@aglyn/plugins-commerce 1.0.0-beta.230 → 1.0.0-beta.231

package/src/lib/model/tracking-url.d.ts

@@ -0,0 +1,74 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Carrier tracking links (AGL-3610) — THE one place a carrier name and a
+ * tracking number become a URL a buyer can open.
+ *
+ * SHARED ON PURPOSE. The buyer's shipped email and the guest order-status page
+ * (AGL-3610), the console's fulfillment rows and partial fulfillment
+ * (AGL-3611), and the shipping plugin's label purchase all need the same link
+ * for the same parcel. Import `trackingUrlFor` from
+ * `@aglyn/plugins-commerce/model` rather than writing a second table: two
+ * tables drift, and a buyer whose email and status page disagree about where
+ * their parcel is has been handed two answers to one question.
+ *
+ * The carrier is FREE TEXT on an order (`OrderFulfillment.carrier`, typed by a
+ * merchant or a supplier: "UPS", "ups ground", "Fed Ex", "USPS Priority"), so
+ * `carrierIdFor` matches loosely and returns `null` for anything it does not
+ * know. An unknown carrier gets NO link rather than a guess — a link to the
+ * wrong carrier's tracker is worse than none, because the buyer believes it.
+ *
+ * A fulfillment that already carries a `trackingUrl` (the shipping plugin's
+ * label purchase knows the exact one) wins over a built one:
+ * `fulfillmentTrackingUrl` is the reader every surface should call.
+ */
+export type TrackingCarrierId = 'usps' | 'ups' | 'fedex' | 'dhl' | 'canada-post' | 'royal-mail' | 'australia-post';
+export interface TrackingCarrier {
+    id: TrackingCarrierId;
+    /** How the carrier names itself, for display. */
+    label: string;
+    /** Lower-cased, punctuation-stripped spellings a merchant types. */
+    aliases: readonly string[];
+    /** The public tracker, with the number URL-encoded in place. */
+    url: (trackingNumber: string) => string;
+}
+export declare const TRACKING_CARRIERS: readonly TrackingCarrier[];
+/**
+ * The carrier a free-text name refers to, or `null`. Matches an alias exactly
+ * after squashing, then as a prefix ("UPS Ground", "USPS Priority Mail",
+ * "FedEx 2Day") — never as a substring, so "Pups Express" is not UPS.
+ */
+export declare function carrierIdFor(carrier: string | null | undefined): TrackingCarrierId | null;
+/** Display label for a carrier id, or the merchant's own text. */
+export declare function carrierLabelFor(carrier: string | null | undefined): string;
+/**
+ * The public tracking URL for a parcel, or `null` when the carrier is unknown
+ * or there is no number. Whitespace inside the number is removed (merchants
+ * paste "1Z 999 AA1 01 2345 6784"); everything else is URL-encoded.
+ */
+export declare function trackingUrlFor(carrier: string | null | undefined, trackingNumber: string | null | undefined): string | null;
+/**
+ * The link for one fulfillment: its own stored `trackingUrl` when it is an
+ * `https:` URL, otherwise one built from carrier + number. Anything else in
+ * the stored field (a `javascript:` URL typed into a supplier callback) is
+ * ignored rather than rendered into an email or a page.
+ */
+export declare function fulfillmentTrackingUrl(fulfillment: {
+    carrier?: string | null;
+    trackingNumber?: string | null;
+    trackingUrl?: string | null;
+}): string | null;

package/src/lib/model/tracking-url.js

@@ -0,0 +1,159 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * Carrier tracking links (AGL-3610) — THE one place a carrier name and a
+ * tracking number become a URL a buyer can open.
+ *
+ * SHARED ON PURPOSE. The buyer's shipped email and the guest order-status page
+ * (AGL-3610), the console's fulfillment rows and partial fulfillment
+ * (AGL-3611), and the shipping plugin's label purchase all need the same link
+ * for the same parcel. Import `trackingUrlFor` from
+ * `@aglyn/plugins-commerce/model` rather than writing a second table: two
+ * tables drift, and a buyer whose email and status page disagree about where
+ * their parcel is has been handed two answers to one question.
+ *
+ * The carrier is FREE TEXT on an order (`OrderFulfillment.carrier`, typed by a
+ * merchant or a supplier: "UPS", "ups ground", "Fed Ex", "USPS Priority"), so
+ * `carrierIdFor` matches loosely and returns `null` for anything it does not
+ * know. An unknown carrier gets NO link rather than a guess — a link to the
+ * wrong carrier's tracker is worse than none, because the buyer believes it.
+ *
+ * A fulfillment that already carries a `trackingUrl` (the shipping plugin's
+ * label purchase knows the exact one) wins over a built one:
+ * `fulfillmentTrackingUrl` is the reader every surface should call.
+ */ export const TRACKING_CARRIERS = [
+    {
+        id: 'usps',
+        label: 'USPS',
+        aliases: [
+            'usps',
+            'unitedstatespostalservice',
+            'uspostalservice',
+            'postalservice'
+        ],
+        url: (number)=>`https://tools.usps.com/go/TrackConfirmAction?tLabels=${number}`
+    },
+    {
+        id: 'ups',
+        label: 'UPS',
+        aliases: [
+            'ups',
+            'unitedparcelservice'
+        ],
+        url: (number)=>`https://www.ups.com/track?tracknum=${number}`
+    },
+    {
+        id: 'fedex',
+        label: 'FedEx',
+        aliases: [
+            'fedex',
+            'federalexpress'
+        ],
+        url: (number)=>`https://www.fedex.com/fedextrack/?trknbr=${number}`
+    },
+    {
+        id: 'dhl',
+        label: 'DHL',
+        aliases: [
+            'dhl',
+            'dhlexpress',
+            'dhlecommerce'
+        ],
+        url: (number)=>`https://www.dhl.com/global-en/home/tracking.html?tracking-id=${number}`
+    },
+    {
+        id: 'canada-post',
+        label: 'Canada Post',
+        aliases: [
+            'canadapost',
+            'postescanada',
+            'canpost'
+        ],
+        url: (number)=>`https://www.canadapost-postescanada.ca/track-reperage/en#/search?searchFor=${number}`
+    },
+    {
+        id: 'royal-mail',
+        label: 'Royal Mail',
+        aliases: [
+            'royalmail',
+            'parcelforce'
+        ],
+        url: (number)=>`https://www.royalmail.com/track-your-item#/tracking-results/${number}`
+    },
+    {
+        id: 'australia-post',
+        label: 'Australia Post',
+        aliases: [
+            'australiapost',
+            'auspost',
+            'startrack'
+        ],
+        url: (number)=>`https://auspost.com.au/mypost/track/details/${number}`
+    }
+];
+function squash(value) {
+    return value.toLowerCase().replace(/[^a-z0-9]/g, '');
+}
+/**
+ * The carrier a free-text name refers to, or `null`. Matches an alias exactly
+ * after squashing, then as a prefix ("UPS Ground", "USPS Priority Mail",
+ * "FedEx 2Day") — never as a substring, so "Pups Express" is not UPS.
+ */ export function carrierIdFor(carrier) {
+    const squashed = squash(String(carrier != null ? carrier : ''));
+    if (!squashed) return null;
+    for (const entry of TRACKING_CARRIERS){
+        if (entry.aliases.includes(squashed)) return entry.id;
+    }
+    // Longest alias first, so "uspostalservice" is tried before "ups".
+    const byLength = TRACKING_CARRIERS.flatMap((entry)=>entry.aliases.map((alias)=>({
+                alias,
+                id: entry.id
+            }))).sort((a, b)=>b.alias.length - a.alias.length);
+    for (const { alias, id } of byLength){
+        if (squashed.startsWith(alias)) return id;
+    }
+    return null;
+}
+/** Display label for a carrier id, or the merchant's own text. */ export function carrierLabelFor(carrier) {
+    var _ref;
+    var _TRACKING_CARRIERS_find;
+    const id = carrierIdFor(carrier);
+    return (_ref = (_TRACKING_CARRIERS_find = TRACKING_CARRIERS.find((entry)=>entry.id === id)) == null ? void 0 : _TRACKING_CARRIERS_find.label) != null ? _ref : String(carrier != null ? carrier : '').trim();
+}
+/**
+ * The public tracking URL for a parcel, or `null` when the carrier is unknown
+ * or there is no number. Whitespace inside the number is removed (merchants
+ * paste "1Z 999 AA1 01 2345 6784"); everything else is URL-encoded.
+ */ export function trackingUrlFor(carrier, trackingNumber) {
+    const number = String(trackingNumber != null ? trackingNumber : '').replace(/\s+/g, '');
+    if (!number) return null;
+    const id = carrierIdFor(carrier);
+    const entry = TRACKING_CARRIERS.find((candidate)=>candidate.id === id);
+    return entry ? entry.url(encodeURIComponent(number)) : null;
+}
+/**
+ * The link for one fulfillment: its own stored `trackingUrl` when it is an
+ * `https:` URL, otherwise one built from carrier + number. Anything else in
+ * the stored field (a `javascript:` URL typed into a supplier callback) is
+ * ignored rather than rendered into an email or a page.
