@aglyn/plugins-commerce 1.0.0-beta.230 → 1.0.0-beta.232

package/src/lib/server/pos-customer.js

@@ -0,0 +1,257 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import { searchPluginPeople } from "@aglyn/aglyn/plugin-manager/plugin-person-records";
+import recordCapturedContact from "@aglyn/aglyn/plugin-manager/record-captured-contact";
+import { nameSearchKey } from "@aglyn/aglyn/app-utils/name-search";
+import { AggregateField } from "firebase-admin/firestore";
+import { authorizePosOps, defaultPosOpsDeps, posOpsBody } from "./pos-ops-gate.js";
+/*==========================================
+ * THE CUSTOMER AT THE REGISTER (AGL-3609): `POST /api/commerce/pos-customer`.
+ *
+ *   search  name, email or phone → people the site may see
+ *   stats   one customer's orders here and what they have spent
+ *   create  a new customer, quick-added at the counter
+ *
+ * The people are the workspace's, kept by whichever plugin keeps people and
+ * reached through `plugin-person-records` — never by opening that plugin's
+ * collections or importing it. A workspace with no record system answers
+ * `available: false`, and the register falls back to typing an email.
+ *
+ * The STATS are commerce's own: an aggregate over this site's orders by the
+ * stored lowercase address, never a scan.
+ *=========================================*/ /** The statuses a customer actually paid in. A refund is netted, not excluded. */ export const POS_CUSTOMER_PAID_STATUSES = [
+    'paid',
+    'partially_fulfilled',
+    'fulfilled',
+    'delivered',
+    'refunded'
+];
+export function defaultPosCustomerDeps() {
+    return _extends({}, defaultPosOpsDeps(), {
+        searchPeople: (request)=>searchPluginPeople(request),
+        captureContact: (request)=>recordCapturedContact(request),
+        orderStats: async (hostRef, emailLower)=>{
+            var _data_orderCount, _data_spentCents, _data_refundedCents;
+            const snapshot = await hostRef.collection('orders').where('customerEmailLower', '==', emailLower).where('status', 'in', [
+                ...POS_CUSTOMER_PAID_STATUSES
+            ]).aggregate({
+                orderCount: AggregateField.count(),
+                spentCents: AggregateField.sum('totals.totalCents'),
+                refundedCents: AggregateField.sum('refundedCents')
+            }).get();
+            const data = snapshot.data();
+            return {
+                orderCount: Number((_data_orderCount = data.orderCount) != null ? _data_orderCount : 0),
+                spentCents: Number((_data_spentCents = data.spentCents) != null ? _data_spentCents : 0),
+                refundedCents: Number((_data_refundedCents = data.refundedCents) != null ? _data_refundedCents : 0)
+            };
+        }
+    });
+}
+function customerOf(person) {
+    var _person_data;
+    const data = (_person_data = person.data) != null ? _person_data : {};
+    const name = typeof data['name'] === 'string' ? data['name'] : '';
+    const phone = typeof data['phone'] === 'string' ? data['phone'] : '';
+    return {
+        kind: person.kind,
+        id: person.id,
+        name: name.trim(),
+        email: person.email,
+        phone: phone.trim() || null
+    };
+}
+const EMAIL = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+export async function handlePosCustomer(deps, req) {
+    var _body_action;
+    if (req.method !== 'POST') return {
+        status: 405,
+        body: {
+            error: 'Method not allowed'
+        }
+    };
+    const body = posOpsBody(req);
+    const gate = await authorizePosOps(deps, req, body['hostId']);
+    if ('error' in gate) return {
+        status: gate.status,
+        body: {
+            error: gate.error
+        }
+    };
+    const staff = gate.staff;
+    const action = String((_body_action = body['action']) != null ? _body_action : '');
+    switch(action){
+        case 'search':
+            {
+                var _body_text;
+                const text = String((_body_text = body['text']) != null ? _body_text : '').trim().slice(0, 120);
+                if (text.length < 2) return {
+                    status: 200,
+                    body: {
+                        available: true,
+                        customers: []
+                    }
+                };
+                const people = await deps.searchPeople({
+                    hostId: staff.hostId,
+                    orgId: staff.orgId || null,
+                    text,
+                    limit: 10
+                });
+                if (people === null) return {
+                    status: 200,
+                    body: {
+                        available: false,
+                        customers: []
+                    }
+                };
+                return {
+                    status: 200,
+                    body: {
+                        available: true,
+                        customers: people.map(customerOf)
+                    }
+                };
+            }
+        case 'stats':
+            {
+                var _body_email;
+                const email = nameSearchKey(String((_body_email = body['email']) != null ? _body_email : ''));
+                if (!EMAIL.test(email)) return {
+                    status: 400,
+                    body: {
+                        error: 'That is not an email address.'
