+        body
+    };
+}
+/** Whether the platform key is a test key: simulated readers only work there. */ export function posStripeTestMode() {
+    var _process_env_STRIPE_SECRET_KEY;
+    return String((_process_env_STRIPE_SECRET_KEY = process.env.STRIPE_SECRET_KEY) != null ? _process_env_STRIPE_SECRET_KEY : '').startsWith('sk_test_');
+}
+/**
+ * Whether Stripe Terminal card readers are offered at all.
+ *
+ * Always in test mode, where Stripe's simulated reader needs nothing turned
+ * on. In live mode only once `STRIPE_TERMINAL_LIVE_ENABLED` is `true`, which
+ * is set after Terminal is activated for live payments on the platform's
+ * Stripe account. Until then the register and the settings hide every reader
+ * control rather than offering hardware that would be refused.
+ */ export function posTerminalAvailable() {
+    var _process_env_STRIPE_TERMINAL_LIVE_ENABLED;
+    if (!process.env.STRIPE_SECRET_KEY) return false;
+    return posStripeTestMode() || String((_process_env_STRIPE_TERMINAL_LIVE_ENABLED = process.env.STRIPE_TERMINAL_LIVE_ENABLED) != null ? _process_env_STRIPE_TERMINAL_LIVE_ENABLED : '').toLowerCase() === 'true';
+}
+/**
+ * Stripe's processing cost on a register CARD payment, passed through at cost
+ * beside the platform's take (the AGL-2152 rule, on the register's tenders).
+ *
+ * At the CARD rate, not `saleProcessingCostCents`'s dearest-method rate: every
+ * register card payment pins its payment method types to `card` or
+ * `card_present`, so no buy-now-pay-later method can be chosen and 2.9% + 30¢
+ * is at least what Stripe debits (an in-person tap costs less). The base is
+ * the whole CHARGE, tip included, because Stripe's own fee is on the whole
+ * charge; the platform's take is not.
+ */ export function posCardProcessingCostCents(chargeCents) {
+    if (!Number.isFinite(chargeCents) || chargeCents <= 0) return 0;
+    return Math.ceil(chargeCents * CARD_PROCESSING_PERCENT / 100) + PROCESSING_FIXED_CENTS;
+}
+/** The `application_fee_amount` for a register card payment. */ export function posCardApplicationFeeCents(input) {
+    // The processing half is owed even on a plan whose take is 0%: Stripe debits
+    // it from the platform on every destination charge (AGL-2071).
+    const take = Math.max(0, Math.round(input.takeShareCents));
+    return take + posCardProcessingCostCents(input.chargeCents);
+}
+/** A refusal Stripe sent, in words a cashier can read out. */ export function posStripeErrorMessage(body, fallback) {
+    var _ref, _ref1;
+    var _body_error, _body_error1;
+    const code = String((_ref = body == null ? void 0 : (_body_error = body.error) == null ? void 0 : _body_error.code) != null ? _ref : '');
+    if (code === 'terminal_reader_offline') {
+        return 'The card reader is offline. Check it is on and connected to the internet.';
+    }
+    if (code === 'terminal_reader_busy') {
+        return 'The card reader is busy with another payment. Cancel it on the reader or wait a moment.';
+    }
+    if (code === 'terminal_reader_timeout') {
+        return 'The card reader did not answer in time. Try again.';
+    }