+ */ export function fulfillmentTrackingUrl(fulfillment) {
+    var _fulfillment_trackingUrl;
+    const stored = String((_fulfillment_trackingUrl = fulfillment.trackingUrl) != null ? _fulfillment_trackingUrl : '').trim();
+    if (/^https:\/\/[^\s]+$/i.test(stored)) return stored;
+    return trackingUrlFor(fulfillment.carrier, fulfillment.trackingNumber);
+}
+
+//# sourceMappingURL=tracking-url.js.map

package/src/lib/model/tracking-url.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/model/tracking-url.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Carrier tracking links (AGL-3610) — THE one place a carrier name and a\n * tracking number become a URL a buyer can open.\n *\n * SHARED ON PURPOSE. The buyer's shipped email and the guest order-status page\n * (AGL-3610), the console's fulfillment rows and partial fulfillment\n * (AGL-3611), and the shipping plugin's label purchase all need the same link\n * for the same parcel. Import `trackingUrlFor` from\n * `@aglyn/plugins-commerce/model` rather than writing a second table: two\n * tables drift, and a buyer whose email and status page disagree about where\n * their parcel is has been handed two answers to one question.\n *\n * The carrier is FREE TEXT on an order (`OrderFulfillment.carrier`, typed by a\n * merchant or a supplier: \"UPS\", \"ups ground\", \"Fed Ex\", \"USPS Priority\"), so\n * `carrierIdFor` matches loosely and returns `null` for anything it does not\n * know. An unknown carrier gets NO link rather than a guess — a link to the\n * wrong carrier's tracker is worse than none, because the buyer believes it.\n *\n * A fulfillment that already carries a `trackingUrl` (the shipping plugin's\n * label purchase knows the exact one) wins over a built one:\n * `fulfillmentTrackingUrl` is the reader every surface should call.\n */\n\nexport type TrackingCarrierId =\n  | 'usps'\n  | 'ups'\n  | 'fedex'\n  | 'dhl'\n  | 'canada-post'\n  | 'royal-mail'\n  | 'australia-post'\n\nexport interface TrackingCarrier {\n  id: TrackingCarrierId\n  /** How the carrier names itself, for display. */\n  label: string\n  /** Lower-cased, punctuation-stripped spellings a merchant types. */\n  aliases: readonly string[]\n  /** The public tracker, with the number URL-encoded in place. */\n  url: (trackingNumber: string) => string\n}\n\nexport const TRACKING_CARRIERS: readonly TrackingCarrier[] = [\n  {\n    id: 'usps',\n    label: 'USPS',\n    aliases: ['usps', 'unitedstatespostalservice', 'uspostalservice', 'postalservice'],\n    url: (number) =>\n      `https://tools.usps.com/go/TrackConfirmAction?tLabels=${number}`,\n  },\n  {\n    id: 'ups',\n    label: 'UPS',\n    aliases: ['ups', 'unitedparcelservice'],\n    url: (number) => `https://www.ups.com/track?tracknum=${number}`,\n  },\n  {\n    id: 'fedex',\n    label: 'FedEx',\n    aliases: ['fedex', 'federalexpress'],\n    url: (number) => `https://www.fedex.com/fedextrack/?trknbr=${number}`,\n  },\n  {\n    id: 'dhl',\n    label: 'DHL',\n    aliases: ['dhl', 'dhlexpress', 'dhlecommerce'],\n    url: (number) =>\n      `https://www.dhl.com/global-en/home/tracking.html?tracking-id=${number}`,\n  },\n  {\n    id: 'canada-post',\n    label: 'Canada Post',\n    aliases: ['canadapost', 'postescanada', 'canpost'],\n    url: (number) =>\n      `https://www.canadapost-postescanada.ca/track-reperage/en#/search?searchFor=${number}`,\n  },\n  {\n    id: 'royal-mail',\n    label: 'Royal Mail',\n    aliases: ['royalmail', 'parcelforce'],\n    url: (number) =>\n      `https://www.royalmail.com/track-your-item#/tracking-results/${number}`,\n  },\n  {\n    id: 'australia-post',\n    label: 'Australia Post',\n    aliases: ['australiapost', 'auspost', 'startrack'],\n    url: (number) => `https://auspost.com.au/mypost/track/details/${number}`,\n  },\n]\n\nfunction squash(value: string): string {\n  return value.toLowerCase().replace(/[^a-z0-9]/g, '')\n}\n\n/**\n * The carrier a free-text name refers to, or `null`. Matches an alias exactly\n * after squashing, then as a prefix (\"UPS Ground\", \"USPS Priority Mail\",\n * \"FedEx 2Day\") — never as a substring, so \"Pups Express\" is not UPS.\n */\nexport function carrierIdFor(\n  carrier: string | null | undefined,\n): TrackingCarrierId | null {\n  const squashed = squash(String(carrier ?? ''))\n  if (!squashed) return null\n  for (const entry of TRACKING_CARRIERS) {\n    if (entry.aliases.includes(squashed)) return entry.id\n  }\n  // Longest alias first, so \"uspostalservice\" is tried before \"ups\".\n  const byLength = TRACKING_CARRIERS.flatMap((entry) =>\n    entry.aliases.map((alias) => ({ alias, id: entry.id })),\n  ).sort((a, b) => b.alias.length - a.alias.length)\n  for (const { alias, id } of byLength) {\n    if (squashed.startsWith(alias)) return id\n  }\n  return null\n}\n\n/** Display label for a carrier id, or the merchant's own text. */\nexport function carrierLabelFor(carrier: string | null | undefined): string {\n  const id = carrierIdFor(carrier)\n  return (\n    TRACKING_CARRIERS.find((entry) => entry.id === id)?.label ??\n    String(carrier ?? '').trim()\n  )\n}\n\n/**\n * The public tracking URL for a parcel, or `null` when the carrier is unknown\n * or there is no number. Whitespace inside the number is removed (merchants\n * paste \"1Z 999 AA1 01 2345 6784\"); everything else is URL-encoded.\n */\nexport function trackingUrlFor(\n  carrier: string | null | undefined,\n  trackingNumber: string | null | undefined,\n): string | null {\n  const number = String(trackingNumber ?? '').replace(/\\s+/g, '')\n  if (!number) return null\n  const id = carrierIdFor(carrier)\n  const entry = TRACKING_CARRIERS.find((candidate) => candidate.id === id)\n  return entry ? entry.url(encodeURIComponent(number)) : null\n}\n\n/**\n * The link for one fulfillment: its own stored `trackingUrl` when it is an\n * `https:` URL, otherwise one built from carrier + number. Anything else in\n * the stored field (a `javascript:` URL typed into a supplier callback) is\n * ignored rather than rendered into an email or a page.\n */\nexport function fulfillmentTrackingUrl(fulfillment: {\n  carrier?: string | null\n  trackingNumber?: string | null\n  trackingUrl?: string | null\n}): string | null {\n  const stored = String(fulfillment.trackingUrl ?? '').trim()\n  if (/^https:\\/\\/[^\\s]+$/i.test(stored)) return stored\n  return