@aglyn/plugins-commerce 1.0.0-beta.230 → 1.0.0-beta.231

package/src/lib/server/print-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/print-queue.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createResourceUid } from '@aglyn/aglyn/app-utils/create-resource-uid'\nimport {\n  PRINT_JOB_CLAIM_TIMEOUT_MS,\n  PRINT_JOB_DELIVER_WITHIN_MS,\n  PRINT_JOB_MAX_ATTEMPTS,\n  PRINT_JOB_RETENTION_MS,\n  printerColumns,\n  type PosPrinter,\n  type PrintJob,\n  type PrintJobKind,\n  type PrintReport,\n} from '../model/commerce-printers'\nimport type { ReceiptData } from '../model/commerce-receipt'\nimport {\n  layoutDrawerKick,\n  layoutKitchenTicket,\n  layoutReceipt,\n  layoutReport,\n  layoutTestPage,\n  type PrintDocument,\n} from '../printing/print-document'\n\n/**\n * The cloud printer job queue (AGL-3619): `hosts/{hostId}/printJobs`.\n *\n * A job is `queued` until its printer takes it, `printing` once it has, and\n * `done` / `failed` / `expired` / `canceled` after. The lifecycle is driven by\n * the PRINTER — it polls, takes, and confirms — so every transition that a\n * second poll could race runs in a Firestore transaction:\n *\n *  - taking a job (`claimPrintJob`, `claimNextPrintJob`) moves it to\n *    `printing` and counts the attempt. Two polls that arrive together cannot\n *    both hand an Epson the same job, because the second transaction re-reads\n *    a fresh claim and skips it.\n *  - a printer that took a job and never confirmed (power cut, network drop)\n *    gets it again after {@link PRINT_JOB_CLAIM_TIMEOUT_MS}, up to\n *    {@link PRINT_JOB_MAX_ATTEMPTS} deliveries, then the job fails and the\n *    console says so.\n *  - nothing is delivered after its `deliverByMs`: a receipt half an hour late\n *    is confusing, and a drawer that springs open minutes after the sale that\n *    asked for it is cash exposure at an unattended till.\n *\n * Star re-requests the job it was offered (`jobToken`) after an offline spell\n * such as an empty roll, so a `printing` job is offered to its own printer\n * again — Star's GET is idempotent by design. Epson has no GET: the poll\n * response IS the delivery, so Epson only gets a job that nobody holds.\n *\n * The Firestore handle is injected so the transitions are tested against an\n * in-memory store that runs transactions optimistically, as Firestore does.\n */\n\ntype Firestore = any\n\nexport function printJobsRef(firestore: Firestore, hostId: string) {\n  return firestore.collection('hosts').doc(hostId).collection('printJobs')\n}\n\nexport function printersRef(firestore: Firestore, hostId: string) {\n  return firestore.collection('hosts').doc(hostId).collection('printers')\n}\n\nexport interface EnqueuePrintJobInput {\n  kind: PrintJobKind\n  receipt?: ReceiptData\n  report?: PrintReport\n  openDrawer?: boolean\n  storeName?: string\n  timeZone?: string\n  orderId?: string\n  registerId?: string\n  reason?: string\n  createdBy?: string\n  /**\n   * A deterministic id for a job that must print at most once however often\n   * its cause repeats — a sale-completed event delivered twice. A second\n   * enqueue under the same id is a no-op.\n   */\n  jobId?: string\n}\n\n/** Queues one job for one printer; returns its id (the existing one for a repeated `jobId`). */\nexport async function enqueuePrintJob(\n  firestore: Firestore,\n  hostId: string,\n  printerId: string,\n  input: EnqueuePrintJobInput,\n  nowMs: number = Date.now(),\n): Promise<{ jobId: string; created: boolean }> {\n  const collection = printJobsRef(firestore, hostId)\n  const ref = input.jobId ? collection.doc(input.jobId) : collection.doc(createResourceUid())\n  const job: PrintJob = {\n    printerId,\n    ...(input.registerId ? { registerId: input.registerId } : {}),\n    kind: input.kind,\n    status: 'queued',\n    ...(input.receipt ? { receipt: input.receipt } : {}),\n    ...(input.report ? { report: input.report } : {}),\n    ...(input.openDrawer ? { openDrawer: true } : {}),\n    ...(input.storeName ? { storeName: input.storeName } : {}),\n    ...(input.timeZone ? { timeZone: input.timeZone } : {}),\n    ...(input.orderId ? { orderId: input.orderId } : {}),\n    ...(input.reason ? { reason: input.reason } : {}),\n    ...(input.createdBy ? { createdBy: input.createdBy } : {}),\n    attempts: 0,\n    createdAtMs: nowMs,\n    deliverByMs: nowMs + PRINT_JOB_DELIVER_WITHIN_MS[input.kind],\n    expiresAt: new Date(nowMs + PRINT_JOB_RETENTION_MS),\n  }\n  if (!input.jobId) {\n    await ref.set(job)\n    return { jobId: ref.id, created: true }\n  }\n  try {\n    await ref.create(job)\n    return { jobId: ref.id, created: true }\n  } catch (error: any) {\n    // ALREADY_EXISTS: the same cause asked twice, and the first one stands.\n    if (error?.code === 6 || /already exists/i.test(String(error?.message))) {\n      return { jobId: ref.id, created: false }\n    }\n    throw error\n  }\n}\n\ntype Deliverability = 'deliver' | 'skip' | 'expire' | 'fail'\n\n/**\n * What a poll should do with an active job, for the given brand.\n *\n * `skip` is a job someone else (this printer, a moment ago) holds and whose\n * claim is still fresh — Epson must not be handed it twice.\n */\nexport function printJobDeliverability(\n  job: PrintJob,\n  options: { nowMs: number; reofferHeld: boolean },\n): Deliverability {\n  const { nowMs } = options\n  if (job.status === 'queued') {\n    return nowMs > job.deliverByMs ? 'expire' : 'deliver'\n  }\n  if (job.status !== 'printing') return 'skip'\n  const stale = nowMs - Number(job.claimedAtMs ?? 0) > PRINT_JOB_CLAIM_TIMEOUT_MS\n  if (stale && job.attempts >= PRINT_JOB_MAX_ATTEMPTS) return 'fail'\n  if (stale) return nowMs > job.deliverByMs ? 'expire' : 'deliver'\n  return options.reofferHeld ? 'deliver' : 'skip'\n}\n\nfunction activeJobsQuery(firestore: Firestore, hostId: string, printerId: string) {\n  return printJobsRef(firestore, hostId)\n    .where('printerId', '==', printerId)\n    .where('status', 'in', ['queued', 'printing'])\n    .orderBy('createdAtMs', 'asc')\n    .limit(10)\n}\n\nfunction closingPatch(outcome: 'expire' | 'fail', nowMs: number): Partial<PrintJob> {\n  return outcome === 'expire'\n    ? { status: 'expired', finishedAtMs: nowMs, error: 'The printer did not take it in time.' }\n    : {\n        status: 'failed',\n        finishedAtMs: nowMs,\n        error: 'The printer took it but never confirmed printing it.',\n      }\n}\n\n/**\n * The job a Star printer should be told about on its status POST, without\n * taking it: CloudPRNT's GET does the taking. Jobs past their time are closed\n * on the way.\n */\nexport async function nextPrintJobFor(\n  firestore: Firestore,\n  hostId: string,\n  printerId: string,\n  nowMs: number = Date.now(),\n): Promise<{ id: string; job: PrintJob } | null> {\n  const snapshot = await activeJobsQuery(firestore, hostId, printerId).get()\n  for (const doc of snapshot.docs) {\n    const job = doc.data() as PrintJob\n    const verdict = printJobDeliverability(job, { nowMs, reofferHeld: true })\n    if (verdict === 'deliver') return { id: doc.id, job }\n    if (verdict === 'expire' || verdict === 'fail') {\n      await closeIfStill(firestore, doc.ref, job.status, closingPatch(verdict, nowMs))\n    }\n  }\n  return null\n}\n\nasync function closeIfStill(\n  firestore: Firestore,\n  ref: any,\n  status: PrintJob['status'],\n  patch: Partial<PrintJob>,\n): Promise<void> {\n  await firestore.runTransaction(async (transaction: any) => {\n    const fresh = await transaction.get(ref)\n    if (fresh.exists && fresh.get('status') === status) transaction.update(ref, patch)\n  })\n}\n\n/**\n * Takes a named job for its printer (Star's GET with a `jobToken`): moves it\n * to `printing` and counts the attempt. `null` when the job is not this\n * printer's, is finished, or is past its time.\n */\nexport async function claimPrintJob(\n  firestore: Firestore,\n  hostId: string,\n  printerId: string,\n  jobId: string,\n  nowMs: number = Date.now(),\n): Promise<{ id: string; job: PrintJob } | null> {\n  if (!jobId || jobId.includes('/')) return null\n  const ref = printJobsRef(firestore, hostId).doc(jobId)\n  return firestore.runTransaction(async (transaction: any) => {\n    const snapshot = await transaction.get(ref)\n    if (!snapshot.exists) return null\n    const job = snapshot.data() as PrintJob\n    if (job.printerId !== printerId) return null\n    const verdict = printJobDeliverability(job, { nowMs, reofferHeld: true })\n    if (verdict === 'expire' || verdict === 'fail') {\n      transaction.update(ref, closingPatch(verdict, nowMs))\n      return null\n    }\n    if (verdict !