+                    }
+                };
+                const stats = await deps.orderStats(staff.hostRef, email);
+                return {
+                    status: 200,
+                    body: {
+                        orderCount: stats.orderCount,
+                        lifetimeSpendCents: Math.max(0, stats.spentCents - stats.refundedCents)
+                    }
+                };
+            }
+        case 'create':
+            {
+                var _body_email1, _body_name, _body_phone;
+                const email = String((_body_email1 = body['email']) != null ? _body_email1 : '').trim().toLowerCase().slice(0, 200);
+                const name = String((_body_name = body['name']) != null ? _body_name : '').trim().slice(0, 120);
+                const phone = String((_body_phone = body['phone']) != null ? _body_phone : '').trim().slice(0, 40);
+                if (!EMAIL.test(email)) {
+                    return {
+                        status: 400,
+                        body: {
+                            error: 'Add the customer’s email address.'
+                        }
+                    };
+                }
+                if (phone && !/^[\d\s()+.-]{4,40}$/.test(phone)) {
+                    return {
+                        status: 400,
+                        body: {
+                            error: 'That is not a phone number.'
+                        }
+                    };
+                }
+                const captured = await deps.captureContact(_extends({
+                    actor: {
+                        kind: 'member',
+                        uid: staff.uid
+                    },
+                    orgId: staff.orgId,
+                    hostId: staff.hostId,
+                    identity: _extends({
+                        email
+                    }, name ? {
+                        name
+                    } : {}),
+                    interaction: {
+                        source: 'order',
+                        summary: 'Added at the register'
+                    },
+                    surface: 'relationship',
+                    lifecycleFloor: 'customer'
+                }, phone ? {
+                    profileFill: {
+                        phone
+                    }
+                } : {}));
+                if (!captured) {
+                    return {
+                        status: 200,
+                        body: {
+                            available: false,
+                            customer: {
+                                kind: 'none',
+                                id: '',
+                                name,
+                                email,
+                                phone: phone || null
+                            }
+                        }
+                    };
+                }
+                if (captured.ok !== true) {
+                    return {
+                        status: 409,
+                        body: {
+                            error: 'That customer could not be added.'
+                        }
+                    };
+                }
+                const id = captured.record === 'contact' ? captured.contactId : captured.leadId;
+                return {
+                    status: 200,
+                    body: {