trackingUrlFor(fulfillment.carrier, fulfillment.trackingNumber)\n}\n"],"names":["TRACKING_CARRIERS","id","label","aliases","url","number","squash","value","toLowerCase","replace","carrierIdFor","carrier","squashed","String","entry","includes","byLength","flatMap","map","alias","sort","a","b","length","startsWith","carrierLabelFor","find","trim","trackingUrlFor","trackingNumber","candidate","encodeURIComponent","fulfillmentTrackingUrl","fulfillment","stored","trackingUrl","test"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;CAqBC,GAqBD,OAAO,MAAMA,oBAAgD;IAC3D;QACEC,IAAI;QACJC,OAAO;QACPC,SAAS;YAAC;YAAQ;YAA6B;YAAmB;SAAgB;QAClFC,KAAK,CAACC,SACJ,CAAC,qDAAqD,EAAEA,QAAQ;IACpE;IACA;QACEJ,IAAI;QACJC,OAAO;QACPC,SAAS;YAAC;YAAO;SAAsB;QACvCC,KAAK,CAACC,SAAW,CAAC,mCAAmC,EAAEA,QAAQ;IACjE;IACA;QACEJ,IAAI;QACJC,OAAO;QACPC,SAAS;YAAC;YAAS;SAAiB;QACpCC,KAAK,CAACC,SAAW,CAAC,yCAAyC,EAAEA,QAAQ;IACvE;IACA;QACEJ,IAAI;QACJC,OAAO;QACPC,SAAS;YAAC;YAAO;YAAc;SAAe;QAC9CC,KAAK,CAACC,SACJ,CAAC,6DAA6D,EAAEA,QAAQ;IAC5E;IACA;QACEJ,IAAI;QACJC,OAAO;QACPC,SAAS;YAAC;YAAc;YAAgB;SAAU;QAClDC,KAAK,CAACC,SACJ,CAAC,2EAA2E,EAAEA,QAAQ;IAC1F;IACA;QACEJ,IAAI;QACJC,OAAO;QACPC,SAAS;YAAC;YAAa;SAAc;QACrCC,KAAK,CAACC,SACJ,CAAC,4DAA4D,EAAEA,QAAQ;IAC3E;IACA;QACEJ,IAAI;QACJC,OAAO;QACPC,SAAS;YAAC;YAAiB;YAAW;SAAY;QAClDC,KAAK,CAACC,SAAW,CAAC,4CAA4C,EAAEA,QAAQ;IAC1E;CACD,CAAA;AAED,SAASC,OAAOC,KAAa;IAC3B,OAAOA,MAAMC,WAAW,GAAGC,OAAO,CAAC,cAAc;AACnD;AAEA;;;;CAIC,GACD,OAAO,SAASC,aACdC,OAAkC;IAElC,MAAMC,WAAWN,OAAOO,OAAOF,kBAAAA,UAAW;IAC1C,IAAI,CAACC,UAAU,OAAO;IACtB,KAAK,MAAME,SAASd,kBAAmB;QACrC,IAAIc,MAAMX,OAAO,CAACY,QAAQ,CAACH,WAAW,OAAOE,MAAMb,EAAE;IACvD;IACA,mEAAmE;IACnE,MAAMe,WAAWhB,kBAAkBiB,OAAO,CAAC,CAACH,QAC1CA,MAAMX,OAAO,CAACe,GAAG,CAAC,CAACC,QAAW,CAAA;gBAAEA;gBAAOlB,IAAIa,MAAMb,EAAE;YAAC,CAAA,IACpDmB,IAAI,CAAC,CAACC,GAAGC,IAAMA,EAAEH,KAAK,CAACI,MAAM,GAAGF,EAAEF,KAAK,CAACI,MAAM;IAChD,KAAK,MAAM,EAAEJ,KAAK,EAAElB,EAAE,EAAE,IAAIe,SAAU;QACpC,IAAIJ,SAASY,UAAU,CAACL,QAAQ,OAAOlB;IACzC;IACA,OAAO;AACT;AAEA,gEAAgE,GAChE,OAAO,SAASwB,gBAAgBd,OAAkC;;QAG9DX;IAFF,MAAMC,KAAKS,aAAaC;IACxB,gBACEX,0BAAAA,kBAAkB0B,IAAI,CAAC,CAACZ,QAAUA,MAAMb,EAAE,KAAKA,wBAA/CD,wBAAoDE,KAAK,mBACzDW,OAAOF,kBAAAA,UAAW,IAAIgB,IAAI;AAE9B;AAEA;;;;CAIC,GACD,OAAO,SAASC,eACdjB,OAAkC,EAClCkB,cAAyC;IAEzC,MAAMxB,SAASQ,OAAOgB,yBAAAA,iBAAkB,IAAIpB,OAAO,CAAC,QAAQ;IAC5D,IAAI,CAACJ,QAAQ,OAAO;IACpB,MAAMJ,KAAKS,aAAaC;IACxB,MAAMG,QAAQd,kBAAkB0B,IAAI,CAAC,CAACI,YAAcA,UAAU7B,EAAE,KAAKA;IACrE,OAAOa,QAAQA,MAAMV,GAAG,CAAC2B,mBAAmB1B,WAAW;AACzD;AAEA;;;;;CAKC,GACD,OAAO,SAAS2B,uBAAuBC,WAItC;QACuBA;IAAtB,MAAMC,SAASrB,QAAOoB,2BAAAA,YAAYE,WAAW,YAAvBF,2BAA2B,IAAIN,IAAI;IACzD,IAAI,sBAAsBS,IAAI,CAACF,SAAS,OAAOA;IAC/C,OAAON,eAAeK,YAAYtB,OAAO,EAAEsB,YAAYJ,cAAc;AACvE"}

package/src/lib/plugin-config.d.ts

@@ -50,6 +50,19 @@ export declare const POS_MAX_DISCOUNT_PCT_DEFAULT = 100;
  * settings doc directly.
  */
 export declare const COMMERCE_CONFIG_SCHEMA: PluginConfigSchema;
+/** The register's tip, receipt and display settings, resolved for one site. */
+export interface PosRegisterSettings {
+    tippingEnabled: boolean;
+    tipPercentages: number[];
+    receiptDefault: 'ask' | 'print' | 'none';
+    displayMessage: string;
+    displayMarketingOptIn: boolean;
+}
+/**
+ * The register settings out of a merged commerce config, with every value
+ * typed and bounded so the register, the display and the server agree.
+ */
+export declare function posRegisterSettings(config: Record<string, unknown> | null | undefined): PosRegisterSettings;
 /**
  * The ceiling for one org, read defensively (AGL-2161).
  *

package/src/lib/plugin-config.js

@@ -13,7 +13,10 @@
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  * See the License for the specific language governing permissions and
  * limitations under the License.
- */ /**
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import { posTipPercentages } from "./model/commerce-pos.js";
+import { POS_OPS_CONFIG_DEFAULTS, POS_OPS_CONFIG_FIELDS } from "./pos-ops-config.js";
+/**
  * The ceiling a register may discount to, when the merchant has not set one
  * (AGL-2161).
  *
@@ -55,12 +58,81 @@
             min: 0,
             max: 100,
             description: 'The largest discount the point of sale will accept on a sale. ' + 'A register that asks for more is refused, and the sale is not rung ' + 'up. Set to 0 to stop staff discounting at the register entirely.'
-        }
+        },
+        // THE REGISTER'S TIPS, RECEIPTS AND CUSTOMER DISPLAY (AGL-3607, AGL-3608).
+        // Off by default: a store that never asked for tips does not start
+        // asking its customers for one on the day this ships.
+        {
+            key: 'posTippingEnabled',
+            label: 'Ask for tips at the register',
+            type: 'boolean',
+            description: 'Offers the customer a tip on the card reader and on the customer ' + 'display. Tips are yours: they are not counted as sales and carry no ' + 'platform fee.'
+        },
+        {
+            key: 'posTipPercentages',
+            label: 'Tip choices (%)',
+            type: 'string',
+            description: 'Up to four percentages, separated by commas, shown to the customer ' + 'as tip buttons. The customer can also enter an amount or choose no tip.'
+        },
+        {
+            key: 'posReceiptDefault',
+            label: 'Receipts at the register',
+            type: 'select',
+            options: [
+                {
+                    value: 'ask',
+                    label: 'Ask the customer'
+                },
+                {
+                    value: 'print',
+                    label: 'Always print'
+                },
+                {
+                    value: 'none',
+                    label: 'No receipt unless asked'
+                }
+            ],
+            description: 'With a customer display paired, "Ask the customer" lets them choose ' + 'email, print or no receipt on their own screen.'
+        },
+        {
+            key: 'posDisplayMessage',
+            label: 'Customer display welcome',
+            type: 'string',
+            description: 'The line the customer display shows under your store name between ' + 'sales. Leave blank for "Welcome".'
+        },
+        {
+            key: 'posDisplayMarketingOptIn',
+            label: 'Offer email sign-up on the customer display',
+            type: 'boolean',
+            description: 'Shows an unticked "Email me news and offers" box when a customer ' + 'asks for an email receipt. Only a ticked box adds them to your ' + 'marketing audience.'
+        },
+        // RUNNING THE REGISTER (AGL-3609): shifts, refund limits, the idle lock
+        // and what a printed receipt carries.
+        ...POS_OPS_CONFIG_FIELDS
     ],
-    defaults: {
-        posMaxDiscountPct: POS_MAX_DISCOUNT_PCT_DEFAULT
-    }
+    defaults: _extends({
+        posMaxDiscountPct: POS_MAX_DISCOUNT_PCT_DEFAULT,
+        posTippingEnabled: false,
+        posTipPercentages: '15, 18, 20, 25',
+        posReceiptDefault: 'ask',
+        posDisplayMessage: '',
+        posDisplayMarketingOptIn: true
+    }, POS_OPS_CONFIG_DEFAULTS)
 };
+/**
+ * The register settings out of a merged commerce config, with every value
+ * typed and bounded so the register, the display and the server agree.
+ */ export function posRegisterSettings(config) {
+    var _ref, _ref1;
+    const receipt = String((_ref = config == null ? void 0 : config['posReceiptDefault']) != null ? _ref : 'ask');
+    return {
+        tippingEnabled: (config == null ? void 0 : config['posTippingEnabled']) === true,
+        tipPercentages: posTipPercentages(config == null ? void 0 : config['posTipPercentages']),
+        receiptDefault: receipt === 'print' || receipt === 'none' ? receipt : 'ask',
+        displayMessage: String((_ref1 = config == null ? void 0 : config['posDisplayMessage']) != null ? _ref1 : '').trim().slice(0, 120),
+        displayMarketingOptIn: (config == null ? void 0 : config['posDisplayMarketingOptIn']) !== false
+    };
+}
 /**
  * The ceiling for one org, read defensively (AGL-2161).