== 'deliver') return null\n    // A re-GET of a job this printer already holds (Star retries a download\n    // that timed out) is the same delivery, not another attempt.\n    const fresh =\n      job.status === 'printing' && nowMs - Number(job.claimedAtMs ?? 0) <= PRINT_JOB_CLAIM_TIMEOUT_MS\n    const patch: Partial<PrintJob> = fresh\n      ? {}\n      : { status: 'printing', claimedAtMs: nowMs, attempts: job.attempts + 1 }\n    if (!fresh) transaction.update(ref, patch)\n    return { id: snapshot.id, job: { ...job, ...patch } }\n  })\n}\n\n/**\n * Takes the oldest job nobody holds (Epson's poll, which is the delivery) in\n * one transaction, so two polls that arrive together get different answers.\n */\nexport async function claimNextPrintJob(\n  firestore: Firestore,\n  hostId: string,\n  printerId: string,\n  nowMs: number = Date.now(),\n): Promise<{ id: string; job: PrintJob } | null> {\n  const query = activeJobsQuery(firestore, hostId, printerId)\n  return firestore.runTransaction(async (transaction: any) => {\n    const snapshot = await transaction.get(query)\n    let taken: { id: string; job: PrintJob } | null = null\n    for (const doc of snapshot.docs) {\n      const job = doc.data() as PrintJob\n      const verdict = printJobDeliverability(job, { nowMs, reofferHeld: false })\n      if (verdict === 'expire' || verdict === 'fail') {\n        transaction.update(doc.ref, closingPatch(verdict, nowMs))\n        continue\n      }\n      if (verdict !== 'deliver' || taken) continue\n      const patch: Partial<PrintJob> = {\n        status: 'printing',\n        claimedAtMs: nowMs,\n        attempts: job.attempts + 1,\n      }\n      transaction.update(doc.ref, patch)\n      taken = { id: doc.id, job: { ...job, ...patch } }\n    }\n    return taken\n  })\n}\n\n/**\n * Records a printer's result for a job it took. Success closes it; a failure\n * puts it back in the queue until it has used its attempts. Idempotent: a\n * repeated confirmation (Star retries an unanswered DELETE) changes nothing.\n */\nexport async function finishPrintJob(\n  firestore: Firestore,\n  hostId: string,\n  printerId: string,\n  jobId: string,\n  result: { ok: boolean; code: string },\n  nowMs: number = Date.now(),\n): Promise<PrintJob['status'] | null> {\n  if (!jobId || jobId.includes('/')) return null\n  const ref = printJobsRef(firestore, hostId).doc(jobId)\n  return firestore.runTransaction(async (transaction: any) => {\n    const snapshot = await transaction.get(ref)\n    if (!snapshot.exists) return null\n    const job = snapshot.data() as PrintJob\n    if (job.printerId !== printerId) return null\n    if (job.status !== 'printing' && job.status !== 'queued') return job.status\n    const code = String(result.code ?? '').slice(0, 120)\n    let patch: Partial<PrintJob>\n    if (result.ok) {\n      patch = { status: 'done', finishedAtMs: nowMs, resultCode: code }\n    } else if (job.attempts >= PRINT_JOB_MAX_ATTEMPTS || nowMs > job.deliverByMs) {\n      patch = {\n        status: 'failed',\n        finishedAtMs: nowMs,\n        resultCode: code,\n        error: `The printer could not print it (${code || 'no reason given'}).`,\n      }\n    } else {\n      patch = { status: 'queued', resultCode: code }\n    }\n    transaction.update(ref, patch)\n    return patch.status ?? job.status\n  })\n}\n\n/** The oldest job a printer holds, for a Star confirmation that carries no `jobToken` (older firmware). */\nexport async function heldPrintJobId(\n  firestore: Firestore,\n  hostId: string,\n  printerId: string,\n): Promise<string | null> {\n  const snapshot = await activeJobsQuery(firestore, hostId, printerId).get()\n  const held = snapshot.docs.find((doc: any) => doc.get('status') === 'printing')\n  return held?.id ?? null\n}\n\n/** The printer-neutral document a job prints, for this printer's paper and logo. */\nexport function printJobDocument(\n  job: PrintJob,\n  printer: Pick<PosPrinter, 'paperWidthMm' | 'logoKey' | 'name'>,\n): PrintDocument {\n  const columns = printerColumns(printer.paperWidthMm)\n  const logo = Boolean(printer.logoKey)\n  if (job.kind === 'receipt' && job.receipt) {\n    return layoutReceipt(job.receipt, { columns, logo, openDrawer: job.openDrawer })\n  }\n  if (job.kind === 'report' && job.report) {\n    return layoutReport(job.report, { columns, logo })\n  }\n  if (job.kind === 'kitchen' && job.receipt) {\n    return layoutKitchenTicket(job.receipt, { columns })\n  }\n  if (job.kind === 'test') {\n    return layoutTestPage({\n      columns,\n      printerName: printer.name,\n      storeName: job.storeName ?? '',\n      atMs: job.createdAtMs,\n      timeZone: job.timeZone,\n      logo,\n      openDrawer: job.openDrawer,\n    })\n  }\n  if (job.kind === 'drawer') return layoutDrawerKick(columns)\n  // A receipt or ticket with nothing to print prints nothing: falling through\n  // to the drawer kick would open a till nobody asked to open.\n  return { columns, ops: [] }\n}\n"],"names":["createResourceUid","PRINT_JOB_CLAIM_TIMEOUT_MS","PRINT_JOB_DELIVER_WITHIN_MS","PRINT_JOB_MAX_ATTEMPTS","PRINT_JOB_RETENTION_MS","printerColumns","layoutDrawerKick","layoutKitchenTicket","layoutReceipt","layoutReport","layoutTestPage","printJobsRef","firestore","hostId","collection","doc","printersRef","enqueuePrintJob","printerId","input","nowMs","Date","now","ref","jobId","job","registerId","kind","status","receipt","report","openDrawer","storeName","timeZone","orderId","reason","createdBy","attempts","createdAtMs","deliverByMs","expiresAt","set","id","created","create","error","code","test","String","message","printJobDeliverability","options","stale","Number","claimedAtMs","reofferHeld","activeJobsQuery","where","orderBy","limit","closingPatch","outcome","finishedAtMs","nextPrintJobFor","snapshot","get","docs","data","verdict","closeIfStill","patch","runTransaction","transaction","fresh","exists","update","claimPrintJob","includes","claimNextPrintJob","query","taken","finishPrintJob","result","slice","ok","resultCode","heldPrintJobId","held","find","printJobDocument","printer","columns","paperWidthMm","logo","Boolean","logoKey","printerName","name","atMs","ops"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,iBAAiB,QAAQ,6CAA4C;AAC9E,SACEC,0BAA0B,EAC1BC,2BAA2B,EAC3BC,sBAAsB,EACtBC,sBAAsB,EACtBC,cAAc,QAKT,gCAA4B;AAEnC,SACEC,gBAAgB,EAChBC,mBAAmB,EACnBC,aAAa,EACbC,YAAY,EACZC,cAAc,QAET,gCAA4B;AAiCnC,OAAO,SAASC,aAAaC,SAAoB,EAAEC,MAAc;IAC/D,OAAOD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACF,QAAQC,UAAU,CAAC;AAC9D;AAEA,OAAO,SAASE,YAAYJ,SAAoB,EAAEC,MAAc;IAC9D,OAAOD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACF,QAAQC,UAAU,CAAC;AAC9D;AAqBA,8FAA8F,GAC9F,OAAO,eAAeG,gBACpBL,SAAoB,EACpBC,MAAc,EACdK,SAAiB,EACjBC,KAA2B,EAC3BC,QAAgBC,KAAKC,GAAG,EAAE;IAE1B,MAAMR,aAAaH,aAAaC,WAAWC;IAC3C,MAAMU,MAAMJ,MAAMK,KAAK,GAAGV,WAAWC,GAAG,CAACI,MAAMK,KAAK,IAAIV,WAAWC,GAAG,CAACf;IACvE,MAAMyB,MAAgB;QACpBP;OACIC,MAAMO,UAAU,GAAG;QAAEA,YAAYP,MAAMO,UAAU;IAAC,IAAI,CAAC;QAC3DC,MAAMR,MAAMQ,IAAI;QAChBC,QAAQ;OACJT,MAAMU,OAAO,GAAG;QAAEA,SAASV,MAAMU,OAAO;IAAC,IAAI,CAAC,GAC9CV,MAAMW,MAAM,GAAG;QAAEA,QAAQX,MAAMW,MAAM;IAAC,IAAI,CAAC,GAC3CX,MAAMY,UAAU,GAAG;QAAEA,YAAY;IAAK,IAAI,CAAC,GAC3CZ,MAAMa,SAAS,GAAG;QAAEA,WAAWb,MAAMa,SAAS;IAAC,IAAI,CAAC,GACpDb,MAAMc,QAAQ,GAAG;QAAEA,UAAUd,MAAMc,QAAQ;IAAC,IAAI,CAAC,GACjDd,MAAMe,OAAO,GAAG;QAAEA,SAASf,MAAMe,OAAO;IAAC,IAAI,CAAC,GAC9Cf,MAAMgB,MAAM,GAAG;QAAEA,QAAQhB,MAAMgB,MAAM;IAAC,IAAI,CAAC,GAC3ChB,MAAMiB,SAAS,GAAG;QAAEA,WAAWjB,MAAMiB,SAAS;IAAC,IAAI,CAAC;QACxDC,UAAU;QACVC,aAAalB;QACbmB,aAAanB,QAAQlB,2BAA2B,CAACiB,MAAMQ,IAAI,CAAC;QAC5Da,WAAW,IAAInB,KAAKD,QAAQhB;;IAE9B,IAAI,CAACe,MAAMK,KAAK,EAAE;QAChB,MAAMD,IAAIkB,GAAG,CAAChB;QACd,OAAO;YAAED,OAAOD,IAAImB,EAAE;YAAEC,SAAS;QAAK;IACxC;IACA,IAAI;QACF,MAAMpB,IAAIqB,MAAM,CAACnB;QACjB,OAAO;YAAED,OAAOD,IAAImB,EAAE;YAAEC,SAAS;QAAK;IACxC,EAAE,OAAOE,OAAY;QACnB,wEAAwE;QACxE,IAAIA,CAAAA,yBAAAA,MAAOC,IAAI,MAAK,KAAK,kBAAkBC,IAAI,CAACC,OAAOH,yBAAAA,MAAOI,OAAO,IAAI;YACvE,OAAO;gBAAEzB,OAAOD,IAAImB,EAAE;gBAAEC,SAAS;YAAM;QACzC;QACA,MAAME;IACR;AACF;AAIA;;;;;CAKC,GACD,OAAO,SAASK,uBACdzB,GAAa,EACb0B,OAAgD;QAOnB1B;IAL7B,MAAM,EAAEL,KAAK,EAAE,GAAG+B;IAClB,IAAI1B,IAAIG,MAAM,KAAK,UAAU;QAC3B,OAAOR,QAAQK,IAAIc,WAAW,GAAG,WAAW;IAC9C;IACA,IAAId,IAAIG,MAAM,KAAK,YAAY,OAAO;IACtC,MAAMwB,QAAQhC,QAAQiC,QAAO5B,mBAAAA,IAAI6B,WAAW,YAAf7B,mBAAmB,KAAKxB;IACrD,IAAImD,SAAS3B,IAAIY,QAAQ,IAAIlC,wBAAwB,OAAO;IAC5D,IAAIiD,OAAO,OAAOhC,QAAQK,IAAIc,WAAW,GAAG,WAAW;IACvD,OAAOY,QAAQI,WAAW,GAAG,YAAY;AAC3C;AAEA,SAASC,gBAAgB5C,SAAoB,EAAEC,MAAc,EAAEK,SAAiB;IAC9E,OAAOP,aAAaC,WAAWC,QAC5B4C,KAAK,CAAC,aAAa,MAAMvC,WACzBuC,KAAK,CAAC,UAAU,MAAM;QAAC;QAAU;KAAW,EAC5CC,OAAO,CAAC,eAAe,OACvBC,KAAK,CAAC;AACX;AAEA,SAASC,aAAaC,OAA0B,EAAEzC,KAAa;IAC7D,OAAOyC,YAAY,WACf;QAAEjC,QAAQ;QAAWkC,cAAc1C;QAAOyB,OAAO;IAAuC,IACxF;QACEjB,QAAQ;QACRkC,cAAc1C;QACdyB,OAAO;IACT;AACN;AAEA;;;;CAIC,GACD,OAAO,eAAekB,gBACpBnD,SAAoB,EACpBC,MAAc,EACdK,SAAiB,EACjBE,QAAgBC,KAAKC,GAAG,EAAE;IAE1B,MAAM0C,WAAW,MAAMR,gBAAgB5C,WAAWC,QAAQK,WAAW+C,GAAG;IACxE,KAAK,MAAMlD,OAAOiD,SAASE,IAAI,CAAE;QAC/B,MAAMzC,MAAMV,IAAIoD,IAAI;QACpB,MAAMC,UAAUlB,uBAAuBzB,KAAK;YAAEL;YAAOmC,aAAa;QAAK;QACvE,IAAIa,YAAY,WAAW,OAAO;YAAE1B,IAAI3B,IAAI2B,EAAE;YAAEjB;QAAI;QACpD,IAAI2C,YAAY,YAAYA,YAAY,QAAQ;YAC9C,MAAMC,aAAazD,WAAWG,IAAIQ,GAAG,EAAEE,IAAIG,MAAM,EAAEgC,aAAaQ,SAAShD;QAC3E;IACF;IACA,OAAO;AACT;AAEA,eAAeiD,aACbzD,SAAoB,EACpBW,GAAQ,EACRK,MAA0B,EAC1B0C,KAAwB;IAExB,MAAM1D,UAAU2D,cAAc,CAAC,OAAOC;QACpC,MAAMC,QAAQ,MAAMD,YAAYP,GAAG,CAAC1C;QACpC,IAAIkD,MAAMC,MAAM,IAAID,MAAMR,GAAG,CAAC,cAAcrC,QAAQ4C,YAAYG,MAAM,CAACpD,KAAK+C;IAC9E;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeM,cACpBhE,SAAoB,EACpBC,MAAc,EACdK,SAAiB,EACjBM,KAAa,EACbJ,QAAgBC,KAAKC,GAAG,EAAE;IAE1B,IAAI,CAACE,SAASA,MAAMqD,QAAQ,CAAC,MAAM,OAAO;IAC1C,MAAMtD,MAAMZ,aAAaC,WAAWC,QAAQE,GAAG,CAACS;IAChD,OAAOZ,UAAU2D,cAAc,CAAC,OAAOC;YAcS/C;QAb9C,MAAMuC,WAAW,MAAMQ,YAAYP,GAAG,CAAC1C;QACvC,IAAI,CAACyC,SAASU,MAAM,EAAE,OAAO;QAC7B,MAAMjD,MAAMuC,SAASG,IAAI;QACzB,IAAI1C,IAAIP,SAAS,KAAKA,WAAW,OAAO;QACxC,MAAMkD,UAAUlB,uBAAuBzB,KAAK;YAAEL;YAAOmC,aAAa;QAAK;QACvE,IAAIa,YAAY,YAAYA,YAAY,QAAQ;YAC9CI,YAAYG,MAAM,CAACpD,KAAKqC,aAAaQ,SAAShD;YAC9C,OAAO;QACT;QACA,IAAIgD,YAAY,WAAW,OAAO;QAClC,wEAAwE;QACxE,6DAA6D;QAC7D,MAAMK,QACJhD,IAAIG,MAAM,KAAK,cAAcR,QAAQiC,QAAO5B,mBAAAA,IAAI6B,WAAW,YAAf7B,mBAAmB,MAAMxB;QACvE,MAAMqE,QAA2BG,QAC7B,CAAC,IACD;YAAE7C,QAAQ;YAAY0B,aAAalC;YAAOiB,UAAUZ,IAAIY,QAAQ,GAAG;QAAE;QACzE,IAAI,CAACoC,OAAOD,YAAYG,MAAM,CAACpD,KAAK+C;QACpC,OAAO;YAAE5B,IAAIsB,SAAStB,EAAE;YAAEjB,KAAK,aAAKA,KAAQ6C;QAAQ;IACtD;AACF;AAEA;;;CAGC,GACD,OAAO,eAAeQ,kBACpBlE,SAAoB,EACpBC,MAAc,EACdK,SAAiB,EACjBE,QAAgBC,KAAKC,GAAG,EAAE;IAE1B,MAAMyD,QAAQvB,gBAAgB5C,WAAWC,QAAQK;IACjD,OAAON,UAAU2D,cAAc,CAAC,OAAOC;QACrC,MAAMR,WAAW,MAAMQ,YAAYP,GAAG,CAACc;QACvC,IAAIC,QAA8C;QAClD,KAAK,MAAMjE,OAAOiD,SAASE,IAAI,CAAE;YAC/B,MAAMzC,MAAMV,IAAIoD,IAAI;YACpB,MAAMC,UAAUlB,uBAAuBzB,KAAK;gBAAEL;gBAAOmC,aAAa;YAAM;YACxE,IAAIa,YAAY,YAAYA,YAAY,QAAQ;gBAC9CI,YAAYG,MAAM,CAAC5D,IAAIQ,GAAG,EAAEqC,aAAaQ,SAAShD;gBAClD;YACF;YACA,IAAIgD,YAAY,aAAaY,OAAO;YACpC,MAAMV,QAA2B;gBAC/B1C,QAAQ;gBACR0B,aAAalC;gBACbiB,UAAUZ,IAAIY,QAAQ,GAAG;YAC3B;YACAmC,YAAYG,MAAM,CAAC5D,IAAIQ,GAAG,EAAE+C;YAC5BU,QAAQ;gBAAEtC,IAAI3B,IAAI2B,EAAE;gBAAEjB,KAAK,aAAKA,KAAQ6C;YAAQ;QAClD;QACA,OAAOU;IACT;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeC,eACpBrE,SAAoB,EACpBC,MAAc,EACdK,SAAiB,EACjBM,KAAa,EACb0D,MAAqC,EACrC9D,QAAgBC,KAAKC,GAAG,EAAE;IAE1B,IAAI,CAACE,SAASA,MAAMqD,QAAQ,CAAC,MAAM,OAAO;IAC1C,MAAMtD,MAAMZ,aAAaC,WAAWC,QAAQE,GAAG,CAACS;IAChD,OAAOZ,UAAU2D,cAAc,CAAC,OAAOC;YAMjBU,cAebZ;QApBP,MAAMN,WAAW,MAAMQ,YAAYP,GAAG,CAAC1C;QACvC,IAAI,CAACyC,SAASU,MAAM,EAAE,OAAO;QAC7B,MAAMjD,MAAMuC,SAASG,IAAI;QACzB,IAAI1C,IAAIP,SAAS,KAAKA,WAAW,OAAO;QACxC,IAAIO,IAAIG,MAAM,KAAK,cAAcH,IAAIG,MAAM,KAAK,UAAU,OAAOH,IAAIG,MAAM;QAC3E,MAAMkB,OAAOE,QAAOkC,eAAAA,OAAOpC,IAAI,YAAXoC,eAAe,IAAIC,KAAK,CAAC,GAAG;QAChD,IAAIb;QACJ,IAAIY,OAAOE,EAAE,EAAE;YACbd,QAAQ;gBAAE1C,QAAQ;gBAAQkC,cAAc1C;gBAAOiE,YAAYvC;YAAK;QAClE,OAAO,IAAIrB,IAAIY,QAAQ,IAAIlC,0BAA0BiB,QAAQK,IAAIc,WAAW,EAAE;YAC5E+B,QAAQ;gBACN1C,QAAQ;gBACRkC,cAAc1C;gBACdiE,YAAYvC;gBACZD,OAAO,CAAC,gCAAgC,EAAEC,QAAQ,kBAAkB,EAAE,CAAC;YACzE;QACF,OAAO;YACLwB,QAAQ;gBAAE1C,QAAQ;gBAAUyD,YAAYvC;YAAK;QAC/C;QACA0B,YAAYG,MAAM,CAACpD,KAAK+C;QACxB,QAAOA,gBAAAA,MAAM1C,MAAM,YAAZ0C,gBAAgB7C,IAAIG,MAAM;IACnC;AACF;AAEA,yGAAyG,GACzG,OAAO,eAAe0D,eACpB1E,SAAoB,EACpBC,MAAc,EACdK,SAAiB;;IAEjB,MAAM8C,WAAW,MAAMR,gBAAgB5C,WAAWC,QAAQK,WAAW+C,GAAG;IACxE,MAAMsB,OAAOvB,SAASE,IAAI,CAACsB,IAAI,CAAC,CAACzE,MAAaA,IAAIkD,GAAG,CAAC,cAAc;IACpE,eAAOsB,wBAAAA,KAAM7C,EAAE,mBAAI;AACrB;AAEA,kFAAkF,GAClF,OAAO,SAAS+C,iBACdhE,GAAa,EACbiE,OAA8D;IAE9D,MAAMC,UAAUtF,eAAeqF,QAAQE,YAAY;IACnD,MAAMC,OAAOC,QAAQJ,QAAQK,OAAO;IACpC,IAAItE,IAAIE,IAAI,KAAK,aAAaF,IAAII,OAAO,EAAE;QACzC,OAAOrB,cAAciB,IAAII,OAAO,EAAE;YAAE8D;YAASE;YAAM9D,YAAYN,IAAIM,UAAU;QAAC;IAChF;IACA,IAAIN,IAAIE,IAAI,KAAK,YAAYF,IAAIK,MAAM,EAAE;QACvC,OAAOrB,aAAagB,IAAIK,MAAM,EAAE;YAAE6D;YAASE;QAAK;IAClD;IACA,IAAIpE,IAAIE,IAAI,KAAK,aAAaF,IAAII,OAAO,EAAE;QACzC,OAAOtB,oBAAoBkB,IAAII,OAAO,EAAE;YAAE8D;QAAQ;IACpD;IACA,IAAIlE,IAAIE,IAAI,KAAK,QAAQ;YAIVF;QAHb,OAAOf,eAAe;YACpBiF;YACAK,aAAaN,QAAQO,IAAI;YACzBjE,SAAS,GAAEP,iBAAAA,IAAIO,SAAS,YAAbP,iBAAiB;YAC5ByE,MAAMzE,IAAIa,WAAW;YACrBL,UAAUR,IAAIQ,QAAQ;YACtB4D;YACA9D,YAAYN,IAAIM,UAAU;QAC5B;IACF;IACA,IAAIN,IAAIE,IAAI,KAAK,UAAU,OAAOrB,iBAAiBqF;IACnD,4EAA4E;IAC5E,6DAA6D;IAC7D,OAAO;QAAEA;QAASQ,KAAK,EAAE;IAAC;AAC5B"}

package/src/lib/server/printer-poll.d.ts

@@ -0,0 +1,75 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PosPrinter, type PrinterBrand, type PrinterState } from '../model/commerce-printers';
+type RouteParams = {
+    params: Record<string, string | string[]>;
+};
+export interface ResolvedPrinter {
+    hostId: string;
+    printerId: string;
+    printer: PosPrinter;
+    ref: any;
+}
+/** The printer the URL names, when its secret is right and its brand matches the door. */
+export declare function resolvePolledPrinter(context: RouteParams, brand: PrinterBrand, firestore?: any): Promise<ResolvedPrinter | null>;
+/** Writes the printer's status when it changed or the heartbeat is due. */
+export declare function recordPrinterStatus(resolved: ResolvedPrinter, next: {
+    state: PrinterState;
+    detail?: string;
+    pollSeconds?: number;
+}, nowMs: number): Promise<void>;
+/** The media types we serve a Star job in, preferred first. */
+export declare const STAR_JOB_MEDIA_TYPES: readonly ["application/vnd.star.starprntcore", "text/plain"];
+/**
+ * The status POST: record what the printer says, and tell it whether a job is
+ * waiting. The job is OFFERED (with its id as the `jobToken`), not taken; the
+ * printer's GET takes it.
+ */
+export declare function handleStarPoll(resolved: ResolvedPrinter, body: Record<string, any>, options?: {
+    firestore?: any;
+    nowMs?: number;
+    allowed?: () => Promise<boolean>;
+}): Promise<Record<string, unknown> | null>;
+/** The job download: take it and render it in the media type the printer chose. */
+export declare function handleStarJobRequest(resolved: ResolvedPrinter, query: URLSearchParams, options?: {
+    firestore?: any;
+    nowMs?: number;
+    allowed?: () => Promise<boolean>;
+}): Promise<{
+    contentType: string;
+    body: Uint8Array | string;
+} | null>;
+/** The confirmation: `code` 2xx is printed; anything else is a failure to retry or give up on. */
+export declare function handleStarConfirmation(resolved: ResolvedPrinter, query: URLSearchParams, options?: {
+    firestore?: any;
+    nowMs?: number;
+}): Promise<boolean>;
+/** `/api/commerce/cloudprnt/:hostId/:printerId/:secret` */
+export declare function cloudPrntRoute(request: Request, context: RouteParams): Promise<Response>;
+/**
+ * One Epson POST. `GetRequest` is a poll whose answer is the job itself, so
+ * the job is TAKEN here; `SetResponse` reports how each job went. Returns the
+ * XML to send back, `''` for "nothing to print", or `null` to refuse.
+ */
+export declare function handleEpsonPost(resolved: ResolvedPrinter, form: URLSearchParams, options?: {
+    firestore?: any;
+    nowMs?: number;
+    allowed?: () => Promise<boolean>;
+}): Promise<string | null>;
+/** `/api/commerce/epson-sdp/:hostId/:printerId/:secret` */
+export declare function epsonServerDirectPrintRoute(request: Request, context: RouteParams): Promise<Response>;
+export {};

package/src/lib/server/printer-poll.js

@@ -0,0 +1,325 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn/server";
+import { firebaseAdmin, getOrgForHost } from "@aglyn/tenant-data-admin";
+import { epsonPrinterState, normalizePrinterDeviceId, starPrinterState } from "../model/commerce-printers.js";
+import { renderEpsonServerDirectPrint, parseEpsonPrintResults } from "../printing/render-epson.js";
+import { renderStar, STAR_MEDIA_TYPE } from "../printing/render-star.js";
+import { renderText } from "../printing/render-text.js";
+import { claimNextPrintJob, claimPrintJob, finishPrintJob, heldPrintJobId, nextPrintJobFor, printersRef, printJobDocument } from "./print-queue.js";
+import { printerSecretMatches } from "./printer-secret.js";
+/**
+ * The two doors a cloud receipt printer polls (AGL-3619), registered as
+ * MACHINE routes on the console dispatcher: a printer names no member and no
+ * site cookie, so the dispatcher's enablement and release gates cannot judge
+ * it, and its write limit would refuse a device that polls every few seconds.
+ * The route authenticates the printer itself — the per-printer secret in the
+ * path and the device identity in the request — and asks the plan before it
+ * hands over a job.