+    return String((_ref1 = body == null ? void 0 : (_body_error1 = body.error) == null ? void 0 : _body_error1.message) != null ? _ref1 : '') || fallback;
+}
+
+//# sourceMappingURL=pos-stripe.js.map

package/src/lib/server/pos-stripe.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-stripe.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  CARD_PROCESSING_PERCENT,\n  PROCESSING_FIXED_CENTS,\n} from '@aglyn/aglyn/app-utils/plan-entitlements'\nimport { NATIVE_CHECKOUT_STRIPE_VERSION } from './native-checkout'\n\n/**\n * The register's Stripe calls (AGL-3607), over raw `fetch` like every other\n * money route in this plugin.\n *\n * ## Pinned to one API version\n *\n * The platform account's default version predates the fields this flow reads\n * — `amount_details.tip` on a PaymentIntent, a reader's `action` — so every\n * request here carries the same `Stripe-Version` the storefront Payment\n * Element pins. Webhook deliveries keep the endpoint's version, which is why\n * the webhook branch never trusts the event's object and re-reads the\n * PaymentIntent through {@link posStripe} instead.\n *\n * ## Every create is keyed\n *\n * A caller passes the idempotency key; Stripe replays the first answer for a\n * repeated key, so a lost response cannot become a second charge.\n */\nexport const POS_STRIPE_VERSION = NATIVE_CHECKOUT_STRIPE_VERSION\n\n/** The currency every register sale is in: the store charges in US dollars. */\nexport const POS_CURRENCY = 'usd'\n\nexport interface PosStripeResult<T = any> {\n  ok: boolean\n  status: number\n  body: T & { error?: { message?: string; code?: string; type?: string } }\n}\n\n/** Form-encodes nested params the way Stripe reads them. */\nexport function posStripeForm(\n  params: Record<string, string | number | boolean | undefined | null | readonly string[]>,\n): URLSearchParams {\n  const form = new URLSearchParams()\n  for (const [key, value] of Object.entries(params)) {\n    if (value === undefined || value === null) continue\n    if (Array.isArray(value)) {\n      for (const item of value) form.append(`${key}[]`, String(item))\n    } else {\n      form.set(key, String(value))\n    }\n  }\n  return form\n}\n\n/** One Stripe API request from the register's server routes. */\nexport async function posStripe<T = any>(\n  method: 'GET' | 'POST' | 'DELETE',\n  path: string,\n  options: {\n    params?: Record<string, string | number | boolean | undefined | null | readonly string[]>\n    idempotencyKey?: string\n  } = {},\n): Promise<PosStripeResult<T>> {\n  const form = posStripeForm(options.params ?? {})\n  const query = method === 'GET' && [...form.keys()].length ? `?${form.toString()}` : ''\n  const response = await fetch(`https://api.stripe.com/v1/${path}${query}`, {\n    method,\n    headers: {\n      Authorization: `Bearer ${process.env.STRIPE_SECRET_KEY}`,\n      'Stripe-Version': POS_STRIPE_VERSION,\n      ...(method === 'POST'\n        ? { 'Content-Type': 'application/x-www-form-urlencoded' }\n        : {}),\n      ...(options.idempotencyKey && method === 'POST'\n        ? { 'Idempotency-Key': options.idempotencyKey.slice(0, 255) }\n        : {}),\n    },\n    ...