  *

package/src/lib/plugin-config.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/plugin-config.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginConfigSchema } from '@aglyn/aglyn'\n\n/**\n * The ceiling a register may discount to, when the merchant has not set one\n * (AGL-2161).\n *\n * 100, i.e. today's behaviour exactly. That is deliberate and is the one\n * number in this fix that is NOT a safety judgement:\n *\n * - A full comp is a legitimate register operation — a damaged item, a\n *   goodwill gesture, a staff meal — and every merchant on the platform has\n *   had it since POS shipped.\n * - Any lower default would change what merchants charge their own customers\n *   on the day it deployed, without them asking. Picking that number is a\n *   merchant policy decision, not a bug fix, and inventing one here would be\n *   the same class of mistake as inventing a billing rate.\n *\n * What AGL-2161 actually fixes is that there was no ceiling to set and no\n * refusal when one was exceeded: the request body's `discountPct` was clamped\n * into range and rung up, so a register sending `150` silently comped the\n * whole sale. The ceiling is now real, enforced server-side, refused rather\n * than clamped, and one config value away from being lower.\n */\nexport const POS_MAX_DISCOUNT_PCT_DEFAULT = 100\n\n/**\n * Commerce plugin config schema (AGL-428 framework, AGL-2161 adopter).\n *\n * PURE DATA (type-only aglyn import), the same shape as bookings': the client\n * barrel registers it via '@aglyn/aglyn' and the /server entry via\n * '@aglyn/aglyn/server', so neither bundle drags in the other's barrel.\n *\n * `min`/`max` are not decoration — `mergePluginConfig` coerces a stored value\n * into the declared range and falls back to the default on junk, so the\n * ceiling itself cannot be forged out of bounds by a manager editing the\n * settings doc directly.\n */\nexport const COMMERCE_CONFIG_SCHEMA: PluginConfigSchema = {\n  pluginId: 'commerce',\n  fields: [\n    {\n      key: 'posMaxDiscountPct',\n      label: 'Maximum register discount (%)',\n      type: 'number',\n      min: 0,\n      max: 100,\n      description:\n        'The largest discount the point of sale will accept on a sale. ' +\n        'A register that asks for more is refused, and the sale is not rung ' +\n        'up. Set to 0 to stop staff discounting at the register entirely.',\n    },\n  ],\n  defaults: { posMaxDiscountPct: POS_MAX_DISCOUNT_PCT_DEFAULT },\n}\n\n/**\n * The ceiling for one org, read defensively (AGL-2161).\n *\n * Spelled here rather than at the call site so the POS route and any later\n * reader cannot disagree about what a missing or malformed value means. The\n * framework has already clamped and defaulted by the time this runs; the\n * second `Number.isFinite` guard is for the schema-less case, where\n * `getPluginConfig` returns the raw doc untouched.\n */\nexport function posMaxDiscountPct(\n  config: Record<string, unknown> | null | undefined,\n): number {\n  const raw = Number(config?.['posMaxDiscountPct'])\n  if (!Number.isFinite(raw)) return POS_MAX_DISCOUNT_PCT_DEFAULT\n  return Math.min(100, Math.max(0, raw))\n}\n"],"names":["POS_MAX_DISCOUNT_PCT_DEFAULT","COMMERCE_CONFIG_SCHEMA","pluginId","fields","key","label","type","min","max","description","defaults","posMaxDiscountPct","config","raw","Number","isFinite","Math"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAID;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,MAAMA,+BAA+B,IAAG;AAE/C;;;;;;;;;;;CAWC,GACD,OAAO,MAAMC,yBAA6C;IACxDC,UAAU;IACVC,QAAQ;QACN;YACEC,KAAK;YACLC,OAAO;YACPC,MAAM;YACNC,KAAK;YACLC,KAAK;YACLC,aACE,mEACA,wEACA;QACJ;KACD;IACDC,UAAU;QAAEC,mBAAmBX;IAA6B;AAC9D,EAAC;AAED;;;;;;;;CAQC,GACD,OAAO,SAASW,kBACdC,MAAkD;IAElD,MAAMC,MAAMC,OAAOF,0BAAAA,MAAQ,CAAC,oBAAoB;IAChD,IAAI,CAACE,OAAOC,QAAQ,CAACF,MAAM,OAAOb;IAClC,OAAOgB,KAAKT,GAAG,CAAC,KAAKS,KAAKR,GAAG,CAAC,GAAGK;AACnC"}
+{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/plugin-config.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginConfigSchema } from '@aglyn/aglyn'\nimport { posTipPercentages } from './model/commerce-pos'\nimport { POS_OPS_CONFIG_DEFAULTS, POS_OPS_CONFIG_FIELDS } from './pos-ops-config'\n\n/**\n * The ceiling a register may discount to, when the merchant has not set one\n * (AGL-2161).\n *\n * 100, i.e. today's behaviour exactly. That is deliberate and is the one\n * number in this fix that is NOT a safety judgement:\n *\n * - A full comp is a legitimate register operation — a damaged item, a\n *   goodwill gesture, a staff meal — and every merchant on the platform has\n *   had it since POS shipped.\n * - Any lower default would change what merchants charge their own customers\n *   on the day it deployed, without them asking. Picking that number is a\n *   merchant policy decision, not a bug fix, and inventing one here would be\n *   the same class of mistake as inventing a billing rate.\n *\n * What AGL-2161 actually fixes is that there was no ceiling to set and no\n * refusal when one was exceeded: the request body's `discountPct` was clamped\n * into range and rung up, so a register sending `150` silently comped the\n * whole sale. The ceiling is now real, enforced server-side, refused rather\n * than clamped, and one config value away from being lower.\n */\nexport const POS_MAX_DISCOUNT_PCT_DEFAULT = 100\n\n/**\n * Commerce plugin config schema (AGL-428 framework, AGL-2161 adopter).\n *\n * PURE DATA (type-only aglyn import), the same shape as bookings': the client\n * barrel registers it via '@aglyn/aglyn' and the /server entry via\n * '@aglyn/aglyn/server', so neither bundle drags in the other's barrel.\n *\n * `min`/`max` are not decoration — `mergePluginConfig` coerces a stored value\n * into the declared range and falls back to the default on junk, so the\n * ceiling itself cannot be forged out of bounds by a manager editing the\n * settings doc directly.\n */\nexport const COMMERCE_CONFIG_SCHEMA: PluginConfigSchema = {\n  pluginId: 'commerce',\n  fields: [\n    {\n      key: 'posMaxDiscountPct',\n      label: 'Maximum register discount (%)',\n      type: 'number',\n      min: 0,\n      max: 100,\n      description:\n        'The largest discount the point of sale will accept on a sale. ' +\n        'A register that asks for more is refused, and the sale is not rung ' +\n        'up. Set to 0 to stop staff discounting at the register entirely.',\n    },\n    // THE REGISTER'S TIPS, RECEIPTS AND CUSTOMER DISPLAY (AGL-3607, AGL-3608).\n    // Off by default: a store that never asked for tips does not start\n    // asking its customers for one on the day this ships.\n    {\n      key: 'posTippingEnabled',\n      label: 'Ask for tips at the register',\n      type: 'boolean',\n      description:\n        'Offers the customer a tip on the card reader and on the customer ' +\n        'display. Tips are yours: they are not counted as sales and carry no ' +\n        'platform fee.',\n    },\n    {\n      key: 'posTipPercentages',\n      label: 'Tip choices (%)',\n      type: 'string',\n      description:\n        'Up to four percentages, separated by commas, shown to the customer ' +\n        'as tip buttons. The customer can also enter an amount or choose no tip.',\n    },\n    {\n      key: 'posReceiptDefault',\n      label: 'Receipts at the register',\n      type: 'select',\n      options: [\n        { value: 'ask', label: 'Ask the customer' },\n        { value: 'print', label: 'Always print' },\n        { value: 'none', label: 'No receipt unless asked' },\n      ],\n      description:\n        'With a customer display paired, \"Ask the customer\" lets them choose ' +\n        'email, print or no receipt on their own screen.',\n    },\n    {\n      key: 'posDisplayMessage',\n      label: 'Customer display welcome',\n      type: 'string',\n      description:\n        'The line the customer display shows under your store name between ' +\n        'sales. Leave blank for \"Welcome\".',\n    },\n    {\n      key: 'posDisplayMarketingOptIn',\n      label: 'Offer email sign-up on the customer display',\n      type: 'boolean',\n      description:\n        'Shows an unticked \"Email me news and offers\" box when a customer ' +\n        'asks for an email receipt. Only a ticked box adds them to your ' +\n        'marketing audience.',\n    },\n    // RUNNING THE REGISTER (AGL-3609): shifts, refund limits, the idle lock\n    // and what a printed receipt carries.