+ *
+ *   /api/commerce/cloudprnt/{hostId}/{printerId}/{secret}   Star CloudPRNT
+ *   /api/commerce/epson-sdp/{hostId}/{printerId}/{secret}   Epson Server Direct Print
+ *
+ * Every refusal is a bare 404 that says nothing about which part was wrong.
+ */ const NO_STORE = {
+    'Cache-Control': 'no-store, max-age=0',
+    Pragma: 'no-cache'
+};
+/** A status write at most this often while nothing changes, so a 5-second poll is not 17,000 writes a day. */ const STATUS_HEARTBEAT_MS = 60 * 1000;
+/** Polls report bodies this small; anything larger is not a printer. */ const MAX_BODY_BYTES = 64 * 1024;
+function param(context, name) {
+    var _context_params;
+    const value = (_context_params = context.params) == null ? void 0 : _context_params[name];
+    return String(Array.isArray(value) ? value[0] : value != null ? value : '');
+}
+const notFound = ()=>new Response(null, {
+        status: 404,
+        headers: NO_STORE
+    });
+/** The printer the URL names, when its secret is right and its brand matches the door. */ export async function resolvePolledPrinter(context, brand, firestore = firebaseAdmin.app().firestore()) {
+    const hostId = param(context, 'hostId');
+    const printerId = param(context, 'printerId');
+    const secret = param(context, 'secret');
+    if (!/^[A-Za-z0-9_-]{1,128}$/.test(hostId) || !/^[A-Za-z0-9_-]{1,128}$/.test(printerId)) {
+        return null;
+    }
+    const ref = printersRef(firestore, hostId).doc(printerId);
+    const snapshot = await ref.get();
+    if (!snapshot.exists) return null;
+    const printer = snapshot.data();
+    if (printer.brand !== brand) return null;
+    if (!printerSecretMatches(hostId, printerId, printer.secretVersion, secret)) return null;
+    return {
+        hostId,
+        printerId,
+        printer,
+        ref
+    };
+}
+/** The device on the wire is the device on the record. */ function deviceMatches(printer, reported) {
+    const presented = normalizePrinterDeviceId(printer.brand, reported);
+    return Boolean(presented) && presented === printer.deviceId;
+}
+/** May this site's printers be handed work now: the plan still carries POS. */ async function printingAllowed(hostId) {
+    try {
+        const owner = await getOrgForHost(hostId);
+        return Aglyn.checkEntitlement(owner == null ? void 0 : owner.org, 'pos');
+    } catch (unused) {
+        return false;
+    }
+}
+/** Writes the printer's status when it changed or the heartbeat is due. */ export async function recordPrinterStatus(resolved, next, nowMs) {
+    var _previous_detail, _next_detail, _ref, _next_pollSeconds, _next_pollSeconds1;
+    const previous = resolved.printer.status;
+    const changed = !previous || previous.state !== next.state || ((_previous_detail = previous.detail) != null ? _previous_detail : '') !== ((_next_detail = next.detail) != null ? _next_detail : '') || next.pollSeconds !== undefined && previous.pollSeconds !== next.pollSeconds;
+    if (!changed && nowMs - Number((_ref = previous == null ? void 0 : previous.atMs) != null ? _ref : 0) < STATUS_HEARTBEAT_MS) return;
+    const status = _extends({
+        state: next.state,
+        atMs: nowMs
+    }, next.detail ? {
+        detail: next.detail.slice(0, 120)
+    } : {}, ((_next_pollSeconds = next.pollSeconds) != null ? _next_pollSeconds : previous == null ? void 0 : previous.pollSeconds) !== undefined ? {
+        pollSeconds: (_next_pollSeconds1 = next.pollSeconds) != null ? _next_pollSeconds1 : previous == null ? void 0 : previous.pollSeconds
+    } : {});
+    await resolved.ref.set({
+        status
+    }, {
+        merge: true
+    });
+}
+async function readBody(request) {
+    const text = await request.text();
+    return text.length > MAX_BODY_BYTES ? '' : text;
+}
+/*==========================================
+ * STAR CLOUDPRNT
+ *=========================================*/ /** The media types we serve a Star job in, preferred first. */ export const STAR_JOB_MEDIA_TYPES = [
+    STAR_MEDIA_TYPE,
+    'text/plain'
+];
+/**
+ * The status POST: record what the printer says, and tell it whether a job is
+ * waiting. The job is OFFERED (with its id as the `jobToken`), not taken; the
+ * printer's GET takes it.
+ */ export async function handleStarPoll(resolved, body, options = {}) {
+    var _options_firestore, _options_nowMs, _options_allowed;
+    var _actions_find, _resolved_printer_status;
+    const firestore = (_options_firestore = options.firestore) != null ? _options_firestore : firebaseAdmin.app().firestore();
+    const nowMs = (_options_nowMs = options.nowMs) != null ? _options_nowMs : Date.now();
+    if (!deviceMatches(resolved.printer, body['printerMAC'])) return null;
+    const { state, detail } = starPrinterState(body['statusCode']);
+    const actions = Array.isArray(body['clientAction']) ? body['clientAction'] : [];
+    const interval = Number((_actions_find = actions.find((action)=>(action == null ? void 0 : action.request) === 'GetPollInterval')) == null ? void 0 : _actions_find.result);
+    const pollSeconds = Number.isFinite(interval) && interval > 0 ? Math.round(interval) : undefined;
+    await recordPrinterStatus(resolved, {
+        state,
+        detail,
+        pollSeconds
+    }, nowMs);
+    const next = await nextPrintJobFor(firestore, resolved.hostId, resolved.printerId, nowMs);
+    if (next && await ((_options_allowed = options.allowed) != null ? _options_allowed : ()=>printingAllowed(resolved.hostId))()) {
+        return {
+            jobReady: true,
+            mediaTypes: [
+                ...STAR_JOB_MEDIA_TYPES
+            ],
+            jobToken: next.id,
+            deleteMethod: 'DELETE'
+        };
+    }
+    // Ask once how often it polls, so the console can say when it will next
+    // look. A client action and a job are never sent together: the printer would
+    // answer the action and hold the job until the next poll.
+    if (((_resolved_printer_status = resolved.printer.status) == null ? void 0 : _resolved_printer_status.pollSeconds) === undefined && pollSeconds === undefined) {
+        return {
+            jobReady: false,
+            clientAction: [
+                {
+                    request: 'GetPollInterval',
+                    options: ''
+                }
+            ]
+        };
+    }
+    return {
+        jobReady: false
+    };
+}
+/** The job download: take it and render it in the media type the printer chose. */ export async function handleStarJobRequest(resolved, query, options = {}) {
+    var _options_firestore, _options_nowMs, _options_allowed, _query_get, _query_get1;
+    const firestore = (_options_firestore = options.firestore) != null ? _options_firestore : firebaseAdmin.app().firestore();
+    const nowMs = (_options_nowMs = options.nowMs) != null ? _options_nowMs : Date.now();
+    if (!deviceMatches(resolved.printer, query.get('mac'))) return null;
+    if (!await ((_options_allowed = options.allowed) != null ? _options_allowed : ()=>printingAllowed(resolved.hostId))()) return null;
+    let jobId = (_query_get = query.get('token')) != null ? _query_get : '';
+    if (!jobId) {
+        var _ref;
+        const next = await nextPrintJobFor(firestore, resolved.hostId, resolved.printerId, nowMs);
+        jobId = (_ref = next == null ? void 0 : next.id) != null ? _ref : '';
+    }
+    const claimed = await claimPrintJob(firestore, resolved.hostId, resolved.printerId, jobId, nowMs);
+    if (!claimed) return null;
+    const document = printJobDocument(claimed.job, resolved.printer);
+    const type = ((_query_get1 = query.get('type')) != null ? _query_get1 : STAR_MEDIA_TYPE).toLowerCase();
+    if (type.startsWith('text/plain')) {
+        return {
+            contentType: 'text/plain; charset=us-ascii',
+            body: renderText(document)
+        };
+    }
+    return {
+        contentType: STAR_MEDIA_TYPE,
+        body: renderStar(document, {
+            logoKey: resolved.printer.logoKey
+        })
+    };
+}
+/** The confirmation: `code` 2xx is printed; anything else is a failure to retry or give up on. */ export async function handleStarConfirmation(resolved, query, options = {}) {
+    var _options_firestore, _options_nowMs, _query_get;
+    const firestore = (_options_firestore = options.firestore) != null ? _options_firestore : firebaseAdmin.app().firestore();
+    const nowMs = (_options_nowMs = options.nowMs) != null ? _options_nowMs : Date.now();
+    if (!deviceMatches(resolved.printer, query.get('mac'))) return false;
+    const jobId = query.get('token') || await heldPrintJobId(firestore, resolved.hostId, resolved.printerId);
+    if (!jobId) return true;
+    const code = (_query_get = query.get('code')) != null ? _query_get : '';
+    await finishPrintJob(firestore, resolved.hostId, resolved.printerId, jobId, {
+        ok: code.trim().startsWith('2'),
+        code
+    }, nowMs);
+    const { state, detail } = starPrinterState(code);
+    if (state !== 'online' && state !== 'unknown') {
+        await recordPrinterStatus(resolved, {
+            state,
+            detail
+        }, nowMs);
+    }
+    return true;
+}
+/** `/api/commerce/cloudprnt/:hostId/:printerId/:secret` */ export async function cloudPrntRoute(request, context) {
+    const resolved = await resolvePolledPrinter(context, 'star');
+    if (!resolved) return notFound();
+    const query = new URL(request.url).searchParams;
+    const method = request.method.toUpperCase();
+    if (method === 'POST') {
+        let body;
+        try {
+            body = JSON.parse(await readBody(request));
+        } catch (unused) {
+            return notFound();
+        }
+        const answer = await handleStarPoll(resolved, body != null ? body : {});
+        if (!answer) return notFound();
+        return Response.json(answer, {
+            headers: NO_STORE
+        });
+    }
+    // A server that cannot take DELETE may ask for `deleteMethod: GET`, which
+    // arrives as a GET carrying `delete`; this one asks for DELETE, but a
+    // printer configured either way is answered.
+    if (method === 'DELETE' || method === 'GET' && query.has('delete')) {
+        const ok = await handleStarConfirmation(resolved, query);
+        return ok ? new Response(null, {
+            status: 200,
+            headers: NO_STORE
+        }) : notFound();
+    }
+    if (method === 'GET') {
+        const job = await handleStarJobRequest(resolved, query);
+        if (!job) return notFound();
+        const body = typeof job.body === 'string' ? job.body : job.body.buffer.slice(job.body.byteOffset, job.body.byteOffset + job.body.byteLength);
+        return new Response(body, {
+            status: 200,
+            headers: _extends({}, NO_STORE, {
+                'Content-Type': job.contentType
+            })
+        });
+    }
+    return new Response(null, {
+        status: 405,
+        headers: NO_STORE
+    });
+}
+/*==========================================
+ * EPSON SERVER DIRECT PRINT
+ *=========================================*/ /**
+ * One Epson POST. `GetRequest` is a poll whose answer is the job itself, so
+ * the job is TAKEN here; `SetResponse` reports how each job went. Returns the
+ * XML to send back, `''` for "nothing to print", or `null` to refuse.
+ */ export async function handleEpsonPost(resolved, form, options = {}) {
+    var _options_firestore, _options_nowMs, _form_get;
+    const firestore = (_options_firestore = options.firestore) != null ? _options_firestore : firebaseAdmin.app().firestore();
+    const nowMs = (_options_nowMs = options.nowMs) != null ? _options_nowMs : Date.now();
+    if (!deviceMatches(resolved.printer, form.get('ID'))) return null;
+    const connection = (_form_get = form.get('ConnectionType')) != null ? _form_get : '';
+    if (connection === 'GetRequest') {
+        var _options_allowed;
+        // A poll says the printer is reachable; what it looks like comes with results.