(method === 'POST' ? { body: form.toString() } : {}),\n  })\n  const body = (await response.json().catch(() => ({}))) as PosStripeResult<T>['body']\n  return { ok: response.ok, status: response.status, body }\n}\n\n/** Whether the platform key is a test key: simulated readers only work there. */\nexport function posStripeTestMode(): boolean {\n  return String(process.env.STRIPE_SECRET_KEY ?? '').startsWith('sk_test_')\n}\n\n/**\n * Whether Stripe Terminal card readers are offered at all.\n *\n * Always in test mode, where Stripe's simulated reader needs nothing turned\n * on. In live mode only once `STRIPE_TERMINAL_LIVE_ENABLED` is `true`, which\n * is set after Terminal is activated for live payments on the platform's\n * Stripe account. Until then the register and the settings hide every reader\n * control rather than offering hardware that would be refused.\n */\nexport function posTerminalAvailable(): boolean {\n  if (!process.env.STRIPE_SECRET_KEY) return false\n  return (\n    posStripeTestMode() ||\n    String(process.env.STRIPE_TERMINAL_LIVE_ENABLED ?? '').toLowerCase() === 'true'\n  )\n}\n\n/**\n * Stripe's processing cost on a register CARD payment, passed through at cost\n * beside the platform's take (the AGL-2152 rule, on the register's tenders).\n *\n * At the CARD rate, not `saleProcessingCostCents`'s dearest-method rate: every\n * register card payment pins its payment method types to `card` or\n * `card_present`, so no buy-now-pay-later method can be chosen and 2.9% + 30¢\n * is at least what Stripe debits (an in-person tap costs less). The base is\n * the whole CHARGE, tip included, because Stripe's own fee is on the whole\n * charge; the platform's take is not.\n */\nexport function posCardProcessingCostCents(chargeCents: number): number {\n  if (!Number.isFinite(chargeCents) || chargeCents <= 0) return 0\n  return (\n    Math.ceil((chargeCents * CARD_PROCESSING_PERCENT) / 100) + PROCESSING_FIXED_CENTS\n  )\n}\n\n/** The `application_fee_amount` for a register card payment. */\nexport function posCardApplicationFeeCents(input: {\n  takeShareCents: number\n  chargeCents: number\n}): number {\n  // The processing half is owed even on a plan whose take is 0%: Stripe debits\n  // it from the platform on every destination charge (AGL-2071).\n  const take = Math.max(0, Math.round(input.takeShareCents))\n  return take + posCardProcessingCostCents(input.chargeCents)\n}\n\n/** A refusal Stripe sent, in words a cashier can read out. */\nexport function posStripeErrorMessage(\n  body: { error?: { message?: string; code?: string } } | undefined,\n  fallback: string,\n): string {\n  const code = String(body?.error?.code ?? '')\n  if (code === 'terminal_reader_offline') {\n    return 'The card reader is offline. Check it is on and connected to the internet.'\n  }\n  if (code === 'terminal_reader_busy') {\n    return 'The card reader is busy with another payment. Cancel it on the reader or wait a moment.'\n  }\n  if (code === 'terminal_reader_timeout') {\n    return 'The card reader did not answer in time. Try again.'