\n    ...POS_OPS_CONFIG_FIELDS,\n  ],\n  defaults: {\n    posMaxDiscountPct: POS_MAX_DISCOUNT_PCT_DEFAULT,\n    posTippingEnabled: false,\n    posTipPercentages: '15, 18, 20, 25',\n    posReceiptDefault: 'ask',\n    posDisplayMessage: '',\n    posDisplayMarketingOptIn: true,\n    ...POS_OPS_CONFIG_DEFAULTS,\n  },\n}\n\n/** The register's tip, receipt and display settings, resolved for one site. */\nexport interface PosRegisterSettings {\n  tippingEnabled: boolean\n  tipPercentages: number[]\n  receiptDefault: 'ask' | 'print' | 'none'\n  displayMessage: string\n  displayMarketingOptIn: boolean\n}\n\n/**\n * The register settings out of a merged commerce config, with every value\n * typed and bounded so the register, the display and the server agree.\n */\nexport function posRegisterSettings(\n  config: Record<string, unknown> | null | undefined,\n): PosRegisterSettings {\n  const receipt = String(config?.['posReceiptDefault'] ?? 'ask')\n  return {\n    tippingEnabled: config?.['posTippingEnabled'] === true,\n    tipPercentages: posTipPercentages(config?.['posTipPercentages']),\n    receiptDefault:\n      receipt === 'print' || receipt === 'none' ? receipt : 'ask',\n    displayMessage: String(config?.['posDisplayMessage'] ?? '').trim().slice(0, 120),\n    displayMarketingOptIn: config?.['posDisplayMarketingOptIn'] !== false,\n  }\n}\n\n/**\n * The ceiling for one org, read defensively (AGL-2161).\n *\n * Spelled here rather than at the call site so the POS route and any later\n * reader cannot disagree about what a missing or malformed value means. The\n * framework has already clamped and defaulted by the time this runs; the\n * second `Number.isFinite` guard is for the schema-less case, where\n * `getPluginConfig` returns the raw doc untouched.\n */\nexport function posMaxDiscountPct(\n  config: Record<string, unknown> | null | undefined,\n): number {\n  const raw = Number(config?.['posMaxDiscountPct'])\n  if (!Number.isFinite(raw)) return POS_MAX_DISCOUNT_PCT_DEFAULT\n  return Math.min(100, Math.max(0, raw))\n}\n"],"names":["posTipPercentages","POS_OPS_CONFIG_DEFAULTS","POS_OPS_CONFIG_FIELDS","POS_MAX_DISCOUNT_PCT_DEFAULT","COMMERCE_CONFIG_SCHEMA","pluginId","fields","key","label","type","min","max","description","options","value","defaults","posMaxDiscountPct","posTippingEnabled","posReceiptDefault","posDisplayMessage","posDisplayMarketingOptIn","posRegisterSettings","config","receipt","String","tippingEnabled","tipPercentages","receiptDefault","displayMessage","trim","slice","displayMarketingOptIn","raw","Number","isFinite","Math"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SAASA,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,uBAAuB,EAAEC,qBAAqB,QAAQ,sBAAkB;AAEjF;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,MAAMC,+BAA+B,IAAG;AAE/C;;;;;;;;;;;CAWC,GACD,OAAO,MAAMC,yBAA6C;IACxDC,UAAU;IACVC,QAAQ;QACN;YACEC,KAAK;YACLC,OAAO;YACPC,MAAM;YACNC,KAAK;YACLC,KAAK;YACLC,aACE,mEACA,wEACA;QACJ;QACA,2EAA2E;QAC3E,mEAAmE;QACnE,sDAAsD;QACtD;YACEL,KAAK;YACLC,OAAO;YACPC,MAAM;YACNG,aACE,sEACA,yEACA;QACJ;QACA;YACEL,KAAK;YACLC,OAAO;YACPC,MAAM;YACNG,aACE,wEACA;QACJ;QACA;YACEL,KAAK;YACLC,OAAO;YACPC,MAAM;YACNI,SAAS;gBACP;oBAAEC,OAAO;oBAAON,OAAO;gBAAmB;gBAC1C;oBAAEM,OAAO;oBAASN,OAAO;gBAAe;gBACxC;oBAAEM,OAAO;oBAAQN,OAAO;gBAA0B;aACnD;YACDI,aACE,yEACA;QACJ;QACA;YACEL,KAAK;YACLC,OAAO;YACPC,MAAM;YACNG,aACE,uEACA;QACJ;QACA;YACEL,KAAK;YACLC,OAAO;YACPC,MAAM;YACNG,aACE,sEACA,oEACA;QACJ;QACA,wEAAwE;QACxE,sCAAsC;WACnCV;KACJ;IACDa,UAAU;QACRC,mBAAmBb;QACnBc,mBAAmB;QACnBjB,mBAAmB;QACnBkB,mBAAmB;QACnBC,mBAAmB;QACnBC,0BAA0B;OACvBnB;AAEP,EAAC;AAWD;;;CAGC,GACD,OAAO,SAASoB,oBACdC,MAAkD;;IAElD,MAAMC,UAAUC,eAAOF,0BAAAA,MAAQ,CAAC,oBAAoB,mBAAI;IACxD,OAAO;QACLG,gBAAgBH,CAAAA,0BAAAA,MAAQ,CAAC,oBAAoB,MAAK;QAClDI,gBAAgB1B,kBAAkBsB,0BAAAA,MAAQ,CAAC,oBAAoB;QAC/DK,gBACEJ,YAAY,WAAWA,YAAY,SAASA,UAAU;QACxDK,gBAAgBJ,gBAAOF,0BAAAA,MAAQ,CAAC,oBAAoB,oBAAI,IAAIO,IAAI,GAAGC,KAAK,CAAC,GAAG;QAC5EC,uBAAuBT,CAAAA,0BAAAA,MAAQ,CAAC,2BAA2B,MAAK;IAClE;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,SAASN,kBACdM,MAAkD;IAElD,MAAMU,MAAMC,OAAOX,0BAAAA,MAAQ,CAAC,oBAAoB;IAChD,IAAI,CAACW,OAAOC,QAAQ,CAACF,MAAM,OAAO7B;IAClC,OAAOgC,KAAKzB,GAAG,CAAC,KAAKyB,KAAKxB,GAAG,CAAC,GAAGqB;AACnC"}

package/src/lib/plugin.js

@@ -17,6 +17,7 @@
 import { mdiStorefrontOutline } from "@aglyn/shared-data-mdi";
 import { lazy } from "react";
 const PosConsolePage = lazy(()=>import("./components/console/pos-page.component.js"));
+/** The customer display (AGL-3608): loads only on the public page that shows it. */ const PosDisplayPage = lazy(()=>import("./components/console/pos-display-page.component.js"));
 const CommerceGlanceCard = lazy(()=>import("./components/console/commerce-glance-card.component.js"));
 const NewestSiteUsersCard = lazy(()=>import("./components/console/newest-site-users-card.component.js"));
 const SiteMemberPurchases = lazy(()=>import("./components/console/site-member-purchases.component.js"));
@@ -26,6 +27,9 @@ import { COMMERCE_PERMISSIONS } from "./model/plugin-permissions.js";
 import { registerCommerceRecordLists } from "./model/commerce-record-lists.js";
 import { registerCommerceRecordRoutes } from "./model/commerce-record-routes.js";
 import { registerCommerceZones } from "./components/console/product-zones.js";
+import { registerCommerceOrderZones } from "./components/console/order-zones.js";
+import { registerCommerceReturnZones } from "./components/console/return-zones.js";
+import { registerCommerceStoreZones } from "./components/console/store-zones.js";
 import { registerCommerceTransferUi } from "./transfer/register-transfer-ui.js";
 import { COMMERCE_SEARCH_SOURCES } from "./model/commerce-search-sources.js";
 import { COMMERCE_CONFIG_SCHEMA } from "./plugin-config.js";
@@ -46,6 +50,14 @@ import { COMMERCE_CONFIG_SCHEMA } from "./plugin-config.js";
     // The zones its product editor, products hub and CSV import dialog host,
     // with the props each hands a widget (AGL-2916, AGL-3080).
     registerCommerceZones();
+    // …and the order dialog's two (AGL-3611), where a shipping plugin's widget
+    // buys a label and records the shipment through the dialog's own route.
+    registerCommerceOrderZones();
+    // …and the return dialog's (AGL-3611), where a shipping plugin's widget
+    // buys the buyer a return label and attaches it through this plugin's route.
+    registerCommerceReturnZones();
+    // The orders list's bulk actions and the store's Settings (AGL-3612).
+    registerCommerceStoreZones();
     // Its import and export resources' names and the products wizard's own
     // step (AGL-3531); the server halves register from the console's server
     // declarations.
@@ -60,6 +72,17 @@ import { COMMERCE_CONFIG_SCHEMA } from "./plugin-config.js";
         pluginId: BUNDLE_ID,
         displayName: 'Commerce',
         searchSources: COMMERCE_SEARCH_SOURCES,
+        // The screen a register turns toward its customer (AGL-3608), at
+        // `/kiosk/commerce/pos-display`. No staff session: the device proves
+        // itself with the display token it got by pairing, and
+        // `server/pos-display.ts` refuses every read without one.