+                        available: true,
+                        customer: {
+                            kind: captured.record,
+                            id,
+                            name,
+                            email,
+                            phone: phone || null
+                        },
+                        created: captured.created
+                    }
+                };
+            }
+        default:
+            return {
+                status: 400,
+                body: {
+                    error: 'Unknown action'
+                }
+            };
+    }
+}
+export function createPosCustomerHandler(deps = defaultPosCustomerDeps) {
+    return async (req, res)=>{
+        try {
+            const outcome = await handlePosCustomer(deps(), req);
+            return res.status(outcome.status).json(outcome.body);
+        } catch (error) {
+            console.error('[pos-customer] failed', error);
+            return res.status(500).json({
+                error: 'Customer lookup failed'
+            });
+        }
+    };
+}
+export const posCustomerHandler = createPosCustomerHandler();
+
+//# sourceMappingURL=pos-customer.js.map

package/src/lib/server/pos-customer.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-customer.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginApiHandler, PluginApiRequest } from '@aglyn/aglyn/server'\nimport type { PluginContactCaptureRequest, PluginContactCaptured } from '@aglyn/aglyn/plugin-manager/plugin-contact-capture'\nimport {\n  searchPluginPeople,\n  type PluginPersonRecord,\n  type PluginPersonSearchRequest,\n} from '@aglyn/aglyn/plugin-manager/plugin-person-records'\nimport recordCapturedContact from '@aglyn/aglyn/plugin-manager/record-captured-contact'\nimport { nameSearchKey } from '@aglyn/aglyn/app-utils/name-search'\nimport { AggregateField } from 'firebase-admin/firestore'\nimport {\n  authorizePosOps,\n  defaultPosOpsDeps,\n  posOpsBody,\n  type PosOpsDeps,\n} from './pos-ops-gate'\n\n/*==========================================\n * THE CUSTOMER AT THE REGISTER (AGL-3609): `POST /api/commerce/pos-customer`.\n *\n *   search  name, email or phone → people the site may see\n *   stats   one customer's orders here and what they have spent\n *   create  a new customer, quick-added at the counter\n *\n * The people are the workspace's, kept by whichever plugin keeps people and\n * reached through `plugin-person-records` — never by opening that plugin's\n * collections or importing it. A workspace with no record system answers\n * `available: false`, and the register falls back to typing an email.\n *\n * The STATS are commerce's own: an aggregate over this site's orders by the\n * stored lowercase address, never a scan.\n *=========================================*/\n\n/** The statuses a customer actually paid in. A refund is netted, not excluded. */\nexport const POS_CUSTOMER_PAID_STATUSES = [\n  'paid',\n  'partially_fulfilled',\n  'fulfilled',\n  'delivered',\n  'refunded',\n] as const\n\nexport interface PosCustomerDeps extends PosOpsDeps {\n  searchPeople(request: PluginPersonSearchRequest): Promise<PluginPersonRecord[] | null>\n  captureContact(request: PluginContactCaptureRequest): Promise<PluginContactCaptured | null>\n  /** Orders, spend and refunds for one address on one site, by