\n  }\n  return String(body?.error?.message ?? '') || fallback\n}\n"],"names":["CARD_PROCESSING_PERCENT","PROCESSING_FIXED_CENTS","NATIVE_CHECKOUT_STRIPE_VERSION","POS_STRIPE_VERSION","POS_CURRENCY","posStripeForm","params","form","URLSearchParams","key","value","Object","entries","undefined","Array","isArray","item","append","String","set","posStripe","method","path","options","query","keys","length","toString","response","fetch","headers","Authorization","process","env","STRIPE_SECRET_KEY","idempotencyKey","slice","body","json","catch","ok","status","posStripeTestMode","startsWith","posTerminalAvailable","STRIPE_TERMINAL_LIVE_ENABLED","toLowerCase","posCardProcessingCostCents","chargeCents","Number","isFinite","Math","ceil","posCardApplicationFeeCents","input","take","max","round","takeShareCents","posStripeErrorMessage","fallback","code","error","message"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,uBAAuB,EACvBC,sBAAsB,QACjB,2CAA0C;AACjD,SAASC,8BAA8B,QAAQ,uBAAmB;AAElE;;;;;;;;;;;;;;;;;CAiBC,GACD,OAAO,MAAMC,qBAAqBD,+BAA8B;AAEhE,6EAA6E,GAC7E,OAAO,MAAME,eAAe,MAAK;AAQjC,0DAA0D,GAC1D,OAAO,SAASC,cACdC,MAAwF;IAExF,MAAMC,OAAO,IAAIC;IACjB,KAAK,MAAM,CAACC,KAAKC,MAAM,IAAIC,OAAOC,OAAO,CAACN,QAAS;QACjD,IAAII,UAAUG,aAAaH,UAAU,MAAM;QAC3C,IAAII,MAAMC,OAAO,CAACL,QAAQ;YACxB,KAAK,MAAMM,QAAQN,MAAOH,KAAKU,MAAM,CAAC,GAAGR,IAAI,EAAE,CAAC,EAAES,OAAOF;QAC3D,OAAO;YACLT,KAAKY,GAAG,CAACV,KAAKS,OAAOR;QACvB;IACF;IACA,OAAOH;AACT;AAEA,8DAA8D,GAC9D,OAAO,eAAea,UACpBC,MAAiC,EACjCC,IAAY,EACZC,UAGI,CAAC,CAAC;QAEqBA;IAA3B,MAAMhB,OAAOF,eAAckB,kBAAAA,QAAQjB,MAAM,YAAdiB,kBAAkB,CAAC;IAC9C,MAAMC,QAAQH,WAAW,SAAS;WAAId,KAAKkB,IAAI;KAAG,CAACC,MAAM,GAAG,CAAC,CAAC,EAAEnB,KAAKoB,QAAQ,IAAI,GAAG;IACpF,MAAMC,WAAW,MAAMC,MAAM,CAAC,0BAA0B,EAAEP,OAAOE,OAAO,EAAE;QACxEH;QACAS,SAAS;YACPC,eAAe,CAAC,OAAO,EAAEC,QAAQC,GAAG,CAACC,iBAAiB,EAAE;YACxD,kBAAkB/B;WACdkB,WAAW,SACX;YAAE,gBAAgB;QAAoC,IACtD,CAAC,GACDE,QAAQY,cAAc,IAAId,WAAW,SACrC;YAAE,mBAAmBE,QAAQY,cAAc,CAACC,KAAK,CAAC,GAAG;QAAK,IAC1D,CAAC;OAEHf,WAAW,SAAS;QAAEgB,MAAM9B,KAAKoB,QAAQ;IAAG,IAAI,CAAC;IAEvD,MAAMU,OAAQ,MAAMT,SAASU,IAAI,GAAGC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;IAClD,OAAO;QAAEC,IAAIZ,SAASY,EAAE;QAAEC,QAAQb,SAASa,MAAM;QAAEJ;IAAK;AAC1D;AAEA,+EAA+E,GAC/E,OAAO,SAASK;QACAV;IAAd,OAAOd,QAAOc,iCAAAA,QAAQC,GAAG,CAACC,iBAAiB,YAA7BF,iCAAiC,IAAIW,UAAU,CAAC;AAChE;AAEA;;;;;;;;CAQC,GACD,OAAO,SAASC;QAILZ;IAHT,IAAI,CAACA,QAAQC,GAAG,CAACC,iBAAiB,EAAE,OAAO;IAC3C,OACEQ,uBACAxB,QAAOc,4CAAAA,QAAQC,GAAG,CAACY,4BAA4B,YAAxCb,4CAA4C,IAAIc,WAAW,OAAO;AAE7E;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAASC,2BAA2BC,WAAmB;IAC5D,IAAI,CAACC,OAAOC,QAAQ,CAACF,gBAAgBA,eAAe,GAAG,OAAO;IAC9D,OACEG,KAAKC,IAAI,CAAC,AAACJ,cAAchD,0BAA2B,OAAOC;AAE/D;AAEA,8DAA8D,GAC9D,OAAO,SAASoD,2BAA2BC,KAG1C;IACC,6EAA6E;IAC7E,+DAA+D;IAC/D,MAAMC,OAAOJ,KAAKK,GAAG,CAAC,GAAGL,KAAKM,KAAK,CAACH,MAAMI,cAAc;IACxD,OAAOH,OAAOR,2BAA2BO,MAAMN,WAAW;AAC5D;AAEA,4DAA4D,GAC5D,OAAO,SAASW,sBACdtB,IAAiE,EACjEuB,QAAgB;;QAEIvB,aAUNA;IAVd,MAAMwB,OAAO3C,eAAOmB,yBAAAA,cAAAA,KAAMyB,KAAK,qBAAXzB,YAAawB,IAAI,mBAAI;IACzC,IAAIA,SAAS,2BAA2B;QACtC,OAAO;IACT;IACA,IAAIA,SAAS,wBAAwB;QACnC,OAAO;IACT;IACA,IAAIA,SAAS,2BAA2B;QACtC,OAAO;IACT;IACA,OAAO3C,gBAAOmB,yBAAAA,eAAAA,KAAMyB,KAAK,qBAAXzB,aAAa0B,OAAO,oBAAI,OAAOH;AAC/C"}