+        publicPages: [
+            {
+                path: '/pos-display',
+                title: 'Customer display',
+                Component: PosDisplayPage
+            }
+        ],
         // Dashboard/analytics glance card (AGL-419): rendered through the
         // shell's 'commerceGlance' widget slot.
         widgets: [

package/src/lib/plugin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiStorefrontOutline } from '@aglyn/shared-data-mdi'\nimport { lazy } from 'react'\nconst PosConsolePage = lazy(() => import('./components/console/pos-page.component'))\nconst CommerceGlanceCard = lazy(\n  () => import('./components/console/commerce-glance-card.component'),\n)\nconst NewestSiteUsersCard = lazy(\n  () => import('./components/console/newest-site-users-card.component'),\n)\nconst SiteMemberPurchases = lazy(\n  () => import('./components/console/site-member-purchases.component'),\n)\nimport { COMMERCE_CONSOLE_SECTIONS } from './components/commerce-console-sections'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { COMMERCE_PERMISSIONS } from './model/plugin-permissions'\nimport { registerCommerceRecordLists } from './model/commerce-record-lists'\nimport { registerCommerceRecordRoutes } from './model/commerce-record-routes'\nimport { registerCommerceZones } from './components/console/product-zones'\nimport { registerCommerceTransferUi } from './transfer/register-transfer-ui'\nimport { COMMERCE_SEARCH_SOURCES } from './model/commerce-search-sources'\nimport { COMMERCE_CONFIG_SCHEMA } from './plugin-config'\n\n/** Code-split: the Products console page only loads when opened. */\nconst CommerceConsolePage = lazy(() => import('./components/commerce-console-page'))\n\n/**\n * Console half (AGL-395): registers the Products nav item in the\n * ConsoleExtension registry so the commerce console surface is owned by the\n * plugin, like events and email. The page body still lives in the console\n * app (`/[hostId]/products`): its product editor depends on the app's media\n * browser, which transitively pulls in the org/session context, so a full\n * body relocation needs a plugin-consumable media-picker context first —\n * tracked as follow-up. The nav item omits a `Component`, so the shell's\n * nav renders the link and the existing named route serves the page.\n */\nexport function registerCommerceConsole(): void {\n  // Where a product is read, for surfaces outside this plugin (AGL-3080).\n  registerCommerceRecordRoutes()\n  registerCommerceRecordLists()\n  // The zones its product editor, products hub and CSV import dialog host,\n  // with the props each hands a widget (AGL-2916, AGL-3080).\n  registerCommerceZones()\n  // Its import and export resources' names and the products wizard's own\n  // step (AGL-3531); the server halves register from the console's server\n  // declarations.\n  registerCommerceTransferUi()\n  // Plugin-declared permissions (AGL-435): tier defaults ride every\n  // resolved role set; custom roles override key-by-key.\n  Aglyn.registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // Register discount ceiling (AGL-2161) — the generic settings card renders\n  // it from this schema, so there is no bespoke UI to keep in sync.\n  Aglyn.registerPluginConfigSchema(COMMERCE_CONFIG_SCHEMA)\n  Aglyn.registerConsoleExtension({\n    pluginId: BUNDLE_ID,\n    displayName: 'Commerce',\n    searchSources: COMMERCE_SEARCH_SOURCES,\n    // Dashboard/analytics glance card (AGL-419): rendered through the\n    // shell's 'commerceGlance' widget slot.\n    widgets: [\n      {\n        slot: 'commerceGlance',\n        widgetId: 'commerce-glance',\n        title: 'Commerce',\n        Component: CommerceGlanceCard,\n      },\n      // What a site user bought — lifetime total, orders and subscriptions —\n      // in their drawer on the site's Users page: the orders and\n      // subscriptions are this plugin's.\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.siteMember,\n        widgetId: 'commerce-site-member-purchases',\n        title: 'Purchases',\n        Component: SiteMemberPurchases,\n      },\n    ],\n    navItems: [\n      {\n        label: 'Products',\n        href: '/products',\n        icon: { path: mdiStorefrontOutline.path },\n        // Sections as ROUTES (AGL-2501): `/products/orders` and friends are\n        // real URLs the shell resolves and gates, so the page mounts the one\n        // being read instead of subscribing all six.\n        sections: COMMERCE_CONSOLE_SECTIONS,\n        header: {\n          title: 'Products',\n          icon: { path: mdiStorefrontOutline.path },\n          // The overview, not `catalog`: this surface is the whole commerce\n          // console — Catalog, Orders, Promotions and Reservations.\n          docsTopic: 'commerce',\n        },\n        Component: CommerceConsolePage,\n      },\n      {\n        // POS register (AGL-312/419): relocated from the app's /pos route —\n        // the generic [pluginSlug] shell now serves it at the same URL.\n        label: 'POS',\n        href: '/pos',\n        /*\n         * WHO may open the register, declared on THIS nav item rather than on\n         * the extension.\n         *\n         * A key here narrows one surface; a key on the extension would gate\n         * every surface it registers, and Products is the sibling — a catalog\n         * anyone who works on the site may open. The register is the one that\n         * takes money and lists checked-in guests by name, so the two\n         * genuinely have different answers and only this one is narrowed.\n         *\n         * `managePos` rather than a dotted catalog key because it is the key\n         * the sale itself is refused by: `server/pos-order.ts` resolves the\n         * member's permission map and returns 403 unless `managePos` holds.\n         * The shell answers this declaration out of that same resolved map, so\n         * the console offers a register exactly to the people the route will\n         * accept a sale from — the gate and its server twin cannot disagree,\n         * because they are reading one value.\n         *\n         * `pos-order.ts` stays the enforcement point regardless. This decides\n         * whether the surface is built at all, which is the part a check\n         * inside the page cannot do: by the time the page can refuse itself it\n         * has mounted and its product, register, location and reservation\n         * listeners are already open.\n         */\n        permission: 'managePos',\n        icon: { path: mdiStorefrontOutline.path },\n        header: { title: 'Point of Sale', docsTopic: 'pos' },\n        Component: PosConsolePage,\n      },\n    ],\n  })\n  /*\n   * The USER ACCOUNTS half, registered under its own id.\n   *\n   * `accounts` is a switch rather than a bundle: the member blocks and every\n   * `membership/*` handler ship inside this package, which is why the id\n   * carries no loader manifest entry of its own. A second extension is how a\n   * card about visitor accounts is gated on the switch that decides whether\n   * the site serves them — `listConsoleWidgets` filters by the workspace's\n   * effective plugin ids, and `accounts` is default-OFF per site.\n   *\n   * A separate call rather than more widgets on the commerce extension: the\n   * registry is keyed by `pluginId` and that key IS the gate, so folding this\n   * card in above would have kept the dashboard defect it fixes — `Newest\n   * site users` on a site whose /signin returns 404.