aggregate. */\n  orderStats(\n    hostRef: FirebaseFirestore.DocumentReference,\n    emailLower: string,\n  ): Promise<{ orderCount: number; spentCents: number; refundedCents: number }>\n}\n\nexport function defaultPosCustomerDeps(): PosCustomerDeps {\n  return {\n    ...defaultPosOpsDeps(),\n    searchPeople: (request) => searchPluginPeople(request),\n    captureContact: (request) => recordCapturedContact(request),\n    orderStats: async (hostRef, emailLower) => {\n      const snapshot = await hostRef\n        .collection('orders')\n        .where('customerEmailLower', '==', emailLower)\n        .where('status', 'in', [...POS_CUSTOMER_PAID_STATUSES])\n        .aggregate({\n          orderCount: AggregateField.count(),\n          spentCents: AggregateField.sum('totals.totalCents'),\n          refundedCents: AggregateField.sum('refundedCents'),\n        })\n        .get()\n      const data = snapshot.data()\n      return {\n        orderCount: Number(data.orderCount ?? 0),\n        spentCents: Number(data.spentCents ?? 0),\n        refundedCents: Number(data.refundedCents ?? 0),\n      }\n    },\n  }\n}\n\n/** One person as the register lists them. */\nexport interface PosCustomer {\n  kind: string\n  id: string\n  name: string\n  email: string | null\n  phone: string | null\n}\n\nfunction customerOf(person: PluginPersonRecord): PosCustomer {\n  const data = person.data ?? {}\n  const name = typeof data['name'] === 'string' ? data['name'] : ''\n  const phone = typeof data['phone'] === 'string' ? data['phone'] : ''\n  return {\n    kind: person.kind,\n    id: person.id,\n    name: name.trim(),\n    email: person.email,\n    phone: phone.trim() || null,\n  }\n}\n\nconst EMAIL = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/\n\ntype Outcome = { status: number; body: Record<string, unknown> }\n\nexport async function handlePosCustomer(deps: PosCustomerDeps, req: PluginApiRequest): Promise<Outcome> {\n  if (req.method !== 'POST') return { status: 405, body: { error: 'Method not allowed' } }\n  const body = posOpsBody(req)\n  const gate = await authorizePosOps(deps, req, body['hostId'])\n  if ('error' in gate) return { status: gate.status, body: { error: gate.error } }\n  const staff = gate.staff\n  const action = String(body['action'] ?? '')\n\n  switch (action) {\n    case 'search': {\n      const text = String(body['text'] ?? '').trim().slice(0, 120)\n      if (text.length < 2) return { status: 200, body: { available: true, customers: [] } }\n      const people = await deps.searchPeople({\n        hostId: staff.hostId,\n        orgId: staff.orgId || null,\n        text,\n        limit: 10,\n      })\n      if (people === null) return { status: 200, body: { available: false, customers: [] } }\n      return { status: 200, body: { available: true, customers: people.map(customerOf) } }\n    }\n\n    case 'stats': {\n      const email = nameSearchKey(String(body['email'] ?? ''))\n      if (!EMAIL.test(email)) return { status: 400, body: { error: 'That is not an email address.' } }\n      const stats = await deps.orderStats(staff.hostRef, email)\n      return {\n        status: 200,\n        body: {\n          orderCount: stats.orderCount,\n          lifetimeSpendCents: Math.max(0, stats.spentCents - stats.refundedCents),\n        },\n      }\n    }\n\n    case 'create': {\n      const email = String(body['email'] ?? '').trim().toLowerCase().slice(0, 200)\n      const name = String(body['name'] ?? '').trim().slice(0, 120)\n      const phone = String(body['phone'] ?? '').trim().slice(0, 40)\n      if (!EMAIL.test(email)) {\n        return { status: 400, body: { error: 'Add the customer’s email address.' } }\n      }\n      if (phone && !