+        const last = resolved.printer.status;
+        const state = last && last.state !== 'unknown' && nowMs - last.atMs < 10 * 60 * 1000 ? last.state : 'online';
+        await recordPrinterStatus(resolved, {
+            state,
+            detail: last == null ? void 0 : last.detail
+        }, nowMs);
+        if (!await ((_options_allowed = options.allowed) != null ? _options_allowed : ()=>printingAllowed(resolved.hostId))()) return '';
+        const claimed = await claimNextPrintJob(firestore, resolved.hostId, resolved.printerId, nowMs);
+        if (!claimed) return '';
+        return renderEpsonServerDirectPrint(printJobDocument(claimed.job, resolved.printer), {
+            jobId: claimed.id,
+            logoKey: resolved.printer.logoKey
+        });
+    }
+    if (connection === 'SetResponse') {
+        var _form_get1;
+        const results = parseEpsonPrintResults((_form_get1 = form.get('ResponseFile')) != null ? _form_get1 : '');
+        for (const result of results){
+            await finishPrintJob(firestore, resolved.hostId, resolved.printerId, result.jobId, {
+                ok: result.success,
+                code: result.code || (result.success ? 'success' : 'failed')
+            }, nowMs);
+        }
+        const last = results[results.length - 1];
+        if (last) {
+            const { state, detail } = epsonPrinterState(last);
+            await recordPrinterStatus(resolved, {
+                state,
+                detail
+            }, nowMs);
+        }
+        return '';
+    }
+    return null;
+}
+/** `/api/commerce/epson-sdp/:hostId/:printerId/:secret` */ export async function epsonServerDirectPrintRoute(request, context) {
+    if (request.method.toUpperCase() !== 'POST') {
+        return new Response(null, {
+            status: 405,
+            headers: NO_STORE
+        });
+    }
+    const resolved = await resolvePolledPrinter(context, 'epson');
+    if (!resolved) return notFound();
+    const answer = await handleEpsonPost(resolved, new URLSearchParams(await readBody(request)));
+    if (answer === null) return notFound();
+    return new Response(answer, {
+        status: 200,
+        headers: _extends({}, NO_STORE, {
+            'Content-Type': 'text/xml; charset=utf-8'
+        })
+    });
+}
+
+//# sourceMappingURL=printer-poll.js.map

package/src/lib/server/printer-poll.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/printer-poll.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport { firebaseAdmin, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport {\n  epsonPrinterState,\n  normalizePrinterDeviceId,\n  starPrinterState,\n  type PosPrinter,\n  type PrinterBrand,\n  type PrinterState,\n  type PrinterStatus,\n} from '../model/commerce-printers'\nimport { renderEpsonServerDirectPrint, parseEpsonPrintResults } from '../printing/render-epson'\nimport { renderStar, STAR_MEDIA_TYPE } from '../printing/render-star'\nimport { renderText } from '../printing/render-text'\nimport {\n  claimNextPrintJob,\n  claimPrintJob,\n  finishPrintJob,\n  heldPrintJobId,\n  nextPrintJobFor,\n  printersRef,\n  printJobDocument,\n} from './print-queue'\nimport { printerSecretMatches } from './printer-secret'\n\n/**\n * The two doors a cloud receipt printer polls (AGL-3619), registered as\n * MACHINE routes on the console dispatcher: a printer names no member and no\n * site cookie, so the dispatcher's enablement and release gates cannot judge\n * it, and its write limit would refuse a device that polls every few seconds.\n * The route authenticates the printer itself — the per-printer secret in the\n * path and the device identity in the request — and asks the plan before it\n * hands over a job.\n *\n *   /api/commerce/cloudprnt/{hostId}/{printerId}/{secret}   Star CloudPRNT\n *   /api/commerce/epson-sdp/{hostId}/{printerId}/{secret}   Epson Server Direct Print\n *\n * Every refusal is a bare 404 that says nothing about which part was wrong.\n */\n\nconst NO_STORE = {\n  'Cache-Control': 'no-store, max-age=0',\n  Pragma: 'no-cache',\n}\n\n/** A status write at most this often while nothing changes, so a 5-second poll is not 17,000 writes a day. */\nconst STATUS_HEARTBEAT_MS = 60 * 1000\n\n/** Polls report bodies this small; anything larger is not a printer. */\nconst MAX_BODY_BYTES = 64 * 1024\n\ntype RouteParams = { params: Record<string, string | string[]> }\n\nfunction param(context: RouteParams, name: string): string {\n  const value = context.params?.[name]\n  return String(Array.isArray(value) ? value[0] : (value ?? ''))\n}\n\nconst notFound = () => new Response(null, { status: 404, headers: NO_STORE })\n\nexport interface ResolvedPrinter {\n  hostId: string\n  printerId: string\n  printer: PosPrinter\n  ref: any\n}\n\n/** The printer the URL names, when its secret is right and its brand matches the door. */\nexport async function resolvePolledPrinter(\n  context: RouteParams,\n  brand: PrinterBrand,\n  firestore: any = firebaseAdmin.app().firestore(),\n): Promise<ResolvedPrinter | null> {\n  const hostId = param(context, 'hostId')\n  const printerId = param(context, 'printerId')\n  const secret = param(context, 'secret')\n  if (!/^[A-Za-z0-9_-]{1,128}$/.test(hostId) || !/^[A-Za-z0-9_-]{1,128}$/.test(printerId)) {\n    return null\n  }\n  const ref = printersRef(firestore, hostId).doc(printerId)\n  const snapshot = await ref.get()\n  if (!snapshot.exists) return null\n  const printer = snapshot.data() as PosPrinter\n  if (printer.brand !== brand) return null\n  if (!printerSecretMatches(hostId, printerId, printer.secretVersion, secret)) return null\n  return { hostId, printerId, printer, ref }\n}\n\n/** The device on the wire is the device on the record. */\nfunction deviceMatches(printer: PosPrinter, reported: unknown): boolean {\n  const presented = normalizePrinterDeviceId(printer.brand, reported)\n  return Boolean(presented) && presented === printer.deviceId\n}\n\n/** May this site's printers be handed work now: the plan still carries POS. */\nasync function printingAllowed(hostId: string): Promise<boolean> {\n  try {\n    const owner = await getOrgForHost(hostId)\n    return Aglyn.checkEntitlement(owner?.org as any, 'pos')\n  } catch {\n    return false\n  }\n}\n\n/** Writes the printer's status when it changed or the heartbeat is due. */\nexport async function recordPrinterStatus(\n  resolved: ResolvedPrinter,\n  next: { state: PrinterState; detail?: string; pollSeconds?: number },\n  nowMs: number,\n): Promise<void> {\n  const previous = resolved.printer.status\n  const changed =\n    !previous ||\n    previous.state !== next.state ||\n    (previous.detail ?? '') !== (next.detail ?? '') ||\n    (next.pollSeconds !== undefined && previous.pollSeconds !== next.pollSeconds)\n  if (!changed && nowMs - Number(previous?.atMs ?? 0) < STATUS_HEARTBEAT_MS) return\n  const status: PrinterStatus = {\n    state: next.state,\n    atMs: nowMs,\n    ...(next.detail ? { detail: next.detail.slice(0, 120) } : {}),\n    ...((next.pollSeconds ?? previous?.pollSeconds) !== undefined\n      ? { pollSeconds: next.pollSeconds ?? previous?.pollSeconds }\n      : {}),\n  }\n  await resolved.ref.set({ status }, { merge: true })\n}\n\nasync function readBody(request: Request): Promise<string> {\n  const text = await request.text()\n  return text.length > MAX_BODY_BYTES ? '' : text\n}\n\n/*==========================================\n * STAR CLOUDPRNT\n *=========================================*/\n\n/** The media types we serve a Star job in, preferred first. */\nexport const STAR_JOB_MEDIA_TYPES = [STAR_MEDIA_TYPE, 'text/plain'] as const\n\n/**\n * The status POST: record what the printer says, and tell it whether a job is\n * waiting. The job is OFFERED (with its id as the `jobToken`), not taken; the\n * printer's GET takes it.\n */\nexport async function handleStarPoll(\n  resolved: ResolvedPrinter,\n  body: Record<string, any>,\n  options: { firestore?: any; nowMs?: number; allowed?: () => Promise<boolean> } = {},\n): Promise<Record<string, unknown> | null> {\n  const firestore = options.firestore ?? firebaseAdmin.app().firestore()\n  const nowMs = options.nowMs ?? Date.now()\n  if (!deviceMatches(resolved.printer, body['printerMAC'])) return null\n  const { state, detail } = starPrinterState(body['statusCode'])\n  const actions: any[] = Array.isArray(body['clientAction']) ? body['clientAction'] : []\n  const interval = Number(\n    actions.find((action) => action?.request === 'GetPollInterval')?.result,\n  )\n  const pollSeconds = Number.isFinite(interval) && interval > 0 ? Math.round(interval) : undefined\n  await recordPrinterStatus(resolved, { state, detail, pollSeconds }, nowMs)\n  const next = await nextPrintJobFor(firestore, resolved.hostId, resolved.printerId, nowMs)\n  if (next && (await (options.allowed ?? (() => printingAllowed(resolved.hostId)))())) {\n    return {\n      jobReady: true,\n      mediaTypes: [...STAR_JOB_MEDIA_TYPES],\n      jobToken: next.id,\n      deleteMethod: 'DELETE',\n    }\n  }\n  // Ask once how often it polls, so the console can say when it will next\n  // look. A client action and a job are never sent together: the printer would\n  // answer the action and hold the job until the next poll.