\n   */\n  Aglyn.registerConsoleExtension({\n    pluginId: Aglyn.ACCOUNTS_PLUGIN_ID,\n    displayName: 'User Accounts',\n    widgets: [\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'accounts-newest-site-users',\n        title: 'Newest site users',\n        Component: NewestSiteUsersCard,\n      },\n    ],\n  })\n}\n\nexport * from './site'\n"],"names":["Aglyn","mdiStorefrontOutline","lazy","PosConsolePage","CommerceGlanceCard","NewestSiteUsersCard","SiteMemberPurchases","COMMERCE_CONSOLE_SECTIONS","BUNDLE_ID","COMMERCE_PERMISSIONS","registerCommerceRecordLists","registerCommerceRecordRoutes","registerCommerceZones","registerCommerceTransferUi","COMMERCE_SEARCH_SOURCES","COMMERCE_CONFIG_SCHEMA","CommerceConsolePage","registerCommerceConsole","registerPluginPermissions","registerPluginConfigSchema","registerConsoleExtension","pluginId","displayName","searchSources","widgets","slot","widgetId","title","Component","CONSOLE_WIDGET_SLOTS","siteMember","navItems","label","href","icon","path","sections","header","docsTopic","permission","ACCOUNTS_PLUGIN_ID","hostDashboard"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,IAAI,QAAQ,QAAO;AAC5B,MAAMC,iBAAiBD,KAAK,IAAM,MAAM,CAAC;AACzC,MAAME,qBAAqBF,KACzB,IAAM,MAAM,CAAC;AAEf,MAAMG,sBAAsBH,KAC1B,IAAM,MAAM,CAAC;AAEf,MAAMI,sBAAsBJ,KAC1B,IAAM,MAAM,CAAC;AAEf,SAASK,yBAAyB,QAAQ,4CAAwC;AAClF,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,2BAA2B,QAAQ,mCAA+B;AAC3E,SAASC,4BAA4B,QAAQ,oCAAgC;AAC7E,SAASC,qBAAqB,QAAQ,wCAAoC;AAC1E,SAASC,0BAA0B,QAAQ,qCAAiC;AAC5E,SAASC,uBAAuB,QAAQ,qCAAiC;AACzE,SAASC,sBAAsB,QAAQ,qBAAiB;AAExD,kEAAkE,GAClE,MAAMC,sBAAsBd,KAAK,IAAM,MAAM,CAAC;AAE9C;;;;;;;;;CASC,GACD,OAAO,SAASe;IACd,wEAAwE;IACxEN;IACAD;IACA,yEAAyE;IACzE,2DAA2D;IAC3DE;IACA,uEAAuE;IACvE,wEAAwE;IACxE,gBAAgB;IAChBC;IACA,kEAAkE;IAClE,uDAAuD;IACvDb,MAAMkB,yBAAyB,CAACT;IAChC,2EAA2E;IAC3E,kEAAkE;IAClET,MAAMmB,0BAA0B,CAACJ;IACjCf,MAAMoB,wBAAwB,CAAC;QAC7BC,UAAUb;QACVc,aAAa;QACbC,eAAeT;QACf,kEAAkE;QAClE,wCAAwC;QACxCU,SAAS;YACP;gBACEC,MAAM;gBACNC,UAAU;gBACVC,OAAO;gBACPC,WAAWxB;YACb;YACA,uEAAuE;YACvE,2DAA2D;YAC3D,mCAAmC;YACnC;gBACEqB,MAAMzB,MAAM6B,oBAAoB,CAACC,UAAU;gBAC3CJ,UAAU;gBACVC,OAAO;gBACPC,WAAWtB;YACb;SACD;QACDyB,UAAU;YACR;gBACEC,OAAO;gBACPC,MAAM;gBACNC,MAAM;oBAAEC,MAAMlC,qBAAqBkC,IAAI;gBAAC;gBACxC,oEAAoE;gBACpE,qEAAqE;gBACrE,6CAA6C;gBAC7CC,UAAU7B;gBACV8B,QAAQ;oBACNV,OAAO;oBACPO,MAAM;wBAAEC,MAAMlC,qBAAqBkC,IAAI;oBAAC;oBACxC,kEAAkE;oBAClE,0DAA0D;oBAC1DG,WAAW;gBACb;gBACAV,WAAWZ;YACb;YACA;gBACE,oEAAoE;gBACpE,gEAAgE;gBAChEgB,OAAO;gBACPC,MAAM;gBACN;;;;;;;;;;;;;;;;;;;;;;;SAuBC,GACDM,YAAY;gBACZL,MAAM;oBAAEC,MAAMlC,qBAAqBkC,IAAI;gBAAC;gBACxCE,QAAQ;oBAAEV,OAAO;oBAAiBW,WAAW;gBAAM;gBACnDV,WAAWzB;YACb;SACD;IACH;IACA;;;;;;;;;;;;;;GAcC,GACDH,MAAMoB,wBAAwB,CAAC;QAC7BC,UAAUrB,MAAMwC,kBAAkB;QAClClB,aAAa;QACbE,SAAS;YACP;gBACEC,MAAMzB,MAAM6B,oBAAoB,CAACY,aAAa;gBAC9Cf,UAAU;gBACVC,OAAO;gBACPC,WAAWvB;YACb;SACD;IACH;AACF;AAEA,cAAc,YAAQ"}
+{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiStorefrontOutline } from '@aglyn/shared-data-mdi'\nimport { lazy } from 'react'\nconst PosConsolePage = lazy(() => import('./components/console/pos-page.component'))\n/** The customer display (AGL-3608): loads only on the public page that shows it. */\nconst PosDisplayPage = lazy(() => import('./components/console/pos-display-page.component'))\nconst CommerceGlanceCard = lazy(\n  () => import('./components/console/commerce-glance-card.component'),\n)\nconst NewestSiteUsersCard = lazy(\n  () => import('./components/console/newest-site-users-card.component'),\n)\nconst SiteMemberPurchases = lazy(\n  () => import('./components/console/site-member-purchases.component'),\n)\nimport { COMMERCE_CONSOLE_SECTIONS } from './components/commerce-console-sections'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { COMMERCE_PERMISSIONS } from './model/plugin-permissions'\nimport { registerCommerceRecordLists } from './model/commerce-record-lists'\nimport { registerCommerceRecordRoutes } from './model/commerce-record-routes'\nimport { registerCommerceZones } from './components/console/product-zones'\nimport { registerCommerceOrderZones } from './components/console/order-zones'\nimport { registerCommerceReturnZones } from './components/console/return-zones'\nimport { registerCommerceStoreZones } from './components/console/store-zones'\nimport { registerCommerceTransferUi } from './transfer/register-transfer-ui'\nimport { COMMERCE_SEARCH_SOURCES } from './model/commerce-search-sources'\nimport { COMMERCE_CONFIG_SCHEMA } from './plugin-config'\n\n/** Code-split: the Products console page only loads when opened. */\nconst CommerceConsolePage = lazy(() => import('./components/commerce-console-page'))\n\n/**\n * Console half (AGL-395): registers the Products nav item in the\n * ConsoleExtension registry so the commerce console surface is owned by the\n * plugin, like events and email. The page body still lives in the console\n * app (`/[hostId]/products`): its product editor depends on the app's media\n * browser, which transitively pulls in the org/session context, so a full\n * body relocation needs a plugin-consumable media-picker context first —\n * tracked as follow-up. The nav item omits a `Component`, so the shell's\n * nav renders the link and the existing named route serves the page.\n */\nexport function registerCommerceConsole(): void {\n  // Where a product is read, for surfaces outside this plugin (AGL-3080).\n  registerCommerceRecordRoutes()\n  registerCommerceRecordLists()\n  // The zones its product editor, products hub and CSV import dialog host,\n  // with the props each hands a widget (AGL-2916, AGL-3080).\n  registerCommerceZones()\n  // …and the order dialog's two (AGL-3611), where a shipping plugin's widget\n  // buys a label and records the shipment through the dialog's own route.\n  registerCommerceOrderZones()\n  // …and the return dialog's (AGL-3611), where a shipping plugin's widget\n  // buys the buyer a return label and attaches it through this plugin's route.\n  registerCommerceReturnZones()\n  // The orders list's bulk actions and the store's Settings (AGL-3612).\n  registerCommerceStoreZones()\n  // Its import and export resources' names and the products wizard's own\n  // step (AGL-3531); the server halves register from the console's server\n  // declarations.\n  registerCommerceTransferUi()\n  // Plugin-declared permissions (AGL-435): tier defaults ride every\n  // resolved role set; custom roles override key-by-key.\n  Aglyn.registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // Register discount ceiling (AGL-2161) — the generic settings card renders\n  // it from this schema, so there is no bespoke UI to keep in sync.\n  Aglyn.registerPluginConfigSchema(COMMERCE_CONFIG_SCHEMA)\n  Aglyn.registerConsoleExtension({\n    pluginId: BUNDLE_ID,\n    displayName: 'Commerce',\n    searchSources: COMMERCE_SEARCH_SOURCES,\n    // The screen a register turns toward its customer (AGL-3608), at\n    // `/kiosk/commerce/pos-display`. No staff session: the device proves\n    // itself with the display token it got by pairing, and\n    // `server/pos-display.ts` refuses every read without one.\n    publicPages: [\n      { path: '/pos-display', title: 'Customer display', Component: PosDisplayPage },\n    ],\n    // Dashboard/analytics glance card (AGL-419): rendered through the\n    // shell's 'commerceGlance' widget slot.\n    widgets: [\n      {\n        slot: 'commerceGlance',\n        widgetId: 'commerce-glance',\n        title: 'Commerce',\n        Component: CommerceGlanceCard,\n      },\n      // What a site user bought — lifetime total, orders and subscriptions —\n      // in their drawer on the site's Users page: the orders and\n      // subscriptions are this plugin's.\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.siteMember,\n        widgetId: 'commerce-site-member-purchases',\n        title: 'Purchases',\n        Component: SiteMemberPurchases,\n      },\n    ],\n    navItems: [\n      {\n        label: 'Products',\n        href: '/products',\n        icon: { path: mdiStorefrontOutline.path },\n        // Sections as ROUTES (AGL-2501): `/products/orders` and friends are\n        // real URLs the shell resolves and gates, so the page mounts the one\n        // being read instead of subscribing all six.