/^[\\d\\s()+.-]{4,40}$/.test(phone)) {\n        return { status: 400, body: { error: 'That is not a phone number.' } }\n      }\n      const captured = await deps.captureContact({\n        actor: { kind: 'member', uid: staff.uid },\n        orgId: staff.orgId,\n        hostId: staff.hostId,\n        identity: { email, ...(name ? { name } : {}) },\n        interaction: { source: 'order', summary: 'Added at the register' },\n        surface: 'relationship',\n        lifecycleFloor: 'customer',\n        ...(phone ? { profileFill: { phone } } : {}),\n      })\n      if (!captured) {\n        return {\n          status: 200,\n          body: {\n            available: false,\n            customer: { kind: 'none', id: '', name, email, phone: phone || null },\n          },\n        }\n      }\n      if (captured.ok !== true) {\n        return { status: 409, body: { error: 'That customer could not be added.' } }\n      }\n      const id = captured.record === 'contact' ? captured.contactId : captured.leadId\n      return {\n        status: 200,\n        body: {\n          available: true,\n          customer: { kind: captured.record, id, name, email, phone: phone || null },\n          created: captured.created,\n        },\n      }\n    }\n\n    default:\n      return { status: 400, body: { error: 'Unknown action' } }\n  }\n}\n\nexport function createPosCustomerHandler(\n  deps: () => PosCustomerDeps = defaultPosCustomerDeps,\n): PluginApiHandler {\n  return async (req, res) => {\n    try {\n      const outcome = await handlePosCustomer(deps(), req)\n      return res.status(outcome.status).json(outcome.body)\n    } catch (error) {\n      console.error('[pos-customer] failed', error)\n      return res.status(500).json({ error: 'Customer lookup failed' })\n    }\n  }\n}\n\nexport const posCustomerHandler = createPosCustomerHandler()\n"],"names":["searchPluginPeople","recordCapturedContact","nameSearchKey","AggregateField","authorizePosOps","defaultPosOpsDeps","posOpsBody","POS_CUSTOMER_PAID_STATUSES","defaultPosCustomerDeps","searchPeople","request","captureContact","orderStats","hostRef","emailLower","data","snapshot","collection","where","aggregate","orderCount","count","spentCents","sum","refundedCents","get","Number","customerOf","person","name","phone","kind","id","trim","email","EMAIL","handlePosCustomer","deps","req","body","method","status","error","gate","staff","action","String","text","slice","length","available","customers","people","hostId","orgId","limit","map","test","stats","lifetimeSpendCents","Math","max","toLowerCase","captured","actor","uid","identity","interaction","source","summary","surface","lifecycleFloor","profileFill","customer","ok","record","contactId","leadId","created","createPosCustomerHandler","res","outcome","json","console","posCustomerHandler"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAID,SACEA,kBAAkB,QAGb,oDAAmD;AAC1D,OAAOC,2BAA2B,sDAAqD;AACvF,SAASC,aAAa,QAAQ,qCAAoC;AAClE,SAASC,cAAc,QAAQ,2BAA0B;AACzD,SACEC,eAAe,EACfC,iBAAiB,EACjBC,UAAU,QAEL,oBAAgB;AAEvB;;;;;;;;;;;;;;2CAc2C,GAE3C,gFAAgF,GAChF,OAAO,MAAMC,6BAA6B;IACxC;IACA;IACA;IACA;IACA;CACD,CAAS;AAYV,OAAO,SAASC;IACd,OAAO,aACFH;QACHI,cAAc,CAACC,UAAYV,mBAAmBU;QAC9CC,gBAAgB,CAACD,UAAYT,sBAAsBS;QACnDE,YAAY,OAAOC,SAASC;gBAaLC,kBACAA,kBACGA;YAdxB,MAAMC,WAAW,MAAMH,QACpBI,UAAU,CAAC,UACXC,KAAK,CAAC,sBAAsB,MAAMJ,YAClCI,KAAK,CAAC,UAAU,MAAM;mBAAIX;aAA2B,EACrDY,SAAS,CAAC;gBACTC,YAAYjB,eAAekB,KAAK;gBAChCC,YAAYnB,eAAeoB,GAAG,CAAC;gBAC/BC,eAAerB,eAAeoB,GAAG,CAAC;YACpC,GACCE,GAAG;YACN,MAAMV,OAAOC,SAASD,IAAI;YAC1B,OAAO;gBACLK,YAAYM,QAAOX,mBAAAA,KAAKK,UAAU,YAAfL,mBAAmB;gBACtCO,YAAYI,QAAOX,mBAAAA,KAAKO,UAAU,YAAfP,mBAAmB;gBACtCS,eAAeE,QAAOX,sBAAAA,KAAKS,aAAa,YAAlBT,sBAAsB;YAC9C;QACF;;AAEJ;AAWA,SAASY,WAAWC,MAA0B;QAC/BA;IAAb,MAAMb,QAAOa,eAAAA,OAAOb,IAAI,YAAXa,eAAe,CAAC;IAC7B,MAAMC,OAAO,OAAOd,IAAI,CAAC,OAAO,KAAK,WAAWA,IAAI,CAAC,OAAO,GAAG;IAC/D,MAAMe,QAAQ,OAAOf,IAAI,CAAC,QAAQ,KAAK,WAAWA,IAAI,CAAC,QAAQ,GAAG;IAClE,OAAO;QACLgB,MAAMH,OAAOG,IAAI;QACjBC,IAAIJ,OAAOI,EAAE;QACbH,MAAMA,KAAKI,IAAI;QACfC,OAAON,OAAOM,KAAK;QACnBJ,OAAOA,MAAMG,IAAI,MAAM;IACzB;AACF;AAEA,MAAME,QAAQ;AAId,OAAO,eAAeC,kBAAkBC,IAAqB,EAAEC,GAAqB;QAM5DC;IALtB,IAAID,IAAIE,MAAM,KAAK,QAAQ,OAAO;QAAEC,QAAQ;QAAKF,MAAM;YAAEG,OAAO;QAAqB;IAAE;IACvF,MAAMH,OAAOjC,WAAWgC;IACxB,MAAMK,OAAO,MAAMvC,gBAAgBiC,MAAMC,KAAKC,IAAI,CAAC,SAAS;IAC5D,IAAI,WAAWI,MAAM,OAAO;QAAEF,QAAQE,KAAKF,MAAM;QAAEF,MAAM;YAAEG,OAAOC,KAAKD,KAAK;QAAC;IAAE;IAC/E,MAAME,QAAQD,KAAKC,KAAK;IACxB,MAAMC,SAASC,QAAOP,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IAExC,OAAQM;QACN,KAAK;YAAU;oBACON;gBAApB,MAAMQ,OAAOD,QAAOP,aAAAA,IAAI,CAAC,OAAO,YAAZA,aAAgB,IAAIN,IAAI,GAAGe,KAAK,CAAC,GAAG;gBACxD,IAAID,KAAKE,MAAM,GAAG,GAAG,OAAO;oBAAER,QAAQ;oBAAKF,MAAM;wBAAEW,WAAW;wBAAMC,WAAW,EAAE;oBAAC;gBAAE;gBACpF,MAAMC,SAAS,MAAMf,KAAK5B,YAAY,CAAC;oBACrC4C,QAAQT,MAAMS,MAAM;oBACpBC,OAAOV,MAAMU,KAAK,IAAI;oBACtBP;oBACAQ,OAAO;gBACT;gBACA,IAAIH,WAAW,MAAM,OAAO;oBAAEX,QAAQ;oBAAKF,MAAM;wBAAEW,WAAW;wBAAOC,WAAW,EAAE;oBAAC;gBAAE;gBACrF,OAAO;oBAAEV,QAAQ;oBAAKF,MAAM;wBAAEW,WAAW;wBAAMC,WAAWC,OAAOI,GAAG,CAAC7B;oBAAY;gBAAE;YACrF;QAEA,KAAK;YAAS;oBACuBY;gBAAnC,MAAML,QAAQhC,cAAc4C,QAAOP,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB;gBACpD,IAAI,CAACJ,MAAMsB,IAAI,CAACvB,QAAQ,OAAO;oBAAEO,QAAQ;oBAAKF,MAAM;wBAAEG,OAAO;oBAAgC;gBAAE;gBAC/F,MAAMgB,QAAQ,MAAMrB,KAAKzB,UAAU,CAACgC,MAAM/B,OAAO,EAAEqB;gBACnD,OAAO;oBACLO,QAAQ;oBACRF,MAAM;wBACJnB,YAAYsC,MAAMtC,UAAU;wBAC5BuC,oBAAoBC,KAAKC,GAAG,CAAC,GAAGH,MAAMpC,UAAU,GAAGoC,MAAMlC,aAAa;oBACxE;gBACF;YACF;QAEA,KAAK;YAAU;oBACQe,cACDA,YACCA;gBAFrB,MAAML,QAAQY,QAAOP,eAAAA,IAAI,CAAC,QAAQ,YAAbA,eAAiB,IAAIN,IAAI,GAAG6B,WAAW,GAAGd,KAAK,CAAC,GAAG;gBACxE,MAAMnB,OAAOiB,QAAOP,aAAAA,IAAI,CAAC,OAAO,YAAZA,aAAgB,IAAIN,IAAI,GAAGe,KAAK,CAAC,GAAG;gBACxD,MAAMlB,QAAQgB,QAAOP,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,IAAIN,IAAI,GAAGe,KAAK,CAAC,GAAG;gBAC1D,IAAI,CAACb,MAAMsB,IAAI,CAACvB,QAAQ;oBACtB,OAAO;wBAAEO,QAAQ;wBAAKF,MAAM;4BAAEG,OAAO;wBAAoC;oBAAE;gBAC7E;gBACA,IAAIZ,SAAS,CAAC,sBAAsB2B,IAAI,CAAC3B,QAAQ;oBAC/C,OAAO;wBAAEW,QAAQ;wBAAKF,MAAM;4BAAEG,OAAO;wBAA8B;oBAAE;gBACvE;gBACA,MAAMqB,WAAW,MAAM1B,KAAK1B,cAAc,CAAC;oBACzCqD,OAAO;wBAAEjC,MAAM;wBAAUkC,KAAKrB,MAAMqB,GAAG;oBAAC;oBACxCX,OAAOV,MAAMU,KAAK;oBAClBD,QAAQT,MAAMS,MAAM;oBACpBa,UAAU;wBAAEhC;uBAAWL,OAAO;wBAAEA;oBAAK,IAAI,CAAC;oBAC1CsC,aAAa;wBAAEC,QAAQ;wBAASC,SAAS;oBAAwB;oBACjEC,SAAS;oBACTC,gBAAgB;mBACZzC,QAAQ;oBAAE0C,