\n  if (resolved.printer.status?.pollSeconds === undefined && pollSeconds === undefined) {\n    return { jobReady: false, clientAction: [{ request: 'GetPollInterval', options: '' }] }\n  }\n  return { jobReady: false }\n}\n\n/** The job download: take it and render it in the media type the printer chose. */\nexport async function handleStarJobRequest(\n  resolved: ResolvedPrinter,\n  query: URLSearchParams,\n  options: { firestore?: any; nowMs?: number; allowed?: () => Promise<boolean> } = {},\n): Promise<{ contentType: string; body: Uint8Array | string } | null> {\n  const firestore = options.firestore ?? firebaseAdmin.app().firestore()\n  const nowMs = options.nowMs ?? Date.now()\n  if (!deviceMatches(resolved.printer, query.get('mac'))) return null\n  if (!(await (options.allowed ?? (() => printingAllowed(resolved.hostId)))())) return null\n  let jobId = query.get('token') ?? ''\n  if (!jobId) {\n    const next = await nextPrintJobFor(firestore, resolved.hostId, resolved.printerId, nowMs)\n    jobId = next?.id ?? ''\n  }\n  const claimed = await claimPrintJob(firestore, resolved.hostId, resolved.printerId, jobId, nowMs)\n  if (!claimed) return null\n  const document = printJobDocument(claimed.job, resolved.printer)\n  const type = (query.get('type') ?? STAR_MEDIA_TYPE).toLowerCase()\n  if (type.startsWith('text/plain')) {\n    return { contentType: 'text/plain; charset=us-ascii', body: renderText(document) }\n  }\n  return {\n    contentType: STAR_MEDIA_TYPE,\n    body: renderStar(document, { logoKey: resolved.printer.logoKey }),\n  }\n}\n\n/** The confirmation: `code` 2xx is printed; anything else is a failure to retry or give up on. */\nexport async function handleStarConfirmation(\n  resolved: ResolvedPrinter,\n  query: URLSearchParams,\n  options: { firestore?: any; nowMs?: number } = {},\n): Promise<boolean> {\n  const firestore = options.firestore ?? firebaseAdmin.app().firestore()\n  const nowMs = options.nowMs ?? Date.now()\n  if (!deviceMatches(resolved.printer, query.get('mac'))) return false\n  const jobId =\n    query.get('token') || (await heldPrintJobId(firestore, resolved.hostId, resolved.printerId))\n  if (!jobId) return true\n  const code = query.get('code') ?? ''\n  await finishPrintJob(\n    firestore,\n    resolved.hostId,\n    resolved.printerId,\n    jobId,\n    { ok: code.trim().startsWith('2'), code },\n    nowMs,\n  )\n  const { state, detail } = starPrinterState(code)\n  if (state !== 'online' && state !== 'unknown') {\n    await recordPrinterStatus(resolved, { state, detail }, nowMs)\n  }\n  return true\n}\n\n/** `/api/commerce/cloudprnt/:hostId/:printerId/:secret` */\nexport async function cloudPrntRoute(request: Request, context: RouteParams): Promise<Response> {\n  const resolved = await resolvePolledPrinter(context, 'star')\n  if (!resolved) return notFound()\n  const query = new URL(request.url).searchParams\n  const method = request.method.toUpperCase()\n  if (method === 'POST') {\n    let body: Record<string, any>\n    try {\n      body = JSON.parse(await readBody(request))\n    } catch {\n      return notFound()\n    }\n    const answer = await handleStarPoll(resolved, body ?? {})\n    if (!answer) return notFound()\n    return Response.json(answer, { headers: NO_STORE })\n  }\n  // A server that cannot take DELETE may ask for `deleteMethod: GET`, which\n  // arrives as a GET carrying `delete`; this one asks for DELETE, but a\n  // printer configured either way is answered.\n  if (method === 'DELETE' || (method === 'GET' && query.has('delete'))) {\n    const ok = await handleStarConfirmation(resolved, query)\n    return ok ? new Response(null, { status: 200, headers: NO_STORE }) : notFound()\n  }\n  if (method === 'GET') {\n    const job = await handleStarJobRequest(resolved, query)\n    if (!job) return notFound()\n    const body =\n      typeof job.body === 'string'\n        ? job.body\n        : job.body.buffer.slice(job.body.byteOffset, job.body.byteOffset + job.body.byteLength)\n    return new Response(body as BodyInit, {\n      status: 200,\n      headers: { ...NO_STORE, 'Content-Type': job.contentType },\n    })\n  }\n  return new Response(null, { status: 405, headers: NO_STORE })\n}\n\n/*==========================================\n * EPSON SERVER DIRECT PRINT\n *=========================================*/\n\n/**\n * One Epson POST. `GetRequest` is a poll whose answer is the job itself, so\n * the job is TAKEN here; `SetResponse` reports how each job went. Returns the\n * XML to send back, `''` for \"nothing to print\", or `null` to refuse.\n */\nexport async function handleEpsonPost(\n  resolved: ResolvedPrinter,\n  form: URLSearchParams,\n  options: { firestore?: any; nowMs?: number; allowed?: () => Promise<boolean> } = {},\n): Promise<string | null> {\n  const firestore = options.firestore ?? firebaseAdmin.app().firestore()\n  const nowMs = options.nowMs ?? Date.now()\n  if (!deviceMatches(resolved.printer, form.get('ID'))) return null\n  const connection = form.get('ConnectionType') ?? ''\n  if (connection === 'GetRequest') {\n    // A poll says the printer is reachable; what it looks like comes with results.\n    const last = resolved.printer.status\n    const state: PrinterState =\n      last && last.state !== 'unknown' && nowMs - last.atMs < 10 * 60 * 1000 ? last.state : 'online'\n    await recordPrinterStatus(resolved, { state, detail: last?.detail }, nowMs)\n    if (!(await (options.allowed ?? (() => printingAllowed(resolved.hostId)))())) return ''\n    const claimed = await claimNextPrintJob(firestore, resolved.hostId, resolved.printerId, nowMs)\n    if (!claimed) return ''\n    return renderEpsonServerDirectPrint(printJobDocument(claimed.job, resolved.printer), {\n      jobId: claimed.id,\n      logoKey: resolved.printer.logoKey,\n    })\n  }\n  if (connection === 'SetResponse') {\n    const results = parseEpsonPrintResults(form.get('ResponseFile') ?? '')\n    for (const result of results) {\n      await finishPrintJob(\n        firestore,\n        resolved.hostId,\n        resolved.printerId,\n        result.jobId,\n        { ok: result.success, code: result.code || (result.success ? 'success' : 'failed') },\n        nowMs,\n      )\n    }\n    const last = results[results.length - 1]\n    if (last) {\n      const { state, detail } = epsonPrinterState(last)\n      await recordPrinterStatus(resolved, { state, detail }, nowMs)\n    }\n    return ''\n  }\n  return null\n}\n\n/** `/api/commerce/epson-sdp/:hostId/:printerId/:secret` */\nexport async function epsonServerDirectPrintRoute(\n  request: Request,\n  context: RouteParams,\n): Promise<Response> {\n  if (request.method.toUpperCase() !== 'POST') {\n    return new Response(null, { status: 405, headers: NO_STORE })\n  }\n  const resolved = await resolvePolledPrinter(context, 'epson')\n  if (!resolved) return notFound()\n  const answer = await handleEpsonPost(resolved, new URLSearchParams(await readBody(request)))\n  if (answer === null) return notFound()\n  return new Response(answer, {\n    status: 200,\n    headers: { ...NO_STORE, 'Content-Type': 'text/xml; charset=utf-8' },\n  })\n}\n"],"names":["Aglyn","firebaseAdmin","getOrgForHost","epsonPrinterState","normalizePrinterDeviceId","starPrinterState","renderEpsonServerDirectPrint","parseEpsonPrintResults","renderStar","STAR_MEDIA_TYPE","renderText","claimNextPrintJob","claimPrintJob","finishPrintJob","heldPrintJobId","nextPrintJobFor","printersRef","printJobDocument","printerSecretMatches","NO_STORE","Pragma","STATUS_HEARTBEAT_MS","MAX_BODY_BYTES","param","context","name","value","params","String","Array","isArray","notFound","Response","status","headers","resolvePolledPrinter","brand","firestore","app","hostId","printerId","secret","test","ref","doc","snapshot","get","exists","printer","data","secretVersion","deviceMatches","reported","presented","Boolean","deviceId","printingAllowed","owner","checkEntitlement","org","recordPrinterStatus","resolved","next","nowMs","previous","changed","state","detail","pollSeconds","undefined","Number","atMs","slice","set","merge","readBody","request","text","length","STAR_JOB_MEDIA_TYPES","handleStarPoll","body","options","actions","Date","now","interval","find","action","result","isFinite","Math","round","allowed","jobReady","mediaTypes","jobToken","id","deleteMethod","clientAction","handleStarJobRequest","query","jobId","claimed","document","job","type","toLowerCase","startsWith","contentType","logoKey","handleStarConfirmation","code","ok","trim","cloudPrntRoute","URL","url","searchParams","method","toUpperCase","JSON","parse","answer","json","has","buffer","byteOffset","byteLength","handleEpsonPost","form","connection","last","results","success","epsonServerDirectPrintRoute","URLSearchParams"