\n        sections: COMMERCE_CONSOLE_SECTIONS,\n        header: {\n          title: 'Products',\n          icon: { path: mdiStorefrontOutline.path },\n          // The overview, not `catalog`: this surface is the whole commerce\n          // console — Catalog, Orders, Promotions and Reservations.\n          docsTopic: 'commerce',\n        },\n        Component: CommerceConsolePage,\n      },\n      {\n        // POS register (AGL-312/419): relocated from the app's /pos route —\n        // the generic [pluginSlug] shell now serves it at the same URL.\n        label: 'POS',\n        href: '/pos',\n        /*\n         * WHO may open the register, declared on THIS nav item rather than on\n         * the extension.\n         *\n         * A key here narrows one surface; a key on the extension would gate\n         * every surface it registers, and Products is the sibling — a catalog\n         * anyone who works on the site may open. The register is the one that\n         * takes money and lists checked-in guests by name, so the two\n         * genuinely have different answers and only this one is narrowed.\n         *\n         * `managePos` rather than a dotted catalog key because it is the key\n         * the sale itself is refused by: `server/pos-order.ts` resolves the\n         * member's permission map and returns 403 unless `managePos` holds.\n         * The shell answers this declaration out of that same resolved map, so\n         * the console offers a register exactly to the people the route will\n         * accept a sale from — the gate and its server twin cannot disagree,\n         * because they are reading one value.\n         *\n         * `pos-order.ts` stays the enforcement point regardless. This decides\n         * whether the surface is built at all, which is the part a check\n         * inside the page cannot do: by the time the page can refuse itself it\n         * has mounted and its product, register, location and reservation\n         * listeners are already open.\n         */\n        permission: 'managePos',\n        icon: { path: mdiStorefrontOutline.path },\n        header: { title: 'Point of Sale', docsTopic: 'pos' },\n        Component: PosConsolePage,\n      },\n    ],\n  })\n  /*\n   * The USER ACCOUNTS half, registered under its own id.\n   *\n   * `accounts` is a switch rather than a bundle: the member blocks and every\n   * `membership/*` handler ship inside this package, which is why the id\n   * carries no loader manifest entry of its own. A second extension is how a\n   * card about visitor accounts is gated on the switch that decides whether\n   * the site serves them — `listConsoleWidgets` filters by the workspace's\n   * effective plugin ids, and `accounts` is default-OFF per site.\n   *\n   * A separate call rather than more widgets on the commerce extension: the\n   * registry is keyed by `pluginId` and that key IS the gate, so folding this\n   * card in above would have kept the dashboard defect it fixes — `Newest\n   * site users` on a site whose /signin returns 404.\n   */\n  Aglyn.registerConsoleExtension({\n    pluginId: Aglyn.ACCOUNTS_PLUGIN_ID,\n    displayName: 'User Accounts',\n    widgets: [\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'accounts-newest-site-users',\n        title: 'Newest site users',\n        Component: NewestSiteUsersCard,\n      },\n    ],\n  })\n}\n\nexport * from './site'\n"],"names":["Aglyn","mdiStorefrontOutline","lazy","PosConsolePage","PosDisplayPage","CommerceGlanceCard","NewestSiteUsersCard","SiteMemberPurchases","COMMERCE_CONSOLE_SECTIONS","BUNDLE_ID","COMMERCE_PERMISSIONS","registerCommerceRecordLists","registerCommerceRecordRoutes","registerCommerceZones","registerCommerceOrderZones","registerCommerceReturnZones","registerCommerceStoreZones","registerCommerceTransferUi","COMMERCE_SEARCH_SOURCES","COMMERCE_CONFIG_SCHEMA","CommerceConsolePage","registerCommerceConsole","registerPluginPermissions","registerPluginConfigSchema","registerConsoleExtension","pluginId","displayName","searchSources","publicPages","path","title","Component","widgets","slot","widgetId","CONSOLE_WIDGET_SLOTS","siteMember","navItems","label","href","icon","sections","header","docsTopic","permission","ACCOUNTS_PLUGIN_ID","hostDashboard"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,IAAI,QAAQ,QAAO;AAC5B,MAAMC,iBAAiBD,KAAK,IAAM,MAAM,CAAC;AACzC,kFAAkF,GAClF,MAAME,iBAAiBF,KAAK,IAAM,MAAM,CAAC;AACzC,MAAMG,qBAAqBH,KACzB,IAAM,MAAM,CAAC;AAEf,MAAMI,sBAAsBJ,KAC1B,IAAM,MAAM,CAAC;AAEf,MAAMK,sBAAsBL,KAC1B,IAAM,MAAM,CAAC;AAEf,SAASM,yBAAyB,QAAQ,4CAAwC;AAClF,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,2BAA2B,QAAQ,mCAA+B;AAC3E,SAASC,4BAA4B,QAAQ,oCAAgC;AAC7E,SAASC,qBAAqB,QAAQ,wCAAoC;AAC1E,SAASC,0BAA0B,QAAQ,sCAAkC;AAC7E,SAASC,2BAA2B,QAAQ,uCAAmC;AAC/E,SAASC,0BAA0B,QAAQ,sCAAkC;AAC7E,SAASC,0BAA0B,QAAQ,qCAAiC;AAC5E,SAASC,uBAAuB,QAAQ,qCAAiC;AACzE,SAASC,sBAAsB,QAAQ,qBAAiB;AAExD,kEAAkE,GAClE,MAAMC,sBAAsBlB,KAAK,IAAM,MAAM,CAAC;AAE9C;;;;;;;;;CASC,GACD,OAAO,SAASmB;IACd,wEAAwE;IACxET;IACAD;IACA,yEAAyE;IACzE,2DAA2D;IAC3DE;IACA,2EAA2E;IAC3E,wEAAwE;IACxEC;IACA,wEAAwE;IACxE,6EAA6E;IAC7EC;IACA,sEAAsE;IACtEC;IACA,uEAAuE;IACvE,wEAAwE;IACxE,gBAAgB;IAChBC;IACA,kEAAkE;IAClE,uDAAuD;IACvDjB,MAAMsB,yBAAyB,CAACZ;IAChC,2EAA2E;IAC3E,kEAAkE;IAClEV,MAAMuB,0BAA0B,CAACJ;IACjCnB,MAAMwB,wBAAwB,CAAC;QAC7BC,UAAUhB;QACViB,aAAa;QACbC,eAAeT;QACf,iEAAiE;QACjE,qEAAqE;QACrE,uDAAuD;QACvD,0DAA0D;QAC1DU,aAAa;YACX;gBAAEC,MAAM;gBAAgBC,OAAO;gBAAoBC,WAAW3B;YAAe;SAC9E;QACD,kEAAkE;QAClE,wCAAwC;QACxC4B,SAAS;YACP;gBACEC,MAAM;gBACNC,UAAU;gBACVJ,OAAO;gBACPC,WAAW1B;YACb;YACA,uEAAuE;YACvE,2DAA2D;YAC3D,mCAAmC;YACnC;gBACE4B,MAAMjC,MAAMmC,oBAAoB,CAACC,UAAU;gBAC3CF,UAAU;gBACVJ,OAAO;gBACPC,WAAWxB;YACb;SACD;QACD8B,UAAU;YACR;gBACEC,OAAO;gBACPC,MAAM;gBACNC,MAAM;oBAAEX,MAAM5B,qBAAqB4B,IAAI;gBAAC;gBACxC,oEAAoE;gBACpE,qEAAqE;gBACrE,6CAA6C;gBAC7CY,UAAUjC;gBACVkC,QAAQ;oBACNZ,OAAO;oBACPU,MAAM;wBAAEX,MAAM5B,qBAAqB4B,IAAI;oBAAC;oBACxC,kEAAkE;oBAClE,0DAA0D;oBAC1Dc,WAAW;gBACb;gBACAZ,WAAWX;YACb;YACA;gBACE,oEAAoE;gBACpE,gEAAgE;gBAChEkB,OAAO;gBACPC,MAAM;gBACN;;;;;;;;;;;;;;;;;;;;;;;SAuBC,GACDK,YAAY;gBACZJ,MAAM;oBAAEX,MAAM5B,qBAAqB4B,IAAI;gBAAC;gBACxCa,QAAQ;oBAAEZ,OAAO;oBAAiBa,WAAW;gBAAM;gBACnDZ,WAAW5B;YACb;SACD;IACH;IACA;;;;;;;;;;;;;;GAcC,GACDH,MAAMwB,wBAAwB,CAAC;QAC7BC,UAAUzB,MAAM6C,kBAAkB;QAClCnB,aAAa;QACbM,SAAS;YACP;gBACEC,MAAMjC,MAAMmC,oBAAoB,CAACW,aAAa;gBAC9CZ,UAAU;gBACVJ,OAAO;gBACPC,WAAWzB;YACb;SACD;IACH;AACF;AAEA,cAAc,YAAQ"}

package/src/lib/pos-ops-config.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginConfigField } from '@aglyn/aglyn';
+/**
+ * The most a register refund may be without a manager's PIN, by default:
+ * nothing. Before this, only an admin of the whole workspace could refund at
+ * all, so a default above zero would hand every cashier refunds on the day it
+ * shipped. A merchant who trusts the till raises it.
+ */
+export declare const POS_REFUND_LIMIT_DEFAULT = 0;
+export declare const POS_OPS_CONFIG_FIELDS: PluginConfigField[];
+export declare const POS_OPS_CONFIG_DEFAULTS: Record<string, unknown>;
+/** The register settings, typed and bounded, for one site's merged config. */
+export interface PosOpsSettings {
+    requireOpenShift: boolean;
+    refundLimitCents: number;
+    autoLockMinutes: number;
+    receiptAddress: string;
+    returnPolicy: string;
+}
+/**
+ * Read defensively: the framework has already clamped a schema'd value, and
+ * this second bound is for a config read without the schema.
+ */
+export declare function posOpsSettings(config: Record<string, unknown> | null | undefined): PosOpsSettings;