aAAa;wBAAE1C;oBAAM;gBAAE,IAAI,CAAC;gBAE5C,IAAI,CAACiC,UAAU;oBACb,OAAO;wBACLtB,QAAQ;wBACRF,MAAM;4BACJW,WAAW;4BACXuB,UAAU;gCAAE1C,MAAM;gCAAQC,IAAI;gCAAIH;gCAAMK;gCAAOJ,OAAOA,SAAS;4BAAK;wBACtE;oBACF;gBACF;gBACA,IAAIiC,SAASW,EAAE,KAAK,MAAM;oBACxB,OAAO;wBAAEjC,QAAQ;wBAAKF,MAAM;4BAAEG,OAAO;wBAAoC;oBAAE;gBAC7E;gBACA,MAAMV,KAAK+B,SAASY,MAAM,KAAK,YAAYZ,SAASa,SAAS,GAAGb,SAASc,MAAM;gBAC/E,OAAO;oBACLpC,QAAQ;oBACRF,MAAM;wBACJW,WAAW;wBACXuB,UAAU;4BAAE1C,MAAMgC,SAASY,MAAM;4BAAE3C;4BAAIH;4BAAMK;4BAAOJ,OAAOA,SAAS;wBAAK;wBACzEgD,SAASf,SAASe,OAAO;oBAC3B;gBACF;YACF;QAEA;YACE,OAAO;gBAAErC,QAAQ;gBAAKF,MAAM;oBAAEG,OAAO;gBAAiB;YAAE;IAC5D;AACF;AAEA,OAAO,SAASqC,yBACd1C,OAA8B7B,sBAAsB;IAEpD,OAAO,OAAO8B,KAAK0C;QACjB,IAAI;YACF,MAAMC,UAAU,MAAM7C,kBAAkBC,QAAQC;YAChD,OAAO0C,IAAIvC,MAAM,CAACwC,QAAQxC,MAAM,EAAEyC,IAAI,CAACD,QAAQ1C,IAAI;QACrD,EAAE,OAAOG,OAAO;YACdyC,QAAQzC,KAAK,CAAC,yBAAyBA;YACvC,OAAOsC,IAAIvC,MAAM,CAAC,KAAKyC,IAAI,CAAC;gBAAExC,OAAO;YAAyB;QAChE;IACF;AACF;AAEA,OAAO,MAAM0C,qBAAqBL,2BAA0B"}

package/src/lib/server/pos-display.d.ts

@@ -0,0 +1,57 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginApiHandler } from '@aglyn/aglyn/server';
+import * as CommerceModel from '../model';
+export declare function sha256(value: string): string;
+/** The one state document a register's display reads. */
+export declare function posDisplayStateId(hostId: string, registerId: string): string;
+/**
+ * The store's currency (`hosts/{hostId}/settings/store.currency`, lower
+ * case), which every figure on the customer's screen is formatted in. A
+ * store that never chose one is in the currency the register charges.
+ */
+export declare function posDisplayCurrency(hostId: string): Promise<string>;
+/**
+ * Writes the display state whole, so nothing from the last prompt lingers —
+ * a customer's typed address included. The currency is the store's, stamped
+ * here so the screen never formats a figure in one the register made up.
+ */
+export declare function writePosDisplayState(hostId: string, registerId: string, state: CommerceModel.PosDisplayState): Promise<void>;
+/** The register's display returns to the thank-you screen with no customer data. */
+export declare function resetPosDisplay(hostId: string, registerId: string): Promise<void>;
+/**
+ * Ends the customer's turn once the register has acted on their receipt
+ * choice (AGL-3608): a display still on the receipt prompt says thank you,
+ * and an answer holding a typed email address or phone number is dropped
+ * from the state either way, so no contact detail outlives the sale on the
+ * server doc a public screen reads.
+ *
+ * Conditional, in a transaction, because the receipt can be sent after the
+ * cashier has started the next sale: a display already showing the next
+ * customer's basket is left alone.
+ */
+export declare function finishPosDisplayReceipt(hostId: string, registerId: string): Promise<void>;
+/** Signs every display of a register out, and forgets its state. */
+export declare function revokePosDisplays(hostId: string, registerId: string): Promise<void>;
+/**
+ * `POST /api/commerce/pos-display`.
+ *
+ * Staff (Firebase token + the register's gate): `pairing-code`, `push`,
+ * `state`, `displays`, `revoke`.
+ * Display (display token only): `pair`, `poll`, `respond`, `forget`.
+ */
+export declare const posDisplayHandler: PluginApiHandler;