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,sBAAqB;AAC5C,SAASC,aAAa,EAAEC,aAAa,QAAQ,2BAA0B;AACvE,SACEC,iBAAiB,EACjBC,wBAAwB,EACxBC,gBAAgB,QAKX,gCAA4B;AACnC,SAASC,4BAA4B,EAAEC,sBAAsB,QAAQ,8BAA0B;AAC/F,SAASC,UAAU,EAAEC,eAAe,QAAQ,6BAAyB;AACrE,SAASC,UAAU,QAAQ,6BAAyB;AACpD,SACEC,iBAAiB,EACjBC,aAAa,EACbC,cAAc,EACdC,cAAc,EACdC,eAAe,EACfC,WAAW,EACXC,gBAAgB,QACX,mBAAe;AACtB,SAASC,oBAAoB,QAAQ,sBAAkB;AAEvD;;;;;;;;;;;;;CAaC,GAED,MAAMC,WAAW;IACf,iBAAiB;IACjBC,QAAQ;AACV;AAEA,4GAA4G,GAC5G,MAAMC,sBAAsB,KAAK;AAEjC,sEAAsE,GACtE,MAAMC,iBAAiB,KAAK;AAI5B,SAASC,MAAMC,OAAoB,EAAEC,IAAY;QACjCD;IAAd,MAAME,SAAQF,kBAAAA,QAAQG,MAAM,qBAAdH,eAAgB,CAACC,KAAK;IACpC,OAAOG,OAAOC,MAAMC,OAAO,CAACJ,SAASA,KAAK,CAAC,EAAE,GAAIA,gBAAAA,QAAS;AAC5D;AAEA,MAAMK,WAAW,IAAM,IAAIC,SAAS,MAAM;QAAEC,QAAQ;QAAKC,SAASf;IAAS;AAS3E,wFAAwF,GACxF,OAAO,eAAegB,qBACpBX,OAAoB,EACpBY,KAAmB,EACnBC,YAAiBpC,cAAcqC,GAAG,GAAGD,SAAS,EAAE;IAEhD,MAAME,SAAShB,MAAMC,SAAS;IAC9B,MAAMgB,YAAYjB,MAAMC,SAAS;IACjC,MAAMiB,SAASlB,MAAMC,SAAS;IAC9B,IAAI,CAAC,yBAAyBkB,IAAI,CAACH,WAAW,CAAC,yBAAyBG,IAAI,CAACF,YAAY;QACvF,OAAO;IACT;IACA,MAAMG,MAAM3B,YAAYqB,WAAWE,QAAQK,GAAG,CAACJ;IAC/C,MAAMK,WAAW,MAAMF,IAAIG,GAAG;IAC9B,IAAI,CAACD,SAASE,MAAM,EAAE,OAAO;IAC7B,MAAMC,UAAUH,SAASI,IAAI;IAC7B,IAAID,QAAQZ,KAAK,KAAKA,OAAO,OAAO;IACpC,IAAI,CAAClB,qBAAqBqB,QAAQC,WAAWQ,QAAQE,aAAa,EAAET,SAAS,OAAO;IACpF,OAAO;QAAEF;QAAQC;QAAWQ;QAASL;IAAI;AAC3C;AAEA,wDAAwD,GACxD,SAASQ,cAAcH,OAAmB,EAAEI,QAAiB;IAC3D,MAAMC,YAAYjD,yBAAyB4C,QAAQZ,KAAK,EAAEgB;IAC1D,OAAOE,QAAQD,cAAcA,cAAcL,QAAQO,QAAQ;AAC7D;AAEA,6EAA6E,GAC7E,eAAeC,gBAAgBjB,MAAc;IAC3C,IAAI;QACF,MAAMkB,QAAQ,MAAMvD,cAAcqC;QAClC,OAAOvC,MAAM0D,gBAAgB,CAACD,yBAAAA,MAAOE,GAAG,EAAS;IACnD,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA,yEAAyE,GACzE,OAAO,eAAeC,oBACpBC,QAAyB,EACzBC,IAAoE,EACpEC,KAAa;QAMVC,kBAA4BF,oBAOxBA,mBACcA;IAZrB,MAAME,WAAWH,SAASb,OAAO,CAACf,MAAM;IACxC,MAAMgC,UACJ,CAACD,YACDA,SAASE,KAAK,KAAKJ,KAAKI,KAAK,IAC7B,EAACF,mBAAAA,SAASG,MAAM,YAAfH,mBAAmB,UAASF,eAAAA,KAAKK,MAAM,YAAXL,eAAe,OAC3CA,KAAKM,WAAW,KAAKC,aAAaL,SAASI,WAAW,KAAKN,KAAKM,WAAW;IAC9E,IAAI,CAACH,WAAWF,QAAQO,eAAON,4BAAAA,SAAUO,IAAI,mBAAI,KAAKlD,qBAAqB;IAC3E,MAAMY,SAAwB;QAC5BiC,OAAOJ,KAAKI,KAAK;QACjBK,MAAMR;OACFD,KAAKK,MAAM,GAAG;QAAEA,QAAQL,KAAKK,MAAM,CAACK,KAAK,CAAC,GAAG;IAAK,IAAI,CAAC,GACvD,EAACV,oBAAAA,KAAKM,WAAW,YAAhBN,oBAAoBE,4BAAAA,SAAUI,WAAW,MAAMC,YAChD;QAAED,WAAW,GAAEN,qBAAAA,KAAKM,WAAW,YAAhBN,qBAAoBE,4BAAAA,SAAUI,WAAW;IAAC,IACzD,CAAC;IAEP,MAAMP,SAASlB,GAAG,CAAC8B,GAAG,CAAC;QAAExC;IAAO,GAAG;QAAEyC,OAAO;IAAK;AACnD;AAEA,eAAeC,SAASC,OAAgB;IACtC,MAAMC,OAAO,MAAMD,QAAQC,IAAI;IAC/B,OAAOA,KAAKC,MAAM,GAAGxD,iBAAiB,KAAKuD;AAC7C;AAEA;;2CAE2C,GAE3C,6DAA6D,GAC7D,OAAO,MAAME,uBAAuB;IAACtE;IAAiB;CAAa,CAAS;AAE5E;;;;CAIC,GACD,OAAO,eAAeuE,eACpBnB,QAAyB,EACzBoB,IAAyB,EACzBC,UAAiF,CAAC,CAAC;QAEjEA,oBACJA,gBAUMA;QALlBC,eAgBEtB;IAtBJ,MAAMxB,aAAY6C,qBAAAA,QAAQ7C,SAAS,YAAjB6C,qBAAqBjF,cAAcqC,GAAG,GAAGD,SAAS;IACpE,MAAM0B,SAAQmB,iBAAAA,QAAQnB,KAAK,YAAbmB,iBAAiBE,KAAKC,GAAG;IACvC,IAAI,CAAClC,cAAcU,SAASb,OAAO,EAAEiC,IAAI,CAAC,aAAa,GAAG,OAAO;IACjE,MAAM,EAAEf,KAAK,EAAEC,MAAM,EAAE,GAAG9D,iBAAiB4E,IAAI,CAAC,aAAa;IAC7D,MAAME,UAAiBtD,MAAMC,OAAO,CAACmD,IAAI,CAAC,eAAe,IAAIA,IAAI,CAAC,eAAe,GAAG,EAAE;IACtF,MAAMK,WAAWhB,QACfa,gBAAAA,QAAQI,IAAI,CAAC,CAACC,SAAWA,CAAAA,0BAAAA,OAAQZ,OAAO,MAAK,uCAA7CO,cAAiEM,MAAM;IAEzE,MAAMrB,cAAcE,OAAOoB,QAAQ,CAACJ,aAAaA,WAAW,IAAIK,KAAKC,KAAK,CAACN,YAAYjB;IACvF,MAAMT,oBAAoBC,UAAU;QAAEK;QAAOC;QAAQC;IAAY,GAAGL;IACpE,MAAMD,OAAO,MAAM/C,gBAAgBsB,WAAWwB,SAAStB,MAAM,EAAEsB,SAASrB,SAAS,EAAEuB;IACnF,IAAID,QAAS,MAAM,EAACoB,mBAAAA,QAAQW,OAAO,YAAfX,mBAAoB,IAAM1B,gBAAgBK,SAAStB,MAAM,MAAQ;QACnF,OAAO;YACLuD,UAAU;YACVC,YAAY;mBAAIhB;aAAqB;YACrCiB,UAAUlC,KAAKmC,EAAE;YACjBC,cAAc;QAChB;IACF;IACA,wEAAwE;IACxE,6EAA6E;IAC7E,0DAA0D;IAC1D,IAAIrC,EAAAA,2BAAAA,SAASb,OAAO,CAACf,MAAM,qBAAvB4B,yBAAyBO,WAAW,MAAKC,aAAaD,gBAAgBC,WAAW;QACnF,OAAO;YAAEyB,UAAU;YAAOK,cAAc;gBAAC;oBAAEvB,SAAS;oBAAmBM,SAAS;gBAAG;aAAE;QAAC;IACxF;IACA,OAAO;QAAEY,UAAU;IAAM;AAC3B;AAEA,iFAAiF,GACjF,OAAO,eAAeM,qBACpBvC,QAAyB,EACzBwC,KAAsB,EACtBnB,UAAiF,CAAC,CAAC;QAEjEA,oBACJA,gBAEDA,kBACDmB,YAQEA;IAZd,MAAMhE,aAAY6C,qBAAAA,QAAQ7C,SAAS,YAAjB6C,qBAAqBjF,cAAcqC,GAAG,GAAGD,SAAS;IACpE,MAAM0B,SAAQmB,iBAAAA,QAAQnB,KAAK,YAAbmB,iBAAiBE,KAAKC,GAAG;IACvC,IAAI,CAAClC,cAAcU,SAASb,OAAO,EAAEqD,MAAMvD,GAAG,CAAC,SAAS,OAAO;IAC/D,IAAI,CAAE,MAAM,EAACoC,mBAAAA,QAAQW,OAAO,YAAfX,mBAAoB,IAAM1B,gBAAgBK,SAAStB,MAAM,MAAQ,OAAO;IACrF,IAAI+D,SAAQD,aAAAA,MAAMvD,GAAG,CAAC,oBAAVuD,aAAsB;IAClC,IAAI,CAACC,OAAO;;QACV,MAAMxC,OAAO,MAAM/C,gBAAgBsB,WAAWwB,SAAStB,MAAM,EAAEsB,SAASrB,SAAS,EAAEuB;QACnFuC,gBAAQxC,wBAAAA,KAAMmC,EAAE,mBAAI;IACtB;IACA,MAAMM,UAAU,MAAM3F,cAAcyB,WAAWwB,SAAStB,MAAM,EAAEsB,SAASrB,SAAS,EAAE8D,OAAOvC;IAC3F,IAAI,CAACwC,SAAS,OAAO;IACrB,MAAMC,WAAWvF,iBAAiBsF,QAAQE,GAAG,EAAE5C,SAASb,OAAO;IAC/D,MAAM0D,OAAO,EAACL,cAAAA,MAAMvD,GAAG,CAAC,mBAAVuD,cAAqB5F,iBAAiBkG,WAAW;IAC/D,IAAID,KAAKE,UAAU,CAAC,eAAe;QACjC,OAAO;YAAEC,aAAa;YAAgC5B,MAAMvE,WAAW8F;QAAU;IACnF;IACA,OAAO;QACLK,aAAapG;QACbwE,MAAMzE,WAAWgG,UAAU;YAAEM,SAASjD,SAASb,OAAO,CAAC8D,OAAO;QAAC;IACjE;AACF;AAEA,gGAAgG,GAChG,OAAO,eAAeC,uBACpBlD,QAAyB,EACzBwC,KAAsB,EACtBnB,UAA+C,CAAC,CAAC;QAE/BA,oBACJA,gBAKDmB;IANb,MAAMhE,aAAY6C,qBAAAA,QAAQ7C,SAAS,YAAjB6C,qBAAqBjF,cAAcqC,GAAG,GAAGD,SAAS;IACpE,MAAM0B,SAAQmB,iBAAAA,QAAQnB,KAAK,YAAbmB,iBAAiBE,KAAKC,GAAG;IACvC,IAAI,CAAClC,cAAcU,SAASb,OAAO,EAAEqD,MAAMvD,GAAG,CAAC,SAAS,OAAO;IAC/D,MAAMwD,QACJD,MAAMvD,GAAG,CAAC,YAAa,MAAMhC,eAAeuB,WAAWwB,SAAStB,MAAM,EAAEsB,SAASrB,SAAS;IAC5F,IAAI,CAAC8D,OAAO,OAAO;IACnB,MAAMU,QAAOX,aAAAA,MAAMvD,GAAG,CAAC,mBAAVuD,aAAqB;IAClC,MAAMxF,eACJwB,WACAwB,SAAStB,MAAM,EACfsB,SAASrB,SAAS,EAClB8D,OACA;QAAEW,IAAID,KAAKE,IAAI,GAAGN,UAAU,CAAC;QAAMI;IAAK,GACxCjD;IAEF,MAAM,EAAEG,KAAK,EAAEC,MAAM,EAAE,GAAG9D,iBAAiB2G;IAC3C,IAAI9C,UAAU,YAAYA,UAAU,WAAW;QAC7C,MAAMN,oBAAoBC,UAAU;YAAEK;YAAOC;QAAO,GAAGJ;IACzD;IACA,OAAO;AACT;AAEA,yDAAyD,GACzD,OAAO,eAAeoD,eAAevC,OAAgB,EAAEpD,OAAoB;IACzE,MAAMqC,WAAW,MAAM1B,qBAAqBX,SAAS;IACrD,IAAI,CAACqC,UAAU,OAAO9B;IACtB,MAAMsE,QAAQ,IAAIe,IAAIxC,QAAQyC,GAAG,EAAEC,YAAY;IAC/C,MAAMC,SAAS3C,QAAQ2C,MAAM,CAACC,WAAW;IACzC,IAAID,WAAW,QAAQ;QACrB,IAAItC;QACJ,IAAI;YACFA,OAAOwC,KAAKC,KAAK,CAAC,MAAM/C,SAASC;QACnC,EAAE,eAAM;YACN,OAAO7C;QACT;QACA,MAAM4F,SAAS,MAAM3C,eAAenB,UAAUoB,eAAAA,OAAQ,CAAC;QACvD,IAAI,CAAC0C,QAAQ,OAAO5F;QACpB,OAAOC,SAAS4F,IAAI,CAACD,QAAQ;YAAEzF,SAASf;QAAS;IACnD;IACA,0EAA0E;IAC1E,sEAAsE;IACtE,6CAA6C;IAC7C,IAAIoG,WAAW,YAAaA,WAAW,SAASlB,MAAMwB,GAAG,CAAC,WAAY;QACpE,MAAMZ,KAAK,MAAMF,uBAAuBlD,UAAUwC;QAClD,OAAOY,KAAK,IAAIjF,SAAS,MAAM;YAAEC,QAAQ;YAAKC,SAASf;QAAS,KAAKY;IACvE;IACA,IAAIwF,WAAW,OAAO;QACpB,MAAMd,MAAM,MAAML,qBAAqBvC,UAAUwC;QACjD,IAAI,CAACI,KAAK,OAAO1E;QACjB,MAAMkD,OACJ,OAAOwB,IAAIxB,IAAI,KAAK,WAChBwB,IAAIxB,IAAI,GACRwB,IAAIxB,IAAI,CAAC6C,MAAM,CAACtD,KAAK,CAACiC,IAAIxB,IAAI,CAAC8C,UAAU,EAAEtB,IAAIxB,IAAI,CAAC8C,UAAU,GAAGtB,IAAIxB,IAAI,CAAC+C,UAAU;QAC1F,OAAO,IAAIhG,SAASiD,MAAkB;YACpChD,QAAQ;YACRC,SAAS,aAAKf;gBAAU,gBAAgBsF,IAAII,WAAW;;QACzD;IACF;IACA,OAAO,IAAI7E,SAAS,MAAM;QAAEC,QAAQ;QAAKC,SAASf;IAAS;AAC7D;AAEA;;2CAE2C,GAE3C;;;;CAIC,GACD,OAAO,eAAe8G,gBACpBpE,QAAyB,EACzBqE,IAAqB,EACrBhD,UAAiF,CAAC,CAAC;QAEjEA,oBACJA,gBAEKgD;IAHnB,MAAM7F,aAAY6C,qBAAAA,QAAQ7C,SAAS,YAAjB6C,qBAAqBjF,cAAcqC,GAAG,GAAGD,SAAS;IACpE,MAAM0B,SAAQmB,iBAAAA,QAAQnB,KAAK,YAAbmB,iBAAiBE,KAAKC,GAAG;IACvC,IAAI,CAAClC,cAAcU,SAASb,OAAO,EAAEkF,KAAKpF,GAAG,CAAC,QAAQ,OAAO;IAC7D,MAAMqF,cAAaD,YAAAA,KAAKpF,GAAG,CAAC,6BAAToF,YAA8B;IACjD,IAAIC,eAAe,cAAc;YAMlBjD;QALb,+EAA+E;QAC/E,MAAMkD,OAAOvE,SAASb,OAAO,CAACf,MAAM;QACpC,MAAMiC,QACJkE,QAAQA,KAAKlE,KAAK,KAAK,aAAaH,QAAQqE,KAAK7D,IAAI,GAAG,KAAK,KAAK,OAAO6D,KAAKlE,KAAK,GAAG;QACxF,MAAMN,oBAAoBC,UAAU;YAAEK;YAAOC,MAAM,EAAEiE,wBAAAA,KAAMjE,MAAM;QAAC,GAAGJ;QACrE,IAAI,CAAE,MAAM,EAACmB,mBAAAA,QAAQW,OAAO,YAAfX,mBAAoB,IAAM1B,gBAAgBK,SAAStB,MAAM,MAAQ,OAAO;QACrF,MAAMgE,UAAU,MAAM5F,kBAAkB0B,WAAWwB,SAAStB,MAAM,EAAEsB,SAASrB,SAAS,EAAEuB;QACxF,IAAI,CAACwC,SAAS,OAAO;QACrB,OAAOjG,6BAA6BW,iBAAiBsF,QAAQE,GAAG,EAAE5C,SAASb,OAAO,GAAG;YACnFsD,OAAOC,QAAQN,EAAE;YACjBa,SAASjD,SAASb,OAAO,CAAC8D,OAAO;QACnC;IACF;IACA,IAAIqB,eAAe,eAAe;YACOD;QAAvC,MAAMG,UAAU9H,wBAAuB2H,aAAAA,KAAKpF,GAAG,CAAC,2BAAToF,aAA4B;QACnE,KAAK,MAAMzC,UAAU4C,QAAS;YAC5B,MAAMxH,eACJwB,WACAwB,SAAStB,MAAM,EACfsB,SAASrB,SAAS,EAClBiD,OAAOa,KAAK,EACZ;gBAAEW,IAAIxB,OAAO6C,OAAO;gBAAEtB,MAAMvB,OAAOuB,IAAI,IAAKvB,CAAAA,OAAO6C,OAAO,GAAG,YAAY,QAAO;YAAG,GACnFvE;QAEJ;QACA,MAAMqE,OAAOC,OAAO,CAACA,QAAQvD,MAAM,GAAG,EAAE;QACxC,IAAIsD,MAAM;YACR,MAAM,EAAElE,KAAK,EAAEC,MAAM,EAAE,GAAGhE,kBAAkBiI;YAC5C,MAAMxE,oBAAoBC,UAAU;gBAAEK;gBAAOC;YAAO,GAAGJ;QACzD;QACA,OAAO;IACT;IACA,OAAO;AACT;AAEA,yDAAyD,GACzD,OAAO,eAAewE,4BACpB3D,OAAgB,EAChBpD,OAAoB;IAEpB,IAAIoD,QAAQ2C,MAAM,CAACC,WAAW,OAAO,QAAQ;QAC3C,OAAO,IAAIxF,SAAS,MAAM;YAAEC,QAAQ;YAAKC,SAASf;QAAS;IAC7D;IACA,MAAM0C,WAAW,MAAM1B,qBAAqBX,SAAS;IACrD,IAAI,CAACqC,UAAU,OAAO9B;IACtB,MAAM4F,SAAS,MAAMM,gBAAgBpE,UAAU,IAAI2E,gBAAgB,MAAM7D,SAASC;IAClF,IAAI+C,WAAW,MAAM,OAAO5F;IAC5B,OAAO,IAAIC,SAAS2F,QAAQ;QAC1B1F,QAAQ;QACRC,SAAS,aAAKf;YAAU,gBAAgB;;IAC1C;AACF"}

package/src/lib/server/printer-secret.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PrinterBrand } from '../model/commerce-printers';
+/**
+ * The per-printer secret in a cloud printer's poll URL (AGL-3619).
+ *
+ * DERIVED, NOT STORED: `HMAC(TOKEN_SIGNING_SECRET, printer:{hostId}:{printerId}:{version})`,
+ * the supplier-token construction (`supplier-update.ts`). Nothing secret sits
+ * in a Firestore document a client can read, a manager can be shown the URL
+ * again whenever they need to paste it, and "Regenerate URL" invalidates the
+ * old one by bumping `secretVersion` on the printer.
+ *
+ * It rides in the URL PATH rather than in HTTP authentication because the two
+ * vendors disagree: Star CloudPRNT offers Basic and Epson Server Direct Print
+ * offers Digest, and both accept any https URL. The printer's own identity
+ * (Star's MAC, Epson's ID) is checked as well, so the URL alone does not let
+ * a different device drain the queue.
+ */
+export declare function printerSecret(hostId: string, printerId: string, version: number): string;
+/** Constant-time comparison of a presented secret with the printer's current one. */
+export declare function printerSecretMatches(hostId: string, printerId: string, version: number, presented: unknown): boolean;
+/** The route each brand polls, under the console's plugin API dispatcher. */
+export declare const PRINTER_POLL_ROUTE: Record<PrinterBrand, string>;
+/** The full https URL a manager pastes into the printer's web configuration. */
+export declare function printerPollUrl(brand: PrinterBrand, hostId: string, printerId: string, version: number): string;

package/src/lib/server/printer-secret.js

@@ -0,0 +1,56 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { createHmac, timingSafeEqual } from "crypto";
+import { platformConsoleOrigin } from "@aglyn/aglyn/app-utils/platform-brand";
+import { tokenSigningSecret } from "./download.js";
+/**
+ * The per-printer secret in a cloud printer's poll URL (AGL-3619).
+ *
+ * DERIVED, NOT STORED: `HMAC(TOKEN_SIGNING_SECRET, printer:{hostId}:{printerId}:{version})`,
+ * the supplier-token construction (`supplier-update.ts`). Nothing secret sits
+ * in a Firestore document a client can read, a manager can be shown the URL
+ * again whenever they need to paste it, and "Regenerate URL" invalidates the
+ * old one by bumping `secretVersion` on the printer.
+ *
+ * It rides in the URL PATH rather than in HTTP authentication because the two
+ * vendors disagree: Star CloudPRNT offers Basic and Epson Server Direct Print
+ * offers Digest, and both accept any https URL. The printer's own identity
+ * (Star's MAC, Epson's ID) is checked as well, so the URL alone does not let
+ * a different device drain the queue.
+ */ export function printerSecret(hostId, printerId, version) {
+    return createHmac('sha256', tokenSigningSecret()).update(`printer:${hostId}:${printerId}:${Math.max(0, Math.floor(Number(version) || 0))}`).digest('hex').slice(0, 40);
+}
+/** Constant-time comparison of a presented secret with the printer's current one. */ export function printerSecretMatches(hostId, printerId, version, presented) {
+    const candidate = typeof presented === 'string' ? presented.trim().toLowerCase() : '';
+    if (!/^[0-9a-f]{40}$/.test(candidate)) return false;
+    let expected;
+    try {
+        expected = printerSecret(hostId, printerId, version);
+    } catch (unused) {
+        // TOKEN_SIGNING_SECRET is not configured: nothing can authenticate.
+        return false;
+    }
+    return timingSafeEqual(Buffer.from(candidate), Buffer.from(expected));
+}
+/** The route each brand polls, under the console's plugin API dispatcher. */ export const PRINTER_POLL_ROUTE = {
+    star: 'commerce/cloudprnt',
+    epson: 'commerce/epson-sdp'
+};
+/** The full https URL a manager pastes into the printer's web configuration. */ export function printerPollUrl(brand, hostId, printerId, version) {
+    return `${platformConsoleOrigin()}/api/${PRINTER_POLL_ROUTE[brand]}/` + `${encodeURIComponent(hostId)}/${encodeURIComponent(printerId)}/` + printerSecret(hostId, printerId, version);
+}
+
+//# sourceMappingURL=printer-secret.js.map

package/src/lib/server/printer-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/printer-secret.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createHmac, timingSafeEqual } from 'crypto'\nimport { platformConsoleOrigin } from '@aglyn/aglyn/app-utils/platform-brand'\nimport type { PrinterBrand } from '../model/commerce-printers'\nimport { tokenSigningSecret } from './download'\n\n/**\n * The per-printer secret in a cloud printer's poll URL (AGL-3619).\n *\n * DERIVED, NOT STORED: `HMAC(TOKEN_SIGNING_SECRET, printer:{hostId}:{printerId}:{version})`,\n * the supplier-token construction (`supplier-update.ts`). Nothing secret sits\n * in a Firestore document a client can read, a manager can be shown the URL\n * again whenever they need to paste it, and \"Regenerate URL\" invalidates the\n * old one by bumping `secretVersion` on the printer.\n *\n * It rides in the URL PATH rather than in HTTP authentication because the two\n * vendors disagree: Star CloudPRNT offers Basic and Epson Server Direct Print\n * offers Digest, and both accept any https URL. The printer's own identity\n * (Star's MAC, Epson's ID) is checked as well, so the URL alone does not let\n * a different device drain the queue.\n */\nexport function printerSecret(hostId: string, printerId: string, version: number): string {\n  return createHmac('sha256', tokenSigningSecret())\n    .update(`printer:${hostId}:${printerId}:${Math.max(0, Math.floor(Number(version) || 0))}`)\n    .digest('hex')\n    .slice(0, 40)\n}\n\n/** Constant-time comparison of a presented secret with the printer's current one. */\nexport function printerSecretMatches(\n  hostId: string,\n  printerId: string,\n  version: number,\n  presented: unknown,\n): boolean {\n  const candidate = typeof presented === 'string' ? presented.trim().toLowerCase() : ''\n  if (!/^[0-9a-f]{40}$/.test(candidate)) return false\n  let expected: string\n  try {\n    expected = printerSecret(hostId, printerId, version)\n  } catch {\n    // TOKEN_SIGNING_SECRET is not configured: nothing can authenticate.\n    return false\n  }\n  return timingSafeEqual(Buffer.from(candidate), Buffer.from(expected))\n}\n\n/** The route each brand polls, under the console's plugin API dispatcher. */\nexport const PRINTER_POLL_ROUTE: Record<PrinterBrand, string> = {\n  star: 'commerce/cloudprnt',\n  epson: 'commerce/epson-sdp',\n}\n\n/** The full https URL a manager pastes into the printer's web configuration. */\nexport function printerPollUrl(\n  brand: PrinterBrand,\n  hostId: string,\n  printerId: string,\n  version: number,\n): string {\n  return (\n    `${platformConsoleOrigin()}/api/${PRINTER_POLL_ROUTE[brand]}/` +\n    `${encodeURIComponent(hostId)}/${encodeURIComponent(printerId)}/` +\n    printerSecret(hostId, printerId, version)\n  )\n}\n"],"names":["createHmac","timingSafeEqual","platformConsoleOrigin","tokenSigningSecret","printerSecret","hostId","printerId","version","update","Math","max","floor","Number","digest","slice","printerSecretMatches","presented","candidate","trim","toLowerCase","test","expected","Buffer","from","PRINTER_POLL_ROUTE","star","epson","printerPollUrl","brand","encodeURIComponent"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,EAAEC,eAAe,QAAQ,SAAQ;AACpD,SAASC,qBAAqB,QAAQ,wCAAuC;AAE7E,SAASC,kBAAkB,QAAQ,gBAAY;AAE/C;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASC,cAAcC,MAAc,EAAEC,SAAiB,EAAEC,OAAe;IAC9E,OAAOP,WAAW,UAAUG,sBACzBK,MAAM,CAAC,CAAC,QAAQ,EAAEH,OAAO,CAAC,EAAEC,UAAU,CAAC,EAAEG,KAAKC,GAAG,CAAC,GAAGD,KAAKE,KAAK,CAACC,OAAOL,YAAY,KAAK,EACxFM,MAAM,CAAC,OACPC,KAAK,CAAC,GAAG;AACd;AAEA,mFAAmF,GACnF,OAAO,SAASC,qBACdV,MAAc,EACdC,SAAiB,EACjBC,OAAe,EACfS,SAAkB;IAElB,MAAMC,YAAY,OAAOD,cAAc,WAAWA,UAAUE,IAAI,GAAGC,WAAW,KAAK;IACnF,IAAI,CAAC,iBAAiBC,IAAI,CAACH,YAAY,OAAO;IAC9C,IAAII;IACJ,IAAI;QACFA,WAAWjB,cAAcC,QAAQC,WAAWC;IAC9C,EAAE,eAAM;QACN,oEAAoE;QACpE,OAAO;IACT;IACA,OAAON,gBAAgBqB,OAAOC,IAAI,CAACN,YAAYK,OAAOC,IAAI,CAACF;AAC7D;AAEA,2EAA2E,GAC3E,OAAO,MAAMG,qBAAmD;IAC9DC,MAAM;IACNC,OAAO;AACT,EAAC;AAED,8EAA8E,GAC9E,OAAO,SAASC,eACdC,KAAmB,EACnBvB,MAAc,EACdC,SAAiB,EACjBC,OAAe;IAEf,OACE,GAAGL,wBAAwB,KAAK,EAAEsB,kBAAkB,CAACI,MAAM,CAAC,CAAC,CAAC,GAC9D,GAAGC,mBAAmBxB,QAAQ,CAAC,EAAEwB,mBAAmBvB,WAAW,CAAC,CAAC,GACjEF,cAAcC,QAAQC,WAAWC;AAErC"}